last executing test programs:

1m7.163176422s ago: executing program 3 (id=72):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0xfffffffb, 0x0, 0x0, 0xffffffff, 0x4f77}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffdfd, 0x2000000}}]}}}]}, 0x58}}, 0x0)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)

1m3.609592801s ago: executing program 3 (id=76):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
setrlimit(0x8, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x2})
ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000040)={0x0, 0x0})

1m2.631316547s ago: executing program 3 (id=80):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x34, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}}, 0x4000000)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x30}}, 0x0)

1m1.276422224s ago: executing program 3 (id=90):
socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x3800106, &(0x7f0000000600)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@resgid}, {@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@stripe={'stripe', 0x3d, 0x6}}, {@data_err_ignore}]}, 0x6, 0x444, &(0x7f0000000780)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f0000000140)=ANY=[], 0x1, 0x5e7, &(0x7f0000000680)="$eJzs3cFvHFcdB/DvbBxnHaTUcZM2oEpYRaoQFsl6LZGUC1AKslCFKnHgbBEnsbJJK3uL3B4gIA4Vp/4JRcj/AOJYpBxoDxzg1LNRj0jcfdtqZmfX62TrJrab3TSfjzT73ps38/b3fjM7mVkr2gDPrNWlzNxPkdWlN7bL9u7OSmd3Z+XOoJ7kTJJG0kxSlKv/nuSz5F76S7456BgpH/LpR82bn3zw8fv9VjlWs5jpb18ctt+jGcYy34+1Kk9qvPaxxzs4w4Uki8eLD05Gb+C/Y7uP+bkEAKZZkZwat34+OVvfsJfPAf274v499lPt3qQDAAAAgCfgub3sZTvnJh0HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPE3q3/8v6qUxqC+mGPz+/2y9LnX9qXZ/0gEAAAAAAAAAwAn49l72sp1zg3avqP7m/3LVuFC9fiPvZCvr2czlbGct3XSzmeUk8yMDzW6vdbuby4+wZ3vsnu0nM18AAAAAAAAA+Jr6Y1b3//4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADToEhO9YtquTCoz6cxk6SZZLbc7l7yn0H9aXZ/0gEAAADAE/DcXvaynXODdq+onvlfqJ77m3knd9PNRrrpZD3Xq+8C+k/9jd2dlc7uzsqdcnl43J/8/7HCqEZM/7uH8e98qdpiLjeyUa25nN/krXRyPY1qz9KlQTzj4/pDGVPxo9ojRna9LsuZ/6Iup8N8lZHTw4y06tjKbJw/PBOPeXQefKflNIbf/Fz4CnJ+ti7L+bw+1Tlvj5x9LxyeiWTh13++eqtz9/atG1tL0zOlI3owEysjmXjxmcpEq8rExWF7NT/Pr7KUxbyZzWzkt1lLN+tZzOtVba0+n8vX+cMz9eMDrTe/LJLZ+rj0r6KPF9PL1b7nspFf5q1cr45oK1dzNe38IK+mdeAIXxwb9+97dfder9dL4/E+9d/5bl05neRndTkdyryeH8nr6DV3vuobXbOfpYWTvzbOfKuulGfPa1N3bTz/wL8Sg0w8f3gm/lKdOFudu7c3b629/Yjv90pdlhn46TATM/Xa3qkTmdSRlOfLwjCWg2dH2ff82L7lqu/CsK/xUN/FYd+XfVJn63u4h0dqV30vju3r73dppG/c/RYAU+/s987Ozv1v7t9zH879ae7W3BvN185cO/PSbE7/8/QPZ1qnXmm8VPwtH+Z3+8//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA0W29+97ttU5nffPIlcEvER13HBUVlempTPrKBHzVrnTvvH1l6933vr9xZ+3m+s31u6+2rl1bXl6+2rpyY6OzXr9OOkoA4CTt3/RPOhIAAAAAAAAAAAAAAOCLPIn/TjzpOQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF9vq0uZuZ8iy63LrbK9u7PSKZdBfX/LZpKirPwjyWfJvfSXzI8MV3zR+3z6UfPmJx98/P7+WM1q+3+1T2IWB2JpPBDTccdrj4z31yMNVwwzs5hkoS5h4j4PAAD//6LKBsA=")
getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29)
mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000400)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc51, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x88700a, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
read$FUSE(r0, &(0x7f000000c1c0)={0x2020}, 0x2020)

58.880052827s ago: executing program 3 (id=98):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000040), &(0x7f00000000c0)=0xc)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
shutdown(r0, 0x1)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000013c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000002200)={'wlan0\x00', <r4=>0x0})
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_OPER(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x20, r6, 0x1, 0x0, 0x0, {{0x8}, {@void, @val={0xc, 0x99, {0x1}}}}}, 0x20}}, 0x0)
sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f00000003c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

52.287131172s ago: executing program 3 (id=112):
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x804810, &(0x7f0000000480), 0x1, 0x73f, &(0x7f0000000ec0)="$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")
chdir(&(0x7f0000000080)='./file0\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2b442, 0x0)
ftruncate(r0, 0x4008c0d)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2a442, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x151802, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2a442, 0x0)
fallocate(r3, 0x0, 0x0, 0x40002)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000140), 0xfea7)
io_setup(0x205, &(0x7f0000000040)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0x0, 0x0, 0x4, 0x1, 0x0, r2, &(0x7f0000000000)="02", 0x8800000}])
fallocate(r1, 0x8, 0x0, 0x40000)

51.294128657s ago: executing program 32 (id=112):
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x804810, &(0x7f0000000480), 0x1, 0x73f, &(0x7f0000000ec0)="$eJzs3M9rHOUbAPBnptmmP/L9bgQP6kGEFloonSTNpT0ZL94KhYLXGpJJCJlkQ3ZTm1iw9SzU5qIgiN49ehVK/QO8SUHBuyBa40G8rMxmk7ZxN922Sbeknw9M53nfmdnnfbqTNzuQdwN4ab1V/pNEDEXEpYiotvvTiDjcio5E3Ng8b+P+9alyS6LZvPx7Ul4WG83q9msl7f3xaF0Sr0XE3UrEmY//m7e+ujY/WRT5crs90lhYGqmvrp2dW5iczWfzxbHxC6Pnx8fPj47vWa0n37tw9PYP766v//ht49abA2eTmGjVHe3a9izRQzb/TyoxsaN/cT+S9VHS7wEAANCT8nP+oYgYaH1KrcahVgQAAAAcJM3BJgAAAHDgJdHvEQAAAAD7a+vvALbW9u7XOthufnsnIoY75R9orSGOOBKViDi2kTyyMiHZvAyeyY2bEXFnosP9l7Tvv6c3uqNtjfSL5045/0x0mn/S7fknOsw/A1vfnfCMus9/D/If6jL/Xeoxx3dfvl7pmv9mxBsDnfIn2/mTLvnf7zH/rfVPbnc71vw64lTH3z/JI7l2+X6IkZm5Ytcfrbv/nL63W/3HuuVPdq9/qcf6P9z4c77bXFLmP32i4/s/+HCunfnLe+LT9rE0Im6392V7fUeOEws/fb9b/dNd6n/c+/9Vj/X/8s3gtR5PBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJY0IoYiSbPtOE2zLOJ4RLwax9KiVm+cmamtLE6XxyKGo5LOzBX5aERUN9tJ2R5rxQ/a53a0xyPilZ+PbiadK/JsqlZM97t4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAth2PiKFI0iwi0oj4q5qmWdbvUQEAAAB7brjfAwAAAAD2ned/AAAAOPie9vk/2eNxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfapYsXy625cf/6VNmevrq6Ml+7enY6r89nCytT2VRteSmbrdVmizybqi087vWKWm1p7EKsXBtp5PXGSH117cpCbWWxcWVuYXI2v5JXnktVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPKmh1pakWUSkrThNsyzifxExHJVkZq7IRyPi/xFxr1oZLNtj/R40AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAe66+ujY/WRT5skAgeG7BRxHxAgxjl6DfMxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP1QX12bnyyKfLne75EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQX+mvSUSU26nqyaGdRw8nf1db+4j44IvLn12bbDSWx8r+P7b7G5+3+8/1Y/wAAADwUnj7SU7eek7feo4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVX11bX6yKPLlfQz6XSMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPB0/g0AAP//6H7FTw==")
chdir(&(0x7f0000000080)='./file0\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2b442, 0x0)
ftruncate(r0, 0x4008c0d)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2a442, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x151802, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2a442, 0x0)
fallocate(r3, 0x0, 0x0, 0x40002)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000140), 0xfea7)
io_setup(0x205, &(0x7f0000000040)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0x0, 0x0, 0x4, 0x1, 0x0, r2, &(0x7f0000000000)="02", 0x8800000}])
fallocate(r1, 0x8, 0x0, 0x40000)

9.317985871s ago: executing program 0 (id=247):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58)
accept4(r0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r1, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'})

9.31607024s ago: executing program 2 (id=248):
setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x800452d2, 0x0)
syz_usb_connect(0x6, 0x24, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r2], 0x50}, 0x1, 0xba01}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
socketpair(0x29, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0})
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)
sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24)

9.31543073s ago: executing program 4 (id=249):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00])

9.210737751s ago: executing program 0 (id=251):
socket$packet(0x11, 0x2, 0x300)
syz_emit_ethernet(0xfeb4, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb83b5", 0x30, 0x3a, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @param_prob={0x4, 0x1, 0x0, 0x0, {0x0, 0x6, "4aa198", 0x0, 0x3c, 0x1, @local, @ipv4={'\x00', '\xff\xff', @loopback}, [], "3be3bdbd215f67211734bfb8dfdfd6520f26362049478000000000000000653120f383a2021e52f2b4b646482011a30e137ed4a6944d28748b856308a5368c16f11c305e904a"}}}}}}}, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x50, 0x0, 0x0, 0xb35}, {0x6}]}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x68, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_CIDR={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newlink={0x20, 0x10, 0x40d, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}}, 0x20}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}})
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @loopback}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0x10001}]}, 0x58}}, 0x0)

8.305427116s ago: executing program 4 (id=252):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={[{@utf8no}, {@rodir}, {@fat=@usefree}, {@fat=@check_strict}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@numtail}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x3}}, {@shortname_win95}, {@rodir}]}, 0x26, 0x336, &(0x7f00000001c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
getdents64(r3, &(0x7f0000001dc0)=""/4113, 0x55d)

7.211298782s ago: executing program 5 (id=256):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[], 0x0, 0x40000a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000a00)={0x3, 0x0, [{0x518056eeefc34830, 0x1000, &(0x7f0000003880)=""/4096}, {0x8080000, 0x91, &(0x7f0000000740)=""/145}, {0xffff1000, 0xb8, &(0x7f00000008c0)=""/184}]})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001500)=ANY=[], 0x1c}}, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)=""/66, 0x0, &(0x7f0000002840)=""/4101})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)

6.991531893s ago: executing program 0 (id=257):
syz_mount_image$udf(&(0x7f0000000500), &(0x7f0000000ac0)='./file0\x00', 0x2004008, &(0x7f0000000080)=ANY=[@ANYRES64=0x0], 0xfe, 0x4f5, &(0x7f00000005c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
gettid()
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
rseq(0x0, 0x0, 0x0, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x28, 0x1, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000019c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file1\x00', 0x0)
open_by_handle_at(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="220000005100000005"], 0x922c3)

6.981936843s ago: executing program 1 (id=267):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r3, 0x107, 0x13, &(0x7f0000000000)=0x140049, 0x4)

6.205385187s ago: executing program 2 (id=258):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18)
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)

6.163973867s ago: executing program 5 (id=259):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15)
r2 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="a8"], 0xa8)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="6801"], 0x168)
write$FUSE_BMAP(r2, &(0x7f00000000c0)={0x18}, 0x18)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)

4.724796305s ago: executing program 2 (id=260):
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00')
r3 = memfd_create(&(0x7f00000002c0)='D\xa3\xd5Wj\x00\x00\x8b\x14\xc2\xac\x1a\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x9b\x12\x0eW\xcf\t\xb0\xa9 +H/\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2y\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xde\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4\x86\xd4\xc9\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg(\x03\xa7\x92\xe5\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xf8A\xaf\\\xaa\xf5u\xde\xfa\xa1\xc0\xf9&gR\x81.\xff\x83k\xe6\rDa\x16\xbd\x1a\xb2w\b\x00'/244, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
write(r3, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0)
r4 = dup3(r2, r3, 0x0)
fchdir(r4)
r5 = inotify_init1(0x0)
inotify_add_watch(r5, &(0x7f0000000040)='.\x00', 0x80000200)
sendfile(r0, r1, 0x0, 0x10ffff)
ioctl$TCSETS(r1, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"})

4.724620425s ago: executing program 4 (id=261):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000200)=""/148, &(0x7f00000002c0)=""/8})
r2 = dup(r1)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000001c0)={0x0, r2})
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r4 = dup(r3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000005, 0x12, r4, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)

4.704372815s ago: executing program 0 (id=262):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x3, 0x5, 0x9, 0xda, 0x0, 0x16, 0x20, 0x7e, 0x3f, 0x3, 0x7f, 0x7, 0xa0, 0x6}, 0xe)
recvmmsg(r0, 0x0, 0x0, 0x1020, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@ifindex, 0x32, 0x1, 0x85, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0]}, 0x40)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
close(0x3)

4.655127305s ago: executing program 1 (id=263):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r2 = fanotify_init(0x200, 0x0)
r3 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
r4 = dup(r3)
fanotify_mark(r2, 0x1, 0x48001059, r4, 0x0)
r5 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0)
fallocate(r5, 0x0, 0x0, 0x8)
copy_file_range(r5, 0x0, r4, 0x0, 0x3ff, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan1\x00', <r6=>0x0})
r7 = getpid()
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x24, r1, 0x1, 0x70bd2c, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_PID={0x8, 0x1c, r7}]}, 0x24}}, 0x0)

4.585153546s ago: executing program 5 (id=264):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x6, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000005640)=0x1, 0x4)
setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1000}, 0x4)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
pselect6(0x40, &(0x7f0000003780), &(0x7f00000037c0)={0x5}, &(0x7f0000003800)={0x9}, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r3, &(0x7f0000000280), 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10)
fchown(r1, 0x0, 0x0)

4.495050786s ago: executing program 2 (id=265):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x15f, 0x0)
statx(0xffffffffffffffff, 0x0, 0x7400, 0x404, 0x0)
syz_init_net_socket$ax25(0x3, 0x3, 0x1)
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
shutdown(r0, 0x0)
listen(r0, 0x101)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
r2 = accept4(r0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r2)
sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10001}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x8800)

4.409840577s ago: executing program 1 (id=266):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x4001)
sched_setaffinity(0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001439)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000000c0)=0x2050a0c)
ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x2000000b)
read(r1, 0x0, 0x0)
close(r1)
close(r0)

4.335818537s ago: executing program 0 (id=268):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffecf)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = memfd_create(&(0x7f0000000000)='P\x14\x00\x02\x00\x00\x00\x01\x00', 0x3)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3)

3.248775953s ago: executing program 1 (id=269):
r0 = socket$tipc(0x1e, 0x2, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TCFLSH(r1, 0x5457, 0x1000000000000)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000005c0)={0x40, 0x0, 0x3}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000440)="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")
sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x80)
r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYRES8=0x0, @ANYRES8=r3], 0x232)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$usbfs(&(0x7f0000000000), 0x8001ff, 0x2)

3.248028573s ago: executing program 5 (id=279):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x40000}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
add_key$fscrypt_v1(0x0, &(0x7f0000000140)={'fscrypt:', @desc2}, &(0x7f0000000180)={0x0, "eb428edff76dfb8a5421e90d9a0c27a2737bb4e15be1ac96fd5f67778dcd1136ea573155a1e92e47bf28841d0fe60cb5c38c0357e90438a34c92cba1be5695a1"}, 0x48, 0xfffffffffffffff8)
r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000280)={r3, r3, r3}, &(0x7f00000000c0)=""/83, 0x53, 0x0)

3.213097553s ago: executing program 0 (id=270):
setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x800452d2, 0x0)
syz_usb_connect(0x6, 0x24, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r2], 0x50}, 0x1, 0xba01}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
socketpair(0x29, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0})
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)
sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24)

3.202161093s ago: executing program 2 (id=271):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c034001000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0xfffc, @empty}], 0x10)
sendmmsg$inet6(r2, &(0x7f00000000c0)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000080)="8c", 0x1}], 0x1}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000280), 0x8)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r4=>0x0})
bind$can_raw(r3, &(0x7f0000000040)={0x1d, r4}, 0x37)
close(r3)
sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1d8}}, 0x0)

2.971186454s ago: executing program 4 (id=272):
socket$alg(0x26, 0x5, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r0=>0x0}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
close_range(r0, 0xffffffffffffffff, 0x0)

2.080455659s ago: executing program 5 (id=273):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x3e, 0x0, 0x0)
syz_fuse_handle_req(r1, 0x0, 0x0, 0x0)

1.163492254s ago: executing program 4 (id=274):
syz_mount_image$udf(&(0x7f0000000500), &(0x7f0000000ac0)='./file0\x00', 0x2004008, &(0x7f0000000080)=ANY=[@ANYRES64=0x0], 0xfe, 0x4f5, &(0x7f00000005c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
gettid()
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
rseq(0x0, 0x0, 0x0, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x28, 0x1, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000019c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file1\x00', 0x0)
open_by_handle_at(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="220000005100000005"], 0x922c3)

1.162823894s ago: executing program 1 (id=275):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xc8}}, 0x20050800)
sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

969.850065ms ago: executing program 5 (id=276):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='sched_process_wait\x00', r0}, 0x18)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8)
close(r2)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r3, 0x0, 0x11, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x48}, {0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
sendmmsg$inet6(r5, &(0x7f0000007e40), 0x4000000000000aa, 0x0)

79.20348ms ago: executing program 1 (id=277):
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00')
r3 = memfd_create(&(0x7f00000002c0)='D\xa3\xd5Wj\x00\x00\x8b\x14\xc2\xac\x1a\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x9b\x12\x0eW\xcf\t\xb0\xa9 +H/\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2y\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xde\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4\x86\xd4\xc9\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg(\x03\xa7\x92\xe5\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xf8A\xaf\\\xaa\xf5u\xde\xfa\xa1\xc0\xf9&gR\x81.\xff\x83k\xe6\rDa\x16\xbd\x1a\xb2w\b\x00'/244, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
write(r3, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0)
r4 = dup3(r2, r3, 0x0)
fchdir(r4)
r5 = inotify_init1(0x0)
inotify_add_watch(r5, &(0x7f0000000040)='.\x00', 0x80000200)
sendfile(r0, r1, 0x0, 0x10ffff)
ioctl$TCSETS(r1, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"})

70.90936ms ago: executing program 2 (id=278):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r2 = fanotify_init(0x200, 0x0)
r3 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
r4 = dup(r3)
fanotify_mark(r2, 0x1, 0x48001059, r4, 0x0)
r5 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0)
fallocate(r5, 0x0, 0x0, 0x8)
copy_file_range(r5, 0x0, r4, 0x0, 0x3ff, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan1\x00', <r6=>0x0})
r7 = getpid()
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x24, r1, 0x1, 0x70bd2c, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_PID={0x8, 0x1c, r7}]}, 0x24}}, 0x0)

0s ago: executing program 4 (id=280):
mq_notify(0xffffffffffffffff, 0x0)
unshare(0x68060200)
r0 = socket$inet6(0xa, 0x2, 0x0)
quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0xffffffff80000301, 0x0, 0x0)
preadv2(r0, &(0x7f0000002480)=[{&(0x7f0000000240)=""/69, 0x45}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/137, 0x89}, {&(0x7f0000000380)=""/112, 0x70}], 0x5, 0x4, 0x2b9, 0x2)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x11, @loopback, 0x4e1f, 0x0, 'ovf\x00'}, 0x2c)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000000c0)={<r2=>0x0, 0x61, "7d3f13d211e28da837670896c9eb7029a3ff84a793ade93dae9c0972ca9f66cd42c2343e552eee80d576cd1abe4f4a5f40f1a217e9119d25fb6196fec71980889fb622f90aea994fec32b20b62e6e8bd98dcc3f2b7214e7a078a6f90c9f5a201fd"}, &(0x7f0000000000)=0x69)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={r2, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e24, @private=0xa010101}, @in6={0xa, 0x4e22, 0x8, @empty, 0x6}, @in6={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x401}, @in6={0xa, 0x4e20, 0x1e, @mcast1, 0xded}]}, &(0x7f0000000200)=0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18)
sendmsg$inet(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x2, 0x4e1f, @private}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a'], 0x28}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.10.29' (ED25519) to the list of known hosts.
[   44.736009][ T4018] cgroup: Unknown subsys name 'net'
[   44.962359][ T4018] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   45.264286][ T4018] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k SSFS
[   46.617055][ T4029] chnl_net:caif_netlink_parms(): no params data found
[   46.628196][ T4033] chnl_net:caif_netlink_parms(): no params data found
[   46.634049][ T4035] chnl_net:caif_netlink_parms(): no params data found
[   46.737479][ T4033] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.738995][ T4033] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.741159][ T4033] device bridge_slave_0 entered promiscuous mode
[   46.767535][ T4033] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.769069][ T4033] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.771181][ T4033] device bridge_slave_1 entered promiscuous mode
[   46.788607][ T4029] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.790255][ T4029] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.792322][ T4029] device bridge_slave_0 entered promiscuous mode
[   46.808432][ T4029] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.809895][ T4029] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.812094][ T4029] device bridge_slave_1 entered promiscuous mode
[   46.828567][ T4033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.830487][ T4035] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.831940][ T4035] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.834115][ T4035] device bridge_slave_0 entered promiscuous mode
[   46.848935][ T4029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.853241][ T4033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.855285][ T4035] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.857597][ T4035] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.859727][ T4035] device bridge_slave_1 entered promiscuous mode
[   46.876331][ T4029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.883730][ T4038] chnl_net:caif_netlink_parms(): no params data found
[   46.893333][ T4035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.923530][ T4035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.937786][ T4029] team0: Port device team_slave_0 added
[   46.958653][ T4033] team0: Port device team_slave_0 added
[   46.967134][ T4029] team0: Port device team_slave_1 added
[   46.975030][ T4033] team0: Port device team_slave_1 added
[   46.991408][ T4035] team0: Port device team_slave_0 added
[   46.994462][ T4035] team0: Port device team_slave_1 added
[   47.026300][ T4037] chnl_net:caif_netlink_parms(): no params data found
[   47.032606][ T4033] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.034092][ T4033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.040045][ T4033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.052106][ T4029] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.053423][ T4029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.058717][ T4029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.065433][ T4033] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.067545][ T4033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.072806][ T4033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.076628][ T4035] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.078178][ T4035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.083660][ T4035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.090562][ T4035] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.092103][ T4035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.102234][ T4035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.105348][ T4029] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.106972][ T4029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.112093][ T4029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.146565][ T4038] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.148019][ T4038] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.150125][ T4038] device bridge_slave_0 entered promiscuous mode
[   47.166424][ T4038] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.167874][ T4038] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.170055][ T4038] device bridge_slave_1 entered promiscuous mode
[   47.218065][ T4035] device hsr_slave_0 entered promiscuous mode
[   47.276312][ T4035] device hsr_slave_1 entered promiscuous mode
[   47.380866][ T4038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.417815][ T4033] device hsr_slave_0 entered promiscuous mode
[   47.466307][ T4033] device hsr_slave_1 entered promiscuous mode
[   47.515982][ T4033] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   47.517838][ T4033] Cannot create hsr debugfs directory
[   47.558010][ T4029] device hsr_slave_0 entered promiscuous mode
[   47.606350][ T4029] device hsr_slave_1 entered promiscuous mode
[   47.646024][ T4029] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   47.647590][ T4029] Cannot create hsr debugfs directory
[   47.649061][ T4037] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.650566][ T4037] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.652861][ T4037] device bridge_slave_0 entered promiscuous mode
[   47.665736][ T4037] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.667407][ T4037] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.669529][ T4037] device bridge_slave_1 entered promiscuous mode
[   47.672990][ T4038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.749920][ T4038] team0: Port device team_slave_0 added
[   47.753141][ T4037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.769827][ T4038] team0: Port device team_slave_1 added
[   47.780342][ T4037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.798462][ T4038] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.799961][ T4038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.805197][ T4038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.824282][ T4038] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.825656][ T4038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.832340][ T4038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.847703][ T4037] team0: Port device team_slave_0 added
[   47.869204][ T4037] team0: Port device team_slave_1 added
[   47.977935][ T4038] device hsr_slave_0 entered promiscuous mode
[   48.016234][ T4038] device hsr_slave_1 entered promiscuous mode
[   48.075936][ T4038] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   48.077428][ T4038] Cannot create hsr debugfs directory
[   48.085418][ T4037] batman_adv: batadv0: Adding interface: batadv_slave_0
[   48.087005][ T4037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   48.092033][ T4037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   48.095930][ T4037] batman_adv: batadv0: Adding interface: batadv_slave_1
[   48.097262][ T4037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   48.102410][ T4037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.207866][ T4037] device hsr_slave_0 entered promiscuous mode
[   48.256308][ T4037] device hsr_slave_1 entered promiscuous mode
[   48.296021][ T4037] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   48.297635][ T4037] Cannot create hsr debugfs directory
[   48.356545][ T4042] Bluetooth: hci0: command 0x0409 tx timeout
[   48.363864][ T4035] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   48.410313][ T4035] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   48.435971][   T13] Bluetooth: hci1: command 0x0409 tx timeout
[   48.447877][ T4035] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   48.525945][ T4042] Bluetooth: hci4: command 0x0409 tx timeout
[   48.527298][ T4042] Bluetooth: hci3: command 0x0409 tx timeout
[   48.528655][ T4042] Bluetooth: hci2: command 0x0409 tx timeout
[   48.537723][ T4035] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   48.656958][ T4029] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   48.703679][ T4029] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   48.744004][ T4029] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   48.790362][ T4029] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   48.860773][ T4035] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.868859][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   48.872434][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   48.884346][ T4035] 8021q: adding VLAN 0 to HW filter on device team0
[   48.886841][ T4033] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   48.927841][ T4033] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   49.004754][ T4033] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   49.063408][ T4033] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   49.099120][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   49.101396][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   49.103871][  T136] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.105527][  T136] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.110839][ T4037] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   49.150533][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   49.156558][ T4037] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   49.197792][ T4037] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   49.247897][ T4037] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   49.302374][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   49.304533][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   49.309122][  T136] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.310657][  T136] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.313671][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   49.334149][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   49.348505][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   49.351058][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   49.354501][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   49.373746][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   49.377334][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   49.387008][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   49.389252][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   49.410676][ T4038] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   49.449489][ T4038] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   49.488470][ T4038] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   49.528113][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   49.530711][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   49.534714][ T4035] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   49.544448][ T4038] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   49.606397][ T4029] 8021q: adding VLAN 0 to HW filter on device bond0
[   49.644757][  T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   49.650065][  T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   49.654549][ T4029] 8021q: adding VLAN 0 to HW filter on device team0
[   49.679629][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   49.681946][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   49.683970][  T310] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.685479][  T310] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.690106][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   49.713367][ T4037] 8021q: adding VLAN 0 to HW filter on device bond0
[   49.723635][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   49.727449][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   49.729561][  T148] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.731024][  T148] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.732792][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   49.740703][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   49.760032][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   49.761998][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   49.764706][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   49.767167][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   49.770893][ T4037] 8021q: adding VLAN 0 to HW filter on device team0
[   49.782455][ T4035] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.787307][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   49.789977][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   49.809169][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   49.811283][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   49.813648][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   49.816367][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   49.818520][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   49.820596][  T136] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.822124][  T136] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.824019][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   49.840998][ T4033] 8021q: adding VLAN 0 to HW filter on device bond0
[   49.844938][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   49.848601][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   49.850924][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   49.853184][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   49.855478][  T310] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.857014][  T310] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.862694][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   49.864900][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   49.880827][ T4029] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   49.911079][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   49.913615][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   49.916626][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   49.918657][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   49.932264][ T4033] 8021q: adding VLAN 0 to HW filter on device team0
[   49.935714][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   49.945034][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   49.948530][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   49.950919][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   49.953612][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   49.979315][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   49.982272][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   49.984205][  T136] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.985858][  T136] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.988650][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   49.990948][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   49.993159][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   49.995303][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   50.009049][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   50.011001][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   50.013148][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   50.021097][ T4037] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   50.034914][ T4038] 8021q: adding VLAN 0 to HW filter on device bond0
[   50.040277][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   50.042536][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   50.044576][  T310] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.046095][  T310] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.050149][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   50.051894][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   50.053520][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   50.055671][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   50.066981][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   50.069120][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   50.071219][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   50.073557][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   50.088898][ T4035] device veth0_vlan entered promiscuous mode
[   50.104200][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   50.107261][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   50.109610][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   50.111912][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   50.114184][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   50.119585][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   50.121848][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   50.124102][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   50.127750][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   50.139143][ T4029] 8021q: adding VLAN 0 to HW filter on device batadv0
[   50.147833][ T4033] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   50.153888][  T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   50.156463][  T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   50.165153][ T4035] device veth1_vlan entered promiscuous mode
[   50.182166][ T4038] 8021q: adding VLAN 0 to HW filter on device team0
[   50.184530][  T269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   50.187485][  T269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   50.189053][  T269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   50.204729][ T4037] 8021q: adding VLAN 0 to HW filter on device batadv0
[   50.228191][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   50.230408][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   50.232627][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   50.235076][  T310] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.236630][  T310] bridge0: port 1(bridge_slave_0) entered forwarding state
[   50.246401][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   50.257792][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   50.260076][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   50.261994][  T310] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.263412][  T310] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.265346][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   50.270805][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   50.298526][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   50.305278][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   50.307785][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   50.320082][ T4035] device veth0_macvtap entered promiscuous mode
[   50.327715][ T4035] device veth1_macvtap entered promiscuous mode
[   50.341037][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   50.343199][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   50.345449][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   50.350208][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   50.352337][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   50.354788][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   50.363379][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   50.381657][ T4029] device veth0_vlan entered promiscuous mode
[   50.386175][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   50.388220][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   50.390316][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   50.392335][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   50.394267][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   50.397341][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   50.399769][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   50.403420][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   50.405668][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   50.422856][ T4033] 8021q: adding VLAN 0 to HW filter on device batadv0
[   50.430585][ T4035] batman_adv: batadv0: Interface activated: batadv_slave_0
[   50.436018][ T4039] Bluetooth: hci0: command 0x041b tx timeout
[   50.439040][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   50.441327][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   50.443530][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   50.446117][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   50.452557][ T4029] device veth1_vlan entered promiscuous mode
[   50.461391][ T4035] batman_adv: batadv0: Interface activated: batadv_slave_1
[   50.468365][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   50.470477][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   50.472592][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   50.474804][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   50.478543][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   50.480598][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   50.485053][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   50.490857][ T4035] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   50.492840][ T4035] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.494601][ T4035] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   50.497610][ T4035] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   50.514853][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   50.518020][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   50.526314][   T13] Bluetooth: hci1: command 0x041b tx timeout
[   50.541657][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   50.543996][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   50.585097][ T4037] device veth0_vlan entered promiscuous mode
[   50.593387][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   50.595566][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   50.599630][ T4079] Bluetooth: hci2: command 0x041b tx timeout
[   50.601027][ T4079] Bluetooth: hci3: command 0x041b tx timeout
[   50.602259][ T4079] Bluetooth: hci4: command 0x041b tx timeout
[   50.604223][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   50.608784][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   50.611158][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   50.613169][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   50.615161][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   50.618353][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   50.622148][ T4029] device veth0_macvtap entered promiscuous mode
[   50.642062][ T4029] device veth1_macvtap entered promiscuous mode
[   50.674447][ T4033] device veth0_vlan entered promiscuous mode
[   50.678829][ T4037] device veth1_vlan entered promiscuous mode
[   50.702030][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   50.704162][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   50.709037][ T4029] batman_adv: batadv0: Interface activated: batadv_slave_0
[   50.721921][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   50.724196][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   50.726725][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   50.728764][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   50.730915][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   50.733273][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   50.742676][ T4038] 8021q: adding VLAN 0 to HW filter on device batadv0
[   50.747800][ T4033] device veth1_vlan entered promiscuous mode
[   50.749988][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   50.752104][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   50.755335][ T4029] batman_adv: batadv0: Interface activated: batadv_slave_1
[   50.761831][ T4029] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   50.763664][ T4029] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.765369][ T4029] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   50.768607][ T4029] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   50.773422][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   50.776185][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   50.777805][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   50.779486][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   50.781835][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   50.790413][  T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.792164][  T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.804000][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   50.832024][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   50.834330][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   50.839276][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   50.842044][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   50.844465][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   50.867475][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.868094][ T4037] device veth0_macvtap entered promiscuous mode
[   50.869151][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.874212][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   50.877819][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   50.897713][ T4037] device veth1_macvtap entered promiscuous mode
[   50.952184][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   50.954508][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   50.960193][ T4033] device veth0_macvtap entered promiscuous mode
[   50.990078][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   50.992196][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   50.994135][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   51.000615][  T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   51.002225][  T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   51.005616][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   51.009380][ T4037] batman_adv: batadv0: Interface activated: batadv_slave_0
[   51.015346][ T4033] device veth1_macvtap entered promiscuous mode
[   51.018815][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   51.020918][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   51.023031][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   51.025119][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   51.028412][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   51.030638][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   51.033055][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   51.051695][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   51.053856][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   51.056825][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   51.058907][ T4105] IPVS: ovf: UDP 127.0.0.1:19999 - no destination available
[   51.058914][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   51.061753][ T4037] batman_adv: batadv0: Interface activated: batadv_slave_1
[   51.064888][ T4038] device veth0_vlan entered promiscuous mode
[   51.068454][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   51.070351][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   51.072359][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   51.075197][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   51.114374][ T4037] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   51.116437][ T4037] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   51.118366][ T4037] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   51.120299][ T4037] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   51.123751][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   51.128091][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   51.130900][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   51.133161][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   51.135643][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   51.138372][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   51.142270][ T4033] batman_adv: batadv0: Interface activated: batadv_slave_0
[   51.155362][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   51.158414][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   51.160555][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   51.162837][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   51.165187][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   51.193193][ T4038] device veth1_vlan entered promiscuous mode
[   51.203650][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   51.206545][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   51.209235][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   51.211778][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   51.213935][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   51.218654][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   51.222332][ T4033] batman_adv: batadv0: Interface activated: batadv_slave_1
[   51.251888][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   51.270181][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   51.274124][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   51.313454][ T4033] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   51.315222][ T4033] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   51.324993][ T4033] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   51.332751][ T4033] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   51.411051][  T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   51.412907][  T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   51.419722][ T1337] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   51.421792][ T1337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   51.492176][ T4038] device veth0_macvtap entered promiscuous mode
[   51.510099][ T4038] device veth1_macvtap entered promiscuous mode
[   51.569080][ T4038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   51.571203][ T4038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   51.573288][ T4038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   51.575483][ T4038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   51.579498][ T4038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   51.581564][ T4038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   51.583649][ T4038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   51.585657][ T4038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   51.597658][ T4038] batman_adv: batadv0: Interface activated: batadv_slave_0
[   51.620354][ T4038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   51.622655][ T4038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   51.625237][ T4038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   51.630842][ T4038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   51.632997][ T4038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   51.637594][ T4038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   51.639959][ T4038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   51.640313][ T1337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   51.642158][ T4038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   51.645128][ T1337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   51.648202][ T4038] batman_adv: batadv0: Interface activated: batadv_slave_1
[   51.652926][ T4038] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   51.654751][ T4038] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   51.657320][ T4038] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   51.659130][ T4038] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   51.668735][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   51.672054][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   51.674354][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   52.437146][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   52.439485][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   52.450353][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   52.453660][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   52.456448][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   52.458938][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   52.533816][   T13] Bluetooth: hci0: command 0x040f tx timeout
[   52.566780][  T269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   52.569652][  T269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   52.589807][ T4120] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9'.
[   52.616882][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   52.620614][   T13] Bluetooth: hci1: command 0x040f tx timeout
[   52.679673][ T4120] Zero length message leads to an empty skb
[   52.689383][  T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   52.691208][  T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   52.694829][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   52.700428][   T13] Bluetooth: hci4: command 0x040f tx timeout
[   52.701772][   T13] Bluetooth: hci3: command 0x040f tx timeout
[   52.703246][   T13] Bluetooth: hci2: command 0x040f tx timeout
[   52.917452][  T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   52.919266][  T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   52.921838][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   52.949986][ T4132] binder: 4130:4132 tried to acquire reference to desc 0, got 1 instead
[   52.966613][ T4132] binder: 4130:4132 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   52.969542][ T4132] binder: 4132 RLIMIT_NICE not set
[   52.970758][ T4132] binder: 4132 RLIMIT_NICE not set
[   52.971978][ T4132] binder: send failed reply for transaction 5 to 4130:4132
[   52.973810][ T4132] binder: 4130:4132 transaction 5 fd fixups failed 29201/-12, line 4507
[   53.016364][   T13] binder: undelivered TRANSACTION_COMPLETE
[   53.017731][   T13] binder: undelivered TRANSACTION_ERROR: 29201
[   53.066679][  T269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   53.068445][  T269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   53.071456][ T4118] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   54.047893][ T4137] kernel profiling enabled (shift: 17)
[   54.325182][ T4148] tipc: Started in network mode
[   54.326988][ T4148] tipc: Node identity 4, cluster identity 4711
[   54.328243][ T4148] tipc: Node number set to 4
[   54.330492][ T4145] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15'.
[   55.159256][ T3605] Bluetooth: hci0: command 0x0419 tx timeout
[   55.162008][ T3605] Bluetooth: hci1: command 0x0419 tx timeout
[   55.163236][ T3605] Bluetooth: hci2: command 0x0419 tx timeout
[   55.164532][ T3605] Bluetooth: hci3: command 0x0419 tx timeout
[   55.166040][ T3605] Bluetooth: hci4: command 0x0419 tx timeout
[   55.408874][ T4161] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19'.
[   55.426727][ T4161] netlink: 'syz.3.19': attribute type 4 has an invalid length.
[   55.428422][ T4161] netlink: 17 bytes leftover after parsing attributes in process `syz.3.19'.
[   56.783439][ T4173] binder: 4169:4173 tried to acquire reference to desc 0, got 1 instead
[   56.812135][ T4173] binder: 4169:4173 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   56.821576][ T4173] binder: 4173 RLIMIT_NICE not set
[   57.627365][ T3605] binder: undelivered TRANSACTION_COMPLETE
[   57.628795][ T3605] binder: undelivered TRANSACTION_COMPLETE
[   57.742023][ T3605] binder: undelivered transaction 11, process died.
[   57.962140][   T26] audit: type=1326 audit(57.920:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4185 comm="syz.4.26" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d8ae828 code=0x0
[   57.991429][ T4197] binder: 4196:4197 ioctl c0306201 20000240 returned -14
[   58.004629][ T4197] binder: 4196:4197 tried to acquire reference to desc 0, got 1 instead
[   58.018057][ T4197] binder: release 4196:4197 transaction 16 out, still active
[   58.055993][ T4197] binder: undelivered TRANSACTION_COMPLETE
[   58.081017][ T4072] binder: send failed reply for transaction 16, target dead
[   58.491031][ T4216] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253
[   58.492659][ T4216] PKCS7: Only support pkcs7_signedData type
[   59.338594][ T4219] binder: BINDER_SET_CONTEXT_MGR already set
[   59.340027][ T4219] binder: 4217:4219 ioctl 4018620d 20000040 returned -16
[   59.422699][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): geneve2: link becomes ready
[   59.557272][ T4231] binder: 4230:4231 tried to acquire reference to desc 0, got 1 instead
[   59.563034][ T4231] binder: 4230:4231 got transaction with invalid data ptr
[   59.569904][ T4231] binder: 4230:4231 transaction failed 29201/-14, size 6144-24 line 3186
[   59.577812][ T4106] binder: undelivered TRANSACTION_ERROR: 29201
[   59.681454][ T4223] input: syz0 as /devices/virtual/input/input2
[   60.408672][ T4238] mkiss: ax0: crc mode is auto.
[   61.606817][ T4249] netlink: 'syz.2.47': attribute type 1 has an invalid length.
[   61.655033][ T4251] binder: 4250:4251 tried to acquire reference to desc 0, got 1 instead
[   61.673877][ T3321] binder: release 4250:4251 transaction 28 out, still active
[   61.675421][ T3321] binder: undelivered TRANSACTION_COMPLETE
[   61.678608][ T3321] binder: undelivered TRANSACTION_COMPLETE
[   61.714260][ T3321] binder: undelivered transaction 27, process died.
[   61.715777][ T3321] binder: send failed reply for transaction 28, target dead
[   61.743206][ T4254] loop4: detected capacity change from 0 to 512
[   61.787051][ T4254] =======================================================
[   61.787051][ T4254] WARNING: The mand mount option has been deprecated and
[   61.787051][ T4254]          and is ignored by this kernel. Remove the mand
[   61.787051][ T4254]          option from the mount to silence this warning.
[   61.787051][ T4254] =======================================================
[   61.802108][ T4257] loop1: detected capacity change from 0 to 1024
[   61.827881][ T4254] EXT4-fs (loop4): bad s_min_extra_isize: 65535
[   61.926949][ T4234] loop0: detected capacity change from 0 to 32768
[   62.094175][ T4263] netlink: 64 bytes leftover after parsing attributes in process `syz.4.51'.
[   62.124414][ T4243] loop3: detected capacity change from 0 to 32768
[   62.139726][ T4263] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[   64.395188][ T4275] loop0: detected capacity change from 0 to 2048
[   64.596740][ T4275] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[   64.612048][ T4275] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   64.683653][ T4275] netlink: 104 bytes leftover after parsing attributes in process `syz.0.55'.
[   66.415797][    C0] sched: RT throttling activated
[   66.594646][ T4294] loop0: detected capacity change from 0 to 1024
[   66.624936][ T4297] device vlan2 entered promiscuous mode
[   67.994757][ T4303] netlink: 'syz.2.65': attribute type 10 has an invalid length.
[   68.892873][ T4303] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   69.760799][    T7] cfg80211: failed to load regulatory.db
[   69.821518][ T4317] loop4: detected capacity change from 0 to 512
[   69.997940][ T2055] ieee802154 phy0 wpan0: encryption failed: -22
[   69.999428][ T2055] ieee802154 phy1 wpan1: encryption failed: -22
[   70.030143][ T4317] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   70.861214][ T4317] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #3: comm syz.4.71: corrupted inode contents
[   70.873604][ T4317] EXT4-fs error (device loop4): ext4_dirty_inode:6010: inode #3: comm syz.4.71: mark_inode_dirty error
[   70.888933][ T4317] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #3: comm syz.4.71: corrupted inode contents
[   70.896720][ T4317] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #3: comm syz.4.71: mark_inode_dirty error
[   70.905748][ T4317] Quota error (device loop4): write_blk: dquota write failed
[   70.917153][ T4317] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[   70.919147][ T4317] EXT4-fs error (device loop4): ext4_acquire_dquot:6197: comm syz.4.71: Failed to acquire dquot type 0
[   71.013151][ T4317] EXT4-fs (loop4): 1 orphan inode deleted
[   71.014365][ T4317] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   75.944061][ T4377] loop3: detected capacity change from 0 to 512
[   75.968878][ T4373] loop0: detected capacity change from 0 to 1024
[   75.979027][ T4377] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   76.169621][ T4375] 9pnet: p9_errstr2errno: server reported unknown error 1844674407
[   76.181723][ T4373] EXT4-fs (loop0): Ignoring removed orlov option
[   76.183079][ T4373] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[   76.193273][ T4377] EXT4-fs (loop3): 1 orphan inode deleted
[   76.194444][ T4377] EXT4-fs (loop3): 1 truncate cleaned up
[   76.195582][ T4377] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000008,resgid=0x0000000000000000,errors=remount-ro,min_batch_time=0x0000000000000007,noload,journal_dev=0x0000000000000003,stripe=0x0000000000000006,data_err=ignore,. Quota mode: none.
[   77.084917][ T4373] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none.
[   78.320393][ T4033] EXT4-fs error (device loop3): __ext4_iget:4872: inode #11: block 524051: comm syz-executor: invalid block
[   78.356433][ T4033] EXT4-fs (loop3): Remounting filesystem read-only
[   78.358108][ T4033] EXT4-fs error (device loop3): __ext4_iget:4872: inode #11: block 524051: comm syz-executor: invalid block
[   78.366664][ T4033] EXT4-fs (loop3): Remounting filesystem read-only
[   80.367055][ T4421] loop1: detected capacity change from 0 to 256
[   80.390824][ T4421] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[   80.394348][ T4421] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[   80.410859][ T4421] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[   80.412470][ T4421] UDF-fs: Scanning with blocksize 512 failed
[   80.416750][ T4421] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[   80.502339][ T4421] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   86.843865][ T4476] loop2: detected capacity change from 0 to 512
[   86.863730][ T4391] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.934813][ T4476] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[   86.957083][ T4391] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.965426][ T4478] process 'syz.1.119' launched './file1' with NULL argv: empty string added
[   87.086001][ T4484] loop4: detected capacity change from 0 to 512
[   87.096643][ T4484] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   87.157473][ T4484] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.121: bad orphan inode 131083
[   87.162728][ T4476] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.116: inode #1: comm syz.2.116: iget: illegal inode #
[   87.173299][ T4484] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x000000000000003d,nolazytime,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none.
[   87.180562][ T4476] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.116: error while reading EA inode 1 err=-117
[   87.185706][ T4476] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   87.729264][ T4391] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.729482][ T4476] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.116: inode #1: comm syz.2.116: iget: illegal inode #
[   87.943313][ T4476] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.116: error while reading EA inode 1 err=-117
[   87.977560][ T4476] EXT4-fs (loop2): 1 orphan inode deleted
[   87.978796][ T4476] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000004c,minixdf,resgid=0x0000000000000000,nomblk_io_submit,usrjquota=,,errors=continue. Quota mode: none.
[   88.119305][ T4391] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.962733][ T4479] chnl_net:caif_netlink_parms(): no params data found
[   89.080026][ T4073] Bluetooth: hci1: command 0x0409 tx timeout
[   89.115608][ T4513] 9pnet_virtio: no channels available for device syz
[   89.206681][ T4479] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.215709][ T4479] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.225703][ T4479] device bridge_slave_0 entered promiscuous mode
[   89.237087][ T4479] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.240974][ T4479] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.244771][ T4479] device bridge_slave_1 entered promiscuous mode
[   89.318614][ T4479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.322631][ T4479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.107427][ T4479] team0: Port device team_slave_0 added
[   90.254878][ T4479] team0: Port device team_slave_1 added
[   90.376987][ T4479] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.378512][ T4479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.383814][ T4479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.427379][ T4548] No such timeout policy "syz0"
[   90.447357][ T4532] netlink: 'syz.0.131': attribute type 10 has an invalid length.
[   90.452241][ T4532] device syz_tun entered promiscuous mode
[   90.494588][ T4532] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   90.511607][ T4479] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.513085][ T4479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.518857][ T4479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.658090][ T4479] device hsr_slave_0 entered promiscuous mode
[   90.706202][ T4479] device hsr_slave_1 entered promiscuous mode
[   90.736145][ T4479] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   90.737776][ T4479] Cannot create hsr debugfs directory
[   91.033697][ T4540] loop1: detected capacity change from 0 to 40427
[   91.920132][ T4073] Bluetooth: hci1: command 0x041b tx timeout
[   91.970267][ T4540] F2FS-fs (loop1): invalid crc value
[   92.007668][ T4540] F2FS-fs (loop1): Found nat_bits in checkpoint
[   92.080786][ T4574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.140'.
[   92.115482][ T4540] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   92.116439][ T4574] netlink: 48 bytes leftover after parsing attributes in process `syz.2.140'.
[   92.128717][ T4479] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   92.229455][ T4479] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   92.363938][ T4479] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   93.170359][ T4479] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   93.489369][ T4479] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.563625][ T4479] 8021q: adding VLAN 0 to HW filter on device team0
[   93.586372][ T1337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   93.588646][ T1337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   93.594585][ T1337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   93.597341][ T1337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   93.599322][ T1337] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.600727][ T1337] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.602598][ T1337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   93.608809][  T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   93.610980][  T269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   93.612865][  T269] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.614260][  T269] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.719381][  T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   93.721843][  T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   93.724252][  T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   93.727868][  T269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   93.730179][  T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   93.733142][  T269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   93.735529][  T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   93.740526][  T269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   93.816606][ T4391] device hsr_slave_0 left promiscuous mode
[   93.946145][ T4391] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   93.947909][ T4391] batman_adv: batadv0: Removing interface: batadv_slave_0
[   93.950560][ T4391] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   93.952065][ T4391] batman_adv: batadv0: Removing interface: batadv_slave_1
[   93.956209][ T4073] Bluetooth: hci1: command 0x040f tx timeout
[   93.956548][ T4391] device bridge_slave_1 left promiscuous mode
[   93.959655][ T4391] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.030149][ T4391] device bridge_slave_0 left promiscuous mode
[   94.031659][ T4391] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.094714][ T4391] device hsr_slave_1 left promiscuous mode
[   94.176326][ T4391] device veth1_macvtap left promiscuous mode
[   94.177916][ T4391] device veth0_macvtap left promiscuous mode
[   94.179329][ T4391] device veth1_vlan left promiscuous mode
[   94.180640][ T4391] device veth0_vlan left promiscuous mode
[   94.502590][ T4391] team0 (unregistering): Port device team_slave_1 removed
[   94.512187][ T4391] team0 (unregistering): Port device team_slave_0 removed
[   94.523010][ T4391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   94.547460][ T4391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   94.683182][ T4391] bond0 (unregistering): Released all slaves
[   94.794542][ T4479] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   94.797616][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   94.799835][  T269] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   94.802204][  T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   94.804511][  T269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   94.934631][ T4479] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.945353][  T269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   94.947334][  T269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   95.096564][  T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   95.099041][  T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   95.111018][ T4156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   95.114558][ T4156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   95.140416][ T4156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   95.143952][ T4156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   95.148529][ T4479] device veth0_vlan entered promiscuous mode
[   95.157826][ T4479] device veth1_vlan entered promiscuous mode
[   95.192535][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   95.194678][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   95.197362][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   95.201520][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   95.213553][ T4479] device veth0_macvtap entered promiscuous mode
[   95.219008][ T4479] device veth1_macvtap entered promiscuous mode
[   95.238771][ T4479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   95.240988][ T4479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.243083][ T4479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   95.245223][ T4479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.255891][ T4479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   95.258077][ T4479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.260009][ T4479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   95.262248][ T4479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.265504][ T4479] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.271251][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   95.273418][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   95.275390][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   95.284208][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   95.289092][ T4479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.291272][ T4479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.293418][ T4479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.295637][ T4479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.301446][ T4479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.303783][ T4479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.305715][ T4479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.308315][ T4479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.311483][ T4479] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.313174][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   95.315665][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   95.330177][ T4479] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.332003][ T4479] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.333789][ T4479] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.335520][ T4479] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.392426][ T4156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.401627][ T4156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.408942][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   95.413280][ T4168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.414997][ T4168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.420205][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   95.658713][ T4657] device syzkaller0 entered promiscuous mode
[   95.699938][ T4652] tipc: Started in network mode
[   95.701142][ T4652] tipc: Node identity f7, cluster identity 4711
[   95.712727][ T4652] tipc: Node number set to 247
[   96.509687][ T4075] Bluetooth: hci1: command 0x0419 tx timeout
[   96.782479][ T4674] udc-core: couldn't find an available UDC or it's busy
[   96.784287][ T4674] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   97.995079][ T4688] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   98.306308][ T4695] binder: 4681:4695 DecRefs 0 refcount change on invalid ref 3 ret -22
[   98.308457][ T4695] binder: 4681:4695 got reply transaction with no transaction stack
[   98.310132][ T4695] binder: 4681:4695 transaction failed 29201/-71, size 0-0 line 2822
[   98.921571][ T4073] binder: undelivered TRANSACTION_ERROR: 29201
[   99.330549][ T4713] loop1: detected capacity change from 0 to 8
[   99.963787][ T4711] loop4: detected capacity change from 0 to 512
[  100.007298][ T4713] SQUASHFS error: lzo decompression failed, data probably corrupt
[  100.009210][ T4713] SQUASHFS error: Failed to read block 0x91: -5
[  100.010397][ T4713] SQUASHFS error: Unable to read metadata cache entry [8f]
[  100.011938][ T4713] SQUASHFS error: Unable to read inode 0x11f
[  100.029384][ T4711] EXT4-fs (loop4): old and new quota format mixing
[  100.293167][ T4725] binder: 4724:4725 tried to acquire reference to desc 0, got 1 instead
[  100.295668][ T4725] binder: 4724:4725 got transaction with invalid data ptr
[  100.297596][ T4725] binder: 4724:4725 transaction failed 29201/-14, size 0-4088 line 3186
[  100.356764][ T4073] binder: undelivered transaction 34, process died.
[  100.766115][ T4073] binder: undelivered TRANSACTION_COMPLETE
[  100.768023][ T4073] binder: undelivered TRANSACTION_ERROR: 29201
[  101.278749][ T4737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.166'.
[  101.452911][ T4749] loop2: detected capacity change from 0 to 512
[  101.491243][ T4753] binder: 4750:4753 tried to acquire reference to desc 0, got 1 instead
[  101.511854][ T4749] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  101.518808][ T4753] binder_alloc: 4750: binder_alloc_buf size -624 failed, no address space
[  101.520740][ T4753] binder_alloc: allocated: 16 (num: 2 largest: 8), free: 8176 (num: 1 largest: 8176)
[  101.522699][ T4753] binder: 4750:4753 transaction failed 29201/-28, size 0--626 line 3085
[  101.545591][ T4749] EXT4-fs (loop2): 1 truncate cleaned up
[  101.547487][ T4749] EXT4-fs (loop2): mounted filesystem without journal. Opts: noinit_itable,dioread_lock,noauto_da_alloc,lazytime,nombcache,max_batch_time=0x000000000000000a,,errors=continue. Quota mode: none.
[  101.589501][ T4042] binder: undelivered TRANSACTION_COMPLETE
[  101.590692][ T4042] binder: undelivered TRANSACTION_COMPLETE
[  101.591984][ T4042] binder: undelivered TRANSACTION_ERROR: 29201
[  101.605955][ T4042] binder: undelivered transaction 41, process died.
[  101.607381][ T4042] binder: undelivered transaction 40, process died.
[  101.818448][ T4758] netlink: 28 bytes leftover after parsing attributes in process `syz.0.172'.
[  101.820418][ T4758] netlink: 28 bytes leftover after parsing attributes in process `syz.0.172'.
[  101.879521][ T4758] device netdevsim0 entered promiscuous mode
[  101.919087][ T4758] device netdevsim0 left promiscuous mode
[  102.048725][ T4765] tipc: Started in network mode
[  102.049905][ T4765] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[  102.051572][ T4765] tipc: Enabled bearer <eth:team0>, priority 0
[  102.357610][ T4779] netlink: 'syz.5.167': attribute type 4 has an invalid length.
[  102.359251][ T4779] netlink: 17 bytes leftover after parsing attributes in process `syz.5.167'.
[  103.161089][ T4075] tipc: Node number set to 11578026
[  103.166952][ T4791] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  103.418976][ T4800] loop4: detected capacity change from 0 to 128
[  104.228424][ T4800] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  104.349286][ T4810] loop1: detected capacity change from 0 to 1024
[  104.435604][ T4810] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,lazytime,noblock_validity,,errors=continue. Quota mode: none.
[  104.654728][ T4820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.182'.
[  104.775332][ T4247] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  104.784049][ T4247] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 460 with error 28
[  104.792226][ T4247] EXT4-fs (loop1): This should not happen!! Data will be lost
[  104.792226][ T4247] 
[  104.796360][ T4247] EXT4-fs (loop1): Total free blocks count 0
[  104.806218][ T4247] EXT4-fs (loop1): Free/Dirty block details
[  104.807503][ T4247] EXT4-fs (loop1): free_blocks=68451041280
[  104.808690][ T4247] EXT4-fs (loop1): dirty_blocks=464
[  104.809721][ T4247] EXT4-fs (loop1): Block reservation details
[  104.810876][ T4247] EXT4-fs (loop1): i_reserved_data_blocks=29
[  104.837086][ T4833] netlink: 'syz.5.187': attribute type 10 has an invalid length.
[  104.844704][ T4833] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.852298][ T4833] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.161382][ T4833] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.162986][ T4833] bridge0: port 2(bridge_slave_1) entered forwarding state
[  105.165588][ T4833] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.167204][ T4833] bridge0: port 1(bridge_slave_0) entered forwarding state
[  105.718022][ T4833] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  105.808021][ T4846] netlink: 4 bytes leftover after parsing attributes in process `syz.5.187'.
[  105.810133][ T4846] device bridge_slave_1 left promiscuous mode
[  105.811460][ T4846] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.990412][ T4846] device bridge_slave_0 left promiscuous mode
[  105.991776][ T4846] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.023705][ T4846] bond0: (slave bridge0): Releasing backup interface
[  109.757099][ T4910] loop2: detected capacity change from 0 to 1024
[  109.770649][ T4908] binder: BINDER_SET_CONTEXT_MGR already set
[  109.779707][ T4908] binder: 4907:4908 ioctl 4018620d 200001c0 returned -16
[  109.782096][ T4908] binder: 4907:4908 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  109.785149][ T4908] binder: 4908 RLIMIT_NICE not set
[  110.580385][ T4916] binder: 4907:4916 got transaction to invalid handle, 1
[  110.582051][ T4916] binder: 4907:4916 transaction failed 29201/-22, size 0-0 line 2917
[  110.612080][ T4910] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities
[  111.086633][ T1535] binder: undelivered TRANSACTION_ERROR: 29201
[  113.367573][ T4943] netlink: 48 bytes leftover after parsing attributes in process `syz.1.211'.
[  114.120033][ T4959] loop5: detected capacity change from 0 to 256
[  114.274748][ T4970] ALSA: mixer_oss: invalid OSS volume 'u'
[  114.641824][ T4959] FAT-fs (loop5): Directory bread(block 64) failed
[  114.670126][ T4959] FAT-fs (loop5): Directory bread(block 65) failed
[  114.716364][ T4959] FAT-fs (loop5): Directory bread(block 66) failed
[  114.745340][ T4959] FAT-fs (loop5): Directory bread(block 67) failed
[  114.773388][ T4959] FAT-fs (loop5): Directory bread(block 68) failed
[  114.796104][ T4959] FAT-fs (loop5): Directory bread(block 69) failed
[  114.814569][ T4959] FAT-fs (loop5): Directory bread(block 70) failed
[  114.851116][ T4959] FAT-fs (loop5): Directory bread(block 71) failed
[  114.876815][ T4959] FAT-fs (loop5): Directory bread(block 72) failed
[  114.894156][ T4959] FAT-fs (loop5): Directory bread(block 73) failed
[  120.071412][ T5011] binder: 5009:5011 ioctl 4018620d 0 returned -22
[  120.124802][ T5011] loop2: detected capacity change from 0 to 256
[  120.359764][ T5014] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  120.387066][ T5014] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  122.153713][ T5031] loop1: detected capacity change from 0 to 256
[  122.236361][ T5031] FAT-fs (loop1): Directory bread(block 64) failed
[  122.238112][ T5031] FAT-fs (loop1): Directory bread(block 65) failed
[  122.239536][ T5031] FAT-fs (loop1): Directory bread(block 66) failed
[  122.240899][ T5031] FAT-fs (loop1): Directory bread(block 67) failed
[  122.242351][ T5031] FAT-fs (loop1): Directory bread(block 68) failed
[  122.253521][ T4106] kernel read not supported for file /vcs (pid: 4106 comm: kworker/0:7)
[  122.279159][ T5031] FAT-fs (loop1): Directory bread(block 69) failed
[  122.279270][ T5031] FAT-fs (loop1): Directory bread(block 70) failed
[  122.279304][ T5031] FAT-fs (loop1): Directory bread(block 71) failed
[  122.279370][ T5031] FAT-fs (loop1): Directory bread(block 72) failed
[  122.279402][ T5031] FAT-fs (loop1): Directory bread(block 73) failed
[  125.380168][ T5054] dccp_close: ABORT with 32 bytes unread
[  127.967848][ T5101] netlink: 'syz.2.248': attribute type 10 has an invalid length.
[  128.002599][ T5101] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.004386][ T5101] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.103264][ T5101] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.104832][ T5101] bridge0: port 2(bridge_slave_1) entered forwarding state
[  128.106500][ T5101] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.108017][ T5101] bridge0: port 1(bridge_slave_0) entered forwarding state
[  128.123619][ T5101] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  128.281683][ T5107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.248'.
[  128.475369][ T5107] device bridge_slave_1 left promiscuous mode
[  128.700379][ T5107] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.929199][ T5121] loop4: detected capacity change from 0 to 256
[  128.970339][ T5107] device bridge_slave_0 left promiscuous mode
[  128.971922][ T5107] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.976111][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  129.115117][ T5121] FAT-fs (loop4): Directory bread(block 64) failed
[  129.118782][ T5121] FAT-fs (loop4): Directory bread(block 65) failed
[  129.121264][ T5121] FAT-fs (loop4): Directory bread(block 66) failed
[  129.122917][ T5121] FAT-fs (loop4): Directory bread(block 67) failed
[  129.124378][ T5121] FAT-fs (loop4): Directory bread(block 68) failed
[  129.131928][ T5121] FAT-fs (loop4): Directory bread(block 69) failed
[  129.133442][ T5121] FAT-fs (loop4): Directory bread(block 70) failed
[  129.134978][ T5121] FAT-fs (loop4): Directory bread(block 71) failed
[  129.906065][ T5121] FAT-fs (loop4): Directory bread(block 72) failed
[  129.907560][ T5121] FAT-fs (loop4): Directory bread(block 73) failed
[  129.958729][ T5107] bond0: (slave bridge0): Releasing backup interface
[  130.168606][ T5115] netlink: 'syz.0.251': attribute type 5 has an invalid length.
[  131.153372][ T2055] ieee802154 phy0 wpan0: encryption failed: -22
[  131.154726][ T2055] ieee802154 phy1 wpan1: encryption failed: -22
[  132.561003][   T26] audit: type=1326 audit(132.520:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5152 comm="syz.4.261" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d8ae828 code=0x0
[  134.115172][ T5197] netlink: 'syz.0.270': attribute type 10 has an invalid length.
[  134.151416][ T5197] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.153711][ T5197] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.209977][ T5197] bridge0: port 2(bridge_slave_1) entered blocking state
[  134.211466][ T5197] bridge0: port 2(bridge_slave_1) entered forwarding state
[  134.213293][ T5197] bridge0: port 1(bridge_slave_0) entered blocking state
[  134.214662][ T5197] bridge0: port 1(bridge_slave_0) entered forwarding state
[  135.085699][ T5197] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  135.135344][ T5212] netlink: 48 bytes leftover after parsing attributes in process `syz.2.271'.
[  135.159716][ T5205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.270'.
[  135.162130][ T5205] device bridge_slave_1 left promiscuous mode
[  135.163448][ T5205] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.210118][ T5205] device bridge_slave_0 left promiscuous mode
[  135.211551][ T5205] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.060867][ T5221] loop4: detected capacity change from 0 to 256
[  136.063772][ T5205] bond0: (slave bridge0): Releasing backup interface
[  136.138490][ T5221] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  136.142802][ T5221] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[  136.175616][ T5221] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  136.181356][ T5221] UDF-fs: Scanning with blocksize 512 failed
[  136.187458][ T5221] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  136.240214][ T5221] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  137.204904][ T4901] ------------[ cut here ]------------
[  137.206150][ T4901] sysfs group 'byte_queue_limits' not found for kobject 'tx-0'
[  137.207768][ T4901] WARNING: CPU: 0 PID: 4901 at fs/sysfs/group.c:281 sysfs_remove_group+0x174/0x288
[  137.209522][ T4901] Modules linked in:
[  137.210302][ T4901] CPU: 0 PID: 4901 Comm: kbnepd bnep0 Not tainted 5.15.173-syzkaller #0
[  137.211866][ T4901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  137.213874][ T4901] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[  137.215333][ T4901] pc : sysfs_remove_group+0x174/0x288
[  137.216376][ T4901] lr : sysfs_remove_group+0x174/0x288
[  137.217408][ T4901] sp : ffff800020ad7830
[  137.218202][ T4901] x29: ffff800020ad7830 x28: 1fffe0001b29a0bb x27: 0000000000000000
[  137.219754][ T4901] x26: 0000000000000000 x25: 1fffe0001b29a088 x24: 1ffff000026d8f14
[  137.221327][ T4901] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000cf9be418
[  137.222898][ T4901] x20: ffff0000e5a29570 x19: ffff8000136c7f80 x18: 0000000000000001
[  137.224481][ T4901] x17: 0000000000000000 x16: ffff800011b4c108 x15: 00000000ffffffff
[  137.225978][ T4901] x14: ffff0000cec91b40 x13: 0000000000000001 x12: 0000000000000001
[  137.227459][ T4901] x11: 0000000000000000 x10: 0000000000000000 x9 : 9eff12e9d1ec3400
[  137.229052][ T4901] x8 : 9eff12e9d1ec3400 x7 : 0000000000000001 x6 : 0000000000000001
[  137.230835][ T4901] x5 : ffff800020ad6f98 x4 : ffff800014c405e0 x3 : ffff800008555e80
[  137.232514][ T4901] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 000000000000003c
[  137.234041][ T4901] Call trace:
[  137.234655][ T4901]  sysfs_remove_group+0x174/0x288
[  137.235589][ T4901]  netdev_queue_update_kobjects+0x388/0x404
[  137.236681][ T4901]  netdev_unregister_kobject+0x100/0x204
[  137.237763][ T4901]  unregister_netdevice_many+0x12c8/0x189c
[  137.238870][ T4901]  unregister_netdev+0x178/0x1f0
[  137.239793][ T4901]  bnep_session+0x2274/0x2424
[  137.240683][ T4901]  kthread+0x37c/0x45c
[  137.241469][ T4901]  ret_from_fork+0x10/0x20
[  137.242324][ T4901] irq event stamp: 7140
[  137.243188][ T4901] hardirqs last  enabled at (7139): [<ffff80000832c128>] __up_console_sem+0xb4/0x100
[  137.245046][ T4901] hardirqs last disabled at (7140): [<ffff800011b47794>] el1_dbg+0x24/0x80
[  137.246750][ T4901] softirqs last  enabled at (7128): [<ffff8000081b691c>] handle_softirqs+0xb88/0xdbc
[  137.248710][ T4901] softirqs last disabled at (7113): [<ffff8000081b6fb4>] __irq_exit_rcu+0x268/0x4d8
[  137.250583][ T4901] ---[ end trace 1f5870071ce02957 ]---
[  137.260624][ T4901] ==================================================================
[  137.262529][ T4901] BUG: KASAN: use-after-free in device_for_each_child+0xa8/0x174
[  137.264037][ T4901] Read of size 8 at addr ffff0000db3d1388 by task kbnepd bnep0/4901
[  137.265643][ T4901] 
[  137.266117][ T4901] CPU: 0 PID: 4901 Comm: kbnepd bnep0 Tainted: G        W         5.15.173-syzkaller #0
[  137.267958][ T4901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  137.270289][ T4901] Call trace:
[  137.271003][ T4901]  dump_backtrace+0x0/0x530
[  137.271863][ T4901]  show_stack+0x2c/0x3c
[  137.272695][ T4901]  dump_stack_lvl+0x108/0x170
[  137.273621][ T4901]  print_address_description+0x7c/0x3f0
[  137.274654][ T4901]  kasan_report+0x174/0x1e4
[  137.275529][ T4901]  __asan_report_load8_noabort+0x44/0x50
[  137.276630][ T4901]  device_for_each_child+0xa8/0x174
[  137.277666][ T4901]  pm_runtime_set_memalloc_noio+0xf0/0x210
[  137.278909][ T4901]  netdev_unregister_kobject+0x144/0x204
[  137.280091][ T4901]  unregister_netdevice_many+0x12c8/0x189c
[  137.281271][ T4901]  unregister_netdev+0x178/0x1f0
[  137.282261][ T4901]  bnep_session+0x2274/0x2424
[  137.283102][ T4901]  kthread+0x37c/0x45c
[  137.283952][ T4901]  ret_from_fork+0x10/0x20
[  137.284870][ T4901] 
[  137.285321][ T4901] Allocated by task 4479:
[  137.286184][ T4901]  ____kasan_kmalloc+0xbc/0xfc
[  137.287204][ T4901]  __kasan_kmalloc+0x10/0x1c
[  137.288117][ T4901]  __kmalloc+0x29c/0x4c8
[  137.289000][ T4901]  hci_alloc_dev_priv+0x30/0x18b0
[  137.289973][ T4901]  vhci_create_device+0xf8/0x568
[  137.290888][ T4901]  vhci_write+0x318/0x3b8
[  137.291711][ T4901]  vfs_write+0x884/0xb44
[  137.292498][ T4901]  ksys_write+0x15c/0x26c
[  137.293379][ T4901]  __arm64_sys_write+0x7c/0x90
[  137.294449][ T4901]  invoke_syscall+0x98/0x2b8
[  137.295396][ T4901]  el0_svc_common+0x138/0x258
[  137.296324][ T4901]  do_el0_svc+0x58/0x14c
[  137.297128][ T4901]  el0_svc+0x7c/0x1f0
[  137.298042][ T4901]  el0t_64_sync_handler+0x84/0xe4
[  137.299107][ T4901]  el0t_64_sync+0x1a0/0x1a4
[  137.299961][ T4901] 
[  137.300432][ T4901] Freed by task 4479:
[  137.301148][ T4901]  kasan_set_track+0x4c/0x84
[  137.302014][ T4901]  kasan_set_free_info+0x28/0x4c
[  137.302997][ T4901]  ____kasan_slab_free+0x118/0x164
[  137.304046][ T4901]  __kasan_slab_free+0x18/0x28
[  137.304978][ T4901]  slab_free_freelist_hook+0x128/0x1ec
[  137.305983][ T4901]  kfree+0x178/0x410
[  137.306727][ T4901]  hci_release_dev+0x1004/0x116c
[  137.307789][ T4901]  bt_host_release+0x70/0x88
[  137.308727][ T4901]  device_release+0x8c/0x1ac
[  137.309645][ T4901]  kobject_put+0x2c4/0x438
[  137.310623][ T4901]  put_device+0x28/0x40
[  137.311420][ T4901]  hci_free_dev+0x24/0x34
[  137.312272][ T4901]  vhci_release+0x7c/0xc4
[  137.313143][ T4901]  __fput+0x1c4/0x800
[  137.313908][ T4901]  ____fput+0x20/0x30
[  137.314695][ T4901]  task_work_run+0x130/0x1e4
[  137.315525][ T4901]  do_exit+0x670/0x20bc
[  137.316337][ T4901]  do_group_exit+0x110/0x268
[  137.317253][ T4901]  __wake_up_parent+0x0/0x60
[  137.318187][ T4901]  invoke_syscall+0x98/0x2b8
[  137.319172][ T4901]  el0_svc_common+0x138/0x258
[  137.320229][ T4901]  do_el0_svc+0x58/0x14c
[  137.321106][ T4901]  el0_svc+0x7c/0x1f0
[  137.321888][ T4901]  el0t_64_sync_handler+0x84/0xe4
[  137.323002][ T4901]  el0t_64_sync+0x1a0/0x1a4
[  137.323961][ T4901] 
[  137.324451][ T4901] Last potentially related work creation:
[  137.325759][ T4901]  kasan_save_stack+0x38/0x68
[  137.326654][ T4901]  kasan_record_aux_stack+0xd4/0x11c
[  137.327662][ T4901]  insert_work+0x64/0x394
[  137.328557][ T4901]  __queue_work+0xb84/0x114c
[  137.329542][ T4901]  queue_work_on+0xc4/0x17c
[  137.330457][ T4901]  hci_send_acl+0x7a8/0xaa4
[  137.331314][ T4901]  l2cap_do_send+0x238/0x350
[  137.332167][ T4901]  l2cap_chan_send+0x190c/0x1e5c
[  137.333173][ T4901]  l2cap_sock_sendmsg+0x184/0x2a8
[  137.334290][ T4901]  kernel_sendmsg+0x1c8/0x2a0
[  137.335215][ T4901]  bnep_session+0x1e38/0x2424
[  137.336201][ T4901]  kthread+0x37c/0x45c
[  137.337055][ T4901]  ret_from_fork+0x10/0x20
[  137.337924][ T4901] 
[  137.338394][ T4901] Second to last potentially related work creation:
[  137.339710][ T4901]  kasan_save_stack+0x38/0x68
[  137.340676][ T4901]  kasan_record_aux_stack+0xd4/0x11c
[  137.341673][ T4901]  insert_work+0x64/0x394
[  137.342481][ T4901]  __queue_work+0xb84/0x114c
[  137.343379][ T4901]  queue_work_on+0xc4/0x17c
[  137.344327][ T4901]  hci_send_acl+0x7a8/0xaa4
[  137.345175][ T4901]  l2cap_do_send+0x238/0x350
[  137.346199][ T4901]  l2cap_chan_send+0x190c/0x1e5c
[  137.347291][ T4901]  l2cap_sock_sendmsg+0x184/0x2a8
[  137.348212][ T4901]  kernel_sendmsg+0x1c8/0x2a0
[  137.349095][ T4901]  bnep_session+0x1e38/0x2424
[  137.350036][ T4901]  kthread+0x37c/0x45c
[  137.350836][ T4901]  ret_from_fork+0x10/0x20
[  137.351621][ T4901] 
[  137.352067][ T4901] The buggy address belongs to the object at ffff0000db3d0000
[  137.352067][ T4901]  which belongs to the cache kmalloc-8k of size 8192
[  137.354801][ T4901] The buggy address is located 5000 bytes inside of
[  137.354801][ T4901]  8192-byte region [ffff0000db3d0000, ffff0000db3d2000)
[  137.357339][ T4901] The buggy address belongs to the page:
[  137.358402][ T4901] page:00000000a5d7b782 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11b3d0
[  137.360361][ T4901] head:00000000a5d7b782 order:3 compound_mapcount:0 compound_pincount:0
[  137.361893][ T4901] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff)
[  137.363369][ T4901] raw: 05ffc00000010200 0000000000000000 0000000100000001 ffff0000c0002c00
[  137.365062][ T4901] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000
[  137.366772][ T4901] page dumped because: kasan: bad access detected
[  137.367995][ T4901] 
[  137.368410][ T4901] Memory state around the buggy address:
[  137.369526][ T4901]  ffff0000db3d1280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  137.371066][ T4901]  ffff0000db3d1300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  137.372615][ T4901] >ffff0000db3d1380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  137.374139][ T4901]                       ^
[  137.374925][ T4901]  ffff0000db3d1400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  137.376488][ T4901]  ffff0000db3d1480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  137.378070][ T4901] ==================================================================
[  137.379616][ T4901] Disabling lock debugging due to kernel taint
[  137.382989][ T4901] ================================================================================
[  137.384765][ T4901] UBSAN: array-index-out-of-bounds in kernel/locking/qspinlock.c:130:9
[  137.386277][ T4901] index 14089 is out of range for type 'unsigned long[8]'
[  137.387643][ T4901] CPU: 0 PID: 4901 Comm: kbnepd bnep0 Tainted: G    B   W         5.15.173-syzkaller #0
[  137.389435][ T4901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  137.391262][ T4901] Call trace:
[  137.391847][ T4901]  dump_backtrace+0x0/0x530
[  137.392713][ T4901]  show_stack+0x2c/0x3c
[  137.393493][ T4901]  dump_stack_lvl+0x108/0x170
[  137.394421][ T4901]  dump_stack+0x1c/0x58
[  137.395151][ T4901]  __ubsan_handle_out_of_bounds+0x108/0x15c
[  137.396255][ T4901]  queued_spin_lock_slowpath+0x854/0x938
[  137.397283][ T4901]  do_raw_spin_lock+0x334/0x35c
[  137.398226][ T4901]  _raw_spin_lock_irqsave+0xcc/0x14c
[  137.399215][ T4901]  klist_next+0x8c/0x2f4
[  137.400064][ T4901]  device_for_each_child+0xc0/0x174
[  137.401053][ T4901]  pm_runtime_set_memalloc_noio+0xf0/0x210
[  137.402170][ T4901]  netdev_unregister_kobject+0x144/0x204
[  137.403184][ T4901]  unregister_netdevice_many+0x12c8/0x189c
[  137.404310][ T4901]  unregister_netdev+0x178/0x1f0
[  137.405270][ T4901]  bnep_session+0x2274/0x2424
[  137.406138][ T4901]  kthread+0x37c/0x45c
[  137.406911][ T4901]  ret_from_fork+0x10/0x20
[  137.407744][ T4901] ================================================================================
[  137.409483][ T4901] Unable to handle kernel paging request at virtual address ffff800014ac7753
[  137.411137][ T4901] Mem abort info:
[  137.411852][ T4901]   ESR = 0x0000000096000047
[  137.412664][ T4901]   EC = 0x25: DABT (current EL), IL = 32 bits
[  137.413920][ T4901]   SET = 0, FnV = 0
[  137.414655][ T4901]   EA = 0, S1PTW = 0
[  137.415400][ T4901]   FSC = 0x07: level 3 translation fault
[  137.416423][ T4901] Data abort info:
[  137.417108][ T4901]   ISV = 0, ISS = 0x00000047
[  137.417963][ T4901]   CM = 0, WnR = 1
[  137.418745][ T4901] swapper pgtable: 4k pages, 48-bit VAs, pgdp=00000001ae184000
[  137.420206][ T4901] [ffff800014ac7753] pgd=100000023ffff003, p4d=100000023ffff003, pud=100000023fffe003, pmd=100000023fff9003, pte=0000000000000000
[  137.422782][ T4901] Internal error: Oops: 0000000096000047 [#1] PREEMPT SMP
[  137.424065][ T4901] Modules linked in:
[  137.424827][ T4901] CPU: 0 PID: 4901 Comm: kbnepd bnep0 Tainted: G    B   W         5.15.173-syzkaller #0
[  137.426672][ T4901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  137.428518][ T4901] pstate: 804000c5 (Nzcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[  137.429959][ T4901] pc : queued_spin_lock_slowpath+0x36c/0x938
[  137.431101][ T4901] lr : queued_spin_lock_slowpath+0x854/0x938
[  137.432182][ T4901] sp : ffff800020ad7580
[  137.433028][ T4901] x29: ffff800020ad7620 x28: 1ffff0000415aebc x27: 0000000000000000
[  137.434501][ T4901] x26: dfff800000000000 x25: ffff70000415aeb4 x24: 0000000000040000
[  137.436117][ T4901] x23: ffff800014ac7753 x22: ffff0001b418b708 x21: ffff0001b418b700
[  137.437665][ T4901] x20: ffff800014ac7730 x19: ffff0000e7546800 x18: 0000000000000002
[  137.439205][ T4901] x17: 0000000000000000 x16: ffff800011b4c108 x15: 00000000ffffffff
[  137.440811][ T4901] x14: ffff0000cec91b40 x13: 0000000000000001 x12: ffff700002e38164
[  137.442304][ T4901] x11: 0000000000000001 x10: ffff800014ac7700 x9 : 0000000000000003
[  137.443797][ T4901] x8 : 0000000000000000 x7 : 0000000000000001 x6 : 0000000000000001
[  137.445531][ T4901] x5 : ffff800020ad6c78 x4 : ffff800014c405e0 x3 : ffff80000819c3ec
[  137.447117][ T4901] x2 : 0000000000000001 x1 : 0000000000000004 x0 : ffff0001b418b708
[  137.448586][ T4901] Call trace:
[  137.449178][ T4901]  queued_spin_lock_slowpath+0x36c/0x938
[  137.450246][ T4901]  do_raw_spin_lock+0x334/0x35c
[  137.451131][ T4901]  _raw_spin_lock_irqsave+0xcc/0x14c
[  137.452138][ T4901]  klist_next+0x8c/0x2f4
[  137.452990][ T4901]  device_for_each_child+0xc0/0x174
[  137.453973][ T4901]  pm_runtime_set_memalloc_noio+0xf0/0x210
[  137.455116][ T4901]  netdev_unregister_kobject+0x144/0x204
[  137.456302][ T4901]  unregister_netdevice_many+0x12c8/0x189c
[  137.457519][ T4901]  unregister_netdev+0x178/0x1f0
[  137.458497][ T4901]  bnep_session+0x2274/0x2424
[  137.459357][ T4901]  kthread+0x37c/0x45c
[  137.460102][ T4901]  ret_from_fork+0x10/0x20
[  137.461009][ T4901] Code: aa1703e0 9417451d aa1603e0 52800081 (f90002f5) 
[  137.462407][ T4901] ---[ end trace 1f5870071ce02958 ]---
[  137.905959][ T4901] Kernel panic - not syncing: Oops: Fatal exception
[  137.907416][ T4901] SMP: stopping secondary CPUs
[  137.908360][ T4901] Kernel Offset: disabled
[  137.909212][ T4901] CPU features: 0x8,000081c1,21302e40
[  137.910218][ T4901] Memory Limit: none
[  138.367423][ T4901] Rebooting in 86400 seconds..