last executing test programs:

2m4.351176889s ago: executing program 2 (id=505):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xa1641000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = io_uring_setup(0x6ddd, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x17c})
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r3, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20)
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r3, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0xffffffff00000000}], &(0x7f0000000100), 0x7}, 0x20)

2m0.913363885s ago: executing program 2 (id=512):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000340)={{0xffffffff, 0x0, 0x0, 0xfffffffc, 'syz0\x00'}, 0x2, 0x2, 0x5, 0x0, 0x0, 0xff, 'syz0\x00', 0x0})
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = syz_open_dev$video(&(0x7f0000000040), 0x80000001, 0x2000)
ioctl$VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000400)={0xa, 0x3631564e, 0x3, @discrete={0x0, 0xfffff0a8}})
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)={[&(0x7f0000000100)='kfree\x00', &(0x7f00000002c0)='^\x00', &(0x7f0000000300)=',\'\x00']}, &(0x7f00000003c0)={[&(0x7f0000000380)='kfree\x00']})

1m48.406267716s ago: executing program 2 (id=541):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, 0x0)
r2 = openat(0xffffffffffffff9c, 0x0, 0x143441, 0x98)
pwritev2(r2, 0x0, 0x0, 0xe7b, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x10001)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000049c0)=ANY=[@ANYBLOB="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"/2702], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xbf, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f088a847e0ffff00124000632f77fbac141416e000030a94029f034d2f87e589ca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9", 0x0, 0xfe, 0x60000000}, 0x50)

1m48.360586336s ago: executing program 2 (id=543):
syz_open_dev$video(0x0, 0x7, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0xfffd, 0x4}, 0x8)

1m47.199384145s ago: executing program 2 (id=546):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
socket$netlink(0x10, 0x3, 0xf)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket(0x1e, 0x4, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
connect$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
sendmmsg$unix(r3, &(0x7f0000004400), 0x400000000000203, 0x0)

1m45.379580682s ago: executing program 2 (id=549):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xa1641000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = io_uring_setup(0x6ddd, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x17c})
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r3, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20)
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r3, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0xffffffff00000000}], &(0x7f0000000100), 0x7}, 0x20)

1m29.611025749s ago: executing program 32 (id=549):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xa1641000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = io_uring_setup(0x6ddd, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x17c})
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r3, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20)
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r3, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0xffffffff00000000}], &(0x7f0000000100), 0x7}, 0x20)

1m5.416867634s ago: executing program 5 (id=582):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xa1641000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = io_uring_setup(0x6ddd, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x17c})
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r3, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20)
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r3, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0xffffffff00000000}], &(0x7f0000000100), 0x7}, 0x20)

1m4.272467242s ago: executing program 5 (id=651):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = socket$inet6(0x10, 0x2, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x4, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140), 0x4)
sendto$inet6(r0, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd80000", 0x4b, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0x25, &(0x7f00000000c0)='illinois\x00', 0x9)

52.797027856s ago: executing program 5 (id=678):
syz_open_dev$usbfs(0x0, 0x76, 0x101301)
openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r1 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0x2b}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x9}, {0x0, 0x3, 0x0, 0x5}, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@empty, 0x0, 0x33}, 0xa, @in=@loopback, 0x3500, 0x3, 0x1, 0x7}}, 0xe8)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
open(0x0, 0x40080, 0x100)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
lremovexattr(0x0, 0x0)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000500000003"], 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0)

51.703354854s ago: executing program 5 (id=682):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, 0x0)
r2 = openat(0xffffffffffffff9c, 0x0, 0x143441, 0x98)
pwritev2(r2, 0x0, 0x0, 0xe7b, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x10001)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000049c0)=ANY=[@ANYBLOB="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"/2702], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xfb, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x50)

45.542911165s ago: executing program 5 (id=684):
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$netlink(0x10, 0x3, 0x10)
socket$key(0xf, 0x3, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
socket$netlink(0x10, 0x3, 0x8)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000", @ANYRES8=r0], 0x3c}}, 0x10)

45.390089255s ago: executing program 5 (id=688):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = socket$inet6(0x10, 0x2, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x4, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140), 0x4)
sendto$inet6(r0, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd80000", 0x4b, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0x25, &(0x7f00000000c0)='illinois\x00', 0x9)

30.139383603s ago: executing program 33 (id=688):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = socket$inet6(0x10, 0x2, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x4, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140), 0x4)
sendto$inet6(r0, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd80000", 0x4b, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0x25, &(0x7f00000000c0)='illinois\x00', 0x9)

30.068599453s ago: executing program 4 (id=716):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000340)={{0xffffffff, 0x0, 0x0, 0xfffffffc, 'syz0\x00'}, 0x2, 0x2, 0x5, 0x0, 0x0, 0xff, 'syz0\x00', 0x0})
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000400)={0xa, 0x3631564e, 0x3, @discrete={0x0, 0xfffff0a8}})
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)={[&(0x7f0000000100)='kfree\x00', &(0x7f00000002c0)='^\x00', &(0x7f0000000300)=',\'\x00']}, &(0x7f00000003c0)={[&(0x7f0000000380)='kfree\x00']})

24.000157594s ago: executing program 4 (id=731):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', <r2=>0x0})
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r5=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, 0x0, 0x0)
bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10)
bind$xdp(r1, &(0x7f0000000340)={0x2c, 0x1, r2, 0x0, r3}, 0x10)

22.946774193s ago: executing program 4 (id=734):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x400000000000000)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket(0x2, 0x80805, 0x0)
r4 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000380)=""/17, 0x11, 0xc990, 0x3, 0x7f, 0x0, 0xc07}}, 0x11c)
write$UHID_DESTROY(r4, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x83, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x3d71, 0x3}}, 0x44)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
unshare(0x44000400)

21.720972211s ago: executing program 4 (id=738):
syz_open_dev$video(0x0, 0x7, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0xfffd, 0x4}, 0x8)

20.79316209s ago: executing program 4 (id=740):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x400000000000000)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket(0x2, 0x80805, 0x0)
r4 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000380)=""/17, 0x11, 0xc990, 0x3, 0x7f, 0x0, 0xc07}}, 0x11c)
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x83, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x3d71, 0x3}}, 0x44)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = fsopen(0x0, 0x0)
fsmount(r5, 0x0, 0x2)
unshare(0x44000400)

19.218388578s ago: executing program 4 (id=742):
unshare(0x44000400)

11.090068436s ago: executing program 3 (id=756):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000340)={{0xffffffff, 0x0, 0x0, 0xfffffffc, 'syz0\x00'}, 0x2, 0x2, 0x5, 0x0, 0x0, 0xff, 'syz0\x00', 0x0})
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000400)={0xa, 0x3631564e, 0x3, @discrete={0x0, 0xfffff0a8}})
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)={[&(0x7f0000000100)='kfree\x00', &(0x7f00000002c0)='^\x00', &(0x7f0000000300)=',\'\x00']}, &(0x7f00000003c0)={[&(0x7f0000000380)='kfree\x00']})

10.014439015s ago: executing program 3 (id=759):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b00"/12], 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x20000, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x0)
r5 = userfaultfd(0x801)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4})
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000380)={0x10000}, 0x8)

8.294416322s ago: executing program 3 (id=761):
syz_open_dev$video(0x0, 0x7, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0xfffd, 0x4}, 0x8)

6.9063831s ago: executing program 3 (id=764):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b00"/12], 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x20000, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x0)
r4 = userfaultfd(0x801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4})
ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000380)={0x10000}, 0x8)

5.661493348s ago: executing program 6 (id=713):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, 0x0)
r2 = openat(0xffffffffffffff9c, 0x0, 0x143441, 0x98)
pwritev2(r2, &(0x7f00000001c0), 0x0, 0xe7b, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x10001)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000049c0)=ANY=[@ANYBLOB="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"/2702], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xef, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f088a847e0ffff00124000632f77fbac141416e000030a94029f034d2f87e589ca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6e", 0x0, 0xfe, 0x60000000}, 0x50)

5.131957477s ago: executing program 3 (id=768):
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000000)='./file1\x00', 0x98020, &(0x7f0000000040)=ANY=[], 0x1, 0x2c3, &(0x7f0000000740)="$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")
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f00000000c0))

4.738766097s ago: executing program 6 (id=769):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
shutdown(r1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r4=>0x0})
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r5=>0x0})
bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4048081)
setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, 0x0, 0x0)
sendmsg$nl_route_sched(r2, 0x0, 0x850)
setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000140)=0x9, 0x4)
sendto$inet6(r0, &(0x7f0000000040)='H', 0xffe0, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x9, @loopback}, 0x1c)

4.427542096s ago: executing program 6 (id=771):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x26, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x4, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x303}, "4eff51afaef09474", "d373a417660000000000000021000008", "e8b29a2c", "662e229672253891"}, 0x28)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)

4.409326206s ago: executing program 0 (id=772):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x26, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x4, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)

3.721012265s ago: executing program 1 (id=773):
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$key(0xf, 0x3, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502"], 0x3c}}, 0x10)

3.472349625s ago: executing program 34 (id=742):
unshare(0x44000400)

3.439806285s ago: executing program 0 (id=775):
syz_open_dev$video(0x0, 0x7, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0xfffd, 0x4}, 0x8)

2.569135754s ago: executing program 0 (id=776):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r2=>0x0})
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000))
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000000c0)={<r4=>r0, 0x4b7, 0x9, 0x31})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000280)={'syztnl2\x00', r2, 0x2f, 0x6f, 0x13, 0x5, 0x5d, @remote, @mcast1, 0x700, 0x80, 0x6}})
ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000140)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x8, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @bcast]})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@ipv4_newroute={0x28, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_METRICS={0x4}, @RTA_NH_ID={0x8, 0x1e, 0x3}]}, 0x28}}, 0x0)
r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r7, 0x0, 0x7, &(0x7f0000000000)=0x714, 0x4)
syz_emit_ethernet(0x52, &(0x7f0000000100)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0x1c, 0xe, 0x1, 0x0, [{@dev}, {@multicast2}, {@local}]}]}}, @timestamp}}}}, 0x0)
readv(r7, &(0x7f00000007c0)=[{&(0x7f0000000080)=""/92, 0x5c}], 0x1)
r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r8, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c)
syz_init_net_socket$ax25(0x3, 0x2, 0xce)
connect$rose(r8, &(0x7f0000000240)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x1, @null}, 0x1c)
setsockopt$rose(r4, 0x104, 0x2, &(0x7f00000001c0)=0x1, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)

2.568119823s ago: executing program 1 (id=777):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000300)='kfree\x00', r1}, 0x18)
syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xe, 0x12}, {0xb, 0xffe6}}}, 0x24}}, 0x4000010)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r4 = socket(0x10, 0x803, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x2, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r8}, 0x18)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000b40), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES16=r9, @ANYBLOB="010000000000000000000180000006000a004e24000014000900fec0ffffffffffff0000000000000001050002000a"], 0x38}}, 0x0)
socketpair(0x28, 0xa, 0x0, &(0x7f0000000340))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r13 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_netdev_private(r13, 0x8914, &(0x7f0000000000))
ioctl$sock_ax25_SIOCADDRT(r12, 0x890b, &(0x7f00000000c0)={@default, @default, 0x0, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]})
ioctl$sock_ax25_SIOCADDRT(r12, 0x890b, &(0x7f0000000240)={@default, @bcast, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0)

2.150264173s ago: executing program 1 (id=778):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b00"/12], 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x20000, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x0)
r5 = userfaultfd(0x801)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4})
ioctl$UFFDIO_CONTINUE(r5, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000380)={0x10000}, 0x8)

2.039264513s ago: executing program 6 (id=779):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r2], 0x20}}, 0x20008040)

1.144644642s ago: executing program 0 (id=780):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x20000, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x0)
r4 = userfaultfd(0x801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4})

887.257601ms ago: executing program 1 (id=781):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0)
r1 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000580)="62042700590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f9ec85cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca", 0xd4}, {&(0x7f0000000c00)="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", 0x113}, {&(0x7f00000003c0)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdcea4714219a2d4c4b985418cc8fbcd2935f4e8b229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be", 0xbe}], 0x3}, 0x4008001)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000140)=0x10001, 0x4)
close(r3)
r4 = socket(0x10, 0x1, 0x10003)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d40)=ANY=[@ANYRESDEC=r2, @ANYBLOB="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", @ANYBLOB="5b8bcf67677a78ba677d4a443ff5741ea203549971631f4f2ee56d09c74b6a64fdd29e28a31b23246558ae9cadd3ffce78d7d892ae6ffe14822a1224e54c5c62a02f70eec1ef0e128cbdd1f335794665d32187991ee3d48b579a525f9cac409c514f858605e4e04f69fce425b8d58717cb3559f8e287a3a3fc482696b4ba9e39dd101c442ac18ae09ec274ba808d94257d12635f11fd7e66a29d889ad3411ce292d070256aaf54322aaacaa65192c81cbf395975d1134f088487ffaa2fbf2b9532c1fa86dfa26065639da9c74c0d2b8725", @ANYRESHEX=r2, @ANYRESHEX=r3, @ANYRES16=r2], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x400400c0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[], 0x4c}}, 0x0)
sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x2001000000000000)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$802154_dgram(r5, &(0x7f0000000140)={&(0x7f0000000040), 0x14, &(0x7f0000000100)={0x0}, 0x7}, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, 0x0)
getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, 0x0, &(0x7f00000000c0))
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a24000000060a0b04000000000000000002000000090001007369f98d2edf8738fc000580140000051100010000000000000000000000000a"], 0x4c}}, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0100000005000000fd0900008400000000000000", @ANYRES32, @ANYRESDEC=r4, @ANYRES64=r1, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000ec4a8b19d3d934071dcbfec575d8d5ca6a5a89ec415988c5a3825124b4c37a5981b5e036245217065070f030d297d32a6612a76cb9167393b477edeabf64eb697738d7002d89d97dce9a63da212e9d101c078d4554b0f61dd48d7a988fd79146231d1a0af5c514a9e1c7afb932c993045427a5a9a0a509a9926f1b000105f0cff16381d670fbb8b4fd77f74ff9480a4b6fb8d36ed5b681b625798c9203d0208009c633"], 0x50)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x4000, r0}, 0x18)
r8 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bond0\x00', <r9=>0x0})
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r9, {0x0, 0x11}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0xa4}}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000840)="aaef807fb43c124fab74f3ebe0cb9de8fee5a199b2d302dbb78c204ced3af80649a7c5cae98456e74f9fecab29a0d74bfa41a3ea0e56a1b574efb9d666ec8996328832cf77a4bcbff4f5a629dfa6065093db000000000065a2922ec6fbc48fa0e23e1b85da40dfcb1ddc6f8f55e684eb9a4fb305ab0cfa2af524235e355581c1d4b63c1e6fec1eb16a83cc42c7fe58a0e01e10725d764727c209e4889b760b5d256346403e7c34cebc4194c8f5f3e82e7f6afce3ed165425d0674621dda7559eef0c716b5ab68de39df1b68b118c6115b50ae7f1593481beaa426722dca5f3ac3a405d52e5bb2a56db28c4cffd50df92", &(0x7f0000000480)="ecdb8419cf8e9f33c13e08c81d9f0335c5e627a97a44e79d110cae9439c99e51210fccbfe53741a30cbdc08179161f5aede264f30c90280ba3efb424eaae592617dbc529ee6ad65c5723dbd83684bfe4e9085aae837e793bd30b3b1cf7152e2073e073b2b65b8f2caa96ecd043b7bd2fb03192f21734e557baae", 0x20000802, r7}, 0x38)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000800150000000000050016"], 0x4c}, 0x1, 0x0, 0x0, 0x200400a0}, 0x0)

876.894121ms ago: executing program 6 (id=782):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c)
sendto$inet6(r1, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, 0x0, 0x8000)
getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f00000000c0))
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0)
r2 = epoll_create1(0x0)
r3 = socket$kcm(0x10, 0x3, 0x10)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)={0xc0000009})
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000035000b63d25a80643d66b7d80df2e2ff", 0x14}], 0x1}, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f000006a000/0x2000)=nil, 0x2000, 0xd, 0x4000010, 0xffffffffffffffff, 0x2000)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
socket(0x2, 0x6, 0x0)
setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4)
close(0x4)

654.632141ms ago: executing program 1 (id=783):
ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5f7, @name="ac2ad54970138065d4b1a10a14b7e65642722c3da99ba40f000026e78ffc1e0a"})
add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000480)="fef0eda8c799a4a0", 0x8, 0xfffffffffffffffe)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, 0x0, &(0x7f00000000c0)=""/83, 0x53, 0x0)

518.2936ms ago: executing program 1 (id=784):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
connect$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
sendmmsg$unix(r2, &(0x7f0000004400), 0x400000000000203, 0x0)

193.49075ms ago: executing program 0 (id=785):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0)
r1 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000580)="62042700590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f9ec85cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca", 0xd4}, {&(0x7f0000000c00)="294f28dfe56d2c8ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0106869a804dd2a44ce42557b2e32e2bd367e9d01a5e7380cc4fc8e7c9044cc4115b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a3e83e91b379c179017f8b4657d1b22eca6bca33036d33e1a684059c53cea91ca6637ac780ab2bcfc22a666cd4e5876f11e9aee4724b7cb59731c97e70ebd7f7483994eb07de2f3c6a9448c3206cff6d290b433f331c2399e99ee3bdecf5689eddc3e549966c1106a933bbc47b65ca6e9d7efbee6e3b1dbe87313111e85336d6890002db17751b6044f964dc90ea466f90856112be7f0a54b39a3f66cc4c39544300093158af39cdde429f50d8c7", 0x113}, {&(0x7f00000003c0)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdcea4714219a2d4c4b985418cc8fbcd2935f4e8b229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be", 0xbe}], 0x3}, 0x4008001)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000140)=0x10001, 0x4)
close(r3)
r4 = socket(0x10, 0x1, 0x10003)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d40)=ANY=[@ANYRESDEC=r2, @ANYBLOB="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", @ANYBLOB="5b8bcf67677a78ba677d4a443ff5741ea203549971631f4f2ee56d09c74b6a64fdd29e28a31b23246558ae9cadd3ffce78d7d892ae6ffe14822a1224e54c5c62a02f70eec1ef0e128cbdd1f335794665d32187991ee3d48b579a525f9cac409c514f858605e4e04f69fce425b8d58717cb3559f8e287a3a3fc482696b4ba9e39dd101c442ac18ae09ec274ba808d94257d12635f11fd7e66a29d889ad3411ce292d070256aaf54322aaacaa65192c81cbf395975d1134f088487ffaa2fbf2b9532c1fa86dfa26065639da9c74c0d2b8725", @ANYRESHEX=r2, @ANYRESHEX=r3, @ANYRES16=r2], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x400400c0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[], 0x4c}}, 0x0)
sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x2001000000000000)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$802154_dgram(r5, &(0x7f0000000140)={&(0x7f0000000040), 0x14, &(0x7f0000000100)={0x0}, 0x7}, 0x0)

157.60498ms ago: executing program 0 (id=786):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r2=>0x0})
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000))
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000000c0)={<r4=>r0, 0x4b7, 0x9, 0x31})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000280)={'syztnl2\x00', r2, 0x2f, 0x6f, 0x13, 0x5, 0x5d, @remote, @mcast1, 0x700, 0x80, 0x6}})
ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000140)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x8, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @bcast]})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@ipv4_newroute={0x28, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_METRICS={0x4}, @RTA_NH_ID={0x8, 0x1e, 0x3}]}, 0x28}}, 0x0)
r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r7, 0x0, 0x7, &(0x7f0000000000)=0x714, 0x4)
syz_emit_ethernet(0x52, &(0x7f0000000100)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0x1c, 0xe, 0x1, 0x0, [{@dev}, {@multicast2}, {@local}]}]}}, @timestamp}}}}, 0x0)
readv(r7, &(0x7f00000007c0)=[{&(0x7f0000000080)=""/92, 0x5c}], 0x1)
r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r8, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c)
syz_init_net_socket$ax25(0x3, 0x2, 0xce)
connect$rose(r8, &(0x7f0000000240)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x1, @null}, 0x1c)
socket(0x18, 0x0, 0xc18895e)
socket$nl_netfilter(0x10, 0x3, 0xc)

80.93779ms ago: executing program 3 (id=787):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r2=>0x0})
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000))
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000000c0)={<r4=>r0, 0x4b7, 0x9, 0x31})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000280)={'syztnl2\x00', r2, 0x2f, 0x6f, 0x13, 0x5, 0x5d, @remote, @mcast1, 0x700, 0x80, 0x6}})
ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000140)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x8, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @bcast]})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@ipv4_newroute={0x28, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_METRICS={0x4}, @RTA_NH_ID={0x8, 0x1e, 0x3}]}, 0x28}}, 0x0)
r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r7, 0x0, 0x7, &(0x7f0000000000)=0x714, 0x4)
syz_emit_ethernet(0x52, &(0x7f0000000100)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0x1c, 0xe, 0x1, 0x0, [{@dev}, {@multicast2}, {@local}]}]}}, @timestamp}}}}, 0x0)
readv(r7, &(0x7f00000007c0)=[{&(0x7f0000000080)=""/92, 0x5c}], 0x1)
r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r8, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c)
syz_init_net_socket$ax25(0x3, 0x2, 0xce)
connect$rose(r8, &(0x7f0000000240)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x1, @null}, 0x1c)
setsockopt$rose(r4, 0x104, 0x2, &(0x7f00000001c0)=0x1, 0x4)
socket(0x18, 0x0, 0xc18895e)

0s ago: executing program 6 (id=788):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
socket$netlink(0x10, 0x3, 0xf)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket(0x1e, 0x4, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
connect$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
sendmmsg$unix(r3, &(0x7f0000004400), 0x400000000000203, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.16' (ED25519) to the list of known hosts.
[   39.576418][ T4013] cgroup: Unknown subsys name 'net'
[   39.856454][ T4013] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   40.207571][ T4013] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k SSFS
[   41.631802][ T4024] chnl_net:caif_netlink_parms(): no params data found
[   41.646380][ T4028] chnl_net:caif_netlink_parms(): no params data found
[   41.760423][ T4024] bridge0: port 1(bridge_slave_0) entered blocking state
[   41.762667][ T4024] bridge0: port 1(bridge_slave_0) entered disabled state
[   41.765186][ T4024] device bridge_slave_0 entered promiscuous mode
[   41.770331][ T4024] bridge0: port 2(bridge_slave_1) entered blocking state
[   41.772770][ T4024] bridge0: port 2(bridge_slave_1) entered disabled state
[   41.775127][ T4024] device bridge_slave_1 entered promiscuous mode
[   41.777701][ T4028] bridge0: port 1(bridge_slave_0) entered blocking state
[   41.779616][ T4028] bridge0: port 1(bridge_slave_0) entered disabled state
[   41.782659][ T4028] device bridge_slave_0 entered promiscuous mode
[   41.795543][ T4023] chnl_net:caif_netlink_parms(): no params data found
[   41.804478][ T4028] bridge0: port 2(bridge_slave_1) entered blocking state
[   41.806523][ T4028] bridge0: port 2(bridge_slave_1) entered disabled state
[   41.809066][ T4028] device bridge_slave_1 entered promiscuous mode
[   41.852238][ T4024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   41.864990][ T4024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   41.869603][ T4028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   41.879295][ T4034] chnl_net:caif_netlink_parms(): no params data found
[   41.889496][ T4028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   41.929280][ T4023] bridge0: port 1(bridge_slave_0) entered blocking state
[   41.936004][ T4023] bridge0: port 1(bridge_slave_0) entered disabled state
[   41.938527][ T4023] device bridge_slave_0 entered promiscuous mode
[   41.943271][ T4024] team0: Port device team_slave_0 added
[   41.945186][ T4032] chnl_net:caif_netlink_parms(): no params data found
[   41.949652][ T4024] team0: Port device team_slave_1 added
[   41.962936][ T4028] team0: Port device team_slave_0 added
[   41.967019][ T4023] bridge0: port 2(bridge_slave_1) entered blocking state
[   41.968950][ T4023] bridge0: port 2(bridge_slave_1) entered disabled state
[   41.971550][ T4023] device bridge_slave_1 entered promiscuous mode
[   41.997684][ T4028] team0: Port device team_slave_1 added
[   42.021756][ T4024] batman_adv: batadv0: Adding interface: batadv_slave_0
[   42.023518][ T4024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   42.030205][ T4024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   42.051450][ T4023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   42.054054][ T4034] bridge0: port 1(bridge_slave_0) entered blocking state
[   42.056020][ T4034] bridge0: port 1(bridge_slave_0) entered disabled state
[   42.058448][ T4034] device bridge_slave_0 entered promiscuous mode
[   42.066507][ T4024] batman_adv: batadv0: Adding interface: batadv_slave_1
[   42.068315][ T4024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   42.075362][ T4024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   42.083229][ T4023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   42.087999][ T4034] bridge0: port 2(bridge_slave_1) entered blocking state
[   42.089959][ T4034] bridge0: port 2(bridge_slave_1) entered disabled state
[   42.093037][ T4034] device bridge_slave_1 entered promiscuous mode
[   42.100532][ T4028] batman_adv: batadv0: Adding interface: batadv_slave_0
[   42.103695][ T4028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   42.110484][ T4028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   42.146231][ T4028] batman_adv: batadv0: Adding interface: batadv_slave_1
[   42.148158][ T4028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   42.155338][ T4028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   42.160823][ T4023] team0: Port device team_slave_0 added
[   42.164152][ T4023] team0: Port device team_slave_1 added
[   42.174617][ T4034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   42.194893][ T4032] bridge0: port 1(bridge_slave_0) entered blocking state
[   42.196874][ T4032] bridge0: port 1(bridge_slave_0) entered disabled state
[   42.199722][ T4032] device bridge_slave_0 entered promiscuous mode
[   42.204197][ T4034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   42.262750][ T4024] device hsr_slave_0 entered promiscuous mode
[   42.301652][ T4024] device hsr_slave_1 entered promiscuous mode
[   42.347477][ T4023] batman_adv: batadv0: Adding interface: batadv_slave_0
[   42.349282][ T4023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   42.356224][ T4023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   42.359568][ T4032] bridge0: port 2(bridge_slave_1) entered blocking state
[   42.361624][ T4032] bridge0: port 2(bridge_slave_1) entered disabled state
[   42.364081][ T4032] device bridge_slave_1 entered promiscuous mode
[   42.383525][ T4023] batman_adv: batadv0: Adding interface: batadv_slave_1
[   42.385326][ T4023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   42.392756][ T4023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   42.405330][ T4034] team0: Port device team_slave_0 added
[   42.452544][ T4028] device hsr_slave_0 entered promiscuous mode
[   42.501068][ T4028] device hsr_slave_1 entered promiscuous mode
[   42.540881][ T4028] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   42.543141][ T4028] Cannot create hsr debugfs directory
[   42.559815][ T4034] team0: Port device team_slave_1 added
[   42.563910][ T4032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   42.597251][ T4032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   42.682818][ T4023] device hsr_slave_0 entered promiscuous mode
[   42.721081][ T4023] device hsr_slave_1 entered promiscuous mode
[   42.760812][ T4023] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   42.762859][ T4023] Cannot create hsr debugfs directory
[   42.772592][ T4034] batman_adv: batadv0: Adding interface: batadv_slave_0
[   42.774499][ T4034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   42.781923][ T4034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   42.806713][ T4034] batman_adv: batadv0: Adding interface: batadv_slave_1
[   42.808665][ T4034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   42.820367][ T4034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   42.828589][ T4032] team0: Port device team_slave_0 added
[   42.848802][ T4032] team0: Port device team_slave_1 added
[   42.903877][ T4032] batman_adv: batadv0: Adding interface: batadv_slave_0
[   42.905691][ T4032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   42.912790][ T4032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   42.916927][ T4032] batman_adv: batadv0: Adding interface: batadv_slave_1
[   42.918792][ T4032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   42.926073][ T4032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   43.022687][ T4034] device hsr_slave_0 entered promiscuous mode
[   43.061084][ T4034] device hsr_slave_1 entered promiscuous mode
[   43.100728][ T4034] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   43.102821][ T4034] Cannot create hsr debugfs directory
[   43.163209][ T4032] device hsr_slave_0 entered promiscuous mode
[   43.201025][ T4032] device hsr_slave_1 entered promiscuous mode
[   43.250751][ T4032] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   43.252805][ T4032] Cannot create hsr debugfs directory
[   43.343749][ T4024] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   43.389898][ T4024] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   43.411263][ T4068] Bluetooth: hci2: command 0x0409 tx timeout
[   43.413451][ T4068] Bluetooth: hci0: command 0x0409 tx timeout
[   43.458398][ T4024] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   43.480856][ T4068] Bluetooth: hci3: command 0x0409 tx timeout
[   43.480868][ T3606] Bluetooth: hci4: command 0x0409 tx timeout
[   43.482594][ T4068] Bluetooth: hci1: command 0x0409 tx timeout
[   43.502703][ T4024] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   43.597215][ T4028] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   43.633180][ T4028] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   43.694823][ T4028] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   43.742476][ T4028] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   43.828902][ T4023] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   43.874392][ T4023] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   43.932830][ T4023] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   43.997492][ T4023] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   44.060522][ T4034] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   44.113078][ T4034] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   44.163717][ T4034] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   44.213026][ T4034] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   44.268726][ T4024] 8021q: adding VLAN 0 to HW filter on device bond0
[   44.300120][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   44.304959][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   44.309767][ T4024] 8021q: adding VLAN 0 to HW filter on device team0
[   44.318948][ T4028] 8021q: adding VLAN 0 to HW filter on device bond0
[   44.323128][ T4032] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   44.372625][ T4032] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   44.417518][ T4032] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   44.463577][ T4032] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   44.517562][  T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   44.520269][  T429] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   44.524281][  T429] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.526258][  T429] bridge0: port 1(bridge_slave_0) entered forwarding state
[   44.529074][  T429] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   44.542821][  T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   44.545297][  T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   44.555633][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   44.558318][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   44.563111][  T136] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.565105][  T136] bridge0: port 2(bridge_slave_1) entered forwarding state
[   44.577994][ T4028] 8021q: adding VLAN 0 to HW filter on device team0
[   44.588377][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   44.619313][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   44.623160][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   44.625838][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   44.628240][  T148] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.630139][  T148] bridge0: port 1(bridge_slave_0) entered forwarding state
[   44.639556][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   44.642538][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   44.645705][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   44.648289][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   44.653266][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   44.657421][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   44.660128][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   44.663367][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   44.666227][  T148] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.668107][  T148] bridge0: port 2(bridge_slave_1) entered forwarding state
[   44.677228][ T4023] 8021q: adding VLAN 0 to HW filter on device bond0
[   44.686391][  T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   44.699240][ T4024] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   44.703315][ T4024] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   44.708299][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   44.713370][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   44.716457][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   44.718982][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   44.723109][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   44.728359][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   44.746041][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   44.748531][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   44.759277][ T4023] 8021q: adding VLAN 0 to HW filter on device team0
[   44.771007][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   44.773610][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   44.776027][  T153] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.777964][  T153] bridge0: port 1(bridge_slave_0) entered forwarding state
[   44.780145][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   44.789892][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   44.794579][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   44.797153][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   44.808754][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   44.812376][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   44.814851][  T148] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.816675][  T148] bridge0: port 2(bridge_slave_1) entered forwarding state
[   44.818892][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   44.827754][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   44.840462][ T4028] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   44.850871][ T4028] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   44.860089][ T4034] 8021q: adding VLAN 0 to HW filter on device bond0
[   44.867759][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   44.872538][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   44.875317][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   44.877900][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   44.881962][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   44.884810][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   44.887364][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   44.889939][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   44.892994][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   44.895754][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   44.913394][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   44.916009][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   44.918683][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   44.922483][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   44.943755][ T4023] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   44.947125][ T4023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   44.950278][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   44.955994][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   44.958665][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   44.961702][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   44.969740][ T4034] 8021q: adding VLAN 0 to HW filter on device team0
[   44.977197][ T4024] 8021q: adding VLAN 0 to HW filter on device batadv0
[   44.983612][ T4032] 8021q: adding VLAN 0 to HW filter on device bond0
[   44.985701][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   44.988051][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   45.019146][  T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   45.022944][  T429] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   45.025392][  T429] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.027233][  T429] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.029514][  T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   45.040257][  T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   45.045301][  T429] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   45.056786][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   45.059471][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   45.062630][  T148] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.064593][  T148] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.083538][  T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   45.086083][  T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   45.093402][ T4032] 8021q: adding VLAN 0 to HW filter on device team0
[   45.104852][  T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   45.107310][  T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   45.111457][ T4024] device veth0_vlan entered promiscuous mode
[   45.120299][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   45.124721][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   45.127112][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   45.129921][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   45.133176][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   45.135644][  T153] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.137462][  T153] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.139738][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   45.143548][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   45.145619][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   45.148821][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   45.156800][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   45.159402][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   45.162637][  T153] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.164492][  T153] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.171864][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   45.175645][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   45.182936][ T4024] device veth1_vlan entered promiscuous mode
[   45.196429][ T4028] 8021q: adding VLAN 0 to HW filter on device batadv0
[   45.198445][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   45.202946][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   45.205568][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   45.208035][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   45.210080][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   45.218694][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   45.222219][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   45.225001][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   45.237226][ T4023] 8021q: adding VLAN 0 to HW filter on device batadv0
[   45.240276][ T4024] device veth0_macvtap entered promiscuous mode
[   45.249707][  T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   45.252425][  T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   45.254995][  T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   45.261948][ T4024] device veth1_macvtap entered promiscuous mode
[   45.266370][  T336] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   45.268838][  T336] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   45.272877][  T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   45.276286][  T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   45.282631][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   45.286169][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   45.299870][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   45.303241][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   45.306061][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   45.308819][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   45.312877][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   45.315491][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   45.317990][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   45.320517][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   45.331271][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   45.333896][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   45.336502][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   45.340134][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   45.347419][ T4032] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   45.373664][ T4024] batman_adv: batadv0: Interface activated: batadv_slave_0
[   45.378313][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   45.381515][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   45.384128][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   45.386809][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   45.415527][ T4024] batman_adv: batadv0: Interface activated: batadv_slave_1
[   45.418122][ T4023] device veth0_vlan entered promiscuous mode
[   45.420145][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   45.424570][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   45.426856][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   45.429355][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   45.442891][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   45.446069][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   45.458791][ T4024] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   45.461687][ T4024] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   45.464073][ T4024] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   45.466472][ T4024] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   45.475894][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   45.478354][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   45.481177][ T4073] Bluetooth: hci0: command 0x041b tx timeout
[   45.481609][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   45.484744][ T4073] Bluetooth: hci2: command 0x041b tx timeout
[   45.485492][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   45.492867][ T4028] device veth0_vlan entered promiscuous mode
[   45.506968][ T4023] device veth1_vlan entered promiscuous mode
[   45.538208][ T4028] device veth1_vlan entered promiscuous mode
[   45.561065][ T4073] Bluetooth: hci1: command 0x041b tx timeout
[   45.562960][ T4073] Bluetooth: hci4: command 0x041b tx timeout
[   45.564685][ T4073] Bluetooth: hci3: command 0x041b tx timeout
[   45.568698][  T336] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   45.572278][  T336] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   45.577547][  T336] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   45.580089][  T336] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   45.583368][  T336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   45.585751][  T336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   45.594619][ T4032] 8021q: adding VLAN 0 to HW filter on device batadv0
[   45.602242][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   45.604249][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   45.622380][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   45.625015][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   45.635781][ T4023] device veth0_macvtap entered promiscuous mode
[   45.650396][ T4023] device veth1_macvtap entered promiscuous mode
[   45.657610][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   45.660203][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   45.663922][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   45.666671][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   45.685500][ T4034] 8021q: adding VLAN 0 to HW filter on device batadv0
[   45.687660][  T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   45.690312][  T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   45.699194][ T4028] device veth0_macvtap entered promiscuous mode
[   45.704385][ T4028] device veth1_macvtap entered promiscuous mode
[   45.732715][  T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.734976][  T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   45.746136][  T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.748406][  T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   45.748947][  T336] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   45.753579][  T336] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   45.756027][  T336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   45.758489][  T336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   45.769899][ T4028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   45.776704][ T4028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.780420][ T4028] batman_adv: batadv0: Interface activated: batadv_slave_0
[   45.790199][  T336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   45.796688][  T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   45.807096][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   45.810007][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.819764][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   45.826865][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.836137][ T4023] batman_adv: batadv0: Interface activated: batadv_slave_0
[   45.843115][  T336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   45.845971][  T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   45.848669][  T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   45.856491][  T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   45.859269][  T336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   45.866498][  T336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   45.870092][ T4028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   45.874631][ T4028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.878328][ T4028] batman_adv: batadv0: Interface activated: batadv_slave_1
[   45.884208][ T4032] device veth0_vlan entered promiscuous mode
[   45.894238][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   45.897141][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.899620][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   45.906840][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.910341][ T4023] batman_adv: batadv0: Interface activated: batadv_slave_1
[   45.917024][  T336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   45.919807][  T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   45.923836][  T336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   45.926878][  T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   45.944025][ T4032] device veth1_vlan entered promiscuous mode
[   45.953400][ T4028] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   45.956107][ T4028] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   45.958453][ T4028] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   45.962624][ T4028] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   45.977808][ T4032] device veth0_macvtap entered promiscuous mode
[   45.983744][ T4032] device veth1_macvtap entered promiscuous mode
[   45.995407][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   45.998147][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.002754][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   46.005542][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.008768][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   46.014158][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.017849][ T4032] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.022468][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   46.025302][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.027868][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   46.030541][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.045201][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   46.047875][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.062202][ T4032] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.068989][ T4032] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.076090][ T4032] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.078475][ T4032] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.083546][ T4032] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.133483][ T4023] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.135806][ T4023] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.138636][ T4023] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.141719][ T4023] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.147752][  T429] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   46.150520][  T429] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   46.160134][  T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   46.163267][  T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   46.165851][  T429] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   46.168377][  T429] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   46.172074][  T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   46.174772][  T429] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   46.450939][ T4103] TCP: TCP_TX_DELAY enabled
[   46.689328][  T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   47.005079][  T429] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   47.046975][  T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   47.049802][  T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   47.062335][  T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.069646][  T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.091530][ T4107] udc-core: couldn't find an available UDC or it's busy
[   47.093489][ T4107] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   47.100190][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   47.158724][  T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   47.165651][  T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   47.168331][  T429] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   47.172338][  T429] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   47.198605][ T4034] device veth0_vlan entered promiscuous mode
[   47.209342][  T429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.215736][  T429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.226707][  T336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.228916][  T336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.239328][  T429] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   47.244970][  T429] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   47.256986][ T4034] device veth1_vlan entered promiscuous mode
[   47.276834][  T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.279060][  T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.286707][  T429] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   47.289344][  T429] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   47.295923][  T429] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   47.308994][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   47.316236][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   47.329374][ T4034] device veth0_macvtap entered promiscuous mode
[   47.345518][ T4034] device veth1_macvtap entered promiscuous mode
[   47.356052][  T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.358395][  T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.364468][  T429] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   47.367129][  T429] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   47.370527][  T429] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   47.410294][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   47.424482][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.427233][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   47.430027][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.438213][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   47.446785][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.449507][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   47.460195][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.476075][ T4034] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.478180][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   47.484126][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   47.511963][ T4110] loop3: detected capacity change from 0 to 32768
[   47.531149][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   47.533935][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.536415][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   47.539429][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.542703][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   47.545380][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.548392][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   47.551868][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.555673][ T4034] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.563894][ T4034] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.566084][ T4034] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.568366][ T4034] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.570534][ T4034] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.612361][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   47.636609][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   47.639518][  T429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.643900][  T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.645940][  T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.654012][ T4110] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.4 (4110)
[   47.667355][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   47.669541][  T429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.682414][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   47.782473][ T4112] loop1: detected capacity change from 0 to 40427
[   47.784866][ T3322] Bluetooth: hci2: command 0x040f tx timeout
[   47.787145][ T3322] Bluetooth: hci0: command 0x040f tx timeout
[   47.790493][   T13] Bluetooth: hci3: command 0x040f tx timeout
[   47.792399][   T13] Bluetooth: hci4: command 0x040f tx timeout
[   47.794131][   T13] Bluetooth: hci1: command 0x040f tx timeout
[   47.799625][ T4110] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm
[   47.803184][ T4110] BTRFS info (device loop3): turning on async discard
[   47.805002][ T4110] BTRFS info (device loop3): using free space tree
[   47.806654][ T4110] BTRFS info (device loop3): has skinny extents
[   47.869384][  T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.872588][ T4112] F2FS-fs (loop1): Found nat_bits in checkpoint
[   47.879154][  T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.890587][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   47.943615][ T4112] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   47.996862][   T26] audit: type=1326 audit(47.950:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4132 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6b9e728 code=0x7ffc0000
[   48.043994][   T26] audit: type=1326 audit(48.000:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4132 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=441 compat=0 ip=0xffffa6b9e728 code=0x7ffc0000
[   48.057027][   T26] audit: type=1326 audit(48.010:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4132 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6b9e728 code=0x7ffc0000
[   48.082132][ T4140] ieee802154 phy0 wpan0: encryption failed: -22
[   48.084191][ T4110] BTRFS info (device loop3): enabling ssd optimizations
[   48.118985][ T4112] attempt to access beyond end of device
[   48.118985][ T4112] loop1: rw=10241, want=45104, limit=40427
[   48.125805][ T4112] attempt to access beyond end of device
[   48.125805][ T4112] loop1: rw=2049, want=45104, limit=40427
[   48.270760][ T4144] loop4: detected capacity change from 0 to 32768
[   48.312297][  T336] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared)
[   48.337724][ T4023] attempt to access beyond end of device
[   48.337724][ T4023] loop1: rw=2049, want=45120, limit=40427
[   48.412538][ T4110] BTRFS info (device loop3): balance: start -s
[   48.418416][ T4110] BTRFS info (device loop3): relocating block group 1048576 flags system
[   48.463140][ T4110] BTRFS info (device loop3): balance: ended with status: 0
[   48.483075][ T4144] XFS (loop4): Mounting V5 Filesystem
[   48.712449][ T4144] XFS (loop4): Ending clean mount
[   48.720707][ T4144] XFS (loop4): Quotacheck needed: Please wait.
[   48.808834][ T4144] XFS (loop4): Quotacheck: Done.
[   48.847623][   T26] audit: type=1400 audit(48.800:5): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=4170 comm="syz.2.15"
[   49.265215][ T4176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14'.
[   49.298153][ T4176] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   49.793015][ T4176] batman_adv: batadv0: Removing interface: batadv_slave_0
[   49.801139][   T13] Bluetooth: hci1: command 0x0419 tx timeout
[   49.802887][   T13] Bluetooth: hci4: command 0x0419 tx timeout
[   49.804730][   T13] Bluetooth: hci3: command 0x0419 tx timeout
[   49.810747][   T13] Bluetooth: hci0: command 0x0419 tx timeout
[   49.824338][   T13] Bluetooth: hci2: command 0x0419 tx timeout
[   51.724312][   T26] audit: type=1326 audit(51.630:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4190 comm="syz.0.19" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d254728 code=0x7ffc0000
[   51.733374][   T26] audit: type=1326 audit(51.690:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4190 comm="syz.0.19" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=180 compat=0 ip=0xffff9d254728 code=0x7ffc0000
[   51.767632][   T26] audit: type=1326 audit(51.690:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4190 comm="syz.0.19" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d254728 code=0x7ffc0000
[   51.801523][   T26] audit: type=1326 audit(51.690:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4190 comm="syz.0.19" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=155 compat=0 ip=0xffff9d254728 code=0x7ffc0000
[   51.832698][   T26] audit: type=1326 audit(51.690:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4190 comm="syz.0.19" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d254728 code=0x7ffc0000
[   51.838416][   T26] audit: type=1326 audit(51.690:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4190 comm="syz.0.19" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff9d254728 code=0x7ffc0000
[   51.935027][ T4034] XFS (loop4): Unmounting Filesystem
[   51.945750][ T4197] loop0: detected capacity change from 0 to 512
[   51.975822][ T4197] =======================================================
[   51.975822][ T4197] WARNING: The mand mount option has been deprecated and
[   51.975822][ T4197]          and is ignored by this kernel. Remove the mand
[   51.975822][ T4197]          option from the mount to silence this warning.
[   51.975822][ T4197] =======================================================
[   52.011031][ T4197] EXT4-fs (loop0): inline encryption not supported
[   52.019597][ T4197] EXT4-fs (loop0): Test dummy encryption mode enabled
[   52.153982][ T4197] EXT4-fs (loop0): DAX enabled. Warning: EXPERIMENTAL, use at your own risk
[   52.156466][ T4197] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal
[   53.736905][ T4217] loop4: detected capacity change from 0 to 764
[   54.334919][ T4238] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2
[   54.337432][ T4238] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0
[   55.430680][ T4241] mmap: syz.2.32 (4241) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[   59.464115][ T4264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.44'.
[   61.175499][ T4266] loop4: detected capacity change from 0 to 32768
[   61.289409][ T4286] device gtp0 entered promiscuous mode
[   61.297791][ T4286] team0: Device gtp0 is of different type
[   62.167925][ T4266] JBD2: Ignoring recovery information on journal
[   62.424750][ T4266] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[   62.490337][ T4307] serio: Serial port ptm0
[   63.598686][ T4034] ocfs2: Unmounting device (7,4) on (node local)
[   63.644309][ T4322] netlink: 48 bytes leftover after parsing attributes in process `syz.3.63'.
[   65.064457][ T4320] loop2: detected capacity change from 0 to 32768
[   65.086838][ T4346] loop4: detected capacity change from 0 to 4096
[   65.199211][ T4320] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz"
[   65.203780][ T4320] dlm: no local IP address has been set
[   65.205375][ T4320] dlm: cannot start dlm midcomms -107
[   65.206776][ T4320] gfs2: fsid=syz:syz: dlm_new_lockspace error -107
[   66.740005][ T4034] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22.
[   66.743178][ T4034] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[   67.847074][ T4380] loop4: detected capacity change from 0 to 128
[   67.910605][    C1] sched: RT throttling activated
[   69.902772][   T21] cfg80211: failed to load regulatory.db
[   69.932515][ T2055] ieee802154 phy0 wpan0: encryption failed: -22
[   69.934239][ T2055] ieee802154 phy1 wpan1: encryption failed: -22
[   70.602695][ T4408] loop4: detected capacity change from 0 to 512
[   70.634964][ T4408] EXT4-fs (loop4): Ignoring removed oldalloc option
[   70.819408][ T4408] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   70.876875][ T4408] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.89: Parent and EA inode have the same ino 15
[   71.193059][ T4408] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   72.090809][ T4408] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.89: Parent and EA inode have the same ino 15
[   72.145316][ T4408] EXT4-fs (loop4): 1 orphan inode deleted
[   72.146924][ T4408] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,init_itable=0x0000000000000008,debug_want_extra_isize=0x000000000000005c,dioread_nolock,init_itable,oldalloc,init_itable=0x0000000000000002,,errors=continue. Quota mode: none.
[   72.396400][ T4408] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.89: invalid indirect mapped block 234881024 (level 0)
[   72.551813][ T4432] binder: 4424:4432 ioctl c0306201 0 returned -14
[   72.560741][ T4432] binder: 4424:4432 unknown command 1074553619
[   72.562631][ T4432] binder: 4424:4432 ioctl c0306201 20000640 returned -22
[   77.437803][ T4471] loop3: detected capacity change from 0 to 512
[   77.621590][ T4471] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nombcache,minixdf,,errors=continue. Quota mode: writeback.
[   78.807984][ T4496] loop4: detected capacity change from 0 to 256
[   78.902777][ T4485] loop2: detected capacity change from 0 to 32768
[   78.941432][ T4485] XFS: ikeep mount option is deprecated.
[   78.942937][ T4485] XFS: noikeep mount option is deprecated.
[   78.959978][ T4496] FAT-fs (loop4): Directory bread(block 64) failed
[   78.988818][ T4496] FAT-fs (loop4): Directory bread(block 65) failed
[   78.994938][ T4496] FAT-fs (loop4): Directory bread(block 66) failed
[   78.996783][ T4496] FAT-fs (loop4): Directory bread(block 67) failed
[   78.998519][ T4496] FAT-fs (loop4): Directory bread(block 68) failed
[   79.025345][ T4496] FAT-fs (loop4): Directory bread(block 69) failed
[   79.027245][ T4496] FAT-fs (loop4): Directory bread(block 70) failed
[   79.047893][ T4492] Zero length message leads to an empty skb
[   79.049853][ T4496] FAT-fs (loop4): Directory bread(block 71) failed
[   79.052762][ T4496] FAT-fs (loop4): Directory bread(block 72) failed
[   79.054565][ T4496] FAT-fs (loop4): Directory bread(block 73) failed
[   79.068867][ T4485] XFS (loop2): Mounting V5 Filesystem
[   83.537317][ T4485] XFS (loop2): Ending clean mount
[   83.564298][ T4485] XFS (loop2): Quotacheck needed: Please wait.
[   83.642627][ T4485] XFS (loop2): Quotacheck: Done.
[   83.665264][ T4524] netlink: 'syz.3.119': attribute type 4 has an invalid length.
[   83.709267][ T4024] XFS (loop2): Unmounting Filesystem
[   83.977072][ T4536] netlink: 24 bytes leftover after parsing attributes in process `syz.1.123'.
[   85.743277][ T4548] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[   87.987860][ T4579] xt_CT: You must specify a L4 protocol and not use inversions on it
[   88.338938][ T4576] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.827854][ T4598] loop4: detected capacity change from 0 to 512
[   90.036748][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   90.040671][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   90.042775][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   91.479633][ T4598] EXT4-fs (loop4): inline encryption not supported
[   91.489782][ T4598] EXT4-fs (loop4): Test dummy encryption mode enabled
[   91.727040][ T4598] EXT4-fs (loop4): DAX enabled. Warning: EXPERIMENTAL, use at your own risk
[   91.737377][ T4598] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal
[   94.084804][ T4637] Process accounting resumed
[   94.490709][ T4648] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[   95.510922][ T4650] xt_l2tp: wrong L2TP version: 0
[   97.759470][ T4674] loop3: detected capacity change from 0 to 128
[   97.996487][ T4664] udc-core: couldn't find an available UDC or it's busy
[   97.998457][ T4664] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   98.421095][ T4681] udc-core: couldn't find an available UDC or it's busy
[   98.423051][ T4681] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   98.440771][ T4681] loop2: detected capacity change from 0 to 256
[   98.521655][ T4681] exfat: Deprecated parameter 'utf8'
[   98.523191][ T4681] exfat: Unknown parameter 'zero_size_dir'
[   98.609609][ T4244] attempt to access beyond end of device
[   98.609609][ T4244] loop3: rw=1, want=1041, limit=128
[   99.805954][ T4707] device veth0_to_bridge entered promiscuous mode
[   99.808293][ T4705] device veth0_to_bridge left promiscuous mode
[  100.968008][ T4714] loop3: detected capacity change from 0 to 40427
[  101.351755][ T4717] use of bytesused == 0 is deprecated and will be removed in the future,
[  101.354455][ T4717] use the actual size instead.
[  101.678894][ T4720] loop2: detected capacity change from 0 to 128
[  101.760420][ T4714] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x1ffff
[  101.764662][ T4714] F2FS-fs (loop3): invalid crc value
[  101.821965][ T4714] F2FS-fs (loop3): Found nat_bits in checkpoint
[  101.851466][ T4714] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  101.917637][ T4032] attempt to access beyond end of device
[  101.917637][ T4032] loop3: rw=2049, want=45104, limit=40427
[  104.168907][ T4753] overlayfs: missing 'workdir'
[  104.298348][ T4752] udc-core: couldn't find an available UDC or it's busy
[  104.300262][ T4752] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  104.366407][ T4752] loop2: detected capacity change from 0 to 256
[  104.523084][ T4752] exfat: Deprecated parameter 'utf8'
[  104.524673][ T4752] exfat: Unknown parameter 'zero_size_dir'
[  111.211094][ T4802] loop2: detected capacity change from 0 to 1024
[  111.862492][ T4802] hfsplus: unable to parse mount options
[  114.213714][ T4071] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  114.491150][ T4071] usb 1-1: Using ep0 maxpacket: 16
[  114.645967][ T4834] udc-core: couldn't find an available UDC or it's busy
[  114.647874][ T4834] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  116.230701][ T4846] process 'syz.4.217' launched './file0' with NULL argv: empty string added
[  116.899556][ T4071] usb 1-1: device descriptor read/all, error -71
[  117.025340][ T4853] loop4: detected capacity change from 0 to 1024
[  117.878111][ T4861] loop3: detected capacity change from 0 to 128
[  117.918039][ T4853] EXT4-fs (loop4): mounted filesystem without journal. Opts: acl,barrier,barrier=0x0000000000000000,sysvgroups,debug_want_extra_isize=0x0000000000000080,resuid=0x0000000000000000,nodelalloc,acl,noinit_itable,,errors=continue. Quota mode: none.
[  118.990715][ T4071] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  119.750912][ T4071] usb 1-1: Using ep0 maxpacket: 8
[  120.257550][ T4878] udc-core: couldn't find an available UDC or it's busy
[  120.380689][ T4878] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  120.414964][ T4071] usb 1-1: config 0 has an invalid interface number: 56 but max is 0
[  120.418277][ T4071] usb 1-1: config 0 has no interface number 0
[  120.466093][ T4882] udc-core: couldn't find an available UDC or it's busy
[  120.467999][ T4882] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  120.536908][ T4883] netlink: 16 bytes leftover after parsing attributes in process `syz.1.228'.
[  120.548313][   T26] kauditd_printk_skb: 9 callbacks suppressed
[  120.548500][   T26] audit: type=1326 audit(120.500:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4877 comm="syz.1.228" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffae7eb728 code=0x0
[  121.107591][ T4882] loop3: detected capacity change from 0 to 256
[  121.249877][ T4882] exfat: Deprecated parameter 'utf8'
[  121.251558][ T4882] exfat: Unknown parameter 'zero_size_dir'
[  121.300791][ T4071] usb 1-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=c7.76
[  121.303334][ T4071] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.305445][ T4071] usb 1-1: Product: syz
[  121.355739][ T4071] usb 1-1: config 0 descriptor??
[  121.446805][ T4071] usb 1-1: can't set config #0, error -71
[  121.678014][ T4071] usb 1-1: USB disconnect, device number 3
[  122.180939][   T26] audit: type=1326 audit(122.140:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4891 comm="syz.4.233" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb10fa728 code=0x7ffc0000
[  122.193914][   T26] audit: type=1326 audit(122.150:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4891 comm="syz.4.233" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb10fa728 code=0x7ffc0000
[  122.219674][   T26] audit: type=1326 audit(122.150:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4891 comm="syz.4.233" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb10fa728 code=0x7ffc0000
[  122.245974][   T26] audit: type=1326 audit(122.170:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4891 comm="syz.4.233" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb10fa728 code=0x7ffc0000
[  122.309264][   T26] audit: type=1326 audit(122.170:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4891 comm="syz.4.233" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb10fa728 code=0x7ffc0000
[  122.356616][   T26] audit: type=1326 audit(122.170:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4891 comm="syz.4.233" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffffb10fa728 code=0x7ffc0000
[  122.395492][   T26] audit: type=1326 audit(122.170:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4891 comm="syz.4.233" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb10fa728 code=0x7ffc0000
[  122.430733][   T26] audit: type=1326 audit(122.170:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4891 comm="syz.4.233" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb10fa728 code=0x7ffc0000
[  122.467261][   T26] audit: type=1326 audit(122.170:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4891 comm="syz.4.233" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb10fa728 code=0x7ffc0000
[  122.870396][ T4904] loop3: detected capacity change from 0 to 128
[  126.736127][ T4927] xt_l2tp: wrong L2TP version: 0
[  127.387703][ T4892] ODEBUG: Out of memory. ODEBUG disabled
[  128.451847][ T4951] udc-core: couldn't find an available UDC or it's busy
[  128.453911][ T4951] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  128.483622][ T4950] loop2: detected capacity change from 0 to 256
[  128.485903][ T4950] exfat: Deprecated parameter 'utf8'
[  128.487403][ T4950] exfat: Unknown parameter 'zero_size_dir'
[  129.382909][ T4957] netlink: 4 bytes leftover after parsing attributes in process `syz.3.249'.
[  131.931060][ T2055] ieee802154 phy0 wpan0: encryption failed: -22
[  131.932865][ T2055] ieee802154 phy1 wpan1: encryption failed: -22
[  131.968943][ T4970] udc-core: couldn't find an available UDC or it's busy
[  131.970932][ T4970] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  132.045951][ T4980] loop2: detected capacity change from 0 to 128
[  132.150370][ T4982] udc-core: couldn't find an available UDC or it's busy
[  132.155967][ T4982] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  132.741112][ T4982] udc-core: couldn't find an available UDC or it's busy
[  132.743448][ T4982] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  135.482142][ T5003] udc-core: couldn't find an available UDC or it's busy
[  135.484131][ T5003] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  135.490372][ T5003] loop3: detected capacity change from 0 to 256
[  135.544955][ T5003] exfat: Deprecated parameter 'utf8'
[  135.546619][ T5003] exfat: Unknown parameter 'zero_size_dir'
[  135.882041][ T5017] loop4: detected capacity change from 0 to 512
[  136.141589][ T5017] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2228: inode #15: comm syz.4.271: corrupted in-inode xattr
[  136.166724][ T5017] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.271: couldn't read orphan inode 15 (err -117)
[  136.180787][ T5017] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  140.044393][ T5052] netlink: 28 bytes leftover after parsing attributes in process `syz.0.278'.
[  142.021733][ T5069] loop4: detected capacity change from 0 to 512
[  142.390201][ T5082] xt_CT: You must specify a L4 protocol and not use inversions on it
[  143.536498][ T5069] EXT4-fs (loop4): 1 orphan inode deleted
[  143.538232][ T5069] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  146.228782][ T5119] delete_channel: no stack
[  147.331239][ T5126] Bluetooth: received HCILL_WAKE_UP_IND in state 2
[  148.097160][ T4244] Bluetooth: hci5: Frame reassembly failed (-84)
[  150.130708][ T4071] Bluetooth: hci5: command 0x1003 tx timeout
[  150.150796][ T4027] Bluetooth: hci5: sending frame failed (-49)
[  152.344084][   T21] Bluetooth: hci5: command 0x1001 tx timeout
[  152.345788][ T4027] Bluetooth: hci5: sending frame failed (-49)
[  152.883688][ T5190] capability: warning: `syz.1.315' uses deprecated v2 capabilities in a way that may be insecure
[  154.503314][   T21] Bluetooth: hci5: command 0x1009 tx timeout
[  160.171592][ T5314] udc-core: couldn't find an available UDC or it's busy
[  160.173478][ T5314] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  160.216714][ T5314] loop4: detected capacity change from 0 to 256
[  160.223954][ T5314] exfat: Deprecated parameter 'utf8'
[  160.225500][ T5314] exfat: Unknown parameter 'zero_size_dir'
[  163.901635][   T13] Bluetooth: hci0: command 0x0406 tx timeout
[  163.903398][   T13] Bluetooth: hci2: command 0x0406 tx timeout
[  163.905068][   T13] Bluetooth: hci1: command 0x0406 tx timeout
[  163.906667][   T13] Bluetooth: hci3: command 0x0406 tx timeout
[  168.787193][ T5383] udc-core: couldn't find an available UDC or it's busy
[  168.789112][ T5383] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  168.801161][ T5383] loop3: detected capacity change from 0 to 256
[  168.901157][ T5383] exfat: Deprecated parameter 'utf8'
[  168.903362][ T5383] exfat: Unknown parameter 'zero_size_dir'
[  177.745705][ T5453] udc-core: couldn't find an available UDC or it's busy
[  177.749845][ T5453] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  177.783497][ T5453] loop4: detected capacity change from 0 to 256
[  177.843447][ T5453] exfat: Deprecated parameter 'utf8'
[  177.844938][ T5453] exfat: Unknown parameter 'zero_size_dir'
[  183.818245][ T5515] loop4: detected capacity change from 0 to 128
[  184.973453][ T5523] loop4: detected capacity change from 0 to 4096
[  185.070126][ T5523] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  185.180884][ T5527] tipc: Started in network mode
[  185.183212][ T5527] tipc: Node identity ac14140f, cluster identity 4711
[  185.189664][ T5527] tipc: New replicast peer: 255.255.255.255
[  185.192912][ T5527] tipc: Enabled bearer <udp:syz2>, priority 10
[  186.347353][ T1535] tipc: Node number set to 2886997007
[  189.960756][   T13] Bluetooth: hci4: command 0x0406 tx timeout
[  190.886121][ T4034] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22.
[  192.828096][ T2055] ieee802154 phy0 wpan0: encryption failed: -22
[  192.829835][ T2055] ieee802154 phy1 wpan1: encryption failed: -22
[  197.451384][ T5163] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  197.959864][ T5163] usb 1-1: Using ep0 maxpacket: 16
[  198.151129][ T5163] usb 1-1: config 0 has an invalid interface number: 126 but max is 0
[  198.162717][ T5163] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  198.169804][ T5163] usb 1-1: config 0 has no interface number 0
[  198.180936][ T5163] usb 1-1: config 0 interface 126 altsetting 0 has an invalid endpoint with address 0xB7, skipping
[  198.209780][ T5163] usb 1-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64
[  198.220838][ T5163] usb 1-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  198.226780][ T5163] usb 1-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[  198.231015][ T5163] usb 1-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  198.248339][ T5163] usb 1-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88
[  198.254618][ T5163] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.688686][ T5163] usb 1-1: config 0 descriptor??
[  198.701805][ T5668] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  198.851457][ T5163] snd-usb-audio: probe of 1-1:0.126 failed with error -2
[  200.237799][ T5695] udevd[5695]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.126/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  201.013178][ T4072] usb 1-1: USB disconnect, device number 4
[  205.739678][ T5738] udc-core: couldn't find an available UDC or it's busy
[  205.771822][ T5738] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  205.792648][ T5738] loop4: detected capacity change from 0 to 256
[  205.798854][ T5738] exfat: Deprecated parameter 'utf8'
[  205.800324][ T5738] exfat: Unknown parameter 'zero_size_dir'
[  212.355256][ T5802] xt_l2tp: wrong L2TP version: 0
[  218.184415][ T5841] loop3: detected capacity change from 0 to 4096
[  218.317773][ T5841] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  220.107800][ T5852] loop4: detected capacity change from 0 to 1024
[  221.338439][ T5852] EXT4-fs (loop4): Ignoring removed nobh option
[  221.340423][ T5852] EXT4-fs (loop4): Ignoring removed bh option
[  221.342155][ T5852] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  221.553608][ T5852] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[  221.582051][ T4032] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22.
[  224.375841][ T5886] loop3: detected capacity change from 0 to 1024
[  224.441645][ T5886] EXT4-fs (loop3): Ignoring removed nobh option
[  224.443239][ T5886] EXT4-fs (loop3): Ignoring removed bh option
[  224.451681][ T5886] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  224.721373][ T5886] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[  231.784315][ T5952] loop3: detected capacity change from 0 to 1024
[  232.039987][ T5952] EXT4-fs (loop3): Ignoring removed nobh option
[  232.042384][ T5952] EXT4-fs (loop3): Ignoring removed bh option
[  232.044019][ T5952] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  232.193801][ T5952] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[  232.713687][ T5967] xt_l2tp: wrong L2TP version: 0
[  235.923389][ T5994] loop3: detected capacity change from 0 to 1024
[  235.957833][ T5994] EXT4-fs (loop3): Ignoring removed nobh option
[  235.969450][ T5994] EXT4-fs (loop3): Ignoring removed bh option
[  235.980222][ T5994] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  236.209539][ T5994] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[  236.237211][ T6010] loop4: detected capacity change from 0 to 256
[  236.442996][ T6013] xt_l2tp: wrong L2TP version: 0
[  237.143280][ T6010] exfat: Deprecated parameter 'utf8'
[  237.144786][ T6010] exfat: Unknown parameter 'zero_size_dir'
[  241.069060][ T6051] loop4: detected capacity change from 0 to 1024
[  242.180787][ T6051] EXT4-fs (loop4): Ignoring removed nobh option
[  242.182593][ T6051] EXT4-fs (loop4): Ignoring removed bh option
[  242.184288][ T6051] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  242.251166][ T6051] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[  242.334269][ T6068] xt_l2tp: wrong L2TP version: 0
[  245.198191][ T6082] netlink: 16 bytes leftover after parsing attributes in process `syz.1.563'.
[  248.631158][ T6105] binder: 6093:6105 ioctl c0306201 0 returned -14
[  248.810851][ T6105] binder: 6093:6105 unknown command 1074553619
[  248.812681][ T6105] binder: 6093:6105 ioctl c0306201 20000640 returned -22
[  250.041651][ T6115] loop3: detected capacity change from 0 to 1024
[  250.292300][ T6120] netlink: 16 bytes leftover after parsing attributes in process `syz.4.576'.
[  251.799810][ T6115] EXT4-fs (loop3): Ignoring removed nobh option
[  251.813296][ T6115] EXT4-fs (loop3): Ignoring removed bh option
[  251.815852][ T6115] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  253.055168][ T6115] EXT4-fs: error -4 creating inode table initialization thread
[  253.061602][ T6115] EXT4-fs (loop3): mount failed
[  254.365960][ T2055] ieee802154 phy0 wpan0: encryption failed: -22
[  254.375632][ T2055] ieee802154 phy1 wpan1: encryption failed: -22
[  255.495731][ T6157] xt_l2tp: wrong L2TP version: 0
[  256.020375][ T6166] loop3: detected capacity change from 0 to 1024
[  256.170096][ T6166] EXT4-fs (loop3): Ignoring removed nobh option
[  256.172216][ T6166] EXT4-fs (loop3): Ignoring removed bh option
[  256.173883][ T6166] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  256.882151][ T6166] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[  257.378991][ T6187] syz.0.593 uses obsolete (PF_INET,SOCK_PACKET)
[  258.280677][   T13] Bluetooth: hci5: command 0x0409 tx timeout
[  259.099408][ T6170] chnl_net:caif_netlink_parms(): no params data found
[  260.134549][ T6170] bridge0: port 1(bridge_slave_0) entered blocking state
[  260.136557][ T6170] bridge0: port 1(bridge_slave_0) entered disabled state
[  260.150145][ T6170] device bridge_slave_0 entered promiscuous mode
[  260.170836][ T6170] bridge0: port 2(bridge_slave_1) entered blocking state
[  260.221396][ T6170] bridge0: port 2(bridge_slave_1) entered disabled state
[  260.905136][ T6170] device bridge_slave_1 entered promiscuous mode
[  260.959991][ T4114] Bluetooth: hci5: command 0x041b tx timeout
[  263.211774][   T13] Bluetooth: hci5: command 0x040f tx timeout
[  264.312413][ T6170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  264.399312][ T4359] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  264.634135][ T6170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  264.757410][ T6257] netlink: 16 bytes leftover after parsing attributes in process `syz.3.611'.
[  264.822319][ T4359] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  264.849720][ T6170] team0: Port device team_slave_0 added
[  264.855103][ T6170] team0: Port device team_slave_1 added
[  265.240677][ T4114] Bluetooth: hci5: command 0x0419 tx timeout
[  265.308304][ T6170] batman_adv: batadv0: Adding interface: batadv_slave_0
[  265.310266][ T6170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  265.332602][ T6170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  265.351566][ T6170] batman_adv: batadv0: Adding interface: batadv_slave_1
[  265.353441][ T6170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  265.366230][ T6170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  265.383157][ T4359] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  267.307504][ T6281] loop3: detected capacity change from 0 to 512
[  267.394238][ T6170] device hsr_slave_0 entered promiscuous mode
[  267.418639][ T6281] EXT4-fs (loop3): orphan cleanup on readonly fs
[  267.441022][ T6170] device hsr_slave_1 entered promiscuous mode
[  268.830689][ T6170] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  268.832786][ T6170] Cannot create hsr debugfs directory
[  268.851713][ T4359] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.855774][ T6281] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.618: bg 0: block 248: padding at end of block bitmap is not set
[  268.887883][ T6281] __quota_error: 7 callbacks suppressed
[  268.887894][ T6281] Quota error (device loop3): write_blk: dquota write failed
[  268.924959][ T6281] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  268.927660][ T6281] EXT4-fs error (device loop3): ext4_acquire_dquot:6204: comm syz.3.618: Failed to acquire dquot type 1
[  268.992564][ T6281] EXT4-fs (loop3): 1 truncate cleaned up
[  269.044761][ T6281] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  269.135871][ T6281] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback.
[  269.297029][ T6170] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  269.313059][ T6300] loop3: detected capacity change from 0 to 1024
[  269.345936][ T6170] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  269.350071][ T6300] EXT4-fs (loop3): Ignoring removed nobh option
[  269.352194][ T6300] EXT4-fs (loop3): Ignoring removed bh option
[  269.354850][ T6300] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  269.372987][ T6170] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  269.413534][ T6170] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  269.426259][ T6300] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[  270.403391][ T6170] 8021q: adding VLAN 0 to HW filter on device bond0
[  270.421423][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  270.430313][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  270.451566][ T6170] 8021q: adding VLAN 0 to HW filter on device team0
[  270.464714][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  270.467624][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  270.470247][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state
[  270.472538][ T4188] bridge0: port 1(bridge_slave_0) entered forwarding state
[  270.488382][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  270.499028][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  270.506775][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  270.515156][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state
[  270.517136][ T4188] bridge0: port 2(bridge_slave_1) entered forwarding state
[  270.524748][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  270.550385][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  270.558705][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  270.569686][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  270.575011][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  270.587714][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  270.593151][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  270.779502][  T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  270.782397][  T429] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  270.787775][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  270.793799][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  270.798157][ T6170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  272.471063][ T6170] 8021q: adding VLAN 0 to HW filter on device batadv0
[  272.491398][  T336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  272.513869][  T336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  273.011247][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  273.042716][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  273.094863][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  273.098749][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  273.124408][ T6170] device veth0_vlan entered promiscuous mode
[  273.127990][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  273.137703][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  273.282909][ T6170] device veth1_vlan entered promiscuous mode
[  273.425297][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  273.429344][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  273.459482][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  273.479741][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  273.511846][ T6170] device veth0_macvtap entered promiscuous mode
[  273.546057][ T6170] device veth1_macvtap entered promiscuous mode
[  273.760761][ T6170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  273.771075][ T6170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  273.773760][ T6170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  273.779666][ T6170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  273.790801][ T6170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  273.801507][ T6170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  273.804003][ T6170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  273.806808][ T6170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  273.819637][ T6170] batman_adv: batadv0: Interface activated: batadv_slave_0
[  273.830827][  T429] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  273.843197][  T429] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  273.850925][  T429] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  273.871199][  T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  274.051025][ T6170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  274.053941][ T6170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  274.056533][ T6170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  274.059192][ T6170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  274.080640][ T6170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  274.083362][ T6170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  274.085955][ T6170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  274.088618][ T6170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  274.100659][ T6170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  274.103528][ T6170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  274.107129][ T6170] batman_adv: batadv0: Interface activated: batadv_slave_1
[  274.109654][  T429] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  274.112736][  T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  274.118509][ T6170] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  274.140915][ T6170] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  274.143409][ T6170] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  274.145613][ T6170] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  274.262026][ T4359] device hsr_slave_0 left promiscuous mode
[  274.301909][ T4359] device hsr_slave_1 left promiscuous mode
[  274.371171][ T4359] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  274.373261][ T4359] batman_adv: batadv0: Removing interface: batadv_slave_0
[  274.376257][ T4359] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  274.381103][ T4359] batman_adv: batadv0: Removing interface: batadv_slave_1
[  274.397612][ T4359] device bridge_slave_1 left promiscuous mode
[  274.400412][ T4359] bridge0: port 2(bridge_slave_1) entered disabled state
[  274.629680][ T4359] device bridge_slave_0 left promiscuous mode
[  274.635971][ T4359] bridge0: port 1(bridge_slave_0) entered disabled state
[  275.340999][ T4359] device veth1_macvtap left promiscuous mode
[  275.343287][ T4359] device veth0_macvtap left promiscuous mode
[  275.345068][ T4359] device veth1_vlan left promiscuous mode
[  275.346701][ T4359] device veth0_vlan left promiscuous mode
[  275.738460][ T6414] loop3: detected capacity change from 0 to 512
[  275.743241][ T4359] team0 (unregistering): Port device team_slave_1 removed
[  275.766392][ T4359] team0 (unregistering): Port device team_slave_0 removed
[  275.778128][ T6414] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2228: inode #15: comm syz.3.642: corrupted in-inode xattr
[  275.790958][ T6414] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.642: couldn't read orphan inode 15 (err -117)
[  275.797455][ T6414] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  275.806387][ T4359] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  275.918804][ T4359] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  276.309648][ T4359] bond0 (unregistering): Released all slaves
[  276.526734][  T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  276.528994][  T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  276.567712][  T336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  276.569882][  T336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  276.631025][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  276.635312][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  279.043570][ T6436] loop5: detected capacity change from 0 to 1024
[  279.439248][ T6443] xt_l2tp: wrong L2TP version: 0
[  279.448843][ T6436] EXT4-fs (loop5): Ignoring removed nobh option
[  279.451070][ T6436] EXT4-fs (loop5): Ignoring removed bh option
[  279.462255][ T6436] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  279.526067][ T6436] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[  280.096182][ T6460] loop3: detected capacity change from 0 to 256
[  280.189618][ T6460] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  280.469064][ T6460] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512
[  280.472666][ T6460] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  280.474811][ T6460] UDF-fs: Scanning with blocksize 512 failed
[  280.491166][ T6460] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  280.507279][ T6460] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[  280.509980][ T6460] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[  280.521106][ T6460] UDF-fs: Scanning with blocksize 1024 failed
[  280.528095][ T6460] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  280.535112][ T6460] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512
[  280.537868][ T6460] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  280.550789][ T6460] UDF-fs: Scanning with blocksize 2048 failed
[  280.556623][ T6460] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  280.572794][ T6460] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512
[  280.582098][ T6460] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  280.584260][ T6460] UDF-fs: Scanning with blocksize 4096 failed
[  280.594102][ T6460] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1)
[  286.475895][ T6520] xt_l2tp: wrong L2TP version: 0
[  288.539840][ T6545] bridge0: port 2(bridge_slave_1) entered disabled state
[  289.368688][ T6560] udc-core: couldn't find an available UDC or it's busy
[  289.370581][ T6560] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  289.634028][ T6564] binder: 6557:6564 ERROR: BC_REGISTER_LOOPER called without request
[  289.636736][ T6564] binder: 6557:6564 Acquire 1 refcount change on invalid ref 0 ret -22
[  291.420976][ T6583] xt_l2tp: wrong L2TP version: 0
[  299.368029][ T6637] xt_l2tp: wrong L2TP version: 0
[  310.284951][ T6697] xt_l2tp: wrong L2TP version: 0
[  312.092355][ T6721] loop4: detected capacity change from 0 to 1024
[  312.148109][ T6721] EXT4-fs (loop4): Ignoring removed nobh option
[  312.150112][ T6721] EXT4-fs (loop4): Ignoring removed bh option
[  312.167824][ T6721] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  313.360179][ T6721] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[  314.442164][ T6747] udc-core: couldn't find an available UDC or it's busy
[  314.444111][ T6747] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  314.475172][ T6747] loop3: detected capacity change from 0 to 256
[  314.541590][ T6747] exfat: Deprecated parameter 'utf8'
[  314.543119][ T6747] exfat: Unknown parameter 'zero_size_dir'
[  315.401505][ T2055] ieee802154 phy0 wpan0: encryption failed: -22
[  315.403190][ T2055] ieee802154 phy1 wpan1: encryption failed: -22
[  315.571250][ T6755] xt_l2tp: wrong L2TP version: 0
[  317.912498][    T7] Bluetooth: hci1: command 0x0409 tx timeout
[  318.666127][ T6756] chnl_net:caif_netlink_parms(): no params data found
[  319.960657][    T7] Bluetooth: hci1: command 0x041b tx timeout
[  320.277856][ T6819] xt_l2tp: wrong L2TP version: 0
[  320.305210][ T6756] bridge0: port 1(bridge_slave_0) entered blocking state
[  320.307326][ T6756] bridge0: port 1(bridge_slave_0) entered disabled state
[  320.319797][ T6756] device bridge_slave_0 entered promiscuous mode
[  320.329442][ T6756] bridge0: port 2(bridge_slave_1) entered blocking state
[  320.331883][ T6756] bridge0: port 2(bridge_slave_1) entered disabled state
[  320.334489][ T6756] device bridge_slave_1 entered promiscuous mode
[  320.490438][ T6756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  320.512439][ T6756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  320.536762][ T6756] team0: Port device team_slave_0 added
[  320.540538][ T6756] team0: Port device team_slave_1 added
[  320.576052][ T6756] batman_adv: batadv0: Adding interface: batadv_slave_0
[  321.230051][ T6756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  321.284068][ T6756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  321.295909][ T6756] batman_adv: batadv0: Adding interface: batadv_slave_1
[  321.297769][ T6756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  321.325363][ T6756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  322.353622][ T4068] Bluetooth: hci1: command 0x040f tx timeout
[  323.361714][ T6756] device hsr_slave_0 entered promiscuous mode
[  323.431346][ T6756] device hsr_slave_1 entered promiscuous mode
[  324.924989][ T4070] Bluetooth: hci1: command 0x0419 tx timeout
[  326.025346][ T6756] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  326.132380][ T6756] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  326.250728][ T6756] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  326.965901][ T6756] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  327.220804][ T6888] loop3: detected capacity change from 0 to 4096
[  327.236140][ T6888] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[  327.288336][ T6756] 8021q: adding VLAN 0 to HW filter on device bond0
[  327.315283][ T6756] 8021q: adding VLAN 0 to HW filter on device team0
[  327.349163][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  327.353056][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  327.378828][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  327.382243][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  327.395153][ T4448] bridge0: port 1(bridge_slave_0) entered blocking state
[  327.397131][ T4448] bridge0: port 1(bridge_slave_0) entered forwarding state
[  327.417210][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  327.433863][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  327.446818][ T4448] bridge0: port 2(bridge_slave_1) entered blocking state
[  327.449044][ T4448] bridge0: port 2(bridge_slave_1) entered forwarding state
[  327.482728][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  327.487935][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  327.517574][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  327.531607][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  327.539297][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  327.590278][ T6756] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  327.615303][ T6756] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  327.652745][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  327.655599][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  327.658510][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  327.681701][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  327.690289][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  327.693811][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  327.710522][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  327.732422][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  328.864411][ T6248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  328.866655][ T6248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  328.933063][ T6756] 8021q: adding VLAN 0 to HW filter on device batadv0
[  330.432333][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  330.454121][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  330.478236][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  330.492339][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  330.915612][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  331.082504][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  331.188529][ T6756] device veth0_vlan entered promiscuous mode
[  331.245103][ T6756] device veth1_vlan entered promiscuous mode
[  331.591971][ T6756] device veth0_macvtap entered promiscuous mode
[  331.594679][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  331.597523][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  331.600233][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  331.625295][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  331.960666][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  332.361404][ T6756] device veth1_macvtap entered promiscuous mode
[  332.437535][ T6756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  332.440368][ T6756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  332.480628][ T6756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  332.483522][ T6756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  332.630775][ T6756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  332.633705][ T6756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  332.636882][ T6756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  332.639672][ T6756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  333.256700][ T6756] batman_adv: batadv0: Interface activated: batadv_slave_0
[  333.273352][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  333.276486][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  333.455583][ T6756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  333.458503][ T6756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  333.473113][ T6756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  333.475850][ T6756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  333.479360][ T6756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  333.688899][ T6756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  333.946557][ T6756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  334.160874][ T6756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  334.163520][ T6756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  334.206870][ T6756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  334.349512][ T6756] batman_adv: batadv0: Interface activated: batadv_slave_1
[  334.380825][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  334.389458][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  334.935634][ T6756] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  334.938218][ T6756] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  334.942729][ T6756] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  335.162533][ T6756] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  336.260764][ T6999] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[  336.283108][ T4359] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.499728][ T7019] device macvtap1 entered promiscuous mode
[  336.507163][ T7019] device vlan0 entered promiscuous mode
[  336.523461][ T7019] device vlan0 left promiscuous mode
[  336.582495][ T4359] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.610309][ T6248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  336.615952][ T6248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  337.437284][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  337.473833][ T4359] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.538210][  T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  337.548163][  T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  337.559513][ T4359] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.750968][ T4148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  339.622902][ T7050] loop3: detected capacity change from 0 to 128
[  343.483304][ T7093] chnl_net:caif_netlink_parms(): no params data found
[  343.510135][ T7132] netlink: 4 bytes leftover after parsing attributes in process `syz.1.781'.
[  343.629901][ T7093] bridge0: port 1(bridge_slave_0) entered blocking state
[  343.641121][ T7093] bridge0: port 1(bridge_slave_0) entered disabled state
[  343.652667][ T7093] device bridge_slave_0 entered promiscuous mode
[  343.667172][ T7093] bridge0: port 2(bridge_slave_1) entered blocking state
[  343.672443][ T7093] bridge0: port 2(bridge_slave_1) entered disabled state
[  343.691426][ T7093] device bridge_slave_1 entered promiscuous mode
[  343.753838][ T7093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  343.859406][ T7093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  343.926702][ T7093] team0: Port device team_slave_0 added
[  343.944454][ T7093] team0: Port device team_slave_1 added
[  343.994195][ T7093] batman_adv: batadv0: Adding interface: batadv_slave_0
[  344.001527][ T7093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  344.026345][ T7093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  344.040815][ T7093] batman_adv: batadv0: Adding interface: batadv_slave_1
[  344.047229][ T7093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  344.061077][    T7] Bluetooth: hci5: command 0x0409 tx timeout
[  344.069912][ T7093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  344.212863][ T7093] device hsr_slave_0 entered promiscuous mode
[  344.261047][ T7093] device hsr_slave_1 entered promiscuous mode
[  344.300805][ T7093] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  344.307023][ T7093] Cannot create hsr debugfs directory
[  344.450412][ T7169] ==================================================================
[  344.452873][ T7169] BUG: KASAN: use-after-free in rose_get_neigh+0x17c/0x480
[  344.454985][ T7169] Read of size 1 at addr ffff0000e54b1030 by task syz.3.787/7169
[  344.457066][ T7169] 
[  344.457642][ T7169] CPU: 1 PID: 7169 Comm: syz.3.787 Not tainted 5.15.181-syzkaller #0
[  344.459799][ T7169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  344.462452][ T7169] Call trace:
[  344.463316][ T7169]  dump_backtrace+0x0/0x43c
[  344.464512][ T7169]  show_stack+0x2c/0x3c
[  344.465725][ T7169]  __dump_stack+0x30/0x40
[  344.466931][ T7169]  dump_stack_lvl+0xf8/0x160
[  344.468190][ T7169]  print_address_description+0x78/0x30c
[  344.469715][ T7169]  kasan_report+0xec/0x15c
[  344.470996][ T7169]  __asan_report_load1_noabort+0x44/0x50
[  344.472491][ T7169]  rose_get_neigh+0x17c/0x480
[  344.473739][ T7169]  rose_connect+0x350/0xffc
[  344.474987][ T7169]  __sys_connect+0x264/0x28c
[  344.476180][ T7169]  __arm64_sys_connect+0x7c/0x94
[  344.477483][ T7169]  invoke_syscall+0x98/0x2b8
[  344.478747][ T7169]  el0_svc_common+0x138/0x258
[  344.480007][ T7169]  do_el0_svc+0x58/0x14c
[  344.481162][ T7169]  el0_svc+0x78/0x1e0
[  344.482261][ T7169]  el0t_64_sync_handler+0xcc/0xe4
[  344.483611][ T7169]  el0t_64_sync+0x1a0/0x1a4
[  344.484808][ T7169] 
[  344.485382][ T7169] Allocated by task 7037:
[  344.486582][ T7169]  __kasan_kmalloc+0xb0/0xf0
[  344.487791][ T7169]  kmem_cache_alloc_trace+0x274/0x3fc
[  344.489193][ T7169]  rose_add_node+0x1f4/0xba4
[  344.490396][ T7169]  rose_rt_ioctl+0xa58/0xe38
[  344.491695][ T7169]  rose_ioctl+0x37c/0xd40
[  344.492940][ T7169]  sock_do_ioctl+0xf8/0x240
[  344.494159][ T7169]  sock_ioctl+0x5c8/0x87c
[  344.495297][ T7169]  __arm64_sys_ioctl+0x14c/0x1c8
[  344.496613][ T7169]  invoke_syscall+0x98/0x2b8
[  344.497849][ T7169]  el0_svc_common+0x138/0x258
[  344.499101][ T7169]  do_el0_svc+0x58/0x14c
[  344.500252][ T7169]  el0_svc+0x78/0x1e0
[  344.501340][ T7169]  el0t_64_sync_handler+0xcc/0xe4
[  344.502733][ T7169]  el0t_64_sync+0x1a0/0x1a4
[  344.503923][ T7169] 
[  344.504528][ T7169] Freed by task 7169:
[  344.505577][ T7169]  kasan_set_track+0x4c/0x84
[  344.506759][ T7169]  kasan_set_free_info+0x28/0x4c
[  344.508026][ T7169]  ____kasan_slab_free+0x118/0x164
[  344.509367][ T7169]  __kasan_slab_free+0x18/0x28
[  344.510616][ T7169]  slab_free_freelist_hook+0x128/0x1e8
[  344.512055][ T7169]  kfree+0x170/0x40c
[  344.513065][ T7169]  rose_remove_neigh+0x24c/0x2e0
[  344.514383][ T7169]  rose_rt_device_down+0x33c/0x394
[  344.515791][ T7169]  rose_device_event+0x600/0x6b4
[  344.517038][ T7169]  raw_notifier_call_chain+0xd4/0x164
[  344.518444][ T7169]  __dev_notify_flags+0x250/0x46c
[  344.519853][ T7169]  dev_change_flags+0xc8/0x154
[  344.521178][ T7169]  dev_ifsioc+0x504/0xef4
[  344.522367][ T7169]  dev_ioctl+0x4d0/0xc94
[  344.523529][ T7169]  sock_do_ioctl+0x18c/0x240
[  344.524777][ T7169]  sock_ioctl+0x5c8/0x87c
[  344.525960][ T7169]  __arm64_sys_ioctl+0x14c/0x1c8
[  344.527234][ T7169]  invoke_syscall+0x98/0x2b8
[  344.528556][ T7169]  el0_svc_common+0x138/0x258
[  344.529808][ T7169]  do_el0_svc+0x58/0x14c
[  344.530901][ T7169]  el0_svc+0x78/0x1e0
[  344.531972][ T7169]  el0t_64_sync_handler+0xcc/0xe4
[  344.533227][ T7169]  el0t_64_sync+0x1a0/0x1a4
[  344.534394][ T7169] 
[  344.535006][ T7169] Last potentially related work creation:
[  344.536386][ T7169]  kasan_save_stack+0x38/0x68
[  344.537515][ T7169]  kasan_record_aux_stack+0xcc/0x114
[  344.538853][ T7169]  insert_work+0x64/0x388
[  344.539923][ T7169]  __queue_work+0xb30/0x1054
[  344.541018][ T7169]  delayed_work_timer_fn+0x74/0x90
[  344.542270][ T7169]  call_timer_fn+0x19c/0x858
[  344.543377][ T7169]  __run_timers+0x49c/0x6c4
[  344.544571][ T7169]  run_timer_softirq+0x7c/0x114
[  344.545739][ T7169]  handle_softirqs+0x344/0xbf0
[  344.546901][ T7169]  __irq_exit_rcu+0x240/0x440
[  344.548055][ T7169]  irq_exit+0x14/0x88
[  344.549049][ T7169]  handle_domain_irq+0x14c/0x1fc
[  344.550246][ T7169]  gic_handle_irq+0x78/0x1c8
[  344.551404][ T7169] 
[  344.551943][ T7169] Second to last potentially related work creation:
[  344.553647][ T7169]  kasan_save_stack+0x38/0x68
[  344.554782][ T7169]  kasan_record_aux_stack+0xcc/0x114
[  344.556055][ T7169]  insert_work+0x64/0x388
[  344.557235][ T7169]  __queue_work+0xb30/0x1054
[  344.558476][ T7169]  delayed_work_timer_fn+0x74/0x90
[  344.559806][ T7169]  call_timer_fn+0x19c/0x858
[  344.560988][ T7169]  __run_timers+0x49c/0x6c4
[  344.562184][ T7169]  run_timer_softirq+0x7c/0x114
[  344.563529][ T7169]  handle_softirqs+0x344/0xbf0
[  344.564738][ T7169]  __irq_exit_rcu+0x240/0x440
[  344.565826][ T7169]  irq_exit+0x14/0x88
[  344.566791][ T7169]  handle_domain_irq+0x14c/0x1fc
[  344.568057][ T7169]  gic_handle_irq+0x78/0x1c8
[  344.569189][ T7169] 
[  344.569745][ T7169] The buggy address belongs to the object at ffff0000e54b1000
[  344.569745][ T7169]  which belongs to the cache kmalloc-512 of size 512
[  344.573216][ T7169] The buggy address is located 48 bytes inside of
[  344.573216][ T7169]  512-byte region [ffff0000e54b1000, ffff0000e54b1200)
[  344.576444][ T7169] The buggy address belongs to the page:
[  344.577879][ T7169] page:00000000b9ed993c refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1254b0
[  344.580457][ T7169] head:00000000b9ed993c order:2 compound_mapcount:0 compound_pincount:0
[  344.582566][ T7169] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff)
[  344.584610][ T7169] raw: 05ffc00000010200 dead000000000100 dead000000000122 ffff0000c0002600
[  344.586797][ T7169] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[  344.589035][ T7169] page dumped because: kasan: bad access detected
[  344.590879][ T7169] 
[  344.591528][ T7169] Memory state around the buggy address:
[  344.593086][ T7169]  ffff0000e54b0f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  344.595258][ T7169]  ffff0000e54b0f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  344.597453][ T7169] >ffff0000e54b1000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  344.599641][ T7169]                                      ^
[  344.601129][ T7169]  ffff0000e54b1080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  344.603347][ T7169]  ffff0000e54b1100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  344.605505][ T7169] ==================================================================
[  344.607676][ T7169] Disabling lock debugging due to kernel taint
[  344.657378][ T7093] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  344.752499][ T7093] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  344.836333][ T7093] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  344.884235][ T7093] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  345.007721][ T7093] 8021q: adding VLAN 0 to HW filter on device bond0
[  345.015221][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  345.017694][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  345.023286][ T7093] 8021q: adding VLAN 0 to HW filter on device team0
[  345.028704][ T6248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  345.033343][ T6248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  345.035904][ T6248] bridge0: port 1(bridge_slave_0) entered blocking state
[  345.037815][ T6248] bridge0: port 1(bridge_slave_0) entered forwarding state
[  345.048087][ T6248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  345.051967][ T6248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  345.054802][ T6248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  345.064044][ T6248] bridge0: port 2(bridge_slave_1) entered blocking state
[  345.066010][ T6248] bridge0: port 2(bridge_slave_1) entered forwarding state
[  345.084053][ T6248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  345.087077][ T6248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  345.089968][ T6248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  345.099427][ T6248] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  345.110353][ T6248] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  345.117998][ T6248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  345.122015][ T6248] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  345.124638][ T6248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  345.134783][ T6248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  345.137455][ T6248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  345.140208][ T6248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  345.150988][ T7093] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  345.222502][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  345.224750][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  345.228904][ T7093] 8021q: adding VLAN 0 to HW filter on device batadv0
[  345.328578][ T6248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  345.332102][ T6248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  345.372014][ T4148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  345.374916][ T4148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  345.378656][ T4148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  345.381577][ T4148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  345.385200][ T7093] device veth0_vlan entered promiscuous mode
[  345.391188][ T7093] device veth1_vlan entered promiscuous mode
[  345.422192][ T4148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  345.424743][ T4148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  345.427138][ T4148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  345.429557][ T4148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  345.438868][ T7093] device veth0_macvtap entered promiscuous mode
[  345.449124][ T7093] device veth1_macvtap entered promiscuous mode
[  345.466302][ T7093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  345.469038][ T7093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.471842][ T7093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  345.474545][ T7093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.477086][ T7093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  345.479873][ T7093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.483554][ T7093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  345.486574][ T7093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.489266][ T7093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  345.492092][ T7093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.496040][ T7093] batman_adv: batadv0: Interface activated: batadv_slave_0
[  345.498630][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  345.501847][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  345.509224][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  345.512268][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  345.527492][ T7093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  345.530372][ T7093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.533561][ T7093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  345.536603][ T7093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.539786][ T7093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  345.543874][ T7093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.546639][ T7093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  345.549428][ T7093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.552495][ T7093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  345.555345][ T7093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.558007][ T7093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  345.561217][ T7093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.566612][ T7093] batman_adv: batadv0: Interface activated: batadv_slave_1
[  345.569389][ T6248] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  345.572360][ T6248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  345.581774][ T7093] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  345.584401][ T7093] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  345.586655][ T7093] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  345.588862][ T7093] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  345.630067][ T6248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  345.633665][ T6248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  345.638521][ T6248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  345.649966][ T4358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  345.652664][ T4358] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  345.654668][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  346.138571][ T4168] Bluetooth: hci5: command 0x041b tx timeout
[  347.780985][ T4359] device hsr_slave_0 left promiscuous mode
[  347.821098][ T4359] device hsr_slave_1 left promiscuous mode
[  347.900905][ T4359] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  347.903039][ T4359] batman_adv: batadv0: Removing interface: batadv_slave_0
[  347.905558][ T4359] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  347.907543][ T4359] batman_adv: batadv0: Removing interface: batadv_slave_1
[  347.909780][ T4359] device bridge_slave_1 left promiscuous mode
[  347.911647][ T4359] bridge0: port 2(bridge_slave_1) entered disabled state
[  347.962352][ T4359] device bridge_slave_0 left promiscuous mode
[  347.964137][ T4359] bridge0: port 1(bridge_slave_0) entered disabled state
[  348.090862][ T4359] device veth1_macvtap left promiscuous mode
[  348.092511][ T4359] device veth0_macvtap left promiscuous mode
[  348.094092][ T4359] device veth1_vlan left promiscuous mode
[  348.095887][ T4359] device veth0_vlan left promiscuous mode
[  348.201099][   T21] Bluetooth: hci5: command 0x040f tx timeout
[  348.253851][ T4359] team0 (unregistering): Port device team_slave_1 removed
[  348.260228][ T4359] team0 (unregistering): Port device team_slave_0 removed
[  348.271230][ T4359] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  348.306399][ T4359] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  348.434397][ T4359] bond0 (unregistering): Released all slaves
[  350.281188][ T4169] Bluetooth: hci5: command 0x0419 tx timeout
[  350.605135][ T4359] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  350.645043][ T4359] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  350.695549][ T4359] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  350.735258][ T4359] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  353.240568][ T4359] device hsr_slave_0 left promiscuous mode
[  353.290856][ T4359] device hsr_slave_1 left promiscuous mode
[  353.390730][ T4359] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  353.392916][ T4359] batman_adv: batadv0: Removing interface: batadv_slave_0
[  353.395381][ T4359] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  353.397547][ T4359] batman_adv: batadv0: Removing interface: batadv_slave_1
[  353.399903][ T4359] device bridge_slave_1 left promiscuous mode
[  353.401755][ T4359] bridge0: port 2(bridge_slave_1) entered disabled state
[  353.441257][ T4359] device bridge_slave_0 left promiscuous mode
[  353.443037][ T4359] bridge0: port 1(bridge_slave_0) entered disabled state
[  353.570783][ T4359] device veth1_macvtap left promiscuous mode
[  353.572498][ T4359] device veth0_macvtap left promiscuous mode
[  353.574072][ T4359] device veth1_vlan left promiscuous mode
[  353.575618][ T4359] device veth0_vlan left promiscuous mode
[  353.699647][ T4359] team0 (unregistering): Port device team_slave_1 removed
[  353.706892][ T4359] team0 (unregistering): Port device team_slave_0 removed
[  353.712556][ T4359] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  353.746612][ T4359] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  353.845677][ T4359] bond0 (unregistering): Released all slaves