last executing test programs:

4m17.294653911s ago: executing program 3 (id=63):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f0000000480)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@nodiscard}, {@clear_cache}, {@ssd_spread}, {@clear_cache}, {@ref_verify}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@noenospc_debug}, {@subvolid}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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")
rename(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)='./file2\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file3\x00', 0x2200, 0x88)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file3\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file7\x00', 0x0)
fdatasync(r0)

4m13.889613245s ago: executing program 3 (id=74):
syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff)
r0 = socket$key(0xf, 0x3, 0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r1, r1, 0x2f, 0x0, 0x0, @void, @value}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r6 = openat$cgroup_devices(r5, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
io_uring_setup(0x0, &(0x7f0000000080))
write$cgroup_devices(r6, &(0x7f0000000000)={'a', ' *:* ', 'w\x00'}, 0x8)
r7 = openat$cgroup_devices(r5, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r7, &(0x7f00000001c0)={'c', ' *:* ', 'rwm\x00'}, 0xa)
write$cgroup_devices(r7, &(0x7f00000058c0)=ANY=[@ANYBLOB='a'], 0x9)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x4a00, 0x0, 0x8001}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000400000000000000000000030000000003000000020000000000000000000000000000010500000002000000020000000000000cfdffffff00002e"], 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
r8 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r8, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0)

4m11.925409597s ago: executing program 3 (id=76):
prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffe000/0x1000)=nil)
timer_create(0x2, 0x0, &(0x7f0000000100))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000640)={@remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x21}, 0x2150165a, 0x40, 0x6, 0x0, 0xfffffffffffffffe, 0x4080078, r5})

4m10.878210144s ago: executing program 3 (id=77):
r0 = socket$netlink(0x10, 0x3, 0xf)
ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f00000001c0)='veth1_vlan\x00')

4m6.901599647s ago: executing program 3 (id=83):
r0 = syz_open_dev$dri(0x0, 0x1f, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, 0x0, 0x0)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x14)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000180)=0xe)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
ioctl$TIOCVHANGUP(r3, 0x5437, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={&(0x7f00000003c0)="597be99d125d9dca03c0c775447fa31e09f55a697b6a36220570fcab99ad6d70fb319f44d340a4c85f085cad84c6aa935085a8111f5f34f01985a5180d67451083d8f5ecd5ee2872ac6ba9e80194eec2cccc7263093a2acb155303744ae537ffab10046e66f37ea10223f09e8bc11b489fd476ef032de70a40f2b911ce00dd3c1a580ddbaa73e4feb688119db1ce81540f8401d8ee788256081c611567", &(0x7f0000000040)=""/30, &(0x7f0000000500)="8553bbafdb3b4316ec1e1c3add6a9433ce22f248dfc7a54db96d39482378de49b2ea4a233fe90a2bcea3bf7b9211b995c392cc5ecd47cc802448e80daf93f8c7321d42654b010f8b2505ce10c1e8d8b0a1fa0e44fcb927705532663272a6775553a5db05a758165002c2ce73d26fb6c68899004d3f862913e86a660f", &(0x7f0000000600)="7723174af402d9eb4c2f08a099cc75391ac5c0a2d27ac69956243942f639aeb34c1688075a8d559aae6d1615a63854ef4c9d6c5f1ff21df7280b52daf0721b66eaf8b5347b55aaa21f16465c029ebf665f738e892a80a7d2d24a8ead0508ed25b5faf77c4a968fe988c1b96251fdf41a31", 0x8, r0}, 0x38)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4000, @fd_index=0x3, 0x5, 0x0, 0x0, 0x4})
io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0)
r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SFACILITIES(r5, 0x89e3, &(0x7f0000000180)={0x7, 0x40086, 0x4, 0xb, 0x5, 0x81})

4m5.803636855s ago: executing program 3 (id=85):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10)
r4 = socket$kcm(0x10, 0x400000002, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000)
sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
r9 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0)
write$sndseq(r9, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {}, @connect={{0x2, 0x3}, {0x3}}}, {0x0, 0x0, 0x0, 0x0, @time={0x2, 0x2}, {0x1, 0x8}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect={{}, {0x0, 0x5}}}], 0x70)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0)

3m50.412568671s ago: executing program 32 (id=85):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10)
r4 = socket$kcm(0x10, 0x400000002, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000)
sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
r9 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0)
write$sndseq(r9, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {}, @connect={{0x2, 0x3}, {0x3}}}, {0x0, 0x0, 0x0, 0x0, @time={0x2, 0x2}, {0x1, 0x8}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect={{}, {0x0, 0x5}}}], 0x70)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0)

2m42.559581777s ago: executing program 0 (id=291):
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f48)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x2, 0x80400, 0x2004})

2m42.156678584s ago: executing program 0 (id=293):
openat$audio(0xffffffffffffff9c, 0x0, 0x109842, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0xfffc, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000140), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000340)=@gcm_128={{0x303}, "b2d3e36800", "11a819954d01e523ba588609fd2f2891", "67e8096e", "5a81e60325eaee97"}, 0x28)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x11a, 0x4, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000080), 0x3, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7})
ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = syz_open_dev$dri(0x0, 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000540)={0x0})
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000200)={0x0, 0x0, <r5=>0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=[0x0]})
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000280)={0x0, 0x0, r5, 0x0, 0x0, 0x5, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0]})
pselect6(0x40, &(0x7f0000000400)={0x800000000, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x8000000000000, 0xfffffffffffffffc, 0xc, 0x401, 0x0, 0x7fffffff, 0x6}, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0)

2m38.703583229s ago: executing program 0 (id=299):
r0 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000100)={0x2000000c})

2m37.607339467s ago: executing program 0 (id=302):
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_submit(0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r2 = socket(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x8, &(0x7f0000000000)=0x40, 0x4)
bind$inet(r2, 0x0, 0x0)
setsockopt$inet_tcp_buf(r2, 0x6, 0x401, &(0x7f0000000240)="b852cd4425e3b2d493800f3b26d8969d7f32a7cc9bfe", 0x16)
connect$inet(r2, &(0x7f00000000c0)={0x10, 0x7f, @loopback}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/raw6\x00')
pipe(0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000006ab8e11724b4c191074960862d71cbb4cc6dc8bf75d7fd733ddf72bf9427f8285281a9d28efdb722b316770dd8dcb3427cbd0d4fc15b2c39074002be804056ce7179c6ab67f5313c6d5bf5b2271bf4e553dd66b132793791846921429aa219504a"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = socket$xdp(0x2c, 0x3, 0x0)
syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82)
syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@newtaction={0x1c0, 0x30, 0xf5df, 0x70bd28, 0x0, {0x0, 0x0, 0x1300}, [{0x1ac, 0x1, [@m_ife={0x144, 0x1b, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa}, @TCA_IFE_METALST={0x40, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x9}, @IFE_META_PRIO={0x8, 0x3, @val=0x1}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xc631}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x3}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xf}, @IFE_META_PRIO={0x8, 0x3, @val=0x8000}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x8000, 0x0, 0x5, 0x1, 0x9}}}, @TCA_IFE_METALST={0x4}, @TCA_IFE_SMAC={0xa, 0x4, @random="c09b01c2bda0"}]}, {0xa2, 0x6, "38dba55b930c2e721150e9bcb4884da5ea895ffd4a25151f1fb1a6ab794a159c8908b8cabaa1749e73e4f1c33edddd3d3c5fed8cdd2b35c5427e7e552a02a3bfe5087e109deda3dde9969acd02482012ad34fd40d150108ee31a6f4b26528ad07f75594d7897fd87c214824ef0d72f8356b84d128119d0e9da182dc7261662b66adbd1662fdf32f47bcb6614f2658a8af330899f8bd1bb2724fefdeee571"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x7}}}}, @m_ife={0x64, 0x14, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @remote}]}, {0x30, 0x6, "fa552b616231414c3ce2646afb12acf0b651332d44e6679c89a4a5e6ff668c8c4d0f9a3cd1d8d4e6abe33080"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x404a8c9}, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa3000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$KVM_CREATE_DEVICE(r5, 0xc018aec0, &(0x7f00000000c0)={0x1})
socket$nl_netfilter(0x10, 0x3, 0xc)

2m36.535347294s ago: executing program 0 (id=305):
sched_setscheduler(0x0, 0x1, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
writev(r1, &(0x7f0000000000)=[{0x0}], 0x1)
ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000))
r2 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r2, 0x2c9a9000)
accept$phonet_pipe(r2, 0x0, &(0x7f0000000040))
fadvise64(r0, 0x5851, 0x0, 0x5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0x11e, 0x400, 0x3, 0x319}, &(0x7f0000000140)=<r6=>0x0, &(0x7f0000000400)=<r7=>0x0)
r8 = socket(0x1d, 0x2, 0x6)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x40, 0x4, r8, 0x0, 0x0, 0x0, 0x80800})
io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf)

2m33.091504999s ago: executing program 0 (id=315):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x5)
recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0)

2m17.43082958s ago: executing program 33 (id=315):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x5)
recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0)

31.951168339s ago: executing program 4 (id=603):
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
recvmmsg$unix(r3, &(0x7f0000000940)=[{{&(0x7f00000002c0), 0x6e, 0x0}}], 0x1, 0x10052, &(0x7f0000000980)={0x77359400})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[<r5=>0x0], &(0x7f0000000180)=[<r6=>0x0], 0x0, 0x0, 0x1, 0x1})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r7 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000500)={'tunl0\x00'})
sendmsg$nl_route(r7, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r5, r6], 0x2, 0x0, 0x0, <r8=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_SETCRTC(r8, 0xc06864a2, &(0x7f0000000340)={0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b14fea7a1316b81525ccf0f8b91fd2eddb851ba62b00d87337407214ea270251"}})
socket$inet6_tcp(0xa, 0x1, 0x0)

28.786961869s ago: executing program 4 (id=607):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = dup(0xffffffffffffffff)
r2 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0)
ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f00000000c0)=0x32)
mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota')
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000800, 0xee01, &(0x7f00000000c0)={0x0, 0x1, 0x2000000000a960, 0x0, 0x201, 0x80000001, 0x48cd, 0x7, 0xdf})
r4 = openat$incfs(0xffffffffffffff9c, 0x0, 0x1812c3, 0x3f)
fchown(r1, 0x0, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r5, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
socket$nl_route(0x10, 0x3, 0x0)

26.520444876s ago: executing program 4 (id=610):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@metacopy_on}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'GPL\x00'}}, {@appraise}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x64, 0x0, 0x32, 0x31, 0x32, 0x61, 0x38], 0x2d, [0x52, 0x61, 0x35, 0x64], 0x2d, [0x35, 0x30, 0x61, 0x63], 0x2d, [0x34, 0x64, 0x35, 0x64], 0x2d, [0x62, 0x61, 0x65, 0x62, 0x31, 0x63, 0x36, 0x34]}}}, {@appraise_type}, {@flag='sync'}]})
chdir(&(0x7f00000000c0)='./bus\x00')
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
fstatfs(r0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000fcffffffb702000000000000b703000001000100850000002d000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

24.38793496s ago: executing program 6 (id=380):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001800)={0x1c, 0xd, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000000)

24.341920241s ago: executing program 4 (id=615):
bpf$ITER_CREATE(0xb, 0x0, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
write$sysctl(r2, &(0x7f0000000580)='1\x00', 0x2)

22.640317978s ago: executing program 4 (id=618):
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7)
listen(0xffffffffffffffff, 0xffffffff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r1, &(0x7f0000000180)='\x00', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @private1}, 0x1c)

22.364924812s ago: executing program 4 (id=619):
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESOCT=r1])

19.768061614s ago: executing program 6 (id=380):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001800)={0x1c, 0xd, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000000)

14.629034616s ago: executing program 6 (id=380):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001800)={0x1c, 0xd, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000000)

10.260935586s ago: executing program 1 (id=637):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}, &(0x7f0000000180)=0x10)

8.72230656s ago: executing program 1 (id=639):
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00')
read$FUSE(r1, &(0x7f0000002080)={0x2020}, 0x2020)
mkdir(&(0x7f0000000300)='./bus\x00', 0x9)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0})
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e00)=@newtaction={0x6c, 0x30, 0x1, 0x3, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x10001, 0x9, 0x10000000}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)
write$vga_arbiter(r2, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc)
mknodat$loop(0xffffffffffffffff, &(0x7f0000001600)='./file1\x00', 0x0, 0x0)
link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00')
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, &(0x7f00000000c0)=0x8000, 0x0, 0x4)
r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01)
ioctl$EVIOCSMASK(r5, 0x40104593, &(0x7f0000000080)={0x1, 0x0, 0x0})
close_range(r0, 0xffffffffffffffff, 0x0)

8.563399363s ago: executing program 1 (id=640):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161100, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f00000001c0)=0x3)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000440)={"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"})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x401, 0x4002, 0x0, {0x0, 0x0, 0xffff, 0x0, 0xd108}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x34}}, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, 0x0, 0x0)
connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, 0x0)

8.448586605s ago: executing program 6 (id=380):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001800)={0x1c, 0xd, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000000)

5.604652871s ago: executing program 1 (id=642):
unshare(0x62040200)
unshare(0x70010000)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000080)={'filter\x00', 0x7003, [0x38d4, 0x23, 0x0, 0x100]}, &(0x7f0000000100)=0x54)

5.540073101s ago: executing program 34 (id=619):
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESOCT=r1])

4.40715898s ago: executing program 5 (id=648):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c00108008000140", @ANYRES64], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)

3.911286998s ago: executing program 5 (id=649):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r1, &(0x7f0000003140), 0x8)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0)
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xc4})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
r3 = creat(&(0x7f0000000280)='./file0\x00', 0x17)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000400)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
statx(r3, 0x0, 0x1000, 0x8, 0x0)
ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
socket$nl_generic(0x10, 0x3, 0x10)
r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0)
sendfile(r7, r8, 0x0, 0x106f)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bind$alg(r0, &(0x7f0000001140)={0x26, 'hash\x00', 0x0, 0x0, 'md4\x00'}, 0x58)

2.985727232s ago: executing program 5 (id=652):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = dup(0xffffffffffffffff)
r2 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0)
ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f00000000c0)=0x32)
mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota')
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000800, 0xee01, &(0x7f00000000c0)={0x0, 0x1, 0x2000000000a960, 0x0, 0x201, 0x80000001, 0x48cd, 0x7, 0xdf})
openat$incfs(0xffffffffffffff9c, 0x0, 0x1812c3, 0x3f)
fchown(r1, 0x0, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r4, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
socket$nl_route(0x10, 0x3, 0x0)

2.095407116s ago: executing program 2 (id=653):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x80400, 0x0)
syz_open_dev$radio(0x0, 0x2, 0x2)
r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2)
ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000080)={0xf0f041})
close_range(r1, 0xffffffffffffffff, 0x0)

2.025992408s ago: executing program 5 (id=654):
bpf$ITER_CREATE(0xb, 0x0, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
write$sysctl(r3, &(0x7f0000000580)='1\x00', 0x2)

1.572647415s ago: executing program 2 (id=655):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x158, 0x10, 0x713, 0x70bd28, 0x0, {{@in=@local, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e20, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x84, 0x0, 0xffffffffffffffff}, {@in6=@mcast1, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x4, 0x100000000, 0x8, 0x100000001, 0x6, 0x3}, {0x0, 0x0, 0x2, 0x7}, {0xc}, 0x70bd29, 0x0, 0xa}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xfffffffffffffc2c, 0x80, "302bfb77f11f8f3a600361cdd3d1df1c1f67bda3ddad7397ba934a95"}}]}, 0x158}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

1.469257186s ago: executing program 5 (id=656):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x40)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800"/11], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r2, 0x1}, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000280), 0xa, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @vbi={0x7fff, 0x6, 0x10000, 0x604023a, [0x1, 0x101], [0x8dc, 0x2], 0x2}})
socket$alg(0x26, 0x5, 0x0)
fsopen(&(0x7f0000000280)='cifs\x00', 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r4, 0x0, 0x0, 0x3})
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000440)={0x9, 0x7ff, 0x15, 0xa}, 0x10)
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r5}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"})
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))

1.375417668s ago: executing program 2 (id=657):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='nv\x00', 0x3)
shutdown(r0, 0x1)

1.375176158s ago: executing program 6 (id=380):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001800)={0x1c, 0xd, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000000)

1.085459553s ago: executing program 1 (id=658):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_open_pts(0xffffffffffffffff, 0x501080)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000380)=0x8, 0x5, 0x0)
write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$vim2m(&(0x7f0000000000), 0x4541b6bf, 0x2)
openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)

1.084733323s ago: executing program 2 (id=659):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c00108008000140", @ANYRES64], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)

1.084417513s ago: executing program 7 (id=645):
r0 = dup(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
getsockopt$bt_BT_SECURITY(r1, 0x111, 0x3, 0x0, 0x20000000)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7e658000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil)
mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil)
mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x16, 0xa, &(0x7f0000000300)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1}, @map_val={0x18, 0x2, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xfffffff9}, @map_fd={0x18, 0x7, 0x1, 0x0, r0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], &(0x7f00000000c0)='syzkaller\x00', 0x980, 0xcd, &(0x7f0000000380)=""/205, 0x41100, 0x20, '\x00', 0x0, @flow_dissector, r0, 0x8, &(0x7f00000001c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x1, 0xe2, 0x2}, 0x10, 0x0, r0, 0x2, &(0x7f00000005c0), &(0x7f0000000600)=[{0x0, 0x4, 0x4e, 0x3}, {0x3, 0x2, 0x8000010, 0xc}], 0x10, 0x5, @void, @value}, 0x94)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
read$FUSE(r5, 0x0, 0x0)
mremap(&(0x7f0000ce8000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f00007ce000/0x2000)=nil)
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
r6 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r6, 0x5403, &(0x7f00000004c0)={0x23d17, 0x0, 0xfffffffd, 0x3, 0x0, "7e12105588f633bbb1df022dace17a32d211ee"})
ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x5412, &(0x7f00000006c0)=0x2)
setuid(0xee01)
prlimit64(0x0, 0x7, &(0x7f0000000140)={0x4, 0x8b}, 0x0)

809.143757ms ago: executing program 2 (id=660):
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0)
pselect6(0x12, &(0x7f0000000080)={0x1000000000000e, 0x9, 0x9, 0x10000000, 0x6, 0x8, 0xc2db, 0x7ff}, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000001480))

219.234007ms ago: executing program 2 (id=661):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x4020744f, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0xfffffffffffffffd, &(0x7f0000000000)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r5, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @loopback}, @ib={0x1b, 0x0, 0x0, {"7d0300"}, 0x0, 0x0, 0x6}}}, 0x118)

188.698908ms ago: executing program 1 (id=662):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x8000080}, [@call={0x85, 0x0, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa8}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
io_uring_setup(0xaab, &(0x7f0000000080)={0x0, 0x40002001, 0x0, 0x3})
socket$inet6(0xa, 0x40000080806, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e20, 0x101, @remote}, 0x1c)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_usb_connect(0x0, 0x40, 0x0, 0x0)
ioctl$sock_bt_hci(r6, 0x400448c9, 0x0)

163.280728ms ago: executing program 5 (id=663):
r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80})
io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf)

0s ago: executing program 6 (id=380):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001800)={0x1c, 0xd, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000000)

kernel console output (not intermixed with test programs):

DUID 00:04:f2:4c:aa:b0:96:74:e7:72:58:13:44:6d:8f:a8:ad:79
forked to background, child pid 3836
[   42.350163][ T3837] 8021q: adding VLAN 0 to HW filter on device bond0
[   42.363490][ T3837] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK

syzkaller
Warning: Permanently added '10.128.1.186' (ED25519) to the list of known hosts.
syzkaller login: [   63.901076][ T4155] cgroup: Unknown subsys name 'net'
[   64.048813][ T4155] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   65.554654][ T4155] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   67.074261][ T4167] chnl_net:caif_netlink_parms(): no params data found
[   67.182022][ T4171] chnl_net:caif_netlink_parms(): no params data found
[   67.205534][ T4177] chnl_net:caif_netlink_parms(): no params data found
[   67.256319][ T4167] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.264354][ T4167] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.273279][ T4167] device bridge_slave_0 entered promiscuous mode
[   67.284883][ T4167] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.293229][ T4167] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.301261][ T4167] device bridge_slave_1 entered promiscuous mode
[   67.324440][ T4166] chnl_net:caif_netlink_parms(): no params data found
[   67.340215][ T4174] chnl_net:caif_netlink_parms(): no params data found
[   67.393636][ T4167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.406092][ T4167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.467871][ T4177] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.475442][ T4177] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.483527][ T4177] device bridge_slave_0 entered promiscuous mode
[   67.514722][ T4177] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.522557][ T4177] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.530536][ T4177] device bridge_slave_1 entered promiscuous mode
[   67.541093][ T4167] team0: Port device team_slave_0 added
[   67.551588][ T4171] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.558925][ T4171] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.567292][ T4171] device bridge_slave_0 entered promiscuous mode
[   67.587922][ T4167] team0: Port device team_slave_1 added
[   67.597246][ T4171] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.604647][ T4171] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.612962][ T4171] device bridge_slave_1 entered promiscuous mode
[   67.673995][ T4177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.709500][ T4166] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.716819][ T4166] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.725251][ T4166] device bridge_slave_0 entered promiscuous mode
[   67.736669][ T4177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.746944][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.754084][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.780697][ T4167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.792880][ T4174] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.800166][ T4174] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.808318][ T4174] device bridge_slave_0 entered promiscuous mode
[   67.818069][ T4171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.828052][ T4166] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.835274][ T4166] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.844111][ T4166] device bridge_slave_1 entered promiscuous mode
[   67.859973][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.867537][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.894674][ T4167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.906375][ T4174] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.913837][ T4174] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.922089][ T4174] device bridge_slave_1 entered promiscuous mode
[   67.930940][ T4171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.991191][ T4177] team0: Port device team_slave_0 added
[   67.999811][ T4177] team0: Port device team_slave_1 added
[   68.026309][ T4171] team0: Port device team_slave_0 added
[   68.034865][ T4166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   68.061603][ T4174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   68.073315][ T4171] team0: Port device team_slave_1 added
[   68.081150][ T4166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   68.105894][ T4174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   68.116128][ T4177] batman_adv: batadv0: Adding interface: batadv_slave_0
[   68.123956][ T4177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.150487][ T4177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   68.163126][ T4177] batman_adv: batadv0: Adding interface: batadv_slave_1
[   68.170211][ T4177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.197218][ T4177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.273130][ T4166] team0: Port device team_slave_0 added
[   68.279508][ T4171] batman_adv: batadv0: Adding interface: batadv_slave_0
[   68.287576][ T4171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.314092][ T4171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   68.329770][ T4167] device hsr_slave_0 entered promiscuous mode
[   68.336959][ T4167] device hsr_slave_1 entered promiscuous mode
[   68.374817][ T4166] team0: Port device team_slave_1 added
[   68.391240][ T4171] batman_adv: batadv0: Adding interface: batadv_slave_1
[   68.398714][ T4171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.425389][ T4171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.446702][ T4174] team0: Port device team_slave_0 added
[   68.464993][ T4177] device hsr_slave_0 entered promiscuous mode
[   68.472674][ T4177] device hsr_slave_1 entered promiscuous mode
[   68.479732][ T4177] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   68.487948][ T4177] Cannot create hsr debugfs directory
[   68.520985][ T4174] team0: Port device team_slave_1 added
[   68.564568][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_0
[   68.571672][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.597947][ T4166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   68.625376][ T4171] device hsr_slave_0 entered promiscuous mode
[   68.632694][ T4171] device hsr_slave_1 entered promiscuous mode
[   68.639512][ T4171] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   68.647611][ T4171] Cannot create hsr debugfs directory
[   68.661954][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_1
[   68.669426][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.696336][ T4166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.723071][ T1324] Bluetooth: hci1: command 0x0409 tx timeout
[   68.723071][ T4180] Bluetooth: hci3: command 0x0409 tx timeout
[   68.723888][ T1324] Bluetooth: hci0: command 0x0409 tx timeout
[   68.748452][ T4174] batman_adv: batadv0: Adding interface: batadv_slave_0
[   68.756297][ T4174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.783092][ T4174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   68.802031][   T21] Bluetooth: hci2: command 0x0409 tx timeout
[   68.812081][ T1324] Bluetooth: hci4: command 0x0409 tx timeout
[   68.822939][ T4174] batman_adv: batadv0: Adding interface: batadv_slave_1
[   68.830048][ T4174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.856957][ T4174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.980758][ T4174] device hsr_slave_0 entered promiscuous mode
[   68.988075][ T4174] device hsr_slave_1 entered promiscuous mode
[   68.995097][ T4174] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   69.002871][ T4174] Cannot create hsr debugfs directory
[   69.029845][ T4166] device hsr_slave_0 entered promiscuous mode
[   69.037050][ T4166] device hsr_slave_1 entered promiscuous mode
[   69.044656][ T4166] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   69.052732][ T4166] Cannot create hsr debugfs directory
[   69.208954][ T4167] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   69.230281][ T4167] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   69.239857][ T4167] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   69.262077][ T4167] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   69.354985][ T4177] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   69.366301][ T4177] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   69.376921][ T4177] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   69.399065][ T4177] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   69.470256][ T4171] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   69.482707][ T4171] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   69.493946][ T4171] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   69.505176][ T4171] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   69.557682][ T4167] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.584768][ T4166] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   69.599490][ T4166] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   69.615654][ T4166] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   69.632412][ T4166] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   69.644207][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   69.657238][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   69.696717][ T4167] 8021q: adding VLAN 0 to HW filter on device team0
[   69.763228][ T4174] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   69.773690][ T4174] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   69.788916][ T4174] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   69.798700][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   69.808372][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   69.818831][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.826758][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.837345][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   69.846669][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   69.855833][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.863157][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.870991][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   69.881113][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   69.898908][ T4177] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.912732][ T4174] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   69.944699][ T4177] 8021q: adding VLAN 0 to HW filter on device team0
[   69.967831][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   69.977174][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   69.987356][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   69.997970][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   70.007597][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   70.016581][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.023912][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.037606][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   70.075832][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   70.086574][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   70.095957][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   70.105679][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   70.115348][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   70.125592][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   70.134503][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.141589][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.149683][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   70.159848][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   70.172682][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   70.202591][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   70.212025][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   70.244474][ T4166] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.251583][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   70.260187][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   70.271708][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   70.280972][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   70.290278][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   70.299423][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   70.309067][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   70.332371][ T4167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   70.348666][ T4177] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   70.360316][ T4177] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   70.377391][ T4171] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.388630][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   70.397917][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   70.416404][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   70.432806][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   70.441504][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   70.468450][ T4171] 8021q: adding VLAN 0 to HW filter on device team0
[   70.479675][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   70.505457][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   70.534515][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   70.543013][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   70.585469][ T4166] 8021q: adding VLAN 0 to HW filter on device team0
[   70.602209][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   70.614339][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   70.624502][ T1448] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.631698][ T1448] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.639956][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   70.650139][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   70.660052][ T1448] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.668252][ T1448] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.676725][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   70.686032][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   70.694454][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   70.707569][ T4167] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.721416][ T4174] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.731660][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   70.760447][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   70.769843][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   70.779103][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   70.788069][ T1126] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.795603][ T1126] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.803196][   T21] Bluetooth: hci0: command 0x041b tx timeout
[   70.803712][ T4215] Bluetooth: hci1: command 0x041b tx timeout
[   70.809401][   T21] Bluetooth: hci3: command 0x041b tx timeout
[   70.824532][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   70.833623][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   70.842518][ T1126] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.849754][ T1126] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.858599][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   70.868164][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   70.882618][ T1107] Bluetooth: hci4: command 0x041b tx timeout
[   70.903321][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   70.912409][ T1107] Bluetooth: hci2: command 0x041b tx timeout
[   70.920084][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   70.929894][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   70.939383][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   70.947420][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   70.957497][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   70.980691][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   70.990131][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   70.999733][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   71.009268][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   71.018698][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   71.028321][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   71.037783][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   71.046405][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   71.055494][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   71.064334][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   71.075028][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   71.093134][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   71.102963][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   71.112595][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   71.121377][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   71.133189][ T4174] 8021q: adding VLAN 0 to HW filter on device team0
[   71.143173][ T4177] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.156794][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   71.165751][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   71.212542][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   71.221403][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   71.232886][ T1126] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.240160][ T1126] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.250107][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   71.259702][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   71.269268][ T1126] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.276598][ T1126] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.284657][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   71.296444][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   71.305171][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   71.324996][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   71.345630][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   71.365435][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   71.376470][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   71.386538][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   71.397650][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   71.409087][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   71.426294][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   71.441069][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   71.447265][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[   71.456519][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[   71.472428][ T4167] device veth0_vlan entered promiscuous mode
[   71.505331][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   71.514258][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   71.527144][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   71.536884][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   71.546579][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   71.555433][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   71.564750][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   71.573902][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   71.583411][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   71.598629][ T4167] device veth1_vlan entered promiscuous mode
[   71.621733][ T4166] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.644646][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   71.654847][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   71.664777][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   71.679664][ T4174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   71.724047][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   71.735003][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   71.745330][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   71.756100][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   71.766031][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   71.776373][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   71.785061][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   71.802860][ T4167] device veth0_macvtap entered promiscuous mode
[   71.811295][ T4177] device veth0_vlan entered promiscuous mode
[   71.848530][ T4171] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.868331][ T4167] device veth1_macvtap entered promiscuous mode
[   71.885359][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   71.899784][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   71.911533][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   71.925049][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   71.935569][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   71.944487][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   71.952149][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   71.967892][ T4177] device veth1_vlan entered promiscuous mode
[   71.983008][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   71.991523][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   72.022920][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   72.040832][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   72.059725][ T4166] device veth0_vlan entered promiscuous mode
[   72.098727][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.119232][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   72.130581][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   72.140857][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   72.161006][ T4177] device veth0_macvtap entered promiscuous mode
[   72.181713][ T4166] device veth1_vlan entered promiscuous mode
[   72.191664][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   72.201347][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   72.209115][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   72.218639][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   72.227480][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   72.241412][ T4174] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.254740][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.272843][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   72.281820][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   72.294179][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   72.308187][ T4177] device veth1_macvtap entered promiscuous mode
[   72.323678][ T4167] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.335282][ T4167] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.344207][ T4167] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.353523][ T4167] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.403562][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   72.414615][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   72.425686][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   72.434766][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   72.445048][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.458583][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.470351][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.502847][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   72.511743][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   72.525978][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.537690][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.549700][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.568877][ T4166] device veth0_macvtap entered promiscuous mode
[   72.579002][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   72.588072][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   72.597498][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   72.607877][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   72.617872][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   72.633609][ T4177] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.643089][ T4177] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.656795][ T4177] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.666413][ T4177] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.684482][ T4174] device veth0_vlan entered promiscuous mode
[   72.698464][ T4166] device veth1_macvtap entered promiscuous mode
[   72.717980][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   72.726771][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   72.736074][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   72.745357][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   72.754509][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   72.769680][ T4174] device veth1_vlan entered promiscuous mode
[   72.834431][ T4171] device veth0_vlan entered promiscuous mode
[   72.843975][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   72.853033][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   72.861324][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   72.870618][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   72.890035][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   72.898187][ T1107] Bluetooth: hci1: command 0x040f tx timeout
[   72.906814][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   72.911504][ T1107] Bluetooth: hci3: command 0x040f tx timeout
[   72.921092][ T1107] Bluetooth: hci0: command 0x040f tx timeout
[   72.947894][ T4171] device veth1_vlan entered promiscuous mode
[   72.960288][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.975933][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.978962][ T1107] Bluetooth: hci2: command 0x040f tx timeout
[   72.986853][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.003642][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.013868][ T1107] Bluetooth: hci4: command 0x040f tx timeout
[   73.018109][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.066275][ T1126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.072010][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   73.081529][ T1126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.090505][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   73.099920][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   73.110533][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   73.120247][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   73.132983][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.145274][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.157036][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.168028][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.180127][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.196246][ T4174] device veth0_macvtap entered promiscuous mode
[   73.215723][ T4174] device veth1_macvtap entered promiscuous mode
[   73.234597][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   73.244230][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   73.255320][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   73.264382][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   73.273897][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   73.283425][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   73.292542][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   73.305933][ T4166] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.317921][ T4166] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.327290][ T4166] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.336281][ T4166] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.357068][ T4171] device veth0_macvtap entered promiscuous mode
[   73.381556][ T4171] device veth1_macvtap entered promiscuous mode
[   73.390087][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   73.398977][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   73.423648][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.437373][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.455117][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.466638][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.477486][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.489375][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.504313][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.540186][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   73.551250][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   73.562686][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.574390][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.584909][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.596105][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.607219][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.618194][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.631147][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.643421][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.654368][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.664907][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.675649][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.687642][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.699723][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.709906][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.721336][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.733659][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.743771][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.758918][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   73.761598][ T1448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.772714][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   73.784315][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.784858][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   73.798964][ T1448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.801612][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   73.818008][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   73.826890][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   73.847212][ T4174] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.860177][ T4174] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.869813][ T4174] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.885815][ T4174] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.900320][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.912507][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.922921][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.934206][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.944325][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.956586][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.966608][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.977208][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.989446][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.033430][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   74.047554][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   74.068409][ T4171] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.079197][ T4171] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.089086][ T4171] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.098224][ T4171] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.163423][ T1126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.171734][ T1126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.224075][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   74.275448][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.296355][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.347435][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   74.406357][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.427986][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.433683][ T1126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.447734][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   74.466869][ T1126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.589702][ T4248] ODEBUG: Out of memory. ODEBUG disabled
[   74.594217][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!!
[   74.611900][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!!
[   74.621891][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!!
[   74.631903][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!!
[   74.640933][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!!
[   74.677734][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   74.699930][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.714020][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.751969][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!!
[   74.798657][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!!
[   74.821884][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!!
[   74.900849][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!!
[   74.925683][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   74.964560][ T1107] Bluetooth: hci0: command 0x0419 tx timeout
[   74.975980][ T1107] Bluetooth: hci3: command 0x0419 tx timeout
[   75.012935][ T1107] Bluetooth: hci1: command 0x0419 tx timeout
[   75.063575][ T4244] Bluetooth: hci4: command 0x0419 tx timeout
[   75.072904][ T4244] Bluetooth: hci2: command 0x0419 tx timeout
[   75.208067][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!!
[   75.229862][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.265098][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.458506][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   75.612496][ T1448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.620686][ T1448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.851527][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   76.837902][ T4262] loop0: detected capacity change from 0 to 4096
[   76.856751][ T4271] loop3: detected capacity change from 0 to 1024
[   77.018765][ T4262] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[   77.136561][   T26] audit: type=1800 audit(1744744228.019:2): pid=4262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1" name="file1" dev="loop0" ino=30 res=0 errno=0
[   77.406783][ T4267] loop2: detected capacity change from 0 to 32768
[   77.464173][ T4267] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.8 (4267)
[   77.549389][ T4267] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[   77.579182][ T4267] BTRFS info (device loop2): force clearing of disk cache
[   77.599396][ T4267] BTRFS info (device loop2): force zlib compression, level 3
[   77.629931][ T4267] BTRFS info (device loop2): enabling auto defrag
[   77.642029][ T4267] BTRFS info (device loop2): max_inline at 0
[   77.648600][ T4267] BTRFS info (device loop2): using free space tree
[   77.693555][ T4267] BTRFS info (device loop2): has skinny extents
[   77.765621][ T4259] loop1: detected capacity change from 0 to 40427
[   77.845192][ T4269] loop4: detected capacity change from 0 to 32768
[   77.898758][ T4259] F2FS-fs (loop1): invalid crc value
[   77.938361][ T4269] =======================================================
[   77.938361][ T4269] WARNING: The mand mount option has been deprecated and
[   77.938361][ T4269]          and is ignored by this kernel. Remove the mand
[   77.938361][ T4269]          option from the mount to silence this warning.
[   77.938361][ T4269] =======================================================
[   77.993927][ T4259] F2FS-fs (loop1): Found nat_bits in checkpoint
[   77.998890][ T4267] BTRFS info (device loop2): enabling ssd optimizations
[   78.022078][ T4267] BTRFS info (device loop2): clearing free space tree
[   78.030056][ T4267] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   78.042168][ T4267] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   78.092894][ T4275] loop0: detected capacity change from 0 to 32768
[   78.170264][ T4267] BTRFS info (device loop2): creating free space tree
[   78.179925][ T4273] loop3: detected capacity change from 0 to 32768
[   78.190261][ T4259] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   78.225769][ T4267] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   78.237820][ T4273] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.10 (4273)
[   78.257717][ T4267] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   78.273275][ T4269] XFS (loop4): Mounting V5 Filesystem
[   78.286516][ T4275] JBD2: Ignoring recovery information on journal
[   78.342132][ T4273] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[   78.351189][ T4273] BTRFS info (device loop3): setting nodatacow, compression disabled
[   78.487174][ T4269] XFS (loop4): Ending clean mount
[   78.499070][ T4273] BTRFS info (device loop3): force clearing of disk cache
[   78.506827][ T4273] BTRFS info (device loop3): enabling ssd optimizations
[   78.516089][ T4273] BTRFS info (device loop3): using spread ssd allocation scheme
[   78.524257][ T4273] BTRFS info (device loop3): doing ref verification
[   78.531215][ T4273] BTRFS info (device loop3): force zlib compression, level 3
[   78.552011][ T4273] BTRFS info (device loop3): not using ssd optimizations
[   78.559781][ T4273] BTRFS info (device loop3): not using spread ssd allocation scheme
[   78.581753][ T4269] XFS (loop4): Quotacheck needed: Please wait.
[   78.599925][ T4275] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   78.617035][ T4273] BTRFS info (device loop3): using free space tree
[   78.654586][ T4167] attempt to access beyond end of device
[   78.654586][ T4167] loop1: rw=2049, want=45104, limit=40427
[   78.657705][ T4273] BTRFS info (device loop3): has skinny extents
[   78.764134][ T4269] XFS (loop4): Quotacheck: Done.
[   78.928727][   T26] audit: type=1800 audit(1744744229.809:3): pid=4275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.11" name="file1" dev="loop0" ino=17058 res=0 errno=0
[   78.959570][ T1448] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared)
[   79.037074][ T4273] BTRFS info (device loop3): clearing free space tree
[   79.044714][ T4273] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   79.062737][ T4273] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   79.123099][ T4273] BTRFS info (device loop3): creating free space tree
[   79.135838][ T4275] syz.0.11 (4275) used greatest stack depth: 19360 bytes left
[   79.149282][ T4273] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   79.160479][ T4273] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   79.197016][ T4171] XFS (loop4): Unmounting Filesystem
[   79.519216][ T4174] ocfs2: Unmounting device (7,0) on (node local)
[   80.858357][ T4337] loop1: detected capacity change from 0 to 32768
[   80.926973][ T4337] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.12 (4337)
[   81.005461][ T4337] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[   81.062101][ T4337] BTRFS info (device loop1): metadata ratio 4
[   81.068376][ T4337] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8)
[   81.137695][ T4337] BTRFS info (device loop1): force lzo compression, level 0
[   81.172268][ T4337] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[   81.211969][ T4337] BTRFS info (device loop1): trying to use backup root at mount time
[   81.220141][ T4337] BTRFS info (device loop1): doing ref verification
[   81.251432][ T4337] BTRFS info (device loop1): disabling tree log
[   81.279547][ T4337] BTRFS info (device loop1): using free space tree
[   81.296656][ T4337] BTRFS info (device loop1): has skinny extents
[   81.406304][ T4352] loop2: detected capacity change from 0 to 32768
[   81.580365][  T154] BTRFS warning (device loop1): checksum verify failed on 5332992 wanted 0x0a5e5d25 found 0x26333c6f level 0
[   81.623914][ T4357] loop4: detected capacity change from 0 to 32768
[   81.642094][   T26] audit: type=1800 audit(1744744232.519:4): pid=4352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.15" name="file1" dev="loop2" ino=4 res=0 errno=0
[   81.655652][ T4352] find_entry called with index = 0
[   81.662989][ T4337] BTRFS warning (device loop1): couldn't read tree root
[   81.665928][  T154] BTRFS warning (device loop1): checksum verify failed on 5324800 wanted 0x9f73850b found 0x78ca8373 level 0
[   81.671232][ T4352] read_mapping_page failed!
[   81.702974][ T4352] ERROR: (device loop2): txCommit: 
[   81.702974][ T4352] 
[   81.726758][ T4337] BTRFS warning (device loop1): couldn't read tree root
[   81.758337][ T4337] BTRFS error (device loop1): parent transid verify failed on 5255168 wanted 5 found 7
[   81.809708][ T4357] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.17 (4357)
[   81.812434][ T4337] BTRFS warning (device loop1): couldn't read tree root
[   81.873125][ T4307] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by udevd (4307)
[   81.937776][ T4337] BTRFS info (device loop1): enabling ssd optimizations
[   81.989823][ T4337] BTRFS info (device loop1): clearing free space tree
[   82.024462][ T4337] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   82.052012][ T4337] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   82.228202][ T4354] loop3: detected capacity change from 0 to 32768
[   82.297367][ T4337] BTRFS info (device loop1): creating free space tree
[   82.327880][ T4345] loop0: detected capacity change from 0 to 65536
[   82.335004][ T4337] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   82.716524][ T4354] (syz.3.16,4354,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   82.750493][ T4337] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   82.935341][ T4354] (syz.3.16,4354,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   83.037474][ T4354] JBD2: Ignoring recovery information on journal
[   83.999484][ T4354] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[   84.043800][ T4393] trusted_key: encrypted_key: master key parameter '"Master"' is invalid
[   84.682154][ T4177] ocfs2: Unmounting device (7,3) on (node local)
[   86.463530][ T4409] loop3: detected capacity change from 0 to 64
[   86.683104][    T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   86.821578][   T13] cfg80211: failed to load regulatory.db
[   86.982026][    T7] usb 1-1: Using ep0 maxpacket: 32
[   87.332059][    T7] usb 1-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30
[   87.355640][ T4409] Trying to free block not in datazone
[   87.422820][    T7] usb 1-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[   87.438730][    T7] usb 1-1: config 0 interface 0 has no altsetting 0
[   87.532182][    T7] usb 1-1: string descriptor 0 read error: -71
[   87.542854][    T7] usb 1-1: New USB device found, idVendor=184f, idProduct=0001, bcdDevice=e0.b8
[   87.582022][    T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   87.660347][    T7] usb 1-1: config 0 descriptor??
[   87.746896][    T7] usb 1-1: can't set config #0, error -71
[   89.542119][ T4340] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   89.822246][ T4340] usb 3-1: Using ep0 maxpacket: 8
[   90.142594][ T4422] loop0: detected capacity change from 0 to 4096
[   90.165038][ T4340] usb 3-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00
[   90.189032][ T4340] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.292349][ T4340] usb 3-1: Product: syz
[   90.303942][ T4422] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00
[   90.336912][ T4340] usb 3-1: Manufacturer: syz
[   90.380999][ T4340] usb 3-1: SerialNumber: syz
[   90.388040][ T4422] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00
[   90.490860][ T4422] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00
[   90.555378][ T4340] usb 3-1: config 0 descriptor??
[   90.582740][ T4422] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00
[   90.670042][ T4422] ntfs3: loop0: try to read out of volume at offset 0x3fffffc1c00
[   90.681451][ T4340] radio-usb-si4713 3-1:0.0: Si4713 development board discovered: (10C4:8244)
[   90.686642][    T7] usb 1-1: USB disconnect, device number 2
[   90.749758][ T4422] ntfs3: loop0: try to read out of volume at offset 0x3fffffc2c00
[   90.758069][ T4422] ntfs3: loop0: try to read out of volume at offset 0x3fffffc4c00
[   90.766225][ T4422] ntfs3: loop0: try to read out of volume at offset 0x3fffffc8c00
[   90.774645][ T4422] ntfs3: loop0: try to read out of volume at offset 0x3fffffd0c00
[   90.784347][ T4422] ntfs3: loop0: try to read out of volume at offset 0x3fffffe0c00
[   91.104545][ T4437] netlink: 12 bytes leftover after parsing attributes in process `syz.2.31'.
[   91.633701][ T4340] radio-usb-si4713: probe of 3-1:0.0 failed with error -71
[   92.252774][ T4340] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[   92.318696][ T4340] usb 3-1: USB disconnect, device number 2
[   93.281092][ T4449] loop0: detected capacity change from 0 to 32768
[   93.408825][ T4449] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.34 (4449)
[   93.460249][ T4449] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[   93.472133][ T4449] BTRFS info (device loop0): force clearing of disk cache
[   93.480171][ T4449] BTRFS info (device loop0): enabling auto defrag
[   93.487228][ T4449] BTRFS info (device loop0): max_inline at 0
[   93.494107][ T4449] BTRFS info (device loop0): enabling disk space caching
[   93.501920][ T4449] BTRFS info (device loop0): disk space caching is enabled
[   93.509978][ T4449] BTRFS info (device loop0): has skinny extents
[   93.883716][ T4449] BTRFS info (device loop0): enabling ssd optimizations
[   93.897558][ T4449] BTRFS info (device loop0): clearing free space tree
[   93.949753][ T4449] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   93.968217][ T4473] loop3: detected capacity change from 0 to 4096
[   93.992063][ T4449] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   94.195402][ T4445] loop4: detected capacity change from 0 to 40427
[   94.354280][ T4445] F2FS-fs (loop4): invalid crc value
[   94.370304][ T4479] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   94.442936][ T4445] F2FS-fs (loop4): Found nat_bits in checkpoint
[   94.755723][ T4445] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   94.914569][   T26] audit: type=1800 audit(1744744245.799:5): pid=4445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.24" name="file1" dev="loop4" ino=10 res=0 errno=0
[   95.029550][ T4445] attempt to access beyond end of device
[   95.029550][ T4445] loop4: rw=34817, want=77952, limit=40427
[   95.102705][ T4445] attempt to access beyond end of device
[   95.102705][ T4445] loop4: rw=0, want=77832, limit=40427
[   95.148973][   T26] audit: type=1800 audit(1744744245.869:6): pid=4445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.24" name="file1" dev="loop4" ino=10 res=0 errno=0
[   95.244520][ T4488] process 'syz.2.39' launched './file1' with NULL argv: empty string added
[   95.417331][ T4443] attempt to access beyond end of device
[   95.417331][ T4443] loop4: rw=0, want=77832, limit=40427
[   95.677777][ T4445] attempt to access beyond end of device
[   95.677777][ T4445] loop4: rw=0, want=77832, limit=40427
[   95.844375][ T4443] attempt to access beyond end of device
[   95.844375][ T4443] loop4: rw=0, want=77832, limit=40427
[   95.959861][ T4445] attempt to access beyond end of device
[   95.959861][ T4445] loop4: rw=0, want=77832, limit=40427
[   96.044098][ T4445] attempt to access beyond end of device
[   96.044098][ T4445] loop4: rw=0, want=77832, limit=40427
[   96.058246][ T4445] attempt to access beyond end of device
[   96.058246][ T4445] loop4: rw=0, want=77832, limit=40427
[   96.074458][ T4445] attempt to access beyond end of device
[   96.074458][ T4445] loop4: rw=0, want=77832, limit=40427
[   96.252789][ T4171] attempt to access beyond end of device
[   96.252789][ T4171] loop4: rw=2049, want=45104, limit=40427
[   96.950084][ T4486] loop3: detected capacity change from 0 to 32768
[   97.469822][ T4486] JBD2: Ignoring recovery information on journal
[   97.921187][ T4486] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[   98.135323][ T4177] ocfs2: Unmounting device (7,3) on (node local)
[   98.427393][ T4184] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[   98.437805][ T4184] CPU: 0 PID: 4184 Comm: kworker/u5:7 Not tainted 5.15.180-syzkaller #0
[   98.446179][ T4184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   98.456282][ T4184] Workqueue: hci1 hci_rx_work
[   98.461128][ T4184] Call Trace:
[   98.464425][ T4184]  <TASK>
[   98.467370][ T4184]  dump_stack_lvl+0x1e3/0x2d0
[   98.472089][ T4184]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[   98.477751][ T4184]  ? panic+0x860/0x860
[   98.481847][ T4184]  ? sysfs_create_dir_ns+0x282/0x390
[   98.487168][ T4184]  sysfs_create_dir_ns+0x2c6/0x390
[   98.492398][ T4184]  ? sysfs_warn_dup+0xa0/0xa0
[   98.497104][ T4184]  ? do_raw_spin_unlock+0x137/0x8b0
[   98.502335][ T4184]  kobject_add_internal+0x6e0/0xe00
[   98.507563][ T4184]  kobject_add+0x14e/0x210
[   98.512186][ T4184]  ? device_add+0x3c2/0xfd0
[   98.516719][ T4184]  ? kobject_init+0x1d0/0x1d0
[   98.521530][ T4184]  ? __raw_spin_lock_init+0x41/0x100
[   98.526854][ T4184]  ? get_device_parent+0x128/0x400
[   98.532020][ T4184]  device_add+0x476/0xfd0
[   98.536412][ T4184]  hci_conn_add_sysfs+0xe4/0x1f0
[   98.541552][ T4184]  le_conn_complete_evt+0xc15/0x1500
[   98.546892][ T4184]  ? cs_le_create_conn+0x5f0/0x5f0
[   98.552081][ T4184]  hci_le_meta_evt+0x28c/0x3f50
[   98.556976][ T4184]  ? __lock_acquire+0x1ff0/0x1ff0
[   98.562037][ T4184]  ? __mutex_lock_common+0x444/0x25a0
[   98.567501][ T4184]  ? hci_remote_host_features_evt+0x280/0x280
[   98.574554][ T4184]  ? __mutex_unlock_slowpath+0x218/0x750
[   98.580264][ T4184]  ? hci_event_packet+0x3b4/0x1550
[   98.585427][ T4184]  ? mutex_unlock+0x10/0x10
[   98.589972][ T4184]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[   98.595987][ T4184]  ? print_irqtrace_events+0x210/0x210
[   98.601478][ T4184]  hci_event_packet+0xc41/0x1550
[   98.606565][ T4184]  ? rcu_lock_release+0x20/0x20
[   98.611547][ T4184]  ? hci_send_to_monitor+0x99/0x4d0
[   98.616892][ T4184]  hci_rx_work+0x237/0xa10
[   98.621349][ T4184]  process_one_work+0x8a1/0x10c0
[   98.626329][ T4184]  ? worker_detach_from_pool+0x260/0x260
[   98.631986][ T4184]  ? _raw_spin_lock_irqsave+0x120/0x120
[   98.637532][ T4184]  ? kthread_data+0x4e/0xc0
[   98.642036][ T4184]  ? wq_worker_running+0x97/0x170
[   98.647165][ T4184]  worker_thread+0xaca/0x1280
[   98.651943][ T4184]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[   98.657859][ T4184]  kthread+0x3f6/0x4f0
[   98.662060][ T4184]  ? rcu_lock_release+0x20/0x20
[   98.666932][ T4184]  ? kthread_blkcg+0xd0/0xd0
[   98.671532][ T4184]  ret_from_fork+0x1f/0x30
[   98.676048][ T4184]  </TASK>
[   98.686675][ T4184] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[   98.700162][ T4184] Bluetooth: hci1: failed to register connection device
[   98.822647][ T4517] loop3: detected capacity change from 0 to 64
[   99.051172][ T4510] loop2: detected capacity change from 0 to 40427
[   99.191448][ T4510] F2FS-fs (loop2): invalid crc value
[   99.221159][ T4510] F2FS-fs (loop2): Found nat_bits in checkpoint
[   99.288899][ T4520] loop1: detected capacity change from 0 to 4096
[   99.387622][ T4510] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   99.448144][ T4520] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512)
[   99.558777][ T4525] loop3: detected capacity change from 0 to 1024
[   99.661361][ T4510] block device autoloading is deprecated. It will be removed in Linux 5.19
[  100.767074][ T4529] loop1: detected capacity change from 0 to 32768
[  100.869889][ T4529] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.51 (4529)
[  100.928693][ T4529] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  100.958324][ T4529] BTRFS info (device loop1): enabling disk space caching
[  100.983311][ T4529] BTRFS info (device loop1): enabling auto defrag
[  100.989987][ T4529] BTRFS info (device loop1): doing ref verification
[  101.057422][ T4529] BTRFS info (device loop1): use no compression
[  101.070858][ T4529] BTRFS info (device loop1): force clearing of disk cache
[  101.234065][ T4529] BTRFS info (device loop1): turning on sync discard
[  101.351253][ T4529] BTRFS info (device loop1): disabling disk space caching
[  101.492006][ T4529] BTRFS info (device loop1): has skinny extents
[  101.520727][ T4531] loop3: detected capacity change from 0 to 32768
[  101.834432][ T4531] (syz.3.52,4531,0):ocfs2_journal_addressable:1992 ERROR: The journal cannot address the entire volume. Enable the 'block64' journal option with tunefs.ocfs2
[  101.834540][ T4531] (syz.3.52,4531,0):ocfs2_check_volume:2490 ERROR: status = -27
[  101.880889][ T4531] (syz.3.52,4531,0):ocfs2_mount_volume:1824 ERROR: status = -27
[  101.900543][ T4531] (syz.3.52,4531,0):ocfs2_fill_super:1177 ERROR: status = -27
[  102.079674][ T4529] BTRFS info (device loop1): enabling ssd optimizations
[  102.128844][ T4533] mmap: syz.2.50 (4533) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  102.181235][ T4529] BTRFS info (device loop1): clearing free space tree
[  102.202160][ T4529] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  102.247686][ T4529] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  104.802191][ T1324] Bluetooth: hci1: command 0x0406 tx timeout
[  105.738156][ T4580] loop2: detected capacity change from 0 to 32768
[  105.841271][ T4580] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.58 (4580)
[  105.885507][ T4580] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  105.922088][ T4580] BTRFS info (device loop2): setting nodatacow, compression disabled
[  105.931314][ T4580] BTRFS info (device loop2): max_inline at 0
[  105.988961][ T4580] BTRFS info (device loop2): enabling disk space caching
[  106.008597][ T4580] BTRFS info (device loop2): turning off barriers
[  106.041963][ T4580] BTRFS info (device loop2): turning on flush-on-commit
[  106.061898][ T4580] BTRFS info (device loop2): doing ref verification
[  106.068626][ T4580] BTRFS info (device loop2): force clearing of disk cache
[  106.084147][ T4592] loop3: detected capacity change from 0 to 64
[  106.121989][ T4580] BTRFS info (device loop2): enabling ssd optimizations
[  106.150525][ T4580] BTRFS info (device loop2): max_inline at 4096
[  106.156545][ T4512] Set syz1 is full, maxelem 65536 reached
[  106.160630][ T4580] BTRFS info (device loop2): disk space caching is enabled
[  106.182380][ T4580] BTRFS info (device loop2): has skinny extents
[  106.272623][   T26] audit: type=1800 audit(1744744257.159:7): pid=4592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.61" name="file1" dev="loop3" ino=18 res=0 errno=0
[  106.312853][ T4583] loop0: detected capacity change from 0 to 32768
[  106.406916][ T4583] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.60 (4583)
[  106.565125][ T4591] loop1: detected capacity change from 0 to 32768
[  106.720596][ T4580] BTRFS info (device loop2): clearing free space tree
[  106.786413][ T4591] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.59 (4591)
[  106.817653][ T4580] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  106.945938][ T4580] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  107.120391][ T4591] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  107.202977][ T4591] BTRFS info (device loop1): force zlib compression, level 3
[  107.210532][ T4591] BTRFS info (device loop1): force clearing of disk cache
[  107.231985][ T4591] BTRFS info (device loop1): setting nodatasum
[  107.238300][ T4591] BTRFS info (device loop1): use zlib compression, level 3
[  107.279219][ T4591] BTRFS info (device loop1): allowing degraded mounts
[  107.331781][ T4591] BTRFS info (device loop1): enabling disk space caching
[  107.346324][ T4591] BTRFS info (device loop1): disk space caching is enabled
[  107.382034][ T4591] BTRFS info (device loop1): has skinny extents
[  107.603646][ T4622] loop0: detected capacity change from 0 to 4096
[  107.805327][ T4591] BTRFS info (device loop1): enabling ssd optimizations
[  107.822404][ T4591] BTRFS info (device loop1): clearing free space tree
[  107.850779][ T4591] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  107.891961][ T4591] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  107.954563][ T4621] loop3: detected capacity change from 0 to 32768
[  108.081557][ T4621] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.63 (4621)
[  108.292816][ T4621] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  108.315557][ T4621] BTRFS info (device loop3): setting nodatacow, compression disabled
[  108.367982][ T4621] BTRFS info (device loop3): force clearing of disk cache
[  108.413861][ T4621] BTRFS info (device loop3): enabling ssd optimizations
[  108.439254][ T4652] loop0: detected capacity change from 0 to 1024
[  108.450311][ T4621] BTRFS info (device loop3): using spread ssd allocation scheme
[  108.476437][ T4591] BTRFS info (device loop1): balance: start -susage=0..511,limit=2
[  108.497426][ T4621] BTRFS info (device loop3): doing ref verification
[  108.527900][ T4621] BTRFS info (device loop3): not using ssd optimizations
[  108.579195][ T4621] BTRFS info (device loop3): not using spread ssd allocation scheme
[  108.614714][ T4652] hfsplus: inconsistency in B*Tree (31095,1,255,1,0)
[  108.620471][ T4591] BTRFS info (device loop1): relocating block group 1048576 flags system
[  108.631067][ T4650] loop4: detected capacity change from 0 to 4096
[  108.650753][ T4621] BTRFS info (device loop3): using free space tree
[  108.658235][ T4652] hfsplus: xattr searching failed
[  108.692039][ T4621] BTRFS info (device loop3): has skinny extents
[  109.027780][ T4591] BTRFS info (device loop1): balance: canceled
[  109.046276][   T26] audit: type=1800 audit(1744744259.929:8): pid=4674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.66" name="file1" dev="loop4" ino=30 res=0 errno=0
[  109.067687][    C0] vkms_vblank_simulate: vblank timer overrun
[  109.096802][ T4659] loop2: detected capacity change from 0 to 4096
[  109.165722][ T4659] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  109.168360][ T4621] BTRFS info (device loop3): clearing free space tree
[  109.181929][ T4621] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  109.192951][ T4621] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  109.207003][   T26] audit: type=1800 audit(1744744259.999:9): pid=4650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.66" name="file1" dev="loop4" ino=30 res=0 errno=0
[  109.227601][ T4621] BTRFS info (device loop3): creating free space tree
[  109.301275][ T4621] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  109.322056][ T4621] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  109.444636][ T4680] loop4: detected capacity change from 0 to 128
[  109.541685][ T4680] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  109.597877][ T4680] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  109.688557][ T4672] loop0: detected capacity change from 0 to 32768
[  109.829866][ T4672] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.68 (4672)
[  109.847667][ T4680] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  109.943730][ T4243] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by udevd (4243)
[  110.268777][ T4688] loop0: detected capacity change from 0 to 4096
[  110.535114][ T4688] NILFS (loop0): invalid segment: Checksum error in segment payload
[  110.579685][ T4688] NILFS (loop0): trying rollback from an earlier position
[  110.689508][ T4688] NILFS (loop0): recovery complete
[  110.741657][ T4695] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  111.144577][ T4690] loop1: detected capacity change from 0 to 32768
[  111.241956][ T4492] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[  112.096987][ T4692] loop4: detected capacity change from 0 to 32768
[  112.124934][ T4690] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.70 (4690)
[  112.232132][ T4692] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.72 (4692)
[  112.332366][ T4690] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  112.341898][ T4690] BTRFS info (device loop1): setting nodatacow, compression disabled
[  112.372169][ T4690] BTRFS info (device loop1): enabling auto defrag
[  112.378691][ T4690] BTRFS info (device loop1): max_inline at 0
[  112.443672][ T4492] usb 3-1: config 1 interface 0 has no altsetting 0
[  112.532733][ T4690] BTRFS info (device loop1): using free space tree
[  112.540070][ T4690] BTRFS info (device loop1): has skinny extents
[  113.150732][ T4692] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  113.152401][ T4492] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  113.173986][ T4692] BTRFS info (device loop4): using free space tree
[  113.277196][ T4692] BTRFS info (device loop4): has skinny extents
[  113.414041][ T4492] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.554914][ T4492] usb 3-1: Product: syz
[  113.563010][ T4492] usb 3-1: Manufacturer: syz
[  113.633256][ T4703] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  113.659659][ T4492] usb 3-1: SerialNumber: syz
[  113.905394][ T4492] usb 3-1: can't set config #1, error -71
[  113.991619][ T4492] usb 3-1: USB disconnect, device number 3
[  115.652392][ T4307] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by udevd (4307)
[  115.666047][ T4690] BTRFS error (device loop1): open_ctree failed: -12
[  116.432805][ T4692] BTRFS error (device loop4): open_ctree failed: -12
[  116.672691][ T4769] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  116.788982][ T4768] overlayfs: failed to resolve './bus': -2
[  118.436853][ T4785] loop0: detected capacity change from 0 to 512
[  118.793888][ T4797] dlm: no local IP address has been set
[  118.799990][ T4797] dlm: cannot start dlm midcomms -107
[  121.177417][ T4795] netlink: 60 bytes leftover after parsing attributes in process `syz.3.85'.
[  121.352917][ T4785] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,lazytime,,errors=continue. Quota mode: writeback.
[  121.430540][ T4785] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  121.452982][ T4645] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  121.538183][ T4810] loop8: detected capacity change from 0 to 1
[  121.570884][ T4810] Dev loop8: unable to read RDB block 1
[  121.579234][ T4810]  loop8: unable to read partition table
[  121.591800][ T4810] loop8: partition table beyond EOD, truncated
[  121.600045][ T4810] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  121.692131][ T4645] usb 2-1: Using ep0 maxpacket: 16
[  121.812156][ T4645] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  121.839687][ T4645] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  121.868944][ T4645] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  121.898235][ T4645] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.953053][ T4645] usb 2-1: config 0 descriptor??
[  122.453687][ T4645] hid-multitouch 0003:1FD2:6007.0001: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0
[  122.727561][ T4495] usb 2-1: USB disconnect, device number 2
[  122.881232][ T4815] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  122.971282][ T4825] Zero length message leads to an empty skb
[  123.550626][ T4838] loop1: detected capacity change from 0 to 512
[  124.296547][ T4838] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,lazytime,,errors=continue. Quota mode: writeback.
[  124.312180][ T4838] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  125.814794][ T4860] device ip6tnl1 entered promiscuous mode
[  126.283431][ T4867] trusted_key: encrypted_key: master key parameter '"Master"' is invalid
[  130.160884][ T4897] overlayfs: overlapping lowerdir path
[  130.717431][ T4903] loop4: detected capacity change from 0 to 512
[  132.252995][ T4903] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,lazytime,,errors=continue. Quota mode: writeback.
[  132.322061][ T4903] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  132.902856][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  132.909384][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  133.161335][ T4927] netlink: zone id is out of range
[  133.367813][ T4927] netlink: zone id is out of range
[  137.075587][ T4951] xt_TPROXY: Can be used only with -p tcp or -p udp
[  138.330217][ T4949] chnl_net:caif_netlink_parms(): no params data found
[  139.323474][ T4398] Bluetooth: hci5: command 0x0409 tx timeout
[  139.526408][ T4981] loop1: detected capacity change from 0 to 512
[  140.287178][ T4981] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,lazytime,,errors=continue. Quota mode: writeback.
[  140.467782][ T4981] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  140.605148][ T4949] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.775529][ T4949] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.999568][ T4949] device bridge_slave_0 entered promiscuous mode
[  141.086285][ T4949] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.125577][ T4949] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.170894][ T4949] device bridge_slave_1 entered promiscuous mode
[  141.432652][ T4398] Bluetooth: hci5: command 0x041b tx timeout
[  141.511371][ T4949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  142.369122][ T4949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  142.568679][ T4949] team0: Port device team_slave_0 added
[  142.599694][ T4949] team0: Port device team_slave_1 added
[  142.714446][ T4949] batman_adv: batadv0: Adding interface: batadv_slave_0
[  142.741973][ T4949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  142.791087][ T4949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  142.806532][ T4949] batman_adv: batadv0: Adding interface: batadv_slave_1
[  142.814202][ T4949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  142.878965][ T4949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  143.471019][ T4645] Bluetooth: hci5: command 0x040f tx timeout
[  143.509217][ T4949] device hsr_slave_0 entered promiscuous mode
[  143.715682][ T4949] device hsr_slave_1 entered promiscuous mode
[  143.762134][ T4949] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  143.769921][ T4949] Cannot create hsr debugfs directory
[  145.707054][ T4584] Bluetooth: hci5: command 0x0419 tx timeout
[  146.961828][    C0] sched: RT throttling activated
[  147.356644][ T5049] capability: warning: `syz.0.157' uses deprecated v2 capabilities in a way that may be insecure
[  147.640880][ T5053] loop0: detected capacity change from 0 to 512
[  148.680465][ T5053] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,lazytime,,errors=continue. Quota mode: writeback.
[  148.704202][ T5053] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  149.318284][ T4220] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.419746][ T5073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.165'.
[  149.445842][ T5073] netlink: 12 bytes leftover after parsing attributes in process `syz.2.165'.
[  149.522547][ T5073] netlink: 'syz.2.165': attribute type 12 has an invalid length.
[  149.574600][ T4220] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.902106][ T4220] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.208758][ T4220] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.718861][ T5088] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  151.508896][ T5091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.170'.
[  153.104439][ T5098] lo speed is unknown, defaulting to 1000
[  153.125061][ T5098] lo speed is unknown, defaulting to 1000
[  153.236573][ T5098] lo speed is unknown, defaulting to 1000
[  153.444624][ T4949] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  153.591684][ T4949] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  153.621128][ T4949] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  153.646094][ T4949] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  153.805979][ T5098] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  153.850544][ T5098] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  154.640585][ T5098] lo speed is unknown, defaulting to 1000
[  154.769171][ T5098] lo speed is unknown, defaulting to 1000
[  154.801141][ T4949] 8021q: adding VLAN 0 to HW filter on device bond0
[  154.854031][ T5098] lo speed is unknown, defaulting to 1000
[  154.860749][ T5098] lo speed is unknown, defaulting to 1000
[  154.973219][ T4949] 8021q: adding VLAN 0 to HW filter on device team0
[  154.980827][ T5098] lo speed is unknown, defaulting to 1000
[  155.010442][ T4949] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  155.021605][ T4949] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  155.056643][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  155.067543][ T5098] lo speed is unknown, defaulting to 1000
[  155.100585][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  155.166580][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  155.233995][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  155.296477][ T4255] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.303724][ T4255] bridge0: port 1(bridge_slave_0) entered forwarding state
[  155.317924][ T5128] loop0: detected capacity change from 0 to 512
[  155.364773][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  155.381068][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  155.394795][ T4255] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.402057][ T4255] bridge0: port 2(bridge_slave_1) entered forwarding state
[  155.909930][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  155.951142][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  156.003305][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  156.056886][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  156.068973][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  156.082439][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  156.093348][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  156.093476][ T5128] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,lazytime,,errors=continue. Quota mode: writeback.
[  156.103366][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  156.115795][ T5128] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  156.152594][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  156.162276][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  156.170836][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  156.179216][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  156.187739][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  157.889709][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  157.907847][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  157.968161][ T4949] 8021q: adding VLAN 0 to HW filter on device batadv0
[  158.171953][ T4762] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[  158.306909][ T4220] device hsr_slave_0 left promiscuous mode
[  158.321601][ T4220] device hsr_slave_1 left promiscuous mode
[  158.358020][ T4220] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  158.377581][ T4220] batman_adv: batadv0: Removing interface: batadv_slave_0
[  158.434062][ T4220] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  158.451777][ T4220] batman_adv: batadv0: Removing interface: batadv_slave_1
[  158.585478][ T4220] device bridge_slave_1 left promiscuous mode
[  158.612124][ T4762] usb 3-1: config index 0 descriptor too short (expected 48, got 27)
[  158.612503][ T4220] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.629458][ T4762] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  158.703415][ T4762] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  158.719960][ T4220] device bridge_slave_0 left promiscuous mode
[  158.749168][ T4220] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.911335][ T4220] device veth1_macvtap left promiscuous mode
[  158.929015][ T4220] device veth0_macvtap left promiscuous mode
[  158.942285][ T4220] device veth1_vlan left promiscuous mode
[  158.952898][ T4220] device veth0_vlan left promiscuous mode
[  159.732171][ T4762] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  159.854771][ T4762] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.892516][ T4762] usb 3-1: Product: syz
[  159.907121][ T4762] usb 3-1: Manufacturer: syz
[  159.922021][ T4762] usb 3-1: SerialNumber: syz
[  159.951121][ T4762] usb 3-1: config 0 descriptor??
[  161.330165][ T4220] team0 (unregistering): Port device team_slave_1 removed
[  161.395688][ T4220] team0 (unregistering): Port device team_slave_0 removed
[  161.446728][ T4220] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  161.519801][ T4220] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  161.811501][ T4220] bond0 (unregistering): Released all slaves
[  161.947824][ T5189] netlink: 16 bytes leftover after parsing attributes in process `syz.0.186'.
[  162.024539][ T5157] Falling back ldisc for ttyS3.
[  162.136684][ T4762] usb 3-1: USB disconnect, device number 4
[  162.431997][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  164.264713][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  164.315621][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  164.330736][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  164.548752][ T4949] device veth0_vlan entered promiscuous mode
[  164.895032][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  164.917803][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  164.992890][ T4949] device veth1_vlan entered promiscuous mode
[  165.217140][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  165.244281][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  165.394998][ T5236] loop4: detected capacity change from 0 to 128
[  165.446999][ T4949] device veth0_macvtap entered promiscuous mode
[  165.540206][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  165.571836][ T4949] device veth1_macvtap entered promiscuous mode
[  165.789243][ T4949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  165.791314][ T5240] handle_bad_sector: 1 callbacks suppressed
[  165.791337][ T5240] attempt to access beyond end of device
[  165.791337][ T5240] loop4: rw=2049, want=737, limit=128
[  165.881875][ T4949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.932549][ T4949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  165.980058][ T4949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.031915][ T4949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  166.071497][ T4949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.101902][ T4949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  166.141850][ T4949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.170162][ T4949] batman_adv: batadv0: Interface activated: batadv_slave_0
[  166.242326][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  166.251149][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  166.333433][ T4949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  166.381285][ T4949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.421199][ T4949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  166.611941][ T4949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.648034][ T4949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  166.701095][ T4949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.741909][ T4949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  166.876397][ T4949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.897542][ T4949] batman_adv: batadv0: Interface activated: batadv_slave_1
[  166.975048][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  166.988146][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  167.223280][ T5253] netlink: zone id is out of range
[  168.070152][ T4949] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  168.169335][ T4949] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  168.282832][ T4949] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  168.323748][ T4949] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  169.446948][ T4401] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  169.521399][ T4401] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  170.026228][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  170.938964][ T5284] loop2: detected capacity change from 0 to 128
[  172.443076][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  172.493641][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  172.562133][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  172.628988][ T5291] attempt to access beyond end of device
[  172.628988][ T5291] loop2: rw=2049, want=377, limit=128
[  172.744504][ T5278] attempt to access beyond end of device
[  172.744504][ T5278] loop2: rw=524288, want=369, limit=128
[  172.810476][ T5300] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem
[  172.859132][ T5284] attempt to access beyond end of device
[  172.859132][ T5284] loop2: rw=0, want=153, limit=128
[  172.861955][ T4763] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  172.968767][ T5284] attempt to access beyond end of device
[  172.968767][ T5284] loop2: rw=0, want=153, limit=128
[  173.002447][ T5284] attempt to access beyond end of device
[  173.002447][ T5284] loop2: rw=0, want=153, limit=128
[  173.751949][ T4763] usb 1-1: Using ep0 maxpacket: 32
[  173.872205][ T4763] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10
[  173.899920][ T4763] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024
[  174.015612][ T4763] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  175.522263][ T4763] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  175.541631][ T4763] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  175.568204][ T4763] usb 1-1: Product: syz
[  175.846328][ T4763] usb 1-1: Manufacturer: syz
[  175.846353][ T4763] usb 1-1: SerialNumber: syz
[  177.073566][ T4763] usb 1-1: can't set config #1, error -71
[  177.075493][ T4763] usb 1-1: USB disconnect, device number 3
[  178.052059][ T5333] delete_channel: no stack
[  178.355845][ T5351] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  178.551927][ T4763] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[  178.774134][ T5363] block nbd5: Unsupported socket: shutdown callout must be supported.
[  179.072012][ T4763] usb 1-1: unable to get BOS descriptor or descriptor too short
[  179.077631][ T5371] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280
[  179.131977][ T4763] usb 1-1: not running at top speed; connect to a high speed hub
[  179.229360][   T26] audit: type=1326 audit(1744744330.109:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5373 comm="syz.5.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f4007169 code=0x7ffc0000
[  179.262585][ T4763] usb 1-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config
[  179.451969][   T26] audit: type=1326 audit(1744744330.109:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5373 comm="syz.5.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f4007169 code=0x7ffc0000
[  179.476301][   T26] audit: type=1326 audit(1744744330.119:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5373 comm="syz.5.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fa2f4007169 code=0x7ffc0000
[  179.499645][   T26] audit: type=1326 audit(1744744330.119:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5373 comm="syz.5.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f4007169 code=0x7ffc0000
[  180.362767][   T26] audit: type=1326 audit(1744744330.119:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5373 comm="syz.5.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f4007169 code=0x7ffc0000
[  180.386683][   T26] audit: type=1326 audit(1744744330.119:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5373 comm="syz.5.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7fa2f4007169 code=0x7ffc0000
[  180.414927][ T4398] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  180.451979][ T4763] usb 1-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=84.a2
[  180.512416][ T4763] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.671856][ T4763] usb 1-1: Product: syz
[  180.870770][ T4763] usb 1-1: Manufacturer: syz
[  181.792047][ T4398] usb 2-1: Using ep0 maxpacket: 16
[  181.792658][ T4763] usb 1-1: can't set config #12, error -71
[  181.812974][   T26] audit: type=1326 audit(1744744330.119:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5373 comm="syz.5.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f4007169 code=0x7ffc0000
[  181.841994][ T4763] usb 1-1: USB disconnect, device number 4
[  181.916478][   T26] audit: type=1326 audit(1744744330.119:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5373 comm="syz.5.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f4007169 code=0x7ffc0000
[  181.939549][ T4398] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping
[  183.029740][ T4398] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  183.033985][   T26] audit: type=1326 audit(1744744330.119:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5373 comm="syz.5.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fa2f4007169 code=0x7ffc0000
[  183.091915][ T4398] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.125039][   T26] audit: type=1326 audit(1744744330.119:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5373 comm="syz.5.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f4007169 code=0x7ffc0000
[  183.255494][ T4398] usb 2-1: Product: syz
[  183.259740][ T4398] usb 2-1: Manufacturer: syz
[  183.287554][ T4398] usb 2-1: config 0 descriptor??
[  183.319494][ T4398] usb 2-1: can't set config #0, error -71
[  183.451934][ T4762] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  184.405525][ T4398] usb 2-1: USB disconnect, device number 3
[  184.799241][ T5427] syz.0.241 uses obsolete (PF_INET,SOCK_PACKET)
[  184.812069][ T4762] usb 6-1: Using ep0 maxpacket: 32
[  184.876347][ T5436] netlink: 32 bytes leftover after parsing attributes in process `syz.1.243'.
[  184.932238][ T4762] usb 6-1: config 0 has an invalid interface number: 15 but max is 0
[  184.940664][ T4762] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  185.014277][ T4762] usb 6-1: config 0 has no interface number 0
[  185.028237][ T4762] usb 6-1: config 0 interface 15 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  185.272125][ T4762] usb 6-1: New USB device found, idVendor=0856, idProduct=bc01, bcdDevice=b2.bf
[  185.281231][ T4762] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.387455][ T4762] usb 6-1: Product: syz
[  185.393632][ T4762] usb 6-1: Manufacturer: syz
[  185.398486][ T4762] usb 6-1: SerialNumber: syz
[  186.237320][ T4762] usb 6-1: config 0 descriptor??
[  186.271982][ T4762] usb 6-1: can't set config #0, error -71
[  186.292342][ T4762] usb 6-1: USB disconnect, device number 2
[  187.812049][ T5457] netlink: 60 bytes leftover after parsing attributes in process `syz.1.248'.
[  191.372307][ T4762] Bluetooth: hci0: command 0x0406 tx timeout
[  191.384984][ T4762] Bluetooth: hci1: command 0x0406 tx timeout
[  191.411268][ T4762] Bluetooth: hci3: command 0x0406 tx timeout
[  191.447919][ T4762] Bluetooth: hci2: command 0x0406 tx timeout
[  191.791990][ T4398] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  191.799731][ T4647] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  191.832233][ T4762] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  192.042745][ T4647] usb 3-1: Using ep0 maxpacket: 8
[  192.079896][ T4398] usb 6-1: too many configurations: 9, using maximum allowed: 8
[  192.112027][ T4762] usb 1-1: Using ep0 maxpacket: 32
[  192.162146][ T4647] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  192.172999][ T4398] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  192.184318][ T4398] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  192.194561][ T4647] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  192.204726][ T4398] usb 6-1: config 0 interface 0 has no altsetting 0
[  192.252495][ T4762] usb 1-1: config 0 has an invalid interface number: 39 but max is 0
[  192.263990][ T4762] usb 1-1: config 0 has no interface number 0
[  192.281617][ T4762] usb 1-1: config 0 interface 39 has no altsetting 0
[  192.292064][ T4398] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  192.307960][ T4398] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  192.317345][ T4398] usb 6-1: config 0 interface 0 has no altsetting 0
[  192.382058][ T4647] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55
[  192.391673][ T4647] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.405468][ T4398] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  192.417301][ T4647] usb 3-1: Product: syz
[  192.421474][ T4647] usb 3-1: Manufacturer: syz
[  192.428799][ T4398] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  192.443192][ T4647] usb 3-1: SerialNumber: syz
[  192.448805][ T4398] usb 6-1: config 0 interface 0 has no altsetting 0
[  192.457504][ T4647] usb 3-1: config 0 descriptor??
[  192.473287][ T4762] usb 1-1: New USB device found, idVendor=7a5e, idProduct=1034, bcdDevice=8d.b0
[  192.485846][ T4762] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.494998][ T4762] usb 1-1: Product: syz
[  192.499270][ T4762] usb 1-1: Manufacturer: syz
[  192.513043][ T4762] usb 1-1: SerialNumber: syz
[  192.520984][ T4762] usb 1-1: config 0 descriptor??
[  192.542058][ T4398] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  192.565598][ T4398] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  192.582842][ T4398] usb 6-1: config 0 interface 0 has no altsetting 0
[  192.592439][ T4647] usb 3-1: USB disconnect, device number 5
[  192.777039][ T4398] usb 6-1: unable to read config index 4 descriptor/start: -71
[  192.785933][ T4398] usb 6-1: can't read configurations, error -71
[  192.888217][ T4762] cdc_eem: probe of 1-1:0.39 failed with error -22
[  193.501003][ T5540] netlink: 60 bytes leftover after parsing attributes in process `syz.4.264'.
[  194.059883][ T4762] usb 1-1: USB disconnect, device number 5
[  194.327730][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  194.335961][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  194.664946][ T5552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.265'.
[  194.723457][ T5555] loop2: detected capacity change from 0 to 128
[  194.746626][ T5558] syz.0.269 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  194.791202][ T5547] lo speed is unknown, defaulting to 1000
[  195.698642][ T5561] attempt to access beyond end of device
[  195.698642][ T5561] loop2: rw=2049, want=825, limit=128
[  196.001581][ T5553] attempt to access beyond end of device
[  196.001581][ T5553] loop2: rw=524288, want=369, limit=128
[  196.061650][ T5555] attempt to access beyond end of device
[  196.061650][ T5555] loop2: rw=0, want=153, limit=128
[  196.079419][ T5555] attempt to access beyond end of device
[  196.079419][ T5555] loop2: rw=0, want=153, limit=128
[  196.091292][ T5555] attempt to access beyond end of device
[  196.091292][ T5555] loop2: rw=0, want=153, limit=128
[  196.102898][ T5555] attempt to access beyond end of device
[  196.102898][ T5555] loop2: rw=0, want=153, limit=128
[  196.382000][ T4646] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  196.606739][ T5575] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  196.752097][ T4646] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  196.781209][ T4646] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  196.816680][ T4646] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  196.826870][ T4646] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.893903][ T5567] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  198.174289][ T5600] netlink: 60 bytes leftover after parsing attributes in process `syz.1.278'.
[  200.459097][  T146] Bluetooth: hci2: unexpected event for opcode 0x2062
[  201.097323][ T4245] usb 6-1: USB disconnect, device number 5
[  201.139783][ T5612] block device autoloading is deprecated. It will be removed in Linux 5.19
[  201.872098][ T4762] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  202.932037][ T4762] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  203.096364][ T4762] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  203.964001][ T5663] xt_CT: You must specify a L4 protocol and not use inversions on it
[  204.485379][ T4245] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  204.505072][ T4245] Bluetooth: hci2: Injecting HCI hardware error event
[  204.531834][ T4762] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.538727][  T146] Bluetooth: hci2: hardware error 0x00
[  204.593017][ T5674] netlink: 44 bytes leftover after parsing attributes in process `syz.4.295'.
[  205.091680][ T4762] usb 3-1: config 0 descriptor??
[  205.122055][ T4762] usb 3-1: can't set config #0, error -71
[  205.131431][ T4762] usb 3-1: USB disconnect, device number 6
[  205.235171][ T5679] 9pnet: Unknown protocol version 9p200
[  205.307682][ T5679] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  205.406007][ T5679] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  205.498789][ T5679] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  206.331236][ T5679] device bridge_slave_0 left promiscuous mode
[  206.426777][ T5679] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.814428][ T5679] device bridge_slave_1 left promiscuous mode
[  207.242180][ T5679] bridge0: port 2(bridge_slave_1) entered disabled state
[  207.335645][ T5679] bond0: (slave bond_slave_0): Releasing backup interface
[  207.356261][ T5679] bond0: (slave bond_slave_1): Releasing backup interface
[  207.423688][ T5704] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns
[  207.443005][ T5704] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  207.887637][ T5679] team0: Port device team_slave_0 removed
[  207.979425][ T5679] team0: Port device team_slave_1 removed
[  208.014424][ T5679] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  208.022423][ T5679] batman_adv: batadv0: Removing interface: batadv_slave_0
[  208.072568][ T5679] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  208.092334][ T5679] batman_adv: batadv0: Removing interface: batadv_slave_1
[  208.863128][ T5679] syz.5.298 (5679) used greatest stack depth: 18744 bytes left
[  209.271977][ T4584] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  209.684770][ T4584] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  209.701849][ T4584] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping
[  209.922038][ T5723] netlink: 44 bytes leftover after parsing attributes in process `syz.2.308'.
[  209.973919][ T4584] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  210.042848][ T4584] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.344541][ T5748] loop5: detected capacity change from 0 to 128
[  210.371965][ T4584] usb 5-1: Product: syz
[  210.382674][ T4584] usb 5-1: Manufacturer: syz
[  210.401853][ T4584] usb 5-1: SerialNumber: syz
[  210.432977][ T4584] usb 5-1: config 0 descriptor??
[  210.518522][ T5726] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  210.615061][ T5726] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  210.702690][ T4584] usb 5-1: ucan: probing device on interface #0
[  210.723326][ T5753] attempt to access beyond end of device
[  210.723326][ T5753] loop5: rw=2049, want=753, limit=128
[  210.731942][ T4584] usb 5-1: ucan: invalid EP count (1)
[  210.739623][ T4584] usb 5-1: ucan: probe failed; try to update the device firmware
[  212.133343][ T5789] 9pnet: Unknown protocol version 9p200
[  212.147297][ T5789] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  212.171741][ T5789] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  212.195563][ T5789] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  212.217143][ T5789] device bridge_slave_0 left promiscuous mode
[  212.234692][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state
[  212.262272][ T5789] device bridge_slave_1 left promiscuous mode
[  212.299479][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state
[  212.424995][ T4646] usb 5-1: USB disconnect, device number 2
[  212.461134][ T5801] tmpfs: Unknown parameter 'usrquota'
[  212.522031][ T5789] bond0: (slave bond_slave_0): Releasing backup interface
[  212.739673][ T5789] bond0: (slave bond_slave_1): Releasing backup interface
[  213.278200][ T5789] team0: Port device team_slave_0 removed
[  213.313366][ T5789] team0: Port device team_slave_1 removed
[  213.320042][ T5789] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  213.328662][ T5789] batman_adv: batadv0: Removing interface: batadv_slave_0
[  213.349354][ T5789] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  213.382741][ T5789] batman_adv: batadv0: Removing interface: batadv_slave_1
[  213.607469][ T5791] team0: Mode changed to "loadbalance"
[  214.399302][ T5823] netlink: 44 bytes leftover after parsing attributes in process `syz.5.324'.
[  214.595950][ T5833] loop1: detected capacity change from 0 to 128
[  214.967941][ T5833] attempt to access beyond end of device
[  214.967941][ T5833] loop1: rw=2049, want=1041, limit=128
[  215.097070][ T5833] attempt to access beyond end of device
[  215.097070][ T5833] loop1: rw=524288, want=1041, limit=128
[  215.112137][ T5833] attempt to access beyond end of device
[  215.112137][ T5833] loop1: rw=0, want=1033, limit=128
[  215.335703][ T5833] attempt to access beyond end of device
[  215.335703][ T5833] loop1: rw=0, want=1033, limit=128
[  215.958005][ T5833] attempt to access beyond end of device
[  215.958005][ T5833] loop1: rw=0, want=1033, limit=128
[  216.361270][ T5864] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  216.610054][ T5871] netlink: 36 bytes leftover after parsing attributes in process `syz.5.335'.
[  217.988050][ T5884] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  218.543416][ T5898] loop1: detected capacity change from 0 to 128
[  219.086886][ T5905] attempt to access beyond end of device
[  219.086886][ T5905] loop1: rw=2049, want=473, limit=128
[  219.457387][ T5919] netlink: 36 bytes leftover after parsing attributes in process `syz.5.347'.
[  220.511980][ T4647] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  220.922327][ T4647] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  220.948606][ T4647] usb 5-1: config 2 has 0 interfaces, different from the descriptor's value: 1
[  221.163313][ T4647] usb 5-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d
[  221.210599][ T4647] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.248852][ T4647] usb 5-1: Product: syz
[  221.283829][ T4647] usb 5-1: Manufacturer: syz
[  221.306489][ T4647] usb 5-1: SerialNumber: syz
[  221.688776][ T4245] usb 5-1: USB disconnect, device number 3
[  221.712865][  T146] Bluetooth: hci5: link tx timeout
[  221.718951][  T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  221.735889][  T146] Bluetooth: hci5: link tx timeout
[  221.741115][  T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  221.751414][  T146] Bluetooth: hci5: link tx timeout
[  221.757291][  T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  221.765971][  T146] Bluetooth: hci5: link tx timeout
[  221.771152][  T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  221.808203][  T146] Bluetooth: hci5: link tx timeout
[  221.816507][  T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  221.824415][  T146] Bluetooth: hci5: link tx timeout
[  221.829727][  T146] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  222.118196][ T5985] netlink: 36 bytes leftover after parsing attributes in process `syz.1.361'.
[  222.912238][ T5987] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem
[  224.025361][ T4492] Bluetooth: hci5: command 0x0406 tx timeout
[  224.638013][ T6031] netlink: 8 bytes leftover after parsing attributes in process `syz.4.374'.
[  224.967573][ T6035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.375'.
[  227.551338][ T6062] loop1: detected capacity change from 0 to 128
[  227.691439][ T6065] attempt to access beyond end of device
[  227.691439][ T6065] loop1: rw=2049, want=529, limit=128
[  227.741899][ T4340] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  227.780078][ T6061] attempt to access beyond end of device
[  227.780078][ T6061] loop1: rw=524288, want=369, limit=128
[  227.993304][ T4340] usb 5-1: Using ep0 maxpacket: 8
[  228.123202][ T4340] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  228.129373][ T6066] lo speed is unknown, defaulting to 1000
[  228.152096][ T4340] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  228.175971][ T4340] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  228.196410][ T4340] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.378664][ T4340] usb 5-1: config 0 descriptor??
[  229.320816][ T4646] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  229.330409][ T4646] Bluetooth: hci1: Injecting HCI hardware error event
[  229.340629][ T4182] Bluetooth: hci1: hardware error 0x00
[  230.338598][ T6085] delete_channel: no stack
[  230.471353][ T4762] usb 5-1: USB disconnect, device number 4
[  231.059977][ T4340] Bluetooth: hci4: command 0x0409 tx timeout
[  232.132747][ T6104] netlink: 36 bytes leftover after parsing attributes in process `syz.2.395'.
[  233.505043][ T6116] loop2: detected capacity change from 0 to 128
[  234.595066][ T6122] attempt to access beyond end of device
[  234.595066][ T6122] loop2: rw=2049, want=561, limit=128
[  234.891466][ T6123] lo speed is unknown, defaulting to 1000
[  236.684484][ T6145] netlink: 36 bytes leftover after parsing attributes in process `syz.2.406'.
[  237.681199][ T6157] loop4: detected capacity change from 0 to 128
[  237.862024][ T4762] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  238.251883][ T4762] usb 3-1: Using ep0 maxpacket: 8
[  238.382184][ T4762] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  238.410234][ T4762] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  238.495303][ T6167] attempt to access beyond end of device
[  238.495303][ T6167] loop4: rw=2049, want=449, limit=128
[  238.510308][ T4762] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  238.541022][ T4762] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  238.601701][ T4762] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  238.621970][ T4762] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  238.622010][ T4762] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.768064][ T6168] lo speed is unknown, defaulting to 1000
[  238.882206][ T4762] usb 3-1: usb_control_msg returned -32
[  238.887850][ T4762] usbtmc 3-1:16.0: can't read capabilities
[  240.714137][ T6184] lo speed is unknown, defaulting to 1000
[  240.976032][ T4245] usb 3-1: USB disconnect, device number 7
[  241.687627][ T4401] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.768885][ T4401] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.093088][ T6196] netlink: 28 bytes leftover after parsing attributes in process `syz.5.421'.
[  242.418175][ T4401] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.601022][ T4401] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.065216][ T6212] loop2: detected capacity change from 0 to 128
[  244.107066][ T6209] lo speed is unknown, defaulting to 1000
[  244.244780][ T6218] attempt to access beyond end of device
[  244.244780][ T6218] loop2: rw=2049, want=513, limit=128
[  244.253688][ T6194] loop1: detected capacity change from 0 to 32768
[  244.440442][   T26] kauditd_printk_skb: 8 callbacks suppressed
[  244.440460][   T26] audit: type=1800 audit(1744744395.319:28): pid=6194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.419" name="file1" dev="loop1" ino=4 res=0 errno=0
[  244.502625][ T6194] find_entry called with index = 0
[  244.540605][ T6194] read_mapping_page failed!
[  244.580786][ T6194] ERROR: (device loop1): txCommit: 
[  244.580786][ T6194] 
[  247.932417][ T6258] netlink: 28 bytes leftover after parsing attributes in process `syz.1.434'.
[  248.205662][ T6266] QAT: failed to copy from user cfg_data.
[  252.399103][   T13] Bluetooth: hci3: command 0x0409 tx timeout
[  252.473598][ T6270] lo speed is unknown, defaulting to 1000
[  252.710136][ T6285] loop1: detected capacity change from 0 to 128
[  253.159844][ T6299] attempt to access beyond end of device
[  253.159844][ T6299] loop1: rw=2049, want=193, limit=128
[  254.005588][ T6283] attempt to access beyond end of device
[  254.005588][ T6283] loop1: rw=524288, want=193, limit=128
[  254.230946][ T6310] netlink: 28 bytes leftover after parsing attributes in process `syz.4.446'.
[  254.522128][ T4489] Bluetooth: hci3: command 0x041b tx timeout
[  255.777144][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  255.783692][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  256.113485][ T4401] device hsr_slave_0 left promiscuous mode
[  256.347280][ T4401] device hsr_slave_1 left promiscuous mode
[  257.295152][ T6330] netlink: 12 bytes leftover after parsing attributes in process `syz.4.452'.
[  258.699202][ T4401] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  258.742486][ T4401] batman_adv: batadv0: Removing interface: batadv_slave_0
[  259.230967][ T4401] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  259.275209][ T4401] batman_adv: batadv0: Removing interface: batadv_slave_1
[  260.258349][ T4401] device bridge_slave_1 left promiscuous mode
[  260.271091][ T4401] bridge0: port 2(bridge_slave_1) entered disabled state
[  260.334489][ T4401] device bridge_slave_0 left promiscuous mode
[  260.348269][ T4401] bridge0: port 1(bridge_slave_0) entered disabled state
[  260.599154][ T4401] device veth1_macvtap left promiscuous mode
[  261.282308][ T4401] device veth0_macvtap left promiscuous mode
[  261.288635][ T4401] device veth1_vlan left promiscuous mode
[  261.301900][ T4401] device veth0_vlan left promiscuous mode
[  263.435374][ T4340] Bluetooth: hci3: command 0x0409 tx timeout
[  263.571074][ T4401] team0 (unregistering): Port device team_slave_1 removed
[  263.589333][ T4401] team0 (unregistering): Port device team_slave_0 removed
[  263.604880][ T4401] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  263.621620][ T4401] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  263.740693][ T4401] bond0 (unregistering): Released all slaves
[  264.610244][ T4245] lo speed is unknown, defaulting to 1000
[  264.616513][ T6399] netlink: 160 bytes leftover after parsing attributes in process `syz.1.467'.
[  265.555884][ T6406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  266.324548][ T4646] Bluetooth: hci3: command 0x041b tx timeout
[  270.957188][ T6472] device bond1 entered promiscuous mode
[  271.094309][ T6472] 8021q: adding VLAN 0 to HW filter on device bond1
[  275.407059][ T4646] Bluetooth: hci3: command 0x0409 tx timeout
[  285.612079][ T6642] netlink: 16 bytes leftover after parsing attributes in process `syz.1.509'.
[  295.905723][ T6765] netlink: 8 bytes leftover after parsing attributes in process `syz.4.533'.
[  295.915384][ T6765] netlink: 16 bytes leftover after parsing attributes in process `syz.4.533'.
[  296.741868][ T6770] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  296.767578][ T6768] overlayfs: unrecognized mount option "smackfstransmute=GPL" or missing value
[  302.749383][   T26] audit: type=1400 audit(1744744453.629:29): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=6842 comm="syz.5.552"
[  309.967576][ T6917] tmpfs: Unknown parameter 'usrquota'
[  317.193998][ T7020] overlayfs: unrecognized mount option "smackfstransmute=GPL" or missing value
[  317.205311][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  317.211693][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  319.545688][ T7048] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem
[  322.615769][    T7] Bluetooth: hci3: command 0x0409 tx timeout
[  325.192764][    T7] Bluetooth: hci3: command 0x041b tx timeout
[  325.659664][ T7083] infiniband s: RDMA CMA: cma_listen_on_dev, error -98
[  328.485178][ T7104] netlink: 16 bytes leftover after parsing attributes in process `syz.5.594'.
[  335.284337][ T7144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.604'.
[  337.580947][ T7160] overlayfs: unrecognized mount option "smackfstransmute=GPL" or missing value
[  338.881863][ T4647] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  339.152355][ T4647] usb 6-1: Using ep0 maxpacket: 8
[  339.372177][ T4647] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  339.390218][ T4647] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  339.417659][ T4647] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  339.446691][ T4647] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  339.510467][ T4647] usb 6-1: config 0 descriptor??
[  340.088902][ T4646] usb 6-1: USB disconnect, device number 6
[  341.881455][ T7170] delete_channel: no stack
[  342.469563][ T7206] netlink: 16 bytes leftover after parsing attributes in process `syz.1.621'.
[  343.963625][    T7] Bluetooth: hci3: command 0x0409 tx timeout
[  345.297508][ T4342] Bluetooth: hci5: command 0x0406 tx timeout
[  355.658618][ T7278] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns
[  356.123348][ T7278] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  356.517197][ T7284] device vlan0 entered promiscuous mode
[  359.703444][ T7306] netlink: 8 bytes leftover after parsing attributes in process `syz.5.648'.
[  362.383032][ T7330] vivid-000: disconnect
[  362.388569][ T7330] vivid-000: reconnect
[  362.943132][ T7347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.659'.
[  363.119902][ T7339] device veth0_vlan left promiscuous mode
[  363.126765][ T7339] device veth0_vlan entered promiscuous mode
[  363.421335][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  363.449996][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  363.502880][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 25: Inappropriate ioctl for device)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 25: Inappropriate ioctl for device)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 25: Inappropriate ioctl for device)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 25: Inappropriate ioctl for device)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 25: Inappropriate ioctl for device)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 25: Inappropriate ioctl for device)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 25: Inappropriate ioctl for device)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 25: Inappropriate ioctl for device)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 25: Inappropriate ioctl for device)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 25: Inappropriate ioctl for device)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 25: Inappropriate ioctl for device)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 25: Inappropriate ioctl for device)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 25: Inappropriate ioctl for device)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 25: Inappropriate ioctl for device)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 25: Inappropriate ioctl for device)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 25: Inappropriate ioctl for device)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 25: Inappropriate ioctl for device)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 25: Inappropriate ioctl for device)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 25: Inappropriate ioctl for device)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 25: Inappropriate ioctl for device)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 25: Inappropriate ioctl for device)
loop exited with status 67
SYZFAIL: repeatedly failed to execute the program
proc=6 req=380 state=3 status=67 (errno 9: Bad file descriptor)
[  365.812250][ T4949] syz-executor (4949) used greatest stack depth: 18488 bytes left
[  367.342687][  T154] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  367.429101][  T154] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  367.497940][  T154] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  367.539367][  T154] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  367.647764][  T154] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  367.707770][  T154] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  367.767215][  T154] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  367.819536][  T154] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  367.985928][  T154] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  368.028724][  T154] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  368.085872][  T154] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  368.138853][  T154] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  369.642870][  T154] device hsr_slave_0 left promiscuous mode
[  369.649224][  T154] device hsr_slave_1 left promiscuous mode
[  369.660410][  T154] device hsr_slave_0 left promiscuous mode
[  369.667260][  T154] device hsr_slave_1 left promiscuous mode
[  369.679669][  T154] device hsr_slave_0 left promiscuous mode
[  369.686563][  T154] device hsr_slave_1 left promiscuous mode
[  369.693134][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  369.700559][  T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  369.708424][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  369.716200][  T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  369.724198][  T154] device bridge_slave_1 left promiscuous mode
[  369.730521][  T154] bridge0: port 2(bridge_slave_1) entered disabled state
[  369.740777][  T154] device bridge_slave_0 left promiscuous mode
[  369.747267][  T154] bridge0: port 1(bridge_slave_0) entered disabled state
[  369.763535][  T154] device veth1_macvtap left promiscuous mode
[  369.769600][  T154] device veth0_macvtap left promiscuous mode
[  369.775853][  T154] device veth1_vlan left promiscuous mode
[  369.781967][  T154] device veth0_vlan left promiscuous mode
[  369.788673][  T154] device veth1_macvtap left promiscuous mode
[  369.795485][  T154] device veth0_macvtap left promiscuous mode
[  369.801526][  T154] device veth1_vlan left promiscuous mode
[  369.808079][  T154] device veth0_vlan left promiscuous mode
[  369.817681][  T154] device veth1_macvtap left promiscuous mode
[  369.824091][  T154] device veth0_macvtap left promiscuous mode
[  369.830203][  T154] device veth1_vlan left promiscuous mode
[  369.836076][  T154] device veth0_vlan left promiscuous mode
[  370.064964][  T154] bond1 (unregistering): Released all slaves
[  370.233153][  T154] bond0 (unregistering): Released all slaves
[  370.427729][  T154] bond0 (unregistering): Released all slaves
[  370.538595][  T154] team0 (unregistering): Port device team_slave_1 removed
[  370.556870][  T154] team0 (unregistering): Port device team_slave_0 removed
[  370.573420][  T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  370.587912][  T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  370.656544][  T154] bond0 (unregistering): Released all slaves