last executing test programs:

4m1.061910514s ago: executing program 1 (id=519):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRESOCT=r0, @ANYRES32, @ANYRES8, @ANYRESOCT=0x0, @ANYBLOB="7220982392"], 0x40, 0x314, &(0x7f0000000cc0)="$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")
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58)
socket$unix(0x1, 0x1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r2], 0x3c}}, 0x10)

3m59.876124772s ago: executing program 1 (id=523):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa2bb1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
listen(r3, 0x90004)
syz_emit_vhci(0x0, 0x16)

3m57.487979887s ago: executing program 1 (id=530):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10)
sendto$inet(r0, &(0x7f0000000040)="e5", 0xffffffe4, 0x241, 0x0, 0x0)

3m54.882408564s ago: executing program 1 (id=533):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000400)={0x28, 0x3, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x0)

3m53.715042901s ago: executing program 1 (id=536):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000440), 0x10)
listen(r1, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2)
writev(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)="cd", 0x1}], 0x1)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="05000000030000008400000010"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)

3m52.398868581s ago: executing program 1 (id=541):
setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x23ffffe})
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mremap(&(0x7f00009a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000fef000/0x4000)=nil)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000084c000/0x3000)=nil)
mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil)
mremap(&(0x7f0000883000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f00004ce000/0x4000)=nil)
munmap(&(0x7f0000308000/0x4000)=nil, 0x4000)
mremap(&(0x7f000076c000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000397000/0x1000)=nil)
munmap(&(0x7f0000866000/0x3000)=nil, 0x3000)
mremap(&(0x7f0000275000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f000024a000/0x1000)=nil)
madvise(&(0x7f0000678000/0x14000)=nil, 0x14000, 0x12)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)

3m37.177976934s ago: executing program 32 (id=541):
setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x23ffffe})
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mremap(&(0x7f00009a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000fef000/0x4000)=nil)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000084c000/0x3000)=nil)
mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil)
mremap(&(0x7f0000883000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f00004ce000/0x4000)=nil)
munmap(&(0x7f0000308000/0x4000)=nil, 0x4000)
mremap(&(0x7f000076c000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000397000/0x1000)=nil)
munmap(&(0x7f0000866000/0x3000)=nil, 0x3000)
mremap(&(0x7f0000275000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f000024a000/0x1000)=nil)
madvise(&(0x7f0000678000/0x14000)=nil, 0x14000, 0x12)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)

1m12.002724907s ago: executing program 0 (id=945):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x400}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0x1e84c}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m10.874078463s ago: executing program 0 (id=947):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x800, &(0x7f00000005c0)={[{@rodir}, {@numtail}, {@shortname_winnt}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '864'}}, {@fat=@codepage={'codepage', 0x3d, '865'}}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@shortname_mixed}, {@utf8no}, {@rodir}, {@uni_xlate}]}, 0x1, 0x26c, &(0x7f0000000340)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x275a, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.kill\x00', 0x26e1, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
renameat2(r1, &(0x7f0000000140)='./file1\x00', r1, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
mkdirat(r0, &(0x7f00000007c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x20040, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0)

1m9.875954978s ago: executing program 0 (id=952):
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0xa, 0x300)
socket$packet(0x11, 0xa, 0x300)
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', <r4=>0x0})
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
sendto$packet(r3, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r5=>0x0})
bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14)
syz_emit_ethernet(0x42, &(0x7f0000000b40)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "108114", 0xc, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x69, 0x100, @void}}}}}}}}, 0x0)

1m9.71598s ago: executing program 0 (id=953):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IFLA_CARRIER={0x5, 0x21, 0x8}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x80000000, 0x33d, 0x8}}]}]}, @IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c801}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_0\x00', <r3=>0x0})
write(r0, &(0x7f0000000480)="5ce4b8276f4832147f7137e672df16222c2758364453d053fbb2bd91e81e75df0e5122fa1b4fe0754adc40257eafaa4838fef39ef1c20714", 0x38)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', <r5=>0x0})
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0)
r6 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x5c, r6, 0x1, 0x70bd25, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}]}, 0x5c}, 0x1, 0xf000, 0x0, 0x3000000}, 0x10)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0)
syz_open_dev$loop(0x0, 0x8, 0x2180)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x1000, 0x0, r0, 0x1000, '\x00', r3, r7, 0x3, 0x4, 0x5}, 0x50)

1m8.957272101s ago: executing program 0 (id=956):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={<r4=>0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, &(0x7f0000000040)=0x84)

1m7.864070637s ago: executing program 0 (id=964):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000480)='mm_page_free\x00'}, 0x18)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0xfffffffc)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
clock_settime(0x3, &(0x7f00000000c0)={0x0, 0x989680})
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060006"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10)

51.94996404s ago: executing program 33 (id=964):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000480)='mm_page_free\x00'}, 0x18)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0xfffffffc)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
clock_settime(0x3, &(0x7f00000000c0)={0x0, 0x989680})
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060006"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10)

27.097646783s ago: executing program 3 (id=1069):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = timerfd_create(0x0, 0x0)
readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/33, 0x21}], 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000001c0)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x126f, &(0x7f0000001600)="$eJzs3U1rY1UcB+B/2vQtY5uq4+gMiAfdKEKcduHKTZEZEAtKtQMqCHdsqqFpU5pQiIhTV64EP4aoS3eC+AW6ceNaEES6cTkL8UqbjDNp0o522lSG59ncwznnd8+5veXCDedw9175cn1ttVlZzVoxUihEcXMsirdTpBiJ0ejYiRdu/PzL02+98+7rC4uL15ZSur7w9tzLKaWZZ35475Nvn/2xdeHGdzPfT8Tu7Pt7f8z/untp9/LeX99ErZlqzbTRaKUs3Ww0WtnNejWt1JprlZTerFezZjVNdse4275ab2xutlO2sTJd2tyqNpsp22intWo7tQqptdVO2YdZbSNVKpU0XQoexPLXt/M8j8jzsRiPPM/zqSjFhXgkpmMmyjEbj8Zj8XhcjCfiUjwZT8Xlg17nPW8AAAAAAAAAAAAAAAAAAAB4uNxn/3+hf///xHlPGQAAAAAAAAAAAAAAAAAAAB46h/f/FyN8/x8AAAAAAAAAAAAAAAAAAACG7D7f/z+0//9F+/8BAAAAAAAAAAAAAAAAAADgLEx2DkspTUasf769vL3cOXbqF1ajFvWoxtUox59xsPu/o1O+/tritavpwGy8tH6rm7+1vTzam58bK8dsYWB+rpNPvfmJKN2bn49yXBw8/vzA/GQ8/9x+/rNOvhLl+OmDaEQ9ViIK3as/yH86l9KrbyxO9eav7Pc70ugZ3xYAAAA4TZX0j/73951up4Htnabu+3nq9iwc8/vAoffzYlwpntdVc0ez/fFaVq9Xt05YGD/6POO9NVPdniceqxARWU98pvTb0v4pTzr5UyuMDnXQseP7PMA9jeL/4I95CoXfv7qnZjKGO/pI9x89q+8/P/9dKnby/EwnNj6oaeK41NHPjMIZP5MYnrs3/bxnAgAAAAAAAAAAwH8xcPXfVET0rQf8qK/mzvLw3nj/mY8e/YshXCEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA3O3AsAAAAACDM3zqNjg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4KgAA//+E38bU")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
fdatasync(r2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

23.997793979s ago: executing program 3 (id=1078):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000000), 0x4, 0x5eb, &(0x7f0000000c00)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x43}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)

21.295084098s ago: executing program 3 (id=1083):
socket$nl_route(0x10, 0x3, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$alg(0x26, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fcfc0000080011000000000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x20008005}, 0x0)

19.943544778s ago: executing program 2 (id=1089):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x40003})
r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8166, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x4, 0xc, 0x4})
r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f})
close_range(r0, 0xffffffffffffffff, 0x0)

19.895905069s ago: executing program 2 (id=1090):
openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = semget$private(0x0, 0x5, 0x0)
semctl$GETALL(r4, 0x0, 0xd, &(0x7f0000000340)=""/219)

18.233999533s ago: executing program 2 (id=1091):
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90)
socket$inet6(0xa, 0x3, 0x4)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f000049b000/0x2000)=nil, 0x2000, 0xb635773f06ebbeef, 0x8bacedea6f0fac5a, r0, 0x94bb7000)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xc, 0x3, 0x7ffc1fff}]})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x38200, 0x0)

18.233345153s ago: executing program 3 (id=1093):
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x80, &(0x7f0000000140)={[{@debug}, {@errors_remount}, {@quota}, {@errors_remount}, {@minixdf}, {@sb={'sb', 0x3d, 0x9}}]}, 0x1, 0x520, &(0x7f0000000d80)="$eJzs3U9vI2cZAPBnJnHJdlOcFRxKpZaKFu1WsPamoW3EgRYJwakSqNyXKHGiKE4cxU67jiqUig+AhBBU4sSJCxIfAAn1I6BKleCOoAIh2MKBQ2HQjMdtYtmbhPrPkvx+0ut5Zzwzz/N61+P3nZnYAVxZT0fEKxExFxHPRUS1XJ6WJY57JV/vg/tvrucliSx77W9JJOWyKGoRlXLb6+VmC73JUO3u0c5as9k4KOfrnd39ert7dHt7d22rsdXYW1lZfnH1pdUXVu+MpZ3V+Yj4xvs/+eEvvvm133z5jT/c/cut7+dZL5bP99oxfv1XZuHEsjyVg0kEm4G5sj2VWScCAMC5zJX9/C8U/f9qzBW9uYIuHQAAAFwS2cuL8WESkQEAAACX1svFPbBJWivvA1iMNK3VevfwfjYeTZutdudLm63DvY3evbJLUUk3t5uNO+W9wktRSfL55aL+8fzzA/MrEXEjIn5cvVbM19ZbzY1Zn/wAAACAK+L6wPj/n9Xe+L/wYTbj7AAAAICxWZp1AgAAAMDEjRr/J/1Kd3q5AAAAAJPh+j8AAABcat9+9dW8ZP3fv954vXu403r99kajvVPbPVyvrbcO9mtbrdZW8Z19u2ftr9lq7X8l9g7v1TuNdqfe7h7d3W0d7nXubp/6CWynHAAAAGCKbnz+nd8nEXH81WtFyT2SP8yN2MDAHS6N9CIr/2lyeQDTN+pj/kzvjzcPYPrmZ50AMDvHs04AmLXk5MyQTsHJm3dOnTP47eRyAgAAxuvm54Zf/8+HAJVZJwdM1IWu/wOXyv98/R/4v3fB6//vTioPYPoqegBw5SXJg3sCC6OeOPf1/yw7c18AAMBELRYlSWvltcDFSNNaLeKx4k/9K8nmdrNxJyI+HRG/q1Y+lc8vF1smp+8ZBgAAAAAAAAAAAAAAAAAAAAAAAABGyrIkMgAAAOBSi0j/nBTf5h9xs/rs4uD5gUeSf1WLaUS88bPXfnpvrdM5WM6X//2j5Z23y+XPz+IMBgAAADCoP07vj+MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYJw+uP/mer9MM+5fvx4RS8Piz8dCMV2ISkQ8+o8k5k9sl0TE3BjiH78VEY8Pi5/kacVSmcVg/DQirk0n/pNZlg2Nf30M8eEqeyc//rwy7P2XxtPFdPj7f74sn9To41/60fFvbsTx77FzxnjivV/VR8Z/K+KJ+eHHnxtl/GRE/GeG7XDIi/K97x4djYqf/Tzi5tDPn+RUrHpnd7/e7h7d3t5d22psNfZWVpZfXH1p9YXVO/XN7WajfBwa40dP/vo/A4v+nfUU7Y8R8ZfOaP+zeaVysjGDYcpg7927/5letTKwiyL+rWeG//s//oD4+f+JL5afA/nzN/v14179pKd++e5TQxMr42+MaP/CGe2/NWqnA577zg/+eM5VAYApaHePdtaazcbBJ6vkQ+Ez1nk7y7KxxJpU5VvlS/Kw5HPRSlrm/7DkM1hZeDjSUDm70j+zVZnRUQkAAJiEjzv9s84EAAAAAAAAAAAAAAAAAAAArq52N9JJf53YYMzj2TQVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCB/hsAAP//cMzdIQ==")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0)
ioctl$I2C_RETRIES(r0, 0x701, 0x100000000)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f00000002c0)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d80)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c03406910927c6b0b55b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831b538dfd8e012e79578e51bc5af65ff7ae735ffc8191a9bb0a83099e90f4580d760551b5b342f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c41146dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea086e95767d42b4e54861d0227dbfd2e6d28715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c62fd5d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2ef0ae4f390a8337841cef386e22cc2200000000000001ff9682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e2331d01ce99a069694124d37cef099ece729aa218f9f44ad06a223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adeb8fc500404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ffa3c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe4a3ced846891180604b6dd2499d16d7d9158ffffff069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99ff987900040000009feb121c49e07dbed4894ee7f8249dbae3428d2129ecfce1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39e00213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd9205218ee0200e2ff08644fb94c06003dc39050f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e906049fe86e09c58e273cd905deb28c13c1ed1c9cae846b03008cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f891fab9d3f2e82c5f6fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935000000009c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b4749c28eb5167e9936ed327fb237a56224e49d9ea956d1798571b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecf743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be182724d95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd0403a099f32468f1561f058960d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f281e6bad1e5aa6d901c279eb156c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b4c6936531effce7115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cd082027c641ec4355eb4acff90756d1a1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8cc3fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b402bbab76fbb9d8a917df5b2e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128ab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380b3e365f84a3e5b116ae3e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627aaefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a00000000000000000000000000000000000000faff0000bab50bc8508a9644d3e7c328b0ff22035c8073f8d5f0e3da7339fc81d4ab3ef2857ef70a81d8a1628da28c942571880e22df7cabae56d5ff5e483c4a6e9b3f9dbd7f538a80b00f97e47895b3201c5126feca0888956a7d76ef45af7d87b308117a9ea24dcda2bc42cf20942c31268a400a221d7b1622585094e9dd83c7f4acdd7f5c23d8b730bf03118261edada8b8487a3b1b7548a420cc91f12bf70bb1df3bfe7d4b92ad6fcbf401efd6eb004cf20016ad8d1dad136dd856ffca238b39482811f9c8524bf182f1956a3d044423927df28880bbd11c06407220df8e1d1d483d947d990dc1a170200a63a83ab25a0040b641959ad3e776b4bb4852fea12983dc18b7404914a6137dc4a78f1e0d331c60a9019c21698cd18753491df962f496f2395563e9c3d7b1228d0e488cf7e50a29541aa757f2e2ee9ff4433d65db0de5a123d569e39dce481156cbec584c9a32a8e3b032fa003192c891d83119bc950abac9147b47800acd9a207b5ceb7e8ed1d91c000000000000000000000000000000141258373281153fa27e586ea82650f070d8851ac9e7acb37a6479d4017b5b5af3ff4c91235df4f657d77e386a329aec4d766369c86b62b01ceb028c901d99eced99b46b43016b9f5351a45a8cb4ea110ba700000000000000883416b6eff6a793c71deb7d780c4f51d86ece127c0714144916f397d398ad2fe72b710b932c15c2369cb5d2d2f6ae420672c4a626195a891ac51825077fbc286aa3866bbf18a4a8b836ea8c90af0d5f0aff55b50bc18c27875ed2628b91224b7fa91811ccd7c1b1a92bac529df90000000000000000000000004000301b5557b674a86db8c4bfd58ff30000000000000000000000e8f1ed2ea68b0569be17bd73c0633ed4acaaef9e9f7d21998f55b71b26af7e284b1cc4685d740a9d106380dd8cb78f9d9c8cf59b155bc569ddd3098417286bec31896306410a60acadb0f3fb44d30b82986b792635155fa3d562d3aa09452cbb201b0dfed6412837bc2237acf7ca5997ee1898541f4a1c4031e240ccc80ee8fad036ce04409c4630821b8b99be5a3f72afc458f8417544014a67ae4ad31b15c8e13c9f0cdee4abefd0ed28a4a55dd992a748008822d05f13b1a8112d7f41e3bf28bcc1b0963798bed4e0db07d0574016276aa28a86eb33d20a5d58f58201edcef1253b02aac4c74427322ec24809bb059c41db9ee1c3e728c76c5ade17df0a7fc74229ea1a525ee42e8eac3675cb18d6c06748e93179c382f331dde2eea7eab2da71c2ea7086c0c71b6e3d837fdfdc1a5285c471b11eb3311a9f7459a57f7174d000000000000000000000000000000000000000000000008c6987f5d91d640fe5d83d4489b382fe3d3e49c23dcee2af69ba44ab575f354ed026cbf37acc05331084088093fa14152ee6d861dc27a69a9a563c0feb8b27fb7d4586b35a6f181793d5b73e231e7a2d1a6f564a06adc348b9a1c1017f908f99e136b04a0d"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe80, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x5a0e}, 0x2c)

18.098577465s ago: executing program 2 (id=1095):
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x446102)
write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000100)='reno\x00', 0x5)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x9, 0x3}, @func_proto, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}}, &(0x7f0000000100)=""/223, 0x3e, 0xdf, 0x1}, 0x28)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, r4, 0x1, 0x5}, 0x50)

16.486967208s ago: executing program 2 (id=1097):
r0 = socket(0x80000000000000a, 0x2, 0x0)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f00000002c0)={0x4, "421ae3543785259649154c631fb18e6a2ba2b1000000000000000000000007ee"})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f00000010c0)={0x8, "99bdb1b0c7251b0894d3f0230a74bd856e3c10db57c3f7484d9ed4190dbc00f3"})
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x6, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
socket(0x80000000000000a, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet(0x2, 0x4000000000000001, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
pipe2(&(0x7f0000000200)={0x0, <r2=>0x0}, 0x0)
r3 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x26, 0x0, 0xffffffffffffffff, 0x0, r2})
io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0)

16.210685853s ago: executing program 3 (id=1099):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10)
bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10)
r5 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r5, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4)

15.366945105s ago: executing program 3 (id=1100):
socket(0x28, 0x4, 0x6)
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r0, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000002000f000000050030000000000005002f000000000008000300", @ANYRES32=r3], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r5 = openat$cgroup_devices(r4, 0x0, 0x2, 0x0)
write$cgroup_devices(r5, &(0x7f0000000200)=ANY=[], 0xa)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
unshare(0x6a040000)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)

15.265876507s ago: executing program 2 (id=1102):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0)
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="20000000140001000000000000000000020000ff", @ANYRES32=r3, @ANYBLOB="08000200ac1414aaf90cbbf3f5c9620bcffb"], 0x20}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet(0x2, 0x3, 0x4)
setsockopt$inet_msfilter(r5, 0x0, 0x23, &(0x7f0000004b00)=ANY=[@ANYBLOB="e0000808ac1414aa"], 0x10)
r6 = socket(0x10, 0x803, 0x4)
sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0)

15.147373628s ago: executing program 4 (id=1104):
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x1014800, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYRESDEC, @ANYRES16, @ANYBLOB="0cbd5b5353912a879413ea41a5629122f6276e175b189b44b947b5ed8f34c9675196c7f420a9b4778c892a009b17763f4dbda6a421bf154a20ef7653d70337286d09a41d27fbb619ff647f585a8577dd9c318e307ee0e9c3328c5093134a7c98153b0d68aba22a65e8773fad07b59a0c5437e47d4255e1e8658b9b5a0cf45c27f88d87d58476713ea75cc39cdeb6036614e0b73cfbcd4f9243e2124d8ff5112db88857c7b69007b6ff5355f42dac04033a790725615a827b96542e64ad60984b7626cc74628d2d76b1f32df646d70aa036bc7d42fd", @ANYRESHEX=0x0, @ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="36f8c35371956e4f97a54fd2c44dba6172b1db9c34c1"], 0x1, 0xda6, &(0x7f0000003c80)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x2000)
sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)

13.873854367s ago: executing program 4 (id=1107):
openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x4)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
userfaultfd(0x80001)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0)
fcntl$setlease(r3, 0x400, 0x1)

11.545592911s ago: executing program 4 (id=1112):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000700)=ANY=[], 0x8)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

10.265048709s ago: executing program 4 (id=1113):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x24, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, '-'}]}, 0x24}}, 0x48000)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r4, @ANYBLOB="05005b"], 0x24}}, 0x0)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000900)={0x24, r10, 0x1, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x6, 0x5b, "7bfe"}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0)

10.126533412s ago: executing program 5 (id=1114):
r0 = openat$comedi(0xffffff9c, 0x0, 0x60a800, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x5)
accept$inet6(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_setup(0x22f, 0x0, 0x0, 0x0)
syz_mount_image$cramfs(&(0x7f0000000000), &(0x7f0000000180)='./file2\x00', 0x210000, &(0x7f00000006c0)=ANY=[], 0xfd, 0x146, &(0x7f00000002c0)="$eJzsj79LOnEcxl/39de30jQwsKAIGhLDPE9sa9BIErKDwqUp0IsCTVEIx2pu6A9wKIImcYjGhrLJUgj7O9yCxuLjXYXQ0v55LXfv1/PwcLe20g3iAxsmq6ViuWJUq0Z+bkvPpLZvbu/GhXcB/weNYrkiynmzf5+AffG0Q//E1I+ef0DBWMqVCuLuJyAIJMdg78CBitkdFc4vXMGIWi44D61J02m/uJjlpu2Q9JpO7H1cwoLYm/jZewNqdYf1Z+HQ9YwtYR3U6ovNxtNmp50Oh2aNMy01deUO2MgaTkAR+WukHX6JNBu9biezoWf0bkzTlmNqVFXjPf25k44fn2Nfdx/BjjK85xQbWThVoK5AY5D3HxQP0Lp414tel38EOPSBMpwo1veZSW434PgyfL9IJBKJRCKRSCQSiUTyVz4DAAD//0wAXes=")

9.188296265s ago: executing program 5 (id=1115):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r3 = accept(r0, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}]}]}, 0x30}}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r7, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0)

2.284061326s ago: executing program 4 (id=1116):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70d31000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$igmp6(0xa, 0x3, 0x3a)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r3, 0xffffffffffffffff, 0x0)

2.283719926s ago: executing program 5 (id=1117):
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0xc032, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006380)="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", 0x2000, 0x0)
connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24)
sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0)
ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0)

1.38867904s ago: executing program 4 (id=1118):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
syz_usb_connect(0x2, 0x2d, 0x0, 0x0)

1.36179s ago: executing program 5 (id=1119):
r0 = epoll_create1(0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10)
bind$tipc(r4, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10)
r5 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r5, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

1.272082291s ago: executing program 5 (id=1120):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r4=>0x0})
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000200)={0x1d, r4}, 0x10)
sendmsg$can_bcm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r4, @ANYRES64=r3, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0)
sendmsg$sock(r5, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0)

179.698227ms ago: executing program 34 (id=1100):
socket(0x28, 0x4, 0x6)
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r0, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000002000f000000050030000000000005002f000000000008000300", @ANYRES32=r3], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r5 = openat$cgroup_devices(r4, 0x0, 0x2, 0x0)
write$cgroup_devices(r5, &(0x7f0000000200)=ANY=[], 0xa)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
unshare(0x6a040000)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)

72.635019ms ago: executing program 35 (id=1102):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0)
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="20000000140001000000000000000000020000ff", @ANYRES32=r3, @ANYBLOB="08000200ac1414aaf90cbbf3f5c9620bcffb"], 0x20}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet(0x2, 0x3, 0x4)
setsockopt$inet_msfilter(r5, 0x0, 0x23, &(0x7f0000004b00)=ANY=[@ANYBLOB="e0000808ac1414aa"], 0x10)
r6 = socket(0x10, 0x803, 0x4)
sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0)

0s ago: executing program 5 (id=1123):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x3ff}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002340)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xfff2, 0xa}, {0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x4000)
dup3(r0, r1, 0x0)
sendmmsg$inet(r1, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f00000012c0)="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", 0x248}], 0x1}}], 0x1, 0x0)

kernel console output (not intermixed with test programs):

tdevsim netdevsim4 netdevsim1: renamed from eth1
[   39.289086][ T4319] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   39.332290][  T178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   39.336114][ T4319] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   39.384974][  T178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   39.388353][  T178] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   39.391163][  T178] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   39.411047][ T4305] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.417432][ T4313] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.422418][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   39.427422][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   39.441970][  T178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   39.446289][  T178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   39.449161][  T178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   39.451684][  T178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   39.462300][  T178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   39.467772][  T178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   39.470361][  T178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   39.473348][  T178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   39.477837][ T4313] 8021q: adding VLAN 0 to HW filter on device team0
[   39.480813][ T4305] 8021q: adding VLAN 0 to HW filter on device team0
[   39.486196][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   39.497945][  T178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   39.500990][  T178] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   39.504300][  T178] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.506352][  T178] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.508850][  T178] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   39.525578][  T178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   39.528086][  T178] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   39.531197][  T178] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.533404][  T178] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.547592][  T178] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   39.550473][  T178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   39.554470][  T178] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   39.556989][  T178] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.558932][  T178] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.564566][  T178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   39.567362][  T178] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   39.570201][  T178] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.572207][  T178] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.589324][ T4306] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.599137][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   39.609417][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   39.612471][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   39.635057][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   39.637982][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   39.640410][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   39.662673][  T178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   39.666293][  T178] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   39.668914][  T178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   39.671557][  T178] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   39.675908][  T178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   39.678727][  T178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   39.681276][  T178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   39.684288][  T178] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   39.687848][  T178] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   39.690447][  T178] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   39.695239][  T178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   39.698202][  T178] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   39.706288][ T4305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   39.709754][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   39.721794][ T4306] 8021q: adding VLAN 0 to HW filter on device team0
[   39.727482][  T178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   39.730256][  T178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   39.742727][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   39.746414][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   39.749165][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   39.751907][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   39.755041][   T55] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.756702][   T55] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.758970][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   39.770543][ T4313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   39.774296][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   39.780791][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   39.783735][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   39.785885][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   39.793586][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   39.796207][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   39.798839][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   39.801588][   T55] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.803686][   T55] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.818009][ T4319] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.828504][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   39.836756][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   39.847073][ T4311] 8021q: adding VLAN 0 to HW filter on device batadv0
[   39.849421][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   39.852386][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   39.855842][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   39.878141][ T4319] 8021q: adding VLAN 0 to HW filter on device team0
[   39.881531][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   39.885947][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   39.904637][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   39.907215][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   39.917232][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   39.920815][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   39.937565][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   39.940683][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   39.943868][ T4375] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.945846][ T4375] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.948210][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   39.950923][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   39.971826][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   39.975754][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   39.978773][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   39.981602][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   39.989294][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   39.992005][ T4375] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.994042][ T4375] bridge0: port 2(bridge_slave_1) entered forwarding state
[   40.001993][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   40.015658][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   40.022769][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   40.033206][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   40.036049][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   40.039406][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   40.041989][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   40.050585][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   40.055765][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   40.069477][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   40.072693][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   40.075441][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   40.079381][ T4305] 8021q: adding VLAN 0 to HW filter on device batadv0
[   40.090888][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   40.094637][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   40.097403][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   40.100603][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   40.105606][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   40.108305][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   40.116050][ T4311] device veth0_vlan entered promiscuous mode
[   40.120079][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   40.122317][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   40.135840][ T4311] device veth1_vlan entered promiscuous mode
[   40.148988][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   40.160861][ T4313] 8021q: adding VLAN 0 to HW filter on device batadv0
[   40.177515][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   40.180099][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   40.182833][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   40.202574][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   40.205655][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   40.207848][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   40.222277][  T178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   40.225165][  T178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   40.227943][  T178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   40.231890][  T178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   40.238423][ T4311] device veth0_macvtap entered promiscuous mode
[   40.244706][  T178] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   40.247278][  T178] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   40.250362][  T178] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   40.259847][ T4306] 8021q: adding VLAN 0 to HW filter on device batadv0
[   40.273147][ T4305] device veth0_vlan entered promiscuous mode
[   40.280371][ T4311] device veth1_macvtap entered promiscuous mode
[   40.289769][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   40.292369][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   40.296494][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   40.314868][ T4305] device veth1_vlan entered promiscuous mode
[   40.357685][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   40.360272][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   40.363210][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   40.365531][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   40.367769][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   40.370771][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   40.375085][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   40.377770][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   40.380441][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   40.383770][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   40.391893][ T4313] device veth0_vlan entered promiscuous mode
[   40.403622][ T4311] batman_adv: batadv0: Interface activated: batadv_slave_0
[   40.408545][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   40.411380][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   40.423260][ T4313] device veth1_vlan entered promiscuous mode
[   40.426600][ T4311] batman_adv: batadv0: Interface activated: batadv_slave_1
[   40.430739][ T4319] 8021q: adding VLAN 0 to HW filter on device batadv0
[   40.439196][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   40.441864][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   40.445989][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   40.448782][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   40.451495][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   40.459142][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   40.461760][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   40.469950][ T4306] device veth0_vlan entered promiscuous mode
[   40.485483][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   40.488144][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   40.495770][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   40.506728][ T4311] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.509185][ T4311] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.511521][ T4311] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.515148][ T4311] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.522644][ T4305] device veth0_macvtap entered promiscuous mode
[   40.541751][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   40.545607][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   40.548420][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   40.553385][ T4305] device veth1_macvtap entered promiscuous mode
[   40.556561][ T4306] device veth1_vlan entered promiscuous mode
[   40.559332][ T4313] device veth0_macvtap entered promiscuous mode
[   40.576643][ T4309] Bluetooth: hci3: command 0x041b tx timeout
[   40.576708][ T4320] Bluetooth: hci1: command 0x041b tx timeout
[   40.578273][ T4309] Bluetooth: hci0: command 0x041b tx timeout
[   40.590289][ T4313] device veth1_macvtap entered promiscuous mode
[   40.616432][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   40.619441][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.627395][ T4305] batman_adv: batadv0: Interface activated: batadv_slave_0
[   40.631891][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   40.636633][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.640343][ T4305] batman_adv: batadv0: Interface activated: batadv_slave_1
[   40.644989][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   40.647706][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   40.650312][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   40.653558][ T4309] Bluetooth: hci2: command 0x041b tx timeout
[   40.653613][ T4317] Bluetooth: hci4: command 0x041b tx timeout
[   40.658433][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   40.661118][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   40.664101][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   40.666889][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   40.669679][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   40.672564][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   40.690752][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   40.701009][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   40.709935][ T4305] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.712310][ T4305] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.715267][ T4305] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.717647][ T4305] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.739884][ T4313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   40.742799][ T4313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.746099][ T4313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   40.748922][ T4313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.752840][ T4313] batman_adv: batadv0: Interface activated: batadv_slave_0
[   40.757834][ T4313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   40.760798][ T4313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.764730][ T4313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   40.767614][ T4313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.771167][ T4313] batman_adv: batadv0: Interface activated: batadv_slave_1
[   40.780354][ T4306] device veth0_macvtap entered promiscuous mode
[   40.788191][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   40.790847][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   40.793705][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   40.796304][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   40.798958][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   40.808490][ T4306] device veth1_macvtap entered promiscuous mode
[   40.812027][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.815982][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.820587][ T4313] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.826847][ T4313] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.829361][ T4313] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.831742][ T4313] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.840196][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   40.842855][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   40.845644][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   40.848419][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   40.915722][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.918465][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.937671][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   40.940711][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.944010][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   40.946872][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.949593][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   40.952285][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.957106][ T4306] batman_adv: batadv0: Interface activated: batadv_slave_0
[   40.963490][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   40.966067][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   40.968777][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   40.972202][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   40.976906][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.979690][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   40.984256][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.986947][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   40.989726][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.993775][ T4306] batman_adv: batadv0: Interface activated: batadv_slave_1
[   41.014714][ T4319] device veth0_vlan entered promiscuous mode
[   41.017371][  T178] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   41.020215][  T178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   41.024389][  T178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   41.026967][  T178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   41.029741][  T178] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   41.032234][  T178] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   41.038603][ T4306] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   41.041008][ T4306] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   41.044257][ T4306] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   41.046701][ T4306] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   41.060831][  T178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   41.070951][  T178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   41.078228][ T4319] device veth1_vlan entered promiscuous mode
[   41.080537][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   41.086229][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   41.111576][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   41.116556][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   41.147527][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   41.150223][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   41.159596][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   41.172235][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   41.195627][ T4319] device veth0_macvtap entered promiscuous mode
[   41.200338][ T4319] device veth1_macvtap entered promiscuous mode
[   41.233531][ T4375] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   41.235759][ T4375] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   41.251198][  T178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   41.255152][  T178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   41.257678][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   41.260574][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.264286][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   41.267153][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.269838][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   41.272572][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.275963][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   41.278678][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.282828][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_0
[   41.287939][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   41.290757][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   41.294120][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   41.296881][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   41.299399][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   41.302270][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   41.307055][ T4418] batman_adv: batadv0: Adding interface: dummy0
[   41.308707][ T4418] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   41.316659][ T4418] batman_adv: batadv0: Interface activated: dummy0
[   41.322104][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   41.328724][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.331426][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   41.334684][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.337472][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   41.340169][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.342855][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   41.347849][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.352094][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_1
[   41.368811][  T178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   41.371368][  T178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   41.379652][ T4419] batadv0: mtu less than device minimum
[   41.384198][ T4419] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   41.390847][ T4419] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   41.397415][ T4419] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   41.403882][ T4419] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   41.409821][ T4419] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   41.415530][ T4419] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   41.421178][ T4419] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   41.427121][ T4419] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   41.432833][ T4419] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   41.479104][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   41.481959][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   41.485440][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   41.494358][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   41.496686][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   41.515185][ T4319] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   41.517726][ T4319] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   41.520038][ T4319] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   41.522308][ T4319] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   41.581441][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   41.601080][ T4421] af_packet: tpacket_rcv: packet too big, clamped from 4083 to 4294967272. macoff=96
[   41.690523][ T4425] loop0: detected capacity change from 0 to 64
[   43.379569][ T4320] Bluetooth: hci2: command 0x040f tx timeout
[   43.381990][ T4317] Bluetooth: hci1: command 0x040f tx timeout
[   43.390740][ T4320] Bluetooth: hci3: command 0x040f tx timeout
[   43.392831][ T4317] Bluetooth: hci4: command 0x040f tx timeout
[   43.451739][   T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   43.464273][   T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   43.580778][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   43.661284][   T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   43.667595][   T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   43.671032][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   43.874871][ T4442] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   43.955074][ T4442] device batadv_slave_0 entered promiscuous mode
[   44.064729][ T4451] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.067233][ T4451] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.210692][ T4454] loop0: detected capacity change from 0 to 64
[   44.219584][ T4454] =======================================================
[   44.219584][ T4454] WARNING: The mand mount option has been deprecated and
[   44.219584][ T4454]          and is ignored by this kernel. Remove the mand
[   44.219584][ T4454]          option from the mount to silence this warning.
[   44.219584][ T4454] =======================================================
[   44.514051][ T4457] netlink: 'syz.1.24': attribute type 4 has an invalid length.
[   45.455230][ T4309] Bluetooth: hci4: command 0x0419 tx timeout
[   45.455273][ T4317] Bluetooth: hci1: command 0x0419 tx timeout
[   45.459006][ T4320] Bluetooth: hci3: command 0x0419 tx timeout
[   45.461015][ T4317] Bluetooth: hci2: command 0x0419 tx timeout
[   45.682894][    C1] sched: RT throttling activated
[   45.693868][ T4315] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[   45.696281][ T4315] Bluetooth: hci0: Injecting HCI hardware error event
[   45.698832][ T4317] Bluetooth: hci0: hardware error 0x00
[   48.467421][ T4317] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[   48.702532][ T4503] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20'.
[   49.509260][ T4510] netlink: 24 bytes leftover after parsing attributes in process `syz.3.28'.
[   50.031835][ T4517] cgroup: Unknown subsys name 'subj_role'
[   50.736663][ T4510] netlink: 'syz.3.28': attribute type 1 has an invalid length.
[   50.945067][ T4532] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   50.963547][ T4532] device batadv_slave_0 entered promiscuous mode
[   51.717165][ T4531] Zero length message leads to an empty skb
[   53.944832][ T4557] loop0: detected capacity change from 0 to 512
[   54.033740][ T4557] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   54.037325][ T4557] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   54.101915][ T4557] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   54.117370][ T4562] loop4: detected capacity change from 0 to 64
[   54.133999][ T4557] EXT4-fs (loop0): 1 truncate cleaned up
[   54.139133][ T4557] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   54.746302][ T4572] cgroup: Unknown subsys name 'subj_role'
[   55.428101][ T4573] loop1: detected capacity change from 0 to 64
[   56.529565][ T4311] EXT4-fs (loop0): unmounting filesystem.
[   57.699026][ T4597] loop0: detected capacity change from 0 to 164
[   58.010691][ T4597] ISOFS: unable to read i-node block
[   58.013041][ T4597] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[   58.816023][ T4604] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   58.827568][ T4604] device batadv_slave_0 entered promiscuous mode
[   60.371782][ T4621] loop4: detected capacity change from 0 to 2048
[   61.273811][ T4628] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   61.384691][ T4630] tipc: Started in network mode
[   61.386077][ T4630] tipc: Node identity 4, cluster identity 4711
[   61.387765][ T4630] tipc: Node number set to 4
[   61.471589][ T4628] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[   61.480850][ T4628] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4)
[   61.507154][ T4628] Remounting filesystem read-only
[   61.539600][ T4634] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer
[   61.648759][ T4638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   61.654627][ T4638] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   61.664854][ T4638] netlink: 'syz.1.67': attribute type 10 has an invalid length.
[   61.694099][ T4638] 8021q: adding VLAN 0 to HW filter on device team0
[   61.722788][ T4638] bond0: (slave team0): Enslaving as an active interface with an up link
[   63.271931][ T4656] loop2: detected capacity change from 0 to 64
[   64.498422][ T2059] ieee802154 phy0 wpan0: encryption failed: -22
[   64.500355][ T2059] ieee802154 phy1 wpan1: encryption failed: -22
[   64.660003][ T4665] loop1: detected capacity change from 0 to 2048
[   64.714451][ T4670] syz.4.76 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   64.849732][ T4665] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   67.261414][ T4305] EXT4-fs (loop1): unmounting filesystem.
[   69.616281][ T1514] cfg80211: failed to load regulatory.db
[   69.661594][ T4724] binder: 4721:4724 tried to acquire reference to desc 0, got 1 instead
[   69.665397][ T4724] binder: 4721:4724 got transaction with invalid data ptr
[   69.667562][ T4724] binder: 4721:4724 transaction async to 4721:0 failed 5/29201/-14, size 0-24 line 3342
[   69.695369][ T1514] binder: undelivered TRANSACTION_ERROR: 29201
[   73.099070][ T4745] netlink: 'syz.1.98': attribute type 10 has an invalid length.
[   73.110697][ T4745] netlink: 40 bytes leftover after parsing attributes in process `syz.1.98'.
[   75.983146][ T4745] team0: Port device geneve0 added
[   76.213481][ T4768] loop3: detected capacity change from 0 to 4096
[   76.275169][ T4768] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[   76.480651][ T4768] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[   76.927024][ T4768] ntfs3: loop3: Failed to load $LogFile.
[   78.004049][ T4787] loop0: detected capacity change from 0 to 4096
[   78.048973][ T4787] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512)
[   78.072686][ T4787] ntfs3: loop0: Failed to load $Secure.
[   78.144796][ T4787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.110'.
[   78.211883][ T4794] binder: 4793:4794 tried to acquire reference to desc 0, got 1 instead
[   78.231441][ T4794] binder_alloc: 4793: binder_alloc_buf failed to map page at 20ffe000 in userspace
[   78.235432][ T4794] binder: cannot allocate buffer: memory allocation failed
[   78.235485][ T4794] binder: 4793:4794 transaction call to 4793:0 failed 10/29201/-12, size 0-24 line 3239
[   78.283159][   T14] binder: undelivered TRANSACTION_ERROR: 29201
[   78.534297][ T4804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.113'.
[   78.673211][ T4805] netlink: 165 bytes leftover after parsing attributes in process `syz.0.116'.
[   83.731922][ T4854] loop2: detected capacity change from 0 to 2048
[   83.797311][ T4854] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   84.722336][ T4866] netlink: 12 bytes leftover after parsing attributes in process `syz.1.134'.
[   84.776439][ T4866] 8021q: adding VLAN 0 to HW filter on device bond1
[   84.806130][ T4874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   84.815084][ T4874] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   84.818918][ T4313] EXT4-fs (loop2): unmounting filesystem.
[   84.821980][ T4872] bond1: (slave veth3): Enslaving as an active interface with an up link
[   84.836829][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[   85.081843][ T4886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   85.084709][ T4886] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   85.132037][ T4886] loop2: detected capacity change from 0 to 4096
[   85.134284][ T4889] binder: 4888:4889 tried to acquire reference to desc 0, got 1 instead
[   85.138164][ T4889] binder: 4888:4889 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   85.143076][  T112] binder: release 4888:4889 transaction 15 out, still active
[   85.146183][  T112] binder: undelivered TRANSACTION_COMPLETE
[   85.166474][ T1514] binder: release 4888:4889 transaction 15 in, still active
[   85.168552][ T1514] binder: send failed reply for transaction 15, target dead
[   85.188785][ T4890] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   85.282175][ T4894] mmap: syz.1.142 (4894) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   87.693442][ T4317] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[   87.695905][ T4317] Bluetooth: hci3: Injecting HCI hardware error event
[   87.698695][ T4315] Bluetooth: hci3: hardware error 0x00
[   87.702753][ T4916] loop1: detected capacity change from 0 to 1024
[   87.959660][ T4924] netlink: 12 bytes leftover after parsing attributes in process `syz.0.151'.
[   87.979740][ T4924] 8021q: adding VLAN 0 to HW filter on device bond1
[   88.046614][ T4924] bond1: (slave veth3): Enslaving as an active interface with an up link
[   88.050340][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[   88.053723][ T4926] ptrace attach of "./syz-executor exec"[4313] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              
[   89.853166][ T4315] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[   91.541888][ T4976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.167'.
[   91.774061][ T4315] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[   91.776989][ T4315] Bluetooth: hci4: Injecting HCI hardware error event
[   91.781019][ T4317] Bluetooth: hci4: hardware error 0x00
[   92.396836][ T4984] loop0: detected capacity change from 0 to 128
[   92.433481][ T4984] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   92.544210][ T4315] Bluetooth: hci4: unexpected event for opcode 0x0419
[   92.730864][ T4311] EXT4-fs (loop0): unmounting filesystem.
[   94.093064][ T4317] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[   94.580938][ T5028] netlink: 24 bytes leftover after parsing attributes in process `syz.4.181'.
[   94.614049][ T5034] netlink: 24 bytes leftover after parsing attributes in process `syz.2.183'.
[   94.669417][ T5028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.181'.
[   94.738962][ T5038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   94.741564][ T5038] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   94.818644][ T5038] netlink: 'syz.3.185': attribute type 10 has an invalid length.
[   94.849774][ T5038] 8021q: adding VLAN 0 to HW filter on device team0
[   94.852714][ T5038] bond0: (slave team0): Enslaving as an active interface with an up link
[   94.979939][ T5043] UBIFS error (pid: 5043): cannot open "./file0", error -22
[   95.210336][ T5041] loop1: detected capacity change from 0 to 32768
[   95.277681][ T5041] XFS (loop1): Mounting V5 Filesystem
[   95.338535][ T5041] XFS (loop1): Ending clean mount
[   95.347907][ T5041] XFS (loop1): Quotacheck needed: Please wait.
[   95.388326][ T5041] XFS (loop1): Quotacheck: Done.
[   95.658527][ T4305] XFS (loop1): Unmounting Filesystem
[   95.711952][ T5062] binder: 5061:5062 tried to acquire reference to desc 0, got 1 instead
[   95.715066][ T5062] binder: 5061:5062 got transaction with invalid fd, 536872000
[   95.717214][ T5062] binder: 5062:5061 translate fd failed
[   95.718826][ T5062] binder: 5061:5062 transaction async to 5061:0 failed 20/29201/-9, size 112-24 line 3424
[   95.744777][ T4373] binder: undelivered TRANSACTION_ERROR: 29201
[   95.888926][ T5066] netlink: 'syz.3.194': attribute type 4 has an invalid length.
[   95.945646][ T5066] netlink: 'syz.3.194': attribute type 4 has an invalid length.
[   96.091040][ T5068] loop3: detected capacity change from 0 to 1024
[   96.360656][ T5079] loop3: detected capacity change from 0 to 512
[   96.368324][ T5079] EXT4-fs: Ignoring removed mblk_io_submit option
[   96.370546][ T5079] EXT4-fs: inline encryption not supported
[   96.372304][ T5079] EXT4-fs: Ignoring removed mblk_io_submit option
[   96.379371][ T5079] EXT4-fs (loop3): Test dummy encryption mode enabled
[   96.381387][ T5079] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   96.429568][ T5079] EXT4-fs (loop3): 1 truncate cleaned up
[   96.431342][ T5079] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   96.506011][ T5079] fscrypt: AES-256-XTS using implementation "xts-aes-ce"
[   96.687631][ T5095] loop1: detected capacity change from 0 to 512
[   96.698032][ T5095] EXT4-fs: Ignoring removed mblk_io_submit option
[   96.700080][ T5095] EXT4-fs: Ignoring removed bh option
[   96.714725][ T5095] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   96.717953][ T5095] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   96.731764][ T5095] EXT4-fs (loop1): 1 truncate cleaned up
[   96.733592][ T5095] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   97.661252][ T4306] EXT4-fs (loop3): unmounting filesystem.
[   97.689833][ T5103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.216'.
[   97.692357][ T5103] netlink: 1 bytes leftover after parsing attributes in process `syz.0.216'.
[   97.767639][ T5107] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[   98.210614][ T5118] loop0: detected capacity change from 0 to 4096
[   98.231824][ T5118] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing.
[   98.241278][ T5118] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[   98.265086][ T5118] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[   98.272724][ T5118] ntfs: volume version 3.1.
[   98.460498][ T5118] netlink: 'syz.0.210': attribute type 10 has an invalid length.
[   98.462847][ T5118] netlink: 40 bytes leftover after parsing attributes in process `syz.0.210'.
[   98.476293][ T5118] device batadv0 entered promiscuous mode
[   98.480047][ T5118] bridge0: port 3(batadv0) entered blocking state
[   98.486146][ T5118] bridge0: port 3(batadv0) entered disabled state
[   98.490507][ T5118] net_ratelimit: 30 callbacks suppressed
[   98.490518][ T5118] batman_adv: batadv0: Local translation table size (156) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a
[   98.568210][ T4863] batman_adv: batadv0: IGMP Querier appeared
[   98.570081][ T4863] batman_adv: batadv0: MLD Querier appeared
[   98.721036][ T4311] ntfs: (device loop0): ntfs_put_super(): Volume has errors.  Leaving volume marked dirty.  Run chkdsk.
[   98.821276][ T5123] loop2: detected capacity change from 0 to 32768
[   98.835617][ T5123] XFS: attr2 mount option is deprecated.
[   98.935932][ T5123] XFS (loop2): Mounting V5 Filesystem
[   98.984429][ T5123] XFS (loop2): Ending clean mount
[   99.139954][ T4313] XFS (loop2): Unmounting Filesystem
[   99.589502][ T4305] EXT4-fs (loop1): unmounting filesystem.
[  100.491998][ T5225] device macvtap1 entered promiscuous mode
[  100.511416][ T5232] netlink: 'syz.4.222': attribute type 12 has an invalid length.
[  100.719758][ T5239] netlink: 'syz.1.225': attribute type 10 has an invalid length.
[  100.783219][ T5239] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.785536][ T5239] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.826701][ T5239] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.828914][ T5239] bridge0: port 2(bridge_slave_1) entered forwarding state
[  100.831391][ T5239] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.833446][ T5239] bridge0: port 1(bridge_slave_0) entered forwarding state
[  101.955888][ T5239] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  101.991047][ T5249] loop3: detected capacity change from 0 to 512
[  102.026583][ T5249] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  102.058624][ T5249] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #17: comm syz.3.227: inline data xattr refers to an external xattr inode
[  102.072657][ T5249] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.227: couldn't read orphan inode 17 (err -117)
[  102.086991][ T5249] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  102.212361][ T4306] EXT4-fs (loop3): unmounting filesystem.
[  102.230804][ T5242] netlink: 4 bytes leftover after parsing attributes in process `syz.1.225'.
[  102.235273][ T5242] device bridge_slave_1 left promiscuous mode
[  102.237067][ T5242] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.304191][ T5242] device bridge_slave_0 left promiscuous mode
[  102.306170][ T5242] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.327516][ T5254] netlink: 168 bytes leftover after parsing attributes in process `syz.2.228'.
[  102.405949][ T5242] bond0: (slave bridge0): Releasing backup interface
[  104.705517][ T5258] netlink: 188 bytes leftover after parsing attributes in process `syz.4.230'.
[  105.457913][ T5289] netlink: 'syz.3.238': attribute type 1 has an invalid length.
[  105.487957][ T5289] 8021q: adding VLAN 0 to HW filter on device bond1
[  105.651151][ T5293] bond1: (slave vlan2): making interface the new active one
[  105.686723][ T5293] bond1: (slave vlan2): Enslaving as an active interface with an up link
[  105.713509][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  108.839151][ T5326] loop3: detected capacity change from 0 to 164
[  108.979953][ T5330] loop2: detected capacity change from 0 to 512
[  109.011026][ T5333] binder: 5332:5333 tried to acquire reference to desc 0, got 1 instead
[  109.016028][ T5330] EXT4-fs: Ignoring removed mblk_io_submit option
[  109.017000][ T5333] binder: 5332:5333 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  109.017756][ T5330] EXT4-fs: inline encryption not supported
[  109.021419][ T5333] binder: 5333 RLIMIT_NICE not set
[  109.022822][ T5330] EXT4-fs: Ignoring removed mblk_io_submit option
[  109.024296][ T5333] binder: 5333 RLIMIT_NICE not set
[  109.035389][ T4373] binder: release 5332:5333 transaction 25 out, still active
[  109.037520][ T4373] binder: undelivered TRANSACTION_COMPLETE
[  109.051964][ T4373] binder: release 5332:5333 transaction 25 in, still active
[  109.054155][ T4373] binder: send failed reply for transaction 25, target dead
[  109.077973][ T5330] EXT4-fs (loop2): Test dummy encryption mode enabled
[  109.080274][ T5330] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  109.109610][ T5330] EXT4-fs (loop2): 1 truncate cleaned up
[  109.109647][ T5330] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  109.180186][ T5326] iso9660: Corrupted directory entry in block 4 of inode 1792
[  109.324603][ T5344] fuse: Bad value for 'fd'
[  110.059417][ T5354] netlink: 'syz.3.255': attribute type 5 has an invalid length.
[  110.439744][ T4313] EXT4-fs (loop2): unmounting filesystem.
[  111.454712][ T5371] tipc: Started in network mode
[  111.456102][ T5371] tipc: Node identity ac1414aa, cluster identity 4711
[  111.459950][ T5371] tipc: Enabled bearer <udp:syz2>, priority 10
[  111.469711][ T5373] netlink: 'syz.0.260': attribute type 1 has an invalid length.
[  111.491630][ T5373] 8021q: adding VLAN 0 to HW filter on device bond2
[  111.538731][ T5373] bond2: (slave vlan2): making interface the new active one
[  111.543140][ T5373] bond2: (slave vlan2): Enslaving as an active interface with an up link
[  111.546002][ T5206] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  111.554026][ T5371] tipc: Enabled bearer <eth:team0>, priority 0
[  112.847786][   T14] tipc: Node number set to 2886997162
[  115.732257][ T5400] loop3: detected capacity change from 0 to 4096
[  115.759275][ T5400] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing.
[  115.767607][ T5400] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  115.779240][ T5400] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  115.791517][ T5400] ntfs: volume version 3.1.
[  115.898570][ T5403] loop0: detected capacity change from 0 to 512
[  115.922499][ T5403] EXT4-fs: Ignoring removed mblk_io_submit option
[  115.931646][ T5403] EXT4-fs: Ignoring removed bh option
[  116.679567][ T5403] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  116.689376][ T5403] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  116.695001][ T5400] netlink: 'syz.3.271': attribute type 10 has an invalid length.
[  116.762999][ T5400] netlink: 40 bytes leftover after parsing attributes in process `syz.3.271'.
[  116.765455][ T5400] device batadv0 entered promiscuous mode
[  116.775011][ T5400] bridge0: port 3(batadv0) entered blocking state
[  116.779078][ T5403] EXT4-fs (loop0): 1 truncate cleaned up
[  116.780633][ T5403] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  116.786940][ T5400] bridge0: port 3(batadv0) entered disabled state
[  116.794494][ T5400] bridge0: port 3(batadv0) entered blocking state
[  116.796329][ T5400] bridge0: port 3(batadv0) entered forwarding state
[  117.268064][ T5198] batman_adv: batadv0: IGMP Querier appeared
[  117.269755][ T5198] batman_adv: batadv0: MLD Querier appeared
[  117.535335][ T4306] ntfs: (device loop3): ntfs_put_super(): Volume has errors.  Leaving volume marked dirty.  Run chkdsk.
[  117.608636][ T5419] netlink: 8 bytes leftover after parsing attributes in process `syz.4.275'.
[  118.448340][ T5412] loop1: detected capacity change from 0 to 32768
[  118.456334][ T5412] XFS: attr2 mount option is deprecated.
[  118.723910][ T5412] XFS (loop1): Mounting V5 Filesystem
[  118.756720][ T5412] XFS (loop1): Ending clean mount
[  119.487823][ T4305] XFS (loop1): Unmounting Filesystem
[  119.673743][ T5452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.281'.
[  119.967565][ T4311] EXT4-fs (loop0): unmounting filesystem.
[  125.023972][ T5473] netlink: 12 bytes leftover after parsing attributes in process `syz.1.289'.
[  125.026610][ T5478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.290'.
[  125.472628][ T5506] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  125.491774][ T5506] batman_adv: batadv0: Interface deactivated: dummy0
[  125.502128][ T5506] batman_adv: batadv0: Removing interface: dummy0
[  126.476253][ T2059] ieee802154 phy0 wpan0: encryption failed: -22
[  126.478120][ T2059] ieee802154 phy1 wpan1: encryption failed: -22
[  126.504110][ T5506] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready
[  126.517179][ T5506] bridge0: port 3(batadv0) entered disabled state
[  126.593621][ T5506] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  126.598661][ T5506] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  126.602277][ T5506] device bridge_slave_0 left promiscuous mode
[  126.666022][ T5506] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.718149][ T5506] device bridge_slave_1 left promiscuous mode
[  126.719960][ T5506] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.809964][ T5506] bond0: (slave bond_slave_0): Releasing backup interface
[  126.890045][ T5506] bond0: (slave bond_slave_1): Releasing backup interface
[  127.693715][ T5506] team0: Port device team_slave_0 removed
[  127.899410][ T5506] team0: Port device team_slave_1 removed
[  127.901817][ T5506] batman_adv: batadv0: Removing interface: batadv_slave_0
[  127.905015][ T5506] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  127.907173][ T5506] batman_adv: batadv0: Removing interface: batadv_slave_1
[  129.849569][ T5506] bond1: (slave veth3): Releasing backup interface
[  129.955882][ T5506] bond2: (slave vlan2): Releasing active interface
[  130.010891][ T5516] netlink: 'syz.2.301': attribute type 1 has an invalid length.
[  130.569667][ T5521] device gretap1 entered promiscuous mode
[  130.788977][ T5562] netlink: 156 bytes leftover after parsing attributes in process `syz.3.315'.
[  131.655402][ T5567] loop3: detected capacity change from 0 to 1024
[  131.657750][ T5567] ext4: Unknown parameter 'fsmagic'
[  131.681388][   T27] audit: type=1326 audit(131.630:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5554 comm="syz.0.313" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbad5aba8 code=0x7fc00000
[  133.587993][ T5590] loop0: detected capacity change from 0 to 256
[  134.913461][ T5590] FAT-fs (loop0): Directory bread(block 64) failed
[  134.915602][ T5590] FAT-fs (loop0): Directory bread(block 65) failed
[  134.917519][ T5590] FAT-fs (loop0): Directory bread(block 66) failed
[  134.919356][ T5590] FAT-fs (loop0): Directory bread(block 67) failed
[  134.921181][ T5590] FAT-fs (loop0): Directory bread(block 68) failed
[  135.087174][ T5590] FAT-fs (loop0): Directory bread(block 69) failed
[  135.089344][ T5590] FAT-fs (loop0): Directory bread(block 70) failed
[  135.091160][ T5590] FAT-fs (loop0): Directory bread(block 71) failed
[  135.093048][ T5590] FAT-fs (loop0): Directory bread(block 72) failed
[  135.094854][ T5590] FAT-fs (loop0): Directory bread(block 73) failed
[  136.510151][ T5614] process 'syz.1.328' launched './file1' with NULL argv: empty string added
[  138.598245][ T5621] bridge0: port 1(vxlan0) entered blocking state
[  138.600111][ T5621] bridge0: port 1(vxlan0) entered disabled state
[  138.602523][ T5621] device vxlan0 entered promiscuous mode
[  139.202109][ T5642] binder: 5641:5642 tried to acquire reference to desc 0, got 1 instead
[  139.234595][ T4351] binder: release 5641:5642 transaction 30 out, still active
[  139.236853][ T4351] binder: undelivered TRANSACTION_COMPLETE
[  139.883070][   T14] binder: send failed reply for transaction 30, target dead
[  142.907567][ T5673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.349'.
[  145.342358][ T5697] binder: 5694:5697 IncRefs 0 refcount change on invalid ref 0 ret -22
[  145.347835][ T5697] binder: 5694:5697 got transaction to invalid handle, 1
[  145.351907][ T5697] binder: 5697:5694 cannot find target node
[  145.353994][ T5697] binder: 5694:5697 transaction async to 0:0 failed 33/29201/-22, size 0-0 line 3054
[  145.357793][   T14] binder: undelivered TRANSACTION_ERROR: 29201
[  145.481141][ T5703] loop3: detected capacity change from 0 to 4096
[  145.646090][ T5703] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  145.659133][ T5703] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096)
[  146.964694][ T5718] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  147.920640][ T5737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.367'.
[  148.892382][ T5752] lo speed is unknown, defaulting to 1000
[  148.950737][ T5752] lo speed is unknown, defaulting to 1000
[  148.961841][ T5752] lo speed is unknown, defaulting to 1000
[  149.046350][ T1514] lo speed is unknown, defaulting to 1000
[  149.048283][ T5752] infiniband s
z1: set active
[  149.049845][ T5752] infiniband s
z1: added lo
[  149.089995][ T5752] RDS/IB: s
z1: added
[  149.101036][ T5752] smc: adding ib device s
z1 with port count 1
[  149.104442][ T5752] smc:    ib device s
z1 port 1 has pnetid 
[  149.107990][ T5689] lo speed is unknown, defaulting to 1000
[  149.125562][ T5752] lo speed is unknown, defaulting to 1000
[  150.679866][ T5752] lo speed is unknown, defaulting to 1000
[  151.486241][ T5752] lo speed is unknown, defaulting to 1000
[  151.543340][ T5752] lo speed is unknown, defaulting to 1000
[  151.606068][ T5786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.381'.
[  151.654290][ T5785] 9pnet: p9_errstr2errno: server reported unknown error 184467440737
[  151.659789][ T5786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  151.662490][ T5786] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  151.695829][ T5752] lo speed is unknown, defaulting to 1000
[  151.804440][ T5791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.383'.
[  151.961747][ T5797] netlink: 16 bytes leftover after parsing attributes in process `syz.4.386'.
[  152.316409][ T5807] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  152.323911][ T5807] CIFS mount error: No usable UNC path provided in device string!
[  152.323911][ T5807] 
[  152.326950][ T5807] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  153.093371][ T5815] netlink: 'syz.0.393': attribute type 4 has an invalid length.
[  153.200679][ T5814] syz.1.392 uses obsolete (PF_INET,SOCK_PACKET)
[  154.415577][ T5840] loop0: detected capacity change from 0 to 128
[  154.433088][ T5843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.399'.
[  154.585851][ T5840] netlink: 56 bytes leftover after parsing attributes in process `syz.0.409'.
[  154.588614][ T5840] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check.
[  155.444690][ T5832] loop2: detected capacity change from 0 to 40427
[  155.509865][ T5832] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  155.512441][ T5832] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  155.525513][ T5832] F2FS-fs (loop2): invalid crc value
[  155.547969][ T5832] F2FS-fs (loop2): Found nat_bits in checkpoint
[  155.569864][ T5859] capability: warning: `syz.3.405' uses deprecated v2 capabilities in a way that may be insecure
[  155.590862][ T5832] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  155.593401][ T5832] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  155.679112][ T5864] syz.2.398: attempt to access beyond end of device
[  155.679112][ T5864] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  155.739196][ T5865] syz.2.398: attempt to access beyond end of device
[  155.739196][ T5865] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  156.865832][ T5871] loop3: detected capacity change from 0 to 512
[  156.891920][ T5871] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  157.932043][ T5883] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  157.955146][ T5871] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  157.958686][ T5871] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.408: invalid indirect mapped block 2683928664 (level 1)
[  157.988089][ T5871] EXT4-fs (loop3): Remounting filesystem read-only
[  158.006816][ T5871] EXT4-fs (loop3): 1 truncate cleaned up
[  158.011252][ T5883] bond0: (slave team0): Releasing backup interface
[  158.020692][ T5871] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  158.062565][ T5883] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  158.064950][ T5883] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  158.177897][ T5883] bond0: (slave bond_slave_0): Releasing backup interface
[  158.306948][ T4306] EXT4-fs (loop3): unmounting filesystem.
[  158.323606][ T5883] bond0: (slave bond_slave_1): Releasing backup interface
[  158.450615][ T5883] team0: Port device team_slave_0 removed
[  158.484621][ T5883] team0: Port device team_slave_1 removed
[  158.486907][ T5883] batman_adv: batadv0: Removing interface: batadv_slave_0
[  158.492738][ T5883] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  158.500685][ T5883] batman_adv: batadv0: Removing interface: batadv_slave_1
[  158.524486][ T5883] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  158.527086][ T5883] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  158.529619][ T5883] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  158.532133][ T5883] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  158.593695][ T5883] team0: Port device geneve0 removed
[  158.598390][ T5883] bond1: (slave veth3): Releasing backup interface
[  158.743161][ T4317] Bluetooth: hci2: command 0x0406 tx timeout
[  158.823036][ T4315] Bluetooth: hci1: command 0x0406 tx timeout
[  159.552024][ T5902] netlink: 'syz.3.415': attribute type 10 has an invalid length.
[  159.774962][ T5902] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  160.174753][ T5918] loop2: detected capacity change from 0 to 16
[  160.177400][ T5918] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  161.410204][ T5933] loop1: detected capacity change from 0 to 512
[  161.443227][ T5933] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  161.459726][ T5933] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  161.462296][ T5933] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.425: invalid indirect mapped block 2683928664 (level 1)
[  161.489709][ T5933] EXT4-fs (loop1): Remounting filesystem read-only
[  161.492261][ T5933] EXT4-fs (loop1): 1 truncate cleaned up
[  161.496167][ T5933] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  161.578750][ T5935] loop3: detected capacity change from 0 to 256
[  161.598614][ T5935] exfat: Deprecated parameter 'namecase'
[  161.600956][ T5935] exfat: Deprecated parameter 'codepage'
[  161.602520][ T5935] exfat: Bad value for 'codepage'
[  161.911107][ T4305] EXT4-fs (loop1): unmounting filesystem.
[  162.609410][ T4297] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  163.743394][ T5935] loop3: detected capacity change from 0 to 1024
[  163.761417][ T5935] EXT4-fs: Ignoring removed nobh option
[  163.769677][ T5935] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  163.883042][ T5935] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal
[  164.298268][ T5969] loop1: detected capacity change from 0 to 16
[  164.307080][ T5969] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  164.603131][ T5971] capability: warning: `syz.3.435' uses 32-bit capabilities (legacy support in use)
[  165.887747][ T5985] binder: 5984:5985 tried to acquire reference to desc 0, got 1 instead
[  166.211328][ T5985] binder: 5984:5985 BC_FREE_BUFFER u0000000020ffc000 matched unreturned or currently freeing buffer
[  167.291773][ T5993] loop1: detected capacity change from 0 to 32768
[  167.930735][ T1514] binder: release 5984:5985 transaction 38 out, still active
[  167.933228][ T1514] binder: undelivered TRANSACTION_COMPLETE
[  167.936540][ T5993] Dev loop1 SGI disklabel: csum bad, label corrupted
[  167.979218][   T24] binder: send failed reply for transaction 38, target dead
[  169.122254][ T6007] netlink: 'syz.0.445': attribute type 1 has an invalid length.
[  169.315785][ T6007] 8021q: adding VLAN 0 to HW filter on device bond3
[  170.235849][ T6011] bond3: (slave vlan3): making interface the new active one
[  170.239214][ T6011] bond3: (slave vlan3): Enslaving as an active interface with an up link
[  171.180863][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready
[  171.590530][ T6040] loop0: detected capacity change from 0 to 16
[  171.600295][ T6040] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  173.577452][ T6063] binder: 6041 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero.
[  173.577486][ T6063] binder: 6041:6063 ioctl c018620c 20000000 returned -22
[  174.796248][ T6078] netlink: 4 bytes leftover after parsing attributes in process `syz.3.466'.
[  175.374087][ T6067] loop0: detected capacity change from 0 to 131072
[  175.414150][ T6067] F2FS-fs (loop0): Found nat_bits in checkpoint
[  175.442961][ T6067] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  176.435284][ T6072] bridge0: port 3(batadv0) entered blocking state
[  176.437452][ T6072] bridge0: port 3(batadv0) entered disabled state
[  176.453863][ T6072] device batadv0 entered promiscuous mode
[  176.456032][ T6072] bridge0: port 3(batadv0) entered blocking state
[  176.458551][ T6072] bridge0: port 3(batadv0) entered forwarding state
[  176.500141][ T6090] device batadv0 left promiscuous mode
[  176.502967][ T6090] bridge0: port 3(batadv0) entered disabled state
[  177.085628][ T6102] loop3: detected capacity change from 0 to 16
[  177.087986][ T6102] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  179.722726][ T6132] loop0: detected capacity change from 0 to 256
[  179.770937][ T6132] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x54fc8ddc, utbl_chksum : 0xe619d30d)
[  179.947268][ T6142] loop3: detected capacity change from 0 to 4096
[  179.973633][ T6142] ntfs: (device loop3): ntfs_attr_find(): Inode is corrupt.  Run chkdsk.
[  179.976168][ T6142] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0x1 as bad.  Run chkdsk.
[  179.993645][ T6142] ntfs: (device loop3): load_system_files(): Failed to load $MFTMirr.  Will not be able to remount read-write.  Run ntfsfix and/or chkdsk.
[  179.999347][ T6142] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  180.019151][ T6142] ntfs: (device loop3): load_system_files(): Failed to load $Volume.
[  180.021462][ T6142] ntfs: (device loop3): ntfs_fill_super(): Failed to load system files.
[  180.345667][ T4317] Bluetooth: Wrong link type (-22)
[  180.801584][ T6151] loop1: detected capacity change from 0 to 256
[  181.089974][ T6151] FAT-fs (loop1): Directory bread(block 64) failed
[  181.092082][ T6151] FAT-fs (loop1): Directory bread(block 65) failed
[  181.094501][ T6151] FAT-fs (loop1): Directory bread(block 66) failed
[  181.096440][ T6151] FAT-fs (loop1): Directory bread(block 67) failed
[  181.098886][ T6151] FAT-fs (loop1): Directory bread(block 68) failed
[  181.100803][ T6151] FAT-fs (loop1): Directory bread(block 69) failed
[  181.103022][ T6151] FAT-fs (loop1): Directory bread(block 70) failed
[  181.104935][ T6151] FAT-fs (loop1): Directory bread(block 71) failed
[  181.107223][ T6151] FAT-fs (loop1): Directory bread(block 72) failed
[  181.109198][ T6151] FAT-fs (loop1): Directory bread(block 73) failed
[  181.861345][ T6156] binder: 6154 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero.
[  181.861368][ T6156] binder: 6154:6156 ioctl c018620c 20000000 returned -22
[  184.646111][ T6201] binder: 6200:6201 tried to acquire reference to desc 0, got 1 instead
[  184.650893][ T6201] binder: 6200:6201 BC_FREE_BUFFER u0000000020ffc000 matched unreturned or currently freeing buffer
[  184.656046][ T3885] binder: release 6200:6201 transaction 43 out, still active
[  184.658037][ T3885] binder: undelivered TRANSACTION_COMPLETE
[  184.689972][ T4351] binder: send failed reply for transaction 43, target dead
[  186.793290][ T6214] netlink: 4 bytes leftover after parsing attributes in process `syz.3.506'.
[  187.538414][ T6224] ptrace attach of "./syz-executor exec"[4305] was attempted by ""[6224]
[  188.376300][ T6228] binder: 6227:6228 tried to acquire reference to desc 0, got 1 instead
[  188.395407][ T6228] binder: 6227:6228 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  188.428013][ T6228] binder: 6228 RLIMIT_NICE not set
[  188.857660][ T6228] binder: 6228 RLIMIT_NICE not set
[  189.097840][ T6234] binder: 6227:6234 got reply transaction with no transaction stack
[  189.103170][ T6234] binder: 6227:6234 transaction reply to 0:0 failed 49/29201/-71, size 0-0 line 2955
[  189.147510][ T4351] binder: release 6227:6228 transaction 48 in, still active
[  189.149541][ T4351] binder: send failed reply for transaction 48 to 6227:6228
[  189.152224][ T4351] binder: undelivered TRANSACTION_ERROR: 29201
[  189.155715][ T4351] binder: undelivered TRANSACTION_COMPLETE
[  189.164499][ T4351] binder: undelivered TRANSACTION_ERROR: 29189
[  189.189184][ T2059] ieee802154 phy0 wpan0: encryption failed: -22
[  189.191035][ T2059] ieee802154 phy1 wpan1: encryption failed: -22
[  189.385039][ T6242] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  189.441093][ T6241] binder: 6240:6241 tried to acquire reference to desc 0, got 1 instead
[  189.454289][ T6241] binder: 6240:6241 BC_FREE_BUFFER u0000000020ffc000 matched unreturned or currently freeing buffer
[  189.458264][   T14] binder: release 6240:6241 transaction 54 out, still active
[  190.039688][   T14] binder: undelivered TRANSACTION_COMPLETE
[  190.056965][ T4317] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  190.059821][ T4317] CPU: 0 PID: 4317 Comm: kworker/u5:5 Not tainted 6.1.145-syzkaller #0
[  190.062242][ T4317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  190.065046][ T4317] Workqueue: hci2 hci_rx_work
[  190.066360][ T4317] Call trace:
[  190.066771][ T6236] delete_channel: no stack
[  190.067278][ T4317]  dump_backtrace+0x1c8/0x1f4
[  190.070028][ T4317]  show_stack+0x2c/0x3c
[  190.071209][ T4317]  __dump_stack+0x30/0x40
[  190.072441][ T4317]  dump_stack_lvl+0xf8/0x160
[  190.073748][ T4317]  dump_stack+0x1c/0x5c
[  190.074849][ T4317]  sysfs_create_dir_ns+0x22c/0x24c
[  190.076223][ T4317]  kobject_add_internal+0x5a8/0xb30
[  190.077651][ T4317]  kobject_add+0x134/0x1f8
[  190.078824][ T4317]  device_add+0x3f0/0xf94
[  190.080070][ T4317]  hci_conn_add_sysfs+0xbc/0x1cc
[  190.081488][ T4317]  le_conn_complete_evt+0xa24/0xf8c
[  190.082959][ T4317]  hci_le_conn_complete_evt+0x114/0x3f8
[  190.084500][ T4317]  hci_le_meta_evt+0x2c0/0x4a4
[  190.085841][ T4317]  hci_event_packet+0x6ac/0xf08
[  190.087247][ T4317]  hci_rx_work+0x324/0xaa0
[  190.088505][ T4317]  process_one_work+0x7f4/0x13a8
[  190.089900][ T4317]  worker_thread+0x8c8/0xfbc
[  190.091198][ T4317]  kthread+0x250/0x2d8
[  190.092299][ T4317]  ret_from_fork+0x10/0x20
[  190.146652][ T4317] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  190.150397][ T4317] Bluetooth: hci2: failed to register connection device
[  190.579788][ T4845] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  190.582179][ T4845] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  190.622715][ T4351] binder: send failed reply for transaction 54, target dead
[  190.679325][ T6254] loop1: detected capacity change from 0 to 128
[  190.739561][ T6254] FAT-fs (loop1): bogus logical sector size 0
[  190.741249][ T6254] FAT-fs (loop1): Can't find a valid FAT filesystem
[  191.759537][ T6261] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  191.778688][ T6261] device syzkaller0 entered promiscuous mode
[  191.841856][ T6261] tipc: Resetting bearer <eth:syzkaller0>
[  191.878777][ T6258] tipc: Resetting bearer <eth:syzkaller0>
[  191.895054][ T6267] binder: BINDER_SET_CONTEXT_MGR already set
[  191.896971][ T6267] binder: 6263:6267 ioctl 4018620d 20000040 returned -16
[  191.933519][ T6267] binder: tried to use weak ref as strong ref
[  191.935289][ T6267] binder: 6263:6267 Acquire 1 refcount change on invalid ref 0 ret -22
[  191.938411][ T6267] binder: 6263:6267 got transaction to invalid handle, 1
[  191.940799][ T6267] binder: 6267:6263 cannot find target node
[  191.942452][ T6267] binder: 6263:6267 transaction async to 0:0 failed 57/29201/-22, size 72-24 line 3054
[  191.946368][   T22] binder: undelivered TRANSACTION_ERROR: 29201
[  191.955281][ T6258] tipc: Disabling bearer <eth:syzkaller0>
[  193.932306][ T6277] loop0: detected capacity change from 0 to 40427
[  194.010246][ T6277] F2FS-fs (loop0): Invalid segment count (1)
[  194.012044][ T6277] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  194.037592][ T6277] F2FS-fs (loop0): Unrecognized mount option "whint_mode=off" or missing value
[  194.711053][ T6281] loop3: detected capacity change from 0 to 512
[  194.756250][ T6281] EXT4-fs (loop3): 1 truncate cleaned up
[  194.758031][ T6281] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  195.920979][ T4299] I/O error, dev loop0, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  197.900007][ T6357] trusted_key: encrypted_key: insufficient parameters specified
[  198.306022][ T4306] EXT4-fs (loop3): unmounting filesystem.
[  214.423142][ T6387] mmap: syz.1.541 (6387): VmData 49278976 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[  215.962825][ T4315] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  215.967551][ T4315] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  215.971119][ T4309] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  215.975568][ T4315] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  215.978063][ T4315] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  215.981227][ T4315] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  216.036483][ T6419] loop3: detected capacity change from 0 to 4096
[  216.531734][ T6416] lo speed is unknown, defaulting to 1000
[  217.020996][ T6433] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  218.135814][ T4317] Bluetooth: hci5: command 0x0409 tx timeout
[  218.384750][ T6447] loop0: detected capacity change from 0 to 512
[  218.402673][ T6447] EXT2-fs (loop0): error: revision level too high, forcing read-only mode
[  218.406131][ T6447] EXT2-fs (loop0): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=a00a8]
[  220.184378][ T4317] Bluetooth: hci5: command 0x041b tx timeout
[  220.715934][ T6456] netlink: 40 bytes leftover after parsing attributes in process `syz.3.558'.
[  222.316173][ T4317] Bluetooth: hci5: command 0x040f tx timeout
[  223.297291][ T6484] netlink: 12 bytes leftover after parsing attributes in process `syz.2.569'.
[  223.386338][ T6493] loop3: detected capacity change from 0 to 512
[  223.427333][ T6493] EXT4-fs (loop3): orphan cleanup on readonly fs
[  223.429736][ T6493] Quota error (device loop3): v2_read_file_info: Block with free entry 2 out of range (1, 0).
[  223.442094][ T6493] EXT4-fs warning (device loop3): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  223.451503][ T6493] EXT4-fs (loop3): Cannot turn on quotas: error -117
[  223.453966][ T6493] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #13: comm syz.3.571: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  223.461621][ T6493] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.571: couldn't read orphan inode 13 (err -117)
[  223.534142][ T6493] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  223.625439][ T6484] bridge1: port 1(ip6gretap1) entered blocking state
[  223.627459][ T6484] bridge1: port 1(ip6gretap1) entered disabled state
[  223.629980][ T6484] device ip6gretap1 entered promiscuous mode
[  224.383076][ T4317] Bluetooth: hci5: command 0x0419 tx timeout
[  224.406303][ T6497] device veth5 entered promiscuous mode
[  224.408025][ T6497] bridge1: port 2(veth5) entered blocking state
[  224.431196][ T6497] bridge1: port 2(veth5) entered disabled state
[  224.503053][ T6416] chnl_net:caif_netlink_parms(): no params data found
[  225.304000][ T6493] EXT4-fs error (device loop3): ext4_lookup:1858: comm syz.3.571: inode #15: comm syz.3.571: iget: illegal inode #
[  225.577660][ T6514] loop0: detected capacity change from 0 to 256
[  226.901203][ T6514] FAT-fs (loop0): Directory bread(block 64) failed
[  226.903380][ T6514] FAT-fs (loop0): Directory bread(block 65) failed
[  226.905700][ T6514] FAT-fs (loop0): Directory bread(block 66) failed
[  226.907648][ T6514] FAT-fs (loop0): Directory bread(block 67) failed
[  226.910022][ T6514] FAT-fs (loop0): Directory bread(block 68) failed
[  226.912024][ T6514] FAT-fs (loop0): Directory bread(block 69) failed
[  226.914386][ T6514] FAT-fs (loop0): Directory bread(block 70) failed
[  226.916292][ T6514] FAT-fs (loop0): Directory bread(block 71) failed
[  226.918581][ T6514] FAT-fs (loop0): Directory bread(block 72) failed
[  226.920464][ T6514] FAT-fs (loop0): Directory bread(block 73) failed
[  228.553915][ T4306] EXT4-fs (loop3): unmounting filesystem.
[  228.624124][ T6416] bridge0: port 1(bridge_slave_0) entered blocking state
[  228.626400][ T6416] bridge0: port 1(bridge_slave_0) entered disabled state
[  228.633230][ T6416] device bridge_slave_0 entered promiscuous mode
[  228.648502][ T6416] bridge0: port 2(bridge_slave_1) entered blocking state
[  228.655774][ T6416] bridge0: port 2(bridge_slave_1) entered disabled state
[  228.668151][ T6416] device bridge_slave_1 entered promiscuous mode
[  228.729093][ T6416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  228.738823][ T6416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  228.762834][ T6416] team0: Port device team_slave_0 added
[  228.770454][ T6416] team0: Port device team_slave_1 added
[  228.807063][ T6416] batman_adv: batadv0: Adding interface: batadv_slave_0
[  228.809127][ T6416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  228.818393][ T6416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  228.827246][ T6416] batman_adv: batadv0: Adding interface: batadv_slave_1
[  228.829206][ T6416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  228.838636][ T6416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  228.960694][ T6531] loop2: detected capacity change from 0 to 4096
[  229.285341][ T6416] device hsr_slave_0 entered promiscuous mode
[  229.464508][ T6416] device hsr_slave_1 entered promiscuous mode
[  230.213362][ T6416] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  230.215510][ T6416] Cannot create hsr debugfs directory
[  232.114761][ T4534] tipc: Left network mode
[  232.177883][ T6416] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  232.274899][ T6416] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  232.341672][ T4315] Bluetooth: hci1: Malformed Event: 0x48
[  232.362573][ T6559] netlink: 'syz.4.590': attribute type 1 has an invalid length.
[  232.376919][ T6559] 8021q: adding VLAN 0 to HW filter on device bond1
[  232.508839][ T6576] loop2: detected capacity change from 0 to 256
[  232.745498][ T6576] FAT-fs (loop2): Directory bread(block 64) failed
[  232.747596][ T6576] FAT-fs (loop2): Directory bread(block 65) failed
[  232.750026][ T6576] FAT-fs (loop2): Directory bread(block 66) failed
[  232.752197][ T6576] FAT-fs (loop2): Directory bread(block 67) failed
[  232.754826][ T6576] FAT-fs (loop2): Directory bread(block 68) failed
[  232.756847][ T6576] FAT-fs (loop2): Directory bread(block 69) failed
[  232.759208][ T6576] FAT-fs (loop2): Directory bread(block 70) failed
[  232.761332][ T6576] FAT-fs (loop2): Directory bread(block 71) failed
[  232.763712][ T6576] FAT-fs (loop2): Directory bread(block 72) failed
[  232.765768][ T6576] FAT-fs (loop2): Directory bread(block 73) failed
[  233.281588][ T6570] 8021q: adding VLAN 0 to HW filter on device bond1
[  233.330345][ T6570] bond1: (slave vti0): The slave device specified does not support setting the MAC address
[  233.335868][ T6570] bond1: (slave vti0): Error -95 calling set_mac_address
[  233.362165][ T6584] loop2: detected capacity change from 0 to 512
[  233.378760][ T6416] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  233.398253][ T6584] EXT4-fs (loop2): orphan cleanup on readonly fs
[  233.401078][ T6584] Quota error (device loop2): v2_read_file_info: Block with free entry 2 out of range (1, 0).
[  233.420520][ T6584] EXT4-fs warning (device loop2): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  233.424949][ T6584] EXT4-fs (loop2): Cannot turn on quotas: error -117
[  233.427399][ T6584] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #13: comm syz.2.592: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  233.427670][ T6559] bond1: (slave gretap1): making interface the new active one
[  233.434991][ T6584] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.592: couldn't read orphan inode 13 (err -117)
[  233.440064][ T6559] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  233.442464][ T6584] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  233.732758][ T6416] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  235.408972][ T6584] EXT4-fs error (device loop2): ext4_lookup:1858: comm syz.2.592: inode #15: comm syz.2.592: iget: illegal inode #
[  235.571358][ T4313] EXT4-fs (loop2): unmounting filesystem.
[  238.195657][ T6616] netlink: 'syz.3.599': attribute type 3 has an invalid length.
[  238.198019][ T6616] netlink: 'syz.3.599': attribute type 3 has an invalid length.
[  240.134416][ T6416] 8021q: adding VLAN 0 to HW filter on device bond0
[  240.175097][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  240.177852][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  240.187815][ T6416] 8021q: adding VLAN 0 to HW filter on device team0
[  240.208853][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  240.211592][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  240.223372][ T4436] bridge0: port 1(bridge_slave_0) entered blocking state
[  240.225280][ T4436] bridge0: port 1(bridge_slave_0) entered forwarding state
[  240.250334][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  240.253800][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  240.268599][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  240.304168][ T4436] bridge0: port 2(bridge_slave_1) entered blocking state
[  240.306062][ T4436] bridge0: port 2(bridge_slave_1) entered forwarding state
[  240.308400][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  240.429920][ T6655] loop0: detected capacity change from 0 to 512
[  240.455844][ T6654] loop2: detected capacity change from 0 to 512
[  240.475238][ T6654] EXT2-fs (loop2): error: revision level too high, forcing read-only mode
[  240.477629][ T6654] EXT2-fs (loop2): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=a00a8]
[  240.481319][ T6655] EXT4-fs (loop0): orphan cleanup on readonly fs
[  240.483871][ T6655] Quota error (device loop0): v2_read_file_info: Block with free entry 2 out of range (1, 0).
[  240.486671][ T6655] EXT4-fs warning (device loop0): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  240.535875][ T6655] EXT4-fs (loop0): Cannot turn on quotas: error -117
[  240.538108][ T6655] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #13: comm syz.0.609: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  240.543285][ T6655] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.609: couldn't read orphan inode 13 (err -117)
[  240.559625][ T6655] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  240.717335][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  240.734359][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  240.737934][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  240.741285][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  240.745157][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  240.747849][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  241.025558][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  241.546697][ T6655] EXT4-fs error (device loop0): ext4_lookup:1858: comm syz.0.609: inode #15: comm syz.0.609: iget: illegal inode #
[  241.556943][ T6659] netlink: 24 bytes leftover after parsing attributes in process `syz.4.612'.
[  241.819087][ T4311] EXT4-fs (loop0): unmounting filesystem.
[  241.836337][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  241.839013][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  241.841585][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  242.634286][ T6416] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  242.887977][ T6687] block device autoloading is deprecated and will be removed.
[  243.570297][ T6681] md2: error: bitmap file must be a regular file
[  244.431519][ T6698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.619'.
[  244.539369][ T6714] loop2: detected capacity change from 0 to 16
[  244.644690][ T6714] erofs: (device loop2): mounted with root inode @ nid 36.
[  245.304644][ T6716] loop0: detected capacity change from 0 to 512
[  245.312494][ T6713] netlink: 'syz.3.624': attribute type 3 has an invalid length.
[  245.323718][ T6713] netlink: 'syz.3.624': attribute type 3 has an invalid length.
[  245.344826][ T6716] EXT2-fs (loop0): warning: mounting ext3 filesystem as ext2
[  245.378697][ T6720] netlink: 32 bytes leftover after parsing attributes in process `syz.2.626'.
[  245.695575][ T6731] loop0: detected capacity change from 0 to 512
[  245.699276][ T6731] EXT4-fs: Ignoring removed nomblk_io_submit option
[  245.701131][ T6731] EXT4-fs: Ignoring removed nomblk_io_submit option
[  246.403962][ T6720] netlink: 32 bytes leftover after parsing attributes in process `syz.2.626'.
[  246.419599][ T5206] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  246.421834][ T5206] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  246.440283][ T6416] 8021q: adding VLAN 0 to HW filter on device batadv0
[  246.449537][ T6731] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  246.669186][ T6750] block device autoloading is deprecated and will be removed.
[  246.693071][ T6742] md2: error: bitmap file must be a regular file
[  246.757713][ T4311] EXT4-fs (loop0): unmounting filesystem.
[  246.910453][ T6758] loop2: detected capacity change from 0 to 4096
[  246.934332][ T6758] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match.  Run ntfsfix or chkdsk.
[  246.938198][ T6758] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  247.770588][ T6758] ntfs: (device loop2): map_mft_record_page(): Mft record 0xa is corrupt.  Run chkdsk.
[  247.776997][ T6758] ntfs: (device loop2): map_mft_record(): Failed with error code 5.
[  247.779217][ T6758] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  247.833024][ T6758] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  247.856810][ T6758] ntfs: volume version 3.1.
[  247.858203][ T6758] ntfs: (device loop2): ntfs_read_locked_inode(): Found compressed data but compression is disabled due to cluster size (65536) > 4kiB.
[  247.886925][ T6758] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0x2 as bad.  Run chkdsk.
[  247.890532][ T6758] ntfs: (device loop2): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  249.615565][ T4534] device hsr_slave_0 left promiscuous mode
[  249.833767][ T4534] device hsr_slave_1 left promiscuous mode
[  250.340546][ T4534] device veth1_macvtap left promiscuous mode
[  250.342466][ T4534] device veth0_macvtap left promiscuous mode
[  250.355908][ T4534] device veth1_vlan left promiscuous mode
[  250.357754][ T4534] device veth0_vlan left promiscuous mode
[  253.909968][ T6841] tipc: Failed to remove unknown binding: 66,1,1/0:3767385766/3767385768
[  253.920511][ T6841] tipc: Failed to remove unknown binding: 66,1,1/0:3767385766/3767385768
[  253.923340][ T6841] tipc: Failed to remove unknown binding: 66,1,1/0:3767385766/3767385768
[  254.074114][ T2059] ieee802154 phy0 wpan0: encryption failed: -22
[  254.075887][ T2059] ieee802154 phy1 wpan1: encryption failed: -22
[  254.847679][ T6854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.660'.
[  254.860723][ T6854] netlink: 48 bytes leftover after parsing attributes in process `syz.4.660'.
[  256.071189][ T4534] bond1 (unregistering): Released all slaves
[  260.890491][ T4534] bond0 (unregistering): Released all slaves
[  261.003104][ T5220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  261.006473][ T5220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  261.022302][ T6850] netlink: 'syz.3.659': attribute type 12 has an invalid length.
[  261.024585][ T6850] netlink: 'syz.3.659': attribute type 29 has an invalid length.
[  261.026576][ T6850] netlink: 148 bytes leftover after parsing attributes in process `syz.3.659'.
[  261.057303][ T5216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  261.060756][ T5216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  261.075890][ T6416] device veth0_vlan entered promiscuous mode
[  261.081903][ T6416] device veth1_vlan entered promiscuous mode
[  261.089641][ T5216] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  261.092182][ T5216] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  261.096214][ T5216] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  261.180065][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  261.183957][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  261.187402][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  261.207565][ T6874] xt_bpf: check failed: parse error
[  261.264742][ T6416] device veth0_macvtap entered promiscuous mode
[  261.275339][ T6416] device veth1_macvtap entered promiscuous mode
[  262.069630][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  262.072585][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  262.081154][ T6416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  262.101314][ T6416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  262.207686][ T6416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  262.211162][ T6416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  262.274226][ T6416] batman_adv: batadv0: Interface activated: batadv_slave_0
[  262.280713][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  262.290853][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  262.306020][ T6416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  262.308886][ T6416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  262.311494][ T6416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  263.044697][ T6416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.047435][ T6416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  263.055662][ T6416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.063892][ T6416] batman_adv: batadv0: Interface activated: batadv_slave_1
[  263.066974][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  263.069827][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  263.075171][ T6416] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  263.077542][ T6416] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  263.101775][ T6416] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  263.113606][ T6901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.670'.
[  263.116178][ T6899] tipc: Failed to remove unknown binding: 66,1,1/0:2557937960/2557937962
[  263.117058][ T6416] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  263.188046][ T6899] tipc: Failed to remove unknown binding: 66,1,1/0:2557937960/2557937962
[  263.190851][ T6899] tipc: Failed to remove unknown binding: 66,1,1/0:2557937960/2557937962
[  264.073730][ T5210] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  264.076071][ T5210] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  264.088085][ T5206] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  264.964890][ T4863] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  264.968786][ T4863] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  264.978340][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  268.466027][ T6964] netlink: 'syz.3.683': attribute type 2 has an invalid length.
[  268.517937][ T6967] netlink: 60 bytes leftover after parsing attributes in process `syz.2.682'.
[  273.694295][ T7021] netlink: 96 bytes leftover after parsing attributes in process `syz.4.693'.
[  274.764417][ T7023] 9pnet: p9_errstr2errno: server reported unknown error 184467440737
[  276.949869][ T7060] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  276.981477][ T7060] FAT-fs (loop1): unable to read boot sector
[  277.021714][   T27] audit: type=1326 audit(276.990:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.0.707" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbad5aba8 code=0x7ffc0000
[  277.030177][   T27] audit: type=1326 audit(277.000:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.0.707" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbad5aba8 code=0x7ffc0000
[  277.062611][   T27] audit: type=1326 audit(277.020:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.0.707" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=448 compat=0 ip=0xffffbad5aba8 code=0x7ffc0000
[  277.098042][   T27] audit: type=1326 audit(277.020:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.0.707" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbad5aba8 code=0x7ffc0000
[  277.123104][   T27] audit: type=1326 audit(277.020:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.0.707" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbad5aba8 code=0x7ffc0000
[  277.133303][   T27] audit: type=1326 audit(277.030:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.0.707" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffbad590d4 code=0x7ffc0000
[  279.045522][   T27] audit: type=1326 audit(277.040:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.0.707" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=268 compat=0 ip=0xffffbad5c70c code=0x7ffc0000
[  279.055122][   T27] audit: type=1326 audit(277.040:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.0.707" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffbad5aba8 code=0x7ffc0000
[  279.060784][   T27] audit: type=1326 audit(277.040:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.0.707" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=268 compat=0 ip=0xffffbad5c70c code=0x7ffc0000
[  279.140361][ T7076] tipc: Started in network mode
[  279.141795][ T7076] tipc: Node identity ac1414aa, cluster identity 4711
[  279.154832][   T27] audit: type=1326 audit(277.040:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.0.707" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffffbad594ac code=0x7ffc0000
[  279.180822][    C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  279.194329][ T7076] tipc: Enabled bearer <udp:syz2>, priority 10
[  279.225914][ T7076] tipc: Enabled bearer <eth:team0>, priority 0
[  280.531045][ T5511] tipc: Node number set to 2886997162
[  280.627118][ T7115] syz.4.721 sent an empty control message without MSG_MORE.
[  280.650442][ T7116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.720'.
[  280.915202][ T7127] netlink: 'syz.4.723': attribute type 8 has an invalid length.
[  285.302968][ T7189] netlink: 20 bytes leftover after parsing attributes in process `syz.2.737'.
[  285.495192][ T7189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.737'.
[  287.936120][ T7207] netlink: 12 bytes leftover after parsing attributes in process `syz.4.740'.
[  287.941541][ T7207] netlink: 8 bytes leftover after parsing attributes in process `syz.4.740'.
[  288.036307][ T7207] device macvlan0 entered promiscuous mode
[  288.082616][ T7207] device batadv_slave_1 entered promiscuous mode
[  289.793290][ T7226] MPTCP: kernel_bind error, err=-98
[  292.094821][ T7246] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  292.099959][ T7246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  292.108313][ T7246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  293.634285][ T7267] loop5: detected capacity change from 0 to 128
[  294.196457][ T7261] device gtp0 entered promiscuous mode
[  294.326128][   T27] kauditd_printk_skb: 5 callbacks suppressed
[  294.326140][   T27] audit: type=1326 audit(294.300:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.3.759" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa835aba8 code=0x7ffc0000
[  294.846688][   T27] audit: type=1326 audit(294.780:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.3.759" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa835aba8 code=0x7ffc0000
[  294.858052][   T27] audit: type=1326 audit(294.780:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.3.759" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=209 compat=0 ip=0xffffa835aba8 code=0x7ffc0000
[  294.877178][   T27] audit: type=1326 audit(294.780:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.3.759" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa835aba8 code=0x7ffc0000
[  294.888695][   T27] audit: type=1326 audit(294.780:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.3.759" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa835aba8 code=0x7ffc0000
[  294.924463][   T27] audit: type=1326 audit(294.780:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.3.759" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffffa835aba8 code=0x7ffc0000
[  294.930982][   T27] audit: type=1326 audit(294.780:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.3.759" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa835aba8 code=0x7ffc0000
[  295.004384][   T27] audit: type=1326 audit(294.790:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.3.759" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa835aba8 code=0x7ffc0000
[  295.010452][   T27] audit: type=1326 audit(294.790:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.3.759" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa835aba8 code=0x7ffc0000
[  295.020031][   T27] audit: type=1326 audit(294.790:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.3.759" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa835aba8 code=0x7ffc0000
[  295.496372][ T7300] loop0: detected capacity change from 0 to 8192
[  295.511206][ T7300] FAT-fs (loop0): Unrecognized mount option "./file0" or missing value
[  295.935770][ T7313] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  297.769461][ T7352] loop5: detected capacity change from 0 to 64
[  298.446149][ T7367] netlink: 4 bytes leftover after parsing attributes in process `syz.5.781'.
[  298.750123][ T7371] loop5: detected capacity change from 0 to 32768
[  305.693139][   T27] kauditd_printk_skb: 22 callbacks suppressed
[  305.693154][   T27] audit: type=1326 audit(305.640:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7442 comm="syz.3.801" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa835aba8 code=0x7ffc0000
[  305.700600][   T27] audit: type=1326 audit(305.650:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7442 comm="syz.3.801" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffffa835aba8 code=0x7ffc0000
[  307.023326][   T27] audit: type=1326 audit(305.650:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7442 comm="syz.3.801" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa835aba8 code=0x7ffc0000
[  307.074130][   T27] audit: type=1326 audit(305.650:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7442 comm="syz.3.801" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffa83590d4 code=0x7ffc0000
[  307.079898][   T27] audit: type=1326 audit(305.650:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7442 comm="syz.3.801" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa835aba8 code=0x7ffc0000
[  307.087018][   T27] audit: type=1326 audit(305.650:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7442 comm="syz.3.801" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffa835aba8 code=0x7ffc0000
[  307.093147][   T27] audit: type=1326 audit(305.650:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7442 comm="syz.3.801" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa835aba8 code=0x7ffc0000
[  307.099103][   T27] audit: type=1326 audit(305.650:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7442 comm="syz.3.801" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=220 compat=0 ip=0xffffa835aba8 code=0x7ffc0000
[  307.105376][   T27] audit: type=1326 audit(305.660:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7442 comm="syz.3.801" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa835aba8 code=0x7ffc0000
[  307.111414][   T27] audit: type=1326 audit(306.980:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7444 comm="syz.3.801" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffa83852c8 code=0x7ffc0000
[  308.491660][ T7471] fuse: Bad value for 'fd'
[  308.581556][ T7471] netlink: 20 bytes leftover after parsing attributes in process `syz.3.807'.
[  309.191668][ T7472] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  310.190200][ T7495] loop0: detected capacity change from 0 to 512
[  310.240208][ T7495] EXT2-fs (loop0): warning: feature flags set on rev 0 fs, running e2fsck is recommended
[  310.245960][ T7495] EXT2-fs (loop0): error: couldn't mount RDWR because of unsupported optional features (1000000)
[  310.318318][ T7490] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  310.322854][ T7490] batman_adv: batadv0: Removing interface: batadv_slave_0
[  310.350848][ T7490] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  310.365212][ T7490] batman_adv: batadv0: Removing interface: batadv_slave_1
[  310.656154][ T4390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  311.430750][ T4390] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  313.305375][ T7529] netlink: 'syz.4.820': attribute type 11 has an invalid length.
[  313.476536][ T7533] vxcan1: tx drop: invalid da for name 0x0000000000000001
[  314.084366][ T7539] lo speed is unknown, defaulting to 1000
[  315.343516][ T7555] loop5: detected capacity change from 0 to 128
[  315.346029][ T7555] ext4: Unknown parameter 'nouser_xattr'
[  315.383296][ T2059] ieee802154 phy0 wpan0: encryption failed: -22
[  315.385119][ T2059] ieee802154 phy1 wpan1: encryption failed: -22
[  321.495061][ T7616] netlink: 28 bytes leftover after parsing attributes in process `syz.3.840'.
[  324.140673][ T7642] netlink: 32 bytes leftover after parsing attributes in process `syz.4.847'.
[  325.122135][ T7663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.851'.
[  325.127386][ T7663] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready
[  326.544847][ T7663] netlink: 36 bytes leftover after parsing attributes in process `syz.2.851'.
[  326.547350][ T7663] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready
[  329.440229][ T7711] netlink: 12 bytes leftover after parsing attributes in process `syz.4.862'.
[  332.254039][ T7759] bridge0: port 2(syz_tun) entered blocking state
[  332.257268][ T7759] bridge0: port 2(syz_tun) entered disabled state
[  332.260044][ T7759] device syz_tun entered promiscuous mode
[  332.526560][ T7768] xt_bpf: check failed: parse error
[  334.347777][ T7791] netlink: 'syz.2.881': attribute type 4 has an invalid length.
[  335.034883][ T7791] infiniband s
z1: set down
[  335.042228][   T14] lo speed is unknown, defaulting to 1000
[  335.063054][ T7800] netlink: 28 bytes leftover after parsing attributes in process `syz.0.884'.
[  335.067003][ T7800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.884'.
[  335.069727][ T7803] netlink: 'syz.0.884': attribute type 10 has an invalid length.
[  335.072072][ T7803] bridge0: port 3(team0) entered blocking state
[  335.113091][ T7803] bridge0: port 3(team0) entered disabled state
[  335.116783][ T7803] device team0 entered promiscuous mode
[  335.138558][ T4390] lo speed is unknown, defaulting to 1000
[  337.513767][ T7828] netlink: 76 bytes leftover after parsing attributes in process `syz.0.889'.
[  338.888823][ T7858] netlink: 28 bytes leftover after parsing attributes in process `syz.0.897'.
[  338.984575][ T7860] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  340.623326][ T4315] Bluetooth: hci5: link tx timeout
[  340.626020][ T4315] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  341.782111][ T7883] netlink: 'syz.5.902': attribute type 1 has an invalid length.
[  341.984561][ T7883] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  341.987063][ T7883] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  341.989509][ T7883] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  341.991993][ T7883] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  342.012741][ T7883] bond1: (slave geneve2): making interface the new active one
[  342.020205][ T7883] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  342.759625][ T4317] Bluetooth: hci5: command 0x0406 tx timeout
[  344.093201][ T7883] netlink: 28 bytes leftover after parsing attributes in process `syz.5.902'.
[  345.003608][ T7883] 8021q: adding VLAN 0 to HW filter on device bond1
[  345.955591][ T7912] loop5: detected capacity change from 0 to 512
[  346.009600][ T7912] EXT4-fs (loop5): orphan cleanup on readonly fs
[  346.077130][ T7912] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.909: bg 0: block 248: padding at end of block bitmap is not set
[  346.139293][ T7912] __quota_error: 22 callbacks suppressed
[  346.139317][ T7912] Quota error (device loop5): write_blk: dquota write failed
[  346.641376][ T7912] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  346.645675][ T7912] EXT4-fs error (device loop5): ext4_acquire_dquot:6814: comm syz.5.909: Failed to acquire dquot type 1
[  346.679123][ T7912] EXT4-fs (loop5): 1 truncate cleaned up
[  347.638808][ T7912] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  347.681712][ T7943] loop0: detected capacity change from 0 to 256
[  347.789480][ T7946] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended
[  349.060587][ T7912] could not allocate digest TFM handle sha1-ssse3
[  349.094588][ T7946] EXT4-fs: error -4 creating inode table initialization thread
[  350.094889][ T7946] EXT4-fs (loop5): re-mounted. Quota mode: writeback.
[  350.255824][ T7944] Quota error (device loop5): do_check_range: Getting block 1536 out of range 0-5
[  350.273165][ T7957] netlink: 4 bytes leftover after parsing attributes in process `syz.3.916'.
[  350.515117][ T6416] EXT4-fs (loop5): unmounting filesystem.
[  351.353089][ T7970] loop0: detected capacity change from 0 to 1024
[  351.370220][ T7970] EXT4-fs: Ignoring removed oldalloc option
[  351.372062][ T7970] EXT4-fs: Ignoring removed nobh option
[  351.389788][ T7970] EXT4-fs: Ignoring removed bh option
[  351.401023][ T7970] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  351.497850][ T7970] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  351.590281][ T7982] loop5: detected capacity change from 0 to 4096
[  352.962618][ T4311] EXT4-fs (loop0): unmounting filesystem.
[  353.028359][ T7989] lo speed is unknown, defaulting to 1000
[  356.690678][ T8030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  356.699476][ T8030] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  358.200983][   T27] audit: type=1326 audit(614.163:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8045 comm="syz.5.938" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef5aba8 code=0x7ffc0000
[  358.214483][   T27] audit: type=1326 audit(614.183:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8045 comm="syz.5.938" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffffaef5aba8 code=0x7ffc0000
[  358.237204][   T27] audit: type=1326 audit(614.203:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8045 comm="syz.5.938" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef5aba8 code=0x7ffc0000
[  358.364021][   T27] audit: type=1326 audit(614.203:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8045 comm="syz.5.938" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=434 compat=0 ip=0xffffaef5aba8 code=0x7ffc0000
[  358.451182][   T27] audit: type=1326 audit(614.203:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8045 comm="syz.5.938" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef5aba8 code=0x7ffc0000
[  359.201862][   T27] audit: type=1326 audit(614.203:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8045 comm="syz.5.938" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=268 compat=0 ip=0xffffaef5aba8 code=0x7ffc0000
[  359.235327][   T27] audit: type=1326 audit(614.203:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8045 comm="syz.5.938" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef5aba8 code=0x7ffc0000
[  359.241303][   T27] audit: type=1326 audit(614.203:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8045 comm="syz.5.938" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=39 compat=0 ip=0xffffaef5aba8 code=0x7ffc0000
[  359.253805][   T27] audit: type=1326 audit(614.273:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8045 comm="syz.5.938" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef5aba8 code=0x7ffc0000
[  359.259916][   T27] audit: type=1326 audit(614.273:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8045 comm="syz.5.938" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef5aba8 code=0x7ffc0000
[  360.806753][ T8073] loop0: detected capacity change from 0 to 256
[  361.699278][ T8081] netlink: 12 bytes leftover after parsing attributes in process `syz.3.949'.
[  361.919784][ T8088] HTB: quantum of class 800C0010 is big. Consider r2q change.
[  361.934782][ T8093] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  362.665735][ T8098] fuse: Bad value for 'fd'
[  365.542540][ T8125] tipc: Resetting bearer <eth:team0>
[  365.647997][   T27] kauditd_printk_skb: 1 callbacks suppressed
[  365.648009][   T27] audit: type=1326 audit(621.613:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8144 comm="syz.4.970" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa455aba8 code=0x0
[  365.690072][ T8148] xt_hashlimit: overflow, try lower: 18446744073709551615/255
[  373.479195][ T8219] set match dimension is over the limit!
[  377.396284][ T2059] ieee802154 phy0 wpan0: encryption failed: -22
[  377.398224][ T2059] ieee802154 phy1 wpan1: encryption failed: -22
[  377.471301][ T8125] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  377.479973][ T8125] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  377.483539][ T8125] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  377.503156][ T8125] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  377.767763][ T8266] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1002'.
[  377.802405][ T8266] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1002'.
[  380.677502][ T4315] Bluetooth: hci5: link tx timeout
[  380.678930][ T4315] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  380.840174][ T4317] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  380.857259][ T4317] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  380.860234][ T4317] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  380.873706][ T4317] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  380.878609][ T4317] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  381.295403][ T4317] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  381.811017][ T8294] Illegal XDP return value 3831030690 on prog  (id 111) dev syz_tun, expect packet loss!
[  383.714819][ T4315] Bluetooth: hci0: command 0x0409 tx timeout
[  383.784968][ T8125] device syz_tun left promiscuous mode
[  383.786666][ T8125] bridge0: port 2(syz_tun) entered disabled state
[  383.963195][ T8293] lo speed is unknown, defaulting to 1000
[  384.678940][ T8327] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1016'.
[  384.737792][ T8331] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  384.740227][ T8331] IPv6: NLM_F_CREATE should be set when creating new route
[  385.773154][ T4315] Bluetooth: hci0: command 0x041b tx timeout
[  387.801066][ T8293] chnl_net:caif_netlink_parms(): no params data found
[  387.853120][ T4317] Bluetooth: hci0: command 0x040f tx timeout
[  388.109964][ T8293] bridge0: port 1(bridge_slave_0) entered blocking state
[  388.127879][ T8293] bridge0: port 1(bridge_slave_0) entered disabled state
[  388.130564][ T8293] device bridge_slave_0 entered promiscuous mode
[  388.170302][ T8293] bridge0: port 2(bridge_slave_1) entered blocking state
[  388.173439][ T8293] bridge0: port 2(bridge_slave_1) entered disabled state
[  388.176427][ T8293] device bridge_slave_1 entered promiscuous mode
[  388.237612][ T8293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  388.260980][ T4612] tipc: Disabling bearer <udp:syz2>
[  388.267887][ T4612] tipc: Disabling bearer <eth:team0>
[  388.269878][ T4612] tipc: Left network mode
[  388.286048][ T8293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  388.360295][ T8293] team0: Port device team_slave_0 added
[  388.425539][ T8293] team0: Port device team_slave_1 added
[  389.149257][ T8293] batman_adv: batadv0: Adding interface: batadv_slave_0
[  389.151212][ T8293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  389.172282][ T8293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  390.350845][ T4315] Bluetooth: hci0: command 0x0419 tx timeout
[  391.582956][ T8293] batman_adv: batadv0: Adding interface: batadv_slave_1
[  391.585280][ T8293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  393.002061][ T8293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  393.016186][ T8400] IPv6: sit1: Disabled Multicast RS
[  396.084264][ T8293] device hsr_slave_0 entered promiscuous mode
[  396.123374][ T8293] device hsr_slave_1 entered promiscuous mode
[  396.213005][ T8293] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  396.251731][ T8293] Cannot create hsr debugfs directory
[  396.311780][ T8441] netlink: 'syz.5.1041': attribute type 1 has an invalid length.
[  397.904345][ T8473] netlink: 'syz.2.1049': attribute type 10 has an invalid length.
[  397.912380][ T8473] bridge0: port 2(bridge_slave_1) entered disabled state
[  397.919616][ T8473] device bridge_slave_1 left promiscuous mode
[  397.921490][ T8473] bridge0: port 2(bridge_slave_1) entered disabled state
[  398.139042][ T8473] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  398.220820][ T8494] xt_CT: You must specify a L4 protocol and not use inversions on it
[  398.227907][ T8484] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  398.329957][ T8496] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1054'.
[  404.572021][ T8293] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  406.262401][ T8293] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  406.294766][ T8293] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  407.393628][ T8585] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1072'.
[  407.400848][ T8585] bridge0: port 2(bridge_slave_1) entered disabled state
[  407.403206][ T8585] bridge0: port 1(bridge_slave_0) entered disabled state
[  407.577965][ T8293] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  411.874376][ T8293] 8021q: adding VLAN 0 to HW filter on device bond0
[  411.894078][ T8293] 8021q: adding VLAN 0 to HW filter on device team0
[  413.308632][   T27] audit: type=1326 audit(2000000043.220:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8662 comm="syz.2.1091" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbd5aba8 code=0x7ffc0000
[  413.315705][   T27] audit: type=1326 audit(2000000043.220:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8662 comm="syz.2.1091" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbd5aba8 code=0x7ffc0000
[  413.355733][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  413.359350][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  413.362399][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  413.365886][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  413.368558][   T39] bridge0: port 1(bridge_slave_0) entered blocking state
[  413.370509][   T39] bridge0: port 1(bridge_slave_0) entered forwarding state
[  413.373054][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  413.375842][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  413.378434][   T39] bridge0: port 2(bridge_slave_1) entered blocking state
[  413.380381][   T39] bridge0: port 2(bridge_slave_1) entered forwarding state
[  413.397462][   T27] audit: type=1326 audit(2000000043.240:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8662 comm="syz.2.1091" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffbbd5aba8 code=0x7ffc0000
[  413.469929][   T27] audit: type=1326 audit(2000000043.240:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8662 comm="syz.2.1091" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbd5aba8 code=0x7ffc0000
[  413.491131][   T27] audit: type=1326 audit(2000000043.240:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8662 comm="syz.2.1091" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbd5aba8 code=0x7ffc0000
[  413.556139][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  413.563920][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  413.566894][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  413.584135][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  414.622528][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  415.145061][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  415.155240][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  415.179828][ T8293] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  415.182621][ T8293] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  415.549304][ T8687] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1096'.
[  415.552607][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  415.558190][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  415.566371][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  415.572552][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  415.841841][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  415.996330][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  416.285086][ T8687] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1096'.
[  416.306465][ T4612] device hsr_slave_0 left promiscuous mode
[  416.324112][ T4612] device hsr_slave_1 left promiscuous mode
[  416.463300][ T4612] device team0 left promiscuous mode
[  416.467014][ T4612] bridge0: port 3(team0) entered disabled state
[  416.849350][ T4612] device vxlan0 left promiscuous mode
[  416.852022][ T4612] bridge0: port 1(vxlan0) entered disabled state
[  417.328167][ T4612] bond3 (unregistering): (slave vlan3): Releasing active interface
[  421.647559][ T4612] bond3 (unregistering): Released all slaves
[  422.855824][ T4612] bond2 (unregistering): Released all slaves
[  423.667066][ T4612] bond1 (unregistering): Released all slaves
[  427.613078][ T4315] Bluetooth: hci5: command 0x0406 tx timeout
[  428.948072][ T4612] bond0 (unregistering): Released all slaves
[  429.181882][ T8293] 8021q: adding VLAN 0 to HW filter on device batadv0
[  429.188486][ T8719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1102'.
[  429.266620][ T8723] lo speed is unknown, defaulting to 1000
[  429.285423][ T8727] netlink: 'syz.3.1100': attribute type 10 has an invalid length.
[  429.287698][ T8727] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1100'.
[  429.323050][ T8727] batman_adv: batadv0: Adding interface: virt_wifi0
[  429.324976][ T8727] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560.
[  429.330466][ T8727] batman_adv: batadv0: Interface activated: virt_wifi0
[  429.484447][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  429.486890][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  429.491365][ T8735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1102'.
[  431.671855][ T8812] Unable to handle kernel paging request at virtual address dfff80000000000b
[  431.674683][ T8812] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f]
[  431.677013][ T8812] Mem abort info:
[  431.678083][ T8812]   ESR = 0x0000000096000006
[  431.679353][ T8812]   EC = 0x25: DABT (current EL), IL = 32 bits
[  431.681123][ T8812]   SET = 0, FnV = 0
[  431.682232][ T8812]   EA = 0, S1PTW = 0
[  431.683470][ T8812]   FSC = 0x06: level 2 translation fault
[  431.685141][ T8812] Data abort info:
[  431.686248][ T8812]   ISV = 0, ISS = 0x00000006
[  431.687563][ T8812]   CM = 0, WnR = 0
[  431.688618][ T8812] [dfff80000000000b] address between user and kernel address ranges
[  431.691116][ T8812] Internal error: Oops: 0000000096000006 [#1] PREEMPT SMP
[  431.693063][ T8812] Modules linked in:
[  431.694145][ T8812] CPU: 0 PID: 8812 Comm: syz.5.1123 Not tainted 6.1.145-syzkaller #0
[  431.696553][ T8812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  431.699511][ T8812] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[  431.701738][ T8812] pc : __list_del_entry_valid+0x28/0x158
[  431.703393][ T8812] lr : drr_qlen_notify+0x38/0x108
[  431.704902][ T8812] sp : ffff800020c36ce0
[  431.706146][ T8812] x29: ffff800020c36ce0 x28: 1ffff0000273ec30 x27: dfff800000000000
[  431.708511][ T8812] x26: 0000000000000000 x25: ffff8000139f6188 x24: ffff8000139f6180
[  431.710944][ T8812] x23: dfff800000000000 x22: dfff800000000000 x21: ffff0000f41e9000
[  431.713207][ T8812] x20: 0000000000000000 x19: 0000000000000050 x18: 0000000000000000
[  431.715595][ T8812] x17: ffff8000181e6000 x16: ffff8000082d0f50 x15: 0000000000000002
[  431.717875][ T8812] x14: 00000000ffffffff x13: 0000000000ff0100 x12: 0000000000080000
[  431.720180][ T8812] x11: 0000000000001190 x10: ffff8000330ad000 x9 : ffff80000ff7b4e0
[  431.722564][ T8812] x8 : 000000000000000b x7 : ffff80000febbedc x6 : 0000000000000000
[  431.724963][ T8812] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000002
[  431.727309][ T8812] x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000058
[  431.729642][ T8812] Call trace:
[  431.730546][ T8812]  __list_del_entry_valid+0x28/0x158
[  431.731990][ T8812]  drr_qlen_notify+0x38/0x108
[  431.733363][ T8812]  qdisc_tree_reduce_backlog+0x250/0x410
[  431.734994][ T8812]  fq_codel_change+0x870/0xbdc
[  431.736448][ T8812]  fq_codel_init+0x284/0x7b8
[  431.737825][ T8812]  qdisc_create+0x6f0/0xe20
[  431.739112][ T8812]  tc_modify_qdisc+0x954/0x1718
[  431.740523][ T8812]  rtnetlink_rcv_msg+0x734/0xce4
[  431.741998][ T8812]  netlink_rcv_skb+0x208/0x3c4
[  431.743402][ T8812]  rtnetlink_rcv+0x28/0x38
[  431.744700][ T8812]  netlink_unicast+0x600/0x818
[  431.746021][ T8812]  netlink_sendmsg+0x6e8/0x9b0
[  431.747412][ T8812]  ____sys_sendmsg+0x5b8/0x918
[  431.748828][ T8812]  __sys_sendmsg+0x25c/0x320
[  431.750153][ T8812]  __arm64_sys_sendmsg+0x80/0x94
[  431.751595][ T8812]  invoke_syscall+0x98/0x2bc
[  431.752887][ T8812]  el0_svc_common+0x138/0x258
[  431.754170][ T8812]  do_el0_svc+0x58/0x13c
[  431.755414][ T8812]  el0_svc+0x58/0x138
[  431.756624][ T8812]  el0t_64_sync_handler+0x84/0xf0
[  431.758033][ T8812]  el0t_64_sync+0x18c/0x190
[  431.759348][ T8812] Code: 91002000 d2d00016 d343fc08 f2fbfff6 (38766908) 
[  431.761383][ T8812] ---[ end trace 0000000000000000 ]---
[  431.841868][ T4309] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  431.844074][ T4309] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  431.846242][ T4309] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  431.848644][ T4309] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  431.850946][ T4309] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  431.853208][ T4309] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  432.011528][ T8817] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  432.013708][ T8817] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  432.015891][ T8817] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  432.018471][ T8817] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  432.020818][ T8817] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  432.023379][ T8817] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  432.300605][ T8812] Kernel panic - not syncing: Oops: Fatal exception in interrupt
[  432.302933][ T8812] SMP: stopping secondary CPUs
[  432.304275][ T8812] Kernel Offset: disabled
[  432.305383][ T8812] CPU features: 0x080000,02070084,26017203
[  432.306986][ T8812] Memory Limit: none
[  432.833556][ T8812] Rebooting in 86400 seconds..