last executing test programs:

17.927708576s ago: executing program 0 (id=236):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083", 0x9d}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a62098238", 0xbb}], 0x3}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000bc0)}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17a", 0xb}], 0x1}}], 0x3, 0x20000044)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

15.902554963s ago: executing program 0 (id=244):
r0 = socket$kcm(0x11, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
syz_io_uring_setup(0x111, 0x0, 0x0, 0x0, &(0x7f0000000000))
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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")
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000000})
creat(&(0x7f0000000e00)='./file0\x00', 0xc)
sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x38}, 0x80, 0x0}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)

12.585896418s ago: executing program 0 (id=266):
r0 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x22802, 0x0)
read$nci(r0, 0x0, 0x0)
socket(0x27, 0x6, 0x0)
getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x20, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)

11.673179346s ago: executing program 3 (id=267):
r0 = syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000c80)='./file0\x00', 0x810400, &(0x7f0000000200)=ANY=[@ANYBLOB='lastblock=00000000000000000226,mode=00000000000000000000000,session=00000000000000000000,noadinicb,nostrict,uid=', @ANYRESDEC=0x0, @ANYRESOCT=0x0], 0x4, 0xc24, &(0x7f0000000d00)="$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")
symlinkat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r0, 0x0)
r1 = fspick(0xffffffffffffff9c, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRES32, @ANYRES32], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x4, 0xe4}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000300), 0x1400, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
keyctl$chown(0x4, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
fremovexattr(r3, 0x0)
creat(&(0x7f0000000000)='./file1\x00', 0xf8)
fanotify_init(0xf00, 0x1)

9.941277207s ago: executing program 4 (id=273):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0xfffffffffffffffe}}, {@dioread_lock}, {@data_err_ignore}, {@orlov}, {@data_err_ignore}, {@grpquota}, {@abort}, {@resgid}, {@bh}, {@nouid32}]}, 0x1, 0x56d, &(0x7f0000000880)="$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")
r0 = getpid()
prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioprio_set$uid(0x3, 0x0, 0x6000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="3000000003060101000000000000000001000005050001002489ba5fd81d1e"], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x90)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
listen(0xffffffffffffffff, 0x0)
syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x6, 0x10000)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20048054)
close(0xffffffffffffffff)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0)

9.87530491s ago: executing program 3 (id=274):
r0 = socket$isdn_base(0x22, 0x3, 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x2)

9.541789717s ago: executing program 0 (id=275):
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x11, 0xffffffffffffffff, 0xa443f000)
socket$netlink(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, 0x0, &(0x7f0000000140))
ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00')
getuid()
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
syz_emit_ethernet(0x51, &(0x7f00000001c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x43, 0x0, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4}, {"fbc447e69f4a6424884ac61c75b0a5d0e46b256a8071805ea5229e"}}}}}}, 0x0)
bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
r2 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
r3 = fcntl$dupfd(r1, 0x406, r1)
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
readv(r2, &(0x7f00000002c0)=[{&(0x7f00000006c0)=""/160, 0xa0}], 0x1)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)

9.250623893s ago: executing program 3 (id=278):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x3, 0x40483)
ioctl$VIDIOC_DQEVENT(r1, 0x80885659, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
r3 = syz_open_dev$radio(&(0x7f0000019140), 0x1, 0x2)
ioctl$VIDIOC_G_STD(r3, 0x80085617, &(0x7f0000019180))
r4 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000540)={0x1, 0x6, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"})
rename(&(0x7f0000000040)='./file0\x00', 0x0)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
write$sndseq(0xffffffffffffffff, &(0x7f0000000180)=[{0x0, 0x47, 0xd, 0x20, @tick, {0x40, 0xfe}, {0x10, 0x9}, @raw8}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00')
pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0x5)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)

6.994858122s ago: executing program 4 (id=280):
syz_emit_ethernet(0x48, &(0x7f00000020c0)={@multicast, @random="caf6e222e6aa", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "430093", 0x12, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x87, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}]}}}}}}, 0x0)

6.923167045s ago: executing program 3 (id=281):
r0 = syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000c80)='./file0\x00', 0x810400, &(0x7f0000000200)=ANY=[@ANYBLOB='lastblock=00000000000000000226,mode=00000000000000000000000,session=00000000000000000000,noadinicb,nostrict,uid=', @ANYRESDEC=0x0, @ANYRESOCT=0x0], 0x4, 0xc24, &(0x7f0000000d00)="$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")
symlinkat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r0, 0x0)
r1 = fspick(0xffffffffffffff9c, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRES32, @ANYRES32], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x4, 0xe4}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000300), 0x1400, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
keyctl$chown(0x4, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
fremovexattr(r3, 0x0)
creat(&(0x7f0000000000)='./file1\x00', 0xf8)
fanotify_init(0xf00, 0x1)
fallocate(r3, 0x0, 0x1000000, 0x3)

6.869548049s ago: executing program 4 (id=283):
r0 = socket(0x400000000010, 0x3, 0x0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1", 0x83}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d0", 0x95}, {0x0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec4898205", 0xa6}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571", 0x9c}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b96", 0x63}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x3, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x78}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c53081ff6ebac83c264c6deeec6d4546fe7d00337f488ecee46577d71b39e24cdef94f16295e", 0x46}], 0x1}}], 0x3, 0x20000044)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

6.775627773s ago: executing program 4 (id=284):
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0)
ioctl$TCFLSH(r3, 0x400455c8, 0x4)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000019080)=0x30)

5.591693276s ago: executing program 4 (id=288):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200), 0x3, 0x45d, &(0x7f0000000380)="$eJzs3MtvG0UYAPBv105KH5BQlUcfQKAgKh5Jk5bSAxcQSBxAQoJDOYYkrUrdBjVBolUFKULliCohcUQckfgLOMEFASckrnBHlSKUSwsno413G8exkzhN7Ab/ftI6M7tjzXzZHXtmx3YAPWsoe0gi9kTEHxExUMsuLzBU+3Nr4crEPwtXJpKoVt/+O1ksd3PhykRRtHje7iJTjkg/S+Jgk3pnLl0+N16pTF3M8yOz5z8Ymbl0+fmz58fPTJ2ZujB28uTxY6Mvnhh7YVPizOK6eeDj6UP7X3/3+psTp66/98t3SRF/Qxxr+2rvOgoNrXbwqWp1/dVtA/fWpZNyFxtCW0q1bhp9i/1/IEqxdPIG4rVPu9o4YEtVq9Xqg60Pz1WB/7Ekut0CoDuKN/ps/ltsHRp63BXmX65NgLK4b+Vb7Ug50vO1VF/D/HYzDUXEqbl/v862aPs+BABA+37Ixj/PNRv/pVF/X+i+fA1lR57fGxEnImJfRDwQsVj2oYh4uM36GxdJVo5/0httB9WGbPz3Ur62tXz8lxZFBkt5LhsDDkZfcvpsZepo/j85En07svzoKnX8+OrvX7Q6Vj/+y7as/mIsmLfjRnnH8udMjs+O30nM9eavRhwoN4s/ub0SkETE/og4sME6zj7z7aFWx9aOfxWbsM5U/Sbi6dr5n4uG+AvJ6uuTI/dEZeroSHFVrPTrb9fealX/HcW/CeavRrqruP4jmsU/mNSv1860X8e1Pz9vOafZ6PXfn7yzbN9H47OzF0cj+pM3ao1e2l+6ONZQbmypfHb9HzncvP8Xi7xZ/AcjIruIH4mIRyPisbztj0caT0TE4VXi//mVJ9/fePxbK4t/sunrX6vzv5Toj8Y9zROlcz99v6zSwXbiz87/8cXUkXzPel7/1tOujV3NAAAAsP2kEbEnknT4djpNh4drn+HfF7vSyvTM7LOnpz+8MFn7jsBg9KXFna6Buvuho/m0vsiPNeSPRcT9EfFlaedifnhiujLZ7eChx+1u0f8zf5W63Tpgy61YR1vXp93SLWkL0Fm+rwm9S/+H3qX/Q+9q0v93dqMdQOc1e///pAvtADqvXPeY/yYY0CPM/6F36f/Qu/R/6EkzO2PtL8lvQSLtRF3VgVqQ3QiwLnG5xe8nbO9EpHdFM3op0d/JSrv9ygQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALA5/gsAAP//AYjhlA==")
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newsa={0xf0, 0x10, 0x413, 0x0, 0x25dfdbfc, {{@in6=@loopback, @in6=@empty, 0xfffd, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x4d4, 0x32}, @in=@private=0xa010100, {0x0, 0x0, 0x2, 0x80000000000000, 0xffffffffffffffff, 0x0, 0x20000000008, 0xfffffffffffffffd}, {0x0, 0x10, 0xcc}, {0xf6}, 0x70bd2c, 0x0, 0xa, 0x1, 0xb}}, 0xf0}, 0x1, 0x0, 0x0, 0x80c0}, 0x24000001)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r0, r0, 0xc, 0x0, @val=@netkit={@void, @value=r0}}, 0x1c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
unshare(0x22020600)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000003c0)={@remote}, 0x14)
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0)

4.731399751s ago: executing program 3 (id=290):
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12011001000000087d1e2e2c0000000000010902"], 0x0)
sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x20, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xb, 0x0, 0x0, 0x0, @binary="56ccabd869c203"}]}]}, 0x20}], 0x1, 0x0, 0x0, 0x2000c091}, 0x40080)

3.351617814s ago: executing program 1 (id=293):
syz_emit_ethernet(0x48, &(0x7f00000020c0)={@multicast, @random="caf6e222e6aa", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "430093", 0x12, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x87, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}]}}}}}}, 0x0)

3.221451841s ago: executing program 1 (id=295):
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200), 0x3, 0x45d, &(0x7f0000000380)="$eJzs3MtvG0UYAPBv105KH5BQlUcfQKAgKh5Jk5bSAxcQSBxAQoJDOYYkrUrdBjVBolUFKULliCohcUQckfgLOMEFASckrnBHlSKUSwsno413G8exkzhN7Ab/ftI6M7tjzXzZHXtmx3YAPWsoe0gi9kTEHxExUMsuLzBU+3Nr4crEPwtXJpKoVt/+O1ksd3PhykRRtHje7iJTjkg/S+Jgk3pnLl0+N16pTF3M8yOz5z8Ymbl0+fmz58fPTJ2ZujB28uTxY6Mvnhh7YVPizOK6eeDj6UP7X3/3+psTp66/98t3SRF/Qxxr+2rvOgoNrXbwqWp1/dVtA/fWpZNyFxtCW0q1bhp9i/1/IEqxdPIG4rVPu9o4YEtVq9Xqg60Pz1WB/7Ekut0CoDuKN/ps/ltsHRp63BXmX65NgLK4b+Vb7Ug50vO1VF/D/HYzDUXEqbl/v862aPs+BABA+37Ixj/PNRv/pVF/X+i+fA1lR57fGxEnImJfRDwQsVj2oYh4uM36GxdJVo5/0httB9WGbPz3Ur62tXz8lxZFBkt5LhsDDkZfcvpsZepo/j85En07svzoKnX8+OrvX7Q6Vj/+y7as/mIsmLfjRnnH8udMjs+O30nM9eavRhwoN4s/ub0SkETE/og4sME6zj7z7aFWx9aOfxWbsM5U/Sbi6dr5n4uG+AvJ6uuTI/dEZeroSHFVrPTrb9fealX/HcW/CeavRrqruP4jmsU/mNSv1860X8e1Pz9vOafZ6PXfn7yzbN9H47OzF0cj+pM3ao1e2l+6ONZQbmypfHb9HzncvP8Xi7xZ/AcjIruIH4mIRyPisbztj0caT0TE4VXi//mVJ9/fePxbK4t/sunrX6vzv5Toj8Y9zROlcz99v6zSwXbiz87/8cXUkXzPel7/1tOujV3NAAAAsP2kEbEnknT4djpNh4drn+HfF7vSyvTM7LOnpz+8MFn7jsBg9KXFna6Buvuho/m0vsiPNeSPRcT9EfFlaedifnhiujLZ7eChx+1u0f8zf5W63Tpgy61YR1vXp93SLWkL0Fm+rwm9S/+H3qX/Q+9q0v93dqMdQOc1e///pAvtADqvXPeY/yYY0CPM/6F36f/Qu/R/6EkzO2PtL8lvQSLtRF3VgVqQ3QiwLnG5xe8nbO9EpHdFM3op0d/JSrv9ygQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALA5/gsAAP//AYjhlA==")
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newsa={0xf0, 0x10, 0x413, 0x0, 0x25dfdbfc, {{@in6=@loopback, @in6=@empty, 0xfffd, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x4d4, 0x32}, @in=@private=0xa010100, {0x0, 0x0, 0x2, 0x80000000000000, 0xffffffffffffffff, 0x0, 0x20000000008, 0xfffffffffffffffd}, {0x0, 0x10, 0xcc}, {0xf6}, 0x70bd2c, 0x0, 0xa, 0x1, 0xb}}, 0xf0}, 0x1, 0x0, 0x0, 0x80c0}, 0x24000001)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r1, r1, 0xc, 0x0, @val=@netkit={@void, @value=r1}}, 0x1c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRESOCT=r3, @ANYBLOB="0d73b4ec3e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
writev(r5, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c10000000", 0x52}], 0x1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14)
setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14)
setsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f00000003c0)={@remote}, 0x14)
epoll_create(0x8)
r7 = dup2(r0, r0)
recvmsg$kcm(r7, &(0x7f0000000a80)={&(0x7f00000000c0)=@generic, 0x80, &(0x7f0000000980)=[{&(0x7f0000000140)=""/114, 0x72}, {&(0x7f0000000240)=""/9, 0x9}, {&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000800)=""/16, 0x10}, {&(0x7f0000000840)=""/61, 0x3d}, {&(0x7f0000000880)=""/58, 0x3a}, {&(0x7f00000008c0)=""/135, 0x87}], 0x7, &(0x7f0000000a00)=""/99, 0x63}, 0x40)

3.070863598s ago: executing program 2 (id=296):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000540)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x70bd2b, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x7, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44004)

2.831814881s ago: executing program 2 (id=297):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$ITER_CREATE(0x1d, 0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x28, 0x801, 0x0)
connect$vsock_stream(r3, 0x0, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x2711, @host}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_emit_ethernet(0x6e, &(0x7f00000042c0)=ANY=[@ANYBLOB="ffe176d50bffffffffffaaaaaaaaaabb86dd60122d9200383afffe8000000000000000000000000000bbff020000000000000000000000000001000080780600000065f6323c0002330100000000000000000000ffffac14142601330000f94485287ad11b860000000000000000"], 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f00000000c0), 0xf00)
setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private0}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc858}, 0x8893)
socket$unix(0x1, 0x1, 0x0)

1.91186355s ago: executing program 2 (id=298):
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x10bb41)
ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x3, 0x2be8, 0x6, &(0x7f0000000640)="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"}, {0x2, 0x0, 0x1ff, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x0, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40003, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x10000004, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0xa3a, 0x0}, {0x3, 0x0, 0x3, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40007, 0x0}]})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}}, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

1.695500981s ago: executing program 1 (id=299):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x3, 0x40483)
ioctl$VIDIOC_DQEVENT(r1, 0x80885659, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
r3 = syz_open_dev$radio(&(0x7f0000019140), 0x1, 0x2)
ioctl$VIDIOC_G_STD(r3, 0x80085617, &(0x7f0000019180))
r4 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000540)={0x1, 0x6, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"})
rename(&(0x7f0000000040)='./file0\x00', 0x0)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
write$sndseq(0xffffffffffffffff, &(0x7f0000000180)=[{0x0, 0x47, 0xd, 0x20, @tick, {0x40, 0xfe}, {0x10, 0x9}, @raw8}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00')
pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0x5)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)

1.583924237s ago: executing program 0 (id=300):
r0 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r0, 0x0, 0xe07e872420dfefca)
socket$nl_generic(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r4, r4)

1.545324589s ago: executing program 2 (id=301):
r0 = socket(0x400000000010, 0x3, 0x0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1", 0x83}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d0", 0x95}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29", 0xce}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec4898205", 0xa6}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc885", 0x9b}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x78}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c53081ff6ebac83c264c6deeec6d4546fe7d00337f488ecee46577d71b39e24cdef94f16295e", 0x46}], 0x1}}], 0x3, 0x20000044)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

985.726088ms ago: executing program 1 (id=302):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]})
rmdir(&(0x7f0000000040)='./file1\x00')
r0 = open(&(0x7f0000000280)='./file0\x00', 0x325082, 0x43)
mknodat$loop(r0, &(0x7f0000000200)='./file1\x00', 0x1000, 0x0)
r1 = open(&(0x7f00000001c0)='./file0\x00', 0x90800, 0x0)
chdir(&(0x7f0000000000)='./bus\x00')
linkat(r0, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000180)='./file0\x00', 0x1000)
setxattr$trusted_overlay_nlink(&(0x7f0000000140)='./file1\x00', &(0x7f0000000240), 0x0, 0x0, 0x0)

984.765358ms ago: executing program 2 (id=303):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
fchdir(r4)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x43)
ftruncate(r5, 0x2007ffb)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x200)
r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
sendfile(r7, r6, 0x0, 0x7ffff000)
r8 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r8, 0x0, 0x0)
sendto$inet(r8, &(0x7f00000004c0)="9bd541e2b70ef7309ba26c22d470538fbc92f866415bced3ea1c3bf8ecf0a8c04cf0f1f9bbd57fd613b2b25b7495f36706ea340e8d7d54445762e8c458682840e5857474db88e4e5b27bce63188b0d00110921f445a68b", 0x57, 0x20004001, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)

951.80338ms ago: executing program 4 (id=304):
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x10bb41)
ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x3, 0x2be8, 0x6, &(0x7f0000000640)="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"}, {0x2, 0x0, 0x1ff, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x0, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40003, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x10000004, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0xa3a, 0x0}, {0x3, 0x0, 0x3, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40007, 0x0}]})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}}, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

736.926921ms ago: executing program 3 (id=305):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x3e}, 0x80, 0x0}, 0x4)

122.111324ms ago: executing program 1 (id=306):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4541b6bf, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xf0f002, 0x4})
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x3, @raw_data="c708189fdcbe38f109fd41eca1fab6cd0322a56c377827c1fce9457335c4cf47591deda9c33bc6cc5b7d3385a843760dd72871795d9eec0df1cf3d0589e7946a9bac962801127e85aca8abe490516e85fa1cca18da61bee3bfa7d0f5ed52f194b6024df56e43d16d7ffeeac46eb01cb5757d29bb22d8abce603d90a7001e3f9be35d285b71faf95797b771ab7048423887417857c97c7c08fc78c4a73b824df30347e9b3a7edbacbafa8e996d0705d042048e6bee4c2de8567b14ab3f6fef57955f02e224730470a"})

121.400874ms ago: executing program 0 (id=307):
sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x20048094)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100))
socket(0x1e, 0x2, 0x6)
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r2=>0x0})
setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, 0x0, 0x0)
setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0x3, r2, 0xffffffff}, 0xc)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89ff, &(0x7f0000001440)={'bridge0\x00', 0x0})
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$igmp(0x2, 0x3, 0x2)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000001280)={0x30000010})
setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000100), 0x4)
setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_ifindex, @dev}, 0x10)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
ioctl$RTC_IRQP_SET(r6, 0x4008700c, 0x80800032d)
r7 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x42, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@generic={0x88, 0x2}]}}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c)
syz_open_dev$video4linux(&(0x7f0000000100), 0x100000000007, 0x42)

918.04µs ago: executing program 1 (id=308):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$ITER_CREATE(0x1d, 0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x28, 0x801, 0x0)
connect$vsock_stream(r3, 0x0, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x2711, @host}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_emit_ethernet(0x6e, &(0x7f00000042c0)=ANY=[@ANYBLOB="ffe176d50bffffffffffaaaaaaaaaabb86dd60122d9200383afffe8000000000000000000000000000bbff020000000000000000000000000001000080780600000065f6323c0002330100000000000000000000ffffac14142601330000f94485287ad11b860000000000000000"], 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f00000000c0), 0xf00)
setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private0}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc858}, 0x8893)
socket$unix(0x1, 0x1, 0x0)

0s ago: executing program 2 (id=309):
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200), 0x3, 0x45d, &(0x7f0000000380)="$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")
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newsa={0xf0, 0x10, 0x413, 0x0, 0x25dfdbfc, {{@in6=@loopback, @in6=@empty, 0xfffd, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x4d4, 0x32}, @in=@private=0xa010100, {0x0, 0x0, 0x2, 0x80000000000000, 0xffffffffffffffff, 0x0, 0x20000000008, 0xfffffffffffffffd}, {0x0, 0x10, 0xcc}, {0xf6}, 0x70bd2c, 0x0, 0xa, 0x1, 0xb}}, 0xf0}, 0x1, 0x0, 0x0, 0x80c0}, 0x24000001)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r1, r1, 0xc, 0x0, @val=@netkit={@void, @value=r1}}, 0x1c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRESOCT=r3, @ANYBLOB="0d73b4ec3e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
writev(r5, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c10000000", 0x52}], 0x1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14)
setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14)
setsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f00000003c0)={@remote}, 0x14)
epoll_create(0x8)
r7 = dup2(r0, r0)
recvmsg$kcm(r7, &(0x7f0000000a80)={&(0x7f00000000c0)=@generic, 0x80, &(0x7f0000000980)=[{&(0x7f0000000140)=""/114, 0x72}, {&(0x7f0000000240)=""/9, 0x9}, {&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000800)=""/16, 0x10}, {&(0x7f0000000840)=""/61, 0x3d}, {&(0x7f0000000880)=""/58, 0x3a}, {&(0x7f00000008c0)=""/135, 0x87}], 0x7, &(0x7f0000000a00)=""/99, 0x63}, 0x40)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.74' (ED25519) to the list of known hosts.
[   63.496813][ T4173] cgroup: Unknown subsys name 'net'
[   63.650370][ T4173] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   65.150658][ T4173] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   66.599675][ T4186] chnl_net:caif_netlink_parms(): no params data found
[   66.696951][ T4189] chnl_net:caif_netlink_parms(): no params data found
[   66.752076][ T4191] chnl_net:caif_netlink_parms(): no params data found
[   66.769485][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.776971][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.785620][ T4186] device bridge_slave_0 entered promiscuous mode
[   66.798550][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.805889][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.814043][ T4186] device bridge_slave_1 entered promiscuous mode
[   66.839715][ T4194] chnl_net:caif_netlink_parms(): no params data found
[   66.896142][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.905902][ T4192] chnl_net:caif_netlink_parms(): no params data found
[   66.938052][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.965671][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.972802][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.981050][ T4189] device bridge_slave_0 entered promiscuous mode
[   67.015298][ T4186] team0: Port device team_slave_0 added
[   67.028215][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.035470][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.044640][ T4189] device bridge_slave_1 entered promiscuous mode
[   67.063368][ T4186] team0: Port device team_slave_1 added
[   67.109131][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.117152][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.126318][ T4191] device bridge_slave_0 entered promiscuous mode
[   67.147122][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.157314][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.164462][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.190635][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.210364][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.217665][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.226363][ T4191] device bridge_slave_1 entered promiscuous mode
[   67.240199][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.250091][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.257634][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.284115][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.295791][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.302871][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.310992][ T4194] device bridge_slave_0 entered promiscuous mode
[   67.350677][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.359839][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.368266][ T4194] device bridge_slave_1 entered promiscuous mode
[   67.377437][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.399852][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.407095][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.415278][ T4192] device bridge_slave_0 entered promiscuous mode
[   67.453088][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.471357][ T4189] team0: Port device team_slave_0 added
[   67.477895][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.485126][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.493308][ T4192] device bridge_slave_1 entered promiscuous mode
[   67.505419][ T4186] device hsr_slave_0 entered promiscuous mode
[   67.513132][ T4186] device hsr_slave_1 entered promiscuous mode
[   67.522066][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.540854][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.552035][ T4189] team0: Port device team_slave_1 added
[   67.574193][ T4191] team0: Port device team_slave_0 added
[   67.606327][ T4191] team0: Port device team_slave_1 added
[   67.614990][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.643979][ T4194] team0: Port device team_slave_0 added
[   67.658462][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.674524][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.681530][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.708572][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.722195][ T4194] team0: Port device team_slave_1 added
[   67.753931][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.760931][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.787335][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.805965][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.812974][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.840278][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.866838][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.873947][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.900467][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.912183][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.919630][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.945980][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.960291][ T4192] team0: Port device team_slave_0 added
[   67.972216][ T4192] team0: Port device team_slave_1 added
[   67.986775][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.994160][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.021057][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.048988][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0
[   68.056145][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.082565][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   68.122604][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1
[   68.129832][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.156834][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.210861][ T4191] device hsr_slave_0 entered promiscuous mode
[   68.217627][ T4191] device hsr_slave_1 entered promiscuous mode
[   68.224729][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   68.232594][ T4191] Cannot create hsr debugfs directory
[   68.238902][ T4197] Bluetooth: hci0: command 0x0409 tx timeout
[   68.254881][ T4194] device hsr_slave_0 entered promiscuous mode
[   68.261621][ T4194] device hsr_slave_1 entered promiscuous mode
[   68.268441][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   68.276090][ T4194] Cannot create hsr debugfs directory
[   68.285753][ T4189] device hsr_slave_0 entered promiscuous mode
[   68.292970][ T4189] device hsr_slave_1 entered promiscuous mode
[   68.299912][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   68.308242][ T4189] Cannot create hsr debugfs directory
[   68.313845][   T21] Bluetooth: hci3: command 0x0409 tx timeout
[   68.333481][ T4197] Bluetooth: hci4: command 0x0409 tx timeout
[   68.340151][ T4197] Bluetooth: hci2: command 0x0409 tx timeout
[   68.353606][ T4197] Bluetooth: hci1: command 0x0409 tx timeout
[   68.370551][ T4192] device hsr_slave_0 entered promiscuous mode
[   68.377976][ T4192] device hsr_slave_1 entered promiscuous mode
[   68.385292][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   68.392898][ T4192] Cannot create hsr debugfs directory
[   68.690075][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   68.703176][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   68.730530][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   68.740445][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   68.767595][ T4192] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   68.779560][ T4192] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   68.796365][ T4192] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   68.807725][ T4192] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   68.885387][ T4191] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   68.898887][ T4191] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   68.928755][ T4191] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   68.962140][ T4191] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   68.996154][ T4189] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   69.007338][ T4189] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   69.018928][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.032144][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.042052][ T4189] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   69.053925][ T4189] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   69.068628][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   69.078550][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   69.117485][ T4192] 8021q: adding VLAN 0 to HW filter on device team0
[   69.125010][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   69.132933][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   69.145348][ T4186] 8021q: adding VLAN 0 to HW filter on device team0
[   69.171816][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   69.181751][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   69.191903][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.199227][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.211705][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   69.221508][ T4194] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   69.232098][ T4194] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   69.242008][ T4194] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   69.252801][ T4194] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   69.269021][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   69.279448][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   69.289755][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.297320][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.320635][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   69.330876][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   69.340756][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.347986][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.386636][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   69.395090][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   69.405085][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   69.415365][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   69.424810][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.431931][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.443384][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   69.470028][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   69.480848][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   69.498795][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   69.510197][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   69.555646][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   69.565877][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   69.575919][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   69.585326][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   69.595817][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   69.604859][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   69.614244][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   69.623165][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   69.632152][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   69.641498][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   69.650426][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   69.659112][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   69.673781][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.699061][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.708228][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   69.718871][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   69.734684][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   69.747343][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   69.787693][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   69.800492][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   69.817707][ T4191] 8021q: adding VLAN 0 to HW filter on device team0
[   69.858885][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.869228][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   69.881912][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   69.906056][ T4189] 8021q: adding VLAN 0 to HW filter on device team0
[   69.923863][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   69.944334][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   69.952291][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   69.966944][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   69.976091][  T155] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.983193][  T155] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.992169][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   70.002842][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   70.012511][  T155] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.019971][  T155] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.029378][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   70.037980][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   70.046541][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   70.065914][ T4194] 8021q: adding VLAN 0 to HW filter on device team0
[   70.082232][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   70.117753][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   70.128290][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   70.140783][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   70.154155][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   70.172767][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   70.208610][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.218068][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   70.230392][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   70.239672][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   70.248962][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.256206][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.278105][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   70.287031][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   70.296372][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.303525][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.313134][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   70.323760][ T4228] Bluetooth: hci0: command 0x041b tx timeout
[   70.327892][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   70.346152][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.353268][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.368096][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   70.377350][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   70.386773][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.393926][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.401979][ T4227] Bluetooth: hci3: command 0x041b tx timeout
[   70.403955][ T4228] Bluetooth: hci1: command 0x041b tx timeout
[   70.417733][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   70.427683][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   70.436349][ T4228] Bluetooth: hci2: command 0x041b tx timeout
[   70.441196][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   70.450376][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   70.450399][ T4228] Bluetooth: hci4: command 0x041b tx timeout
[   70.460072][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   70.474410][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   70.483931][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   70.492396][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   70.502813][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   70.519454][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   70.532623][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   70.551901][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   70.566583][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   70.579853][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   70.593694][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   70.610288][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   70.619312][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   70.632923][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   70.664436][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   70.672365][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   70.692463][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   70.702427][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   70.719868][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   70.729222][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   70.738487][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   70.747376][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   70.757759][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   70.767269][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   70.776536][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   70.785876][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   70.795045][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   70.803913][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   70.821806][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   70.834722][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   70.849288][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.869593][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   70.880878][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   70.921273][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   70.953951][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   70.971966][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   71.020992][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   71.047466][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   71.080513][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   71.097000][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   71.106750][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   71.116320][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   71.151813][ T4192] device veth0_vlan entered promiscuous mode
[   71.198039][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   71.213390][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   71.222610][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   71.242577][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   71.257523][ T4192] device veth1_vlan entered promiscuous mode
[   71.282360][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.299622][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   71.310746][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   71.319926][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   71.328906][ T4186] device veth0_vlan entered promiscuous mode
[   71.350059][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   71.360540][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   71.368982][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   71.375277][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[   71.383857][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[   71.412306][ T4192] device veth0_macvtap entered promiscuous mode
[   71.429266][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   71.438923][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   71.448156][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   71.459468][ T4186] device veth1_vlan entered promiscuous mode
[   71.468655][ T4192] device veth1_macvtap entered promiscuous mode
[   71.480526][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.502543][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   71.511045][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   71.519820][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   71.530897][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   71.544630][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.553804][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.569147][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   71.578499][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   71.588685][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   71.603117][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   71.613263][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   71.635689][ T4186] device veth0_macvtap entered promiscuous mode
[   71.644742][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.658598][ T4192] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.668841][ T4192] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.680024][ T4192] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.689402][ T4192] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.706095][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   71.715519][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   71.724341][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   71.733190][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   71.742993][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   71.752377][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   71.764265][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   71.780044][ T4186] device veth1_macvtap entered promiscuous mode
[   71.804972][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   71.813376][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   71.828424][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   71.842866][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   71.855053][ T4189] device veth0_vlan entered promiscuous mode
[   71.871538][ T4189] device veth1_vlan entered promiscuous mode
[   71.886228][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.897750][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.910878][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.929804][ T4191] device veth0_vlan entered promiscuous mode
[   71.937415][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   71.946128][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   71.954939][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   71.964112][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   71.972873][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   71.982933][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   71.991857][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   72.015375][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.026775][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.038602][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.053258][ T4191] device veth1_vlan entered promiscuous mode
[   72.063969][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   72.072691][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   72.082877][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   72.093699][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   72.102534][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   72.111458][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   72.150264][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.159613][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.176209][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.185302][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.214914][ T4189] device veth0_macvtap entered promiscuous mode
[   72.232119][ T4189] device veth1_macvtap entered promiscuous mode
[   72.254472][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   72.262808][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   72.272583][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   72.281731][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   72.290677][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   72.328859][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.344958][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.356486][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.373115][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.385102][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.394291][ T4231] Bluetooth: hci0: command 0x040f tx timeout
[   72.401979][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   72.413335][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   72.422956][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   72.432655][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   72.445221][ T4194] device veth0_vlan entered promiscuous mode
[   72.458743][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.475122][ T4230] Bluetooth: hci2: command 0x040f tx timeout
[   72.481924][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.491927][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.494503][ T4230] Bluetooth: hci1: command 0x040f tx timeout
[   72.504852][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.520368][ T4230] Bluetooth: hci3: command 0x040f tx timeout
[   72.520679][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.545204][ T4191] device veth0_macvtap entered promiscuous mode
[   72.556886][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   72.557444][ T4231] Bluetooth: hci4: command 0x040f tx timeout
[   72.572874][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   72.581396][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   72.590971][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   72.599959][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   72.609477][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   72.618806][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   72.640236][ T4194] device veth1_vlan entered promiscuous mode
[   72.652064][ T4189] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.664076][ T4189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.672830][ T4189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.683299][ T4189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.697964][ T4191] device veth1_macvtap entered promiscuous mode
[   72.744305][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   72.756225][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   72.765388][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   72.784554][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.796136][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.806114][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.816629][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.826864][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.837874][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.849159][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.870629][ T3093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.881516][ T3093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.897298][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   72.911619][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   72.921575][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   72.934202][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.945229][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.956355][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.967254][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.977673][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.988452][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.001543][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.025120][ T4194] device veth0_macvtap entered promiscuous mode
[   73.035356][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   73.050229][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   73.059068][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   73.068292][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   73.081173][ T4191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.090598][ T4191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.099687][ T4191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.110242][ T4191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.147625][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   73.181306][ T4194] device veth1_macvtap entered promiscuous mode
[   73.189870][ T1601] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.201436][ T1601] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.233772][ T1601] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.241834][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   73.254127][ T1601] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.262457][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   73.271071][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   73.293015][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.307678][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.318131][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.330757][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.340992][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.351901][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.362797][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.375912][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.387345][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.412060][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   73.423169][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   73.439259][ T3093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.448772][ T3093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.457521][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.474752][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.489708][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.501784][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.520653][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.533799][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.544113][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.554642][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.567407][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.586805][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   73.597165][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   73.606974][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   73.638761][ T4194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.649574][ T4194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.660056][ T4194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.669562][ T4194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.686610][ T3093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.695674][ T3093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.710793][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   73.786716][ T1601] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.799355][ T1601] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.221152][ T1601] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.351714][ T1601] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.571064][ T4267] Bluetooth: hci0: command 0x0419 tx timeout
[   74.577860][ T4267] Bluetooth: hci3: command 0x0419 tx timeout
[   74.584028][ T4267] Bluetooth: hci1: command 0x0419 tx timeout
[   74.590127][ T4267] Bluetooth: hci2: command 0x0419 tx timeout
[   74.647969][ T4272] DRBG: could not allocate CTR cipher TFM handle: ctr(aes)
[   74.649543][ T4267] Bluetooth: hci4: command 0x0419 tx timeout
[   74.686316][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   74.696992][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   74.719725][ T4281] loop0: detected capacity change from 0 to 512
[   74.757251][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.795622][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.842534][  T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.857188][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   74.873154][  T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.961069][ T4281] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   75.002336][ T4281] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   75.054073][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   75.065841][ T4281] EXT4-fs (loop0): 1 truncate cleaned up
[   75.071562][ T4281] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   76.015164][ T4274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.036694][ T4274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.098297][ T4293] loop1: detected capacity change from 0 to 1024
[   76.112116][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   76.973468][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[   76.993468][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[   77.003447][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[   77.013445][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[   77.023441][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[   77.033444][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[   77.043440][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[   77.053449][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[   77.063442][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[   77.073446][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[   77.969154][ T4306] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   77.976808][ T4306] IPv6: NLM_F_CREATE should be set when creating new route
[   77.984420][ T4306] IPv6: NLM_F_CREATE should be set when creating new route
[   77.991795][ T4306] IPv6: NLM_F_CREATE should be set when creating new route
[   78.638353][   T21] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   78.808890][ T4316] hub 8-0:1.0: USB hub found
[   78.814728][ T4316] hub 8-0:1.0: 1 port detected
[   79.078412][   T21] usb 4-1: Using ep0 maxpacket: 8
[   79.753559][   T21] usb 4-1: device descriptor read/all, error -71
[   79.973158][ T4327] autofs4:pid:4327:autofs_fill_super: called with bogus options
[   84.853841][ T4355] =======================================================
[   84.853841][ T4355] WARNING: The mand mount option has been deprecated and
[   84.853841][ T4355]          and is ignored by this kernel. Remove the mand
[   84.853841][ T4355]          option from the mount to silence this warning.
[   84.853841][ T4355] =======================================================
[   84.947698][ T4352] loop4: detected capacity change from 0 to 256
[   86.241520][   T21] Bluetooth: hci5: command 0x1003 tx timeout
[   86.251178][ T4352] exfat: Bad value for 'uid'
[   86.257128][ T4190] Bluetooth: hci5: sending frame failed (-49)
[   86.730065][ T1324] cfg80211: failed to load regulatory.db
[   88.314014][ T4227] Bluetooth: hci5: command 0x1001 tx timeout
[   88.327949][ T4190] Bluetooth: hci5: sending frame failed (-49)
[   89.346725][   T26] audit: type=1326 audit(1777057496.100:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4369 comm="syz.1.23" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f825047cdd9 code=0x0
[   89.769789][ T4362] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   89.778999][ T4362] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   89.787756][ T4362] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   89.796507][ T4362] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   89.821478][ T4374] loop4: detected capacity change from 0 to 1024
[   89.862162][ T4374] hfsplus: unable to parse mount options
[   90.156428][ T4375] 9pnet: Insufficient options for proto=fd
[   90.394153][ T4229] Bluetooth: hci5: command 0x1009 tx timeout
[   90.528260][ T4362] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   90.537357][ T4362] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   90.546600][ T4362] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   90.555735][ T4362] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   90.793071][ T4380] device syzkaller0 entered promiscuous mode
[   91.872332][ T4385] loop4: detected capacity change from 0 to 256
[   92.019740][ T4385] FAT-fs (loop4): Directory bread(block 64) failed
[   92.047056][ T4385] FAT-fs (loop4): Directory bread(block 65) failed
[   92.060071][ T4385] FAT-fs (loop4): Directory bread(block 66) failed
[   92.061551][ T4387] loop2: detected capacity change from 0 to 512
[   92.071798][ T4385] FAT-fs (loop4): Directory bread(block 67) failed
[   92.086351][ T4385] FAT-fs (loop4): Directory bread(block 68) failed
[   92.093147][ T4385] FAT-fs (loop4): Directory bread(block 69) failed
[   92.109342][ T4385] FAT-fs (loop4): Directory bread(block 70) failed
[   92.118639][ T4385] FAT-fs (loop4): Directory bread(block 71) failed
[   92.129287][ T4385] FAT-fs (loop4): Directory bread(block 72) failed
[   92.138471][ T4385] FAT-fs (loop4): Directory bread(block 73) failed
[   92.172516][ T4387] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   92.294422][ T4387] EXT4-fs (loop2): 1 truncate cleaned up
[   92.300175][ T4387] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   92.359397][ T4378] loop1: detected capacity change from 0 to 32768
[   92.599142][ T4395] loop4: detected capacity change from 0 to 64
[   92.691087][ T4395] MINIX-fs: mounting unchecked file system, running fsck is recommended
[   94.160635][ T4400] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.078282][ T4415] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   95.219420][ T4417] loop2: detected capacity change from 0 to 1024
[   95.868091][ T4417] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,min_batch_time=0x0000000000000005,noquota,lazytime,nombcache,nodioread_nolock,,errors=continue. Quota mode: none.
[   95.906965][ T4417] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   95.938016][ T4400] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.126818][ T4417] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #15: comm syz.2.37: lblock 0 mapped to illegal pblock 0 (length 6)
[   96.193735][ T4428] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #15: comm syz.2.37: lblock 0 mapped to illegal pblock 0 (length 1)
[   96.225534][ T4428] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[   96.251929][ T4428] EXT4-fs (loop2): This should not happen!! Data will be lost
[   96.251929][ T4428] 
[   96.299049][ T4400] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.415349][ T4400] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.590214][ T4424] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[   97.730653][ T4400] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.768732][ T4400] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.831159][ T4400] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.870247][ T4400] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.991248][ T4446] loop0: detected capacity change from 0 to 64
[   98.045857][ T4448] fuse: Bad value for 'user_id'
[   98.069485][ T4446] MINIX-fs: mounting unchecked file system, running fsck is recommended
[   98.501771][ T4456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.48'.
[   99.478961][ T4472] loop2: detected capacity change from 0 to 64
[   99.491534][ T4469] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.537406][ T4467] device syzkaller0 entered promiscuous mode
[   99.618227][ T4471] loop1: detected capacity change from 0 to 4096
[   99.685018][ T4475] fuse: Bad value for 'user_id'
[   99.746620][ T4471] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512)
[  101.006796][ T4471] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  101.044189][ T4471] ntfs3: loop1: Failed to load $Extend.
[  101.169941][ T4469] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.236417][ T4488] loop3: detected capacity change from 0 to 256
[  101.259568][ T4488] exfat: Deprecated parameter 'utf8'
[  101.268655][ T4488] exfat: Deprecated parameter 'namecase'
[  101.323707][ T4488] exfat: Deprecated parameter 'namecase'
[  101.337444][ T4469] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.364747][ T4491] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c)
[  101.450550][ T4488] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  101.476808][ T4469] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.592451][ T4469] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.611954][ T4496] binder: 4494:4496 ioctl 4018620d 0 returned -22
[  101.621106][ T4469] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.635394][ T4469] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.657398][ T4469] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.994085][ T4175] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  102.104334][   T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  102.363669][   T23] usb 5-1: Using ep0 maxpacket: 16
[  102.484238][   T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  102.859106][   T23] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  102.911294][   T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.931436][   T23] usb 5-1: Product: syz
[  102.939295][   T23] usb 5-1: Manufacturer: syz
[  102.948947][   T23] usb 5-1: SerialNumber: syz
[  103.103632][ T4175] usb 2-1: Using ep0 maxpacket: 16
[  103.124146][ T4517] loop3: detected capacity change from 0 to 32768
[  103.135660][   T23] usb 5-1: config 0 descriptor??
[  103.178049][   T23] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  103.202545][   T23] em28xx 5-1:0.0: DVB interface 0 found: bulk
[  103.243818][ T4175] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  103.306444][ T4175] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  103.316358][ T4175] usb 2-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b
[  103.332561][ T4175] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.348944][ T4175] usb 2-1: config 0 descriptor??
[  103.410433][ T4517] XFS (loop3): Mounting V5 Filesystem
[  103.567333][ T4517] XFS (loop3): Ending clean mount
[  103.582925][ T4517] XFS (loop3): Quotacheck needed: Please wait.
[  103.719300][ T4517] XFS (loop3): Quotacheck: Done.
[  103.923140][   T23] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[  104.323751][   T26] audit: type=1800 audit(1777057510.910:3): pid=4535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.68" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4430 res=0 errno=0
[  104.749580][ T4191] XFS (loop3): Unmounting Filesystem
[  104.894041][   T23] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  104.908569][ T4539] device syzkaller0 entered promiscuous mode
[  104.923616][   T23] em28xx 5-1:0.0: board has no eeprom
[  105.253586][   T23] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  105.265515][   T23] em28xx 5-1:0.0: dvb set to bulk mode.
[  105.338363][   T23] usb 5-1: USB disconnect, device number 2
[  105.511084][   T23] em28xx 5-1:0.0: Disconnecting em28xx
[  105.519110][ T4227] em28xx 5-1:0.0: Binding DVB extension
[  106.447738][ T4227] em28xx 5-1:0.0: Registering input extension
[  106.473672][   T23] em28xx 5-1:0.0: Closing input extension
[  106.493753][ T4175] usb 2-1: string descriptor 0 read error: -71
[  106.544942][ T4175] usb 2-1: USB disconnect, device number 2
[  106.743300][ T4553] loop1: detected capacity change from 0 to 32768
[  106.784590][   T23] em28xx 5-1:0.0: Freeing device
[  106.795047][ T4553] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.74 (4553)
[  106.879302][ T4561] loop4: detected capacity change from 0 to 512
[  106.915752][ T4553] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  106.925150][ T4553] BTRFS info (device loop1): setting nodatasum
[  106.931485][ T4553] BTRFS info (device loop1): force zlib compression, level 3
[  106.939567][ T4553] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8)
[  106.949406][ T4553] BTRFS info (device loop1): use lzo compression, level 0
[  106.958354][ T4553] BTRFS info (device loop1): turning on flush-on-commit
[  106.965423][ T4553] BTRFS info (device loop1): enabling auto defrag
[  106.971925][ T4553] BTRFS info (device loop1): max_inline at 4096
[  106.978946][ T4553] BTRFS info (device loop1): using free space tree
[  106.985632][ T4553] BTRFS info (device loop1): has skinny extents
[  107.069787][ T4561] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  108.033523][ T4561] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 1024: comm syz.4.77: invalid block
[  108.146458][ T4561] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.77: invalid indirect mapped block 1024 (level 0)
[  108.161251][ T4561] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.77: bg 0: block 35: padding at end of block bitmap is not set
[  108.177986][ T4561] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  108.189402][ T4561] EXT4-fs (loop4): 1 truncate cleaned up
[  108.195807][ T4561] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  108.200146][ T4581] loop0: detected capacity change from 0 to 512
[  108.237220][ T4587] loop2: detected capacity change from 0 to 512
[  108.263689][ T4553] BTRFS info (device loop1): enabling ssd optimizations
[  108.320319][ T4587] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  108.486591][ T4581] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  108.512262][ T4581] EXT4-fs error (device loop0): mb_free_blocks:1889: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[  108.533928][ T4581] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #11: comm syz.0.79: corrupted inode contents
[  108.580260][ T4581] EXT4-fs error (device loop0): ext4_dirty_inode:6077: inode #11: comm syz.0.79: mark_inode_dirty error
[  108.631418][ T4587] EXT4-fs (loop2): 1 truncate cleaned up
[  108.673691][ T4587] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  108.723020][ T4581] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.79: invalid indirect mapped block 1 (level 1)
[  108.842376][ T4581] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #11: comm syz.0.79: corrupted inode contents
[  109.297858][ T4581] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[  109.315362][ T4581] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #11: comm syz.0.79: corrupted inode contents
[  109.344043][ T4581] EXT4-fs error (device loop0): ext4_truncate:4286: inode #11: comm syz.0.79: mark_inode_dirty error
[  109.409241][ T4581] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem
[  109.440308][ T4581] EXT4-fs (loop0): 1 truncate cleaned up
[  109.446302][ T4581] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  111.181272][ T4617] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  111.365242][ T4622] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c)
[  111.476641][ T4622] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c)
[  111.583308][   T26] audit: type=1326 audit(1777057518.340:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4624 comm="syz.3.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2d1f9dd9 code=0x7ffc0000
[  113.721118][ T4635] sched: RT throttling activated
[  116.268911][ T4660] loop3: detected capacity change from 0 to 8
[  117.591021][ T4671] loop0: detected capacity change from 0 to 512
[  117.601417][ T4671] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  117.659863][ T4671] EXT4-fs (loop0): 1 truncate cleaned up
[  117.674960][ T4671] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  117.892607][ T4676] loop3: detected capacity change from 0 to 512
[  118.623545][ T4614] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  118.983631][ T4614] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  118.992215][ T4614] usb 4-1: config 0 has no interface number 0
[  119.032686][ T4684] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c)
[  119.721877][ T4614] usb 4-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  119.733186][ T4614] usb 4-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[  119.743171][ T4614] usb 4-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  119.756303][ T4614] usb 4-1: config 0 interface 1 has no altsetting 0
[  119.762959][ T4614] usb 4-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00
[  119.772138][ T4614] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.782174][ T4614] usb 4-1: config 0 descriptor??
[  120.023747][ T4228] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  122.333891][ T4228] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  122.594203][ T4614] uclogic 0003:145F:0212.0001: pen parameters not found
[  122.741672][ T4614] uclogic 0003:145F:0212.0001: interface is invalid, ignoring
[  123.144530][ T4228] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  123.175656][ T4228] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  123.222948][ T4228] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  123.277528][    T7] usb 4-1: USB disconnect, device number 4
[  123.323605][ T4228] usb 5-1: string descriptor 0 read error: -71
[  123.338892][ T4228] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  123.371873][ T4228] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  123.395333][ T4712] loop3: detected capacity change from 0 to 2048
[  123.436914][ T4228] usb 5-1: can't set config #1, error -71
[  123.457283][ T4228] usb 5-1: USB disconnect, device number 3
[  123.544858][ T4712] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  123.695814][ T4712] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  123.999818][ T4712] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  124.383696][ T4712] UDF-fs: Scanning with blocksize 512 failed
[  124.460989][ T4712] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  124.859197][ T4228] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  125.995245][ T4718] netlink: 'syz.1.113': attribute type 10 has an invalid length.
[  126.043655][ T4718] netlink: 40 bytes leftover after parsing attributes in process `syz.1.113'.
[  126.064934][ T4718] device team0 entered promiscuous mode
[  126.070871][ T4718] device team_slave_0 entered promiscuous mode
[  126.192925][ T4718] device team_slave_1 entered promiscuous mode
[  126.199908][ T4228] usb 5-1: Using ep0 maxpacket: 8
[  126.244936][ T4718] bridge0: port 3(team0) entered blocking state
[  126.328459][ T4228] usb 5-1: device descriptor read/all, error -71
[  126.343886][ T4718] bridge0: port 3(team0) entered disabled state
[  126.396557][ T4718] bridge0: port 3(team0) entered blocking state
[  126.403276][ T4718] bridge0: port 3(team0) entered forwarding state
[  128.676707][ T4782] loop0: detected capacity change from 0 to 512
[  132.917420][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  132.923788][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  132.998844][ T4198] Bluetooth: hci4: link tx timeout
[  133.004245][ T4198] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  133.078485][ T4816] loop0: detected capacity change from 0 to 512
[  133.143228][ T4816] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  133.336157][ T4816] EXT4-fs (loop0): 1 truncate cleaned up
[  133.348217][ T4198] Bluetooth: hci4: link tx timeout
[  133.355774][ T4198] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  133.376507][ T4816] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  133.515155][ T4198] Bluetooth: hci4: link tx timeout
[  133.521029][ T4198] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  133.819947][ T4198] Bluetooth: hci4: link tx timeout
[  133.825311][ T4198] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  134.030946][ T4198] Bluetooth: hci4: link tx timeout
[  134.037229][ T4198] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  134.114971][ T4832] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.378310][ T4832] device bridge_slave_0 left promiscuous mode
[  134.399447][ T4832] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.466424][ T4841] loop1: detected capacity change from 0 to 512
[  134.760915][ T4832] bond0: (slave bridge_slave_0): Enslaving as an active interface with an up link
[  135.025205][ T4198] Bluetooth: hci4: link tx timeout
[  135.030645][ T4198] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  135.045437][    T7] Bluetooth: hci4: command 0x0406 tx timeout
[  135.062171][ T4835] netlink: 'syz.2.132': attribute type 10 has an invalid length.
[  135.141312][ T4835] netlink: 40 bytes leftover after parsing attributes in process `syz.2.132'.
[  135.153546][ T4835] device team0 entered promiscuous mode
[  135.159208][ T4835] device team_slave_0 entered promiscuous mode
[  135.189281][ T4835] device team_slave_1 entered promiscuous mode
[  135.202503][ T4835] bridge0: port 3(team0) entered blocking state
[  135.220636][ T4835] bridge0: port 3(team0) entered disabled state
[  135.242031][ T4835] bridge0: port 3(team0) entered blocking state
[  135.248470][ T4835] bridge0: port 3(team0) entered forwarding state
[  136.058578][ T4198] Bluetooth: hci4: link tx timeout
[  136.065021][ T4198] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  136.148883][ T4198] Bluetooth: hci4: link tx timeout
[  136.155106][ T4198] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  136.459562][ T4862] loop0: detected capacity change from 0 to 1024
[  137.454210][   T26] audit: type=1800 audit(1777057544.220:5): pid=4874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.145" name="file1" dev="loop0" ino=26 res=0 errno=0
[  137.680683][ T4878] loop2: detected capacity change from 0 to 40427
[  137.746009][ T4878] F2FS-fs (loop2): invalid crc value
[  137.868426][ T4878] F2FS-fs (loop2): Found nat_bits in checkpoint
[  137.921818][ T4878] F2FS-fs (loop2): Inconsistent segment (8) type [1, 0] in SSA and SIT
[  138.697862][ T4893] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c)
[  139.633969][ T4898] loop4: detected capacity change from 0 to 512
[  139.745838][ T4898] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  139.804807][ T4198] Bluetooth: hci4: link tx timeout
[  139.811089][ T4198] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  139.826977][ T4903] loop0: detected capacity change from 0 to 512
[  139.827231][ T4898] EXT4-fs (loop4): orphan cleanup on readonly fs
[  139.847183][ T4898] Quota error (device loop4): v2_read_file_info: Block with free entry too big (4294967071 >= 6).
[  139.865618][ T4898] EXT4-fs warning (device loop4): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  139.922031][ T4898] EXT4-fs (loop4): Cannot turn on quotas: error -117
[  139.940178][ T4903] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  140.065773][ T4898] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.153: bg 0: block 15: invalid block bitmap
[  140.147361][ T4903] EXT4-fs (loop0): 1 truncate cleaned up
[  140.153655][ T4903] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  140.177972][ T4898] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  140.485006][ T4198] Bluetooth: hci4: link tx timeout
[  140.493342][ T4198] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  140.551415][ T4898] EXT4-fs (loop4): 1 truncate cleaned up
[  140.692039][ T4898] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  141.222336][ T4919] loop1: detected capacity change from 0 to 4096
[  141.263593][ T4198] Bluetooth: hci4: link tx timeout
[  141.268960][ T4198] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  141.298609][ T4928] loop2: detected capacity change from 0 to 1024
[  141.368069][ T4919] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512)
[  141.457489][ T4928] EXT4-fs (loop2): Ignoring removed orlov option
[  141.477969][ T4928] EXT4-fs (loop2): Ignoring removed bh option
[  141.547117][ T4928] EXT4-fs (loop2): bad geometry: bigalloc file system with non-zero first_data_block
[  141.547117][ T4928] 
[  141.570345][ T4919] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  141.616941][ T4919] ntfs3: loop1: Failed to load $Extend.
[  142.293151][ T4937] netlink: 20 bytes leftover after parsing attributes in process `syz.2.160'.
[  142.347883][ T4938] netlink: 'syz.3.159': attribute type 10 has an invalid length.
[  142.355796][ T4938] netlink: 40 bytes leftover after parsing attributes in process `syz.3.159'.
[  142.365947][ T4938] device team0 entered promiscuous mode
[  142.371609][ T4938] device team_slave_0 entered promiscuous mode
[  142.379376][ T4938] device team_slave_1 entered promiscuous mode
[  142.393029][ T4938] bridge0: port 3(team0) entered blocking state
[  142.399827][ T4938] bridge0: port 3(team0) entered disabled state
[  142.424151][ T4938] bridge0: port 3(team0) entered blocking state
[  142.430675][ T4938] bridge0: port 3(team0) entered forwarding state
[  142.625177][ T4198] Bluetooth: hci4: link tx timeout
[  142.630371][ T4198] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  143.509683][ T4198] Bluetooth: hci4: link tx timeout
[  143.514951][ T4198] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  143.802779][ T4198] Bluetooth: hci4: link tx timeout
[  143.807964][ T4198] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  145.084529][ T4956] loop0: detected capacity change from 0 to 512
[  145.514083][ T4198] Bluetooth: hci4: link tx timeout
[  145.519300][ T4198] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  146.065489][ T4968] tun0: tun_chr_ioctl cmd 1074025675
[  146.088078][ T4968] tun0: persist enabled
[  146.094516][ T4971] tun0: tun_chr_ioctl cmd 1074025675
[  146.100245][ T4971] tun0: persist enabled
[  146.311219][ T4973] loop4: detected capacity change from 0 to 512
[  146.340816][ T4973] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  146.400876][ T4973] EXT4-fs (loop4): 1 truncate cleaned up
[  146.446065][ T4973] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  148.133702][ T4998] loop0: detected capacity change from 0 to 128
[  148.245230][ T5001] netlink: 12 bytes leftover after parsing attributes in process `syz.4.176'.
[  148.901510][ T4998] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x00000000000003ff,,errors=continue. Quota mode: none.
[  149.015703][ T4998] ext4 filesystem being mounted at /45/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  149.161713][ T5000] loop3: detected capacity change from 0 to 4096
[  150.849015][ T5021] loop1: detected capacity change from 0 to 512
[  150.908639][   T26] audit: type=1800 audit(1777057557.670:6): pid=5000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.178" name="file1" dev="loop3" ino=33 res=0 errno=0
[  151.790441][ T5021] ip6t_rpfilter: unknown options
[  152.016244][ T4198] Bluetooth: hci4: link tx timeout
[  152.021436][ T4198] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  152.068056][ T4198] Bluetooth: hci4: link tx timeout
[  152.073246][ T4198] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  152.083824][ T4198] Bluetooth: hci4: link tx timeout
[  152.088996][ T4198] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  152.782113][ T5054] autofs4:pid:5054:autofs_fill_super: called with bogus options
[  153.592979][ T5062] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  154.736795][ T5081] loop0: detected capacity change from 0 to 512
[  154.743513][ T5082] loop1: detected capacity change from 0 to 512
[  154.774857][ T5084] device syzkaller0 entered promiscuous mode
[  154.906342][ T5081] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  155.550186][ T5090] ip6t_rpfilter: unknown options
[  155.756145][ T5081] EXT4-fs (loop0): 1 truncate cleaned up
[  155.792330][ T5081] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  156.103517][ T4198] Bluetooth: hci4: link tx timeout
[  156.108842][ T4198] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  158.088612][ T5107] loop0: detected capacity change from 0 to 512
[  158.285668][ T5122] autofs4:pid:5122:autofs_fill_super: called with bogus options
[  158.803934][ T5107] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  159.084158][ T5107] EXT4-fs (loop0): 1 truncate cleaned up
[  159.089884][ T5107] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  159.769185][ T5148] loop0: detected capacity change from 0 to 512
[  160.047812][ T5148] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  160.592101][ T5148] EXT4-fs (loop0): 1 truncate cleaned up
[  160.621934][ T5105] loop1: detected capacity change from 0 to 40427
[  160.682822][ T5148] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  160.918103][ T5105] F2FS-fs (loop1): Wrong SIT boundary, start(1536) end(50334208) blocks(1024)
[  160.993082][ T5105] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  161.734885][ T5105] F2FS-fs (loop1): invalid crc value
[  161.753546][ T5105] F2FS-fs (loop1): Failed to start F2FS issue_checkpoint_thread (-12)
[  162.362333][ T5181] loop4: detected capacity change from 0 to 2048
[  162.429934][ T5181] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  162.467448][ T5181] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  162.551659][ T5181] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  162.611778][ T5181] UDF-fs: Scanning with blocksize 512 failed
[  162.692263][ T5181] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  164.358249][ T5207] loop2: detected capacity change from 0 to 512
[  164.508958][ T5207] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  165.584594][ T5207] EXT4-fs (loop2): 1 truncate cleaned up
[  165.590325][ T5207] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  166.938306][ T5222] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.945903][ T5222] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.621967][   T21] Bluetooth: hci4: command 0x0407 tx timeout
[  167.731201][ T5222] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  167.844003][ T5222] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  168.343323][ T5222] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  168.352260][ T5222] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  168.361269][ T5222] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  168.369983][ T5222] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  168.496561][ T5222] syz.4.232 (5222) used greatest stack depth: 20560 bytes left
[  168.550472][ T5269] loop1: detected capacity change from 0 to 2048
[  168.595761][ T5269] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  168.669552][ T5269] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  168.738008][ T5269] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  168.744946][ T5276] syz.4.245 uses obsolete (PF_INET,SOCK_PACKET)
[  168.769337][ T5269] UDF-fs: Scanning with blocksize 512 failed
[  168.990773][ T4198] Bluetooth: hci4: link tx timeout
[  168.996400][ T4198] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  169.208384][ T5269] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  170.441396][ T5301] netlink: 44 bytes leftover after parsing attributes in process `syz.4.255'.
[  170.636301][ T5308] ALSA: mixer_oss: invalid OSS volume 'f7��вBM������b�kr���[�k�O\.E'
[  170.693077][ T5308] ALSA: mixer_oss: invalid OSS volume ''
[  170.746053][ T5273] loop0: detected capacity change from 0 to 40427
[  171.235020][ T5273] F2FS-fs (loop0): invalid crc value
[  171.477510][ T5273] F2FS-fs (loop0): Found nat_bits in checkpoint
[  171.612053][ T5273] F2FS-fs (loop0): Start checkpoint disabled!
[  171.899042][ T5330] loop1: detected capacity change from 0 to 2048
[  172.926480][ T5330] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  173.005206][ T5330] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  173.027961][ T5338] loop3: detected capacity change from 0 to 2048
[  173.033836][ T5330] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  173.042016][ T5330] UDF-fs: Scanning with blocksize 512 failed
[  173.106036][ T5338] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  173.139027][ T5330] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  173.160130][ T5338] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  173.191252][ T5338] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  173.230590][ T5338] UDF-fs: Scanning with blocksize 512 failed
[  173.873723][ T5338] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  175.032975][ T5361] loop4: detected capacity change from 0 to 1024
[  175.081609][ T4198] Bluetooth: hci2: SCO packet for unknown connection handle 0
[  175.121011][ T5361] EXT4-fs (loop4): Ignoring removed orlov option
[  175.176119][ T5361] EXT4-fs (loop4): Ignoring removed bh option
[  175.214519][ T5361] EXT4-fs (loop4): bad geometry: bigalloc file system with non-zero first_data_block
[  175.214519][ T5361] 
[  175.724080][ T5378] netlink: 20 bytes leftover after parsing attributes in process `syz.4.273'.
[  177.592477][ T5388] loop1: detected capacity change from 0 to 512
[  177.667935][ T5388] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  177.723290][ T5388] EXT4-fs (loop1): 1 truncate cleaned up
[  177.729598][ T5388] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  177.965124][ T5398] loop3: detected capacity change from 0 to 2048
[  178.039745][ T5398] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  178.118461][ T5398] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  178.216329][ T5398] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  178.306064][ T5398] UDF-fs: Scanning with blocksize 512 failed
[  178.932959][ T5398] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  179.028661][ T5411] loop4: detected capacity change from 0 to 512
[  179.045882][ T5411] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  179.719716][ T5411] EXT4-fs (loop4): 1 truncate cleaned up
[  179.725883][ T5411] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  180.014593][ T5428] loop1: detected capacity change from 0 to 1024
[  180.103264][ T5428] EXT4-fs (loop1): Ignoring removed orlov option
[  180.110311][ T5428] EXT4-fs (loop1): Ignoring removed bh option
[  180.126039][ T5428] EXT4-fs (loop1): bad geometry: bigalloc file system with non-zero first_data_block
[  180.126039][ T5428] 
[  180.549211][ T5439] netlink: 20 bytes leftover after parsing attributes in process `syz.1.291'.
[  181.095974][ T4614] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  181.362051][ T5448] loop1: detected capacity change from 0 to 512
[  181.373537][ T4614] usb 4-1: Using ep0 maxpacket: 8
[  181.503566][ T4614] usb 4-1: config 0 has no interfaces?
[  181.509352][ T4614] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[  181.654599][ T5448] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  181.733229][ T4614] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.755386][ T5448] EXT4-fs (loop1): 1 truncate cleaned up
[  181.784373][ T5448] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  181.807806][ T4614] usb 4-1: config 0 descriptor??
[  182.825000][   T13] usb 4-1: USB disconnect, device number 5
[  184.356384][ T5499] device syzkaller0 entered promiscuous mode
[  184.453434][ T5501] 
[  184.455835][ T5501] =============================
[  184.479941][ T5501] WARNING: suspicious RCU usage
[  184.486135][ T5501] syzkaller #0 Not tainted
[  184.490605][ T5501] -----------------------------
[  184.513485][ T5501] include/linux/rhashtable.h:594 suspicious rcu_dereference_check() usage!
[  184.522382][ T5501] 
[  184.522382][ T5501] other info that might help us debug this:
[  184.522382][ T5501] 
[  184.575458][ T5512] loop2: detected capacity change from 0 to 512
[  184.589378][ T5512] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  184.613494][ T5501] 
[  184.613494][ T5501] rcu_scheduler_active = 2, debug_locks = 1
[  184.631196][ T5501] 1 lock held by syz.0.307/5501:
[  184.636805][ T5501]  #0: ffffffff8d43d408 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x136/0x1250
[  184.647625][ T5501] 
[  184.647625][ T5501] stack backtrace:
[  184.656507][ T5501] CPU: 0 PID: 5501 Comm: syz.0.307 Not tainted syzkaller #0
[  184.663990][ T5501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  184.674098][ T5501] Call Trace:
[  184.677420][ T5501]  <TASK>
[  184.680387][ T5501]  dump_stack_lvl+0x188/0x250
[  184.685177][ T5501]  ? load_image+0x400/0x400
[  184.689730][ T5501]  ? show_regs_print_info+0x20/0x20
[  184.694993][ T5501]  ? lockdep_rcu_suspicious+0x110/0x180
[  184.700731][ T5501]  ? local_bh_enable+0x20/0x20
[  184.705555][ T5501]  rhltable_lookup+0x7a9/0x7c0
[  184.710289][ T5512] EXT4-fs (loop2): 1 truncate cleaned up
[  184.710376][ T5501]  ? local_bh_enable+0x20/0x20
[  184.720918][ T5501]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  184.726964][ T5501]  ? lock_chain_count+0x20/0x20
[  184.731877][ T5501]  ? mr_mfc_find_parent+0x190/0x190
[  184.737160][ T5501]  ? local_bh_enable+0x20/0x20
[  184.742185][ T5501]  ? mark_lock+0x94/0x320
[  184.746572][ T5501]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  184.752698][ T5501]  ? lock_chain_count+0x20/0x20
[  184.757700][ T5501]  mr_mfc_find_any_parent+0xb6/0x1e0
[  184.763050][ T5501]  ? local_bh_enable+0x20/0x20
[  184.768017][ T5501]  ip_mr_forward+0x24c/0xf90
[  184.772945][ T5501]  ipmr_mfc_add+0x23cc/0x2d40
[  184.777784][ T5501]  ? ipmr_mfc_delete+0x5f0/0x5f0
[  184.782826][ T5501]  ? __lock_acquire+0x7d10/0x7d10
[  184.787935][ T5501]  ip_mroute_setsockopt+0xeaf/0x1250
[  184.793373][ T5501]  ? ipmr_rule_default+0x70/0x70
[  184.798630][ T5501]  ? __might_sleep+0xf0/0xf0
[  184.803281][ T5501]  ip_setsockopt+0x568/0x3130
[  184.808024][ T5501]  ? ipv4_pktinfo_prepare+0x6f0/0x6f0
[  184.813448][ T5501]  ? aa_sk_perm+0x7dc/0x910
[  184.818179][ T5501]  ? aa_af_perm+0x340/0x340
[  184.822764][ T5501]  ? __fget_files+0x40f/0x480
[  184.827620][ T5501]  ? aa_sock_opt_perm+0x74/0x100
[  184.832684][ T5501]  ? sock_common_setsockopt+0x32/0xb0
[  184.838187][ T5501]  ? raw_setsockopt+0xc5/0x180
[  184.843012][ T5501]  ? sock_common_recvmsg+0x1c0/0x1c0
[  184.843552][ T5512] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  184.848358][ T5501]  __sys_setsockopt+0x2bf/0x3d0
[  184.848397][ T5501]  __x64_sys_setsockopt+0xb1/0xc0
[  184.848426][ T5501]  do_syscall_64+0x4c/0xa0
[  184.873906][ T5501]  ? clear_bhb_loop+0x30/0x80
[  184.878653][ T5501]  ? clear_bhb_loop+0x30/0x80
[  184.883386][ T5501]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  184.889534][ T5501] RIP: 0033:0x7ff026db1dd9
[  184.894787][ T5501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  184.914451][ T5501] RSP: 002b:00007ff02500b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  184.922926][ T5501] RAX: ffffffffffffffda RBX: 00007ff02702afa0 RCX: 00007ff026db1dd9
[  184.930959][ T5501] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 000000000000000c
[  184.938979][ T5501] RBP: 00007ff026e47d69 R08: 000000000000003c R09: 0000000000000000
[  184.947036][ T5501] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000
[  184.955063][ T5501] R13: 00007ff02702b038 R14: 00007ff02702afa0 R15: 00007ffe39c1adb8
[  184.963103][ T5501]  </TASK>
[  185.153028][ T5501] 
[  185.155608][ T5501] =============================
[  185.160588][ T5501] WARNING: suspicious RCU usage
[  185.165618][ T5501] syzkaller #0 Not tainted
[  185.170176][ T5501] -----------------------------
[  185.175973][ T5501] include/linux/rhashtable.h:369 suspicious rcu_dereference_check() usage!
[  185.184758][ T5501] 
[  185.184758][ T5501] other info that might help us debug this:
[  185.184758][ T5501] 
[  185.195656][ T5501] 
[  185.195656][ T5501] rcu_scheduler_active = 2, debug_locks = 1
[  185.204004][ T5501] 1 lock held by syz.0.307/5501:
[  185.209215][ T5501]  #0: ffffffff8d43d408 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x136/0x1250
[  185.224654][ T5501] 
[  185.224654][ T5501] stack backtrace:
[  185.244149][ T5501] CPU: 1 PID: 5501 Comm: syz.0.307 Not tainted syzkaller #0
[  185.251878][ T5501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  185.262003][ T5501] Call Trace:
[  185.265313][ T5501]  <TASK>
[  185.268273][ T5501]  dump_stack_lvl+0x188/0x250
[  185.272990][ T5501]  ? load_image+0x400/0x400
[  185.277530][ T5501]  ? show_regs_print_info+0x20/0x20
[  185.282798][ T5501]  ? lockdep_rcu_suspicious+0x110/0x180
[  185.288398][ T5501]  ? local_bh_enable+0x20/0x20
[  185.293200][ T5501]  rhltable_lookup+0x52a/0x7c0
[  185.298005][ T5501]  ? local_bh_enable+0x20/0x20
[  185.302824][ T5501]  ? mr_mfc_find_parent+0x190/0x190
[  185.308295][ T5501]  ? local_bh_enable+0x20/0x20
[  185.313106][ T5501]  ? mark_lock+0x94/0x320
[  185.317480][ T5501]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  185.323513][ T5501]  ? lock_chain_count+0x20/0x20
[  185.328409][ T5501]  mr_mfc_find_any_parent+0xb6/0x1e0
[  185.333744][ T5501]  ? local_bh_enable+0x20/0x20
[  185.338570][ T5501]  ip_mr_forward+0x24c/0xf90
[  185.343214][ T5501]  ipmr_mfc_add+0x23cc/0x2d40
[  185.347949][ T5501]  ? ipmr_mfc_delete+0x5f0/0x5f0
[  185.352921][ T5501]  ? __lock_acquire+0x7d10/0x7d10
[  185.358001][ T5501]  ip_mroute_setsockopt+0xeaf/0x1250
[  185.363332][ T5501]  ? ipmr_rule_default+0x70/0x70
[  185.368318][ T5501]  ? __might_sleep+0xf0/0xf0
[  185.372942][ T5501]  ip_setsockopt+0x568/0x3130
[  185.378191][ T5501]  ? ipv4_pktinfo_prepare+0x6f0/0x6f0
[  185.383724][ T5501]  ? aa_sk_perm+0x7dc/0x910
[  185.388266][ T5501]  ? aa_af_perm+0x340/0x340
[  185.392802][ T5501]  ? __fget_files+0x40f/0x480
[  185.397510][ T5501]  ? aa_sock_opt_perm+0x74/0x100
[  185.402497][ T5501]  ? sock_common_setsockopt+0x32/0xb0
[  185.407903][ T5501]  ? raw_setsockopt+0xc5/0x180
[  185.412697][ T5501]  ? sock_common_recvmsg+0x1c0/0x1c0
[  185.418015][ T5501]  __sys_setsockopt+0x2bf/0x3d0
[  185.422904][ T5501]  __x64_sys_setsockopt+0xb1/0xc0
[  185.427989][ T5501]  do_syscall_64+0x4c/0xa0
[  185.432438][ T5501]  ? clear_bhb_loop+0x30/0x80
[  185.437148][ T5501]  ? clear_bhb_loop+0x30/0x80
[  185.441852][ T5501]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  185.447776][ T5501] RIP: 0033:0x7ff026db1dd9
[  185.452223][ T5501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  185.471981][ T5501] RSP: 002b:00007ff02500b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  185.480432][ T5501] RAX: ffffffffffffffda RBX: 00007ff02702afa0 RCX: 00007ff026db1dd9
[  185.488452][ T5501] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 000000000000000c
[  185.496454][ T5501] RBP: 00007ff026e47d69 R08: 000000000000003c R09: 0000000000000000
[  185.504623][ T5501] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000
[  185.512624][ T5501] R13: 00007ff02702b038 R14: 00007ff02702afa0 R15: 00007ffe39c1adb8
[  185.520641][ T5501]  </TASK>
[  185.780105][ T5501] 
[  185.788465][ T5501] =============================
[  185.804927][ T5501] WARNING: suspicious RCU usage
[  185.821351][ T5501] syzkaller #0 Not tainted
[  185.832839][ T5501] -----------------------------
[  185.848622][ T5501] include/linux/rhashtable.h:614 suspicious rcu_dereference_check() usage!
[  185.886289][ T5501] 
[  185.886289][ T5501] other info that might help us debug this:
[  185.886289][ T5501] 
[  185.922310][ T5501] 
[  185.922310][ T5501] rcu_scheduler_active = 2, debug_locks = 1
[  185.940216][ T5501] 1 lock held by syz.0.307/5501:
[  185.945340][ T5501]  #0: ffffffff8d43d408 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x136/0x1250
[  185.955309][ T5501] 
[  185.955309][ T5501] stack backtrace:
[  185.961945][ T5501] CPU: 0 PID: 5501 Comm: syz.0.307 Not tainted syzkaller #0
[  185.969291][ T5501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  185.979527][ T5501] Call Trace:
[  185.983391][ T5501]  <TASK>
[  185.986370][ T5501]  dump_stack_lvl+0x188/0x250
[  185.991092][ T5501]  ? load_image+0x400/0x400
[  185.995644][ T5501]  ? show_regs_print_info+0x20/0x20
[  186.000897][ T5501]  ? lockdep_rcu_suspicious+0x110/0x180
[  186.006494][ T5501]  ? local_bh_enable+0x20/0x20
[  186.011311][ T5501]  rhltable_lookup+0x61e/0x7c0
[  186.016141][ T5501]  ? local_bh_enable+0x20/0x20
[  186.021042][ T5501]  ? mr_mfc_find_parent+0x190/0x190
[  186.026333][ T5501]  ? local_bh_enable+0x20/0x20
[  186.031188][ T5501]  ? mark_lock+0x94/0x320
[  186.035597][ T5501]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  186.041636][ T5501]  ? lock_chain_count+0x20/0x20
[  186.046788][ T5501]  mr_mfc_find_any_parent+0xb6/0x1e0
[  186.052127][ T5501]  ? local_bh_enable+0x20/0x20
[  186.056946][ T5501]  ip_mr_forward+0x24c/0xf90
[  186.061605][ T5501]  ipmr_mfc_add+0x23cc/0x2d40
[  186.066359][ T5501]  ? ipmr_mfc_delete+0x5f0/0x5f0
[  186.071408][ T5501]  ? __lock_acquire+0x7d10/0x7d10
[  186.076493][ T5501]  ip_mroute_setsockopt+0xeaf/0x1250
[  186.081849][ T5501]  ? ipmr_rule_default+0x70/0x70
[  186.086845][ T5501]  ? __might_sleep+0xf0/0xf0
[  186.091537][ T5501]  ip_setsockopt+0x568/0x3130
[  186.096306][ T5501]  ? ipv4_pktinfo_prepare+0x6f0/0x6f0
[  186.101725][ T5501]  ? aa_sk_perm+0x7dc/0x910
[  186.106323][ T5501]  ? aa_af_perm+0x340/0x340
[  186.110885][ T5501]  ? __fget_files+0x40f/0x480
[  186.115628][ T5501]  ? aa_sock_opt_perm+0x74/0x100
[  186.120631][ T5501]  ? sock_common_setsockopt+0x32/0xb0
[  186.126056][ T5501]  ? raw_setsockopt+0xc5/0x180
[  186.130887][ T5501]  ? sock_common_recvmsg+0x1c0/0x1c0
[  186.136231][ T5501]  __sys_setsockopt+0x2bf/0x3d0
[  186.141133][ T5501]  __x64_sys_setsockopt+0xb1/0xc0
[  186.146269][ T5501]  do_syscall_64+0x4c/0xa0
[  186.150733][ T5501]  ? clear_bhb_loop+0x30/0x80
[  186.155453][ T5501]  ? clear_bhb_loop+0x30/0x80
[  186.160181][ T5501]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  186.166129][ T5501] RIP: 0033:0x7ff026db1dd9
[  186.170597][ T5501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  186.190260][ T5501] RSP: 002b:00007ff02500b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  186.198733][ T5501] RAX: ffffffffffffffda RBX: 00007ff02702afa0 RCX: 00007ff026db1dd9
[  186.206761][ T5501] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 000000000000000c
[  186.215015][ T5501] RBP: 00007ff026e47d69 R08: 000000000000003c R09: 0000000000000000
[  186.223558][ T5501] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000
[  186.231764][ T5501] R13: 00007ff02702b038 R14: 00007ff02702afa0 R15: 00007ffe39c1adb8
[  186.239802][ T5501]  </TASK>
[  191.193551][   T13] Bluetooth: hci0: command 0x0406 tx timeout
[  191.193583][ T4614] Bluetooth: hci1: command 0x0406 tx timeout
[  191.208957][   T13] Bluetooth: hci3: command 0x0406 tx timeout
[  191.213888][ T4614] Bluetooth: hci2: command 0x0406 tx timeout
[  194.246567][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  194.253337][ T1421] ieee802154 phy1 wpan1: encryption failed: -22