last executing test programs:

13.525189734s ago: executing program 4 (id=22):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}}, 0x20004000)

12.813523352s ago: executing program 4 (id=23):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000000040)={[{@nodatacow}, {@flushoncommit}]}, 0x11, 0x5109, &(0x7f000000f400)="$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")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x2000)
fallocate(r0, 0x10, 0x0, 0x1001f0)
r1 = open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x0)
pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000001500)='i', 0x1}], 0x1, 0x1400, 0x0, 0x0)

11.173395116s ago: executing program 0 (id=26):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x4d0d8)
openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time_for_children\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
symlink(&(0x7f0000000000)='.\x00', 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x13b)
r3 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)})
ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)})

10.285213404s ago: executing program 3 (id=27):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd0000000000000109022400018000000009040000010300000009210500000122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x1, 0x9, 0x5, &(0x7f00000002c0)={0xb, "79b814212311e47d6dd9e9036def4870ae7ef9335b6e140c0afd2077a025a5e98e"}})

10.170597164s ago: executing program 0 (id=29):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000407d1e9c3100000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000800)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0x7, "ca8417b8"}, @global=@item_012={0x1, 0x1, 0x1, 'G'}]}}, 0x0}, 0x0)

10.033363756s ago: executing program 1 (id=30):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0xf, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getrlimit(0xc, &(0x7f0000000300))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, r1)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x26c, r5, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x220, 0x8, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x1a4, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x15c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x26c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000200)='bridge0\x00')
r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0)
writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)

9.670784427s ago: executing program 4 (id=31):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r4=>0x0})
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4, 0x0, {0x2, 0x0, 0x4}, 0x2}, 0x18)
sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee)

7.49718442s ago: executing program 4 (id=32):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, 0x0, &(0x7f0000000100))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x106f)
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r4, &(0x7f0000000280)={0xffffffffffffffff, r0, 0xfffffb6e})
socket$rds(0x15, 0x5, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)=@newchain={0x38, 0x64, 0x800, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x3, 0x1ffe4}, {0xfff3, 0xffff}, {0xf, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x1}}, @filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x980)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'})

7.405702445s ago: executing program 0 (id=33):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getpid()
timer_create(0x1, 0x0, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0600000004000000990500000a"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x404, r3, 0x0, 0x1ba8847c99}, 0x38)

7.405145155s ago: executing program 3 (id=34):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000001640)=""/139, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x106f)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r7, 0x80000300, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r6, &(0x7f0000000280)={r7, r0, 0xfffffb6e})
r8 = socket$rds(0x15, 0x5, 0x0)
socket(0x400000000010, 0x3, 0x0)
bind$rds(r8, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r8, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

6.458460153s ago: executing program 3 (id=35):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400000103000000092105000001220500090581030002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x3, &(0x7f0000000040)="a222f6")

6.082115696s ago: executing program 0 (id=36):
ioctl$SOUND_MIXER_READ_CAPS(0xffffffffffffffff, 0x80044dfc, &(0x7f00000000c0))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r3, 0x0, 0x8, 0x0, 0x0)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, 0x0, 0x0)
mkdir(&(0x7f0000000380)='./file1\x00', 0xa)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x400000, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0)
r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r6=>r5}, './file1\x00'})
r7 = gettid()
syz_io_uring_setup(0x9a, &(0x7f0000000480)={0x0, 0x5c46, 0x100, 0x7ffd, 0x1e3}, &(0x7f00000000c0), &(0x7f0000000280), &(0x7f0000000000))
syz_clone3(&(0x7f00000006c0)={0x2000, &(0x7f0000000280), &(0x7f0000000300), &(0x7f0000000340), {0x2}, &(0x7f0000000500)=""/240, 0xf0, &(0x7f0000000600)=""/129, &(0x7f00000003c0)=[r0, r0, r0, r0, r7, r0], 0x6}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r6, {0x223}}, './file1\x00'})
r8 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
ioctl$FE_SET_PROPERTY(r8, 0x40106f52, 0x0)

5.197285644s ago: executing program 0 (id=37):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$HIDIOCGUSAGE(r1, 0xc0145b0e, 0x0)

4.775339344s ago: executing program 4 (id=38):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10)
r1 = fcntl$dupfd(r0, 0x406, r0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r1, &(0x7f0000000f80)=ANY=[], 0x540)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1)
shutdown(r0, 0x1)

4.767937635s ago: executing program 1 (id=39):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x4d0d8)
openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time_for_children\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
symlink(&(0x7f0000000000)='.\x00', 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x13b)
r3 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)})
ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)})

3.738134927s ago: executing program 1 (id=40):
socket$inet6(0xa, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x4, &(0x7f0000000080)={[{@usrjquota_path={'usrjquota', 0x3d, './file1'}}, {@noauto_da_alloc}, {}]}, 0x1, 0x781, &(0x7f0000000800)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001e80)=@newtaction={0x18, 0x32, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8800}, 0x0)

2.478529327s ago: executing program 1 (id=41):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0x4000000, 0xf0, 0xffffffff, 0x0, 0x310, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0xc8}, 0x1, 0x0, 0x0, 0x4048040}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82)
r6 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88102)
mq_notify(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x1f, 0x0, @thr={&(0x7f0000000300)="c6d71be4eddd6021f9d814384c83a788d9e4ac652a5a6260", 0x0}})
r7 = semget$private(0x0, 0x2, 0x10)
semctl$SETVAL(r7, 0x1, 0x8, 0x0)
semctl$SETALL(r7, 0x0, 0x9, &(0x7f0000000200)=[0x1c, 0x7, 0x9b])
r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r8)
ptrace$setregset(0x4205, r8, 0x202, &(0x7f00000001c0)={0x0})
ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000001280)={r5, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)

2.477545347s ago: executing program 3 (id=42):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r4=>0x0})
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4, 0x0, {0x2, 0x0, 0x4}, 0x2}, 0x18)
sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee)

1.437155321s ago: executing program 0 (id=43):
syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fe857108480b0730644f010203010902120001000000000904"], 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680))
r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
pwrite64(r0, 0x0, 0x0, 0x2ec)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r1, 0x8955, 0x0)
mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
socket$nl_generic(0x10, 0x3, 0x10)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, 0x0, 0x1)
shmget(0x2, 0x1000, 0x4, &(0x7f0000ffd000/0x1000)=nil)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x44060)

1.146765149s ago: executing program 1 (id=44):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000001640)=""/139, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x106f)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r7, 0x80000300, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r6, &(0x7f0000000280)={r7, r0, 0xfffffb6e})
r8 = socket$rds(0x15, 0x5, 0x0)
socket(0x400000000010, 0x3, 0x0)
bind$rds(r8, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r8, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1.129917332s ago: executing program 4 (id=45):
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0x2000400, &(0x7f0000000800)=ANY=[@ANYBLOB='nostrict,iocharset=cp1255,utf8,gid=ignore,longad,iocharset=cp852,volume=00000000000000000243,dmode=00000000000000000000004,iocharsSt=macinuit,uid=forget,undelete,uid=forget,uid=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x5, 0xc80, &(0x7f0000000f40)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
socket$netlink(0x10, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)

150.740765ms ago: executing program 3 (id=46):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f00000026c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="7337558fbfc4e73174c203cf10c9ec355c0baaa75c9c05ce65ddf45c", 0x1c}, {&(0x7f00000002c0)="1347aea805495167071bc3405deb3ba59027d9a6ba82c1887ab8140b299e6c95fc1c8a93f88256ef7d8eb37153a42183903e8fe933bd6e34f27de14293cba473b38cf96d8a10571eefad5618e4d6f518700e", 0x52}], 0x2, &(0x7f0000000a80)=ANY=[@ANYBLOB="5c000000000000000000000007000000071f12ffffffffe0000002ac1414aaffffffff64010101000000000a01010100442c4063000000000000000b0000000000000009ac1414bb000007ffe00000020000000864010101000000090000000038000000000000000000000007000000014424c601ac1414bb00000000e0000001000000007f00000100000000ac1e0001000000090000001c"], 0xb8}}, {{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000001380)="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", 0x588}], 0x1}}], 0x2, 0x2090)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

2.65862ms ago: executing program 3 (id=47):
ioctl$SOUND_MIXER_READ_CAPS(0xffffffffffffffff, 0x80044dfc, &(0x7f00000000c0))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r3, 0x0, 0x8, 0x0, 0x0)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, 0x0, 0x0)
mkdir(&(0x7f0000000380)='./file1\x00', 0xa)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x400000, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0)
r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r6=>r5}, './file1\x00'})
r7 = gettid()
syz_io_uring_setup(0x9a, &(0x7f0000000480)={0x0, 0x5c46, 0x100, 0x7ffd, 0x1e3}, &(0x7f00000000c0), &(0x7f0000000280), &(0x7f0000000000))
syz_clone3(&(0x7f00000006c0)={0x2000, &(0x7f0000000280), &(0x7f0000000300), &(0x7f0000000340), {0x2}, &(0x7f0000000500)=""/240, 0xf0, &(0x7f0000000600)=""/129, &(0x7f00000003c0)=[r0, r0, r0, r0, r7, r0], 0x6}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r6, {0x223}}, './file1\x00'})
r8 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
ioctl$FE_SET_PROPERTY(r8, 0x40106f52, 0x0)

0s ago: executing program 1 (id=56):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000001640)=""/139, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x106f)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r7, 0x80000300, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r6, &(0x7f0000000280)={r7, r0, 0xfffffb6e})
r8 = socket$rds(0x15, 0x5, 0x0)
socket(0x400000000010, 0x3, 0x0)
bind$rds(r8, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r8, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.39' (ED25519) to the list of known hosts.
[   57.655165][ T4171] cgroup: Unknown subsys name 'net'
[   57.760047][ T4171] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.204493][ T4171] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   61.039998][ T4184] chnl_net:caif_netlink_parms(): no params data found
[   61.078093][ T4191] chnl_net:caif_netlink_parms(): no params data found
[   61.150228][ T4183] chnl_net:caif_netlink_parms(): no params data found
[   61.192928][ T4185] chnl_net:caif_netlink_parms(): no params data found
[   61.258030][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.266979][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.275484][ T4184] device bridge_slave_0 entered promiscuous mode
[   61.284269][ T4188] chnl_net:caif_netlink_parms(): no params data found
[   61.311286][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.318398][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.326495][ T4184] device bridge_slave_1 entered promiscuous mode
[   61.352074][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.359291][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.367806][ T4191] device bridge_slave_0 entered promiscuous mode
[   61.388693][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.396088][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.404533][ T4183] device bridge_slave_0 entered promiscuous mode
[   61.421580][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.428679][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.437070][ T4191] device bridge_slave_1 entered promiscuous mode
[   61.449758][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.458910][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.467207][ T4183] device bridge_slave_1 entered promiscuous mode
[   61.476137][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.510201][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.553549][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.561266][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.569602][ T4185] device bridge_slave_0 entered promiscuous mode
[   61.578613][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.590104][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.607972][ T4184] team0: Port device team_slave_0 added
[   61.614174][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.621686][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.629892][ T4185] device bridge_slave_1 entered promiscuous mode
[   61.638486][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.649434][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.666057][ T4184] team0: Port device team_slave_1 added
[   61.689569][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.696787][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.704918][ T4188] device bridge_slave_0 entered promiscuous mode
[   61.735845][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.743142][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.751453][ T4188] device bridge_slave_1 entered promiscuous mode
[   61.767454][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.779677][ T4191] team0: Port device team_slave_0 added
[   61.787996][ T4191] team0: Port device team_slave_1 added
[   61.795802][ T4183] team0: Port device team_slave_0 added
[   61.808368][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.815607][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.841746][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.855468][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.871375][ T4183] team0: Port device team_slave_1 added
[   61.890372][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.897544][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.923525][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.951825][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.958887][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.985361][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.998233][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.017515][ T4185] team0: Port device team_slave_0 added
[   62.030586][ T4185] team0: Port device team_slave_1 added
[   62.037318][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.044717][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.070891][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.083783][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.093856][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.101281][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.128062][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.146402][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.153601][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.179577][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.229370][ T4188] team0: Port device team_slave_0 added
[   62.253645][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.261031][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.287566][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.300387][ T4188] team0: Port device team_slave_1 added
[   62.326593][ T4191] device hsr_slave_0 entered promiscuous mode
[   62.333455][ T4191] device hsr_slave_1 entered promiscuous mode
[   62.344913][ T4184] device hsr_slave_0 entered promiscuous mode
[   62.351755][ T4184] device hsr_slave_1 entered promiscuous mode
[   62.358199][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.366162][ T4184] Cannot create hsr debugfs directory
[   62.380529][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.387792][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.414228][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.453319][ T4183] device hsr_slave_0 entered promiscuous mode
[   62.460106][ T4183] device hsr_slave_1 entered promiscuous mode
[   62.466968][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.474744][ T4183] Cannot create hsr debugfs directory
[   62.491390][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.498362][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.524468][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.575016][ T4185] device hsr_slave_0 entered promiscuous mode
[   62.581853][ T4185] device hsr_slave_1 entered promiscuous mode
[   62.588338][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.596136][ T4185] Cannot create hsr debugfs directory
[   62.602073][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.609047][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.635053][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.751268][ T4188] device hsr_slave_0 entered promiscuous mode
[   62.758023][ T4188] device hsr_slave_1 entered promiscuous mode
[   62.764134][    T7] Bluetooth: hci3: command 0x0409 tx timeout
[   62.770471][ T4190] Bluetooth: hci0: command 0x0409 tx timeout
[   62.777241][ T4190] Bluetooth: hci2: command 0x0409 tx timeout
[   62.783887][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.792147][ T4188] Cannot create hsr debugfs directory
[   62.840893][    T7] Bluetooth: hci4: command 0x0409 tx timeout
[   62.846965][    T7] Bluetooth: hci1: command 0x0409 tx timeout
[   63.005512][ T4183] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   63.032251][ T4183] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   63.042453][ T4183] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   63.051485][ T4183] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   63.118186][ T4184] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   63.128658][ T4184] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   63.143689][ T4184] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   63.153665][ T4184] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   63.185241][ T4191] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   63.194959][ T4191] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   63.216001][ T4191] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   63.228281][ T4191] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   63.275970][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.289924][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   63.306259][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   63.319176][ T4183] 8021q: adding VLAN 0 to HW filter on device team0
[   63.339627][ T4185] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   63.348475][ T4185] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   63.362592][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   63.372394][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   63.381753][ T1275] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.388953][ T1275] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.399168][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   63.410176][ T4185] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   63.422317][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   63.435275][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   63.444030][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.451143][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.486296][ T4185] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   63.506408][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   63.515647][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   63.535804][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   63.548144][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   63.557812][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   63.566567][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   63.577018][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   63.593958][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   63.603913][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   63.616302][ T4188] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   63.627039][ T4188] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   63.637393][ T4188] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   63.650135][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   63.660280][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   63.677043][ T4188] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   63.692946][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.710396][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   63.757736][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.771918][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   63.779781][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   63.814286][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   63.826368][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   63.839694][ T4184] 8021q: adding VLAN 0 to HW filter on device team0
[   63.852055][ T4191] 8021q: adding VLAN 0 to HW filter on device team0
[   63.873655][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   63.887588][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   63.897277][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.904406][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.947808][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.957615][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   63.966843][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   63.976549][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   63.986274][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.993427][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.005139][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   64.014338][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   64.023294][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.030396][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.046531][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   64.057024][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   64.066479][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   64.075143][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.082295][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.090539][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   64.099951][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   64.109792][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   64.142401][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   64.152155][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   64.165228][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   64.174392][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   64.183469][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   64.193558][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   64.201521][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   64.209376][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   64.218978][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   64.230554][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   64.252425][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.266874][ T4185] 8021q: adding VLAN 0 to HW filter on device team0
[   64.275498][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   64.286830][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   64.297750][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   64.307694][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   64.318869][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.334957][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   64.351401][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   64.359447][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   64.369847][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   64.378932][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.386045][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.394809][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   64.404142][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   64.412881][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   64.423566][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   64.432319][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   64.440736][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   64.452915][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   64.466808][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   64.475782][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   64.484669][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.491781][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.506929][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   64.515030][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   64.529381][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   64.541454][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   64.583879][ T4188] 8021q: adding VLAN 0 to HW filter on device team0
[   64.594439][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   64.604561][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   64.622638][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   64.637806][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   64.651856][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   64.671900][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   64.681678][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   64.696008][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   64.704757][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   64.714365][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   64.723730][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   64.736984][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   64.746893][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   64.759575][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   64.769956][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   64.782368][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.789537][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.814164][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   64.832490][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   64.851292][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   64.859387][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   64.867483][ T4228] Bluetooth: hci2: command 0x041b tx timeout
[   64.879244][ T4228] Bluetooth: hci0: command 0x041b tx timeout
[   64.886443][ T4228] Bluetooth: hci3: command 0x041b tx timeout
[   64.897938][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   64.908841][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   64.922844][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   64.931765][ T4228] Bluetooth: hci1: command 0x041b tx timeout
[   64.938174][ T4228] Bluetooth: hci4: command 0x041b tx timeout
[   64.945191][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.952310][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.961294][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   64.975256][ T4183] device veth0_vlan entered promiscuous mode
[   64.997395][ T4183] device veth1_vlan entered promiscuous mode
[   65.015564][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   65.029400][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   65.043837][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   65.057961][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   65.068186][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   65.084991][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   65.120401][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   65.128808][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   65.136847][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   65.148379][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   65.156645][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   65.166235][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   65.175303][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   65.184449][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   65.193174][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   65.200570][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   65.208334][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   65.217117][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   65.239593][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   65.247757][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   65.261816][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.270467][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   65.288510][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.308043][ T4183] device veth0_macvtap entered promiscuous mode
[   65.318100][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   65.328631][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   65.342672][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   65.370981][ T4183] device veth1_macvtap entered promiscuous mode
[   65.409254][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   65.427013][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   65.441286][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   65.450204][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   65.479748][ T4184] device veth0_vlan entered promiscuous mode
[   65.490086][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   65.503040][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   65.512065][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   65.519524][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   65.541856][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.552123][ T4184] device veth1_vlan entered promiscuous mode
[   65.567715][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   65.576502][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   65.586057][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   65.594696][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   65.603839][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   65.616177][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.632977][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.640280][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   65.650040][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   65.666303][ T4191] device veth0_vlan entered promiscuous mode
[   65.689402][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.701772][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.710536][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.725304][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.736989][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   65.752180][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   65.760472][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   65.787037][ T4191] device veth1_vlan entered promiscuous mode
[   65.810100][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   65.818414][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   65.829659][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   65.838637][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   65.847817][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   65.857405][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   65.866331][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   65.879138][ T4184] device veth0_macvtap entered promiscuous mode
[   65.889845][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   65.898128][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   65.906293][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   65.935594][ T4184] device veth1_macvtap entered promiscuous mode
[   65.960345][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   65.970216][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   65.981307][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   65.990143][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   66.002544][ T4185] device veth0_vlan entered promiscuous mode
[   66.027728][ T4191] device veth0_macvtap entered promiscuous mode
[   66.038812][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   66.047411][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   66.056015][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   66.064729][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   66.076410][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   66.086299][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.097325][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.109399][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.131852][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.147042][ T4191] device veth1_macvtap entered promiscuous mode
[   66.157296][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   66.170144][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   66.179389][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   66.193022][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.204746][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.216221][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.227305][ T4185] device veth1_vlan entered promiscuous mode
[   66.237742][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.247460][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   66.265659][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   66.274240][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.294944][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   66.309384][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   66.321890][ T4184] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.331285][ T4184] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.340031][ T4184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.349723][ T4184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.373672][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   66.417226][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.433721][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.445090][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.456069][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.467997][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.504571][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   66.514882][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   66.528814][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   66.543457][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   66.554183][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.565458][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.576034][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.586857][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.598314][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.615471][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   66.627212][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   66.643931][ T4185] device veth0_macvtap entered promiscuous mode
[   66.652176][  T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.660024][  T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.668363][ T4191] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.679662][ T4191] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.693277][ T4191] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.702440][ T4191] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.719035][ T4185] device veth1_macvtap entered promiscuous mode
[   66.735374][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   66.752770][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   66.762155][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   66.828711][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   66.838356][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   66.859281][  T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.868084][  T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.922582][ T4231] Bluetooth: hci3: command 0x040f tx timeout
[   66.940408][ T4231] Bluetooth: hci0: command 0x040f tx timeout
[   66.954301][ T1275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.966903][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.971488][ T4231] Bluetooth: hci2: command 0x040f tx timeout
[   66.977750][ T4243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.990218][ T1275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.003046][ T4228] Bluetooth: hci4: command 0x040f tx timeout
[   67.010765][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.021229][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.021606][ T4228] Bluetooth: hci1: command 0x040f tx timeout
[   67.040565][ T4243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.048823][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.059000][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.069839][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.082876][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.097063][ T4188] device veth0_vlan entered promiscuous mode
[   67.104143][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   67.113932][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   67.122358][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   67.130607][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   67.139682][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   67.149306][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   67.159950][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   67.182148][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.196654][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.210203][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.221509][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.231856][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.242883][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.260250][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.276278][ T4188] device veth1_vlan entered promiscuous mode
[   67.306192][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   67.319937][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   67.338278][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   67.347925][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   67.356870][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   67.367969][ T4185] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.376883][ T4185] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.386283][ T4185] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.395846][ T4185] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.415417][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.478195][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.518888][ T4188] device veth0_macvtap entered promiscuous mode
[   67.529950][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   67.538433][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   67.548728][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   67.558824][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   67.582986][ T4188] device veth1_macvtap entered promiscuous mode
[   67.671191][ T4231] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   67.718005][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.732268][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.745207][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.757480][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.770221][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.787244][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.798217][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.816439][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.828634][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.897453][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   67.912606][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   67.935680][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   67.944766][ T4231] usb 1-1: Using ep0 maxpacket: 16
[   67.966578][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.987924][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.008210][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.029031][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.040026][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.058095][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.071343][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.087234][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.098575][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.103170][ T4231] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   68.128997][ T1275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.144979][ T1275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.162869][ T4231] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[   68.183097][ T4231] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   68.240397][ T4231] usb 1-1: config 0 descriptor??
[   68.257162][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   68.281936][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   68.308582][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   68.322684][ T4188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.338477][ T4188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.359291][ T4188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.369615][ T4188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.434398][ T4269] loop3: detected capacity change from 0 to 32768
[   68.595593][ T4269] ERROR: (device loop3): dbAllocBits: leaf page corrupt
[   68.595593][ T4269] 
[   68.624077][ T4269] ERROR: (device loop3): remounting filesystem as read-only
[   68.704244][ T4269] ERROR: (device loop3): dbAllocBits: leaf page corrupt
[   68.704244][ T4269] 
[   68.737799][ T4231] mcp2221 0003:04D8:00DD.0001: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0
[   68.750504][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.758760][ T4289] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.787475][ T4269] ERROR: (device loop3): dbAllocBits: leaf page corrupt
[   68.787475][ T4269] 
[   68.793350][ T4289] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.813680][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.831444][ T4269] attempt to access beyond end of device
[   68.831444][ T4269] loop3: rw=2051, want=4696064, limit=32768
[   68.859935][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   68.871837][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   68.896434][ T1275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.912591][ T4269] JFS: sb_issue_discard(ffff88802582c000, 585984, 1024, GFP_NOFS, 0) = -5 => failed!
[   68.940663][ T1275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.948225][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   68.996758][ T4269] blkno = 8f100, nblocks = 400
[   69.011333][ T4231] Bluetooth: hci2: command 0x0419 tx timeout
[   69.018227][ T4269] ERROR: (device loop3): dbFree: block to be freed is outside the map
[   69.018227][ T4269] 
[   69.019757][ T4231] Bluetooth: hci0: command 0x0419 tx timeout
[   69.091314][ T4231] Bluetooth: hci3: command 0x0419 tx timeout
[   69.132861][ T4269] attempt to access beyond end of device
[   69.132861][ T4269] loop3: rw=2051, want=4696064, limit=32768
[   69.146342][ T4288] Bluetooth: hci1: command 0x0419 tx timeout
[   69.160732][ T4288] Bluetooth: hci4: command 0x0419 tx timeout
[   69.178805][ T4269] JFS: sb_issue_discard(ffff88802582c000, 585984, 1024, GFP_NOFS, 0) = -5 => failed!
[   69.227710][ T4269] blkno = 8f100, nblocks = 400
[   69.239642][ T4288] usb 1-1: USB disconnect, device number 2
[   69.248898][ T4299] input: syz1 as /devices/virtual/input/input5
[   69.276731][ T4269] ERROR: (device loop3): dbFree: block to be freed is outside the map
[   69.276731][ T4269] 
[   69.340322][ T4269] attempt to access beyond end of device
[   69.340322][ T4269] loop3: rw=2051, want=4696064, limit=32768
[   69.361395][ T4303] loop4: detected capacity change from 0 to 256
[   69.407113][ T4269] JFS: sb_issue_discard(ffff88802582c000, 585984, 1024, GFP_NOFS, 0) = -5 => failed!
[   69.464840][ T4269] blkno = 8f100, nblocks = 400
[   69.499417][ T4269] ERROR: (device loop3): dbFree: block to be freed is outside the map
[   69.499417][ T4269] 
[   69.617844][ T4303] FAT-fs (loop4): Directory bread(block 64) failed
[   69.687324][ T4303] FAT-fs (loop4): Directory bread(block 65) failed
[   69.696565][ T4307] loop1: detected capacity change from 0 to 4096
[   69.739445][ T4307] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512)
[   69.763626][ T4303] FAT-fs (loop4): Directory bread(block 66) failed
[   69.825923][ T4303] FAT-fs (loop4): Directory bread(block 67) failed
[   69.919284][ T4303] FAT-fs (loop4): Directory bread(block 68) failed
[   69.965121][ T4303] FAT-fs (loop4): Directory bread(block 69) failed
[   70.013367][ T4303] FAT-fs (loop4): Directory bread(block 70) failed
[   70.053736][ T4303] FAT-fs (loop4): Directory bread(block 71) failed
[   70.097663][ T4303] FAT-fs (loop4): Directory bread(block 72) failed
[   70.150075][ T4303] FAT-fs (loop4): Directory bread(block 73) failed
[   71.001362][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!!
[   71.010321][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!!
[   71.019283][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!!
[   71.028231][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!!
[   71.037166][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!!
[   71.046072][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!!
[   71.054984][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!!
[   71.063906][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!!
[   71.072843][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!!
[   71.081763][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!!
[   71.990643][    C0] sched: RT throttling activated
[   71.999328][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[   72.013538][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[   73.897744][ T4327] loop1: detected capacity change from 0 to 131072
[   74.141157][ T4327] F2FS-fs (loop1): Found nat_bits in checkpoint
[   74.734529][ T4327] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   75.015101][   T26] audit: type=1804 audit(1775955980.537:2): pid=4327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.10" name="/newroot/2/file1/bus" dev="loop1" ino=10 res=1 errno=0
[   75.035698][    C1] vkms_vblank_simulate: vblank timer overrun
[   75.805711][   T26] audit: type=1804 audit(1775955981.327:3): pid=4327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.10" name="/newroot/2/file1/bus" dev="loop1" ino=10 res=1 errno=0
[   76.162148][ T4190] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   76.450865][ T4190] usb 5-1: Using ep0 maxpacket: 8
[   76.980846][ T4190] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64
[   76.990072][ T4190] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.015915][ T4361] loop3: detected capacity change from 0 to 2048
[   77.130323][ T4361] UDF-fs: bad mount option "iocharsSt=macinuit" or missing value
[   77.138793][ T4190] usb 5-1: Product: syz
[   77.167505][ T4190] usb 5-1: Manufacturer: syz
[   77.196901][ T4190] usb 5-1: SerialNumber: syz
[   77.342489][ T4190] usb 5-1: config 0 descriptor??
[   77.424156][ T4190] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state.
[   77.439310][ T4190] pctv452e: pctv452e_power_ctrl: 1
[   77.439310][ T4190] 
[   77.446991][ T4190] usb 5-1: selecting invalid altsetting 3
[   77.453393][ T4190] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22
[   77.453393][ T4190] 
[   77.464777][ T4190] dvb-usb: bulk message failed: -22 (5/0)
[   77.613379][ T4190] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   77.720923][ T4190] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600)
[   77.729969][ T4190] usb 5-1: media controller created
[   77.800781][ T4190] dvb-usb: bulk message failed: -22 (8/0)
[   77.817693][ T4190] pctv452e: I2C error -22; AA 01  A0 01 14 -> aa 01 31 04 a0 01 14
[   77.825948][ T4190] dvb-usb: MAC address reading failed.
[   77.847956][ T4349] dvb-usb: bulk message failed: -22 (7/0)
[   77.863182][ T4190] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   77.890956][ T4349] pctv452e: I2C error -22; AA 02  00 00 00 -> aa 02 31 03 00 00 00
[   78.541052][ T4349] udc-core: couldn't find an available UDC or it's busy
[   78.904019][ T4368] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4)
[   78.986467][ T4349] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   79.155992][ T4190] DVB: Unable to find symbol stb0899_attach()
[   79.163203][ T4190] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600'
[   79.181046][ T4377] loop0: detected capacity change from 0 to 2048
[   79.321654][ T4190] rc_core: IR keymap rc-tt-1500 not found
[   79.327467][ T4190] Registered IR keymap rc-empty
[   79.337253][ T4377] EXT4-fs (loop0): Journaled quota options ignored when QUOTA feature is enabled
[   79.361018][ T4190] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0
[   79.403308][ T4190] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input6
[   79.426184][ T4377] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrjquota=./file1,noauto_da_alloc,bsddf,,errors=continue. Quota mode: writeback.
[   79.466882][ T4377] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   79.505906][ T4190] dvb-usb: schedule remote query interval to 100 msecs.
[   79.676842][ T4190] pctv452e: pctv452e_power_ctrl: 0
[   79.676842][ T4190] 
[   79.684821][ T4190] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected.
[   79.739937][ T4190] usb 5-1: USB disconnect, device number 2
[   79.746074][ T4288] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   80.270928][ T4288] usb 4-1: Using ep0 maxpacket: 8
[   80.431010][ T4288] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[   80.445283][ T4288] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   80.517003][ T4190] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected.
[   80.526961][ T4288] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   80.560787][ T4233] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   80.575208][ T4288] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   80.605301][ T4288] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   80.622612][ T4288] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   80.637399][ T4288] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.959115][ T4288] usb 4-1: GET_CAPABILITIES returned 0
[   80.971634][ T4288] usbtmc 4-1:16.0: can't read capabilities
[   81.341694][ T4233] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[   81.341833][ T4233] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.341925][ T4233] usb 2-1: Product: syz
[   81.342125][ T4233] usb 2-1: Manufacturer: syz
[   81.342239][ T4233] usb 2-1: SerialNumber: syz
[   81.408961][ T4233] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[   81.938889][ T2856] usb 4-1: USB disconnect, device number 2
[   81.977517][ T4409] loop4: detected capacity change from 0 to 32768
[   82.049683][ T4409] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 scanned by syz.4.23 (4409)
[   82.256307][ T4409] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[   82.463359][ T4409] BTRFS info (device loop4): setting nodatacow, compression disabled
[   82.658073][ T4409] BTRFS info (device loop4): turning on flush-on-commit
[   82.823048][ T4409] BTRFS info (device loop4): using free space tree
[   82.902059][ T4270] usb 2-1: USB disconnect, device number 2
[   82.930818][ T4233] usb 2-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed
[   82.973300][ T4270] usb 2-1: ath9k_htc: USB layer deinitialized
[   82.990826][ T4409] BTRFS info (device loop4): has skinny extents
[   83.331227][ T4409] BTRFS info (device loop4): enabling ssd optimizations
[   83.370756][ T4288] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[   83.370991][ T4232] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   83.700898][ T4232] usb 4-1: Using ep0 maxpacket: 16
[   83.740937][ T4288] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   83.783987][ T4288] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   83.853395][ T4232] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   83.865786][ T4288] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[   83.887937][ T4232] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   83.912195][ T4288] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.920402][ T4232] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[   83.935051][ T4371] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 9 /dev/loop4 scanned by udevd (4371)
[   83.946922][ T4232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.986406][ T4288] usb 1-1: config 0 descriptor??
[   84.982646][ T4288] isku 0003:1E7D:319C.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0
[   84.995126][ T4232] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0
[   85.021677][ T4232] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0
[   85.048644][ T4232] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0
[   85.078504][ T4232] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0
[   85.111586][ T4232] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0
[   85.141634][ T4232] mcp2221 0003:04D8:00DD.0003: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0
[   85.190885][ T4288] isku 0003:1E7D:319C.0002: couldn't init struct isku_device
[   85.207129][ T4288] isku 0003:1E7D:319C.0002: couldn't install keyboard
[   85.262054][ T4288] isku: probe of 0003:1E7D:319C.0002 failed with error -71
[   85.280796][ T4232] usb 4-1: USB disconnect, device number 3
[   85.356338][ T4288] usb 1-1: USB disconnect, device number 3
[   85.571686][ T4492] fido_id[4492]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[   85.625787][    C0] vcan0: j1939_tp_rxtimer: 0xffff888061bfd000: rx timeout, send abort
[   85.635666][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888061bfd000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   87.015654][   T23] cfg80211: failed to load regulatory.db
[   87.709946][   T23] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   87.868188][ T4509] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4)
[   88.280718][   T23] usb 4-1: Using ep0 maxpacket: 16
[   88.400793][   T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   88.411800][ T4233] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   88.424093][   T23] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[   88.450291][   T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.472790][   T23] usb 4-1: config 0 descriptor??
[   88.660946][ T4233] usb 1-1: Using ep0 maxpacket: 8
[   88.760963][ T4288] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   88.821318][ T4233] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[   88.849378][ T4233] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   88.942878][ T4233] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   88.998931][   T23] mcp2221 0003:04D8:00DD.0004: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0
[   89.080423][ T4233] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   89.224117][ T4233] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   89.311642][ T4288] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[   89.350178][ T4288] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.379911][ T4288] usb 5-1: Product: syz
[   89.392138][ T4233] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   89.421875][ T4288] usb 5-1: Manufacturer: syz
[   89.444280][ T4288] usb 5-1: SerialNumber: syz
[   89.449498][ T4233] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   89.497345][ T4522] loop1: detected capacity change from 0 to 2048
[   89.513266][   T23] usb 4-1: USB disconnect, device number 4
[   89.524856][ T4522] EXT4-fs (loop1): Journaled quota options ignored when QUOTA feature is enabled
[   89.534956][ T4288] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[   89.580153][ T4522] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrjquota=./file1,noauto_da_alloc,bsddf,,errors=continue. Quota mode: writeback.
[   89.595264][ T4522] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   89.791957][ T4233] usb 1-1: GET_CAPABILITIES returned 0
[   89.797532][ T4233] usbtmc 1-1:16.0: can't read capabilities
[   90.715512][ T4232] usb 1-1: USB disconnect, device number 4
[   92.007332][ T4232] usb 5-1: USB disconnect, device number 3
[   92.042658][ T4231] usb 5-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed
[   92.071189][ T4232] usb 5-1: ath9k_htc: USB layer deinitialized
[   92.148247][ T4541] loop4: detected capacity change from 0 to 2048
[   92.221915][ T4541] UDF-fs: bad mount option "iocharsSt=macinuit" or missing value
[   92.238499][    C0] vcan0: j1939_tp_rxtimer: 0xffff888060dc7800: rx timeout, send abort
[   92.248806][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888060dc7800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   92.430810][ T4288] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   92.690871][ T4288] usb 1-1: Using ep0 maxpacket: 8
[   93.060980][ T4288] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64
[   93.077853][ T4288] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.096069][ T4288] usb 1-1: Product: syz
[   93.107358][ T4288] usb 1-1: Manufacturer: syz
[   93.114955][ T4288] usb 1-1: SerialNumber: syz
[   93.146575][ T4288] usb 1-1: config 0 descriptor??
[   93.242024][ T4288] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state.
[   93.262493][ T4288] pctv452e: pctv452e_power_ctrl: 1
[   93.262493][ T4288] 
[   93.442790][ T4288] usb 1-1: selecting invalid altsetting 3
[   93.448603][ T4288] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22
[   93.448603][ T4288] 
[   93.469477][ T4538] udc-core: couldn't find an available UDC or it's busy
[   93.477211][ T4288] dvb-usb: bulk message failed: -22 (5/0)
[   93.482296][ T4538] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   93.611770][ T4552] ==================================================================
[   93.620212][ T4552] BUG: KASAN: use-after-free in dvb_device_open+0xc6/0x370
[   93.627477][ T4552] Read of size 8 at addr ffff888029ac2218 by task syz.3.47/4552
[   93.635132][ T4552] 
[   93.637494][ T4552] CPU: 0 PID: 4552 Comm: syz.3.47 Not tainted syzkaller #0
[   93.644704][ T4552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[   93.654780][ T4552] Call Trace:
[   93.658075][ T4552]  <TASK>
[   93.661031][ T4552]  dump_stack_lvl+0x188/0x250
[   93.665736][ T4552]  ? show_regs_print_info+0x20/0x20
[   93.670957][ T4552]  ? _printk+0xda/0x130
[   93.675133][ T4552]  ? dvb_device_open+0xc6/0x370
[   93.680017][ T4552]  ? load_image+0x400/0x400
[   93.684550][ T4552]  ? _raw_spin_lock_irqsave+0xbc/0x100
[   93.690045][ T4552]  print_address_description+0x60/0x2d0
[   93.695630][ T4552]  ? dvb_device_open+0xc6/0x370
[   93.700524][ T4552]  kasan_report+0xdf/0x130
[   93.705133][ T4552]  ? dvb_device_open+0xc6/0x370
[   93.710022][ T4552]  dvb_device_open+0xc6/0x370
[   93.714731][ T4552]  ? do_raw_spin_unlock+0x11d/0x230
[   93.719956][ T4552]  chrdev_open+0x5c5/0x6a0
[   93.724407][ T4552]  ? cd_forget+0x160/0x160
[   93.728856][ T4552]  ? fsnotify_perm+0x3a7/0x560
[   93.733648][ T4552]  ? cd_forget+0x160/0x160
[   93.738084][ T4552]  do_dentry_open+0x7ff/0xf80
[   93.742821][ T4552]  path_openat+0x26f5/0x2fa0
[   93.747459][ T4552]  ? verify_lock_unused+0x140/0x140
[   93.752699][ T4552]  ? slab_post_alloc_hook+0x4c/0x380
[   93.758018][ T4552]  ? do_filp_open+0x410/0x410
[   93.762756][ T4552]  do_filp_open+0x1e2/0x410
[   93.767288][ T4552]  ? vfs_tmpfile+0x300/0x300
[   93.771918][ T4552]  ? _raw_spin_unlock+0x24/0x40
[   93.776814][ T4552]  ? alloc_fd+0x598/0x630
[   93.781176][ T4552]  do_sys_openat2+0x150/0x4b0
[   93.785884][ T4552]  ? __lock_acquire+0x7d10/0x7d10
[   93.790939][ T4552]  ? do_sys_open+0xe0/0xe0
[   93.795376][ T4552]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[   93.801387][ T4552]  ? lock_chain_count+0x20/0x20
[   93.806272][ T4552]  ? vtime_user_exit+0x2c8/0x3e0
[   93.811242][ T4552]  __x64_sys_openat+0x135/0x160
[   93.816119][ T4552]  do_syscall_64+0x4c/0xa0
[   93.820553][ T4552]  ? clear_bhb_loop+0x30/0x80
[   93.825241][ T4552]  ? clear_bhb_loop+0x30/0x80
[   93.829941][ T4552]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   93.835865][ T4552] RIP: 0033:0x7f93cf6d404e
[   93.840312][ T4552] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   93.859942][ T4552] RSP: 002b:00007f93cd92ab28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   93.868376][ T4552] RAX: ffffffffffffffda RBX: 00007f93cd92b6c0 RCX: 00007f93cf6d404e
[   93.876363][ T4552] RDX: 0000000000000002 RSI: 00007f93cd92ac00 RDI: ffffffffffffff9c
[   93.884347][ T4552] RBP: 00007f93cd92ac00 R08: 0000000000000000 R09: 0000000000000000
[   93.892337][ T4552] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[   93.900332][ T4552] R13: 00007f93cf98d218 R14: 00007f93cf98d180 R15: 00007ffc1056a548
[   93.908432][ T4552]  </TASK>
[   93.911457][ T4552] 
[   93.913788][ T4552] Allocated by task 1:
[   93.917861][ T4552]  __kasan_kmalloc+0xb5/0xf0
[   93.922474][ T4552]  dvb_register_device+0x311/0x2170
[   93.927706][ T4552]  dvb_register_frontend+0x645/0x920
[   93.933007][ T4552]  vidtv_bridge_probe+0x9a1/0xf70
[   93.938054][ T4552]  platform_probe+0x137/0x1c0
[   93.942758][ T4552]  really_probe+0x284/0xc80
[   93.947275][ T4552]  __driver_probe_device+0x18c/0x330
[   93.952583][ T4552]  driver_probe_device+0x4f/0x420
[   93.957641][ T4552]  __driver_attach+0x46b/0x670
[   93.962417][ T4552]  bus_for_each_dev+0x182/0x1f0
[   93.967290][ T4552]  bus_add_driver+0x30a/0x5a0
[   93.971987][ T4552]  driver_register+0x32d/0x430
[   93.976766][ T4552]  vidtv_bridge_init+0x39/0x70
[   93.981548][ T4552]  do_one_initcall+0x272/0x730
[   93.986344][ T4552]  do_initcall_level+0x137/0x1f0
[   93.991303][ T4552]  do_initcalls+0x4b/0x90
[   93.995648][ T4552]  kernel_init_freeable+0x3e9/0x570
[   94.000860][ T4552]  kernel_init+0x19/0x1b0
[   94.005213][ T4552]  ret_from_fork+0x1f/0x30
[   94.009646][ T4552] 
[   94.011981][ T4552] Freed by task 4509:
[   94.015973][ T4552]  kasan_set_track+0x4b/0x70
[   94.020576][ T4552]  kasan_set_free_info+0x1f/0x40
[   94.025538][ T4552]  ____kasan_slab_free+0xd5/0x110
[   94.030611][ T4552]  slab_free_freelist_hook+0xea/0x170
[   94.036002][ T4552]  kfree+0xef/0x2a0
[   94.039823][ T4552]  dvb_device_open+0x2e7/0x370
[   94.044597][ T4552]  chrdev_open+0x5c5/0x6a0
[   94.049035][ T4552]  do_dentry_open+0x7ff/0xf80
[   94.053753][ T4552]  path_openat+0x26f5/0x2fa0
[   94.058353][ T4552]  do_filp_open+0x1e2/0x410
[   94.062867][ T4552]  do_sys_openat2+0x150/0x4b0
[   94.067568][ T4552]  __x64_sys_openat+0x135/0x160
[   94.072440][ T4552]  do_syscall_64+0x4c/0xa0
[   94.076880][ T4552]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   94.082792][ T4552] 
[   94.085140][ T4552] The buggy address belongs to the object at ffff888029ac2200
[   94.085140][ T4552]  which belongs to the cache kmalloc-256 of size 256
[   94.099217][ T4552] The buggy address is located 24 bytes inside of
[   94.099217][ T4552]  256-byte region [ffff888029ac2200, ffff888029ac2300)
[   94.112424][ T4552] The buggy address belongs to the page:
[   94.118078][ T4552] page:ffffea0000a6b080 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29ac2
[   94.128247][ T4552] head:ffffea0000a6b080 order:1 compound_mapcount:0
[   94.134855][ T4552] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[   94.142871][ T4552] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888016c41b40
[   94.151480][ T4552] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[   94.160069][ T4552] page dumped because: kasan: bad access detected
[   94.166502][ T4552] page_owner tracks the page as allocated
[   94.172238][ T4552] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, ts 18211216421, free_ts 0
[   94.190233][ T4552]  get_page_from_freelist+0x1bbd/0x1ca0
[   94.195818][ T4552]  __alloc_pages+0x1ee/0x480
[   94.200429][ T4552]  alloc_page_interleave+0x24/0x1e0
[   94.205647][ T4552]  new_slab+0xc0/0x4b0
[   94.209742][ T4552]  ___slab_alloc+0x80a/0xdd0
[   94.214342][ T4552]  kmem_cache_alloc_trace+0x1a5/0x2a0
[   94.219729][ T4552]  bus_add_driver+0xda/0x5a0
[   94.224332][ T4552]  driver_register+0x32d/0x430
[   94.229133][ T4552]  vidtv_bridge_init+0x39/0x70
[   94.233913][ T4552]  do_one_initcall+0x272/0x730
[   94.238698][ T4552]  do_initcall_level+0x137/0x1f0
[   94.243655][ T4552]  do_initcalls+0x4b/0x90
[   94.248000][ T4552]  kernel_init_freeable+0x3e9/0x570
[   94.253212][ T4552]  kernel_init+0x19/0x1b0
[   94.257659][ T4552]  ret_from_fork+0x1f/0x30
[   94.262096][ T4552] page_owner free stack trace missing
[   94.267473][ T4552] 
[   94.269801][ T4552] Memory state around the buggy address:
[   94.275437][ T4552]  ffff888029ac2100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   94.283507][ T4552]  ffff888029ac2180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   94.291586][ T4552] >ffff888029ac2200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   94.299653][ T4552]                             ^
[   94.304543][ T4552]  ffff888029ac2280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   94.312636][ T4552]  ffff888029ac2300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   94.320712][ T4552] ==================================================================
[   94.328785][ T4552] Disabling lock debugging due to kernel taint
[   94.334339][ T4288] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   94.342799][ T4552] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   94.351346][ T4552] CPU: 0 PID: 4552 Comm: syz.3.47 Tainted: G    B             syzkaller #0
[   94.359939][ T4552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[   94.370089][ T4552] Call Trace:
[   94.373377][ T4552]  <TASK>
[   94.376317][ T4552]  dump_stack_lvl+0x188/0x250
[   94.381015][ T4552]  ? show_regs_print_info+0x20/0x20
[   94.386236][ T4552]  ? load_image+0x400/0x400
[   94.390760][ T4552]  panic+0x2e5/0x810
[   94.394665][ T4552]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[   94.400839][ T4552]  ? bpf_jit_dump+0xd0/0xd0
[   94.405373][ T4552]  ? _raw_spin_unlock_irqrestore+0x10d/0x120
[   94.411390][ T4552]  ? _raw_spin_unlock+0x40/0x40
[   94.416275][ T4552]  ? dvb_device_open+0xc6/0x370
[   94.421142][ T4552]  check_panic_on_warn+0x80/0xa0
[   94.426106][ T4552]  ? dvb_device_open+0xc6/0x370
[   94.431006][ T4552]  end_report+0x6d/0xf0
[   94.435180][ T4552]  kasan_report+0x102/0x130
[   94.439697][ T4552]  ? dvb_device_open+0xc6/0x370
[   94.444561][ T4552]  dvb_device_open+0xc6/0x370
[   94.449250][ T4552]  ? do_raw_spin_unlock+0x11d/0x230
[   94.454468][ T4552]  chrdev_open+0x5c5/0x6a0
[   94.458928][ T4552]  ? cd_forget+0x160/0x160
[   94.463366][ T4552]  ? fsnotify_perm+0x3a7/0x560
[   94.468142][ T4552]  ? cd_forget+0x160/0x160
[   94.472579][ T4552]  do_dentry_open+0x7ff/0xf80
[   94.477316][ T4552]  path_openat+0x26f5/0x2fa0
[   94.481957][ T4552]  ? verify_lock_unused+0x140/0x140
[   94.487198][ T4552]  ? slab_post_alloc_hook+0x4c/0x380
[   94.492496][ T4552]  ? do_filp_open+0x410/0x410
[   94.497218][ T4552]  do_filp_open+0x1e2/0x410
[   94.501744][ T4552]  ? vfs_tmpfile+0x300/0x300
[   94.506364][ T4552]  ? _raw_spin_unlock+0x24/0x40
[   94.511249][ T4552]  ? alloc_fd+0x598/0x630
[   94.515646][ T4552]  do_sys_openat2+0x150/0x4b0
[   94.520336][ T4552]  ? __lock_acquire+0x7d10/0x7d10
[   94.525376][ T4552]  ? do_sys_open+0xe0/0xe0
[   94.529800][ T4552]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[   94.535808][ T4552]  ? lock_chain_count+0x20/0x20
[   94.540677][ T4552]  ? vtime_user_exit+0x2c8/0x3e0
[   94.545636][ T4552]  __x64_sys_openat+0x135/0x160
[   94.550501][ T4552]  do_syscall_64+0x4c/0xa0
[   94.554943][ T4552]  ? clear_bhb_loop+0x30/0x80
[   94.559639][ T4552]  ? clear_bhb_loop+0x30/0x80
[   94.564326][ T4552]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   94.570231][ T4552] RIP: 0033:0x7f93cf6d404e
[   94.574660][ T4552] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   94.594282][ T4552] RSP: 002b:00007f93cd92ab28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   94.602707][ T4552] RAX: ffffffffffffffda RBX: 00007f93cd92b6c0 RCX: 00007f93cf6d404e
[   94.610697][ T4552] RDX: 0000000000000002 RSI: 00007f93cd92ac00 RDI: ffffffffffffff9c
[   94.618678][ T4552] RBP: 00007f93cd92ac00 R08: 0000000000000000 R09: 0000000000000000
[   94.626657][ T4552] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[   94.634659][ T4552] R13: 00007f93cf98d218 R14: 00007f93cf98d180 R15: 00007ffc1056a548
[   94.642654][ T4552]  </TASK>
[   94.646009][ T4552] Kernel Offset: disabled
[   94.650348][ T4552] Rebooting in 86400 seconds..