last executing test programs:

50.859395637s ago: executing program 0 (id=343):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001)
syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue1\x00', 0x5})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000140)={0x2, 0x1000, 0x40, 0x0, 0xf})

49.710107523s ago: executing program 0 (id=347):
r0 = socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r1 = getpgrp(0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x48}}, 0x0)
setrlimit(0xa, &(0x7f0000000080)={0x7f3, 0x4})
sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x1001)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000340)={0x1})
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x100000000c2, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_io_uring_setup(0x3c5f, 0x0, 0x0, 0x0, 0x0)
keyctl$session_to_parent(0x12)
r5 = socket$tipc(0x1e, 0x2, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, <r6=>0x0})
ptrace$poke(0x5, r6, &(0x7f0000000100), 0x2)
bind$tipc(r5, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x4, 0xfffffffd}}, 0x10)
r7 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f00000002c0)={0x42, 0x4, 0x2}, 0x10)
bind$tipc(r7, 0x0, 0x0)
bind$tipc(r5, 0x0, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda06", 0x10}], 0x1)

44.954203818s ago: executing program 0 (id=359):
socket(0x1e, 0x1, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0xc0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
socket$netlink(0x10, 0x3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0)
r1 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x76fd, 0x400, 0x5})
mlock(&(0x7f00003ef000/0x4000)=nil, 0x4000)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
madvise(&(0x7f0000bc0000/0x3000)=nil, 0x3000, 0xc)
keyctl$session_to_parent(0x12)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)

35.414212808s ago: executing program 0 (id=371):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x24000, 0x0)
mkdirat$cgroup(r3, 0x0, 0x1ff)
setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, 0x0, 0x0)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x10, 0x701, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0)

34.383880871s ago: executing program 0 (id=374):
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
preadv2(r0, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0)

32.742631817s ago: executing program 0 (id=379):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0)
r1 = inotify_init1(0x800)
inotify_add_watch(r1, 0x0, 0x60000526)
mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
alarm(0xfffffffffffff854)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x18, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
ioctl$COMEDI_SUBDINFO(r0, 0x80486402, 0x0)

16.332268489s ago: executing program 32 (id=379):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0)
r1 = inotify_init1(0x800)
inotify_add_watch(r1, 0x0, 0x60000526)
mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
alarm(0xfffffffffffff854)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x18, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
ioctl$COMEDI_SUBDINFO(r0, 0x80486402, 0x0)

11.932297426s ago: executing program 1 (id=409):
syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2)
socket(0x1d, 0x0, 0x3)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r0 = openat$vcs(0xffffff9c, &(0x7f0000000180), 0x50040, 0x0)
getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000001c0), &(0x7f0000000240)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$qrtr(0x2a, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0)
write$nbd(r2, &(0x7f0000000340)={0x1000000, 0x0, 0x0, 0x40, 0x9, "82b0cfc4337965941538be09000000000000000000007400a391793ba70d0000000000fd"}, 0x34)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001880)={r2, &(0x7f0000000880)="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"}, 0x1c)
mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
umount2(&(0x7f00000002c0)='./file0\x00', 0x9)
r3 = openat$nci(0xffffff9c, &(0x7f0000000140), 0x2, 0x0)
r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SW_SYNC_IOC_INC(r4, 0x40045701, &(0x7f00000002c0)=0x3)
preadv(r3, 0x0, 0x0, 0x9, 0x8001)

10.584438106s ago: executing program 3 (id=410):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = syz_open_dev$sndctrl(0x0, 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
syz_emit_ethernet(0x76, &(0x7f0000000580)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d3ffff", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a}, @srh={0xc, 0x0, 0x4, 0x0, 0x9, 0x20, 0x2}]}}}}}}}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18c0012})
write$uinput_user_dev(r5, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0x50, [0x2, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x1, 0x6, 0xc, 0x2, 0x9, 0x1, 0x4, 0x8001000, 0x7fffffff, 0x51, 0x8, 0x800, 0xa4d, 0x3ff, 0x4, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x4, 0xa, 0x8, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x20009, 0x9, 0x9, 0x80000005, 0x12, 0x800, 0x2c, 0x0, 0x2329, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x0, 0x3, 0x5, 0x4009, 0x80, 0xb, 0x8001, 0x40, 0xa1, 0x4, 0xffffffff, 0x5, 0x10004, 0x9e, 0xffffff00, 0x7ff, 0x6, 0x7, 0x0, 0xe, 0xffff3f16, 0xc, 0x2, 0x9, 0xa, 0x5, 0x2, 0x207, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x280007, 0x8], [0x20002, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x1, 0x8, 0x7aae, 0x5, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x2, 0x2b0, 0x3, 0x97f82544, 0x8, 0x0, 0x0, 0x9, 0x5, 0x4, 0x10000, 0xc90, 0xffffff3c, 0x8b2, 0x10, 0x4, 0xff, 0x140, 0x2, 0x2, 0x1000000c, 0x0, 0x6, 0x7, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x3fff80, 0x2, 0x0, 0x8, 0xdd, 0x1, 0x9, 0xc3, 0x20ffff, 0x7a0], [0x9, 0x3a8d, 0xffff9a7f, 0x8000200, 0x6, 0x1, 0x1, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x1f, 0x81, 0xa, 0x6, 0x2, 0x200, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x4, 0x5, 0x80000001, 0xffff, 0x101, 0x0, 0xfffffffd, 0x1, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1904, 0x0, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x80, 0x8]}, 0x45c)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{0x0, 0x1, 0x0, 0xffffffff, 'syz0\x00', 0x71}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0})

10.584007696s ago: executing program 1 (id=411):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000001e40)={0xfff, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105c45b24fd", "a7c947420000000000000000ff4a70f3"}, 0x0, 0x5})
preadv(r1, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000000)={0x2, 0x1, 0x3, 0x2, 0x4})

10.152517045s ago: executing program 4 (id=413):
socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x0, {0x1, 0xf0}, 0x1}, 0x18)
connect$can_j1939(r3, &(0x7f0000000640)={0x1d, r4, 0x0, {}, 0x1}, 0x18)
sendfile(r3, 0xffffffffffffffff, 0x0, 0x1000000000000a)
syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0)

8.802320035s ago: executing program 1 (id=414):
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

8.729332057s ago: executing program 2 (id=415):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
connect$unix(r0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1)
sendmsg$IEEE802154_LIST_PHY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x95}, 0x40000)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff)
r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000001340))
ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x6f)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)

8.698073438s ago: executing program 3 (id=416):
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4ea1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf8}}, 0x10000016}, 0x1c)
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x24088000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4f, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/4\x00')
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r1, 0x0, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1e, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e6baa86bc100007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd0000008019000000020000008000", [0x6, 0xffffffff9673e35d]}})

8.11186516s ago: executing program 1 (id=417):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0xa4, 0x0, 0x9, 0x301, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @NFCTH_TUPLE={0x4}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_TUPLE={0x54, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @local}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8010}, 0x4)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000200)=0x2, 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000440)=0xc, 0x4)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044080}, 0x0)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x80, 0x4, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x48811}, 0x8000)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000006c0)={{0x1, 0x1, 0x18, <r3=>r0, {0x1}}, './file0/file0\x00'})
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$TIPC_NL_NAME_TABLE_GET(r3, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xa0, r4, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}]}]}, 0xa0}}, 0x4000810)
openat$autofs(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000900), 0x10102, 0x0)
r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000940), 0x511040, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, &(0x7f00000009c0)={0x401, 0x0, &(0x7f0000000980)=[r6]}, 0x1)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a40)={0xe4, 0x3, 0x1, 0x3, 0x0, 0x0, {0x2}, [@CTA_NAT_DST={0x3c, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010100}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @remote}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}]}, @CTA_NAT_SRC={0x34, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x4}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_STATUS={0x8}, @CTA_TUPLE_MASTER={0x30, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x810}, 0x4010)
socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000bc0)='veth1_macvtap\x00')
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000c40), 0xffffffffffffffff)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000dc0)={'wpan1\x00', <r8=>0x0})
sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r7, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc004}, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000f00), r3)
write$P9_RLERRORu(r3, &(0x7f0000001040)={0x12, 0x7, 0x1, {{0x5, 'TIPC\x00'}, 0x99}}, 0x12)

6.532240105s ago: executing program 4 (id=418):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x2, &(0x7f0000000340)=[{0xb1, 0x57, 0x0, 0xab49}, {0x6, 0x3, 0x6, 0x8}]}, 0x8)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0)
syz_extract_tcp_res(0x0, 0x6, 0x5)
syz_emit_ethernet(0x30f, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000640)={0x0, 0x2, [0x4a1, 0xc34, 0xf62, 0x4b]})
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r4, 0x800448d5, 0x0)
shutdown(r3, 0x1)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e22, @multicast2}}}, &(0x7f0000000280)=0x84)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x880b1)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x2004095)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040045}, 0x810)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0xe)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x28)
ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000))
socket$inet6_sctp(0xa, 0x5, 0x84)

6.410191768s ago: executing program 1 (id=419):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x0, 0x3, 0x1b, {0x1b, 0x14, "0ec1da1d97fb28b6684368ae5f69f591e84d4896350e223311"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x43f}}}, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x40, 0x5, 0xce, "79731a50412baed39497cd5c21cce7de70e493f33e5c53e66e68bd14102a852b1219feb5bd0c7118f70cbf36794821a2904ab2dea1fb3af5159e272891376c4fb40f063391f1de7e77a71651d861b046aa813d7392148b7ee1991427f81d84abd54bcde2d3a1cb554908d524fdac7518aee966658fb52aa828962ff6431302d319ac6c550a062c44ba22653e2ce5ab9afd209f9d44122763a4e99fdf398cb6b0d20a0350a820960451a71385e5d3762b5a52b5bd62005efe82a0f84b50527a98366b7edcdcf0330db7c9edbd61f4"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0xfd}, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f0000000340)={0x20, 0x82, 0x3, "084c89"}, &(0x7f0000000380)={0x20, 0x83, 0x3, "f93d8b"}, &(0x7f00000003c0)={0x20, 0x84, 0x2, "28de"}, &(0x7f0000000400)={0x20, 0x85, 0x3, "05f9a1"}})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010038"], 0x1c}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
syz_open_procfs(0x0, 0x0)
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone3(0x0, 0x0)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4)
r5 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0)
mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='vfat\x00', 0x800041, 0x0)
ioctl$IOC_PR_PREEMPT(r5, 0x40046109, &(0x7f0000000040)={0xd0, 0x2, 0x5})
connect$inet(r4, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x2)
r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000140)=@l={0x92, 0x0, 0xe0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

5.472177009s ago: executing program 4 (id=420):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sched_setaffinity(r0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100})
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1})
syz_clone3(&(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000})

5.166526756s ago: executing program 3 (id=421):
syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2)
socket(0x1d, 0x0, 0x3)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r0 = openat$vcs(0xffffff9c, &(0x7f0000000180), 0x50040, 0x0)
getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000001c0), &(0x7f0000000240)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$qrtr(0x2a, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0)
write$nbd(r2, &(0x7f0000000340)={0x1000000, 0x0, 0x0, 0x40, 0x9, "82b0cfc4337965941538be09000000000000000000007400a391793ba70d0000000000fd"}, 0x34)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001880)={r2, &(0x7f0000000880)="4ac6a6728c7057c003ef14ffac9a8ede36268acefa248ac0847fbd52a6b941d0056b15e142d1ace4efd6bd4e5e6af46cbfb203b1bb8f4cbbb6c93d2830ff33bdf8e772619bb8b597ff939dbe3f8450766f786bfc46329bdc255d2df667412e93f8d31d81ede15db8f94b45131aab7201f29866b2dc17511e9ad3d73233b27a2c6b762e19ae058e19b3211efd5dd379afabd9337ac8f6fa6a048c3393a6833ef97932f4c845825fcacaab0629e420cabac4c87239f6212888881ae6169d2bb1506e06b00afb65f7f1b142496b2bd919266190d34c3e3a00dd2ba7953ac030d74abea09cc2780b61a88e83c46e9a8a605e3f8fa28f23e15ed5329eedd31ec396688a155467e318d0b8ba34c7d191a4ddd14ceb3a6c337de63d36c303233b0818b2a8481a602a5230d5e601905f07c1fed05d7605737b3d37cbac980494997f85e61c510a70d4ce705a7badc197c700c9a2b2d506decaf301983361b57ecc4f64f89bbfc552400a0b7eae787607e32a0cf985813cca32ea18dee39da4bc4ded12ec983eb9b5b51fdb94f11da9eb87b86756d2f6c2df637ef6a89432c68ebff0e7826efe9e633f072a1e29de97fcff16b30693dd1df20e1a89dc4ca728073bf0edfce4644da3b48468a1c2433636f4d2e48db8ddb3d942496bb11d9ac7c388ae2062916018b4eaf8843465c40962e1b7cb062d32db236020e99d8de18a70862885532a4dd17ad383cc1db443f23c6e5ab44ddb5fcfebe1225dcaed0595194f179db455d7e5efe5df5961b437293a8f2436a90cf94a64c07e86bf1989bbc7044c4e15021f9c33c31740a8ae7a073e8b507341b70896b44fd00af117e601635a8d9613695848934e22b30587476062185a2d9a1f258dbf77cacb8ffe6cca1cc024fb11659a637e9bdfcf07b5a1ec0226425ad19e9bf0744501db925d2f46daebba755f3e44585e981816f53c32f105130f6757fad9fae496dbe4507c56d4ff3e2eaaacdab05e0bd46bd2822791ba43b2adf2e0954a1629ba06a30374997669e96ffe5003e7f661ded0631fd23c982496025dcb3cc5dbe1aae56389c09958b0e620b0453921fa21a6bfeab349930a6e9051e2491b9c87c89bfb0c54389a5a90671fab22538b6acb50d9140f0d3770c0f2683dfe442823242ae5bc84084971e96a666ff449a9bcc27022271443def7565264aa8ea5a4afbf1421ec72469c4d260122b8fd560b6f7acd2089c526deb89207375ee2ffa4c47b103560eac98b6b9b6a300dd6e23986b711a8a0b1918fccd2debef558886a0edebbd3ab7ba0b9368582ac287623a90cc443b55b563f1ec60edbb45d2734452222519ab04957f2b0bd5577080216c02c3aefa15a92c8f35eb72a4a282f2d167b91f5ec4ab61fcb4d0831c49a8a1e4e00cb48959a95211e85fd2150c5d046c5c759e0d579f75198cb57157e84cccadb281be9d4038d67589558c69a2743225713093c2f9b365b719b465f7e4dc7ae68403b4d049dce986ed04f624cac63ff0664ac14bc8a32aad5faf86f12cbce5e5ddd0d1daf1a224912ac53a0366d9c2725cc1ce359bfb5f5cd4e7d7ed8b7d5db761f8343e03fa1b638d8bc81b66f945d26f7519d2aeb77cabcf707a9a5ecb4b9e593aa5a6a961421f3c5fac0a1da1ad02d9e47369867ba3a4c57d01e2cd4f778249dd1f5fc7b59f5a7f8c1d6f5ede07fb95d5c954ea7723d4181219b71c8c7807cd87144049f3890b754c81882112827a37fa305ba3159fe920f1fdc255c8dc991941771c5f4ff580bce744a8b9639260ec345cd2328f8c467f970b897af04159f235f72f6cab529429ede677cd57fa6c5bfbff6cd2480e33c57d486714601f48162e8750fb1c2c815b54df3525ee311c591fa41f00812680fd7b9be619caf4af568437d77db5c6e42fa91facdde0893393e87f28039dabba1c29273517ca7bd224773dbcd0d0849003cdfcf6122d372623eba7e4f35773b11c840db2cd8c220c7f1482ab139f8ae3a7cea70e7a430dddc09be9017ee9f5e92dc3061309624c38cef0f695eacaa9932a2a935c8ba799c28e4b2f3e16fc2f643cef9e48ff344ecee342a7c1e13ce51f5d48958f954c76b45f8e9a7a4ee69c4fb53bff92659f461ae5b914ba66cc2e8ca64edded17de4f8d86f50ea1c4094b88e9151217302b9e233d306fb297a67178a75d52416bfe44938c174f9233f22a7d9fff3556f7eeb40d200af605160ec7342f3811faea07418701358d4bfc6d18e161ee6128edd7d321291da90dc852930ed0cf8098431e375124f4919f66f2cf539990f0f7f99a8e3bc55275cf60ea03251f9892d9b959efed12b84a27604687ae4469b5d1c28d03cb29e8cbf1b1ecde50c612b8c8890d8c985740604b4e3e4cea832ecfd3bb5038dbaea276eaa3938b20be57d66ceccbd4990a8d3682913a277e7b02181ec9d96f0bbab2892338326facfff4fb05323506be340d1556795dd8a49fd7d2f45ad0dadffef52533eb9105c89f61461d440292100f59229b260a70e3f9b831ab2c9f60996a9644d6676363cb05068460f538173408f6854a39bb7a999ab1047eddd3f6122aa0679995cd0dafca218766698a68fbf75056991ab5e7f8362cfa67b3c6a05ad87841dc8be1edd5d8a6972a8c7038cf6585ffdb8d549902a5dc58fb98847829871c23fe4ab996e9417018be5ff3f6da37b4cf48176f1dd8a257ffa739d8a2061baa1935439cd7e2f313aedbb003a96cdace07cc72d86dcbcc61f8c2938dbce32c9f17ddf115126c83a2dbadb44493dcc42dca8a785f5d9759e59cfe2758ae0910384a076325ca2b3c67f83a3c010f82f762978c8aabe38c30fdb7b881644175c2b6a828f60431707336d64d3768aeab7bd806a42dd18a239b95745f7f803b6110f5ef0d65dfad9b1e8d04bd42c651eee489d46bd296c790aaa34f739534070a76b0b876871edac7d2304099bb54884590b51aa680220cc2dbc9c3ecf5bf954eb51c1acd6549329e47140a1245f344274fd72a05d5c76ac6faeabdc7561aa375ffc54887720ecd405ff82dc4f9ed27f440d6be57f0653736e876d7109d03f126d52dc9d546eea34d00b442e9be7b5fa33b98e605926c8e39c1644c9cb39334d28a83cbc02f05e73e9b5d0a3be0caded1e7be2e7ed0b078bc0d749ac5483270692f39ed2b648b847d2fecbf56581745c0c15a6faa5dfac40e94f249cac74fcc297bb3645969590cb99ee9b630c61e0ca8c622f1f66732eec4af330a91ad60444d4de2c2aa47a902488b6202511b542935ee478880378d4e18ad26abde96a1c21c917dbd0c9e4233b79595a871b8abe23b078c1721d45fb36a9fa5249b7a9624774ac5e8f64785fa9c2421d717ff97cfa497d7b730d7d62d2c4678bf36a1a69cbecd94bd916949827fcd7f4ba30f7d5ebc6c851f7232fc98680154770b98e00f5294a87044150e0501686fdd409b060fe8773bc6e48b3ed6d96a0b2c06b05ed6382b8d6571e7704256e0589ec91cec529a587a6f5924c8089d1af458a2c058f465ee0bac693867a9ba3c1622eab93f0cb82dee81f49a825426c52f93e92efa2d516ada9fb34735ddc72243de09de60aca6e7738fd731d724d91b97ac59ce73012937de00f31b899f62677ae0ced6413d087b087d4af995305c2e286039b9c96d397e285eeba5f1b88a809550d7df9634b98f38fa37b881ce74b54d5e39e5fa21b4f1bfb50d2615d026a175f26bf41931905f416a16d7c1b98631987156982af8d09a86d51d1075614bb94b35f1fd039571489200902830da3d130ce2e0e70687c57d150ba6810db46a9841fe22502135a007bf5ef07621c0e0cb3c5cd2f02044b50481f92c2dcdcd2ded742d6209f476160f55934b4952474d31ae2fe4e3c062526f90f1d157e218689548b9428fe85d353c9c53acce7fae82211326cffeaa55e1d5f7b3d8d33ddf64db181942648ead68fa50d0221fc56faf2b6ee0819d0343272ab343aeed2915c03615d39d149d44e8d7665ce1a38435acd7024028f156ba5c325833d1c67e026048ed7eb8510f9a2e93ddd2bcd67a005d8cca6018179bcfa06ce3926390c53b6d5e7b8e1457e292e7e7e3b61c4004ea8f69bc07afcc38668f7321fbb1bfda0a34f833f99cbac160d71813070c9a6e8e0e726519dc93bf2036eef5aeaed26bf87fc2cb8eab8cd9418f518446dff64478541fcced68c874a88075f0a5968670bde512a2444c6abfd4dc8cbbc2d1025afa13a69caadf1896b343bacce6fc84dbc214bc8d512f62327cced78f1334dde05a19cd0c4442229f3af1ddace078aad37106f20e53b1c5fe92dd2dacdc4f07ba07397ff72ec9913ab6c8e66fc2c7a2622c4ff7ba27fd7def9dab918a0c7876f5b620b48eb893e608f332f483cf85594d3e71b309fcf9580e0ee83ac45cce642aa4d79fecc6ada27e6104f9238119e2b43122a15ac43e88c442a723eccac43ab5ae47050ac54c87590bdab5f8d6c195ef67520a4a7aedf10930e197f06cf546e036385d587db366180adf0f670ebd0e42e91ea3d33cf972d878af7fe93d6720a0d0adcd20f57495ae9e334f06916ce5d67b19da0228d1820a14f7c1d0077d683ff6ff8d93f8ec7753906f6351c8d34663a6b35edc9ea7d2be17fbe5cb5d1f3d6f08e511af7e4835e9f7f9d3e3259432924ae25bbb3ea463683f42a12cad569a7bb43c335ee153e21aa3a76f16d90a1cd4d7f4bd9d6928ce1750c62e79ab0c19e9af5dfe17af1bbdd041fd3c936b546a8f5e5b796dc1488c433e3fdf58309df4f7df6f84e9c9fba3bdffe4dffe9d300c339f8fffb92f3b3c4fe75b55c955a0ef42536c8181dc6131dbfb7d6a779ba7fd4075d46cd8a7e9e9dc41e33102da8a55db8c4e544a636c34ab557339dbc2337359508f15dc00ceb300469eace213e5271e9065e903fb54953288e593024cce2c6c0e3f295b354d57389686270512d171d055d4c5d1b1e519f8899829cd81b7577274ef337720b3ade83aa8826a6e5341d472191878b9326702e506f1847a2f7b25eedba0a04b0b118779497e1ab31be8bae65abf492407291be8a54346c333c75860c6de779b4c13b6e7305331e7db6506e88e91587c81bf816b1b9315763fd7ebfe6beb4f47014e3a9f198c4fc83944b4991b57cdbff3d7c7351becbfc0db7175fec16dd89b9fea469b1d81bc4da4ea137d0f871e72c065f318ddcb289108030b924b26b97f4a40df779cf766e0029da3713a53156c9de2ed0f3666f09833d7844d4f485143cb7a3393904796aa365e1830f06bec89b34d24053fc23e0bf699683131b0ad327418d7e9acc25dd67783cab30349ee97cca653034c7f0dc6b8b0e922602f30bfa2ee5ada218886b2d8a79daad247a13a96dba8c74a1f91176ca62ae315ec45622c0adfb254e02efbaac05bd3abfca614e0b9bfbab8500f87a8f253c4b06cd81ab6013e03ba854ac42b73ce47ee6ad75412afa4265a822c153e3f0bba475b20004f3fc77d40d6e024a3aed0c1101b59878ceb4624730ca1e3facb8fa6f4c69672235c0709d6488a166b5725a232105f3c8daa9dedfa345ab65a89c2082aace03740e7b6c947576624aae1b2698062d5c53d2a82dca42062cb4a91ebfeea98245df8d1211cde8e979e9d2ba6e3c229124ce7896a18639ed4c6a669ed9830a99b17b603248f5b0927deeb48ecd4c2c39d0e7440044544246e05c3c809af1febe1c881a8f846345f59881c843d2786aa82acf45e43ce13fd5aba3632081cc0be486ffd971247642c33764e7b4690cc29d7a9f76e83b"}, 0x1c)
mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
umount2(&(0x7f00000002c0)='./file0\x00', 0x9)
r3 = openat$nci(0xffffff9c, &(0x7f0000000140), 0x2, 0x0)
r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SW_SYNC_IOC_INC(r4, 0x40045701, &(0x7f00000002c0)=0x3)
preadv(r3, 0x0, 0x0, 0x9, 0x8001)

5.027900488s ago: executing program 4 (id=422):
sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0xf4, 0x0, 0x9, 0x301, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @NFCTH_TUPLE={0x48, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_TUPLE={0x54, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @local}}}]}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0xf4}, 0x1, 0x0, 0x0, 0x8010}, 0x4)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000200)=0x2, 0x4)
r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x94, r0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'nicvf0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xa}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'nr0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3f}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}]}, 0x94}}, 0x4801)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000400)=0x4, 0x4)
setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000440)=0xc, 0x4)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x3f7, 0x100, 0x70bd27, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4044080}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000006c0)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, {0x1}}, './file0/file0\x00'})
sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xa0, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}]}]}, 0xa0}}, 0x4000810)
openat$autofs(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000900), 0x10102, 0x0)
r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000940), 0x511040, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f00000009c0)={0x401, 0x0, &(0x7f0000000980)=[r4]}, 0x1)
socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000bc0)='veth1_macvtap\x00')
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000c40), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x40, r5, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x25}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '+\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4080)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000dc0)={'wpan1\x00', <r7=>0x0})
sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r6, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc004}, 0x0)
write$P9_RLERRORu(r2, &(0x7f0000001040)={0x12, 0x7, 0x1, {{0x5, 'TIPC\x00'}, 0x99}}, 0x12)

4.05253234s ago: executing program 2 (id=423):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000001e40)={0xfff, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105c45b24fd", "a7c947420000000000000000ff4a70f3"}, 0x0, 0x5})
preadv(r1, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000000)={0x2, 0x1, 0x3, 0x2, 0x4})

3.892462994s ago: executing program 4 (id=424):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$kcm(0x2, 0x3, 0x106)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xd, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, 0x0, 0x4040080)
sendmsg$inet(r3, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10}, 0x0)
r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r7, &(0x7f0000000100)="b8", 0x1, 0x2000c851, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r7, 0x84, 0x1a, &(0x7f00000002c0), &(0x7f0000000040)=0x8)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10)
ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2})
ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x408000, {0x0, 0xea60}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000040)=0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000340)={'macvlan0\x00', &(0x7f0000000240)=@ethtool_gstrings={0x1b, 0x4, 0x4, "4cdb7c35"}})
prlimit64(r0, 0x8, &(0x7f0000000180)={0x3, 0x7fffffffffffffff}, &(0x7f00000001c0))
ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000081000400000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37)

3.769852416s ago: executing program 3 (id=425):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
getpgrp(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = syz_open_dev$sndctrl(0x0, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
syz_emit_ethernet(0x76, &(0x7f0000000580)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d3ffff", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a}, @srh={0xc, 0x0, 0x4, 0x0, 0x9, 0x20, 0x2}]}}}}}}}, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18c0012})
write$uinput_user_dev(r4, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0x50, [0x2, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x1, 0x6, 0xc, 0x2, 0x9, 0x1, 0x4, 0x8001000, 0x7fffffff, 0x51, 0x8, 0x800, 0xa4d, 0x3ff, 0x4, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x4, 0xa, 0x8, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x20009, 0x9, 0x9, 0x80000005, 0x12, 0x800, 0x2c, 0x0, 0x2329, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x0, 0x3, 0x5, 0x4009, 0x80, 0xb, 0x8001, 0x40, 0xa1, 0x4, 0xffffffff, 0x5, 0x10004, 0x9e, 0xffffff00, 0x7ff, 0x6, 0x7, 0x0, 0xe, 0xffff3f16, 0xc, 0x2, 0x9, 0xa, 0x5, 0x2, 0x207, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x280007, 0x8], [0x20002, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x1, 0x8, 0x7aae, 0x5, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x2, 0x2b0, 0x3, 0x97f82544, 0x8, 0x0, 0x0, 0x9, 0x5, 0x4, 0x10000, 0xc90, 0xffffff3c, 0x8b2, 0x10, 0x4, 0xff, 0x140, 0x2, 0x2, 0x1000000c, 0x0, 0x6, 0x7, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x3fff80, 0x2, 0x0, 0x8, 0xdd, 0x1, 0x9, 0xc3, 0x20ffff, 0x7a0], [0x9, 0x3a8d, 0xffff9a7f, 0x8000200, 0x6, 0x1, 0x1, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x1f, 0x81, 0xa, 0x6, 0x2, 0x200, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x4, 0x5, 0x80000001, 0xffff, 0x101, 0x0, 0xfffffffd, 0x1, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1904, 0x0, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x80, 0x8]}, 0x45c)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{0x0, 0x1, 0x0, 0xffffffff, 'syz0\x00', 0x71}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0})

2.872586216s ago: executing program 2 (id=426):
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

2.827966847s ago: executing program 4 (id=427):
socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x0, {0x1, 0xf0}, 0x1}, 0x18)
connect$can_j1939(r3, &(0x7f0000000640)={0x1d, r4, 0x0, {}, 0x1}, 0x18)
sendfile(r3, 0xffffffffffffffff, 0x0, 0x1000000000000a)
syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0)

2.051068204s ago: executing program 2 (id=428):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0xa4, 0x0, 0x9, 0x301, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @NFCTH_TUPLE={0x4}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_TUPLE={0x54, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @local}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8010}, 0x4)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000200)=0x2, 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000440)=0xc, 0x4)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044080}, 0x0)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x80, 0x4, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x48811}, 0x8000)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000006c0)={{0x1, 0x1, 0x18, <r3=>r0, {0x1}}, './file0/file0\x00'})
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$TIPC_NL_NAME_TABLE_GET(r3, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xa0, r4, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}]}]}, 0xa0}}, 0x4000810)
openat$autofs(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000900), 0x10102, 0x0)
r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000940), 0x511040, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, &(0x7f00000009c0)={0x401, 0x0, &(0x7f0000000980)=[r6]}, 0x1)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a40)={0xe4, 0x3, 0x1, 0x3, 0x0, 0x0, {0x2}, [@CTA_NAT_DST={0x3c, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010100}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @remote}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}]}, @CTA_NAT_SRC={0x34, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x4}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_STATUS={0x8}, @CTA_TUPLE_MASTER={0x30, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x810}, 0x4010)
socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000bc0)='veth1_macvtap\x00')
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000c40), 0xffffffffffffffff)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000dc0)={'wpan1\x00', <r8=>0x0})
sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r7, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc004}, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000f00), r3)
write$P9_RLERRORu(r3, &(0x7f0000001040)={0x12, 0x7, 0x1, {{0x5, 'TIPC\x00'}, 0x99}}, 0x12)

1.207991143s ago: executing program 3 (id=429):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x2, &(0x7f0000000340)=[{0xb1, 0x57, 0x0, 0xab49}, {0x6, 0x3, 0x6, 0x8}]}, 0x8)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0)
syz_extract_tcp_res(0x0, 0x6, 0x5)
syz_emit_ethernet(0x30f, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000640)={0x0, 0x2, [0x4a1, 0xc34, 0xf62, 0x4b]})
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r4, 0x800448d5, 0x0)
shutdown(r3, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x880b1)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x2004095)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040045}, 0x810)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0xe)
ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000))
socket$inet6_sctp(0xa, 0x5, 0x84)

414.27055ms ago: executing program 2 (id=430):
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4ea1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf8}}, 0x10000016}, 0x1c)
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x24088000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4f, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/4\x00')
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0)

361.740302ms ago: executing program 3 (id=431):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff})
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vxcan0\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}}, 0x18)
close_range(r2, 0xffffffffffffffff, 0x0)

209.800095ms ago: executing program 1 (id=432):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x24000, 0x0)
mkdirat$cgroup(r3, 0x0, 0x1ff)
setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, 0x0, 0x0)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x10, 0x701, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0)

0s ago: executing program 2 (id=433):
sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0xf4, 0x0, 0x9, 0x301, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @NFCTH_TUPLE={0x48, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_TUPLE={0x54, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @local}}}]}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0xf4}, 0x1, 0x0, 0x0, 0x8010}, 0x4)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000200)=0x2, 0x4)
r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x94, r0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'nicvf0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xa}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'nr0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3f}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}]}, 0x94}}, 0x4801)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000400)=0x4, 0x4)
setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000440)=0xc, 0x4)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x3f7, 0x100, 0x70bd27, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4044080}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000006c0)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, {0x1}}, './file0/file0\x00'})
sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xa0, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}]}]}, 0xa0}}, 0x4000810)
openat$autofs(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000900), 0x10102, 0x0)
r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000940), 0x511040, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f00000009c0)={0x401, 0x0, &(0x7f0000000980)=[r4]}, 0x1)
socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000bc0)='veth1_macvtap\x00')
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000c40), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x40, r5, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x25}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '+\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4080)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000dc0)={'wpan1\x00', <r7=>0x0})
sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r6, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc004}, 0x0)
write$P9_RLERRORu(r2, &(0x7f0000001040)={0x12, 0x7, 0x1, {{0x5, 'TIPC\x00'}, 0x99}}, 0x12)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.32' (ED25519) to the list of known hosts.
[   69.229791][ T4258] cgroup: Unknown subsys name 'net'
[   69.337016][ T4258] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   70.891340][ T4258] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   71.442727][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[   71.449117][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[   72.388315][ T4283] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   72.396295][ T4283] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   72.418177][ T4284] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   72.427378][ T4284] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   72.427995][ T4287] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   72.435293][ T4284] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   72.443305][ T4287] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   72.450816][ T4284] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   72.457228][ T4287] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   72.464185][ T4284] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   72.472395][ T4287] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   72.485243][ T4284] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   72.485264][ T4287] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   72.492786][ T4284] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   72.502355][ T4287] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   72.506996][ T4284] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   72.513892][ T4287] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   72.521610][ T4284] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   72.529247][ T4287] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   72.535166][ T4284] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   72.542799][ T4287] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   72.549451][ T4284] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   72.556329][ T4287] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   72.563720][ T4284] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   72.571112][ T4287] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   72.579336][ T4284] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   72.593037][ T4281] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   72.620633][ T4276] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   72.627977][ T4281] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   72.643425][ T4281] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   72.985645][ T4272] chnl_net:caif_netlink_parms(): no params data found
[   73.118690][ T4270] chnl_net:caif_netlink_parms(): no params data found
[   73.184214][ T4271] chnl_net:caif_netlink_parms(): no params data found
[   73.196295][ T4273] chnl_net:caif_netlink_parms(): no params data found
[   73.218908][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.226131][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.234886][ T4272] device bridge_slave_0 entered promiscuous mode
[   73.247977][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.255541][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.264151][ T4272] device bridge_slave_1 entered promiscuous mode
[   73.286422][ T4274] chnl_net:caif_netlink_parms(): no params data found
[   73.324896][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.339802][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.429409][ T4272] team0: Port device team_slave_0 added
[   73.435697][ T4270] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.443964][ T4270] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.452502][ T4270] device bridge_slave_0 entered promiscuous mode
[   73.483165][ T4272] team0: Port device team_slave_1 added
[   73.489148][ T4270] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.496491][ T4270] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.504446][ T4270] device bridge_slave_1 entered promiscuous mode
[   73.558591][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.567013][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.578421][ T4273] device bridge_slave_0 entered promiscuous mode
[   73.595632][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.603166][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.611503][ T4271] device bridge_slave_0 entered promiscuous mode
[   73.624579][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.634744][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.642755][ T4271] device bridge_slave_1 entered promiscuous mode
[   73.658735][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.666033][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.677543][ T4273] device bridge_slave_1 entered promiscuous mode
[   73.685837][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.696120][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.722570][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.735561][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.743492][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.751869][ T4274] device bridge_slave_0 entered promiscuous mode
[   73.766078][ T4270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.778172][ T4270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.795786][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.802872][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.829757][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.841171][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.848350][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.856568][ T4274] device bridge_slave_1 entered promiscuous mode
[   73.897246][ T4270] team0: Port device team_slave_0 added
[   73.917969][ T4271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.929619][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.940931][ T4270] team0: Port device team_slave_1 added
[   73.970023][ T4271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.981118][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   74.012795][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   74.028613][ T4270] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.036516][ T4270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.063071][ T4270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.093544][ T4273] team0: Port device team_slave_0 added
[   74.105849][ T4272] device hsr_slave_0 entered promiscuous mode
[   74.112905][ T4272] device hsr_slave_1 entered promiscuous mode
[   74.125183][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   74.139497][ T4270] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.147111][ T4270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.173917][ T4270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.189324][ T4273] team0: Port device team_slave_1 added
[   74.205994][ T4271] team0: Port device team_slave_0 added
[   74.243850][ T4271] team0: Port device team_slave_1 added
[   74.285476][ T4270] device hsr_slave_0 entered promiscuous mode
[   74.292612][ T4270] device hsr_slave_1 entered promiscuous mode
[   74.299833][ T4270] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   74.308632][ T4270] Cannot create hsr debugfs directory
[   74.316781][ T4274] team0: Port device team_slave_0 added
[   74.324321][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.331911][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.358444][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.389383][ T4274] team0: Port device team_slave_1 added
[   74.396235][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.403631][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.433250][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.444989][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.453051][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.479408][ T4271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.518629][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.525692][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.552026][ T4271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.590114][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.597523][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.623886][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.641290][ T4283] Bluetooth: hci1: command 0x0409 tx timeout
[   74.647675][ T4283] Bluetooth: hci2: command 0x0409 tx timeout
[   74.654294][ T4284] Bluetooth: hci0: command 0x0409 tx timeout
[   74.675729][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.683236][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.711067][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.730588][ T4283] Bluetooth: hci4: command 0x0409 tx timeout
[   74.737992][ T4283] Bluetooth: hci3: command 0x0409 tx timeout
[   74.799129][ T4271] device hsr_slave_0 entered promiscuous mode
[   74.807029][ T4271] device hsr_slave_1 entered promiscuous mode
[   74.813868][ T4271] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   74.821689][ T4271] Cannot create hsr debugfs directory
[   74.831151][ T4273] device hsr_slave_0 entered promiscuous mode
[   74.839585][ T4273] device hsr_slave_1 entered promiscuous mode
[   74.847749][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   74.856845][ T4273] Cannot create hsr debugfs directory
[   74.909832][ T4274] device hsr_slave_0 entered promiscuous mode
[   74.916630][ T4274] device hsr_slave_1 entered promiscuous mode
[   74.923443][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   74.931636][ T4274] Cannot create hsr debugfs directory
[   75.150920][ T4272] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   75.164558][ T4272] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   75.202389][ T4272] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   75.216471][ T4272] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   75.272432][ T4270] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   75.296843][ T4270] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   75.315089][ T4270] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   75.328293][ T4270] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   75.386628][ T4271] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   75.397493][ T4271] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   75.419469][ T4271] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   75.442627][ T4271] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   75.507145][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.533085][ T4273] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   75.555147][ T4273] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   75.572177][ T4273] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   75.582568][ T4273] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   75.602693][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   75.612695][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   75.625493][ T4272] 8021q: adding VLAN 0 to HW filter on device team0
[   75.652430][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   75.663440][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   75.673740][ T4298] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.681236][ T4298] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.697200][ T4274] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   75.727165][ T4274] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   75.738415][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   75.747602][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   75.757560][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   75.766280][ T4298] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.773412][ T4298] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.783753][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   75.792886][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   75.817842][ T4270] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.828566][ T4274] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   75.844945][ T4274] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   75.854973][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   75.866460][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   75.903814][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   75.913670][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   75.924341][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   75.933563][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   75.944202][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   75.953664][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   75.962460][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   75.976742][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   75.985197][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   76.036858][ T4270] 8021q: adding VLAN 0 to HW filter on device team0
[   76.067908][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.105097][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   76.128319][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   76.139803][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.147237][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.175140][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   76.185560][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   76.194877][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.202245][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.210204][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   76.228640][ T4271] 8021q: adding VLAN 0 to HW filter on device team0
[   76.246997][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   76.256310][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   76.267330][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   76.286043][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   76.295219][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   76.305097][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   76.314990][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   76.339958][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   76.350080][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   76.359245][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   76.370072][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   76.379906][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.387086][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.419061][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.442963][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   76.452228][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   76.464883][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   76.473562][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.480809][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.494160][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   76.503312][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   76.512628][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   76.536564][ T4270] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   76.551935][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   76.573173][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   76.582841][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   76.592555][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   76.602648][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   76.613281][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   76.649299][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   76.673095][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   76.681788][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   76.689211][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   76.699045][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   76.711294][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.721391][ T4283] Bluetooth: hci2: command 0x041b tx timeout
[   76.721411][ T4284] Bluetooth: hci0: command 0x041b tx timeout
[   76.727763][ T4283] Bluetooth: hci1: command 0x041b tx timeout
[   76.754308][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.763540][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   76.774217][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   76.785243][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   76.794875][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   76.803116][ T4283] Bluetooth: hci4: command 0x041b tx timeout
[   76.809580][ T4283] Bluetooth: hci3: command 0x041b tx timeout
[   76.829075][ T4274] 8021q: adding VLAN 0 to HW filter on device team0
[   76.845169][ T4271] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   76.857223][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   76.869948][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   76.880632][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   76.888718][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   76.899145][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   76.931780][ T4273] 8021q: adding VLAN 0 to HW filter on device team0
[   76.942093][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   76.953423][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   76.972793][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.980041][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.990782][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   76.999646][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   77.022478][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.029727][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.044851][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   77.061870][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   77.082850][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   77.147698][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   77.157577][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   77.167991][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   77.178230][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   77.188633][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   77.198322][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   77.208187][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.215358][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.224138][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   77.232724][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   77.241645][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   77.250730][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   77.259193][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.266381][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.274874][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   77.284142][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   77.297793][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   77.306470][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   77.315076][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   77.323360][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   77.331709][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   77.339139][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   77.350097][ T4272] device veth0_vlan entered promiscuous mode
[   77.381655][ T4270] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.400559][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   77.409550][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   77.428329][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   77.455323][ T4274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   77.474763][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   77.490151][ T4272] device veth1_vlan entered promiscuous mode
[   77.513444][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   77.523139][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   77.532277][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   77.542352][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   77.554261][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   77.565825][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   77.575359][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   77.645871][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   77.654767][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   77.663683][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   77.673578][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   77.684627][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   77.693730][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   77.703832][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   77.712922][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   77.721238][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   77.738569][ T4270] device veth0_vlan entered promiscuous mode
[   77.756777][ T4272] device veth0_macvtap entered promiscuous mode
[   77.767837][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   77.778312][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   77.788308][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   77.796241][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   77.805195][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   77.814263][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   77.823329][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   77.835420][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   77.850020][ T4272] device veth1_macvtap entered promiscuous mode
[   77.865958][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.909645][ T4270] device veth1_vlan entered promiscuous mode
[   77.944091][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   77.976675][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   77.986449][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   78.004757][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   78.042019][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.070617][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   78.078877][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   78.099345][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   78.109906][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   78.126538][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   78.148001][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1
[   78.166175][ T4271] device veth0_vlan entered promiscuous mode
[   78.185128][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   78.202390][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   78.211567][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   78.220915][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   78.236470][ T4272] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.255546][ T4272] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.264960][ T4272] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.277112][ T4272] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.295761][ T4271] device veth1_vlan entered promiscuous mode
[   78.307123][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   78.316553][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   78.362404][ T4270] device veth0_macvtap entered promiscuous mode
[   78.387948][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   78.409890][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   78.431133][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   78.450648][ T4270] device veth1_macvtap entered promiscuous mode
[   78.496637][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0
[   78.510945][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   78.523342][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   78.532729][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   78.543954][ T4271] device veth0_macvtap entered promiscuous mode
[   78.603920][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   78.616656][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   78.625039][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   78.635340][ T4271] device veth1_macvtap entered promiscuous mode
[   78.649103][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.664395][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.676999][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.698867][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0
[   78.724899][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   78.735266][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   78.752871][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   78.768177][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   78.786620][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   78.801670][ T4283] Bluetooth: hci1: command 0x040f tx timeout
[   78.801758][ T4282] Bluetooth: hci0: command 0x040f tx timeout
[   78.808331][ T4283] Bluetooth: hci2: command 0x040f tx timeout
[   78.827095][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.838960][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.851771][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_1
[   78.859428][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   78.879595][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   78.888959][ T4283] Bluetooth: hci4: command 0x040f tx timeout
[   78.888991][ T4282] Bluetooth: hci3: command 0x040f tx timeout
[   78.923571][ T4270] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.932489][ T4270] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.942100][ T4270] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.952085][ T4270] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.004517][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   79.016973][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.028688][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.037258][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.054357][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   79.067991][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.085811][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0
[   79.098124][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   79.108549][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   79.117532][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   79.127014][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   79.136215][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   79.145387][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   79.154141][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   79.189984][ T4274] device veth0_vlan entered promiscuous mode
[   79.203311][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   79.220838][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.231687][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   79.243967][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.256498][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1
[   79.285189][ T4274] device veth1_vlan entered promiscuous mode
[   79.312565][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   79.321611][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   79.330892][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   79.356903][   T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.359135][ T4271] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.382683][   T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.396677][ T4271] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.405890][ T4271] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.415577][ T4271] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.439687][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   79.488233][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   79.498985][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   79.518673][ T4274] device veth0_macvtap entered promiscuous mode
[   79.532986][   T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.551533][   T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.579565][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   79.592225][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   79.601109][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   79.610113][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   79.628173][ T4298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.659030][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   79.672909][ T4298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.682094][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   79.724377][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   79.738525][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   79.753067][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   79.763010][ T4274] device veth1_macvtap entered promiscuous mode
[   79.780607][ T4273] device veth0_vlan entered promiscuous mode
[   79.841332][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.849202][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.900201][ T4273] device veth1_vlan entered promiscuous mode
[   79.925199][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   79.937138][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   79.946129][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   79.967595][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   79.978836][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.003430][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.017854][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.020449][ T4340] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   80.034663][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.047708][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.059953][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.084187][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   80.097157][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   80.122373][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   80.151177][   T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.152229][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.159081][   T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.172246][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.187830][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.200197][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.211323][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.222857][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.240752][ T4340] usb 1-1: Using ep0 maxpacket: 32
[   80.242759][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.249931][ T4340] usb 1-1: unable to get BOS descriptor or descriptor too short
[   80.264034][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   80.272523][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   80.283975][ T4340] usb 1-1: config 2 has an invalid interface number: 236 but max is 0
[   80.293525][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   80.302926][ T4340] usb 1-1: config 2 has no interface number 0
[   80.334181][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   80.357706][ T4340] usb 1-1: New USB device found, idVendor=0c45, idProduct=60af, bcdDevice=55.09
[   80.371313][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   80.379639][ T4340] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.411667][ T4273] device veth0_macvtap entered promiscuous mode
[   80.430703][ T4340] usb 1-1: Product: syz
[   80.446253][ T4357] tipc: Started in network mode
[   80.451915][ T4357] tipc: Node identity 4, cluster identity 4711
[   80.458096][ T4357] tipc: Node number set to 4
[   80.465503][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   80.494157][ T4340] usb 1-1: Manufacturer: syz
[   80.501858][ T4274] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.517913][ T4340] usb 1-1: SerialNumber: syz
[   80.523382][ T4274] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.562885][ T4274] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.591791][ T4274] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.663851][ T4273] device veth1_macvtap entered promiscuous mode
[   80.775194][ T4340] gspca_main: sonixb-2.14.0 probing 0c45:60af
[   80.841699][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.866197][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.881125][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.900376][ T4282] Bluetooth: hci0: command 0x0419 tx timeout
[   80.907197][ T4282] Bluetooth: hci1: command 0x0419 tx timeout
[   80.913846][ T4282] Bluetooth: hci2: command 0x0419 tx timeout
[   80.956517][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.967285][ T4282] Bluetooth: hci3: command 0x0419 tx timeout
[   80.978594][ T4282] Bluetooth: hci4: command 0x0419 tx timeout
[   80.987209][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.998409][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.008812][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   81.021151][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.044500][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.729608][ T4349] input: syz0 as /devices/virtual/input/input5
[   81.832412][ T4349] Zero length message leads to an empty skb
[   81.852342][   T14] usb 1-1: USB disconnect, device number 2
[   81.916506][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   81.967001][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   81.989361][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.031065][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.042135][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.053465][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.075179][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.111437][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.122742][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.144562][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.159912][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.193064][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   82.247244][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   82.276995][ T4273] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.300596][ T4273] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.324198][ T4273] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.341447][ T4273] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.355850][ T4383] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   82.357903][ T4381] loop2: detected capacity change from 0 to 7
[   82.417221][ T4263] Dev loop2: unable to read RDB block 7
[   82.431894][ T4263]  loop2: unable to read partition table
[   82.447867][ T4263] loop2: partition table beyond EOD, truncated
[   82.473127][ T4381] Dev loop2: unable to read RDB block 7
[   82.481227][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.521315][ T4381]  loop2: unable to read partition table
[   82.528034][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.550070][ T4381] loop2: partition table beyond EOD, truncated
[   82.559093][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   82.620483][ T4381] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[   82.744141][ T4368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.744532][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.787685][ T4368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.813684][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.867771][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   82.959677][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   83.209788][ T4368] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.220276][    T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!!
[   83.349650][ T4368] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.910310][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   83.930321][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   83.940294][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   83.950289][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   83.960285][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   83.970291][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   83.980286][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   83.990284][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   84.000286][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   84.303727][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   85.907592][ T4410] netlink: 'syz.0.19': attribute type 1 has an invalid length.
[   85.916927][ T4410] netlink: 'syz.0.19': attribute type 1 has an invalid length.
[   86.124028][   T14] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   86.823897][   T32] cfg80211: failed to load regulatory.db
[   87.221717][   T26] audit: type=1326 audit(1784192394.258:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4420 comm="syz.3.23" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe703f9de59 code=0x0
[   87.250613][   T14] usb 2-1: Using ep0 maxpacket: 32
[   87.280749][   T14] usb 2-1: config 0 has an invalid interface number: 132 but max is 0
[   87.289072][   T14] usb 2-1: config 0 has no interface number 0
[   87.336248][   T14] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   87.411357][   T14] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[   87.443987][   T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   87.492806][   T14] usb 2-1: Product: syz
[   87.530522][   T14] usb 2-1: Manufacturer: syz
[   87.547415][   T14] usb 2-1: SerialNumber: syz
[   87.769065][   T14] usb 2-1: config 0 descriptor??
[   88.023742][   T14] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[   88.210365][   T14] em28xx 2-1:0.132: Video interface 132 found:
[   88.291140][ T4441] netlink: 'syz.2.29': attribute type 11 has an invalid length.
[   88.452908][   T14] em28xx 2-1:0.132: unknown em28xx chip ID (0)
[   89.470771][   T14] em28xx 2-1:0.132: failed to read eeprom (err=-110)
[   89.477597][   T14] em28xx 2-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110]
[   89.788626][   T14] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[   90.582612][   T14] em28xx 2-1:0.132: analog set to bulk mode.
[   90.635622][   T14] usb 2-1: USB disconnect, device number 2
[   90.663596][   T14] em28xx 2-1:0.132: Disconnecting em28xx
[   90.811645][ T1191] em28xx 2-1:0.132: Registering V4L2 extension
[   92.326682][    C0] vcan0: j1939_tp_rxtimer: 0xffff888059791c00: rx timeout, send abort
[   92.337265][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888059791c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   92.353313][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888059790800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   93.600436][ T4316] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   93.654822][    C0] vcan0: j1939_tp_rxtimer: 0xffff888059790400: rx timeout, send abort
[   93.664401][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888059790400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   93.680281][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888059790000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   93.832309][ T4316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   93.870843][ T4316] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   93.911177][ T4505] syz.4.48 uses obsolete (PF_INET,SOCK_PACKET)
[   93.920657][ T4316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.988388][ T4316] usb 1-1: config 0 descriptor??
[   94.095857][ T1191] em28xx 2-1:0.132: Config register raw data: 0xffffffed
[   94.234715][ T4316] usbhid 1-1:0.0: can't add hid device: -71
[   94.251813][ T4316] usbhid: probe of 1-1:0.0 failed with error -71
[   94.294572][ T4316] usb 1-1: USB disconnect, device number 3
[   94.590405][ T1191] em28xx 2-1:0.132: AC97 chip type couldn't be determined
[   94.598961][ T1191] em28xx 2-1:0.132: No AC97 audio processor
[   94.620039][ T1191] usb 2-1: Decoder not found
[   94.625223][ T1191] em28xx 2-1:0.132: failed to create media graph
[   94.645947][ T1191] em28xx 2-1:0.132: V4L2 device video103 deregistered
[   94.682769][ T1191] em28xx 2-1:0.132: Remote control support is not available for this card.
[   94.692946][   T14] em28xx 2-1:0.132: Closing input extension
[   94.729927][   T14] em28xx 2-1:0.132: Freeing device
[   94.816205][ T4479] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   94.840425][ T4316] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   95.078245][ T4316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   95.287295][ T4316] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[   95.491345][ T4316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.755923][ T4316] usb 1-1: config 0 descriptor??
[   95.830599][ T4479] usb 4-1: Using ep0 maxpacket: 32
[   95.847622][ T4479] usb 4-1: unable to get BOS descriptor or descriptor too short
[   96.036257][ T4316] usb 1-1: can't set config #0, error -71
[   96.040761][ T4479] usb 4-1: config 2 has an invalid interface number: 236 but max is 0
[   96.060663][ T4316] usb 1-1: USB disconnect, device number 4
[   96.061845][ T4479] usb 4-1: config 2 has no interface number 0
[   96.094624][ T4479] usb 4-1: New USB device found, idVendor=0c45, idProduct=60af, bcdDevice=55.09
[   96.622069][ T4479] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.648882][ T4479] usb 4-1: Product: syz
[   96.655147][ T4479] usb 4-1: Manufacturer: syz
[   96.661502][ T4479] usb 4-1: SerialNumber: syz
[   97.244136][ T4479] usb 4-1: can't set config #2, error -71
[   97.287628][ T4479] usb 4-1: USB disconnect, device number 2
[   97.931883][ T4535] netlink: 'syz.3.56': attribute type 1 has an invalid length.
[   97.960900][ T4535] netlink: 'syz.3.56': attribute type 1 has an invalid length.
[  100.674743][ T4318] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  100.980556][ T4318] usb 2-1: Using ep0 maxpacket: 32
[  101.002798][ T4318] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  101.015276][ T4318] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  101.198584][ T4318] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  101.207876][ T4318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.226142][ T4318] usb 2-1: config 0 descriptor??
[  101.243689][ T4318] hub 2-1:0.0: USB hub found
[  102.199335][ T4318] hub 2-1:0.0: config failed, can't read hub descriptor (err -22)
[  102.223821][ T4318] usbhid 2-1:0.0: can't add hid device: -71
[  102.231055][ T4318] usbhid: probe of 2-1:0.0 failed with error -71
[  102.250881][   T32] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  102.327182][ T4318] usb 2-1: USB disconnect, device number 3
[  102.530347][   T32] usb 5-1: Using ep0 maxpacket: 32
[  102.544535][   T32] usb 5-1: unable to get BOS descriptor or descriptor too short
[  102.638663][   T32] usb 5-1: config 2 has an invalid interface number: 236 but max is 0
[  102.723545][   T32] usb 5-1: config 2 has no interface number 0
[  102.783252][   T32] usb 5-1: New USB device found, idVendor=0c45, idProduct=60af, bcdDevice=55.09
[  102.919750][   T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.940671][ T4589] netlink: 'syz.2.73': attribute type 1 has an invalid length.
[  102.958202][   T32] usb 5-1: Product: syz
[  102.963253][ T4589] netlink: 'syz.2.73': attribute type 1 has an invalid length.
[  102.964070][   T32] usb 5-1: Manufacturer: syz
[  102.979430][   T32] usb 5-1: SerialNumber: syz
[  103.222395][   T32] gspca_main: sonixb-2.14.0 probing 0c45:60af
[  103.912250][ T4596] input: syz0 as /devices/virtual/input/input7
[  104.022493][   T32] usb 5-1: USB disconnect, device number 2
[  104.753172][ T4598] sctp: failed to load transform for md5: -2
[  110.749858][ T1191] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  112.102185][ T1191] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  112.121124][ T1191] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  112.948629][ T1191] usb 5-1: New USB device found, idVendor=05a4, idProduct=8003, bcdDevice= 0.00
[  112.959078][ T1191] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.970664][ T1191] usb 5-1: config 0 descriptor??
[  112.993773][ T1191] usb 5-1: can't set config #0, error -71
[  113.008349][ T1191] usb 5-1: USB disconnect, device number 3
[  114.523133][ T1191] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  114.989500][ T4699] tipc: Started in network mode
[  115.154554][ T4699] tipc: Node identity 4, cluster identity 4711
[  115.578244][ T4699] tipc: Node number set to 4
[  115.600483][ T1191] usb 4-1: Using ep0 maxpacket: 16
[  115.656260][ T1191] usb 4-1: unable to get BOS descriptor or descriptor too short
[  115.683060][ T1191] usb 4-1: no configurations
[  115.690551][ T1191] usb 4-1: can't read configurations, error -22
[  116.834536][ T4718] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  116.922917][ T4718] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  117.569189][ T4713] can: request_module (can-proto-3) failed.
[  118.100394][ T4318] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[  118.790559][ T4318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  120.314383][ T4318] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  120.411028][ T4318] usb 3-1: New USB device found, idVendor=05a4, idProduct=8003, bcdDevice= 0.00
[  120.471566][ T4318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.655986][ T4318] usb 3-1: config 0 descriptor??
[  121.329831][ T4318] usb 3-1: can't set config #0, error -71
[  121.368413][ T4318] usb 3-1: USB disconnect, device number 2
[  121.696767][ T4747] 9pnet_fd: Insufficient options for proto=fd
[  123.334129][ T4763] sg_write: data in/out 200668/136 bytes for SCSI command 0x0-- guessing data in;
[  123.334129][ T4763]    program syz.4.116 not setting count and/or reply_len properly
[  123.540633][ T1191] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  123.578103][ T4768] netlink: 20 bytes leftover after parsing attributes in process `syz.0.117'.
[  123.800765][ T1191] usb 4-1: Using ep0 maxpacket: 16
[  124.229850][ T1191] usb 4-1: unable to get BOS descriptor or descriptor too short
[  124.249766][ T1191] usb 4-1: no configurations
[  124.306587][ T1191] usb 4-1: can't read configurations, error -22
[  125.245158][ T4778] can: request_module (can-proto-3) failed.
[  125.593149][ T4786] can: request_module (can-proto-3) failed.
[  125.773961][   T26] audit: type=1326 audit(1784192432.808:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4798 comm="syz.1.126" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab87f9de59 code=0x0
[  127.400820][ T3598] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  127.480509][ T4318] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  127.600463][ T3598] usb 2-1: Using ep0 maxpacket: 32
[  127.613390][ T3598] usb 2-1: config 0 has an invalid interface number: 132 but max is 0
[  127.696708][ T4318] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  127.716344][ T3598] usb 2-1: config 0 has no interface number 0
[  127.776623][ T4318] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  127.806449][ T3598] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  127.909434][ T4318] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  127.919875][ T4318] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.935986][ T3598] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  127.945965][ T3598] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.963373][ T3598] usb 2-1: Product: syz
[  127.967766][ T3598] usb 2-1: Manufacturer: syz
[  127.981959][ T4318] usb 5-1: config 0 descriptor??
[  127.990565][ T3598] usb 2-1: SerialNumber: syz
[  128.001826][ T4318] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  128.010704][   T22] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  128.039157][ T3598] usb 2-1: config 0 descriptor??
[  128.083622][ T3598] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  128.102125][ T3598] em28xx 2-1:0.132: Video interface 132 found:
[  128.120579][ T1191] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  128.200433][   T22] usb 1-1: Using ep0 maxpacket: 16
[  128.205596][ T4315] usb 5-1: USB disconnect, device number 4
[  128.229771][   T22] usb 1-1: unable to get BOS descriptor or descriptor too short
[  128.237965][   T22] usb 1-1: no configurations
[  128.243685][   T22] usb 1-1: can't read configurations, error -22
[  128.300494][ T1191] usb 4-1: Using ep0 maxpacket: 8
[  128.308553][ T1191] usb 4-1: config 0 has an invalid interface number: 52 but max is 0
[  128.317179][ T1191] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  128.328401][ T1191] usb 4-1: config 0 has no interface number 0
[  128.334747][ T1191] usb 4-1: config 0 interface 52 has no altsetting 0
[  128.343037][ T1191] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[  128.352253][ T1191] usb 4-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0
[  128.361346][ T1191] usb 4-1: Manufacturer: syz
[  128.368276][ T1191] usb 4-1: config 0 descriptor??
[  128.376486][ T1191] hub 4-1:0.52: bad descriptor, ignoring hub
[  128.382742][ T1191] hub: probe of 4-1:0.52 failed with error -5
[  128.490117][ T3598] em28xx 2-1:0.132: unknown em28xx chip ID (0)
[  128.587005][ T1191] usb 4-1: Can not set alternate setting to 1, error: -71
[  128.594995][ T1191] synaptics_usb: probe of 4-1:0.52 failed with error -71
[  128.631798][ T1191] usb 4-1: USB disconnect, device number 7
[  129.002682][ T4838] =======================================================
[  129.002682][ T4838] WARNING: The mand mount option has been deprecated and
[  129.002682][ T4838]          and is ignored by this kernel. Remove the mand
[  129.002682][ T4838]          option from the mount to silence this warning.
[  129.002682][ T4838] =======================================================
[  129.049287][ T4838] FAT-fs (nullb0): bogus number of reserved sectors
[  129.070164][ T4838] FAT-fs (nullb0): Can't find a valid FAT filesystem
[  129.554424][ T4315] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  129.976549][ T4836] can: request_module (can-proto-3) failed.
[  130.075522][ T4315] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  130.140524][ T4315] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  130.161634][ T3598] em28xx 2-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5)
[  130.175911][ T3598] em28xx 2-1:0.132: board has no eeprom
[  130.251118][ T3598] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  130.259638][ T3598] em28xx 2-1:0.132: analog set to bulk mode.
[  130.302367][ T4318] em28xx 2-1:0.132: Registering V4L2 extension
[  131.045281][ T4849] can: request_module (can-proto-3) failed.
[  131.080479][ T4315] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[  131.089731][ T4315] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.129299][ T1191] usb 2-1: USB disconnect, device number 4
[  131.138069][ T1191] em28xx 2-1:0.132: Disconnecting em28xx
[  131.181530][ T4315] usb 5-1: config 0 descriptor??
[  131.863003][ T4315] usb 5-1: can't set config #0, error -71
[  131.881037][ T4315] usb 5-1: USB disconnect, device number 5
[  132.928049][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  132.934675][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  133.416906][ T4318] em28xx 2-1:0.132: Config register raw data: 0xffffffed
[  133.424805][ T4318] em28xx 2-1:0.132: AC97 chip type couldn't be determined
[  133.438044][ T4318] em28xx 2-1:0.132: No AC97 audio processor
[  133.519543][ T4895] capability: warning: `syz.2.144' uses 32-bit capabilities (legacy support in use)
[  133.700423][ T4336] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  134.310459][ T4336] usb 4-1: Using ep0 maxpacket: 16
[  134.401372][ T4318] usb 2-1: Decoder not found
[  134.406047][ T4318] em28xx 2-1:0.132: failed to create media graph
[  134.418721][ T4318] em28xx 2-1:0.132: V4L2 device video103 deregistered
[  134.450214][ T4318] em28xx 2-1:0.132: Remote control support is not available for this card.
[  134.562650][ T1191] em28xx 2-1:0.132: Closing input extension
[  134.593455][ T4336] usb 4-1: unable to get BOS descriptor or descriptor too short
[  134.623810][ T1191] em28xx 2-1:0.132: Freeing device
[  134.641227][ T4336] usb 4-1: no configurations
[  134.656423][ T4336] usb 4-1: can't read configurations, error -22
[  134.950508][ T4318] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  135.250801][ T4318] usb 3-1: Using ep0 maxpacket: 32
[  135.263705][ T4318] usb 3-1: config 0 has an invalid interface number: 132 but max is 0
[  135.407810][ T4318] usb 3-1: config 0 has no interface number 0
[  135.553714][ T4318] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  135.602152][ T4318] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  136.171540][ T4919] netlink: 'syz.4.153': attribute type 1 has an invalid length.
[  137.036994][ T4919] netlink: 'syz.4.153': attribute type 1 has an invalid length.
[  137.156159][ T4909] can: request_module (can-proto-3) failed.
[  137.227553][ T4318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.235724][ T4318] usb 3-1: Product: syz
[  137.240020][ T4318] usb 3-1: Manufacturer: syz
[  137.244726][ T4318] usb 3-1: SerialNumber: syz
[  137.268276][ T4318] usb 3-1: config 0 descriptor??
[  137.278083][ T4318] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  137.290532][ T4318] em28xx 3-1:0.132: Video interface 132 found:
[  137.581997][ T4936] CIFS: VFS: Unable to allocate memory for devname
[  137.689798][ T4318] em28xx 3-1:0.132: unknown em28xx chip ID (0)
[  140.239335][ T4318] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  140.250459][ T4318] em28xx 3-1:0.132: board has no eeprom
[  140.320421][ T4318] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  142.520830][ T4318] em28xx 3-1:0.132: analog set to bulk mode.
[  142.563981][ T4959] netlink: 'syz.4.165': attribute type 1 has an invalid length.
[  142.589614][ T4318] usb 3-1: USB disconnect, device number 3
[  142.612736][ T4318] em28xx 3-1:0.132: Disconnecting em28xx
[  142.614021][ T4959] netlink: 'syz.4.165': attribute type 1 has an invalid length.
[  142.619678][   T22] em28xx 3-1:0.132: Registering V4L2 extension
[  142.816544][ T4965] 9pnet_fd: Insufficient options for proto=fd
[  144.721834][ T4972] can: request_module (can-proto-3) failed.
[  147.979992][ T5007] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  148.003882][   T22] em28xx 3-1:0.132: Config register raw data: 0xffffffed
[  148.015357][   T22] em28xx 3-1:0.132: AC97 chip type couldn't be determined
[  148.032051][   T22] em28xx 3-1:0.132: No AC97 audio processor
[  148.042826][ T5007] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  148.052118][   T22] usb 3-1: Decoder not found
[  148.056761][   T22] em28xx 3-1:0.132: failed to create media graph
[  148.066357][   T22] em28xx 3-1:0.132: V4L2 device video103 deregistered
[  148.080477][   T22] em28xx 3-1:0.132: Remote control support is not available for this card.
[  148.092158][ T4318] em28xx 3-1:0.132: Closing input extension
[  148.104744][ T4318] em28xx 3-1:0.132: Freeing device
[  150.500494][ T5012] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  152.134441][ T5031] 9pnet_fd: Insufficient options for proto=fd
[  152.500424][ T5012] usb 2-1: Using ep0 maxpacket: 32
[  152.518670][ T5012] usb 2-1: config 0 has an invalid interface number: 132 but max is 0
[  152.792800][ T5012] usb 2-1: config 0 has no interface number 0
[  153.399645][ T5012] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  153.575933][ T5012] usb 2-1: string descriptor 0 read error: -71
[  155.267786][ T5012] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  155.808804][ T5012] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.819951][ T5012] usb 2-1: config 0 descriptor??
[  155.840541][ T5012] usb 2-1: can't set config #0, error -71
[  155.857435][ T5012] usb 2-1: USB disconnect, device number 5
[  156.060491][ T1191] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  156.260441][ T5048] can: request_module (can-proto-3) failed.
[  156.900466][ T1191] usb 3-1: Using ep0 maxpacket: 16
[  157.218307][ T1191] usb 3-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40
[  157.341007][ T1191] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.349071][ T1191] usb 3-1: Product: syz
[  157.406605][ T1191] usb 3-1: Manufacturer: syz
[  157.412501][ T1191] usb 3-1: SerialNumber: syz
[  158.020365][ T1191] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  158.116325][ T1191] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  158.744390][ T1191] usb 3-1: USB disconnect, device number 4
[  160.240172][ T5094] 9pnet_fd: Insufficient options for proto=fd
[  160.450597][  T126] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  160.640600][  T126] usb 4-1: Using ep0 maxpacket: 32
[  160.654051][  T126] usb 4-1: config 0 has an invalid interface number: 132 but max is 0
[  160.717382][  T126] usb 4-1: config 0 has no interface number 0
[  161.506721][  T126] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  161.553121][  T126] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  161.585598][  T126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.629300][  T126] usb 4-1: Product: syz
[  162.440680][ T5100] can: request_module (can-proto-3) failed.
[  162.441168][  T126] usb 4-1: Manufacturer: syz
[  162.451763][  T126] usb 4-1: SerialNumber: syz
[  162.464168][  T126] usb 4-1: config 0 descriptor??
[  162.652972][  T126] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  162.738713][  T126] em28xx 4-1:0.132: Video interface 132 found:
[  162.988339][  T126] em28xx 4-1:0.132: unknown em28xx chip ID (0)
[  163.725854][ T5118] FAT-fs (nullb0): bogus number of reserved sectors
[  163.732733][ T5118] FAT-fs (nullb0): Can't find a valid FAT filesystem
[  165.322411][  T126] em28xx 4-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5)
[  165.335988][  T126] em28xx 4-1:0.132: board has no eeprom
[  165.410381][  T126] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  165.418589][  T126] em28xx 4-1:0.132: analog set to bulk mode.
[  165.483588][  T126] usb 4-1: USB disconnect, device number 10
[  165.504775][  T126] em28xx 4-1:0.132: Disconnecting em28xx
[  165.531475][   T32] em28xx 4-1:0.132: Registering V4L2 extension
[  166.610475][   T22] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  166.767412][ T5140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.205'.
[  166.810324][   T22] usb 5-1: Using ep0 maxpacket: 16
[  166.852841][   T22] usb 5-1: unable to get BOS descriptor or descriptor too short
[  166.872295][   T22] usb 5-1: no configurations
[  166.877047][   T22] usb 5-1: can't read configurations, error -22
[  167.011017][   T32] em28xx 4-1:0.132: Config register raw data: 0xffffffed
[  167.025773][   T32] em28xx 4-1:0.132: AC97 chip type couldn't be determined
[  167.050843][   T32] em28xx 4-1:0.132: No AC97 audio processor
[  167.078168][   T32] usb 4-1: Decoder not found
[  167.097513][   T32] em28xx 4-1:0.132: failed to create media graph
[  167.130428][   T32] em28xx 4-1:0.132: V4L2 device video103 deregistered
[  167.149207][   T32] em28xx 4-1:0.132: Remote control support is not available for this card.
[  167.179317][  T126] em28xx 4-1:0.132: Closing input extension
[  167.199874][  T126] em28xx 4-1:0.132: Freeing device
[  172.150560][   T22] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  173.250409][   T22] usb 1-1: Using ep0 maxpacket: 32
[  173.257486][   T22] usb 1-1: config 0 has an invalid interface number: 132 but max is 0
[  173.287774][   T22] usb 1-1: config 0 has no interface number 0
[  173.303194][   T22] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  173.404854][   T22] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  173.435396][   T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.460080][   T22] usb 1-1: Product: syz
[  173.470331][   T22] usb 1-1: Manufacturer: syz
[  173.474993][   T22] usb 1-1: SerialNumber: syz
[  173.484038][   T22] usb 1-1: config 0 descriptor??
[  174.285606][ T5199] can: request_module (can-proto-3) failed.
[  174.388702][   T22] usb 1-1: can't set config #0, error -71
[  174.416074][   T22] usb 1-1: USB disconnect, device number 7
[  174.471567][ T4263] udevd[4263]: setting owner of /dev/bus/usb/001/007 to uid=0, gid=0 failed: No such file or directory
[  174.515770][ T5209] input: syz0 as /devices/virtual/input/input9
[  181.077034][ T5262] input: syz0 as /devices/virtual/input/input10
[  181.750031][ T5253] can: request_module (can-proto-3) failed.
[  187.195068][ T5315] can: request_module (can-proto-3) failed.
[  193.828642][ T5369] loop2: detected capacity change from 0 to 7
[  193.937496][ T4263]  loop2:
[  193.942996][ T4263] loop2: partition table partially beyond EOD, truncated
[  193.966444][ T5369]  loop2:
[  193.978680][ T5369] loop2: partition table partially beyond EOD, truncated
[  194.326365][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  194.333056][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  196.441518][ T4282] Bluetooth: hci2: command 0x0406 tx timeout
[  196.441541][ T4284] Bluetooth: hci1: command 0x0406 tx timeout
[  196.441575][ T4284] Bluetooth: hci3: command 0x0406 tx timeout
[  196.447569][ T4282] Bluetooth: hci4: command 0x0406 tx timeout
[  196.447623][ T4282] Bluetooth: hci0: command 0x0406 tx timeout
[  207.050316][ T4479] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  207.591730][ T4479] usb 1-1: Using ep0 maxpacket: 32
[  207.643004][ T4479] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[  207.654832][ T4479] usb 1-1: config 0 has no interface number 0
[  207.679355][ T4479] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  207.724284][ T4479] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.773178][ T4479] usb 1-1: Product: syz
[  207.777510][ T4479] usb 1-1: Manufacturer: syz
[  207.797949][ T4479] usb 1-1: SerialNumber: syz
[  207.817717][ T4479] usb 1-1: config 0 descriptor??
[  207.841734][ T4479] smsc95xx v2.0.0
[  207.940428][ T4316] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[  208.264630][ T4316] usb 4-1: unable to get BOS descriptor or descriptor too short
[  208.275157][ T4316] usb 4-1: not running at top speed; connect to a high speed hub
[  208.328631][ T4479] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  208.347483][ T4479] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  208.367574][ T4316] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 1024, setting to 64
[  208.494821][ T4316] usb 4-1: New USB device found, idVendor=0499, idProduct=1028, bcdDevice= 0.40
[  208.605805][ T4316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.702106][ T4316] usb 4-1: Product: syz
[  208.734133][ T4316] usb 4-1: Manufacturer: syz
[  208.771297][ T4316] usb 4-1: SerialNumber: syz
[  210.273091][ T4316] snd-usb-audio: probe of 4-1:1.0 failed with error -2
[  210.348101][ T4479] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  210.366048][ T4479] smsc95xx: probe of 1-1:0.67 failed with error -71
[  210.478430][ T4316] usb 4-1: USB disconnect, device number 11
[  210.492389][ T4479] usb 1-1: USB disconnect, device number 8
[  210.542342][ T4262] udevd[4262]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  216.859417][ T5529] can: request_module (can-proto-3) failed.
[  223.192606][ T5592] siw: device registration error -23
[  223.783478][ T5588] can: request_module (can-proto-3) failed.
[  224.472139][ T5602] netlink: 'syz.3.324': attribute type 1 has an invalid length.
[  224.481398][ T5602] netlink: 'syz.3.324': attribute type 1 has an invalid length.
[  228.624799][ T5646] siw: device registration error -23
[  229.350603][ T5643] can: request_module (can-proto-3) failed.
[  231.718222][ T5665] 9pnet_fd: Insufficient options for proto=fd
[  233.450537][ T5687] netlink: 'syz.4.341': attribute type 1 has an invalid length.
[  233.458335][ T5687] netlink: 'syz.4.341': attribute type 1 has an invalid length.
[  234.145353][ T4316] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  234.380281][ T4316] usb 2-1: Using ep0 maxpacket: 16
[  234.527914][ T4316] usb 2-1: unable to get BOS descriptor or descriptor too short
[  235.370691][ T4316] usb 2-1: no configurations
[  235.375364][ T4316] usb 2-1: can't read configurations, error -22
[  241.007639][ T5730] netlink: 'syz.4.364': attribute type 1 has an invalid length.
[  241.025692][ T5730] netlink: 'syz.4.364': attribute type 1 has an invalid length.
[  248.781749][ T5783] input: syz0 as /devices/virtual/input/input13
[  250.328377][ T5792] can: request_module (can-proto-3) failed.
[  250.742068][ T5803] 9pnet_fd: Insufficient options for proto=fd
[  252.170195][    C0] sched: RT throttling activated
[  255.763323][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  255.769887][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  256.080354][ T4316] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  256.370295][ T4316] usb 3-1: Using ep0 maxpacket: 16
[  256.444500][ T4316] usb 3-1: unable to get BOS descriptor or descriptor too short
[  256.480267][ T4316] usb 3-1: no configurations
[  256.488910][ T4316] usb 3-1: can't read configurations, error -22
[  260.226741][ T5843] can: request_module (can-proto-3) failed.
[  269.770858][ T4283] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  269.847372][ T4283] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  269.856675][ T4283] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  269.865672][ T4283] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  269.877029][ T4283] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  269.884535][ T4283] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  271.002742][   T32] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  271.250461][   T32] usb 5-1: Using ep0 maxpacket: 16
[  271.588341][ T5896] can: request_module (can-proto-3) failed.
[  271.704979][   T32] usb 5-1: unable to get BOS descriptor or descriptor too short
[  271.859353][   T32] usb 5-1: no configurations
[  271.864510][   T32] usb 5-1: can't read configurations, error -22
[  271.994677][ T4399] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  272.113971][ T4284] Bluetooth: hci5: command 0x0409 tx timeout
[  273.781535][ T5886] chnl_net:caif_netlink_parms(): no params data found
[  274.081983][ T4399] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.170779][ T4284] Bluetooth: hci5: command 0x041b tx timeout
[  275.224762][ T5937] netlink: 'syz.1.417': attribute type 1 has an invalid length.
[  275.283329][ T5937] netlink: 'syz.1.417': attribute type 1 has an invalid length.
[  276.240387][ T4284] Bluetooth: hci5: command 0x040f tx timeout
[  276.940948][ T4399] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.980369][   T32] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  277.173126][ T4399] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.183694][   T32] usb 2-1: Using ep0 maxpacket: 32
[  277.192747][   T32] usb 2-1: config 0 has an invalid interface number: 132 but max is 0
[  277.211646][   T32] usb 2-1: config 0 has no interface number 0
[  277.380560][   T32] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  277.447817][   T32] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  277.458516][   T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  277.478289][   T32] usb 2-1: Product: syz
[  277.488772][   T32] usb 2-1: Manufacturer: syz
[  277.558952][   T32] usb 2-1: SerialNumber: syz
[  277.611019][ T5886] bridge0: port 1(bridge_slave_0) entered blocking state
[  277.620029][ T5886] bridge0: port 1(bridge_slave_0) entered disabled state
[  277.628830][ T5886] device bridge_slave_0 entered promiscuous mode
[  277.644608][   T32] usb 2-1: config 0 descriptor??
[  278.320540][ T4284] Bluetooth: hci5: command 0x0419 tx timeout
[  278.422510][ T5958] can: request_module (can-proto-3) failed.
[  278.450332][ T5886] bridge0: port 2(bridge_slave_1) entered blocking state
[  278.457567][ T5886] bridge0: port 2(bridge_slave_1) entered disabled state
[  278.468111][   T32] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  278.475249][ T5886] device bridge_slave_1 entered promiscuous mode
[  278.509459][ T5886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  278.522260][ T5886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  278.530239][   T32] em28xx 2-1:0.132: Video interface 132 found:
[  278.554000][ T5886] team0: Port device team_slave_0 added
[  278.564755][ T5886] team0: Port device team_slave_1 added
[  278.642180][ T5886] batman_adv: batadv0: Adding interface: batadv_slave_0
[  278.649210][ T5886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  278.686537][ T5886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  278.699888][ T5886] batman_adv: batadv0: Adding interface: batadv_slave_1
[  278.725746][ T5886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  278.756249][ T5886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  278.760637][   T32] em28xx 2-1:0.132: unknown em28xx chip ID (0)
[  279.514705][ T5886] device hsr_slave_0 entered promiscuous mode
[  279.522977][ T5886] device hsr_slave_1 entered promiscuous mode
[  279.530052][ T5886] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  279.540069][ T5886] Cannot create hsr debugfs directory
[  279.805417][ T5978] FAT-fs (nullb0): bogus number of reserved sectors
[  279.813296][ T5978] FAT-fs (nullb0): Can't find a valid FAT filesystem
[  280.188289][ T4399] tipc: Left network mode
[  281.274818][   T32] em28xx 2-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5)
[  281.374935][   T32] em28xx 2-1:0.132: board has no eeprom
[  281.500308][   T32] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  281.508244][   T32] em28xx 2-1:0.132: analog set to bulk mode.
[  281.528865][ T5991] netlink: 'syz.2.428': attribute type 1 has an invalid length.
[  281.552136][ T5991] netlink: 'syz.2.428': attribute type 1 has an invalid length.
[  281.629606][ T5857] em28xx 2-1:0.132: Registering V4L2 extension
[  281.968584][ T5886] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  282.214654][ T4280] usb 2-1: USB disconnect, device number 8
[  282.228862][ T4280] em28xx 2-1:0.132: Disconnecting em28xx
[  282.266828][ T5886] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  282.303999][ T5886] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  282.441334][ T5857] em28xx 2-1:0.132: Config register raw data: 0xffffffed
[  282.448443][ T5857] em28xx 2-1:0.132: AC97 chip type couldn't be determined
[  282.503171][ T5857] em28xx 2-1:0.132: No AC97 audio processor
[  282.574013][ T5857] usb 2-1: Decoder not found
[  282.578721][ T5857] em28xx 2-1:0.132: failed to create media graph
[  282.765455][ T5857] em28xx 2-1:0.132: V4L2 device video103 deregistered
[  282.837014][ T6016] ==================================================================
[  282.838126][ T5857] em28xx 2-1:0.132: Remote control support is not available for this card.
[  282.845123][ T6016] BUG: KASAN: use-after-free in v4l2_open+0x32d/0x340
[  282.845153][ T6016] Read of size 4 at addr ffff8880594647e8 by task v4l_id/6016
[  282.845167][ T6016] 
[  282.845173][ T6016] CPU: 0 PID: 6016 Comm: v4l_id Not tainted syzkaller #0
[  282.845190][ T6016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  282.845201][ T6016] Call Trace:
[  282.845208][ T6016]  <TASK>
[  282.845214][ T6016]  dump_stack_lvl+0x188/0x24e
[  282.845237][ T6016]  ? __lock_acquire+0x7c40/0x7c40
[  282.845261][ T6016]  ? show_regs_print_info+0x12/0x12
[  282.845284][ T6016]  ? load_image+0x410/0x410
[  282.845305][ T6016]  ? __virt_addr_valid+0x467/0x540
[  282.918613][ T6016]  ? v4l2_open+0x32d/0x340
[  282.923046][ T6016]  print_report+0xa8/0x210
[  282.927461][ T6016]  kasan_report+0x10b/0x140
[  282.931975][ T6016]  ? v4l2_open+0x32d/0x340
[  282.936387][ T6016]  v4l2_open+0x32d/0x340
[  282.940636][ T6016]  chrdev_open+0x585/0x5f0
[  282.945088][ T6016]  ? cd_forget+0x160/0x160
[  282.949531][ T6016]  ? fsnotify_perm+0x39b/0x550
[  282.954299][ T6016]  ? cd_forget+0x160/0x160
[  282.958722][ T6016]  do_dentry_open+0x7dd/0x10b0
[  282.963502][ T6016]  path_openat+0x2674/0x2f10
[  282.968192][ T6016]  ? verify_lock_unused+0x140/0x140
[  282.973395][ T6016]  ? do_sys_openat2+0xdd/0x4f0
[  282.978170][ T6016]  ? do_filp_open+0x420/0x420
[  282.982864][ T6016]  do_filp_open+0x1ee/0x420
[  282.987374][ T6016]  ? vfs_tmpfile+0x470/0x470
[  282.991989][ T6016]  ? _raw_spin_unlock+0x24/0x40
[  282.996851][ T6016]  ? alloc_fd+0x590/0x640
[  283.001198][ T6016]  do_sys_openat2+0x14b/0x4f0
[  283.005884][ T6016]  ? do_sys_open+0xe0/0xe0
[  283.010306][ T6016]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  283.016297][ T6016]  ? lock_chain_count+0x20/0x20
[  283.021160][ T6016]  __x64_sys_openat+0x135/0x160
[  283.026022][ T6016]  do_syscall_64+0x4c/0xa0
[  283.030446][ T6016]  ? clear_bhb_loop+0x60/0xb0
[  283.035142][ T6016]  ? clear_bhb_loop+0x60/0xb0
[  283.039829][ T6016]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  283.045727][ T6016] RIP: 0033:0x7f4e34ca7407
[  283.050143][ T6016] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  283.069755][ T6016] RSP: 002b:00007fffb5e38d70 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  283.078265][ T6016] RAX: ffffffffffffffda RBX: 00007f4e353e3880 RCX: 00007f4e34ca7407
[  283.086238][ T6016] RDX: 0000000000000000 RSI: 00007fffb5e39f1b RDI: ffffffffffffff9c
[  283.094216][ T6016] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[  283.102186][ T6016] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[  283.110250][ T6016] R13: 00007fffb5e38fc0 R14: 00007f4e35542000 R15: 00005613953654d8
[  283.118232][ T6016]  </TASK>
[  283.121251][ T6016] 
[  283.123572][ T6016] Allocated by task 5857:
[  283.127908][ T6016]  kasan_set_track+0x4b/0x70
[  283.132768][ T6016]  __kasan_kmalloc+0x8e/0xa0
[  283.137368][ T6016]  em28xx_v4l2_init+0xf5/0x2d90
[  283.142228][ T6016]  em28xx_init_extension+0x118/0x1c0
[  283.147524][ T6016]  process_one_work+0x8ab/0x1160
[  283.152486][ T6016]  worker_thread+0xaf5/0x12a0
[  283.157173][ T6016]  kthread+0x29d/0x330
[  283.161240][ T6016]  ret_from_fork+0x1f/0x30
[  283.165670][ T6016] 
[  283.168039][ T6016] Freed by task 5857:
[  283.172022][ T6016]  kasan_set_track+0x4b/0x70
[  283.176620][ T6016]  kasan_save_free_info+0x27/0x40
[  283.181659][ T6016]  ____kasan_slab_free+0x126/0x1f0
[  283.186775][ T6016]  slab_free_freelist_hook+0x133/0x1b0
[  283.192242][ T6016]  __kmem_cache_free+0xb6/0x200
[  283.197102][ T6016]  em28xx_v4l2_init+0x15f7/0x2d90
[  283.202220][ T6016]  em28xx_init_extension+0x118/0x1c0
[  283.207510][ T6016]  process_one_work+0x8ab/0x1160
[  283.212547][ T6016]  worker_thread+0xaf5/0x12a0
[  283.217226][ T6016]  kthread+0x29d/0x330
[  283.221300][ T6016]  ret_from_fork+0x1f/0x30
[  283.225810][ T6016] 
[  283.228136][ T6016] The buggy address belongs to the object at ffff888059464000
[  283.228136][ T6016]  which belongs to the cache kmalloc-8k of size 8192
[  283.242204][ T6016] The buggy address is located 2024 bytes inside of
[  283.242204][ T6016]  8192-byte region [ffff888059464000, ffff888059466000)
[  283.255673][ T6016] 
[  283.258025][ T6016] The buggy address belongs to the physical page:
[  283.264435][ T6016] page:ffffea0001651800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x59460
[  283.274591][ T6016] head:ffffea0001651800 order:3 compound_mapcount:0 compound_pincount:0
[  283.282918][ T6016] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  283.290906][ T6016] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888017442280
[  283.299490][ T6016] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000
[  283.308098][ T6016] page dumped because: kasan: bad access detected
[  283.314508][ T6016] page_owner tracks the page as allocated
[  283.320224][ T6016] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5978, tgid 5942 (syz.1.419), ts 279804831133, free_ts 279801264775
[  283.342886][ T6016]  post_alloc_hook+0x173/0x1a0
[  283.347847][ T6016]  get_page_from_freelist+0x206b/0x2180
[  283.353399][ T6016]  __alloc_pages+0x1ec/0x4f0
[  283.358001][ T6016]  alloc_slab_page+0x5d/0x180
[  283.362682][ T6016]  new_slab+0x87/0x2d0
[  283.366754][ T6016]  ___slab_alloc+0xbc5/0x1240
[  283.371431][ T6016]  __kmem_cache_alloc_node+0x126/0x270
[  283.376889][ T6016]  kmalloc_trace+0x26/0xe0
[  283.381310][ T6016]  fat_fill_super+0x117/0x4e50
[  283.386162][ T6016]  mount_bdev+0x28a/0x3c0
[  283.390496][ T6016]  legacy_get_tree+0xe6/0x180
[  283.395189][ T6016]  vfs_get_tree+0x88/0x270
[  283.399609][ T6016]  do_new_mount+0x247/0xa40
[  283.404114][ T6016]  __se_sys_mount+0x2e3/0x3d0
[  283.408791][ T6016]  do_syscall_64+0x4c/0xa0
[  283.413211][ T6016]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  283.419109][ T6016] page last free stack trace:
[  283.423805][ T6016]  free_unref_page_prepare+0x8e5/0x9e0
[  283.429289][ T6016]  free_unref_page+0x2e/0x3f0
[  283.434093][ T6016]  __unfreeze_partials+0x188/0x1e0
[  283.439229][ T6016]  put_cpu_partial+0x17c/0x250
[  283.444011][ T6016]  qlist_free_all+0x76/0xe0
[  283.448528][ T6016]  kasan_quarantine_reduce+0x144/0x160
[  283.453990][ T6016]  __kasan_slab_alloc+0x1e/0x80
[  283.458853][ T6016]  slab_post_alloc_hook+0x4b/0x490
[  283.463966][ T6016]  __kmem_cache_alloc_node+0x19d/0x270
[  283.469621][ T6016]  kmalloc_trace+0x26/0xe0
[  283.474049][ T6016]  nsim_fib_event_work+0x881/0x3320
[  283.479250][ T6016]  process_one_work+0x8ab/0x1160
[  283.484192][ T6016]  worker_thread+0xaf5/0x12a0
[  283.488919][ T6016]  kthread+0x29d/0x330
[  283.492994][ T6016]  ret_from_fork+0x1f/0x30
[  283.497419][ T6016] 
[  283.499744][ T6016] Memory state around the buggy address:
[  283.505460][ T6016]  ffff888059464680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  283.513520][ T6016]  ffff888059464700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  283.521586][ T6016] >ffff888059464780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  283.529649][ T6016]                                                           ^
[  283.537101][ T6016]  ffff888059464800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  283.545160][ T6016]  ffff888059464880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  283.553215][ T6016] ==================================================================
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  283.680439][ T4280] em28xx 2-1:0.132: Closing input extension
[  283.716160][ T4280] em28xx 2-1:0.132: Freeing device
[  283.750598][ T5886] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  284.681488][ T6016] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  284.688742][ T6016] CPU: 1 PID: 6016 Comm: v4l_id Not tainted syzkaller #0
[  284.695793][ T6016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  284.705888][ T6016] Call Trace:
[  284.709186][ T6016]  <TASK>
[  284.712128][ T6016]  dump_stack_lvl+0x188/0x24e
[  284.716824][ T6016]  ? memcpy+0x3c/0x60
[  284.720808][ T6016]  ? show_regs_print_info+0x12/0x12
[  284.726023][ T6016]  ? load_image+0x410/0x410
[  284.730623][ T6016]  panic+0x2d3/0x710
[  284.734531][ T6016]  ? bpf_jit_dump+0xd0/0xd0
[  284.739034][ T6016]  ? _raw_spin_unlock_irqrestore+0x10d/0x120
[  284.745026][ T6016]  ? _raw_spin_unlock+0x40/0x40
[  284.749881][ T6016]  ? print_memory_metadata+0x314/0x400
[  284.755348][ T6016]  check_panic_on_warn+0x80/0xa0
[  284.760293][ T6016]  ? v4l2_open+0x32d/0x340
[  284.764726][ T6016]  end_report+0x66/0x110
[  284.768980][ T6016]  kasan_report+0x118/0x140
[  284.773490][ T6016]  ? v4l2_open+0x32d/0x340
[  284.777954][ T6016]  v4l2_open+0x32d/0x340
[  284.782202][ T6016]  chrdev_open+0x585/0x5f0
[  284.786637][ T6016]  ? cd_forget+0x160/0x160
[  284.791057][ T6016]  ? fsnotify_perm+0x39b/0x550
[  284.795825][ T6016]  ? cd_forget+0x160/0x160
[  284.800250][ T6016]  do_dentry_open+0x7dd/0x10b0
[  284.805023][ T6016]  path_openat+0x2674/0x2f10
[  284.809621][ T6016]  ? verify_lock_unused+0x140/0x140
[  284.814824][ T6016]  ? do_sys_openat2+0xdd/0x4f0
[  284.819600][ T6016]  ? do_filp_open+0x420/0x420
[  284.824374][ T6016]  do_filp_open+0x1ee/0x420
[  284.828894][ T6016]  ? vfs_tmpfile+0x470/0x470
[  284.833505][ T6016]  ? _raw_spin_unlock+0x24/0x40
[  284.838447][ T6016]  ? alloc_fd+0x590/0x640
[  284.842782][ T6016]  do_sys_openat2+0x14b/0x4f0
[  284.847465][ T6016]  ? do_sys_open+0xe0/0xe0
[  284.851892][ T6016]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  284.857878][ T6016]  ? lock_chain_count+0x20/0x20
[  284.862734][ T6016]  __x64_sys_openat+0x135/0x160
[  284.867592][ T6016]  do_syscall_64+0x4c/0xa0
[  284.872039][ T6016]  ? clear_bhb_loop+0x60/0xb0
[  284.876772][ T6016]  ? clear_bhb_loop+0x60/0xb0
[  284.881457][ T6016]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  284.887445][ T6016] RIP: 0033:0x7f4e34ca7407
[  284.891873][ T6016] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  284.911575][ T6016] RSP: 002b:00007fffb5e38d70 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  284.920027][ T6016] RAX: ffffffffffffffda RBX: 00007f4e353e3880 RCX: 00007f4e34ca7407
[  284.928260][ T6016] RDX: 0000000000000000 RSI: 00007fffb5e39f1b RDI: ffffffffffffff9c
[  284.936233][ T6016] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[  284.944207][ T6016] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[  284.952179][ T6016] R13: 00007fffb5e38fc0 R14: 00007f4e35542000 R15: 00005613953654d8
[  284.960163][ T6016]  </TASK>
[  284.963430][ T6016] Kernel Offset: disabled
[  284.967841][ T6016] Rebooting in 86400 seconds..