last executing test programs:

16.620455203s ago: executing program 2 (id=3):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB="000001"])
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
socket(0x400000000010, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

15.004801436s ago: executing program 3 (id=8):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = dup(0xffffffffffffffff)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f0000000580)=ANY=[@ANYRES8=r1, @ANYRESHEX, @ANYRES8=r1, @ANYRESDEC=0x0, @ANYRESOCT=r1, @ANYRES16=r1, @ANYRES16, @ANYRES32=r2], 0xfffffeb7)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB])
openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r6 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x2, &(0x7f0000000180)=[{0x61}, {0x6, 0x0, 0xfc, 0x9}]})
r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$sock(r7, &(0x7f0000000300)={&(0x7f0000000040)=@isdn={0x22, 0x2, 0x80, 0x5, 0x3a}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000380)="449df18d098dfcd2c50c61580cd0ba7d5524fac46e641423b01613908be1e46241affd2884d0acb6cde2156c7cbad852c33bb67db850bf9a3869224683ba8cc2d245a2dd7efc089c7dffeff32aab05e5ce9b7eebe34bbea122e427915249b4b662c8d9aca64c9872ad5feb42cebac0b127da8481bc0cf7fc83b057eee475bec953683a7b054d25f30cbfc72e629b217baa6df41c78bf8c328cdb786149a18fbe6e09f6e52e38e6a84a62150d6ee0240e01b2fa467c204a0d", 0xb8}, {&(0x7f00000000c0)="2bc9d0ab0a0169d6a88f99466c2904", 0xf}, {&(0x7f0000000440)="543a9a82b0ddaf4e28041970cb4a94cb3fd34be39b47bff70298a3750a875f445474a9144ae1c33a74ba15afa1ddc5750643c9f4db3b710c327bcb901225181f03fc254ca2c43f5e40aed38a6aad8acfd6ed7a3287b828bcfe087fbe4364e06e858883d7e13f68185ea008236571099482c60211f12d2aabc4ef99d44c7deb646fdd8ba8cee489afb1a56e8b185cc02922eb4499bec899a195e299f24e5be663", 0xa0}, {&(0x7f0000000500)="1723ef612486b918945fc9531d73c06c3eb2bf978afb5feaeb3825058e5e8b10c1247a31d772aa348005d54c79094049f029986ddb1ab18190d67bd4be2746f210a944be6999b102706bb6ace08bcc8160a7e8a3de852bad413db730e6b2afc90fe7e8a9de0a3c893637eb65308f72a2eec15a95aeec262a0bdef7104c4cd88cddb650df6f23a7dc3705b676d6317cdc5a5c545ce2f5023450958171a2970c4b2c3c7cbc93c82e405556b8bb2b28f5", 0xaf}], 0x4, &(0x7f00000001c0)=[@txtime={{0x18, 0x1, 0x3d, 0xffff}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x30}, 0x8000)
bind$802154_dgram(r7, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14)
connect$802154_dgram(r7, &(0x7f0000000640)={0x24, @short={0x2, 0x0, 0xfffe}}, 0x14)

14.845973258s ago: executing program 2 (id=9):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
truncate(&(0x7f0000000900)='./file1\x00', 0x3000000)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0)
fallocate(r2, 0x8, 0x4000, 0x4000)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r4}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10)
r5 = socket$rds(0x15, 0x5, 0x0)
r6 = bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x200e, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000950000000000000081ab09c9f7f6d9ca261e252a996890"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000140)=ANY=[], 0x841, 0x1)
bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)={0x3c, 0x0, 0x100, 0x70bd28, 0x25dfdbfa, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x16}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8006}, 0x0)

13.155209842s ago: executing program 3 (id=12):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32, 0x0, 0x3}, 0x9c)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xd, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r0, 0x1)
sendmmsg$inet6(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="af", 0x34000}], 0x1}}], 0x1, 0x0)

12.986472665s ago: executing program 3 (id=13):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}]}, 0x1, 0x241, &(0x7f0000000540)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==")
prlimit64(0x0, 0xe, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005", @ANYBLOB='\x00\x00\x00\x00\x00'], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet(0x2, 0x3, 0x8d)
setsockopt$inet_msfilter(r3, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="8e"], 0x1)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000000c0)={<r4=>0x0, @local, @local}, &(0x7f0000000140)=0xc)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x3b, r4})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0)
r5 = socket(0xa, 0x1, 0x0)
ioctl(r5, 0x8916, &(0x7f0000000000))

10.624472528s ago: executing program 3 (id=17):
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x408, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x200, 0x248, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x468)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x0)
pipe(0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0)
close(r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340))
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafbe863cac50580cd8b", 0x17}, {&(0x7f0000000440)="9c74dfbf77572856c809ff86bb648daf351a32ad5ea7e5599da7a5b3d468381d8ff50420", 0x24}], 0x2)

10.53337328s ago: executing program 0 (id=18):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = dup(0xffffffffffffffff)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f0000000580)=ANY=[@ANYRES8=r1, @ANYRESHEX, @ANYRES8=r1, @ANYRESDEC=0x0, @ANYRESOCT=r1, @ANYRES16=r1, @ANYRES16, @ANYRES32=r2], 0xfffffeb7)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r6 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x2, &(0x7f0000000180)=[{0x61}, {0x6, 0x0, 0xfc, 0x9}]})
r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$sock(r7, &(0x7f0000000300)={&(0x7f0000000040)=@isdn={0x22, 0x2, 0x80, 0x5, 0x3a}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000380)="449df18d098dfcd2c50c61580cd0ba7d5524fac46e641423b01613908be1e46241affd2884d0acb6cde2156c7cbad852c33bb67db850bf9a3869224683ba8cc2d245a2dd7efc089c7dffeff32aab05e5ce9b7eebe34bbea122e427915249b4b662c8d9aca64c9872ad5feb42cebac0b127da8481bc0cf7fc83b057eee475bec953683a7b054d25f30cbfc72e629b217baa6df41c78bf8c328cdb786149a18fbe6e09f6e52e38e6a84a62150d6ee0240e01b2fa467c204a0d", 0xb8}, {&(0x7f00000000c0)="2bc9d0ab0a0169d6a88f99466c2904", 0xf}, {&(0x7f0000000440)="543a9a82b0ddaf4e28041970cb4a94cb3fd34be39b47bff70298a3750a875f445474a9144ae1c33a74ba15afa1ddc5750643c9f4db3b710c327bcb901225181f03fc254ca2c43f5e40aed38a6aad8acfd6ed7a3287b828bcfe087fbe4364e06e858883d7e13f68185ea008236571099482c60211f12d2aabc4ef99d44c7deb646fdd8ba8cee489afb1a56e8b185cc02922eb4499bec899a195e299f24e5be663", 0xa0}, {&(0x7f0000000500)="1723ef612486b918945fc9531d73c06c3eb2bf978afb5feaeb3825058e5e8b10c1247a31d772aa348005d54c79094049f029986ddb1ab18190d67bd4be2746f210a944be6999b102706bb6ace08bcc8160a7e8a3de852bad413db730e6b2afc90fe7e8a9de0a3c893637eb65308f72a2eec15a95aeec262a0bdef7104c4cd88cddb650df6f23a7dc3705b676d6317cdc5a5c545ce2f5023450958171a2970c4b2c3c7cbc93c82e405556b8bb2b28f5", 0xaf}], 0x4, &(0x7f00000001c0)=[@txtime={{0x18, 0x1, 0x3d, 0xffff}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x30}, 0x8000)
connect$802154_dgram(r7, &(0x7f0000000640)={0x24, @short={0x2, 0x0, 0xfffe}}, 0x14)

10.474659451s ago: executing program 2 (id=19):
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008"], 0x48)
r0 = socket(0x10, 0x803, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00'}, 0x10)
lgetxattr(0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x18)
r2 = socket(0x10, 0x803, 0x0)
sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0)
sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="40000108", @ANYRES16=r3, @ANYBLOB="00032dbd7000fedbdf25120000001c00118004000600040006000400040004000100040005000400030005007400020000000800a40002000000"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x40000)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)={0xcc, r3, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x324}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xd43b}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37a}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}]]}, 0xcc}}, 0xc001)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x0, 0x122)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x121a02, 0x0)
sendfile(r6, r5, 0x0, 0x8)

9.271547098s ago: executing program 0 (id=20):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = dup(0xffffffffffffffff)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f0000000580)=ANY=[@ANYRES8=r1, @ANYRESHEX, @ANYRES8=r1, @ANYRESDEC=0x0, @ANYRESOCT=r1, @ANYRES16=r1, @ANYRES16, @ANYRES32=r2], 0xfffffeb7)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB])
openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r6 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x2, &(0x7f0000000180)=[{0x61}, {0x6, 0x0, 0xfc, 0x9}]})
r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$sock(r7, &(0x7f0000000300)={&(0x7f0000000040)=@isdn={0x22, 0x2, 0x80, 0x5, 0x3a}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000380)="449df18d098dfcd2c50c61580cd0ba7d5524fac46e641423b01613908be1e46241affd2884d0acb6cde2156c7cbad852c33bb67db850bf9a3869224683ba8cc2d245a2dd7efc089c7dffeff32aab05e5ce9b7eebe34bbea122e427915249b4b662c8d9aca64c9872ad5feb42cebac0b127da8481bc0cf7fc83b057eee475bec953683a7b054d25f30cbfc72e629b217baa6df41c78bf8c328cdb786149a18fbe6e09f6e52e38e6a84a62150d6ee0240e01b2fa467c204a0d", 0xb8}, {&(0x7f00000000c0)="2bc9d0ab0a0169d6a88f99466c2904", 0xf}, {&(0x7f0000000440)="543a9a82b0ddaf4e28041970cb4a94cb3fd34be39b47bff70298a3750a875f445474a9144ae1c33a74ba15afa1ddc5750643c9f4db3b710c327bcb901225181f03fc254ca2c43f5e40aed38a6aad8acfd6ed7a3287b828bcfe087fbe4364e06e858883d7e13f68185ea008236571099482c60211f12d2aabc4ef99d44c7deb646fdd8ba8cee489afb1a56e8b185cc02922eb4499bec899a195e299f24e5be663", 0xa0}, {&(0x7f0000000500)="1723ef612486b918945fc9531d73c06c3eb2bf978afb5feaeb3825058e5e8b10c1247a31d772aa348005d54c79094049f029986ddb1ab18190d67bd4be2746f210a944be6999b102706bb6ace08bcc8160a7e8a3de852bad413db730e6b2afc90fe7e8a9de0a3c893637eb65308f72a2eec15a95aeec262a0bdef7104c4cd88cddb650df6f23a7dc3705b676d6317cdc5a5c545ce2f5023450958171a2970c4b2c3c7cbc93c82e405556b8bb2b28f5", 0xaf}], 0x4, &(0x7f00000001c0)=[@txtime={{0x18, 0x1, 0x3d, 0xffff}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x30}, 0x8000)
bind$802154_dgram(r7, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14)
connect$802154_dgram(r7, &(0x7f0000000640)={0x24, @short={0x2, 0x0, 0xfffe}}, 0x14)

7.416219794s ago: executing program 0 (id=23):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32, 0x0, 0x3}, 0x9c)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xd, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r0, 0x1)
sendmmsg$inet6(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="af", 0x34000}], 0x1}}], 0x1, 0x0)

7.285303916s ago: executing program 4 (id=24):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = dup(0xffffffffffffffff)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f0000000580)=ANY=[@ANYRES8=r1, @ANYRESHEX, @ANYRES8=r1, @ANYRESDEC=0x0, @ANYRESOCT=r1, @ANYRES16=r1, @ANYRES16, @ANYRES32=r2], 0xfffffeb7)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB])
openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r4 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x2, &(0x7f0000000180)=[{0x61}, {0x6, 0x0, 0xfc, 0x9}]})
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$sock(r5, &(0x7f0000000300)={&(0x7f0000000040)=@isdn={0x22, 0x2, 0x80, 0x5, 0x3a}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000380)="449df18d098dfcd2c50c61580cd0ba7d5524fac46e641423b01613908be1e46241affd2884d0acb6cde2156c7cbad852c33bb67db850bf9a3869224683ba8cc2d245a2dd7efc089c7dffeff32aab05e5ce9b7eebe34bbea122e427915249b4b662c8d9aca64c9872ad5feb42cebac0b127da8481bc0cf7fc83b057eee475bec953683a7b054d25f30cbfc72e629b217baa6df41c78bf8c328cdb786149a18fbe6e09f6e52e38e6a84a62150d6ee0240e01b2fa467c204a0d", 0xb8}, {&(0x7f00000000c0)="2bc9d0ab0a0169d6a88f99466c2904", 0xf}, {&(0x7f0000000440)="543a9a82b0ddaf4e28041970cb4a94cb3fd34be39b47bff70298a3750a875f445474a9144ae1c33a74ba15afa1ddc5750643c9f4db3b710c327bcb901225181f03fc254ca2c43f5e40aed38a6aad8acfd6ed7a3287b828bcfe087fbe4364e06e858883d7e13f68185ea008236571099482c60211f12d2aabc4ef99d44c7deb646fdd8ba8cee489afb1a56e8b185cc02922eb4499bec899a195e299f24e5be663", 0xa0}, {&(0x7f0000000500)="1723ef612486b918945fc9531d73c06c3eb2bf978afb5feaeb3825058e5e8b10c1247a31d772aa348005d54c79094049f029986ddb1ab18190d67bd4be2746f210a944be6999b102706bb6ace08bcc8160a7e8a3de852bad413db730e6b2afc90fe7e8a9de0a3c893637eb65308f72a2eec15a95aeec262a0bdef7104c4cd88cddb650df6f23a7dc3705b676d6317cdc5a5c545ce2f5023450958171a2970c4b2c3c7cbc93c82e405556b8bb2b28f5", 0xaf}], 0x4, &(0x7f00000001c0)=[@txtime={{0x18, 0x1, 0x3d, 0xffff}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x30}, 0x8000)
bind$802154_dgram(r5, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14)
connect$802154_dgram(r5, &(0x7f0000000640)={0x24, @short={0x2, 0x0, 0xfffe}}, 0x14)

7.141541488s ago: executing program 0 (id=25):
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0)
socket(0x80000000000000a, 0x2, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x6a, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x0, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x0]}}}}}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x2c, r5, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0)

6.933844661s ago: executing program 1 (id=26):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18)
socket(0xa, 0x3, 0x3a)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x0, 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xffffffffffffff7e, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0xc)
mount$9p_fd(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0)
r4 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180)="e502", 0x2)
execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

4.980504859s ago: executing program 4 (id=27):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
truncate(&(0x7f0000000900)='./file1\x00', 0x3000000)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0)
fallocate(r2, 0x8, 0x4000, 0x4000)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r4}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10)
r5 = socket$rds(0x15, 0x5, 0x0)
r6 = bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x200e, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000950000000000000081ab09c9f7f6d9ca261e252a996890"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000140)=ANY=[], 0x841, 0x1)
bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)={0x3c, 0x0, 0x100, 0x70bd28, 0x25dfdbfa, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x16}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8006}, 0x0)

4.977468409s ago: executing program 1 (id=28):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6}, 0x0)

4.848128121s ago: executing program 1 (id=29):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
truncate(&(0x7f0000000900)='./file1\x00', 0x3000000)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0)
fallocate(r2, 0x8, 0x4000, 0x4000)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r4}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10)
r5 = socket$rds(0x15, 0x5, 0x0)
r6 = bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x200e, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000950000000000000081ab09c9f7f6d9ca261e252a996890"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000140)=ANY=[], 0x841, 0x1)
bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)={0x3c, 0x0, 0x100, 0x70bd28, 0x25dfdbfa, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x16}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8006}, 0x0)

4.130038661s ago: executing program 4 (id=30):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f00000005c0)=ANY=[], 0xff2e)
setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4000001, 0x4, 0x5, 0x0, "00000100"})
r1 = syz_open_pts(r0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0xd)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r3, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
setxattr$security_capability(&(0x7f0000000300)='./bus\x00', &(0x7f0000000380), &(0x7f00000003c0)=@v2={0x2000000, [{0x3ff, 0x1}, {0x28ca, 0x99}]}, 0x14, 0x1)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$TIOCCONS(0xffffffffffffffff, 0x541d)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18e7af6576f5c5cf135f747ad4bf3a0800001bc81a00000000000000000195000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x58e, &(0x7f0000000180)={[{@errors_remount}, {@usrquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@block_validity}, {@resgid}, {@quota}]}, 0x1, 0x454, &(0x7f0000000c00)="$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")
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000001100))

3.746804516s ago: executing program 1 (id=31):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r2=>0x0]}, 0x0)
sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}], 0x1, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r2}}], 0x20, 0x2400e044}, 0x0)

3.143326135s ago: executing program 4 (id=32):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

2.680503882s ago: executing program 4 (id=33):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
truncate(&(0x7f0000000900)='./file1\x00', 0x3000000)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0)
fallocate(r2, 0x8, 0x4000, 0x4000)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r4}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10)
r5 = socket$rds(0x15, 0x5, 0x0)
r6 = bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x200e, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000950000000000000081ab09c9f7f6d9ca261e252a996890"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000140)=ANY=[], 0x841, 0x1)
bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)={0x3c, 0x0, 0x100, 0x70bd28, 0x25dfdbfa, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x16}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8006}, 0x0)

2.381428866s ago: executing program 1 (id=34):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb85"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
truncate(&(0x7f0000000900)='./file1\x00', 0x3000000)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0)
fallocate(r2, 0x8, 0x4000, 0x4000)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r4}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10)
r5 = socket$rds(0x15, 0x5, 0x0)
r6 = bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x200e, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000950000000000000081ab09c9f7f6d9ca261e252a996890"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000140)=ANY=[], 0x841, 0x1)
bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)={0x3c, 0x0, 0x100, 0x70bd28, 0x25dfdbfa, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x16}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8006}, 0x0)

1.901778893s ago: executing program 2 (id=35):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32, 0x0, 0x3}, 0x9c)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xd, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r0, 0x1)
sendmmsg$inet6(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="af", 0x34000}], 0x1}}], 0x1, 0x0)

1.895725933s ago: executing program 0 (id=36):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x28, 0x10, 0xa9, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r1}]}, 0x28}}, 0x0)

1.715081535s ago: executing program 3 (id=37):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x36, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r1, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000040)='{(:\x00'}, 0x30)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB='ya\x00?\b\x00\x00\x00\x00\x00~'], 0x1c}}, 0x4000054)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0)
sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x28, r8, 0x1, 0x4, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x0)

1.645399996s ago: executing program 2 (id=38):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb8500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
truncate(&(0x7f0000000900)='./file1\x00', 0x3000000)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0)
fallocate(r2, 0x8, 0x4000, 0x4000)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r4}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10)
r5 = socket$rds(0x15, 0x5, 0x0)
r6 = bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x200e, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000950000000000000081ab09c9f7f6d9ca261e252a996890"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000140)=ANY=[], 0x841, 0x1)
bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)={0x3c, 0x0, 0x100, 0x70bd28, 0x25dfdbfa, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x16}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8006}, 0x0)

1.505553849s ago: executing program 0 (id=39):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18)
socket(0xa, 0x3, 0x3a)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x0, 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xffffffffffffff7e, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0xc)
mount$9p_fd(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0)
r4 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180)="e502", 0x2)
execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

467.603713ms ago: executing program 4 (id=40):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6}, 0x0)

428.097863ms ago: executing program 3 (id=41):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB="000001"])
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
socket(0x400000000010, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

0s ago: executing program 1 (id=42):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
msgctl$MSG_STAT(0x0, 0xb, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, 0x0, 0x40)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
r1 = fsmount(0xffffffffffffffff, 0x1, 0x71)
signalfd4(r1, 0x0, 0x0, 0x1000)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042)
write$UHID_DESTROY(r2, &(0x7f0000000080), 0x4)
pwritev(r3, &(0x7f0000000780)=[{0x0}], 0x1, 0x0, 0x9)

kernel console output (not intermixed with test programs):

no interfaces have a carrier
[   49.787099][ T3919] 8021q: adding VLAN 0 to HW filter on device bond0
[   49.796518][ T3919] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting crond: OK
Starting sshd: OK

syzkaller
Warning: Permanently added '10.128.1.126' (ED25519) to the list of known hosts.
syzkaller login: [   72.984253][ T4241] cgroup: Unknown subsys name 'net'
[   73.086448][ T4241] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   74.549367][ T4241] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   76.030864][ T4255] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   76.043140][ T4266] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   76.051238][ T4266] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   76.052310][ T4261] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   76.058738][ T4266] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   76.067827][ T4261] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   76.073624][ T4266] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   76.080520][ T4261] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   76.088558][ T4267] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   76.095313][ T4261] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   76.108869][ T4261] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   76.110528][ T4267] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   76.116320][ T4261] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   76.124191][ T4267] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   76.130826][ T4261] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   76.137972][ T4267] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   76.145233][ T4261] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   76.151988][ T4267] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   76.158815][ T4261] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   76.165616][ T4267] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   76.172954][ T4261] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   76.187302][ T4258] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   76.194635][ T4258] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   76.202352][ T4258] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   76.210543][ T4258] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   76.238657][ T4261] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   76.263737][ T4258] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   76.271346][ T4258] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   76.285941][ T4258] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   76.293518][ T4258] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   76.648770][ T4251] chnl_net:caif_netlink_parms(): no params data found
[   76.766560][ T4256] chnl_net:caif_netlink_parms(): no params data found
[   76.841073][ T4252] chnl_net:caif_netlink_parms(): no params data found
[   76.898093][ T4251] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.910109][ T4251] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.918772][ T4251] device bridge_slave_0 entered promiscuous mode
[   76.942492][ T4251] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.949863][ T4251] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.957675][ T4251] device bridge_slave_1 entered promiscuous mode
[   76.965828][ T4263] chnl_net:caif_netlink_parms(): no params data found
[   77.023683][ T4260] chnl_net:caif_netlink_parms(): no params data found
[   77.034919][ T4251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.051504][ T4251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.060799][ T4256] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.067899][ T4256] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.075970][ T4256] device bridge_slave_0 entered promiscuous mode
[   77.113190][ T4256] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.120609][ T4256] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.128439][ T4256] device bridge_slave_1 entered promiscuous mode
[   77.157708][ T4252] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.164915][ T4252] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.173269][ T4252] device bridge_slave_0 entered promiscuous mode
[   77.202811][ T4252] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.210073][ T4252] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.217975][ T4252] device bridge_slave_1 entered promiscuous mode
[   77.239375][ T4251] team0: Port device team_slave_0 added
[   77.259896][ T4256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.295972][ T4251] team0: Port device team_slave_1 added
[   77.303530][ T4256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.313185][ T4263] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.320582][ T4263] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.328412][ T4263] device bridge_slave_0 entered promiscuous mode
[   77.364312][ T4263] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.371724][ T4263] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.379535][ T4263] device bridge_slave_1 entered promiscuous mode
[   77.388241][ T4252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.433026][ T4252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.451315][ T4260] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.458499][ T4260] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.466595][ T4260] device bridge_slave_0 entered promiscuous mode
[   77.475314][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.482460][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.508566][ T4251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.523541][ T4256] team0: Port device team_slave_0 added
[   77.530039][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.537023][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.563009][ T4251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.599425][ T4260] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.606759][ T4260] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.614750][ T4260] device bridge_slave_1 entered promiscuous mode
[   77.628997][ T4256] team0: Port device team_slave_1 added
[   77.640939][ T4263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.652618][ T4252] team0: Port device team_slave_0 added
[   77.660397][ T4263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.687405][ T4252] team0: Port device team_slave_1 added
[   77.748951][ T4260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.767479][ T4256] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.775360][ T4256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.801382][ T4256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.813081][ T4252] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.820370][ T4252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.846420][ T4252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.860647][ T4263] team0: Port device team_slave_0 added
[   77.868225][ T4260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.886311][ T4256] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.893519][ T4256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.919814][ T4256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.931466][ T4252] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.938439][ T4252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.964677][ T4252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.977430][ T4263] team0: Port device team_slave_1 added
[   77.995030][ T4251] device hsr_slave_0 entered promiscuous mode
[   78.001898][ T4251] device hsr_slave_1 entered promiscuous mode
[   78.074289][ T4260] team0: Port device team_slave_0 added
[   78.106128][ T4263] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.113332][ T4263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.139971][ T4263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.153106][ T4260] team0: Port device team_slave_1 added
[   78.159411][ T4263] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.166492][ T4263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.192500][ T4263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.218691][ T4256] device hsr_slave_0 entered promiscuous mode
[   78.225643][ T4256] device hsr_slave_1 entered promiscuous mode
[   78.234161][ T4256] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   78.242752][ T4256] Cannot create hsr debugfs directory
[   78.250435][ T4266] Bluetooth: hci1: command 0x0409 tx timeout
[   78.287203][ T4252] device hsr_slave_0 entered promiscuous mode
[   78.294459][ T4252] device hsr_slave_1 entered promiscuous mode
[   78.301385][ T4252] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   78.308965][ T4252] Cannot create hsr debugfs directory
[   78.329847][ T4266] Bluetooth: hci3: command 0x0409 tx timeout
[   78.329866][ T4255] Bluetooth: hci0: command 0x0409 tx timeout
[   78.330054][ T4255] Bluetooth: hci4: command 0x0409 tx timeout
[   78.336127][ T4266] Bluetooth: hci2: command 0x0409 tx timeout
[   78.380175][ T4260] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.387177][ T4260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.413668][ T4260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.460323][ T4260] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.467324][ T4260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.494037][ T4260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.507871][ T4263] device hsr_slave_0 entered promiscuous mode
[   78.515279][ T4263] device hsr_slave_1 entered promiscuous mode
[   78.522361][ T4263] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   78.532685][ T4263] Cannot create hsr debugfs directory
[   78.656540][ T4260] device hsr_slave_0 entered promiscuous mode
[   78.663659][ T4260] device hsr_slave_1 entered promiscuous mode
[   78.671801][ T4260] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   78.679401][ T4260] Cannot create hsr debugfs directory
[   78.782254][ T4251] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   78.792892][ T4251] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   78.835759][ T4251] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   78.849095][ T4251] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   78.946717][ T4256] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   78.956755][ T4256] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   78.967545][ T4256] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   79.002058][ T4256] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   79.066812][ T4252] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   79.080860][ T4252] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   79.107582][ T4252] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   79.117665][ T4252] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   79.153181][ T4251] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.177772][ T4260] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   79.187982][ T4260] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   79.211271][ T4260] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   79.222221][ T4260] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   79.253507][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   79.263147][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   79.308466][ T4251] 8021q: adding VLAN 0 to HW filter on device team0
[   79.327876][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   79.336936][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   79.347188][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.354833][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.365362][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   79.391212][ T4263] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   79.401871][ T4263] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   79.414343][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   79.425902][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   79.435043][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.442214][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.466008][ T4256] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.475744][ T4263] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   79.494617][ T4263] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   79.512089][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   79.522597][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   79.532516][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   79.542304][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   79.555836][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   79.594497][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   79.603559][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   79.613583][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   79.623094][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   79.650529][ T4256] 8021q: adding VLAN 0 to HW filter on device team0
[   79.658425][ T4251] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   79.670986][ T4251] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   79.684006][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   79.693311][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   79.706994][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   79.715930][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   79.726987][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   79.745931][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   79.761149][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   79.776538][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.783745][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.800134][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   79.809168][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   79.819255][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.826914][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.836267][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   79.877514][ T4252] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.895092][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   79.905600][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   79.920993][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   79.937646][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   79.949242][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   79.965603][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   79.974463][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   79.990894][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   80.000895][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   80.019545][ T4252] 8021q: adding VLAN 0 to HW filter on device team0
[   80.040347][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   80.055697][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   80.079030][ T4256] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   80.092082][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   80.121538][ T4260] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.128549][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   80.138298][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   80.152815][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   80.166391][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   80.175234][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.182413][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.190416][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   80.199061][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   80.207718][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.214832][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.254862][ T4260] 8021q: adding VLAN 0 to HW filter on device team0
[   80.277616][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   80.287986][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   80.303370][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   80.315631][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   80.327869][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   80.339689][ T4266] Bluetooth: hci1: command 0x041b tx timeout
[   80.354710][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   80.367673][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   80.386596][ T4263] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.413514][ T4266] Bluetooth: hci4: command 0x041b tx timeout
[   80.413533][ T4255] Bluetooth: hci3: command 0x041b tx timeout
[   80.419700][ T4266] Bluetooth: hci0: command 0x041b tx timeout
[   80.425973][ T4258] Bluetooth: hci2: command 0x041b tx timeout
[   80.457313][ T4251] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.476063][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   80.485454][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   80.502029][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   80.518439][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.525674][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.540279][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   80.549036][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   80.558677][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.565972][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.574857][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   80.584065][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   80.591710][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   80.599353][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   80.608788][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   80.617759][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   80.632261][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   80.663219][ T4252] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   80.677613][ T4252] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   80.695376][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   80.703962][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   80.712887][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   80.722126][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   80.732114][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   80.741444][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   80.750595][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   80.758385][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   80.775615][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   80.783372][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   80.796675][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   80.807799][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   80.838255][ T4256] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.857480][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   80.871482][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   80.902100][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   80.911381][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   80.928862][ T4263] 8021q: adding VLAN 0 to HW filter on device team0
[   80.953326][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   80.963031][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   80.990473][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   80.998963][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   81.018279][ T4251] device veth0_vlan entered promiscuous mode
[   81.032045][ T4260] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   81.045536][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   81.054499][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   81.063503][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   81.072131][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   81.080941][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   81.089469][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   81.098910][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   81.107532][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.114682][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.122803][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   81.134524][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   81.143360][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.150509][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.174468][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   81.183055][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   81.192449][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   81.228189][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   81.240802][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   81.260763][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   81.281651][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   81.302596][ T4251] device veth1_vlan entered promiscuous mode
[   81.316698][ T4256] device veth0_vlan entered promiscuous mode
[   81.354977][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   81.372700][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   81.390963][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   81.410274][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   81.430817][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   81.445959][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   81.456589][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   81.469447][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   81.478363][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   81.489480][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   81.499225][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   81.508600][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   81.524249][ T4256] device veth1_vlan entered promiscuous mode
[   81.564403][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   81.574639][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   81.592401][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   81.605862][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   81.625558][ T4251] device veth0_macvtap entered promiscuous mode
[   81.650242][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   81.659032][ T4251] device veth1_macvtap entered promiscuous mode
[   81.701381][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   81.710405][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   81.719223][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   81.750861][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   81.764424][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   81.775645][ T4252] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.803099][ T4256] device veth0_macvtap entered promiscuous mode
[   81.836157][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   81.851914][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   81.876565][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   81.920733][ T4256] device veth1_macvtap entered promiscuous mode
[   81.941986][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.970311][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   81.979121][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   82.036381][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   82.055068][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   82.076488][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   82.109124][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.139708][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.162147][ T4256] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.174137][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.189103][ T4260] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.204660][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   82.214277][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   82.230880][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   82.240105][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   82.251688][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.269618][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.299833][ T4256] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.311408][ T4251] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.330254][ T4251] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.339036][ T4251] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.399718][ T4251] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.409972][ T4258] Bluetooth: hci1: command 0x040f tx timeout
[   82.422307][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   82.451059][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   82.478575][ T4256] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.489763][ T4258] Bluetooth: hci3: command 0x040f tx timeout
[   82.495840][ T4258] Bluetooth: hci2: command 0x040f tx timeout
[   82.502468][ T4255] Bluetooth: hci4: command 0x040f tx timeout
[   82.502550][ T4266] Bluetooth: hci0: command 0x040f tx timeout
[   82.534760][ T4256] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.559941][ T4256] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.568718][ T4256] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.682909][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   82.697066][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   82.745338][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   82.755928][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   82.804333][ T4263] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.857164][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   82.874840][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   82.889516][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   82.898657][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   82.927544][ T4260] device veth0_vlan entered promiscuous mode
[   82.993950][ T4260] device veth1_vlan entered promiscuous mode
[   83.000315][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.003533][   T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.008317][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.031585][   T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.066182][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   83.074605][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   83.083964][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   83.093702][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   83.104184][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   83.113801][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   83.128976][ T4263] device veth0_vlan entered promiscuous mode
[   83.160371][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   83.168877][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   83.201383][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.203987][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   83.209359][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.226629][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   83.236171][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   83.245270][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   83.254102][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   83.263628][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   83.272816][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   83.281433][ T4252] device veth0_vlan entered promiscuous mode
[   83.288242][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   83.297461][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   83.307051][ T4304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.308959][ T4263] device veth1_vlan entered promiscuous mode
[   83.323134][ T4304] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.334479][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   83.347236][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   83.361843][ T4260] device veth0_macvtap entered promiscuous mode
[   83.376972][ T4252] device veth1_vlan entered promiscuous mode
[   83.394939][ T4260] device veth1_macvtap entered promiscuous mode
[   83.463185][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   83.471833][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   83.481958][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   83.491227][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   83.499356][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   83.509214][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   83.518234][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   83.529499][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.541156][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.551329][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.561962][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.573765][ T4260] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.586199][ T4263] device veth0_macvtap entered promiscuous mode
[   83.601137][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   83.610813][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   83.621822][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   83.655121][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.673034][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.686193][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.698937][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.711678][ T4260] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.729510][ T4252] device veth0_macvtap entered promiscuous mode
[   83.740781][ T4263] device veth1_macvtap entered promiscuous mode
[   83.781993][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   83.808110][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   83.810611][ T4343] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   83.822066][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   83.857167][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   83.871880][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   83.894984][ T4260] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.904100][ T4260] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.914733][ T4260] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.926386][ T4344] loop1: detected capacity change from 0 to 2048
[   83.930140][ T4260] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.957783][ T4252] device veth1_macvtap entered promiscuous mode
[   83.990430][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   83.998791][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   84.004279][ T4344]  loop1: p1 < > p3
[   84.032066][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.044042][ T4344] loop1: p3 size 134217728 extends beyond EOD, truncated
[   84.052474][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.070043][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.080704][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.091727][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.117487][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.147866][ T4263] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.203078][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   84.217487][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   84.252770][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.273347][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.286784][ T4344] kvm: emulating exchange as write
[   84.298914][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.326603][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.349104][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.377549][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.408455][ T4263] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.425574][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.448666][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.477625][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.490153][ T4266] Bluetooth: hci1: command 0x0419 tx timeout
[   84.500921][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.510908][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.521655][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.531747][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.542520][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.554682][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.568276][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   84.576397][ T4266] Bluetooth: hci2: command 0x0419 tx timeout
[   84.576436][ T4266] Bluetooth: hci4: command 0x0419 tx timeout
[   84.576466][ T4266] Bluetooth: hci3: command 0x0419 tx timeout
[   84.580838][ T4265] Bluetooth: hci0: command 0x0419 tx timeout
[   84.602130][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   84.611163][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   84.621879][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   84.633910][ T4263] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.655858][ T4263] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.681694][ T4263] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.707744][ T4263] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.767032][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.799737][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.819654][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.849608][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.859967][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.871239][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.886845][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.897846][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.933821][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.960235][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   84.969383][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   85.037118][ T4252] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.053133][ T4252] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.067918][ T4252] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.077176][ T4252] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.267338][ T4304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.300970][ T4304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.326755][ T4350] loop1: detected capacity change from 0 to 1024
[   85.337164][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   85.370920][ T4350] =======================================================
[   85.370920][ T4350] WARNING: The mand mount option has been deprecated and
[   85.370920][ T4350]          and is ignored by this kernel. Remove the mand
[   85.370920][ T4350]          option from the mount to silence this warning.
[   85.370920][ T4350] =======================================================
[   85.438959][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.451465][ T4304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.459487][ T4304] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.470475][ T4350] EXT4-fs: Ignoring removed nobh option
[   85.483717][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.500088][ T4350] EXT4-fs: Ignoring removed bh option
[   85.525295][ T4350] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   85.578585][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   85.600997][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   85.614701][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.624833][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.639743][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.647206][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.698161][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   85.737246][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   85.842118][ T4350] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   85.859817][ T4304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.867862][ T4304] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.947742][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   86.124199][ T4356] tipc: Started in network mode
[   86.129215][ T4356] tipc: Node identity 9e20c43deaa5, cluster identity 4711
[   86.191830][ T4356] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   86.222856][ T4360] device syzkaller0 entered promiscuous mode
[   86.243130][ T4359] loop3: detected capacity change from 0 to 1024
[   86.314557][ T4359] EXT4-fs: Invalid want_extra_isize 0
[   86.481564][ T4356] tipc: Resetting bearer <eth:syzkaller0>
[   86.500229][ T4346] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   86.612019][ T4364] process 'syz.4.5' launched '/dev/fd/6' with NULL argv: empty string added
[   87.212551][    T7] cfg80211: failed to load regulatory.db
[   87.241553][ T4354] tipc: Resetting bearer <eth:syzkaller0>
[   87.344575][   T33] tipc: Node number set to 1954923581
[   87.391688][ T4354] tipc: Disabling bearer <eth:syzkaller0>
[   87.876734][ T4369] loop4: detected capacity change from 0 to 1024
[   87.967772][ T4369] EXT4-fs: Ignoring removed nobh option
[   88.023262][ T4369] EXT4-fs: Ignoring removed bh option
[   88.078850][ T4373] loop2: detected capacity change from 0 to 1024
[   88.150666][ T4373] EXT4-fs: Ignoring removed nobh option
[   88.156384][ T4373] EXT4-fs: Ignoring removed bh option
[   88.191547][ T4369] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   88.226056][ T4368] lo speed is unknown, defaulting to 1000
[   88.232145][ T4368] lo speed is unknown, defaulting to 1000
[   88.240149][ T4368] lo speed is unknown, defaulting to 1000
[   88.251093][ T4368] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   88.264665][ T4368] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   88.346757][ T4373] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   88.412318][ T4369] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   88.500524][ T4368] lo speed is unknown, defaulting to 1000
[   88.508557][ T4368] lo speed is unknown, defaulting to 1000
[   88.516727][ T4368] lo speed is unknown, defaulting to 1000
[   88.523603][ T4368] lo speed is unknown, defaulting to 1000
[   88.530397][ T4368] lo speed is unknown, defaulting to 1000
[   88.537594][ T4368] lo speed is unknown, defaulting to 1000
[   89.229129][ T4375] sched: RT throttling activated
[   89.444433][ T4373] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   89.473174][ T4388] loop3: detected capacity change from 0 to 128
[   89.487541][ T4388] EXT4-fs (loop3): Test dummy encryption mode enabled
[   89.534212][ T4388] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   89.550050][ T4366] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3841: comm syz.4.7: Allocating blocks 497-513 which overlap fs metadata
[   89.630548][ T4388] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   89.632786][ T4366] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3841: comm syz.4.7: Allocating blocks 497-513 which overlap fs metadata
[   89.672267][ T4393] mmap: syz.0.14 (4393) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   89.684054][ T4251] EXT4-fs (loop1): unmounting filesystem.
[   91.807047][ T4263] EXT4-fs (loop3): unmounting filesystem.
[   91.809250][ T4252] EXT4-fs (loop4): unmounting filesystem.
[   91.980982][ T4260] EXT4-fs (loop2): unmounting filesystem.
[   92.132006][ T4411] loop4: detected capacity change from 0 to 1024
[   92.245958][ T4411] EXT4-fs: Ignoring removed nobh option
[   92.274080][ T4411] EXT4-fs: Ignoring removed bh option
[   92.338127][ T4411] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   92.441049][ T4418] siw: device registration error -23
[   92.805891][ T4411] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   94.765765][ T4430] siw: device registration error -23
[   95.215530][ T4252] EXT4-fs (loop4): unmounting filesystem.
[   97.315433][ T4440] siw: device registration error -23
[   97.639385][ T4454] loop4: detected capacity change from 0 to 1024
[   97.685666][ T4454] EXT4-fs: Ignoring removed nobh option
[   97.712101][ T4454] EXT4-fs: Ignoring removed bh option
[   97.740769][ T4454] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   97.756101][ T4457] loop1: detected capacity change from 0 to 1024
[   97.799040][ T4457] EXT4-fs: Ignoring removed nobh option
[   97.816211][ T4457] EXT4-fs: Ignoring removed bh option
[   97.823297][ T4454] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   97.832648][ T4457] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   97.896346][ T4457] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   98.036883][ T4453] EXT4-fs error (device loop4): ext4_ext_map_blocks:4183: inode #15: comm syz.4.27: bad extent address lblock: 332, depth: 1 pblock 0
[   98.078217][ T4453] EXT4-fs error (device loop4): ext4_ext_map_blocks:4183: inode #15: comm syz.4.27: bad extent address lblock: 332, depth: 1 pblock 0
[   98.303266][ T4304] EXT4-fs error (device loop4): ext4_ext_map_blocks:4183: inode #15: comm kworker/u4:5: bad extent address lblock: 1, depth: 1 pblock 0
[   98.333267][ T4304] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 3 with error 117
[   98.365090][ T4304] EXT4-fs (loop4): This should not happen!! Data will be lost
[   98.365090][ T4304] 
[   98.404022][ T4304] EXT4-fs error (device loop4): ext4_ext_map_blocks:4183: inode #15: comm kworker/u4:5: bad extent address lblock: 328, depth: 1 pblock 0
[   98.443308][ T4304] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 328 with max blocks 1 with error 117
[   98.459378][ T4304] EXT4-fs (loop4): This should not happen!! Data will be lost
[   98.459378][ T4304] 
[   98.511162][ T4252] EXT4-fs (loop4): unmounting filesystem.
[   98.746843][ T4467] loop4: detected capacity change from 0 to 512
[   98.777392][ T4467] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   98.809728][ T4467] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   98.819445][ T4251] EXT4-fs (loop1): unmounting filesystem.
[   98.886039][ T4467] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.30: bad orphan inode 17
[   98.984350][ T4467] EXT4-fs (loop4): Remounting filesystem read-only
[   98.992020][ T4467] ext4_test_bit(bit=16, block=4) = 1
[   98.997349][ T4467] is_bad_inode(inode)=0
[   99.002746][ T4467] NEXT_ORPHAN(inode)=2147418128
[   99.007655][ T4467] max_ino=32
[   99.011284][ T4467] i_nlink=0
[   99.014753][ T4467] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2818: Unable to expand inode 17. Delete some EAs or run e2fsck.
[   99.029412][ T4467] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   99.284390][ T4252] EXT4-fs (loop4): unmounting filesystem.
[   99.892713][ T4476] loop4: detected capacity change from 0 to 1024
[   99.912143][ T4476] EXT4-fs: Ignoring removed nobh option
[   99.929039][ T4476] EXT4-fs: Ignoring removed bh option
[   99.980119][ T4476] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  100.059443][ T4476] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  100.168690][ T4481] loop1: detected capacity change from 0 to 1024
[  100.235628][ T4481] EXT4-fs: Ignoring removed nobh option
[  100.244991][ T4481] EXT4-fs: Ignoring removed bh option
[  100.285064][ T4481] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  100.345695][ T4475] EXT4-fs error (device loop4): ext4_map_blocks:745: inode #15: block 612: comm syz.4.33: lblock 612 mapped to illegal pblock 612 (length 1)
[  100.397775][ T4481] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  100.536330][ T4475] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #15: block 612: comm syz.4.33: lblock 612 mapped to illegal pblock 612 (length 1)
[  100.685941][ T4489] device bridge_slave_0 left promiscuous mode
[  100.741140][ T4489] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.074601][ T4495] loop2: detected capacity change from 0 to 1024
[  101.136378][ T4495] EXT4-fs: Ignoring removed nobh option
[  101.148356][ T4495] EXT4-fs: Ignoring removed bh option
[  101.228841][ T4499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.37'.
[  101.869381][ T4499] syz.3.37 (4499) used greatest stack depth: 17184 bytes left
[  101.895301][ T4495] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  101.967715][    T9] EXT4-fs error (device loop4): ext4_map_blocks:745: inode #15: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 3)
[  102.067590][ T4495] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  102.078897][    T9] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 3 with error 117
[  102.092238][    T9] EXT4-fs (loop4): This should not happen!! Data will be lost
[  102.092238][    T9] 
[  102.107111][    T9] EXT4-fs error (device loop4): ext4_map_blocks:745: inode #15: block 592: comm kworker/u4:0: lblock 592 mapped to illegal pblock 592 (length 1)
[  102.151506][ T4505] tipc: Started in network mode
[  102.169765][ T4505] tipc: Node identity bef1905944f2, cluster identity 4711
[  102.190094][    T9] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 592 with max blocks 1 with error 117
[  102.197549][ T4505] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.227228][    T9] EXT4-fs (loop4): This should not happen!! Data will be lost
[  102.227228][    T9] 
[  102.247193][ T4507] device syzkaller0 entered promiscuous mode
[  102.321924][ T4252] EXT4-fs (loop4): unmounting filesystem.
[  102.328711][ T4504] tipc: Resetting bearer <eth:syzkaller0>
[  102.442807][ T4494] ==================================================================
[  102.450922][ T4494] BUG: KASAN: use-after-free in ext4_find_extent+0xbcc/0xe00
[  102.458349][ T4494] Read of size 4 at addr ffff888051f71018 by task syz.2.38/4494
[  102.466046][ T4494] 
[  102.468415][ T4494] CPU: 0 PID: 4494 Comm: syz.2.38 Not tainted 6.1.141-syzkaller #0
[  102.476343][ T4494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  102.486454][ T4494] Call Trace:
[  102.489849][ T4494]  <TASK>
[  102.492802][ T4494]  dump_stack_lvl+0x168/0x22e
[  102.497529][ T4494]  ? __lock_acquire+0x7c50/0x7c50
[  102.502596][ T4494]  ? show_regs_print_info+0x12/0x12
[  102.507842][ T4494]  ? load_image+0x3b0/0x3b0
[  102.512380][ T4494]  ? __virt_addr_valid+0x465/0x540
[  102.517546][ T4494]  ? ext4_find_extent+0xbcc/0xe00
[  102.522608][ T4494]  print_report+0xa8/0x220
[  102.527066][ T4494]  kasan_report+0x10b/0x140
[  102.531624][ T4494]  ? ext4_find_extent+0xbcc/0xe00
[  102.536694][ T4494]  ext4_find_extent+0xbcc/0xe00
[  102.541589][ T4494]  ext4_ext_map_blocks+0x27d/0x66d0
[  102.546833][ T4494]  ? __lock_acquire+0x12e5/0x7c50
[  102.551912][ T4494]  ? ext4_ext_release+0x10/0x10
[  102.556805][ T4494]  ? rwsem_write_trylock+0x12f/0x1b0
[  102.562140][ T4494]  ? ext4_es_lookup_extent+0x443/0xb20
[  102.567658][ T4494]  ext4_map_blocks+0x9d1/0x1b60
[  102.572561][ T4494]  ? ext4_issue_zeroout+0x250/0x250
[  102.577890][ T4494]  _ext4_get_block+0x1d7/0x4e0
[  102.582788][ T4494]  ? alloc_buffer_head+0xd4/0x100
[  102.587867][ T4494]  ? __lock_acquire+0x7c50/0x7c50
[  102.592937][ T4494]  ? ext4_get_block+0x40/0x40
[  102.597648][ T4494]  ? attach_page_private+0x110/0x300
[  102.602979][ T4494]  ? create_empty_buffers+0x59e/0x7a0
[  102.608405][ T4494]  ? do_raw_spin_unlock+0x11d/0x230
[  102.613658][ T4494]  ext4_get_block_unwritten+0x2a/0x100
[  102.619159][ T4494]  __block_write_begin_int+0x54b/0x1a70
[  102.624763][ T4494]  ? _ext4_get_block+0x4e0/0x4e0
[  102.629733][ T4494]  ? page_zero_new_buffers+0x650/0x650
[  102.635243][ T4494]  ? ext4_journal_check_start+0x17e/0x240
[  102.641000][ T4494]  block_page_mkwrite+0x2d8/0x5f0
[  102.646054][ T4494]  ? _ext4_get_block+0x4e0/0x4e0
[  102.651030][ T4494]  ext4_page_mkwrite+0x3b2/0x10c0
[  102.656091][ T4494]  ? _ext4_get_block+0x4e0/0x4e0
[  102.661063][ T4494]  ? ext4_change_inode_journal_flag+0x6b0/0x6b0
[  102.667341][ T4494]  ? count_memcg_event_mm+0x8f/0x3b0
[  102.672657][ T4494]  ? put_page+0x270/0x270
[  102.677001][ T4494]  do_page_mkwrite+0x16b/0x5c0
[  102.681783][ T4494]  handle_mm_fault+0x1b10/0x3e70
[  102.686735][ T4494]  ? mt_find+0x145/0x810
[  102.690998][ T4494]  ? numa_migrate_prep+0x250/0x250
[  102.696125][ T4494]  ? lock_chain_count+0x20/0x20
[  102.700996][ T4494]  ? lock_mm_and_find_vma+0xae/0x2f0
[  102.706291][ T4494]  do_user_addr_fault+0x51f/0xb10
[  102.711337][ T4494]  exc_page_fault+0x60/0x100
[  102.715948][ T4494]  asm_exc_page_fault+0x22/0x30
[  102.720810][ T4494] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40
[  102.727414][ T4494] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 <f3> a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90
[  102.747036][ T4494] RSP: 0018:ffffc90004acfa88 EFLAGS: 00050246
[  102.753115][ T4494] RAX: ffffffff8407c001 RBX: 0000000000000040 RCX: 0000000000000040
[  102.761102][ T4494] RDX: 0000000000000040 RSI: ffffc90004acfb20 RDI: 000020000004e000
[  102.769092][ T4494] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffff52000959f6c
[  102.777081][ T4494] R10: fffff52000959f6c R11: 1ffff92000959f64 R12: 00007fffffffefc0
[  102.785080][ T4494] R13: 000000007ffe4a80 R14: 000020000004e000 R15: ffffc90004acfb20
[  102.793074][ T4494]  ? _copy_to_user+0xa1/0x130
[  102.797770][ T4494]  _copy_to_user+0xea/0x130
[  102.802304][ T4494]  rng_dev_read+0x3c5/0x710
[  102.806818][ T4494]  ? hwrng_yield+0x20/0x20
[  102.811241][ T4494]  ? common_file_perm+0x171/0x1c0
[  102.816275][ T4494]  ? fsnotify_perm+0x39b/0x550
[  102.821053][ T4494]  do_iter_read+0x49f/0xb10
[  102.825564][ T4494]  ? vfs_iter_read+0xa0/0xa0
[  102.830161][ T4494]  ? __import_iovec+0x315/0x500
[  102.835028][ T4494]  ? import_iovec+0x6f/0xa0
[  102.839538][ T4494]  do_preadv+0x1f6/0x330
[  102.843798][ T4494]  ? do_writev+0x410/0x410
[  102.848227][ T4494]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  102.854218][ T4494]  ? lock_chain_count+0x20/0x20
[  102.859097][ T4494]  ? lockdep_hardirqs_on+0x94/0x140
[  102.864300][ T4494]  do_syscall_64+0x4c/0xa0
[  102.868727][ T4494]  ? clear_bhb_loop+0x60/0xb0
[  102.873438][ T4494]  ? clear_bhb_loop+0x60/0xb0
[  102.878125][ T4494]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  102.884037][ T4494] RIP: 0033:0x7fe8b7d8e929
[  102.888471][ T4494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  102.908083][ T4494] RSP: 002b:00007fe8b8c98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  102.916505][ T4494] RAX: ffffffffffffffda RBX: 00007fe8b7fb5fa0 RCX: 00007fe8b7d8e929
[  102.924482][ T4494] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003
[  102.932457][ T4494] RBP: 00007fe8b7e10b39 R08: 0000000000000000 R09: 0000000000000000
[  102.940439][ T4494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  102.948421][ T4494] R13: 0000000000000000 R14: 00007fe8b7fb5fa0 R15: 00007ffd710cc768
[  102.956403][ T4494]  </TASK>
[  102.959436][ T4494] 
[  102.961760][ T4494] The buggy address belongs to the physical page:
[  102.968182][ T4494] page:ffffea000147dc40 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x51f71
[  102.978354][ T4494] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  102.985480][ T4494] raw: 00fff00000000000 ffffea000147dc88 ffffea000147dc08 0000000000000000
[  102.994069][ T4494] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000
[  103.002650][ T4494] page dumped because: kasan: bad access detected
[  103.009073][ T4494] page_owner tracks the page as freed
[  103.014440][ T4494] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 4493, tgid 4490 (syz.3.37), ts 100864717659, free_ts 101926621501
[  103.031985][ T4494]  post_alloc_hook+0x173/0x1a0
[  103.036770][ T4494]  get_page_from_freelist+0x1a26/0x1ac0
[  103.042317][ T4494]  __alloc_pages+0x1df/0x4e0
[  103.046913][ T4494]  __folio_alloc+0xe/0x30
[  103.051247][ T4494]  vma_alloc_folio+0x4a3/0x900
[  103.056024][ T4494]  shmem_alloc_and_acct_folio+0x42e/0xb60
[  103.061759][ T4494]  shmem_get_folio_gfp+0x1361/0x3400
[  103.067055][ T4494]  shmem_fault+0x1be/0x7b0
[  103.071487][ T4494]  __do_fault+0x13b/0x4e0
[  103.075827][ T4494]  handle_mm_fault+0x28ca/0x3e70
[  103.080770][ T4494]  __get_user_pages+0x3ff/0xeb0
[  103.085631][ T4494]  populate_vma_page_range+0x214/0x2b0
[  103.091106][ T4494]  __mm_populate+0x248/0x370
[  103.095706][ T4494]  vm_mmap_pgoff+0x203/0x2b0
[  103.100298][ T4494]  do_syscall_64+0x4c/0xa0
[  103.104722][ T4494]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  103.110628][ T4494] page last free stack trace:
[  103.115297][ T4494]  free_unref_page_prepare+0x8b4/0x9a0
[  103.120768][ T4494]  free_unref_page_list+0xbb/0x8e0
[  103.125899][ T4494]  release_pages+0x1f92/0x2200
[  103.130676][ T4494]  __pagevec_release+0x6d/0xe0
[  103.135455][ T4494]  shmem_undo_range+0x75b/0x2050
[  103.140408][ T4494]  shmem_evict_inode+0x248/0xa40
[  103.145362][ T4494]  evict+0x485/0x870
[  103.149266][ T4494]  __dentry_kill+0x431/0x650
[  103.153857][ T4494]  dentry_kill+0xb8/0x290
[  103.158192][ T4494]  dput+0xfa/0x1d0
[  103.161935][ T4494]  __fput+0x5e0/0x920
[  103.165922][ T4494]  task_work_run+0x1ca/0x250
[  103.170522][ T4494]  do_exit+0x936/0x2400
[  103.174690][ T4494]  do_group_exit+0x217/0x2d0
[  103.179289][ T4494]  get_signal+0x1272/0x1350
[  103.183807][ T4494]  arch_do_signal_or_restart+0xb0/0x1230
[  103.189451][ T4494] 
[  103.191775][ T4494] Memory state around the buggy address:
[  103.197413][ T4494]  ffff888051f70f00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  103.205476][ T4494]  ffff888051f70f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  103.213542][ T4494] >ffff888051f71000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  103.221604][ T4494]                             ^
[  103.226453][ T4494]  ffff888051f71080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  103.234515][ T4494]  ffff888051f71100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  103.242573][ T4494] ==================================================================
[  103.251963][  T129] tipc: Node number set to 4194537561
[  103.266221][ T4504] tipc: Disabling bearer <eth:syzkaller0>
[  103.554047][ T4494] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  103.561311][ T4494] CPU: 1 PID: 4494 Comm: syz.2.38 Not tainted 6.1.141-syzkaller #0
[  103.569218][ T4494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  103.579287][ T4494] Call Trace:
[  103.582581][ T4494]  <TASK>
[  103.585536][ T4494]  dump_stack_lvl+0x168/0x22e
[  103.590250][ T4494]  ? memcpy+0x3c/0x60
[  103.594254][ T4494]  ? show_regs_print_info+0x12/0x12
[  103.599484][ T4494]  ? load_image+0x3b0/0x3b0
[  103.604018][ T4494]  panic+0x2c9/0x710
[  103.607934][ T4494]  ? bpf_jit_dump+0xd0/0xd0
[  103.612463][ T4494]  ? _raw_spin_unlock_irqrestore+0xf6/0x100
[  103.618396][ T4494]  ? _raw_spin_unlock+0x40/0x40
[  103.623362][ T4494]  ? print_memory_metadata+0x314/0x400
[  103.628846][ T4494]  check_panic_on_warn+0x80/0xa0
[  103.633813][ T4494]  ? ext4_find_extent+0xbcc/0xe00
[  103.638862][ T4494]  end_report+0x66/0x110
[  103.643139][ T4494]  kasan_report+0x118/0x140
[  103.647674][ T4494]  ? ext4_find_extent+0xbcc/0xe00
[  103.652726][ T4494]  ext4_find_extent+0xbcc/0xe00
[  103.657608][ T4494]  ext4_ext_map_blocks+0x27d/0x66d0
[  103.662844][ T4494]  ? __lock_acquire+0x12e5/0x7c50
[  103.667907][ T4494]  ? ext4_ext_release+0x10/0x10
[  103.672789][ T4494]  ? rwsem_write_trylock+0x12f/0x1b0
[  103.678098][ T4494]  ? ext4_es_lookup_extent+0x443/0xb20
[  103.683587][ T4494]  ext4_map_blocks+0x9d1/0x1b60
[  103.688471][ T4494]  ? ext4_issue_zeroout+0x250/0x250
[  103.693696][ T4494]  _ext4_get_block+0x1d7/0x4e0
[  103.698478][ T4494]  ? alloc_buffer_head+0xd4/0x100
[  103.703533][ T4494]  ? __lock_acquire+0x7c50/0x7c50
[  103.708584][ T4494]  ? ext4_get_block+0x40/0x40
[  103.713284][ T4494]  ? attach_page_private+0x110/0x300
[  103.718717][ T4494]  ? create_empty_buffers+0x59e/0x7a0
[  103.724171][ T4494]  ? do_raw_spin_unlock+0x11d/0x230
[  103.729408][ T4494]  ext4_get_block_unwritten+0x2a/0x100
[  103.734894][ T4494]  __block_write_begin_int+0x54b/0x1a70
[  103.740491][ T4494]  ? _ext4_get_block+0x4e0/0x4e0
[  103.745497][ T4494]  ? page_zero_new_buffers+0x650/0x650
[  103.751007][ T4494]  ? ext4_journal_check_start+0x17e/0x240
[  103.756759][ T4494]  block_page_mkwrite+0x2d8/0x5f0
[  103.761896][ T4494]  ? _ext4_get_block+0x4e0/0x4e0
[  103.766856][ T4494]  ext4_page_mkwrite+0x3b2/0x10c0
[  103.771907][ T4494]  ? _ext4_get_block+0x4e0/0x4e0
[  103.776872][ T4494]  ? ext4_change_inode_journal_flag+0x6b0/0x6b0
[  103.783142][ T4494]  ? count_memcg_event_mm+0x8f/0x3b0
[  103.788482][ T4494]  ? put_page+0x270/0x270
[  103.792858][ T4494]  do_page_mkwrite+0x16b/0x5c0
[  103.797659][ T4494]  handle_mm_fault+0x1b10/0x3e70
[  103.802635][ T4494]  ? mt_find+0x145/0x810
[  103.806918][ T4494]  ? numa_migrate_prep+0x250/0x250
[  103.812065][ T4494]  ? lock_chain_count+0x20/0x20
[  103.816950][ T4494]  ? lock_mm_and_find_vma+0xae/0x2f0
[  103.822267][ T4494]  do_user_addr_fault+0x51f/0xb10
[  103.827331][ T4494]  exc_page_fault+0x60/0x100
[  103.831953][ T4494]  asm_exc_page_fault+0x22/0x30
[  103.836827][ T4494] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40
[  103.843454][ T4494] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 <f3> a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90
[  103.863092][ T4494] RSP: 0018:ffffc90004acfa88 EFLAGS: 00050246
[  103.869193][ T4494] RAX: ffffffff8407c001 RBX: 0000000000000040 RCX: 0000000000000040
[  103.877190][ T4494] RDX: 0000000000000040 RSI: ffffc90004acfb20 RDI: 000020000004e000
[  103.885173][ T4494] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffff52000959f6c
[  103.893153][ T4494] R10: fffff52000959f6c R11: 1ffff92000959f64 R12: 00007fffffffefc0
[  103.901131][ T4494] R13: 000000007ffe4a80 R14: 000020000004e000 R15: ffffc90004acfb20
[  103.909115][ T4494]  ? _copy_to_user+0xa1/0x130
[  103.913818][ T4494]  _copy_to_user+0xea/0x130
[  103.918334][ T4494]  rng_dev_read+0x3c5/0x710
[  103.922849][ T4494]  ? hwrng_yield+0x20/0x20
[  103.927275][ T4494]  ? common_file_perm+0x171/0x1c0
[  103.932311][ T4494]  ? fsnotify_perm+0x39b/0x550
[  103.937088][ T4494]  do_iter_read+0x49f/0xb10
[  103.941638][ T4494]  ? vfs_iter_read+0xa0/0xa0
[  103.946233][ T4494]  ? __import_iovec+0x315/0x500
[  103.951092][ T4494]  ? import_iovec+0x6f/0xa0
[  103.955607][ T4494]  do_preadv+0x1f6/0x330
[  103.959861][ T4494]  ? do_writev+0x410/0x410
[  103.964291][ T4494]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  103.970284][ T4494]  ? lock_chain_count+0x20/0x20
[  103.975151][ T4494]  ? lockdep_hardirqs_on+0x94/0x140
[  103.980361][ T4494]  do_syscall_64+0x4c/0xa0
[  103.984792][ T4494]  ? clear_bhb_loop+0x60/0xb0
[  103.989474][ T4494]  ? clear_bhb_loop+0x60/0xb0
[  103.994159][ T4494]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  104.000071][ T4494] RIP: 0033:0x7fe8b7d8e929
[  104.004500][ T4494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  104.024115][ T4494] RSP: 002b:00007fe8b8c98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  104.032544][ T4494] RAX: ffffffffffffffda RBX: 00007fe8b7fb5fa0 RCX: 00007fe8b7d8e929
[  104.040523][ T4494] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003
[  104.048502][ T4494] RBP: 00007fe8b7e10b39 R08: 0000000000000000 R09: 0000000000000000
[  104.056481][ T4494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  104.064457][ T4494] R13: 0000000000000000 R14: 00007fe8b7fb5fa0 R15: 00007ffd710cc768
[  104.072440][ T4494]  </TASK>
[  104.075841][ T4494] Kernel Offset: disabled
[  104.080171][ T4494] Rebooting in 86400 seconds..