last executing test programs:

2m50.056654187s ago: executing program 0 (id=1):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x2}}, './file1\x00'})

2m49.687691698s ago: executing program 0 (id=6):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r3 = io_uring_setup(0x3454, &(0x7f0000000440))
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)

2m33.877197122s ago: executing program 32 (id=6):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r3 = io_uring_setup(0x3454, &(0x7f0000000440))
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)

11.663890421s ago: executing program 1 (id=684):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44880)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x4, @random="1a772955a77a", 'gre0\x00'}}, 0x1e)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)

11.103201758s ago: executing program 1 (id=688):
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x3a, 0x100008, 0x0, 0x0, 0x0, 0x3, 0x3, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfffffeff}})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
getsockopt$inet6_tcp_int(r1, 0x6, 0x12, 0x0, &(0x7f0000000380))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000040)='./bus\x00', 0x2008003, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0xfd, 0x5525, &(0x7f0000001600)="$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")

9.235023905s ago: executing program 1 (id=696):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x34ffffff)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x18000000000002a0, 0x1c, 0x0, &(0x7f00000011c0)="b9ffddc1ddcccdf175537d53888edfcef6e296510cff24fc83423368", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

7.180137538s ago: executing program 3 (id=700):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
socket(0x400000000010, 0x3, 0x0)
socket(0x15, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r1}, 0x20)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x0, @val=@perf_event={0x9}}, 0x18)
syz_emit_ethernet(0x36, &(0x7f0000000340)=ANY=[], 0x0)

7.016002493s ago: executing program 2 (id=701):
socket$packet(0x11, 0x3, 0x300)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x183001, 0x0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, 0x0, 0x40004080)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6)
write$snapshot(r0, 0x0, 0x0)

5.899320728s ago: executing program 3 (id=704):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x8000000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050)
sendmsg$NFT_BATCH(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000d80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}}, 0x0)

5.295067576s ago: executing program 2 (id=707):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbf0fe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14)
recvmmsg(r3, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0)

5.275570807s ago: executing program 1 (id=708):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
lgetxattr(0x0, &(0x7f0000000100)=@known='user.incfs.size\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8000000000000001}, 0x0)
r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000800)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}})

4.487283301s ago: executing program 4 (id=709):
gettid()
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00'})
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)

4.471433962s ago: executing program 5 (id=710):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x800000, &(0x7f0000000100)={[{@bh}, {@delalloc}, {@oldalloc}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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")
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4)
sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5)

3.380048676s ago: executing program 2 (id=711):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)

3.379645626s ago: executing program 3 (id=712):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10)
bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10)
bind$tipc(r0, 0x0, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r4, 0xffffffffffffffff, 0x0)

3.379487396s ago: executing program 4 (id=713):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17)
madvise(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x65)

3.379234416s ago: executing program 1 (id=714):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f000000bc40)='./bus\x00', 0x800000, &(0x7f0000000700)=ANY=[], 0x1, 0x700, &(0x7f00000011c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00)
ftruncate(r0, 0x100)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xfe, 0x0, 0x7fffffff}]})
close_range(r1, 0xffffffffffffffff, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r2)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
connect$inet(r3, 0x0, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x48801, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000100)}, {0x0}], 0x2)
r4 = socket$inet6(0xa, 0x3, 0x9)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000980)={{{@in=@multicast1, @in6=@dev={0xfe, 0x80, '\x00', 0x1e}, 0x4e1f, 0xfffe, 0x4e23, 0x3, 0x2}, {0x7, 0x200000004, 0x40000000007, 0xa9, 0x100000000, 0x8000001, 0x200000003, 0x9}, {0x5, 0xfffffffffffffffd, 0x6}, 0x1, 0x0, 0x1, 0x0, 0x6}, {{@in=@loopback, 0x0, 0x6c}, 0xa, @in=@loopback, 0x3502, 0x1, 0x2, 0xff, 0x9, 0x7ff}}, 0xe8)

2.860760882s ago: executing program 3 (id=715):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
r3 = socket$inet_dccp(0x2, 0x6, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000440)={'vlan1\x00', &(0x7f0000000200)=@ethtool_channels={0x1, 0xa, 0x4, 0xd, 0x2, 0x2d37, 0x6, 0x330, 0x800}})

2.26996866s ago: executing program 5 (id=716):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4)
sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

2.243022851s ago: executing program 4 (id=717):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000054f000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r0 = socket(0x10, 0x3, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff, 0x0, 0x5, 0x7fd}, 0x10)
write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe000000000000000800040001000000", 0x24)

1.803875985s ago: executing program 5 (id=718):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, 0x0, &(0x7f0000000400)})
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000040)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={'sha3-224\x00'}})

1.691948028s ago: executing program 1 (id=719):
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224"], 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
unshare(0x62040200)
r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x82)
r2 = openat$cgroup_procs(r1, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x8}]})
fcntl$lock(0xffffffffffffffff, 0x7, 0x0)
pread64(r2, &(0x7f0000000240)=""/81, 0x51, 0x2)
close_range(r3, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
socket$inet6(0x10, 0x3, 0x0)

1.347552689s ago: executing program 3 (id=720):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0})
syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x0, 0x1000, 0x1, 0x257}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd9d3, 0x100, 0x1000000, 0x35c, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x80, 0x0, 0x146, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd289, 0x80, 0x5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x1, 0x1, 0xfffffffd}}], 0x1, &(0x7f0000001000)={0x2e, 0xa, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x1, 0xbcc, 0x0, 0x0}}, 0x0)
personality(0xfe47fef9f5ff7379)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f000005b000/0x2000)=nil)
brk(0x2000000db002)
brk(0x200000ffc000)

1.193466574s ago: executing program 4 (id=721):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet(0xa, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1, 0x0, 0x0, 0x44800}, 0x0)
recvmmsg(r4, &(0x7f0000004300), 0x4000000000000e9, 0x60, 0x0)

1.192937074s ago: executing program 2 (id=722):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x0, 0x940c, 0x3002, 0x148, 0x2c0, 0x238, 0x3d8, 0x3d8, 0x238, 0x3d8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xff, 0xffffffff, 0xffffffff, 0xffffff00], [0xffffffff, 0xffffffff, 0xff000000, 0xff], 'geneve0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x84, 0x5, 0x2, 0x1d}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0x7}}, @common=@inet=@multiport={{0x50}, {0x1, 0xb, [0x4e24, 0x4e22, 0x4e21, 0x4e22, 0x4e21, 0x4e24, 0x4e21, 0x4e22, 0x4e20, 0x4e20, 0x4e23, 0x4e24, 0x4e22, 0x4e22, 0x4e21], [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x10]}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xff, 0x200, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'veth1_to_team\x00', {0x12}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$cgroup2(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x2000000, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5)
r2 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, <r3=>0x0}, &(0x7f0000000040)=0x5)
setresuid(0x0, r3, 0xee00)
openat$cgroup_ro(r1, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0)
r4 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0x5)

1.084763887s ago: executing program 2 (id=723):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r0}, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x19, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa26}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

660.6289ms ago: executing program 5 (id=724):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030212590214000600002fb96dbcf706e10500000088a8ffff86ddee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)

431.972987ms ago: executing program 5 (id=725):
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f00000000c0)=0x2, 0x4)
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000200)={[{@acl}, {@ssd}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@space_cache_v1}, {@max_inline={'max_inline', 0x3d, [0x67, 0x37, 0x32]}}, {@space_cache_v2}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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")
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x2, &(0x7f0000000340)=ANY=[@ANYBLOB="1843001b040000000000b00000f0b05dfd420000"], &(0x7f0000000080)='GPL\x00', 0x8004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x20000000}, 0x8, 0x10, &(0x7f0000000000)={0x5, 0x0, 0x0, 0xfffffffe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
socket$kcm(0x2, 0x3, 0x2)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0)
capset(0x0, 0x0)
clock_settime(0x0, 0x0)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x149442, 0x1a0)
pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
ftruncate(r1, 0xf88)

299.909591ms ago: executing program 4 (id=726):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x3c, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xe}, {0xffff, 0xffff}, {0xfff1, 0x1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xdc}, 0x0)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r8, 0xffffffffffffffff, 0x0)

154.780136ms ago: executing program 2 (id=727):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0)
r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r3, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x0, @random='\x00\x00\x00\x00\x00\a'}, 0x10)

70.923268ms ago: executing program 5 (id=728):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x11}}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x50a, &(0x7f0000001f40)="$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")
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x9, 0x0, 0x7fff0000}]})
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e1301"], 0x16)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x5}, {0x1, [{0xc9, 0x1ff}]}}}, 0x8)
ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
fdatasync(r1)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x37}, 0x24)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480))

46.700559ms ago: executing program 3 (id=729):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200))
socket$kcm(0x10, 0x2, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x98, 0x30, 0x9, 0x0, 0x0, {}, [{0x84, 0x1, [@m_bpf={0x80, 0x1, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x34, 0x4, [{0x60}, {}, {0x3}, {}, {}, {}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$video(&(0x7f0000002e00), 0x8, 0x2000)
socket$nl_rdma(0x10, 0x3, 0x14)
pipe2(&(0x7f0000000040), 0x800)
r1 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd, 0xf8, 0x0, 0x0, 0x11, 0x1})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)

0s ago: executing program 4 (id=730):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x6, @mcast2, 0x6}, 0x1c)
sendto$inet6(r3, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.84' (ED25519) to the list of known hosts.
[   28.288904][ T4314] cgroup: Unknown subsys name 'net'
[   28.516419][ T4314] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   28.782532][ T4314] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k SSFS
[   29.956474][ T4330] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   29.959044][ T4337] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   29.960553][ T4337] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   29.961965][ T4337] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   29.963299][ T4337] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   29.965524][ T4341] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   29.966877][ T4341] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   29.968054][ T4338] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   29.968149][ T4338] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   29.969564][ T4341] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   29.970601][ T4338] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   29.972007][ T4341] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   29.972750][ T4338] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   29.974846][ T4341] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   29.976335][ T4338] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   29.976585][ T4341] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   29.979009][ T4338] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   29.979165][ T4341] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   29.981639][ T4338] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   29.981925][ T4341] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   29.984186][ T4342] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   29.985172][ T4341] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   29.985577][ T4342] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   29.987628][ T4341] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   29.991892][ T4328] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   29.994692][   T47] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   30.003241][ T4343] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   30.005322][ T4342] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   30.006876][ T4343] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   30.027271][ T4343] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   30.137658][ T4327] chnl_net:caif_netlink_parms(): no params data found
[   30.157296][ T4331] chnl_net:caif_netlink_parms(): no params data found
[   30.175452][ T4334] chnl_net:caif_netlink_parms(): no params data found
[   30.181259][ T4326] chnl_net:caif_netlink_parms(): no params data found
[   30.195128][ T4339] chnl_net:caif_netlink_parms(): no params data found
[   30.205457][ T4327] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.206614][ T4327] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.208363][ T4327] device bridge_slave_0 entered promiscuous mode
[   30.210462][ T4327] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.211638][ T4327] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.213097][ T4327] device bridge_slave_1 entered promiscuous mode
[   30.218484][ T4331] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.219756][ T4331] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.221257][ T4331] device bridge_slave_0 entered promiscuous mode
[   30.232533][ T4331] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.233850][ T4331] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.235287][ T4331] device bridge_slave_1 entered promiscuous mode
[   30.242856][ T4339] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.244232][ T4339] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.245800][ T4339] device bridge_slave_0 entered promiscuous mode
[   30.247388][ T4334] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.248538][ T4334] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.249947][ T4334] device bridge_slave_0 entered promiscuous mode
[   30.260971][ T4326] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.262152][ T4326] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.263813][ T4326] device bridge_slave_0 entered promiscuous mode
[   30.267176][ T4334] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.268415][ T4334] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.269825][ T4334] device bridge_slave_1 entered promiscuous mode
[   30.274739][ T4339] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.276043][ T4339] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.277547][ T4339] device bridge_slave_1 entered promiscuous mode
[   30.280352][ T4327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.282995][ T4327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.287147][ T4326] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.288461][ T4326] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.289919][ T4326] device bridge_slave_1 entered promiscuous mode
[   30.292303][ T4331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.299232][ T4334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.301954][ T4339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.310353][ T4331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.312511][ T4334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.316774][ T4339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.327331][ T4327] team0: Port device team_slave_0 added
[   30.331006][ T4326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.335443][ T4334] team0: Port device team_slave_0 added
[   30.337091][ T4334] team0: Port device team_slave_1 added
[   30.338869][ T4327] team0: Port device team_slave_1 added
[   30.342468][ T4326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.347249][ T4331] team0: Port device team_slave_0 added
[   30.352844][ T4339] team0: Port device team_slave_0 added
[   30.354657][ T4331] team0: Port device team_slave_1 added
[   30.364676][ T4339] team0: Port device team_slave_1 added
[   30.369541][ T4334] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.370692][ T4334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.375034][ T4334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.377928][ T4326] team0: Port device team_slave_0 added
[   30.381097][ T4327] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.382200][ T4327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.389051][ T4327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.392913][ T4334] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.394360][ T4334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.398377][ T4334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.400643][ T4326] team0: Port device team_slave_1 added
[   30.401847][ T4339] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.402984][ T4339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.407185][ T4339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.409203][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.410275][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.414718][ T4331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.416751][ T4327] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.417789][ T4327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.421622][ T4327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.426987][ T4339] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.428199][ T4339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.432222][ T4339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.438649][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.439814][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.443807][ T4331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.450510][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.451673][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.456048][ T4326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.534857][ T4334] device hsr_slave_0 entered promiscuous mode
[   30.573870][ T4334] device hsr_slave_1 entered promiscuous mode
[   30.619983][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.621057][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.625683][ T4326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.674632][ T4327] device hsr_slave_0 entered promiscuous mode
[   30.713795][ T4327] device hsr_slave_1 entered promiscuous mode
[   30.763788][ T4327] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   30.765053][ T4327] Cannot create hsr debugfs directory
[   30.824667][ T4339] device hsr_slave_0 entered promiscuous mode
[   30.873805][ T4339] device hsr_slave_1 entered promiscuous mode
[   30.913647][ T4339] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   30.914897][ T4339] Cannot create hsr debugfs directory
[   30.967192][ T4331] device hsr_slave_0 entered promiscuous mode
[   31.003823][ T4331] device hsr_slave_1 entered promiscuous mode
[   31.053749][ T4331] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   31.054989][ T4331] Cannot create hsr debugfs directory
[   31.094598][ T4326] device hsr_slave_0 entered promiscuous mode
[   31.133831][ T4326] device hsr_slave_1 entered promiscuous mode
[   31.183739][ T4326] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   31.185052][ T4326] Cannot create hsr debugfs directory
[   31.295552][ T4327] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   31.348471][ T4327] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   31.384654][ T4327] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   31.424593][ T4327] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   31.475505][ T4334] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   31.530433][ T4334] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   31.564897][ T4334] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   31.596208][ T4334] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   31.639446][ T4339] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   31.686693][ T4339] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   31.744597][ T4339] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   31.790269][ T4339] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   31.857661][ T4326] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   31.899919][ T4326] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   31.934904][ T4326] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   31.966445][ T4326] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   32.039964][ T4331] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   32.077416][ T4331] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   32.083834][ T4343] Bluetooth: hci4: command 0x0409 tx timeout
[   32.084019][ T4337] Bluetooth: hci2: command 0x0409 tx timeout
[   32.084968][ T4343] Bluetooth: hci0: command 0x0409 tx timeout
[   32.085990][ T4337] Bluetooth: hci3: command 0x0409 tx timeout
[   32.087004][ T4343] Bluetooth: hci1: command 0x0409 tx timeout
[   32.127438][ T4327] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.128760][ T4331] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   32.167815][ T4339] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.170558][ T4334] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.173384][ T4331] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   32.221383][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   32.223403][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   32.228861][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   32.230280][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   32.231786][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   32.233357][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   32.238346][ T4327] 8021q: adding VLAN 0 to HW filter on device team0
[   32.241533][ T4339] 8021q: adding VLAN 0 to HW filter on device team0
[   32.246245][ T4334] 8021q: adding VLAN 0 to HW filter on device team0
[   32.250656][  T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   32.252355][  T251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   32.254076][  T251] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.255349][  T251] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.256941][  T251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   32.262535][  T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   32.265681][  T251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   32.267284][  T251] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.268411][  T251] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.269771][  T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   32.271215][  T251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   32.272705][  T251] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.273894][  T251] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.275399][  T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   32.277533][  T251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   32.279099][  T251] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.280253][  T251] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.281568][  T251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   32.282971][  T251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   32.293865][  T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   32.295418][  T251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   32.297269][  T251] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.298442][  T251] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.302568][ T4326] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.307369][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   32.313236][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   32.315324][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   32.316744][   T39] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.317806][   T39] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.319133][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   32.320826][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   32.327953][  T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   32.329590][  T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   32.331122][  T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   32.332706][  T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   32.335784][  T251] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   32.341520][ T4326] 8021q: adding VLAN 0 to HW filter on device team0
[   32.343416][  T251] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   32.345453][  T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   32.347569][  T251] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   32.349123][  T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   32.350673][  T251] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   32.352365][  T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   32.356545][  T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   32.357898][  T251] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   32.359355][  T251] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   32.361509][  T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   32.363315][  T251] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   32.371074][ T4331] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.380405][ T4327] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   32.382025][ T4327] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   32.384336][ T4339] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   32.385957][ T4339] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   32.388397][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   32.390020][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   32.391536][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   32.393163][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   32.396415][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   32.398066][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   32.399864][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   32.401486][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   32.403151][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   32.405130][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   32.411170][ T4331] 8021q: adding VLAN 0 to HW filter on device team0
[   32.412442][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   32.414505][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   32.415915][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   32.417524][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   32.419272][   T39] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.420376][   T39] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.421901][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   32.423926][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   32.425444][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   32.426819][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   32.440529][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   32.442112][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   32.443993][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   32.445465][   T39] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.446523][   T39] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.447834][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   32.449680][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   32.451309][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   32.453088][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   32.458230][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   32.459881][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   32.462032][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   32.463454][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   32.466572][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   32.468137][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   32.472201][ T4334] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   32.474735][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   32.484946][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   32.486534][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   32.488155][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   32.489722][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   32.491701][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   32.493226][   T39] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.494476][   T39] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.497743][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   32.499429][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   32.500995][   T39] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.502192][   T39] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.503523][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   32.506285][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   32.507995][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   32.511862][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   32.513897][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   32.518548][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   32.520195][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   32.521872][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   32.523527][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   32.525966][  T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   32.527962][  T251] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   32.542974][  T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   32.544677][  T251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   32.549426][  T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   32.551055][  T251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   32.554883][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   32.598102][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   32.599524][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   32.603222][ T4339] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.608152][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   32.609579][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   32.612993][ T4327] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.627474][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   32.628784][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   32.637497][ T4334] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.640528][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   32.642117][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   32.646026][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   32.647620][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   32.667838][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   32.669526][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   32.671034][ T4339] device veth0_vlan entered promiscuous mode
[   32.672416][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   32.677457][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   32.681588][ T4327] device veth0_vlan entered promiscuous mode
[   32.685503][ T4327] device veth1_vlan entered promiscuous mode
[   32.688139][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   32.689624][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   32.691128][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   32.692563][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   32.698158][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   32.703202][ T4326] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.707429][ T4339] device veth1_vlan entered promiscuous mode
[   32.723107][ T4339] device veth0_macvtap entered promiscuous mode
[   32.725324][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   32.726981][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   32.728429][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   32.729795][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   32.731025][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   32.732477][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   32.740871][ T4331] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.743053][ T4339] device veth1_macvtap entered promiscuous mode
[   32.747371][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   32.748938][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   32.750438][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   32.751829][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   32.753129][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   32.766765][ T4339] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.776152][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   32.777844][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   32.779338][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   32.780867][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   32.782450][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   32.790985][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   32.794296][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   32.795810][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   32.798084][ T4327] device veth0_macvtap entered promiscuous mode
[   32.800417][ T4327] device veth1_macvtap entered promiscuous mode
[   32.805888][ T4339] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.808176][ T4339] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.809636][ T4339] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.810945][ T4339] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.812201][ T4339] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.815571][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   32.817266][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   32.818787][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   32.820340][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   32.837898][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   32.839677][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   32.849269][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.851030][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.853142][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.856832][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   32.858443][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   32.860168][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   32.861750][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   32.863303][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   32.866640][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   32.868675][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   32.869984][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   32.871932][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   32.873326][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   32.876697][ T4334] device veth0_vlan entered promiscuous mode
[   32.877960][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.879622][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.881519][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.887103][ T4326] device veth0_vlan entered promiscuous mode
[   32.889106][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   32.890785][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   32.892416][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   32.894194][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   32.896117][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   32.897652][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   32.905662][ T4331] device veth0_vlan entered promiscuous mode
[   32.908812][ T4331] device veth1_vlan entered promiscuous mode
[   32.910438][ T4327] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.911854][ T4327] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.913249][ T4327] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.917944][ T4327] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.924821][ T4334] device veth1_vlan entered promiscuous mode
[   32.931958][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   32.933506][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   32.936166][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   32.937649][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   32.939496][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   32.947612][ T4326] device veth1_vlan entered promiscuous mode
[   32.957341][ T4389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   32.958674][ T4389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   32.960387][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   32.961950][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   32.963438][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   32.978769][ T4334] device veth0_macvtap entered promiscuous mode
[   32.984954][ T4326] device veth0_macvtap entered promiscuous mode
[   32.987739][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   32.989159][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   32.990852][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   32.992536][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   32.994887][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   32.999799][ T4334] device veth1_macvtap entered promiscuous mode
[   33.017888][ T4326] device veth1_macvtap entered promiscuous mode
[   33.021506][ T4394] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   33.022392][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   33.022721][ T4394] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   33.025953][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.029406][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   33.031125][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.033340][ T4334] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.036833][ T4389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   33.038280][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   33.039719][ T4389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   33.041112][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   33.042689][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   33.045456][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   33.046948][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   33.048542][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   33.050073][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   33.051703][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   33.054227][ T4331] device veth0_macvtap entered promiscuous mode
[   33.056432][ T4331] device veth1_macvtap entered promiscuous mode
[   33.060329][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   33.062059][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.066675][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   33.068419][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.070002][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   33.071637][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.074413][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.077529][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   33.080220][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.081746][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   33.083338][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.087947][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.091159][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   33.092782][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   33.094723][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   33.096230][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   33.097685][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   33.099264][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   33.101292][ T4331] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.102865][ T4331] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.104787][ T4331] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.106337][ T4331] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.111411][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   33.113247][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.115433][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   33.117070][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.118505][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   33.120028][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.122069][ T4334] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.137711][ T4334] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.139576][ T4334] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.140906][ T4334] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.142240][ T4334] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.147430][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   33.149048][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   33.158823][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   33.160748][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.162261][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   33.165155][ T4389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   33.166570][ T4389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   33.171281][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.173029][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   33.175687][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.177256][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   33.179047][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.181216][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.189219][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   33.190945][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   33.192786][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   33.197223][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   33.199296][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.200776][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   33.203451][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.205748][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   33.207373][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.208923][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   33.210429][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.212654][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.224245][ T4383] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   33.225714][ T4383] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   33.229125][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   33.230753][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   33.235433][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   33.245670][ T4326] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.247481][ T4326] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.249086][ T4326] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.250490][ T4326] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.257039][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   33.258416][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   33.278016][ T4383] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   33.279314][ T4383] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   33.291108][ T4383] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   33.292516][ T4383] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   33.325742][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   33.327179][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   33.328701][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   33.691728][ T4418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   33.695399][ T4418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   33.704430][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   33.732761][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   33.736209][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   33.737957][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   33.747330][ T4422] =======================================================
[   33.747330][ T4422] WARNING: The mand mount option has been deprecated and
[   33.747330][ T4422]          and is ignored by this kernel. Remove the mand
[   33.747330][ T4422]          option from the mount to silence this warning.
[   33.747330][ T4422] =======================================================
[   33.759677][ T4423] loop3: detected capacity change from 0 to 256
[   34.092368][ T4319] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   34.142630][ T4427] binder: 4426:4427 tried to acquire reference to desc 0, got 1 instead
[   34.153928][ T4342] Bluetooth: hci1: command 0x041b tx timeout
[   34.167244][ T4342] Bluetooth: hci3: command 0x041b tx timeout
[   34.167261][ T4337] Bluetooth: hci0: command 0x041b tx timeout
[   34.168311][ T4342] Bluetooth: hci2: command 0x041b tx timeout
[   34.169494][ T4343] Bluetooth: hci4: command 0x041b tx timeout
[   34.206656][ T4378] binder: release 4426:4427 transaction 5 out, still active
[   34.222986][ T4378] binder: send failed reply for transaction 5, target dead
[   34.242016][ T4433] loop1: detected capacity change from 0 to 64
[   34.289273][ T4433] hfs: request for non-existent node 131072 in B*Tree
[   34.290472][ T4433] hfs: request for non-existent node 131072 in B*Tree
[   34.296651][ T4433] hfs: request for non-existent node 131072 in B*Tree
[   34.298137][ T4433] hfs: request for non-existent node 131072 in B*Tree
[   34.301832][ T4433] hfs: request for non-existent node 131072 in B*Tree
[   34.303270][ T4433] hfs: request for non-existent node 131072 in B*Tree
[   34.307108][ T4433] hfs: request for non-existent node 131072 in B*Tree
[   34.308539][ T4433] hfs: request for non-existent node 131072 in B*Tree
[   34.310909][ T4433] hfs: request for non-existent node 131072 in B*Tree
[   34.312048][ T4433] hfs: request for non-existent node 131072 in B*Tree
[   34.317913][ T4433] hfs: request for non-existent node 131072 in B*Tree
[   34.319238][ T4433] hfs: request for non-existent node 131072 in B*Tree
[   34.326823][ T4433] hfs: request for non-existent node 12 in B*Tree
[   34.327931][ T4433] hfs: request for non-existent node 12 in B*Tree
[   34.330311][ T4433] hfs: request for non-existent node 13 in B*Tree
[   34.331355][ T4433] hfs: request for non-existent node 13 in B*Tree
[   35.397152][ T4451] loop4: detected capacity change from 0 to 256
[   35.411967][ T4451] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   35.421292][ T4451] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 0000fc00)
[   35.423446][ T4451] FAT-fs (loop4): Filesystem has been set read-only
[   35.784860][ T4451] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 0000fc00)
[   36.234228][ T4342] Bluetooth: hci4: command 0x040f tx timeout
[   36.235479][ T4342] Bluetooth: hci0: command 0x040f tx timeout
[   36.244079][ T4342] Bluetooth: hci2: command 0x040f tx timeout
[   36.244406][ T4337] Bluetooth: hci3: command 0x040f tx timeout
[   36.245529][ T4342] Bluetooth: hci1: command 0x040f tx timeout
[   36.260046][ T4468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19'.
[   36.268419][ T4468] device team1 entered promiscuous mode
[   36.269692][ T4468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19'.
[   36.271365][ T4468] team2 (uninitialized): Failed to send options change via netlink (err -105)
[   36.278488][ T4468] device team2 entered promiscuous mode
[   36.279706][ T4468] Zero length message leads to an empty skb
[   36.901030][ T4486] loop1: detected capacity change from 0 to 764
[   36.901516][ T4488] netlink: 12 bytes leftover after parsing attributes in process `syz.3.25'.
[   36.919564][ T4488] device macvlan2 entered promiscuous mode
[   37.032138][ T4490] netlink: 'syz.2.27': attribute type 1 has an invalid length.
[   37.039805][ T4490] 8021q: VLANs not supported on wg0
[   38.229457][ T4513] loop3: detected capacity change from 0 to 128
[   38.314015][ T4343] Bluetooth: hci1: command 0x0419 tx timeout
[   38.315138][ T4343] Bluetooth: hci0: command 0x0419 tx timeout
[   38.316256][ T4343] Bluetooth: hci3: command 0x0419 tx timeout
[   38.317398][ T4343] Bluetooth: hci2: command 0x0419 tx timeout
[   38.318520][ T4343] Bluetooth: hci4: command 0x0419 tx timeout
[   38.577253][ T4513] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   38.584535][ T4521] device macsec0 entered promiscuous mode
[   38.590531][ T4521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.35'.
[   38.642446][ T4521] device veth1_macvtap left promiscuous mode
[   38.769505][ T4327] EXT4-fs (loop3): unmounting filesystem.
[   39.245226][ T4521] device macsec0 left promiscuous mode
[   41.118771][ T4556] netlink: 28 bytes leftover after parsing attributes in process `syz.3.44'.
[   41.120573][ T4556] netlink: 28 bytes leftover after parsing attributes in process `syz.3.44'.
[   41.123549][ T4556] device syzkaller0 entered promiscuous mode
[   41.164709][ T4558] netlink: 24 bytes leftover after parsing attributes in process `syz.4.45'.
[   41.373039][ T4563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.46'.
[   41.677260][ T4565] device syzkaller0 entered promiscuous mode
[   41.711523][ T4567] loop3: detected capacity change from 0 to 128
[   41.759065][ T4567] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   41.766895][ T4567] EXT4-fs (loop3): shut down requested (2)
[   41.781086][ T4327] EXT4-fs (loop3): unmounting filesystem.
[   42.123496][ T4579] bridge0: port 1(bridge_slave_0) entered disabled state
[   42.126885][ T4579] bridge0: port 2(bridge_slave_1) entered disabled state
[   42.148006][ T4579] netlink: 'syz.4.52': attribute type 16 has an invalid length.
[   42.149332][ T4579] netlink: 'syz.4.52': attribute type 17 has an invalid length.
[   42.153795][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   42.155112][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   42.158261][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   42.159701][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   42.160979][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   42.162223][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   42.167442][ T4579] bridge0: port 1(bridge_slave_0) entered blocking state
[   42.168709][ T4579] bridge0: port 1(bridge_slave_0) entered forwarding state
[   42.170521][ T4579] bridge0: port 2(bridge_slave_1) entered blocking state
[   42.171616][ T4579] bridge0: port 2(bridge_slave_1) entered forwarding state
[   42.766650][ T4597] IPVS: set_ctl: invalid protocol: 92 127.0.0.1:20003
[   43.169394][ T4604] netlink: 24 bytes leftover after parsing attributes in process `syz.1.61'.
[   43.186358][ T4604] netlink: 20 bytes leftover after parsing attributes in process `syz.1.61'.
[   43.732520][ T4625] netlink: 'syz.4.67': attribute type 1 has an invalid length.
[   44.039912][ T4625] device veth0_virt_wifi entered promiscuous mode
[   44.073478][ T4630] netlink: 'syz.4.69': attribute type 1 has an invalid length.
[   44.592153][ T4643] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[   44.592153][ T4643] The task syz.1.71 (4643) triggered the difference, watch for misbehavior.
[   45.006247][ T4653] netlink: 12 bytes leftover after parsing attributes in process `syz.2.75'.
[   45.065665][ T4658] netlink: 28 bytes leftover after parsing attributes in process `syz.2.75'.
[   45.217454][ T4663] netlink: 20 bytes leftover after parsing attributes in process `syz.1.76'.
[   45.516849][ T4664] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   45.521335][ T4667] netlink: 'syz.3.79': attribute type 1 has an invalid length.
[   45.615288][ T4664] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   45.669668][ T4673] loop3: detected capacity change from 0 to 2048
[   45.685620][ T4664] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   45.710800][ T4673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   45.712923][ T4673] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   45.732144][ T4673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   45.737755][ T4673] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   45.825654][ T4664] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   48.212324][ T4686] loop1: detected capacity change from 0 to 256
[   48.221217][ T4664] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.224899][ T4664] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.227911][ T4664] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.228797][ T4686] FAT-fs (loop1): Directory bread(block 64) failed
[   48.230650][ T4686] FAT-fs (loop1): Directory bread(block 65) failed
[   48.230922][ T4664] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.231858][ T4686] FAT-fs (loop1): Directory bread(block 66) failed
[   48.236065][ T4686] FAT-fs (loop1): Directory bread(block 67) failed
[   48.237289][ T4686] FAT-fs (loop1): Directory bread(block 68) failed
[   48.238331][ T4686] FAT-fs (loop1): Directory bread(block 69) failed
[   48.239368][ T4686] FAT-fs (loop1): Directory bread(block 70) failed
[   48.240443][ T4686] FAT-fs (loop1): Directory bread(block 71) failed
[   48.241587][ T4686] FAT-fs (loop1): Directory bread(block 72) failed
[   48.242651][ T4686] FAT-fs (loop1): Directory bread(block 73) failed
[   48.294824][ T4690] sctp: [Deprecated]: syz.3.87 (pid 4690) Use of struct sctp_assoc_value in delayed_ack socket option.
[   48.294824][ T4690] Use struct sctp_sack_info instead
[   48.459289][ T4694] netlink: 'syz.3.89': attribute type 1 has an invalid length.
[   50.216327][ T4725] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[4339] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      
[   50.227726][ T4722] sched: RT throttling activated
[   50.557257][ T4343] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   50.997837][ T4343] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   50.999983][ T4343] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   51.009588][ T4343] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   51.022978][ T4343] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   51.036780][ T4343] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   51.076239][ T4732] xt_CT: No such helper "pptp"
[   51.165977][ T4736] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   51.585539][ T4714] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.591554][ T4750] netlink: 'syz.1.103': attribute type 1 has an invalid length.
[   51.604145][ T4750] 8021q: adding VLAN 0 to HW filter on device bond1
[   51.605857][ T4758] netlink: 28 bytes leftover after parsing attributes in process `syz.1.103'.
[   51.611929][ T4758] device bond1 entered promiscuous mode
[   51.637690][ T4764] bond1: (slave dummy0): making interface the new active one
[   51.639084][ T4764] device dummy0 entered promiscuous mode
[   51.640790][ T4764] bond1: (slave dummy0): Enslaving as an active interface with an up link
[   51.679921][ T4714] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.874216][ T4714] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.826729][ T4714] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.845645][ T4784] device syzkaller0 entered promiscuous mode
[   52.865677][ T4728] chnl_net:caif_netlink_parms(): no params data found
[   52.953031][ T4778] loop1: detected capacity change from 0 to 32768
[   52.986685][ T4778] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.106 (4778)
[   52.997255][ T4778] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   52.999019][ T4778] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[   53.000566][ T4778] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[   53.002143][ T4778] BTRFS info (device loop1): use zstd compression, level 3
[   53.003322][ T4778] BTRFS info (device loop1): using free space tree
[   53.356940][ T4343] Bluetooth: hci5: command 0x0409 tx timeout
[   53.368878][ T4728] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.372940][ T4728] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.374946][ T4728] device bridge_slave_0 entered promiscuous mode
[   53.377244][ T4728] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.378382][ T4728] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.379952][ T4728] device bridge_slave_1 entered promiscuous mode
[   53.389363][ T4728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.392237][ T4728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.400512][ T4728] team0: Port device team_slave_0 added
[   53.402352][ T4728] team0: Port device team_slave_1 added
[   53.410446][ T4728] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.411559][ T4728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.417945][ T4728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.431608][ T4728] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.432762][ T4728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.437568][ T4728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.450337][ T4820] binder: 4819:4820 tried to acquire reference to desc 0, got 1 instead
[   53.459078][ T4820] binder: 4819:4820 got transaction with invalid data ptr
[   53.460581][ T4820] binder: 4819:4820 transaction call to 4819:0 failed 10/29201/-14, size 0-24 line 3333
[   53.484169][ T4778] BTRFS info (device loop1): enabling ssd optimizations
[   53.495030][ T4728] device hsr_slave_0 entered promiscuous mode
[   53.533989][ T4728] device hsr_slave_1 entered promiscuous mode
[   53.553984][ T4728] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   53.555414][ T4728] Cannot create hsr debugfs directory
[   53.630557][ T4820] syz.2.112 (4820): drop_caches: 2
[   53.657460][ T4326] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   53.659770][  T111] binder: undelivered TRANSACTION_ERROR: 29201
[   54.738621][ T4845] netlink: 'syz.3.115': attribute type 4 has an invalid length.
[   54.804685][ T4848] netlink: 24 bytes leftover after parsing attributes in process `syz.1.113'.
[   54.868841][ T4852] netlink: 64 bytes leftover after parsing attributes in process `syz.3.117'.
[   54.921310][ T4728] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   55.067060][ T4728] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   55.101655][ T4728] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   56.348897][ T4343] Bluetooth: hci5: command 0x041b tx timeout
[   56.454069][ T4728] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   56.463190][ T4879] loop2: detected capacity change from 0 to 1024
[   57.397017][ T4728] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.496413][ T4728] 8021q: adding VLAN 0 to HW filter on device team0
[   58.363227][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   58.364948][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   58.368493][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   58.371291][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   58.377110][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.378330][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.384448][ T4915] netlink: 132 bytes leftover after parsing attributes in process `syz.2.126'.
[   58.391865][ T4922] netlink: 12 bytes leftover after parsing attributes in process `syz.4.133'.
[   58.394212][ T4343] Bluetooth: hci5: command 0x040f tx timeout
[   58.401480][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   58.403155][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   58.407106][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   58.410835][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.412128][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.436217][ T4925] bond1: (slave veth3): Enslaving as an active interface with an up link
[   58.477350][ T4928] netlink: 'syz.3.134': attribute type 2 has an invalid length.
[   58.483008][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   58.484960][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   58.491885][ T4728] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   58.498231][ T4728] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   58.537571][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   58.539527][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   58.541389][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   58.543133][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   58.547151][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   58.549700][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   58.551529][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   58.553023][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   58.558099][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   58.559734][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   59.113177][ T4963] overlayfs: unrecognized mount option "\']*=�����[\1\" or missing value
[   59.200758][ T4945] netlink: 12 bytes leftover after parsing attributes in process `syz.4.138'.
[   59.212706][ T4945] 8021q: adding VLAN 0 to HW filter on device bond2
[   59.220405][ T4962] device macvlan2 entered promiscuous mode
[   59.222271][ T4962] device bond2 entered promiscuous mode
[   59.223488][ T4962] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   59.248944][ T4962] device bond2 left promiscuous mode
[   59.344810][ T4974] process 'syz.3.143' launched './file1' with NULL argv: empty string added
[   59.391366][ T4714] device hsr_slave_0 left promiscuous mode
[   59.413789][ T4714] device hsr_slave_1 left promiscuous mode
[   59.503802][ T4714] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   59.505089][ T4714] batman_adv: batadv0: Removing interface: batadv_slave_0
[   59.507073][ T4714] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   59.508323][ T4714] batman_adv: batadv0: Removing interface: batadv_slave_1
[   59.509780][ T4714] device bridge_slave_1 left promiscuous mode
[   59.511225][ T4714] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.555597][ T4714] device bridge_slave_0 left promiscuous mode
[   59.556903][ T4714] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.703851][ T4714] device veth1_macvtap left promiscuous mode
[   59.705127][ T4714] device veth0_macvtap left promiscuous mode
[   59.706116][ T4714] device veth1_vlan left promiscuous mode
[   59.707239][ T4714] device veth0_vlan left promiscuous mode
[   60.473930][ T4343] Bluetooth: hci5: command 0x0419 tx timeout
[   62.375292][ T4714] team0 (unregistering): Port device team_slave_1 removed
[   62.524721][ T4714] team0 (unregistering): Port device team_slave_0 removed
[   62.684124][ T4714] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   62.904126][ T4714] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   64.385440][ T4714] bond0 (unregistering): Released all slaves
[   64.474808][ T2063] ieee802154 phy0 wpan0: encryption failed: -22
[   64.476053][ T2063] ieee802154 phy1 wpan1: encryption failed: -22
[   64.660098][ T4728] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.668885][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   64.670369][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   64.725076][ T5004] netlink: 4 bytes leftover after parsing attributes in process `syz.2.149'.
[   65.281964][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   65.284013][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   65.300535][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   65.302275][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   65.304812][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   65.311772][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   65.319228][ T4728] device veth0_vlan entered promiscuous mode
[   65.322484][ T4728] device veth1_vlan entered promiscuous mode
[   65.340852][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   65.342495][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   65.344485][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   65.346242][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   65.351249][ T4728] device veth0_macvtap entered promiscuous mode
[   65.354939][ T4728] device veth1_macvtap entered promiscuous mode
[   65.389263][ T4728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.390997][ T4728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.392440][ T4728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.398450][ T4728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.400012][ T4728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.401629][ T4728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.403036][ T4728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.412137][ T4728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.421776][ T4728] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.423577][  T251] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   65.428874][  T251] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   65.432225][  T251] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   65.437969][  T251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   65.441353][ T4728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.443239][ T4728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.445695][ T4728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.447441][ T4728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.448924][ T4728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.454163][ T4728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.456173][ T4728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.457801][ T4728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.464623][ T4728] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.466832][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   65.468513][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   65.472798][ T4728] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.478476][ T4728] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.479987][ T4728] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.485115][ T4728] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.528780][  T251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.530508][  T251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.531980][  T251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   65.554917][ T4528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.556229][ T4528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.557624][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   65.633214][ T5063] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[   68.545553][ T5099] netlink: 'syz.3.166': attribute type 11 has an invalid length.
[   68.763908][ T5093] tipc: Started in network mode
[   68.764859][ T5093] tipc: Node identity ea32fe15cc8b, cluster identity 4711
[   68.766041][ T5093] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.868396][ T5096] device syzkaller0 entered promiscuous mode
[   68.881106][ T5092] tipc: Resetting bearer <eth:syzkaller0>
[   68.934838][ T5092] tipc: Disabling bearer <eth:syzkaller0>
[   69.595460][   T24] cfg80211: failed to load regulatory.db
[   69.621005][ T5143] syz.5.176 uses obsolete (PF_INET,SOCK_PACKET)
[   70.158200][ T5158] netlink: 'syz.1.179': attribute type 2 has an invalid length.
[   70.734206][ T5181] Cannot find add_set index 0 as target
[   76.125443][ T5253] loop3: detected capacity change from 0 to 2048
[   76.171428][ T5253] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   76.267318][ T5263] loop5: detected capacity change from 0 to 256
[   76.580509][ T5266] netlink: 12 bytes leftover after parsing attributes in process `syz.4.202'.
[   76.595623][ T5253] tipc: Started in network mode
[   76.596453][ T5253] tipc: Node identity ac14140f, cluster identity 4711
[   76.597983][ T5253] tipc: Enabled bearer <udp:syz2>, priority 10
[   76.633305][ T4327] EXT4-fs (loop3): unmounting filesystem.
[   77.145897][ T5282] binder: 5281:5282 tried to acquire reference to desc 0, got 1 instead
[   77.148047][ T5282] binder: 5281:5282 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   77.150221][ T5282] binder: 5282 RLIMIT_NICE not set
[   77.169463][ T5282] binder: 5282 RLIMIT_NICE not set
[   77.170824][ T5282] binder: 5282 RLIMIT_NICE not set
[   77.184370][ T5282] binder_alloc: 5281: binder_alloc_buf, no vma
[   77.185503][ T5282] binder: cannot allocate buffer: vma cleared, target dead or dying
[   77.185531][ T5282] binder: 5281:5282 transaction reply to 5281:5282 failed 16/29189/-3, size 0-0 line 3230
[   77.192755][ T5282] binder: send failed reply for transaction 15 to 5281:5282
[   77.216322][   T14] binder: undelivered TRANSACTION_COMPLETE
[   77.217419][   T14] binder: undelivered TRANSACTION_ERROR: 29189
[   77.229480][   T14] binder: undelivered TRANSACTION_ERROR: 29190
[   77.597495][ T5294] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.599335][ T5294] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.646009][ T5294] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   78.665931][ T5294] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   79.231496][ T5294] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.233295][ T5294] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.235011][ T5294] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.236406][ T5294] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.498009][ T5294] device macvlan2 left promiscuous mode
[   79.500218][ T5306] netlink: 'syz.2.211': attribute type 1 has an invalid length.
[   79.618121][ T5311] device veth3 entered promiscuous mode
[   79.622926][   T24] tipc: Node number set to 2886997007
[   79.624787][ T5316] netlink: 'syz.1.213': attribute type 1 has an invalid length.
[   79.631928][ T5327] netlink: 104 bytes leftover after parsing attributes in process `syz.4.216'.
[   79.637564][ T5337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.219'.
[   79.644738][ T5339] bridge1: port 1(veth3) entered blocking state
[   79.646055][ T5339] bridge1: port 1(veth3) entered disabled state
[   79.647791][ T5339] device veth3 entered promiscuous mode
[   79.649600][ T5341] bridge1: port 2(veth0_to_bond) entered blocking state
[   79.650974][ T5341] bridge1: port 2(veth0_to_bond) entered disabled state
[   79.652524][ T5341] device veth0_to_bond entered promiscuous mode
[   79.731774][ T5349] netlink: 'syz.1.222': attribute type 1 has an invalid length.
[   79.740195][ T5349] 8021q: adding VLAN 0 to HW filter on device bond2
[   79.755228][ T5349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.222'.
[   79.759646][ T5349] bond2: (slave bridge1): making interface the new active one
[   79.761384][ T5349] bond2: (slave bridge1): Enslaving as an active interface with an up link
[   79.762939][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[   79.905665][ T5344] loop2: detected capacity change from 0 to 40427
[   79.913769][ T5344] F2FS-fs (loop2): Small segment_count (9 < 1 * 24)
[   79.914960][ T5344] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   79.918293][ T5344] F2FS-fs (loop2): invalid crc value
[   79.931058][ T5363] loop1: detected capacity change from 0 to 2048
[   79.954949][ T5344] F2FS-fs (loop2): Found nat_bits in checkpoint
[   79.978842][ T5344] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   79.982138][ T5344] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   80.000467][ T5371] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   80.248849][ T5381] netlink: 132 bytes leftover after parsing attributes in process `syz.4.225'.
[   80.306165][ T5382] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12
[   80.326458][ T5382] Remounting filesystem read-only
[   80.343102][ T5384] netlink: 'syz.4.226': attribute type 4 has an invalid length.
[   80.409537][ T5363] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer
[   80.416569][ T5384] netlink: 'syz.4.226': attribute type 4 has an invalid length.
[   80.431612][ T5384] netlink: 'syz.4.226': attribute type 4 has an invalid length.
[   80.494647][ T5388] device syzkaller0 entered promiscuous mode
[   80.587640][ T4339] syz-executor: attempt to access beyond end of device
[   80.587640][ T4339] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   81.032530][ T5401] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[   81.034863][ T5401] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[   81.036661][ T5401] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[   81.038232][ T5401] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[   81.039774][ T5401] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[   81.041592][ T5401] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[   81.043237][ T5401] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[   81.061817][ T5401] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[   81.065969][ T5401] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[   81.067537][ T5401] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[   81.818156][ T5419] device syzkaller0 entered promiscuous mode
[   82.800598][ T5436] binder: 5435:5436 tried to acquire reference to desc 0, got 1 instead
[   82.960320][ T5444] binder: 5443:5444 tried to acquire reference to desc 0, got 1 instead
[   82.972722][ T5444] binder: 5443:5444 BC_FREE_BUFFER u0000000020ffe000 no match
[   82.974560][ T5444] binder: 5443:5444 unknown command 0
[   82.975684][ T5444] binder: 5443:5444 ioctl c0306201 20000240 returned -22
[   82.988383][ T4842] binder: release 5443:5444 transaction 26 out, still active
[   82.989692][ T4842] binder: undelivered TRANSACTION_COMPLETE
[   82.990935][ T4842] binder: send failed reply for transaction 26, target dead
[   83.022043][ T5446] device syzkaller0 entered promiscuous mode
[   83.030229][ T5446] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.032595][ T5445] tipc: Resetting bearer <eth:syzkaller0>
[   83.072871][ T4378] binder: release 5435:5436 transaction 21 out, still active
[   83.081215][ T4378] binder: send failed reply for transaction 21, target dead
[   83.203351][ T5451] loop5: detected capacity change from 0 to 512
[   83.205752][ T5445] tipc: Disabling bearer <eth:syzkaller0>
[   83.209665][ T5451] EXT4-fs (loop5): revision level too high, forcing read-only mode
[   83.211132][ T5451] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[   83.212418][ T5451] System zones: 0-1, 15-15, 18-18, 34-34
[   83.214992][ T5451] EXT4-fs (loop5): orphan cleanup on readonly fs
[   83.216296][ T5451] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0
[   83.218106][ T5451] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[   83.226502][ T5451] EXT4-fs (loop5): Cannot turn on quotas: error -22
[   83.514631][ T5451] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.246: bg 0: block 40: padding at end of block bitmap is not set
[   83.524478][ T5451] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6180: Corrupt filesystem
[   83.526775][ T5451] EXT4-fs (loop5): 1 truncate cleaned up
[   83.536882][ T5451] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[   83.639531][ T5458] netlink: 4 bytes leftover after parsing attributes in process `syz.4.248'.
[   83.645209][ T5458] netlink: 12 bytes leftover after parsing attributes in process `syz.4.248'.
[   83.720793][ T5460] capability: warning: `syz.2.247' uses deprecated v2 capabilities in a way that may be insecure
[   83.977105][ T5464] 9pnet: p9_errstr2errno: server reported unknown error �0x0000000000000009
[   84.486048][ T4728] EXT4-fs (loop5): unmounting filesystem.
[   85.031486][ T5497] input: syz0 as /devices/virtual/input/input2
[   85.049512][ T5497] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   85.051798][ T5497] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   85.595308][ T5513] loop5: detected capacity change from 0 to 256
[   85.636358][ T5513] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[   85.657066][ T5521] binder: 5519:5521 tried to acquire reference to desc 0, got 1 instead
[   85.658973][ T5521] binder: 5519:5521 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   85.660902][ T5521] binder: 5521 RLIMIT_NICE not set
[   85.678450][ T4378] binder: undelivered TRANSACTION_COMPLETE
[   85.732036][ T4343] Bluetooth: hci2: Unknown advertising packet type: 0x16
[   85.732065][ T4343] Bluetooth: hci2: Unknown advertising packet type: 0x1c
[   85.734076][ T4343] Bluetooth: hci2: Malformed LE Event: 0x0d
[   85.787463][ T5533] netlink: 24 bytes leftover after parsing attributes in process `syz.4.271'.
[   87.078631][ T5568] loop2: detected capacity change from 0 to 16
[   87.102237][ T5568] erofs: (device loop2): mounted with root inode @ nid 36.
[   87.635052][ T5585] device syzkaller0 entered promiscuous mode
[   87.867724][ T5597] device syzkaller0 entered promiscuous mode
[   88.346100][ T5610] binder: 5609:5610 tried to acquire reference to desc 0, got 1 instead
[   88.348717][ T5610] binder: 5609:5610 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   88.351247][ T5610] binder: 5610 RLIMIT_NICE not set
[   88.352153][ T5610] binder: undelivered transaction 36, fd fixups failed
[   88.353496][ T5610] binder: 5609:5610 async transaction 36 fd fixups failed 29201/-12, line 4667
[   88.355807][ T5610] binder: undelivered transaction 37, fd fixups failed
[   88.357231][ T5610] binder: 5609:5610 async transaction 37 fd fixups failed 29201/-12, line 4667
[   88.656942][ T4378] binder: undelivered TRANSACTION_COMPLETE
[   88.658301][ T4378] binder: undelivered TRANSACTION_COMPLETE
[   88.794133][ T4343] Bluetooth: hci5: Malformed MSFT vendor event: 0x02
[   88.835914][ T5623] netlink: 'syz.2.299': attribute type 4 has an invalid length.
[   88.837303][ T5623] netlink: 17 bytes leftover after parsing attributes in process `syz.2.299'.
[   89.395601][ T5641] netlink: 'syz.2.303': attribute type 4 has an invalid length.
[   89.437019][ T5641] netlink: 'syz.2.303': attribute type 4 has an invalid length.
[   89.751411][ T5647] vivid-000: disconnect
[   90.592774][ T5646] vivid-000: reconnect
[   90.716119][ T5659] netlink: 'syz.1.308': attribute type 4 has an invalid length.
[   90.927965][ T5674] Cannot find set identified by id 0 to match
[   91.189744][ T5676] loop3: detected capacity change from 0 to 128
[   91.349089][ T5676] syz.3.311: attempt to access beyond end of device
[   91.349089][ T5676] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128
[   91.746390][ T5693] syz.3.311: attempt to access beyond end of device
[   91.746390][ T5693] loop3: rw=524288, sector=145, nr_sectors = 224 limit=128
[   91.761271][ T5697] loop2: detected capacity change from 0 to 128
[   91.770634][ T5693] syz.3.311: attempt to access beyond end of device
[   91.770634][ T5693] loop3: rw=0, sector=145, nr_sectors = 8 limit=128
[   91.772900][ T5693] syz.3.311: attempt to access beyond end of device
[   91.772900][ T5693] loop3: rw=0, sector=145, nr_sectors = 8 limit=128
[   91.783559][ T5697] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   91.786210][ T5693] syz.3.311: attempt to access beyond end of device
[   91.786210][ T5693] loop3: rw=0, sector=145, nr_sectors = 8 limit=128
[   91.788870][ T5693] syz.3.311: attempt to access beyond end of device
[   91.788870][ T5693] loop3: rw=0, sector=145, nr_sectors = 8 limit=128
[   91.791713][ T5693] syz.3.311: attempt to access beyond end of device
[   91.791713][ T5693] loop3: rw=0, sector=145, nr_sectors = 8 limit=128
[   91.795204][ T5693] syz.3.311: attempt to access beyond end of device
[   91.795204][ T5693] loop3: rw=0, sector=145, nr_sectors = 8 limit=128
[   91.801439][ T5693] syz.3.311: attempt to access beyond end of device
[   91.801439][ T5693] loop3: rw=0, sector=145, nr_sectors = 8 limit=128
[   91.806017][ T5693] syz.3.311: attempt to access beyond end of device
[   91.806017][ T5693] loop3: rw=0, sector=145, nr_sectors = 8 limit=128
[   91.834419][ T5703] netlink: 'syz.5.314': attribute type 39 has an invalid length.
[   91.893149][ T5693] Buffer I/O error on dev loop3, logical block 145, async page read
[   91.896927][ T5693] Buffer I/O error on dev loop3, logical block 146, async page read
[   91.898429][ T5693] Buffer I/O error on dev loop3, logical block 147, async page read
[   91.906618][ T5693] Buffer I/O error on dev loop3, logical block 148, async page read
[   91.907970][ T5693] Buffer I/O error on dev loop3, logical block 149, async page read
[   91.909187][ T5693] Buffer I/O error on dev loop3, logical block 150, async page read
[   91.910434][ T5693] Buffer I/O error on dev loop3, logical block 151, async page read
[   91.911684][ T5693] Buffer I/O error on dev loop3, logical block 152, async page read
[   91.912888][ T5693] Buffer I/O error on dev loop3, logical block 145, async page read
[   91.921088][ T5693] Buffer I/O error on dev loop3, logical block 146, async page read
[   91.977438][ T4339] EXT4-fs (loop2): unmounting filesystem.
[   92.209438][ T5727] bridge0: port 3(macvlan3) entered blocking state
[   92.210637][ T5727] bridge0: port 3(macvlan3) entered disabled state
[   92.212171][ T5727] device macvlan3 entered promiscuous mode
[   92.622830][ T5724] No such timeout policy "syz1"
[   92.699148][ T5726] fuse: Bad value for 'fd'
[   92.743870][ T5751] netlink: 20 bytes leftover after parsing attributes in process `syz.3.320'.
[   92.746167][ T5751] netlink: 20 bytes leftover after parsing attributes in process `syz.3.320'.
[   92.778501][ T5754] device syzkaller0 entered promiscuous mode
[   93.011950][ T5765] netlink: 'syz.2.322': attribute type 11 has an invalid length.
[   95.629277][ T5795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.327'.
[   95.797967][ T5806] device syzkaller0 entered promiscuous mode
[   95.807331][ T5806] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.844119][ T5805] tipc: Resetting bearer <eth:syzkaller0>
[   95.915244][ T5805] tipc: Disabling bearer <eth:syzkaller0>
[   95.919387][ T5813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.331'.
[   95.923272][ T5813] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   95.925147][ T5813] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   95.926578][ T5813] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   95.928082][ T5813] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   95.964265][ T5813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.331'.
[   95.970865][ T5813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.331'.
[   95.985075][ T5820] netlink: 4 bytes leftover after parsing attributes in process `syz.1.332'.
[   96.158296][ T5830] dns_resolver: Unsupported server list version (6)
[  106.001475][ T5937] binder: 5935:5937 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  106.003543][ T5937] binder: 5937 RLIMIT_NICE not set
[  106.178910][ T5945] netlink: 'syz.4.358': attribute type 11 has an invalid length.
[  106.761042][ T5946] binder: 5935:5946 tried to acquire reference to desc 0, got 1 instead
[  106.769151][ T5937] binder: 5937 RLIMIT_NICE not set
[  106.775259][ T5937] binder: 5937 RLIMIT_NICE not set
[  106.776267][ T5937] binder: 5935:5937 got transaction with invalid fd, -1
[  106.779691][ T5937] binder: 5937:5935 translate fd failed
[  106.780883][ T5937] binder: 5935:5937 transaction reply to 5935:5946 failed 44/29201/-9, size 72-24 line 3415
[  106.812464][ T5937] binder: send failed reply for transaction 43 to 5935:5946
[  106.884512][ T4374] binder: undelivered TRANSACTION_ERROR: 29190
[  106.921816][ T4374] binder: undelivered TRANSACTION_COMPLETE
[  106.922926][ T4374] binder: undelivered TRANSACTION_ERROR: 29201
[  118.260041][ T6034] bridge0: port 3(vxlan0) entered blocking state
[  118.263975][ T6034] bridge0: port 3(vxlan0) entered disabled state
[  118.271266][ T6034] device vxlan0 entered promiscuous mode
[  119.887052][ T6064] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  120.952627][ T6069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.390'.
[  120.954578][ T6069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.390'.
[  120.970245][ T6069] netlink: 'syz.4.390': attribute type 4 has an invalid length.
[  120.971943][ T6069] netlink: 152 bytes leftover after parsing attributes in process `syz.4.390'.
[  120.975684][ T6069] .`: renamed from bond0
[  121.566930][ T6102] netlink: 'syz.4.398': attribute type 3 has an invalid length.
[  122.587105][ T6120] dns_resolver: Unsupported server list version (6)
[  122.980366][ T6123] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  124.630251][ T6143] loop3: detected capacity change from 0 to 64
[  124.694536][ T6143] hfs: request for non-existent node 131072 in B*Tree
[  124.695722][ T6143] hfs: request for non-existent node 131072 in B*Tree
[  124.698161][ T6143] hfs: request for non-existent node 131072 in B*Tree
[  124.699467][ T6143] hfs: request for non-existent node 131072 in B*Tree
[  124.704415][ T6143] hfs: request for non-existent node 131072 in B*Tree
[  124.705665][ T6143] hfs: request for non-existent node 131072 in B*Tree
[  124.707855][ T6143] hfs: request for non-existent node 131072 in B*Tree
[  124.709013][ T6143] hfs: request for non-existent node 131072 in B*Tree
[  124.724567][ T6143] hfs: request for non-existent node 131072 in B*Tree
[  124.725673][ T6143] hfs: request for non-existent node 131072 in B*Tree
[  124.727930][ T6143] hfs: request for non-existent node 131072 in B*Tree
[  124.729149][ T6143] hfs: request for non-existent node 131072 in B*Tree
[  124.730986][ T6143] hfs: request for non-existent node 12 in B*Tree
[  124.732133][ T6143] hfs: request for non-existent node 12 in B*Tree
[  124.747050][ T6143] hfs: request for non-existent node 13 in B*Tree
[  124.748141][ T6143] hfs: request for non-existent node 13 in B*Tree
[  125.094571][ T6159] netlink: 'syz.2.413': attribute type 3 has an invalid length.
[  126.237587][ T2063] ieee802154 phy0 wpan0: encryption failed: -22
[  126.239043][ T2063] ieee802154 phy1 wpan1: encryption failed: -22
[  126.280356][ T6171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  126.286751][ T6171] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  127.028938][ T6178] device syzkaller0 entered promiscuous mode
[  127.037130][ T6178] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  127.542883][ T6177] tipc: Resetting bearer <eth:syzkaller0>
[  127.635221][ T6177] tipc: Disabling bearer <eth:syzkaller0>
[  127.700848][ T6190] tipc: Enabled bearer <udp:syz2>, priority 10
[  127.709036][ T6190] netlink: 104 bytes leftover after parsing attributes in process `syz.2.419'.
[  127.713484][ T6190] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  127.717229][ T6190] tipc: Enabled bearer <udp:syz0>, priority 10
[  128.211194][ T6195] dns_resolver: Unsupported server list version (6)
[  128.844045][ T4842] tipc: Node number set to 649723413
[  129.569247][ T6215] raw_sendmsg: syz.4.424 forgot to set AF_INET. Fix it!
[  130.066682][ T4343] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  130.068698][ T4343] CPU: 1 PID: 4343 Comm: kworker/u5:8 Not tainted syzkaller #0
[  130.069989][ T4343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026
[  130.071674][ T4343] Workqueue: hci2 hci_rx_work
[  130.072464][ T4343] Call trace:
[  130.072984][ T4343]  dump_backtrace+0x1c4/0x1f0
[  130.073811][ T4343]  show_stack+0x2c/0x3c
[  130.074522][ T4343]  __dump_stack+0x30/0x40
[  130.075228][ T4343]  dump_stack_lvl+0xf4/0x15c
[  130.076019][ T4343]  dump_stack+0x1c/0x5c
[  130.076678][ T4343]  sysfs_create_dir_ns+0x244/0x264
[  130.077525][ T4343]  kobject_add_internal+0x5a8/0xb18
[  130.078338][ T4343]  kobject_add+0x144/0x20c
[  130.079068][ T4343]  device_add+0x3dc/0xe4c
[  130.079806][ T4343]  hci_conn_add_sysfs+0xb8/0x1bc
[  130.080651][ T4343]  le_conn_complete_evt+0xcd4/0x127c
[  130.081476][ T4343]  hci_le_conn_complete_evt+0x114/0x3b8
[  130.082489][ T4343]  hci_le_meta_evt+0x2c0/0x4a8
[  130.083337][ T4343]  hci_event_packet+0x64c/0xe60
[  130.084202][ T4343]  hci_rx_work+0x320/0xa94
[  130.084972][ T4343]  process_one_work+0x7e4/0x13bc
[  130.085828][ T4343]  worker_thread+0x8cc/0xfe8
[  130.086655][ T4343]  kthread+0x254/0x2e0
[  130.087373][ T4343]  ret_from_fork+0x10/0x20
[  130.090908][ T4343] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  130.093190][ T4343] Bluetooth: hci2: failed to register connection device
[  131.540685][ T6234] binder: 6233:6234 tried to acquire reference to desc 0, got 1 instead
[  131.542404][ T6234] binder: 6233:6234 got transaction to context manager from process owning it
[  131.544125][ T6234] binder: 6233:6234 transaction async to 6233:0 failed 50/29201/-22, size 0-0 line 3034
[  131.545944][ T6234] binder: 6233:6234 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  131.549805][ T6234] binder: 6234 RLIMIT_NICE not set
[  131.550621][ T6234] binder: 6234 RLIMIT_NICE not set
[  131.551628][ T6234] binder: 6233:6234 got reply transaction with bad transaction stack, transaction 49 has target 6233:6234
[  131.553563][ T6234] binder: 6233:6234 transaction reply to 0:0 failed 51/29201/-71, size 0-0 line 2961
[  131.556149][ T4842] binder: release 6233:6234 transaction 49 out, still active
[  131.557363][ T4842] binder: undelivered TRANSACTION_ERROR: 29201
[  131.582586][ T4842] binder: release 6233:6234 transaction 49 in, still active
[  131.583942][ T4842] binder: send failed reply for transaction 49, target dead
[  133.494554][ T6262] binder: 6258:6262 got transaction to invalid handle, 1
[  133.504943][ T6262] binder: 6262:6258 cannot find target node
[  133.506167][ T6262] binder: 6258:6262 transaction call to 0:0 failed 55/29201/-22, size 72-0 line 3045
[  133.558726][ T6271] binder: 6258:6271 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  133.562270][ T6271] binder: 6271 RLIMIT_NICE not set
[  133.563363][ T6271] binder: 6258:6271 got reply transaction with no transaction stack
[  133.565372][ T6271] binder: 6258:6271 transaction reply to 0:0 failed 56/29201/-71, size 0-0 line 2946
[  134.126006][ T4840] binder: undelivered TRANSACTION_ERROR: 29201
[  135.746041][ T6310] netlink: 'syz.3.452': attribute type 1 has an invalid length.
[  135.829842][ T6312] loop2: detected capacity change from 0 to 512
[  136.068199][ T6312] EXT4-fs (loop2): external journal device major/minor numbers have changed
[  136.069710][ T6312] EXT4-fs (loop2): failed to open journal device unknown-block(8,1) -6
[  136.091437][ T6310] device bond1 entered promiscuous mode
[  136.093432][ T6310] 8021q: adding VLAN 0 to HW filter on device bond1
[  136.097689][ T6309] net_ratelimit: 33018 callbacks suppressed
[  136.097697][ T6309] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  136.158526][ T6310] bond1: (slave bridge2): making interface the new active one
[  136.159968][ T6310] device bridge2 entered promiscuous mode
[  136.161631][ T6310] bond1: (slave bridge2): Enslaving as an active interface with an up link
[  136.163181][ T6031] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  136.222152][ T6318] netlink: 'syz.3.454': attribute type 1 has an invalid length.
[  136.229641][ T6318] 8021q: adding VLAN 0 to HW filter on device bond2
[  137.876167][ T6318] bond2: (slave gretap1): making interface the new active one
[  137.878230][ T6318] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  137.879684][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  137.938249][ T6318] bond2: (slave veth5): Enslaving as an active interface with a down link
[  137.949066][ T6318] device veth0_virt_wifi entered promiscuous mode
[  137.952232][ T6318] bond2: (slave veth0_virt_wifi): Enslaving as an active interface with a down link
[  137.962085][ T6333] device syzkaller0 entered promiscuous mode
[  138.886477][ T6352] Soft offlining pfn 0x1389e0 at process virtual address 0x20000000
[  138.889744][ T6352] Soft offlining pfn 0x1389e1 at process virtual address 0x20001000
[  138.891105][ T6352] Soft offlining pfn 0x1389e2 at process virtual address 0x20002000
[  138.892486][ T6352] Soft offlining pfn 0x1389e3 at process virtual address 0x20003000
[  138.893910][ T6352] Soft offlining pfn 0x13c518 at process virtual address 0x20004000
[  138.895325][ T6352] Soft offlining pfn 0x13c51a at process virtual address 0x20005000
[  138.896680][ T6352] Soft offlining pfn 0x13cc9d at process virtual address 0x20006000
[  138.898067][ T6352] Soft offlining pfn 0x13a467 at process virtual address 0x20007000
[  138.899457][ T6352] Soft offlining pfn 0x1379fd at process virtual address 0x20008000
[  138.900816][ T6352] Soft offlining pfn 0x1379fe at process virtual address 0x20009000
[  138.902247][ T6352] Soft offlining pfn 0x1379ff at process virtual address 0x2000a000
[  138.903559][ T6352] Soft offlining pfn 0x136888 at process virtual address 0x2000b000
[  138.904989][ T6352] Soft offlining pfn 0x136889 at process virtual address 0x2000c000
[  138.906383][ T6352] Soft offlining pfn 0x13688a at process virtual address 0x2000d000
[  138.907759][ T6352] Soft offlining pfn 0x13688b at process virtual address 0x2000e000
[  138.909068][ T6352] Soft offlining pfn 0x1387e1 at process virtual address 0x2000f000
[  138.910449][ T6352] Soft offlining pfn 0x1387e2 at process virtual address 0x20010000
[  138.911780][ T6352] Soft offlining pfn 0x1387e3 at process virtual address 0x20011000
[  139.216178][ T6341] IPVS: set_ctl: invalid protocol: 92 127.0.0.1:20003
[  141.381075][ T6375] loop5: detected capacity change from 0 to 512
[  141.398681][ T6375] EXT4-fs (loop5): external journal device major/minor numbers have changed
[  141.400210][ T6375] EXT4-fs (loop5): failed to open journal device unknown-block(8,1) -6
[  144.580456][ T6395] netlink: 'syz.5.476': attribute type 1 has an invalid length.
[  144.614618][ T6395] 8021q: adding VLAN 0 to HW filter on device bond1
[  144.626927][ T6399] device syzkaller0 entered promiscuous mode
[  144.643244][ T6395] bond1: (slave gretap1): making interface the new active one
[  144.649425][ T6395] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  144.650981][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  144.677968][ T6395] bond1: (slave veth3): Enslaving as an active interface with a down link
[  145.616769][ T6395] device veth0_virt_wifi entered promiscuous mode
[  145.885142][ T6395] bond1: (slave veth0_virt_wifi): Enslaving as an active interface with an up link
[  145.964045][ T6425] loop5: detected capacity change from 0 to 256
[  145.966603][ T6425] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  145.971702][ T6425] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 0000fc00)
[  145.973556][ T6425] FAT-fs (loop5): Filesystem has been set read-only
[  145.983342][ T6425] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 0000fc00)
[  149.147317][ T6469] netlink: 'syz.2.498': attribute type 1 has an invalid length.
[  149.436245][ T6469] 8021q: adding VLAN 0 to HW filter on device bond1
[  149.474748][ T6469] bond1: (slave gretap1): making interface the new active one
[  149.477621][ T6469] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  149.479931][  T251] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  149.495324][ T6469] bond1: (slave veth3): Enslaving as an active interface with a down link
[  149.514817][ T6469] device veth0_virt_wifi entered promiscuous mode
[  149.526877][ T6469] bond1: (slave veth0_virt_wifi): Enslaving as an active interface with an up link
[  153.773538][ T6537] netlink: 'syz.1.514': attribute type 1 has an invalid length.
[  153.785196][ T6537] 8021q: adding VLAN 0 to HW filter on device bond3
[  153.802459][ T6537] bond3: (slave gretap1): making interface the new active one
[  153.808003][ T6537] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  153.810024][ T6031] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready
[  153.834355][ T6537] bond3: (slave veth5): Enslaving as an active interface with a down link
[  153.854651][ T6537] device veth0_virt_wifi entered promiscuous mode
[  153.868801][ T6537] bond3: (slave veth0_virt_wifi): Enslaving as an active interface with an up link
[  153.994389][ T4342] Bluetooth: hci3: command 0x0406 tx timeout
[  153.995708][ T4343] Bluetooth: hci2: command 0x0406 tx timeout
[  153.996909][ T4337] Bluetooth: hci4: command 0x0406 tx timeout
[  154.114637][ T6543] device bridge2 entered promiscuous mode
[  154.121830][ T6543] team0: Port device bridge2 added
[  154.131379][ T6543] bridge0: port 3(team0) entered blocking state
[  154.132523][ T6543] bridge0: port 3(team0) entered disabled state
[  154.134714][ T6543] device team0 entered promiscuous mode
[  154.135767][ T6543] device team_slave_0 entered promiscuous mode
[  154.137120][ T6543] device team_slave_1 entered promiscuous mode
[  154.138784][ T6543] bridge0: port 3(team0) entered blocking state
[  154.140002][ T6543] bridge0: port 3(team0) entered forwarding state
[  154.180727][ T6547] binder: 6544:6547 tried to acquire reference to desc 0, got 1 instead
[  154.184557][ T6547] binder: 6544:6547 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  154.207566][ T6547] binder: 6547 RLIMIT_NICE not set
[  154.208454][ T6547] binder: 6547 RLIMIT_NICE not set
[  154.209675][ T6547] binder: 6547 RLIMIT_NICE not set
[  154.210507][ T6547] binder: 6544:6547 got transaction with invalid handle, 0
[  154.211627][ T6547] binder_debug: 1 callbacks suppressed
[  154.211637][ T6547] binder: 6547:6544 translate handle failed
[  154.223869][ T6547] binder: 6544:6547 transaction reply to 6544:6547 failed 68/29201/-22, size 88-24 line 3393
[  154.226586][ T6547] binder: send failed reply for transaction 61 to 6544:6547
[  154.250842][ T4838] binder: undelivered TRANSACTION_ERROR: 29190
[  154.280496][ T4838] binder: undelivered TRANSACTION_COMPLETE
[  154.282053][ T4838] binder: undelivered TRANSACTION_ERROR: 29201
[  154.617291][ T6564] loop3: detected capacity change from 0 to 512
[  154.621967][ T6564] EXT4-fs: Ignoring removed nobh option
[  154.662283][ T6564] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13
[  154.667403][ T6564] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.526: attempt to clear invalid blocks 1 len 1
[  154.671104][ T6564] EXT4-fs (loop3): Remounting filesystem read-only
[  154.672633][ T6564] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  154.679966][ T6564] EXT4-fs (loop3): Remounting filesystem read-only
[  154.681345][ T6564] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.526: invalid indirect mapped block 1819239214 (level 0)
[  154.684189][ T6564] EXT4-fs (loop3): Remounting filesystem read-only
[  154.685472][ T6564] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.526: invalid indirect mapped block 1819239214 (level 1)
[  154.688290][ T6564] EXT4-fs (loop3): Remounting filesystem read-only
[  154.690078][ T6564] EXT4-fs (loop3): 1 truncate cleaned up
[  154.691167][ T6564] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  154.717516][ T6564] EXT4-fs (loop3): re-mounted. Quota mode: writeback.
[  154.792950][ T6570] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.527'.
[  154.795249][ T6570] netlink: zone id is out of range
[  154.796348][ T6570] netlink: zone id is out of range
[  154.797868][ T6570] netlink: zone id is out of range
[  155.068256][ T6570] netlink: set zone limit has 8 unknown bytes
[  155.110746][ T4327] EXT4-fs (loop3): unmounting filesystem.
[  156.030457][ T6586] netlink: 'syz.1.531': attribute type 1 has an invalid length.
[  156.046646][ T6586] 8021q: adding VLAN 0 to HW filter on device bond4
[  156.464734][ T6586] bond4: (slave veth7): Enslaving as an active interface with a down link
[  156.502677][ T6586] bond3: (slave veth0_virt_wifi): Releasing active interface
[  156.504398][ T6586] device gretap1 entered promiscuous mode
[  156.600806][ T6586] bond4: (slave veth0_virt_wifi): making interface the new active one
[  156.604283][ T6586] bond4: (slave veth0_virt_wifi): Enslaving as an active interface with an up link
[  156.607095][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready
[  157.012946][ T6619] device syzkaller0 entered promiscuous mode
[  157.679245][ T6629] device bridge3 entered promiscuous mode
[  157.682476][ T6629] team0: Port device bridge3 added
[  157.690394][ T6629] bridge0: port 4(team0) entered blocking state
[  157.691626][ T6629] bridge0: port 4(team0) entered disabled state
[  157.697197][ T6629] device team0 entered promiscuous mode
[  157.698194][ T6629] device team_slave_0 entered promiscuous mode
[  157.700016][ T6629] device team_slave_1 entered promiscuous mode
[  157.702124][ T6629] bridge0: port 4(team0) entered blocking state
[  157.703235][ T6629] bridge0: port 4(team0) entered forwarding state
[  157.817268][ T6635] MPTCP: kernel_bind error, err=-99
[  157.876881][ T6637] 8021q: adding VLAN 0 to HW filter on device bond5
[  157.908088][ T6641] device veth0 entered promiscuous mode
[  157.939925][ T6641] bond5: (slave macvlan2): making interface the new active one
[  157.941632][ T6641] bond5: (slave macvlan2): Enslaving as an active interface with an up link
[  157.950802][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready
[  157.962360][ T6647] netlink: 'syz.5.551': attribute type 1 has an invalid length.
[  157.971379][ T6647] 8021q: adding VLAN 0 to HW filter on device bond2
[  157.989342][ T6647] bond2: (slave veth5): Enslaving as an active interface with a down link
[  158.018708][ T6647] bond1: (slave veth0_virt_wifi): Releasing active interface
[  158.020053][ T6647] device gretap1 entered promiscuous mode
[  158.112765][ T6647] bond2: (slave veth0_virt_wifi): making interface the new active one
[  158.117446][ T6647] bond2: (slave veth0_virt_wifi): Enslaving as an active interface with an up link
[  158.119259][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  159.204931][ T6679] device bridge3 entered promiscuous mode
[  159.208215][ T6679] team0: Port device bridge3 added
[  159.215995][ T6679] bridge0: port 4(team0) entered blocking state
[  159.217263][ T6679] bridge0: port 4(team0) entered disabled state
[  159.218883][ T6679] device team0 entered promiscuous mode
[  159.219882][ T6679] device team_slave_0 entered promiscuous mode
[  159.221013][ T6679] device team_slave_1 entered promiscuous mode
[  159.422444][ T6693] Soft offlining pfn 0x13a7c3 at process virtual address 0x20000000
[  159.424822][ T6693] Soft offlining pfn 0x13a7c0 at process virtual address 0x20001000
[  159.426088][ T6693] Soft offlining pfn 0x13aa2b at process virtual address 0x20002000
[  159.427346][ T6693] Soft offlining pfn 0x13a0e2 at process virtual address 0x20003000
[  159.428613][ T6693] Soft offlining pfn 0x140f7f at process virtual address 0x20004000
[  159.429953][ T6693] Soft offlining pfn 0x13c372 at process virtual address 0x20005000
[  159.431324][ T6693] Soft offlining pfn 0x13cd4f at process virtual address 0x20006000
[  159.432601][ T6693] Soft offlining pfn 0x14811e at process virtual address 0x20007000
[  159.434222][ T6693] Soft offlining pfn 0x1480d6 at process virtual address 0x20008000
[  159.435504][ T6693] Soft offlining pfn 0x1384e4 at process virtual address 0x20009000
[  159.436963][ T6693] Soft offlining pfn 0x143317 at process virtual address 0x2000a000
[  159.438314][ T6693] Soft offlining pfn 0x14331a at process virtual address 0x2000b000
[  159.439651][ T6693] Soft offlining pfn 0x13d58a at process virtual address 0x2000c000
[  159.441168][ T6693] Soft offlining pfn 0x13d58c at process virtual address 0x2000d000
[  159.442540][ T6693] Soft offlining pfn 0x11e181 at process virtual address 0x2000e000
[  159.443879][ T6693] Soft offlining pfn 0x138499 at process virtual address 0x2000f000
[  159.445280][ T6693] Soft offlining pfn 0x1246f3 at process virtual address 0x20010000
[  159.446650][ T6693] Soft offlining pfn 0x13c193 at process virtual address 0x20011000
[  160.358881][ T6707] device syzkaller0 entered promiscuous mode
[  161.837424][ T6726] device bridge1 entered promiscuous mode
[  161.840461][ T6726] team0: Port device bridge1 added
[  161.848553][ T6726] bridge0: port 3(team0) entered blocking state
[  161.850338][ T6726] bridge0: port 3(team0) entered disabled state
[  161.862424][ T6726] device team0 entered promiscuous mode
[  161.864452][ T6726] device team_slave_0 entered promiscuous mode
[  161.866181][ T6726] device team_slave_1 entered promiscuous mode
[  161.872684][ T6726] bridge0: port 3(team0) entered blocking state
[  161.873900][ T6726] bridge0: port 3(team0) entered forwarding state
[  165.462109][ T6761] device syzkaller0 entered promiscuous mode
[  166.146620][ T6773] netlink: 8 bytes leftover after parsing attributes in process `syz.5.594'.
[  166.155026][ T6773] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  166.159410][ T6773] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  166.161419][ T6773] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  169.846321][ T6811] tipc: Started in network mode
[  169.847282][ T6811] tipc: Node identity e6338c7e0c5b, cluster identity 4711
[  169.848502][ T6811] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  169.875598][ T6811] tipc: Disabling bearer <eth:syzkaller0>
[  170.525280][ T6834] Invalid ELF header magic: != ELF
[  170.643049][ T6836] overlayfs: failed to clone upperpath
[  170.701323][ T6840] 9pnet: p9_errstr2errno: server reported unknown error �VmI�L�◅N
[  170.714907][   T93] tipc: Left network mode
[  170.790517][ T6849] 8021q: adding VLAN 0 to HW filter on device bond3
[  170.814304][ T6849] device veth0 entered promiscuous mode
[  170.816838][ T6849] bond3: (slave macvlan2): making interface the new active one
[  170.818853][ T6849] bond3: (slave macvlan2): Enslaving as an active interface with an up link
[  170.820827][ T6031] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready
[  173.559641][ T6904] loop2: detected capacity change from 0 to 32768
[  173.564961][ T6904] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  173.566404][ T6904] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  173.586634][ T6904] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[  173.590046][ T3899] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  173.591218][ T3899] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  173.599499][ T3899] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 8ms
[  173.602238][ T3899] gfs2: fsid=syz:syz.0: jid=0: Done
[  173.604530][ T6904] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  173.702084][ T6904] gfs2: fsid=syz:syz.0: found 1 quota changes
[  173.732912][ T6919] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[  173.732912][ T6919]   inode = 11 2339
[  173.732912][ T6919]   function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 413
[  173.752966][ T6919] gfs2: fsid=syz:syz.0: G:  s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1
[  173.754980][ T6919] gfs2: fsid=syz:syz.0:  H: s:EX f:H e:0 p:6919 [gfs2_quotad] gfs2_quota_sync+0x2cc/0x4e8
[  173.777182][ T6919] gfs2: fsid=syz:syz.0:  I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0
[  173.778745][ T6919] gfs2: fsid=syz:syz.0: about to withdraw this file system
[  173.783536][ T6919] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[  173.785561][ T6919] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[  173.788916][ T6919] gfs2: fsid=syz:syz.0: File system withdrawn
[  173.789911][ T6919] CPU: 1 PID: 6919 Comm: gfs2_quotad Not tainted syzkaller #0
[  173.791029][ T6919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026
[  173.792675][ T6919] Call trace:
[  173.793174][ T6919]  dump_backtrace+0x1c4/0x1f0
[  173.793981][ T6919]  show_stack+0x2c/0x3c
[  173.794733][ T6919]  __dump_stack+0x30/0x40
[  173.795467][ T6919]  dump_stack_lvl+0xf4/0x15c
[  173.796321][ T6919]  dump_stack+0x1c/0x5c
[  173.797071][ T6919]  gfs2_withdraw+0x9f8/0x1244
[  173.797916][ T6919]  gfs2_consist_inode_i+0xf8/0x114
[  173.798896][ T6919]  gfs2_inode_refresh+0x9a0/0xe64
[  173.799856][ T6919]  inode_go_instantiate+0x4c/0x68
[  173.800821][ T6919]  gfs2_instantiate+0x178/0x2b4
[  173.801775][ T6919]  gfs2_glock_wait+0x1b0/0x290
[  173.802612][ T6919]  gfs2_glock_nq+0x8bc/0x11c4
[  173.803457][ T6919]  do_sync+0x414/0xa68
[  173.804161][ T6919]  gfs2_quota_sync+0x2cc/0x4e8
[  173.804990][ T6919]  gfs2_quotad+0x30c/0x520
[  173.805733][ T6919]  kthread+0x254/0x2e0
[  173.806436][ T6919]  ret_from_fork+0x10/0x20
[  174.083872][ T4338] Bluetooth: hci5: command 0x0406 tx timeout
[  174.580852][ T4339] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485
[  174.587217][ T4339] CPU: 0 PID: 4339 Comm: syz-executor Not tainted syzkaller #0
[  174.588600][ T4339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026
[  174.590394][ T4339] Call trace:
[  174.590988][ T4339]  dump_backtrace+0x1c4/0x1f0
[  174.591770][ T4339]  show_stack+0x2c/0x3c
[  174.592627][ T4339]  __dump_stack+0x30/0x40
[  174.593416][ T4339]  dump_stack_lvl+0xf4/0x15c
[  174.594203][ T4339]  dump_stack+0x1c/0x5c
[  174.594870][ T4339]  gfs2_assert_warn_i+0x16c/0x26c
[  174.595705][ T4339]  gfs2_quota_cleanup+0x444/0x640
[  174.596507][ T4339]  gfs2_put_super+0x1ec/0x744
[  174.597288][ T4339]  generic_shutdown_super+0x138/0x32c
[  174.598276][ T4339]  kill_block_super+0x78/0xe0
[  174.599098][ T4339]  gfs2_kill_sb+0xc4/0xd8
[  174.599868][ T4339]  deactivate_locked_super+0xb4/0x128
[  174.600794][ T4339]  deactivate_super+0xe4/0x104
[  174.601640][ T4339]  cleanup_mnt+0x3a8/0x430
[  174.602403][ T4339]  __cleanup_mnt+0x20/0x30
[  174.603140][ T4339]  task_work_run+0x1f4/0x280
[  174.603902][ T4339]  do_notify_resume+0x20f8/0x2c84
[  174.604754][ T4339]  el0_svc+0x98/0x128
[  174.605417][ T4339]  el0t_64_sync_handler+0x84/0xf0
[  174.606303][ T4339]  el0t_64_sync+0x18c/0x190
[  174.919872][ T6942] netlink: 12 bytes leftover after parsing attributes in process `syz.2.627'.
[  174.952642][ T6942] 8021q: adding VLAN 0 to HW filter on device bond3
[  174.955479][ T6942] bond2: (slave bond3): Enslaving as an active interface with an up link
[  175.138294][ T6031] device gretap1 left promiscuous mode
[  177.211455][   T93] device gretap1 left promiscuous mode
[  177.270139][ T6969] binder: 6968:6969 tried to acquire reference to desc 0, got 1 instead
[  177.278986][ T6969] binder: 6968:6969 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  177.281012][ T6969] binder: 6969 RLIMIT_NICE not set
[  177.306578][ T6969] binder: 6969 RLIMIT_NICE not set
[  177.307990][ T6969] binder: 6969 RLIMIT_NICE not set
[  177.358213][ T4378] binder: undelivered TRANSACTION_COMPLETE
[  181.090576][ T7009] loop2: detected capacity change from 0 to 512
[  181.092612][ T7009] EXT4-fs (loop2): can't read group descriptor 0
[  181.095751][ T7009] netlink: 'syz.2.648': attribute type 13 has an invalid length.
[  181.098076][ T7009] Bluetooth: MGMT ver 1.22
[  184.737615][ T7047] random: crng reseeded on system resumption
[  184.778392][ T7042] usb usb8: usbfs: process 7042 (syz.3.656) did not claim interface 0 before use
[  184.981895][ T7052] Restarting kernel threads ... done.
[  185.657416][ T7054] netlink: 24 bytes leftover after parsing attributes in process `syz.2.659'.
[  186.923697][ T7074] loop2: detected capacity change from 0 to 512
[  186.926506][ T7074] EXT4-fs: Ignoring removed oldalloc option
[  186.927675][ T7074] EXT4-fs: Ignoring removed bh option
[  186.988392][ T7074] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  187.145261][ T7074] EXT4-fs (loop2): 1 truncate cleaned up
[  187.146305][ T7074] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  187.333089][ T7080] netlink: 4 bytes leftover after parsing attributes in process `syz.4.667'.
[  187.354421][ T2063] ieee802154 phy0 wpan0: encryption failed: -22
[  187.355573][ T2063] ieee802154 phy1 wpan1: encryption failed: -22
[  187.571868][ T4339] EXT4-fs (loop2): unmounting filesystem.
[  192.138751][ T7135] loop3: detected capacity change from 0 to 1024
[  193.220484][ T7153] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  193.222114][ T7153] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  193.223884][ T7153] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  193.228469][ T7153] bond0: (slave vxlan0): Enslaving as an active interface with an up link
[  193.648441][ T7159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  193.652598][ T7159] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  197.076994][ T7192] random: crng reseeded on system resumption
[  200.499213][ T7235] Soft offlining pfn 0x1371d9 at process virtual address 0x20000000
[  200.502288][ T7235] Soft offlining pfn 0x1371da at process virtual address 0x20001000
[  200.503672][ T7235] Soft offlining pfn 0x1371db at process virtual address 0x20002000
[  200.505055][ T7235] Soft offlining pfn 0x1371dc at process virtual address 0x20003000
[  200.506412][ T7235] Soft offlining pfn 0x124420 at process virtual address 0x20004000
[  200.507859][ T7235] Soft offlining pfn 0x124421 at process virtual address 0x20005000
[  200.509179][ T7235] Soft offlining pfn 0x124422 at process virtual address 0x20006000
[  200.510495][ T7235] Soft offlining pfn 0x124423 at process virtual address 0x20007000
[  200.511838][ T7235] Soft offlining pfn 0x124424 at process virtual address 0x20008000
[  200.513144][ T7235] Soft offlining pfn 0x124425 at process virtual address 0x20009000
[  200.514562][ T7235] Soft offlining pfn 0x139aed at process virtual address 0x2000a000
[  200.515838][ T7235] Soft offlining pfn 0x139aee at process virtual address 0x2000b000
[  200.517246][ T7235] Soft offlining pfn 0x139aef at process virtual address 0x2000c000
[  200.518554][ T7235] Soft offlining pfn 0x137398 at process virtual address 0x2000d000
[  200.519873][ T7235] Soft offlining pfn 0x137399 at process virtual address 0x2000e000
[  200.521069][ T7235] Soft offlining pfn 0x13739a at process virtual address 0x2000f000
[  200.522410][ T7235] Soft offlining pfn 0x13739b at process virtual address 0x20010000
[  200.523786][ T7235] Soft offlining pfn 0x13739c at process virtual address 0x20011000
[  202.553849][   T27] audit: type=1326 audit(202.500:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7256 comm="syz.1.719" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff97f77b68 code=0x0
[  204.005319][ T6919] ==================================================================
[  204.006863][ T6919] BUG: KASAN: use-after-free in __lock_acquire+0x104/0x6610
[  204.008212][ T6919] Read of size 8 at addr ffff0000f58b4bb0 by task gfs2_quotad/6919
[  204.009627][ T6919] 
[  204.010058][ T6919] CPU: 1 PID: 6919 Comm: gfs2_quotad Not tainted syzkaller #0
[  204.011562][ T6919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026
[  204.013528][ T6919] Call trace:
[  204.014114][ T6919]  dump_backtrace+0x1c4/0x1f0
[  204.014965][ T6919]  show_stack+0x2c/0x3c
[  204.015673][ T6919]  __dump_stack+0x30/0x40
[  204.016443][ T6919]  dump_stack_lvl+0xf4/0x15c
[  204.017271][ T6919]  print_address_description+0x88/0x218
[  204.018303][ T6919]  print_report+0x50/0x68
[  204.019095][ T6919]  kasan_report+0xa8/0xfc
[  204.019915][ T6919]  __asan_report_load8_noabort+0x2c/0x38
[  204.021019][ T6919]  __lock_acquire+0x104/0x6610
[  204.021965][ T6919]  lock_acquire+0x20c/0x638
[  204.022771][ T6919]  _raw_spin_lock_irqsave+0x6c/0xb0
[  204.023731][ T6919]  finish_wait+0xc8/0x1ac
[  204.024490][ T6919]  gfs2_quotad+0x3c4/0x520
[  204.025257][ T6919]  kthread+0x254/0x2e0
[  204.025977][ T6919]  ret_from_fork+0x10/0x20
[  204.026751][ T6919] 
[  204.027145][ T6919] Allocated by task 6904:
[  204.027904][ T6919]  kasan_set_track+0x4c/0x80
[  204.028772][ T6919]  kasan_save_alloc_info+0x24/0x30
[  204.029715][ T6919]  __kasan_kmalloc+0xa0/0xb8
[  204.030700][ T6919]  kmalloc_trace+0x7c/0x94
[  204.031596][ T6919]  gfs2_fill_super+0x10c/0x19e0
[  204.032557][ T6919]  get_tree_bdev+0x35c/0x54c
[  204.033399][ T6919]  gfs2_get_tree+0x58/0x1b8
[  204.034187][ T6919]  vfs_get_tree+0x90/0x278
[  204.034999][ T6919]  do_new_mount+0x228/0x804
[  204.035847][ T6919]  path_mount+0x5ac/0xe6c
[  204.036735][ T6919]  __arm64_sys_mount+0x4a0/0x5a0
[  204.037707][ T6919]  invoke_syscall+0x98/0x290
[  204.038572][ T6919]  el0_svc_common+0x13c/0x258
[  204.039488][ T6919]  do_el0_svc+0x5c/0x134
[  204.040297][ T6919]  el0_svc+0x58/0x128
[  204.041029][ T6919]  el0t_64_sync_handler+0x84/0xf0
[  204.041908][ T6919]  el0t_64_sync+0x18c/0x190
[  204.042698][ T6919] 
[  204.043177][ T6919] The buggy address belongs to the object at ffff0000f58b4000
[  204.043177][ T6919]  which belongs to the cache kmalloc-8k of size 8192
[  204.046069][ T6919] The buggy address is located 2992 bytes inside of
[  204.046069][ T6919]  8192-byte region [ffff0000f58b4000, ffff0000f58b6000)
[  204.048617][ T6919] 
[  204.049044][ T6919] The buggy address belongs to the physical page:
[  204.050249][ T6919] page:000000006fcaef99 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff0000f58b4000 pfn:0x1358b0
[  204.052490][ T6919] head:000000006fcaef99 order:3 compound_mapcount:0 compound_pincount:0
[  204.054122][ T6919] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff)
[  204.055694][ T6919] raw: 05ffc00000010200 fffffc0004086a00 dead000000000006 ffff0000c0002c00
[  204.057370][ T6919] raw: ffff0000f58b4000 0000000080020001 00000001ffffffff 0000000000000000
[  204.058874][ T6919] page dumped because: kasan: bad access detected
[  204.060036][ T6919] 
[  204.060432][ T6919] Memory state around the buggy address:
[  204.061452][ T6919]  ffff0000f58b4a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  204.062961][ T6919]  ffff0000f58b4b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  204.064441][ T6919] >ffff0000f58b4b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  204.065966][ T6919]                                      ^
[  204.067010][ T6919]  ffff0000f58b4c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  204.068589][ T6919]  ffff0000f58b4c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  204.070055][ T6919] ==================================================================
[  204.071482][ T6919] Disabling lock debugging due to kernel taint
[  204.131491][ T4338] Bluetooth: hci5: Invalid handle: 0xff00 > 0x0eff
[  204.132799][ T4338] Bluetooth: hci5: hcon 00000000113eb4f5 sent 1 < count 511