last executing test programs:

1m53.622994033s ago: executing program 32 (id=73):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r0, &(0x7f0000001140)={&(0x7f00000002c0)={0xa, 0x4e21, 0x80000, @mcast2, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000001180)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @local}}}}], 0x28}, 0x4044)

1m42.200595754s ago: executing program 33 (id=126):
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x3}, 0x8)

1m36.284036248s ago: executing program 3 (id=182):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x7800, 0x40, 0x400, 0x1, {{0x7, 0x4, 0x3, 0x16, 0x1c, 0x68, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x22}, @multicast1, {[@cipso={0x86, 0x8, 0x1, [{0x2, 0x2}]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000480)={'ip_vti0\x00', 0x0})
sendmmsg$inet6(r0, &(0x7f0000000640), 0x0, 0x880)
shutdown(r0, 0x1)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
recvmmsg(r3, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e24, @empty}}, 0xffff, 0xffc0}, 0x90)
setsockopt(0xffffffffffffffff, 0xff, 0x3, &(0x7f0000000900), 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="1400000023003517d25a806f8b6394f90324fc60", 0x14}], 0x1, 0x0, 0x0, 0x2000000}, 0x0)

1m35.640087911s ago: executing program 3 (id=188):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='veno', 0x54)
sendmmsg$inet(r0, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="89e4192d92359cb3ee294530ae76ad6dc4ff20cc3ccc9d41018dd482ad1f395d4e38bd22b6fcae05c49fbdfdf66ae2994f191e9222effcb97205d0aaed4b29919f9e3bab7fdb276ca29501903c98de0b0cc8afca563f94fe69b6927ae594d1b53ad9f4a9f9f5c84a518d37939c84a5bd15048115ac421e9c56866ab6f91b0e8181d8999dd86c0177a971a39bf35b38eb0504bf70c02cc307c62d6f06c80b146153ca56a182831696c8cf46d2b065744e6dd4415ceff773e8d3a45aacc4fd8972cbe77878ce48d531066ec9e4790196e4a17b08ea09d4d3febf6721a44390383c7261e9e09f20c23f95e9c04d3c10220f3962d98b2bd98d5c3e50169a4c0c99f29c7a336489c26259957c4bdeae1c8cdf60d817db09336f680bbe954dc05669c9d48cb0a0488ed2385d935a7166b3187189e08d421903d546126289651db812f9c8754c0dc6f24a22ca988a2ac131cc52d724bb086a53a94e515e09fef354e9ca0daacaa347e96b3efd7c5c4063f6eb0cf55f08ff942780e6846d78410057ca2b845e69eeda4066de60a033e2f3c7e47b2f0c0c4c7da98b1d658c620f70dbe6eb8b5dd90216caa82c91db4c0f7ea02df5d5f8d6815d2d7868e6a6053f31a4fbe8732a1310ca7a79814177a981e5ab68dfeba4fe46ed4c51819be1308f73455e311f511ce4360cc7c24836c9b895ee5ce93cc42dd88f02d91b479c1748339024343700cce897087bbaae4fbd8e2ad5da016265ef097043acaf87504dde24216c805b40cf4d6edf2ae6564182acdf06580dde3fb66ab01625ffadc22f1ac7b97b9dec871edd96e86af127be1ef27548917a49476ce87f1719173369caf69d35d25637f051", 0x263}], 0x1}}], 0x1, 0x40)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4)

1m35.431926595s ago: executing program 3 (id=191):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000580)=<r3=>0x0)
sendmsg$NFC_CMD_SE_IO(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)={0x2c, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_SE_APDU={0x5, 0x19, 'O'}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, 0x0, 0x0, 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7}, 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94)
r4 = socket$nl_generic(0x11, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0)
r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xca)
ioctl$sock_ax25_SIOCDELRT(r5, 0x890c, &(0x7f0000000540)={@default, @bcast, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b18, &(0x7f0000000000)={'wlan1\x00'})
sendmsg(r4, &(0x7f0000000640)={&(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x8a, @mcast2, 0x596}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000f80)="849d721861bd2dcc5e7064345f024a7a72ba717362c0cfc49199dd238b3ec15e", 0x20}], 0x1, 0x0, 0x0, 0x11000000}, 0x40000)
r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, 0x0)
ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f0000000300)={0x1, @default, @bpq0, 0x0, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]})

1m34.928038375s ago: executing program 3 (id=196):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000880)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000000}}, {@block_validity}, {@inlinecrypt}, {@noblock_validity}, {@usrjquota}]}, 0x9, 0x454, &(0x7f0000000400)="$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")
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1b)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x47, 0x10001, 0x8, 0x1}, 0x48)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000240)={[{@nodiscard}, {@i_version}, {@nodioread_nolock}, {@noacl}, {@stripe={'stripe', 0x3d, 0xd8}}, {@barrier_val={'barrier', 0x3d, 0xfffffffffffff23e}}, {@abort}]}, 0x3, 0x4e9, &(0x7f00000002c0)="$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")
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r0, &(0x7f0000000240), 0x0}, 0x20)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10)
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x4, 0x16)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x194)
rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x63d014, 0x0)
r6 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r6, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e20, @local}, 0x10)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0xc0185879, &(0x7f00000003c0)={@desc={0x1, 0x0, @desc2}})

1m32.377777294s ago: executing program 0 (id=216):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='lp', 0x2)
sendto$inet(r0, 0x0, 0x0, 0x200407dd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)

1m32.376848494s ago: executing program 3 (id=217):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={0x30, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)

1m32.203172318s ago: executing program 0 (id=220):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be040205", 0x16, 0x0, 0x0, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r0, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4801)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r3=>0x0})
syz_emit_ethernet(0x7a, 0x0, 0x0)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

1m31.900067873s ago: executing program 0 (id=222):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e20, 0x4, 0x1, 0x0, 0x2}, {0x10002, 0x65ad, 0x1, 0x0, 0xfffffffffffffff8, 0x802b, 0x8000000000000000, 0xfffffffffffffff7}, {0x2, 0x8, 0xfffffffffffffffc, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x2, 0x6c}, 0xa, @in=@empty, 0x40000, 0x5, 0x0, 0xb7, 0x10000000}}, 0xe8)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)

1m31.812137235s ago: executing program 3 (id=224):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@bridge_setlink={0x34, 0x13, 0xa2f, 0x70bd2c, 0x25cfdbfd, {0x7, 0x0, 0x68, r1, 0x16258, 0x28}, [@IFLA_LINKINFO={0x14, 0x1a, 0x0, 0x1, @vlan={{0x9}, {0x4, 0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20}, 0x50)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, 0x0, 0x40000)

1m31.383589173s ago: executing program 34 (id=224):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@bridge_setlink={0x34, 0x13, 0xa2f, 0x70bd2c, 0x25cfdbfd, {0x7, 0x0, 0x68, r1, 0x16258, 0x28}, [@IFLA_LINKINFO={0x14, 0x1a, 0x0, 0x1, @vlan={{0x9}, {0x4, 0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20}, 0x50)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, 0x0, 0x40000)

1m31.297801845s ago: executing program 0 (id=227):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000880)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000000}}, {@block_validity}, {@inlinecrypt}, {@noblock_validity}, {@usrjquota}]}, 0x9, 0x454, &(0x7f0000000400)="$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")
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1b)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x47, 0x10001, 0x8, 0x1}, 0x48)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000240)={[{@nodiscard}, {@i_version}, {@nodioread_nolock}, {@noacl}, {@stripe={'stripe', 0x3d, 0xd8}}, {@barrier_val={'barrier', 0x3d, 0xfffffffffffff23e}}, {@abort}]}, 0x3, 0x4e9, &(0x7f00000002c0)="$eJzs3c9vVNUeAPDvnc7Q8ruPx+M9eCgFNDYmtlBQWLjBxMSFJkZcyLJpK0EKGNqFEAIlMbgmcW9cGneauNWlceUfgAsXJoaEGDaAick1d+beznR+tJ3+gjqfTzKdc+49955z7r3nzplzZqYB9Kyh7E8SsSMi7kXE7lp0YYKh2tPjhzcmnjy8MRFzaXr2j6Sa7lEWzxXbbc8jw6WI0qdJ0w5rZq5dvzg+PT11NY+Pzl76eHTm2vVXLlwaPz91fury2OnTJ08cP/Xa2KvdV6pNflm9Hh24eeXg/rfO3X1nolwsH8ifG+vRUbm7Ygwtsu7F7nb1zNvZEE5aj9OtDS0MyzaQX9aVrP3fmD5y7mkXCNgwaZqm/Z1Xz6XNbrcsATatJLsH3HzapQA2XvFCn73/LR4b1PV4Jjw4U3sDlNX7cf6orSlHKU9TaXp/u5aGIuKDuT+/yB6x2DjEr+tUAACg5/xwpugJVvt+u+r9j1Lsa0i3K38ejIh/RcSeiPh3ROyNiP9EVNP+NyL+15xBEpEukv/epng9/2/zWYTS/VVVcAlZ/+/1fG5rYf+v6P3FYF8e2xlRdJinjuXHZDgq/R9emJ463mH/W5bIv7H/lz2y/Iu+YF6O++WmAbrJ8dnxldW21YPbEQfKzfVPytmJK6ZxkojYHxEHltrZjnpwsGHxhZe/OjgfqSzcZOn6V6VNU3rlhr+rkn4Z8VLt/M/FgvNfzzFZfH5ydCCmp46NZlfBsbZ5/PTznXc75b9k/b/7rXmTN099f3a11Z6Xnf9tDdd/FPO39foPJhHJ/HztTETa110ed375rLrfoaOt61Z6/W9J3q+Gi/b1yfjs7NXjEVuSt1uXj9W3LeJF+qz+w0fbt/89+TbZkfh/RGQX8XMR8XxEHMrLfjgijkREm6rN+/GNFz7qtG6Z1/+6yeo/2fb+t+D81+frlxkoNs6W9F08fO9Jh5vH8s7/yWpoOF/S/v6XLLhFLLekqzt6AAAAsDmUasN2pZH5cKk0MlIbA9ob20rTV2ZmD0XE5cna8N5gVErFSNfuWjwpxj8HG+JjTfET+bjx531bq/GRiSvTk0+78tDjtlfbfNLS/jO/dznOC2xCazCPBmxSS7X/fXfbf6kW2PxW+vr/V7rYR7uAzaCh/c91SDLnkzLwz+T9P/Sudu3/Vny96HcX3DNg80u1Zehp2j/0rnK8Nx+ufu3ZXB/0DK//0JO6/V5/d4G0v/2qgWjziwED61OMrW3yqgYq61v3lkDWs1rDHVYiYnmJt64ki6IL2PkXHkrd7bA/Wlf1xWJbJV38jkMRyI7KkonP71vzi7/4TZS1vmy+qbfTyjJPd5tA8V8uutlqw29FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6+LvAAAA///VudS9")
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r0, &(0x7f0000000240), 0x0}, 0x20)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10)
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x4, 0x16)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x194)
rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x63d014, 0x0)
r6 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r6, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e20, @local}, 0x10)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0xc0185879, &(0x7f00000003c0)={@desc={0x1, 0x0, @desc2}})

1m28.677992336s ago: executing program 0 (id=244):
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, 0x0, &(0x7f0000000580))
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14)
syz_emit_ethernet(0x82, &(0x7f0000000a40)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @random="78a4e8c9ab61", @void, {@ipv6={0x86dd, @gre_packet={0x6, 0x6, "b3814a", 0x4c, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, {[@hopopts={0x1d}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x1}, {}, {0x8, 0x88be, 0x1, {{0x6, 0x1, 0x2, 0x2, 0x0, 0x2, 0x7, 0x7}, 0x1, {0x20e}}}, {0x8, 0x22eb, 0x0, {{0xa, 0x2, 0x3, 0x3, 0x1, 0x1, 0x3, 0x9}, 0x2, {0x800, 0xc, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}}, 0x0)

1m27.956978119s ago: executing program 0 (id=254):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="210f000000000000000020"], 0x1c}}, 0x0)

1m27.700329764s ago: executing program 35 (id=254):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="210f000000000000000020"], 0x1c}}, 0x0)

1m26.862044991s ago: executing program 5 (id=264):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}]}, 0x38}}, 0x0)

1m26.647521925s ago: executing program 5 (id=267):
socket$inet_udplite(0x2, 0x2, 0x88)
close(0xffffffffffffffff)
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000740)=ANY=[@ANYBLOB="18010000210001000000000000000000fc020000000000000000000000000000ff0200000000000000000000000000014e210000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ac14140c000000000000000000000000fc000000"], 0x118}}, 0x44)
sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="021600000a0000000000000000000000080012000007a18208"], 0x50}}, 0x0)

1m26.436097599s ago: executing program 5 (id=268):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="5000000009060102000000000000000003c47a000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c00028008000140c130cb9f"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)

1m26.316771802s ago: executing program 5 (id=271):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000880)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000000}}, {@block_validity}, {@inlinecrypt}, {@noblock_validity}, {@usrjquota}]}, 0x9, 0x454, &(0x7f0000000400)="$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")
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1b)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x47, 0x10001, 0x8, 0x1}, 0x48)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000240)={[{@nodiscard}, {@i_version}, {@nodioread_nolock}, {@noacl}, {@stripe={'stripe', 0x3d, 0xd8}}, {@barrier_val={'barrier', 0x3d, 0xfffffffffffff23e}}, {@abort}]}, 0x3, 0x4e9, &(0x7f00000002c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10)
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x4, 0x16)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x194)
rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x63d014, 0x0)
r5 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r5, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e20, @local}, 0x10)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0185879, &(0x7f00000003c0)={@desc={0x1, 0x0, @desc2}})

1m25.331516801s ago: executing program 5 (id=272):
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x10, 0x0, @mcast2}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000ac0512fd0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000fe8000000000000000000000000000bb"], 0x190)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x10, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra}}}}}, 0x0)

1m24.593634785s ago: executing program 5 (id=275):
close(0x3)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x103, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20000092, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)
close(0x3)

1m24.477384537s ago: executing program 36 (id=275):
close(0x3)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x103, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20000092, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)
close(0x3)

1m24.056073995s ago: executing program 6 (id=280):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)

1m23.921102838s ago: executing program 6 (id=282):
openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0)

1m23.755980551s ago: executing program 6 (id=283):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x68, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}]}, 0x68}}, 0x0)

1m23.383991418s ago: executing program 6 (id=286):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000880)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000000}}, {@block_validity}, {@inlinecrypt}, {@noblock_validity}, {@usrjquota}]}, 0x9, 0x454, &(0x7f0000000400)="$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")
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1b)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x47, 0x10001, 0x8, 0x1}, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10)
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x4, 0x16)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x194)
rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x63d014, 0x0)
r5 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r5, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e20, @local}, 0x10)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0185879, &(0x7f00000003c0)={@desc={0x1, 0x0, @desc2}})

1m22.296209209s ago: executing program 6 (id=289):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x20}}, 0x84)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004980)=@bloom_filter={0x1e, 0x1, 0x0, 0x3, 0x8, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4}, 0x50)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, 0x0, 0x0}, 0x20)
recvmmsg(r3, 0x0, 0x0, 0x100, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r4, &(0x7f0000000080), 0x10)
sendmmsg$alg(r4, 0x0, 0x0, 0x20)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000022c0)={'vxcan0\x00'})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0xba01, 0x0, 0x4008080}, 0xc0a0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, 0x0, 0x0)

1m21.642951882s ago: executing program 6 (id=292):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3000000000080041007278"], 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x24004000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)

1m21.335833518s ago: executing program 37 (id=292):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3000000000080041007278"], 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x24004000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)

1m20.338137667s ago: executing program 4 (id=294):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4ac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x303}, "0100", "acba84f0a6731f234db1cc7f3f382ad796bd667c4000a9959087310300", "129c9707", "ec3fff9afd96e6c0"}, 0x38)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1)
writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)
shutdown(r0, 0x1)

1m19.977252394s ago: executing program 4 (id=295):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x40, 0x3, "9b6a37b458a8056dd9a87f963d140d7a9d3ac869f3a860917523679abf4579f9cd656422a633a39f0300000000000000000000000100000000000000"}, @NFTA_TARGET_NAME={0xa, 0x1, 'HMARK\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)

1m19.915959895s ago: executing program 4 (id=296):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)

1m19.838264507s ago: executing program 4 (id=297):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000880)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000000}}, {@block_validity}, {@inlinecrypt}, {@noblock_validity}, {@usrjquota}]}, 0x9, 0x454, &(0x7f0000000400)="$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")
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1b)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10)
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x4, 0x16)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x194)
rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x63d014, 0x0)
r5 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r5, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e20, @local}, 0x10)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0185879, &(0x7f00000003c0)={@desc={0x1, 0x0, @desc2}})

1m18.891368225s ago: executing program 4 (id=298):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x24001040}, 0x40010)
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r3 = openat$cgroup_ro(r1, 0x0, 0x275a, 0x0)
read$alg(r3, &(0x7f0000000040)=""/136, 0x88)
write$nci(r3, &(0x7f0000000040)=@NCI_OP_CORE_INTF_ERROR_NTF={0x0, 0x1, 0x3, 0x8, 0x0, {0x0, 0x1}}, 0x5)
sendmmsg$alg(r3, &(0x7f0000000480)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080c0}], 0x1, 0x8800)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x9, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x5, 0x4, 0xadd, 0x0, r4, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48)
getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, 0x0, &(0x7f0000000500))
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20040801}, 0x20008040)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r6)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

1m18.271873057s ago: executing program 4 (id=299):
socket$netlink(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
syz_emit_ethernet(0x22, &(0x7f0000000580)={@link_local, @random="ece65fbcee55", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0x68, 0x0, 0x9, 0x6c, 0x0, @dev={0xac, 0x14, 0x14, 0x22}, @remote}}}}}, 0x0)

1m18.145669129s ago: executing program 38 (id=299):
socket$netlink(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
syz_emit_ethernet(0x22, &(0x7f0000000580)={@link_local, @random="ece65fbcee55", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0x68, 0x0, 0x9, 0x6c, 0x0, @dev={0xac, 0x14, 0x14, 0x22}, @remote}}}}}, 0x0)

11.023507417s ago: executing program 2 (id=834):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x40, 0x3, "9b6a37b458a8056dd9a87f963d140d7a9d3ac869f3a860917523679abf4579f9cd656422a633a39f0300000000000000000000000100000000000000"}, @NFTA_TARGET_NAME={0xa, 0x1, 'HMARK\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)

10.752101812s ago: executing program 2 (id=838):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x42, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000280)="b80000c0fe0f23d00f21f835100000080f23f8b8010000000f01c10f47122e0f01c566baf80cb869a2558cef66bafc0cec360f2017c74424000030c1e6c744240200000000c7442406000000000f011424660f388267b79a5eb6442b2c00260f404b0a", 0x63}], 0x1, 0x80, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11)
recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25)

9.013060826s ago: executing program 2 (id=853):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='veno', 0x54)
sendmmsg$inet(r0, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="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", 0x285}], 0x1}}], 0x1, 0x40)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0)

8.714734652s ago: executing program 2 (id=859):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x87f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x40020)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r7, &(0x7f0000000140)="bad3", 0x2, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14)

8.108121194s ago: executing program 2 (id=869):
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x4000, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
write$FUSE_INIT(r1, 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

7.655771432s ago: executing program 2 (id=876):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})

7.096221533s ago: executing program 9 (id=879):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, 0x0)
mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400))
chdir(0x0)
open(&(0x7f0000000000)='.\x00', 0x301540, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r0], 0x3c}}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140))
syz_init_net_socket$x25(0x9, 0x5, 0x0)

6.959243366s ago: executing program 9 (id=883):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x1ff)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x8029, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c)

6.681647491s ago: executing program 1 (id=887):
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xca)
ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000540)={@default, @bcast, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})

6.668435651s ago: executing program 9 (id=888):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
read$FUSE(r0, &(0x7f0000004280)={0x2020, 0x0, <r1=>0x0}, 0xffe7)
syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x2b, 0x40, 0x30004404, 0x0, 0xfffb, 0x2, 0x1, 0x0, 0x0, 0x20, 0x5}}, 0x50)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x0)
fcntl$lock(r2, 0x5, &(0x7f0000000200)={0x1})

6.468555655s ago: executing program 1 (id=891):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00', @ANYRES32=0x0, @ANYRES32], 0x48)
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"])
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x205, 0x6, 0x0, 0x0, 0x10003, 0x41, 0x400200cc0, 0xffd, 0x4, 0x0, 0x7, 0x0, 0x2, 0x0, 0x6a, 0x8d], 0xeeee8000, 0x2011c0})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

6.169072051s ago: executing program 1 (id=893):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)

5.760116299s ago: executing program 1 (id=896):
socket$packet(0x11, 0x3, 0x300)
socket$nl_xfrm(0x10, 0x3, 0x6)
mkdir(&(0x7f0000000380)='./file1\x00', 0xa)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0)
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r3=>r2}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3, {0x6}}, './file0\x00'})

5.612069672s ago: executing program 1 (id=898):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101502, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000100)="66b98d0400000f322280818ee067660f350f01d166b9940a000066b80048000066ba000000000f3066b8640000000f23c00f21f8663503000a000f23f866b9040100c00f320f5429660f73fc95670f234f", 0x51}], 0x1, 0x40, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5.19254973s ago: executing program 1 (id=900):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)

3.344065656s ago: executing program 9 (id=913):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000580)=<r3=>0x0)
sendmsg$NFC_CMD_SE_IO(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)={0x2c, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_SE_APDU={0x5, 0x19, 'O'}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, 0x0, 0x0, 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7}, 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94)
r4 = socket$nl_generic(0x11, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0)
r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xca)
ioctl$sock_ax25_SIOCDELRT(r5, 0x890c, &(0x7f0000000540)={@default, @bcast, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b18, &(0x7f0000000000)={'wlan1\x00'})
sendmsg(r4, &(0x7f0000000640)={&(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x8a, @mcast2, 0x596}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000f80)="849d721861bd2dcc5e7064345f024a7a72ba717362c0cfc49199dd238b3ec15e", 0x20}], 0x1, 0x0, 0x0, 0x11000000}, 0x40000)
r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, 0x0)

3.14590259s ago: executing program 9 (id=915):
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
ftruncate(r3, 0x2007ffb)
sendfile(r3, r3, 0x0, 0x1000000201005)
ftruncate(r3, 0x6)

2.314040475s ago: executing program 7 (id=919):
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb)
ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f0000000000)={@default, @null, @default, 0x2, 0x800, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @bcast]})

2.153790989s ago: executing program 7 (id=920):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$TCXONC(r0, 0x540a, 0x0)
ioctl$TCFLSH(r0, 0x400455c8, 0x4)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)

1.852064884s ago: executing program 7 (id=921):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10)
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x4, 0x16)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x194)
rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x63d014, 0x0)
r5 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r5, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e20, @local}, 0x10)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0185879, &(0x7f00000003c0)={@desc={0x1, 0x0, @desc2}})

1.399229233s ago: executing program 9 (id=923):
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x80000003)
r1 = dup2(r0, r0)
read$FUSE(r1, &(0x7f00000063c0)={0x2020}, 0x2020)
syz_usb_connect(0x1, 0x2d, 0x0, 0x0)

1.165172258s ago: executing program 8 (id=925):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000580)=<r3=>0x0)
sendmsg$NFC_CMD_SE_IO(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)={0x2c, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_SE_APDU={0x5, 0x19, 'O'}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, 0x0, 0x0, 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7}, 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94)
r4 = socket$nl_generic(0x11, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0)
r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xca)
ioctl$sock_ax25_SIOCDELRT(r5, 0x890c, &(0x7f0000000540)={@default, @bcast, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b18, &(0x7f0000000000)={'wlan1\x00'})
sendmsg(r4, &(0x7f0000000640)={&(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x8a, @mcast2, 0x596}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000f80)="849d721861bd2dcc5e7064345f024a7a72ba717362c0cfc49199dd238b3ec15e", 0x20}], 0x1, 0x0, 0x0, 0x11000000}, 0x40000)
r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, 0x0)

959.680461ms ago: executing program 8 (id=926):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000580)=<r3=>0x0)
sendmsg$NFC_CMD_SE_IO(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)={0x2c, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_SE_APDU={0x5, 0x19, 'O'}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, 0x0, 0x0, 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7}, 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94)
r4 = socket$nl_generic(0x11, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0)
r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xca)
ioctl$sock_ax25_SIOCDELRT(r5, 0x890c, &(0x7f0000000540)={@default, @bcast, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b18, &(0x7f0000000000)={'wlan1\x00'})
sendmsg(r4, &(0x7f0000000640)={&(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x8a, @mcast2, 0x596}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000f80)="849d721861bd2dcc5e7064345f024a7a72ba717362c0cfc49199dd238b3ec15e", 0x20}], 0x1, 0x0, 0x0, 0x11000000}, 0x40000)
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000300)={0x1, @default, @bpq0, 0x0, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]})

919.413333ms ago: executing program 7 (id=927):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x8000000, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
close(r1)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r7)
socket$unix(0x1, 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, 0x0, {}, {0x2, 0xb}, {0xa, 0xfff3}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x0, 0x6d, 0x9f7f, 0x6}}}}]}, 0x48}}, 0x4008000)
ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

668.186897ms ago: executing program 8 (id=928):
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x6)
setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)

596.910939ms ago: executing program 8 (id=929):
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4881}, 0x8000)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

544.296339ms ago: executing program 7 (id=930):
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="04"], 0x14}}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz0\x00', {0xfff9, 0x2, 0x240, 0x9b9a}, 0x9, [0x6, 0x9, 0x5, 0x9, 0x700000, 0x155f, 0x6, 0x5, 0x25cc, 0x1, 0xa5, 0x6, 0xa2b9, 0x1000, 0x0, 0xe4, 0x9, 0xfc000000, 0x6, 0xbbf, 0x5a732f64, 0xc, 0x9, 0x12, 0x2, 0x80, 0x4, 0x1, 0x2, 0x3, 0x7, 0x81, 0x28000, 0x5, 0x0, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x4, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000000, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0xa], [0x9, 0x3, 0x6, 0x0, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x761e, 0x9, 0x4, 0xaca, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x4, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xfeff58b7, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x4, 0xf1, 0x4, 0xab00000, 0x40000005, 0x7, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x8, 0x3, 0x4, 0x6, 0x7, 0x2, 0x9, 0x95, 0x8000, 0x6, 0xf0b, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000005, 0xb, 0x7, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x240, 0xd, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x200, 0x8000, 0x400, 0x3e58, 0xff, 0xd3, 0x7, 0x3433, 0x3, 0xa6, 0xfc, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x1, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0xffffffff, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x8, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fbfffff, 0x7, 0x4, 0x10, 0x81, 0x4, 0x9d86, 0x9, 0xfffffff7, 0x20008, 0x40f1, 0x2, 0x1, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x80000002, 0x624dfaee, 0xc, 0x7f, 0x201000, 0x5, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x3, 0x6, 0x4000000f, 0x2, 0x5337, 0x26d, 0x9, 0xfffffffb, 0x4, 0x80, 0x9, 0x4, 0x463f, 0x4, 0x7, 0x3, 0x8, 0x13ffd, 0x1, 0x1b1a]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x40044}, 0x10)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[], 0x214}, 0x1, 0x0, 0x0, 0x20004001}, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0, 0x4000)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x7fffffffffffffff, 0xfff, 0x0, 0x180, 0x1, 0x7d, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x800, 0x0, 0x4, 0xbdb], 0x1, 0x1c4213})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

418.940272ms ago: executing program 8 (id=931):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a0088a80180c2000002aaaaaaaaaabb86dd633c00000014060120"], 0x4e)

98.943878ms ago: executing program 8 (id=932):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB], 0x1c}], 0x1}, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"})
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000))
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
socket$unix(0x1, 0x1, 0x0)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
connect$rose(0xffffffffffffffff, 0x0, 0x0)
connect$rose(0xffffffffffffffff, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40)

0s ago: executing program 7 (id=933):
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(0x0, 0xffffffffffff0000, 0x0)
read$msr(r0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1})

kernel console output (not intermixed with test programs):

81 - 0
[   83.062707][ T4486] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[   83.077095][  T144] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.115593][ T4486] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[   83.213969][  T144] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.251590][ T4504] chnl_net:caif_netlink_parms(): no params data found
[   84.703414][ T4504] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.779489][ T4504] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.787723][ T4504] device bridge_slave_0 entered promiscuous mode
[   84.881883][ T4504] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.889022][ T4504] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.960706][ T4504] device bridge_slave_1 entered promiscuous mode
[   85.121611][ T4504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.357757][ T4504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.523442][ T4504] team0: Port device team_slave_0 added
[   85.626333][ T4504] team0: Port device team_slave_1 added
[   85.690187][   T13] Bluetooth: hci4: command 0x0409 tx timeout
[   85.773052][ T4504] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.809473][ T4504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.919403][ T4504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.971443][ T4504] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.979009][ T4504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.109727][ T4504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.213752][  T144] device hsr_slave_0 left promiscuous mode
[   86.224341][  T144] device hsr_slave_1 left promiscuous mode
[   86.241815][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   86.269689][  T144] batman_adv: batadv0: Removing interface: batadv_slave_0
[   86.299679][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   86.307361][  T144] batman_adv: batadv0: Removing interface: batadv_slave_1
[   86.355218][  T144] device bridge_slave_1 left promiscuous mode
[   86.399431][  T144] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.520241][  T144] device bridge_slave_0 left promiscuous mode
[   86.527071][  T144] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.709477][  T144] device veth1_macvtap left promiscuous mode
[   86.716116][  T144] device veth0_macvtap left promiscuous mode
[   86.746076][  T144] device veth1_vlan left promiscuous mode
[   86.780629][  T144] device veth0_vlan left promiscuous mode
[   86.974129][ T1111] cfg80211: failed to load regulatory.db
[   87.780087][ T2289] Bluetooth: hci4: command 0x041b tx timeout
[   88.090863][  T144] team0 (unregistering): Port device team_slave_1 removed
[   88.168588][  T144] team0 (unregistering): Port device team_slave_0 removed
[   88.247284][  T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   88.404290][  T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   88.792267][  T144] bond0 (unregistering): Released all slaves
[   89.073541][ T4504] device hsr_slave_0 entered promiscuous mode
[   89.088917][ T4504] device hsr_slave_1 entered promiscuous mode
[   89.176971][ T4504] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   89.192537][ T4504] Cannot create hsr debugfs directory
[   89.743125][ T4504] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   89.801358][ T4504] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   89.849584][ T2289] Bluetooth: hci4: command 0x040f tx timeout
[   89.884969][ T4504] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   89.926700][ T4504] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   90.396105][ T4504] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.446127][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   90.502562][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   90.543325][ T4504] 8021q: adding VLAN 0 to HW filter on device team0
[   90.601110][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   90.617902][ T4630] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[   90.640537][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   90.647806][ T4630] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[   90.649242][ T4292] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.665673][ T4292] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.723215][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   90.736615][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   90.755394][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   90.768341][ T4292] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.775722][ T4292] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.826950][ T4625] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[   90.850026][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   90.858473][ T4625] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[   90.894409][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   90.970725][  T433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   91.005088][  T433] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   91.080674][  T433] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   91.183153][  T433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   91.200389][  T433] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   91.248605][  T433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   91.263187][ T4646] loop2: detected capacity change from 0 to 512
[   91.304291][  T433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   91.340150][  T433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   91.392057][ T4646] EXT4-fs (loop2): inline encryption not supported
[   91.410631][  T433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   91.440769][ T4646] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   91.461536][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   91.549186][ T4646] EXT4-fs (loop2): 1 truncate cleaned up
[   91.575297][ T4646] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000002000000,block_validity,inlinecrypt,noblock_validity,usrjquota=,,errors=continue. Quota mode: none.
[   91.942185][ T4235] Bluetooth: hci4: command 0x0419 tx timeout
[   92.026272][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   92.098322][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   92.125940][ T4504] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.206676][ T4667] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   93.099649][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   93.120018][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   93.212808][  T433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   93.230396][  T433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   93.272849][ T4504] device veth0_vlan entered promiscuous mode
[   93.281028][  T433] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   93.312718][  T433] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   93.337776][ T4504] device veth1_vlan entered promiscuous mode
[   93.549529][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   93.558859][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   93.602573][ T4504] device veth0_macvtap entered promiscuous mode
[   93.624522][ T4504] device veth1_macvtap entered promiscuous mode
[   93.702266][ T4504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.735012][ T4504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.769734][ T4504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.811124][ T4504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.861556][ T4504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.892754][ T4504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.948797][ T4504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.987994][ T4504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.036515][ T4504] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.079665][  T433] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   94.088105][  T433] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   94.157480][  T433] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   94.222242][  T433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   94.277962][ T4504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.305206][ T4504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.326489][ T4504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.374702][ T4504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.419621][ T4504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.452435][ T4504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.467747][ T4504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.485661][ T4504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.530931][ T4504] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.568094][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   94.591464][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   94.637670][ T4504] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.670937][ T4504] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.694484][ T4504] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.710407][ T4504] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.055259][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.073893][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.091230][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   95.180310][ T4271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.243429][ T4271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.288318][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   95.537994][   T26] kauditd_printk_skb: 46 callbacks suppressed
[   95.538009][   T26] audit: type=1326 audit(1759300428.112:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4763 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae06d02ec9 code=0x7ffc0000
[   95.683980][   T26] audit: type=1326 audit(1759300428.172:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4763 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae06d02ec9 code=0x7ffc0000
[   95.708079][   T26] audit: type=1326 audit(1759300428.172:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4763 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae06d02ec9 code=0x7ffc0000
[   95.762470][   T26] audit: type=1326 audit(1759300428.172:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4763 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fae06d02ec9 code=0x7ffc0000
[   95.911048][   T26] audit: type=1326 audit(1759300428.172:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4763 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae06d02ec9 code=0x7ffc0000
[   95.954845][   T26] audit: type=1326 audit(1759300428.172:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4763 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae06d02ec9 code=0x7ffc0000
[   95.992929][   T26] audit: type=1326 audit(1759300428.172:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4763 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae06d02ec9 code=0x7ffc0000
[   96.103629][   T26] audit: type=1326 audit(1759300428.172:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4763 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7fae06d02ec9 code=0x7ffc0000
[   96.144961][  T144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.203821][   T26] audit: type=1326 audit(1759300428.172:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4763 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae06d02ec9 code=0x7ffc0000
[   96.265859][ T4741] chnl_net:caif_netlink_parms(): no params data found
[   96.333409][  T144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.387356][   T26] audit: type=1326 audit(1759300428.182:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4763 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fae06d02ec9 code=0x7ffc0000
[   96.553486][  T144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.722731][  T144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.879557][ T4741] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.886864][ T4741] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.917277][ T4741] device bridge_slave_0 entered promiscuous mode
[   96.964051][ T4741] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.997051][ T4741] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.017861][ T4741] device bridge_slave_1 entered promiscuous mode
[   97.129667][ T1108] Bluetooth: hci3: command 0x0409 tx timeout
[   97.170516][ T4741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   97.247907][ T4741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   97.473305][ T4741] team0: Port device team_slave_0 added
[   97.511088][ T4741] team0: Port device team_slave_1 added
[   97.634309][ T4741] batman_adv: batadv0: Adding interface: batadv_slave_0
[   97.655273][ T4741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   97.786384][ T4741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   97.868146][ T4741] batman_adv: batadv0: Adding interface: batadv_slave_1
[   97.879588][ T4741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   97.944379][ T4741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   98.072282][ T4829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.154'.
[   98.102306][ T4829] netlink: 12 bytes leftover after parsing attributes in process `syz.3.154'.
[   98.159880][ T4829] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   98.169174][ T4829] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   98.178484][ T4829] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   98.187316][ T4829] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   98.370765][ T4829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.154'.
[   98.396516][ T4829] netlink: 12 bytes leftover after parsing attributes in process `syz.3.154'.
[   98.425364][ T4829] Zero length message leads to an empty skb
[   98.465164][ T4741] device hsr_slave_0 entered promiscuous mode
[   98.527993][ T4741] device hsr_slave_1 entered promiscuous mode
[   98.539981][ T4741] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   98.551212][ T4741] Cannot create hsr debugfs directory
[   98.607475][ T4852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.161'.
[   99.086471][ T4870] netlink: 20 bytes leftover after parsing attributes in process `syz.5.167'.
[   99.196525][ T4741] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   99.209800][ T4299] Bluetooth: hci3: command 0x041b tx timeout
[   99.261292][ T4741] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   99.295713][  T144] device hsr_slave_0 left promiscuous mode
[   99.355141][  T144] device hsr_slave_1 left promiscuous mode
[   99.370586][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   99.407985][  T144] batman_adv: batadv0: Removing interface: batadv_slave_0
[   99.446875][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   99.460332][  T144] batman_adv: batadv0: Removing interface: batadv_slave_1
[   99.478656][  T144] device bridge_slave_1 left promiscuous mode
[   99.515581][  T144] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.575111][  T144] device bridge_slave_0 left promiscuous mode
[   99.616375][ T4898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.174'.
[   99.616448][  T144] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.711953][  T144] device veth1_macvtap left promiscuous mode
[   99.739591][  T144] device veth0_macvtap left promiscuous mode
[   99.745863][  T144] device veth1_vlan left promiscuous mode
[   99.759230][  T144] device veth0_vlan left promiscuous mode
[   99.768919][ T4906] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[   99.817815][ T4906] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[   99.920494][ T4903] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[   99.980498][ T4903] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  100.191522][ T4920] process 'syz.3.180' launched './file1' with NULL argv: empty string added
[  100.475489][ T4930] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  100.641877][  T144] team0 (unregistering): Port device team_slave_1 removed
[  100.667022][  T144] team0 (unregistering): Port device team_slave_0 removed
[  100.696345][  T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  100.720649][  T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  100.846087][  T144] bond0 (unregistering): Released all slaves
[  100.917490][ T4741] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  100.928841][ T4741] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  101.265956][ T4741] 8021q: adding VLAN 0 to HW filter on device bond0
[  101.289750][ T1108] Bluetooth: hci3: command 0x040f tx timeout
[  101.310763][ T4950] tipc: Started in network mode
[  101.316294][ T4950] tipc: Node identity ac14140f, cluster identity 4711
[  101.344174][ T4950] tipc: New replicast peer: 255.255.255.255
[  101.355672][ T4950] tipc: Enabled bearer <udp:syz2>, priority 10
[  101.375867][  T433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  101.389265][  T433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  101.411979][ T4741] 8021q: adding VLAN 0 to HW filter on device team0
[  101.419112][ T4961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.189'.
[  101.457635][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  101.524157][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  101.543008][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.550232][ T4271] bridge0: port 1(bridge_slave_0) entered forwarding state
[  101.639141][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  101.663156][ T4969] netlink: 20 bytes leftover after parsing attributes in process `syz.0.193'.
[  101.724156][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  101.747769][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  101.789973][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.797094][ T4271] bridge0: port 2(bridge_slave_1) entered forwarding state
[  101.863437][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  101.865083][ T4981] loop3: detected capacity change from 0 to 512
[  101.910820][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  101.978286][ T4969] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  101.990871][ T4969] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  102.001635][ T4981] EXT4-fs (loop3): inline encryption not supported
[  102.057748][ T4969] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  102.070668][ T4981] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  102.078641][ T4969] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  102.107767][ T4969] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  102.131341][ T4969] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  102.136833][ T4981] EXT4-fs (loop3): 1 truncate cleaned up
[  102.149975][ T4981] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000002000000,block_validity,inlinecrypt,noblock_validity,usrjquota=,,errors=continue. Quota mode: none.
[  102.154481][ T4969] device bridge_slave_0 left promiscuous mode
[  102.239857][ T4969] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.308761][ T4969] device bridge_slave_1 left promiscuous mode
[  102.338651][ T4969] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.398793][ T4969] bond0: (slave bond_slave_0): Releasing backup interface
[  102.465872][ T4969] bond0: (slave bond_slave_1): Releasing backup interface
[  102.471091][ T4190] tipc: Node number set to 2886997007
[  102.608235][ T4969] team0: Port device team_slave_0 removed
[  102.637941][ T4969] team0: Port device team_slave_1 removed
[  102.667472][ T4969] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  102.685545][ T4969] batman_adv: batadv0: Removing interface: batadv_slave_0
[  102.702627][ T4969] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  102.724893][ T4969] batman_adv: batadv0: Removing interface: batadv_slave_1
[  102.772534][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  102.803398][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  102.861474][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  102.890319][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  102.916547][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  102.957253][ T4996] netlink: 28 bytes leftover after parsing attributes in process `syz.5.199'.
[  103.002681][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  103.017058][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  103.067115][ T4741] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  103.103801][ T5005] syz.0.202 uses obsolete (PF_INET,SOCK_PACKET)
[  103.141665][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  103.192049][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  103.214836][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  103.369599][ T4190] Bluetooth: hci3: command 0x0419 tx timeout
[  103.865296][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  103.934708][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  103.981384][ T4741] 8021q: adding VLAN 0 to HW filter on device batadv0
[  104.081515][ T5045] device syzkaller1 entered promiscuous mode
[  104.273048][ T5053] bridge0: port 1(bridge_slave_0) entered forwarding state
[  105.008850][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  105.034496][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  105.151202][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  105.177857][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  105.212175][ T4741] device veth0_vlan entered promiscuous mode
[  105.220976][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  105.240734][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  105.265232][ T4741] device veth1_vlan entered promiscuous mode
[  105.402375][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  105.430904][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  105.440735][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  105.461245][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  105.552485][ T4741] device veth0_macvtap entered promiscuous mode
[  105.558017][ T5096] loop0: detected capacity change from 0 to 512
[  105.605330][ T4741] device veth1_macvtap entered promiscuous mode
[  105.681749][ T4741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  105.715311][ T4741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.752749][ T5105] MD5 Hash mismatch for [fe80::bb]:0->[ff02::1]:20002 L3 index 0
[  105.760959][ T4741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  105.798096][ T4741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.834617][ T4741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  105.888481][ T4741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.923151][ T4741] batman_adv: batadv0: Interface activated: batadv_slave_0
[  105.955837][ T4741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  105.968301][ T4741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.978368][ T4741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  105.991891][ T4741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.991966][ T5096] EXT4-fs (loop0): inline encryption not supported
[  106.001955][ T4741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.039112][ T4741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.089893][ T5096] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  106.102116][ T4741] batman_adv: batadv0: Interface activated: batadv_slave_1
[  106.126143][  T433] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  106.144376][ T5096] EXT4-fs (loop0): 1 truncate cleaned up
[  106.145500][  T433] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  106.219521][ T5096] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000002000000,block_validity,inlinecrypt,noblock_validity,usrjquota=,,errors=continue. Quota mode: none.
[  106.242404][  T433] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  106.253664][  T433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  106.264779][  T433] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  106.278362][  T433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  106.310736][ T4741] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.339734][ T4741] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.349511][ T4741] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.360033][ T4741] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.397650][ T5121] netlink: 52 bytes leftover after parsing attributes in process `syz.5.233'.
[  106.479601][ T5121] batman_adv: batadv0: Adding interface: dummy0
[  106.509778][ T5121] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  106.582975][ T5121] batman_adv: batadv0: Interface activated: dummy0
[  106.647974][ T5124] batadv0: mtu less than device minimum
[  106.680533][ T5124] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  106.694208][ T5124] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  106.706927][ T5124] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  106.719701][ T5124] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  106.733074][ T5124] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  106.747069][ T5124] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  106.759937][ T5124] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  106.772773][ T5124] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  107.030474][  T144] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  107.042202][  T144] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.125016][  T433] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.177211][  T433] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.202143][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  107.233193][  T144] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  107.266207][  T144] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.362854][ T4271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.397914][ T4271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.492087][  T144] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  107.513454][  T144] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.537358][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  107.652104][  T144] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  107.693014][  T144] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.743086][ T5107] chnl_net:caif_netlink_parms(): no params data found
[  107.930693][ T1108] Bluetooth: hci2: command 0x0409 tx timeout
[  108.055739][ T5174] netlink: 48 bytes leftover after parsing attributes in process `syz.6.243'.
[  108.174445][ T5107] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.187193][ T5179] netlink: 4 bytes leftover after parsing attributes in process `syz.4.245'.
[  108.220176][ T5107] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.235238][ T5107] device bridge_slave_0 entered promiscuous mode
[  108.357174][ T5107] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.428075][ T5107] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.456355][ T5107] device bridge_slave_1 entered promiscuous mode
[  108.632134][ T5107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  108.683129][ T5107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  108.950756][ T5107] team0: Port device team_slave_0 added
[  108.972727][ T5107] team0: Port device team_slave_1 added
[  109.076879][ T5107] batman_adv: batadv0: Adding interface: batadv_slave_0
[  109.094470][ T5107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  109.199911][ T5107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  109.232309][ T5107] batman_adv: batadv0: Adding interface: batadv_slave_1
[  109.252896][ T5107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  109.331665][ T5107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  109.551872][ T5107] device hsr_slave_0 entered promiscuous mode
[  109.567216][ T5107] device hsr_slave_1 entered promiscuous mode
[  109.576213][ T5107] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  109.611113][ T5107] Cannot create hsr debugfs directory
[  110.009752][ T4190] Bluetooth: hci2: command 0x041b tx timeout
[  110.084801][ T5249] netlink: 44 bytes leftover after parsing attributes in process `syz.5.267'.
[  110.088247][ T5243] tipc: Started in network mode
[  110.104172][ T5243] tipc: Node identity 0a6ecacc9a5, cluster identity 4711
[  110.111831][ T5243] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  110.165247][ T5243] device syzkaller0 entered promiscuous mode
[  110.245771][ T5243] tipc: Resetting bearer <eth:syzkaller0>
[  110.282449][  T144] device hsr_slave_0 left promiscuous mode
[  110.309874][  T144] device hsr_slave_1 left promiscuous mode
[  110.362411][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  110.390957][  T144] batman_adv: batadv0: Removing interface: batadv_slave_0
[  110.416480][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  110.436017][  T144] batman_adv: batadv0: Removing interface: batadv_slave_1
[  110.444726][ T5263] loop5: detected capacity change from 0 to 512
[  110.458813][  T144] device bridge_slave_1 left promiscuous mode
[  110.477083][  T144] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.506901][ T5263] EXT4-fs (loop5): inline encryption not supported
[  110.521869][  T144] device bridge_slave_0 left promiscuous mode
[  110.529830][  T144] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.538869][ T5263] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  110.561163][  T144] device veth1_macvtap left promiscuous mode
[  110.567278][  T144] device veth0_macvtap left promiscuous mode
[  110.586301][ T5263] EXT4-fs (loop5): 1 truncate cleaned up
[  110.598598][ T5263] EXT4-fs (loop5): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000002000000,block_validity,inlinecrypt,noblock_validity,usrjquota=,,errors=continue. Quota mode: none.
[  110.612352][  T144] device veth1_vlan left promiscuous mode
[  110.674416][  T144] device veth0_vlan left promiscuous mode
[  111.229624][ T4299] tipc: Node number set to 2420034252
[  111.341593][  T144] team0 (unregistering): Port device team_slave_1 removed
[  111.365796][  T144] team0 (unregistering): Port device team_slave_0 removed
[  111.374401][ T4190] Bluetooth: hci0: command 0x0409 tx timeout
[  111.408447][  T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  111.426905][  T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  111.505834][  T144] bond0 (unregistering): Released all slaves
[  111.582691][ T5242] tipc: Resetting bearer <eth:syzkaller0>
[  111.598334][ T5242] tipc: Disabling bearer <eth:syzkaller0>
[  111.708789][ T5107] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  111.754974][ T5220] chnl_net:caif_netlink_parms(): no params data found
[  111.782825][ T5107] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  111.822692][ T5107] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  111.915095][ T5107] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  112.099623][ T1108] Bluetooth: hci2: command 0x040f tx timeout
[  112.142715][ T5220] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.190134][ T5220] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.198463][ T5220] device bridge_slave_0 entered promiscuous mode
[  112.270996][ T5220] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.299111][ T5220] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.317831][ T5220] device bridge_slave_1 entered promiscuous mode
[  112.471870][ T5220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  112.553849][ T5220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  112.616947][ T5107] 8021q: adding VLAN 0 to HW filter on device bond0
[  112.773669][ T5107] 8021q: adding VLAN 0 to HW filter on device team0
[  112.820069][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  112.837033][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  112.871551][ T5220] team0: Port device team_slave_0 added
[  112.887480][ T5316] net_ratelimit: 11 callbacks suppressed
[  112.887496][ T5316] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[  112.955928][ T5220] team0: Port device team_slave_1 added
[  113.015609][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  113.042480][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  113.072028][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.079402][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[  113.118350][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  113.174331][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  113.260423][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  113.285534][ T5077] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.292795][ T5077] bridge0: port 2(bridge_slave_1) entered forwarding state
[  113.379846][ T5220] batman_adv: batadv0: Adding interface: batadv_slave_0
[  113.393382][ T5336] loop6: detected capacity change from 0 to 512
[  113.411287][ T5220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  113.456152][ T5220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  113.460459][ T4190] Bluetooth: hci0: command 0x041b tx timeout
[  113.478949][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  113.508605][ T5338] netlink: 'syz.4.287': attribute type 1 has an invalid length.
[  113.522763][ T5336] EXT4-fs (loop6): inline encryption not supported
[  113.539849][ T5336] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  113.552684][ T5220] batman_adv: batadv0: Adding interface: batadv_slave_1
[  113.572975][ T5220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  113.582826][ T5336] EXT4-fs (loop6): 1 truncate cleaned up
[  113.608147][ T5220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  113.619510][ T5336] EXT4-fs (loop6): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000002000000,block_validity,inlinecrypt,noblock_validity,usrjquota=,,errors=continue. Quota mode: none.
[  113.660262][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  113.699787][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  113.753321][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  113.811643][ T5339] bond1: (slave ip6gretap1): making interface the new active one
[  113.836105][ T5339] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  113.855536][ T5339] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  113.884846][ T5339] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  113.938257][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  113.981277][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  114.136178][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  114.170528][ T4299] Bluetooth: hci2: command 0x0419 tx timeout
[  114.253975][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  114.272065][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  114.436272][ T5107] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  114.510353][ T5107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  114.558915][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  114.600447][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  114.740000][ T2289] Bluetooth: hci4: command 0x0409 tx timeout
[  114.777309][ T5220] device hsr_slave_0 entered promiscuous mode
[  114.817536][ T5220] device hsr_slave_1 entered promiscuous mode
[  114.847724][ T5220] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  114.899281][ T5220] Cannot create hsr debugfs directory
[  115.155804][ T5308] chnl_net:caif_netlink_parms(): no params data found
[  115.529716][    T7] Bluetooth: hci0: command 0x040f tx timeout
[  115.578142][ T5353] ODEBUG: Out of memory. ODEBUG disabled
[  115.626567][ T5308] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.639844][ T5308] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.655779][ T5308] device bridge_slave_0 entered promiscuous mode
[  115.689008][ T5107] 8021q: adding VLAN 0 to HW filter on device batadv0
[  115.775354][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  115.793490][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  115.824443][ T5308] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.833784][ T5308] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.865414][ T5308] device bridge_slave_1 entered promiscuous mode
[  115.990914][ T5308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  116.038235][ T5308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  116.185627][ T5308] team0: Port device team_slave_0 added
[  116.203711][ T5220] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  116.227196][ T5308] team0: Port device team_slave_1 added
[  116.293996][ T5220] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  116.388171][ T5220] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  116.413739][ T5369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  116.430536][ T5369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  116.454497][ T5308] batman_adv: batadv0: Adding interface: batadv_slave_0
[  116.464950][ T5308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  116.493010][ T5308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  116.524032][ T5220] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  116.558520][ T5308] batman_adv: batadv0: Adding interface: batadv_slave_1
[  116.576478][ T5308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  116.615673][ T5308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  116.658646][  T144] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.745508][ T5107] device veth0_vlan entered promiscuous mode
[  116.783101][  T144] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.797663][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  116.810516][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  116.821087][ T1111] Bluetooth: hci4: command 0x041b tx timeout
[  116.859655][ T5421] loop4: detected capacity change from 0 to 512
[  116.871362][ T5421] EXT4-fs (loop4): inline encryption not supported
[  116.889038][ T5421] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  116.914076][ T5377] chnl_net:caif_netlink_parms(): no params data found
[  116.935129][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  116.945327][ T5421] EXT4-fs (loop4): 1 truncate cleaned up
[  116.967406][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  116.967946][ T5421] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000002000000,block_validity,inlinecrypt,noblock_validity,usrjquota=,,errors=continue. Quota mode: none.
[  116.990332][ T5107] device veth1_vlan entered promiscuous mode
[  117.017866][ T5308] device hsr_slave_0 entered promiscuous mode
[  117.040015][ T5308] device hsr_slave_1 entered promiscuous mode
[  117.047177][ T5308] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  117.056545][ T5308] Cannot create hsr debugfs directory
[  117.075853][  T144] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.227555][ T5369] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  117.236103][ T5369] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  117.452129][  T144] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.533337][ T4250] Bluetooth: hci3: command 0x0409 tx timeout
[  117.538671][ T5107] device veth0_macvtap entered promiscuous mode
[  117.590351][ T5377] bridge0: port 1(bridge_slave_0) entered blocking state
[  117.597686][ T5377] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.609561][ T4299] Bluetooth: hci0: command 0x0419 tx timeout
[  117.616939][ T5377] device bridge_slave_0 entered promiscuous mode
[  117.649964][ T5369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  117.658757][ T5369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  117.677563][ T5369] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  117.767675][ T5107] device veth1_macvtap entered promiscuous mode
[  117.785836][ T5377] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.820018][ T5377] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.828437][ T5377] device bridge_slave_1 entered promiscuous mode
[  117.978149][ T5220] 8021q: adding VLAN 0 to HW filter on device bond0
[  117.990000][ T5377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  118.000653][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  118.014276][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  118.026705][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  118.038253][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  118.048579][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  118.059510][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  118.071484][ T5107] batman_adv: batadv0: Interface activated: batadv_slave_0
[  118.102122][ T5377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  118.132423][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  118.141969][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  118.151170][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  118.203033][ T5377] team0: Port device team_slave_0 added
[  118.217423][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  118.232480][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  118.245136][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  118.257574][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  118.268420][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  118.279796][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  118.292474][ T5107] batman_adv: batadv0: Interface activated: batadv_slave_1
[  118.310794][ T5377] team0: Port device team_slave_1 added
[  118.320904][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  118.390130][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  118.409908][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  118.418277][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  118.430944][ T5220] 8021q: adding VLAN 0 to HW filter on device team0
[  118.441181][ T5107] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  118.450790][ T5107] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  118.461867][ T5107] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  118.471053][ T5107] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  118.528367][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  118.540223][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  118.549068][ T5077] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.556331][ T5077] bridge0: port 1(bridge_slave_0) entered forwarding state
[  118.567145][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  118.578390][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  118.587547][ T5077] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.594683][ T5077] bridge0: port 2(bridge_slave_1) entered forwarding state
[  118.612094][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  118.636821][  T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.672910][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  118.690493][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  118.722349][ T5377] batman_adv: batadv0: Adding interface: batadv_slave_0
[  118.738160][ T5377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  118.766665][ T5377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  118.783838][ T5377] batman_adv: batadv0: Adding interface: batadv_slave_1
[  118.794829][ T5377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  118.822749][ T5377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  118.846209][  T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.859262][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  118.871883][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  118.881090][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  118.889676][ T4299] Bluetooth: hci4: command 0x040f tx timeout
[  118.938233][ T5377] device hsr_slave_0 entered promiscuous mode
[  118.945691][ T5377] device hsr_slave_1 entered promiscuous mode
[  118.953892][ T5377] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  118.961840][ T5377] Cannot create hsr debugfs directory
[  119.017926][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  119.040553][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  119.062626][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  119.078934][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  119.123821][ T5220] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  119.145850][ T5220] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  119.175690][  T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.212007][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  119.220882][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  119.258071][  T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.353278][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.399565][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.431509][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  119.570038][ T5077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.578496][ T5077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.612219][ T1111] Bluetooth: hci3: command 0x041b tx timeout
[  119.679404][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  119.711946][ T5445] chnl_net:caif_netlink_parms(): no params data found
[  119.768985][ T5220] 8021q: adding VLAN 0 to HW filter on device batadv0
[  119.822130][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  119.834630][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  119.984315][  T144] tipc: Disabling bearer <udp:syz2>
[  119.995005][  T144] tipc: Left network mode
[  120.001215][ T5445] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.008358][ T5445] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.122119][ T5445] device bridge_slave_0 entered promiscuous mode
[  120.341151][ T5445] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.348722][ T5445] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.367552][ T5445] device bridge_slave_1 entered promiscuous mode
[  120.391742][ T5308] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  120.522188][ T5308] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  120.685845][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  120.697462][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  120.730080][ T4228] Bluetooth: hci1: command 0x0409 tx timeout
[  120.736382][ T5308] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  120.752054][ T5445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  120.770158][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  120.780272][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  120.792937][ T5220] device veth0_vlan entered promiscuous mode
[  120.801696][ T5308] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  120.917747][ T5445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  120.966087][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  120.975108][ T4250] Bluetooth: hci4: command 0x0419 tx timeout
[  120.983060][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  121.017120][ T5511] netlink: 'syz.7.305': attribute type 5 has an invalid length.
[  121.051833][ T5220] device veth1_vlan entered promiscuous mode
[  121.196683][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  121.213340][ T5445] team0: Port device team_slave_0 added
[  121.225462][ T5445] team0: Port device team_slave_1 added
[  121.345337][ T5369] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  121.356511][ T5369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  121.365951][ T5369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  121.380262][ T5220] device veth0_macvtap entered promiscuous mode
[  121.401802][ T5445] batman_adv: batadv0: Adding interface: batadv_slave_0
[  121.409183][ T5445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  121.435627][ T5445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  121.449019][ T5445] batman_adv: batadv0: Adding interface: batadv_slave_1
[  121.456968][ T5445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  121.485375][ T5445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  121.521102][ T5220] device veth1_macvtap entered promiscuous mode
[  121.546346][ T5369] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  121.558104][ T5369] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  121.638080][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  121.653958][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.670198][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  121.689591][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.700337][ T4228] Bluetooth: hci3: command 0x040f tx timeout
[  121.709013][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  121.720280][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.730222][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  121.741051][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.752599][ T5220] batman_adv: batadv0: Interface activated: batadv_slave_0
[  121.774001][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  121.787631][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  121.825203][ T5445] device hsr_slave_0 entered promiscuous mode
[  121.832629][ T5445] device hsr_slave_1 entered promiscuous mode
[  121.840215][ T5445] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  121.847810][ T5445] Cannot create hsr debugfs directory
[  121.898011][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  121.911398][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.922618][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  121.933913][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.945959][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  121.956698][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.966692][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  121.978056][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.990568][ T5220] batman_adv: batadv0: Interface activated: batadv_slave_1
[  122.022098][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  122.032823][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  122.045094][ T5377] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  122.057380][ T5220] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  122.066841][ T5220] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  122.076121][ T5220] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  122.085612][ T5220] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  122.112841][ T5308] 8021q: adding VLAN 0 to HW filter on device bond0
[  122.120780][ T5377] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  122.135060][ T5377] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  122.146313][ T5377] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  122.188508][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  122.197006][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  122.236874][ T5308] 8021q: adding VLAN 0 to HW filter on device team0
[  122.269845][ T5369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  122.278601][ T5369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  122.292558][ T5369] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.299711][ T5369] bridge0: port 1(bridge_slave_0) entered forwarding state
[  122.368132][ T5369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  122.376814][ T5369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  122.387854][ T5369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  122.397986][ T5369] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.405104][ T5369] bridge0: port 2(bridge_slave_1) entered forwarding state
[  122.416509][ T5369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  122.425649][ T5369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  122.508244][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.547270][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.581871][ T5369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  122.592451][ T5369] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  122.601541][ T5369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  122.609608][ T5369] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  122.628209][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  122.637542][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  122.691348][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  122.712184][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  122.805008][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  122.815155][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  122.818724][ T5369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.832800][ T2289] Bluetooth: hci1: command 0x041b tx timeout
[  122.870565][ T5369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.934665][ T5308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  122.953459][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  122.973607][ T5546] netlink: 48 bytes leftover after parsing attributes in process `syz.7.314'.
[  123.012010][ T5546] netlink: 4 bytes leftover after parsing attributes in process `syz.7.314'.
[  123.088332][ T5546] device hsr_slave_1 left promiscuous mode
[  123.218890][ T5552] netlink: 12 bytes leftover after parsing attributes in process `syz.8.255'.
[  123.301978][ T5377] 8021q: adding VLAN 0 to HW filter on device bond0
[  123.381905][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  123.400685][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  123.423045][ T5377] 8021q: adding VLAN 0 to HW filter on device team0
[  123.537211][ T5308] 8021q: adding VLAN 0 to HW filter on device batadv0
[  123.597029][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  123.606297][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  123.640300][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  123.667822][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  123.690655][ T4292] bridge0: port 1(bridge_slave_0) entered blocking state
[  123.697771][ T4292] bridge0: port 1(bridge_slave_0) entered forwarding state
[  123.730310][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  123.740170][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  123.748787][ T4292] bridge0: port 2(bridge_slave_1) entered blocking state
[  123.755965][ T4292] bridge0: port 2(bridge_slave_1) entered forwarding state
[  123.772085][ T4228] Bluetooth: hci3: command 0x0419 tx timeout
[  123.793832][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  123.884196][  T144] device hsr_slave_0 left promiscuous mode
[  123.900279][  T144] device hsr_slave_1 left promiscuous mode
[  123.908117][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  123.926144][  T144] batman_adv: batadv0: Removing interface: batadv_slave_0
[  123.935538][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  123.943218][  T144] batman_adv: batadv0: Removing interface: batadv_slave_1
[  123.958561][  T144] device bridge_slave_1 left promiscuous mode
[  123.967707][  T144] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.985609][  T144] device bridge_slave_0 left promiscuous mode
[  123.997774][  T144] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.028188][  T144] device hsr_slave_0 left promiscuous mode
[  124.044117][  T144] device hsr_slave_1 left promiscuous mode
[  124.067401][  T144] device veth1_macvtap left promiscuous mode
[  124.073849][  T144] device veth0_macvtap left promiscuous mode
[  124.080481][  T144] device veth1_vlan left promiscuous mode
[  124.086302][  T144] device veth0_vlan left promiscuous mode
[  124.100180][  T144] device veth1_macvtap left promiscuous mode
[  124.106258][  T144] device veth0_macvtap left promiscuous mode
[  124.112880][  T144] device veth1_vlan left promiscuous mode
[  124.118797][  T144] device veth0_vlan left promiscuous mode
[  124.444971][  T144] team0 (unregistering): Port device team_slave_1 removed
[  124.461284][  T144] team0 (unregistering): Port device team_slave_0 removed
[  124.486473][  T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  124.505282][  T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  124.586347][  T144] bond0 (unregistering): Released all slaves
[  124.805868][  T144] bond0 (unregistering): Released all slaves
[  124.875979][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  124.885302][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  124.894918][ T2289] Bluetooth: hci1: command 0x040f tx timeout
[  124.901948][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  124.912856][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  124.922398][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  124.946617][ T5445] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  125.026611][ T5377] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  125.100244][ T5377] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  125.130471][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  125.146770][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  125.179603][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  125.196560][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  125.211045][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  125.260338][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  125.268874][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  125.302915][ T5445] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  125.324419][ T5445] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  125.404651][ T5445] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  125.548120][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  125.570286][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  125.609881][ T5308] device veth0_vlan entered promiscuous mode
[  125.641381][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  125.660501][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  125.696681][ T5308] device veth1_vlan entered promiscuous mode
[  125.719635][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  125.742035][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  125.750684][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  125.809577][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  125.817868][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  125.827529][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  125.870060][ T5377] 8021q: adding VLAN 0 to HW filter on device batadv0
[  125.877526][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  125.887975][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  125.951607][ T5308] device veth0_macvtap entered promiscuous mode
[  125.997058][ T5308] device veth1_macvtap entered promiscuous mode
[  126.024440][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  126.048132][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  126.084991][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  126.189623][ T5445] 8021q: adding VLAN 0 to HW filter on device bond0
[  126.223753][ T5369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  126.260238][ T5369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  126.268949][ T5369] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  126.287956][ T5369] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  126.307547][ T5445] 8021q: adding VLAN 0 to HW filter on device team0
[  126.333395][ T5627] netlink: 12 bytes leftover after parsing attributes in process `syz.7.336'.
[  126.372036][ T5377] device veth0_vlan entered promiscuous mode
[  126.380961][ T5308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  126.399905][ T5308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  126.430601][ T5308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  126.454773][ T5308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  126.465027][ T5308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  126.475960][ T5308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  126.486099][ T5308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  126.498189][ T5308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  126.521639][ T5308] batman_adv: batadv0: Interface activated: batadv_slave_0
[  126.549542][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  126.558192][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  126.597927][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  126.618531][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  126.656822][ T5308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  126.675410][ T5308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  126.686995][ T5308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  126.697933][ T5308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  126.708138][ T5308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  126.731105][ T5308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  126.741784][ T5308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  126.754401][ T5308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  126.799121][ T5308] batman_adv: batadv0: Interface activated: batadv_slave_1
[  126.821753][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  126.832073][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  126.850300][ T5077] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.857463][ T5077] bridge0: port 1(bridge_slave_0) entered forwarding state
[  126.873346][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  126.882905][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  126.900668][ T5308] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  126.912996][ T5308] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  126.922648][ T5308] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  126.934632][ T5308] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  126.970713][ T2289] Bluetooth: hci1: command 0x0419 tx timeout
[  126.981125][ T5377] device veth1_vlan entered promiscuous mode
[  126.991988][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  127.010356][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  127.034963][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  127.081444][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  127.092084][ T5653] IPVS: wlc: FWM 3 0x00000003 - no destination available
[  127.095609][ T5077] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.100235][    C1] IPVS: wlc: FWM 3 0x00000003 - no destination available
[  127.106400][ T5077] bridge0: port 2(bridge_slave_1) entered forwarding state
[  127.207862][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  127.246359][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  127.274021][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  127.291941][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  127.301491][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  127.313463][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  127.322893][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  127.347989][ T5659] netlink: 8 bytes leftover after parsing attributes in process `syz.8.350'.
[  127.363662][ T5660] netlink: 16 bytes leftover after parsing attributes in process `syz.8.350'.
[  127.402346][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  127.413052][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  127.428944][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  127.438729][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  127.474430][ T5445] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  127.551093][ T5077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.559293][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  127.578416][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  127.579870][ T5077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.622218][ T5377] device veth0_macvtap entered promiscuous mode
[  127.652679][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  127.653191][ T5077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.679318][ T5077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.691011][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  127.731152][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  127.755692][ T5377] device veth1_macvtap entered promiscuous mode
[  127.847958][ T5377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  127.897740][ T5377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.940987][ T5377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  127.962725][ T5377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.990618][ T5377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  128.005171][ T5377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  128.018493][ T5377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  128.038076][ T5377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  128.048597][ T5377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  128.062078][ T5377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  128.074061][ T5377] batman_adv: batadv0: Interface activated: batadv_slave_0
[  128.109857][ T5377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  128.149164][ T5377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  128.169005][ T5377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  128.190094][ T5377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  128.211113][ T5377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  128.247782][ T5377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  128.269540][ T5377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  128.306617][ T5377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  128.325802][ T5377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  128.338404][ T5377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  128.358476][ T5377] batman_adv: batadv0: Interface activated: batadv_slave_1
[  128.376727][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  128.387708][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  128.405442][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  128.419051][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  128.440516][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  128.528685][ T5377] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  128.565187][ T5377] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  128.607063][ T5377] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  128.624293][ T5377] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  128.641021][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  128.648678][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  128.728024][ T5445] 8021q: adding VLAN 0 to HW filter on device batadv0
[  128.894772][ T5697] netlink: 16 bytes leftover after parsing attributes in process `syz.7.363'.
[  129.049705][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  129.058732][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  129.082579][ T5701] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  129.092526][ T5369] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.128981][ T5369] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.152783][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  129.274256][ T5369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.282624][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  129.283453][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  129.339690][ T5369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.414544][ T5445] device veth0_vlan entered promiscuous mode
[  129.436346][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  129.470505][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  129.521167][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  129.606274][ T5445] device veth1_vlan entered promiscuous mode
[  129.777694][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  129.795720][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  129.831781][ T5445] device veth0_macvtap entered promiscuous mode
[  129.877063][ T5445] device veth1_macvtap entered promiscuous mode
[  130.004333][ T5445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  130.067932][ T5445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.094362][ T5445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  130.122523][ T5445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.155774][ T5445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  130.200388][ T5445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.260911][ T5445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  130.303733][ T5445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.329170][ T5445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  130.351164][ T5445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.382738][ T5445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  130.447051][ T5445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.488166][ T5445] batman_adv: batadv0: Interface activated: batadv_slave_0
[  130.603995][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  130.622328][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  130.653298][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  130.711398][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  130.737700][ T5445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  130.767906][ T5445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.793625][ T5445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  130.810972][ T5445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.828932][ T5445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  130.856052][ T5445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.879542][ T5445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  130.900727][ T5445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.917541][ T5445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  130.938314][ T5445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.956668][ T5445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  130.977408][ T5445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.994808][ T5445] batman_adv: batadv0: Interface activated: batadv_slave_1
[  131.050696][ T5744] block device autoloading is deprecated and will be removed.
[  131.052823][ T5736] device syzkaller1 entered promiscuous mode
[  131.098835][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  131.111159][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  131.153732][ T5445] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  131.192411][ T5445] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  131.216932][ T5445] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  131.236380][ T5445] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  131.509009][ T5077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.519782][ T5077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.590339][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  131.623323][ T5369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.651448][ T5369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.752134][ T5369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  131.865190][ T5763] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  132.438451][  T144] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.591206][  T144] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.718319][  T144] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.953840][  T144] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.052980][ T1431] ieee802154 phy0 wpan0: encryption failed: -22
[  133.582568][  T144] tipc: Left network mode
[  133.704459][ T5804] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  133.770549][ T5804] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  133.821708][ T5799] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  133.909577][ T5799] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  133.978277][  T144] bond1: (slave ip6gretap1): Releasing active interface
[  134.099634][ T1111] Bluetooth: hci1: command 0x0405 tx timeout
[  135.610487][  T144] device hsr_slave_0 left promiscuous mode
[  135.715463][  T144] device hsr_slave_1 left promiscuous mode
[  135.784314][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  135.796788][  T144] batman_adv: batadv0: Removing interface: batadv_slave_0
[  135.822401][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  135.840391][  T144] batman_adv: batadv0: Removing interface: batadv_slave_1
[  135.885676][  T144] device bridge_slave_1 left promiscuous mode
[  135.893406][  T144] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.906694][  T144] device bridge_slave_0 left promiscuous mode
[  135.917211][  T144] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.965497][  T144] device veth1_macvtap left promiscuous mode
[  135.978456][  T144] device veth0_macvtap left promiscuous mode
[  135.993064][  T144] device veth1_vlan left promiscuous mode
[  136.004799][  T144] device veth0_vlan left promiscuous mode
[  136.317999][  T144] bond1 (unregistering): Released all slaves
[  136.542758][  T144] team0 (unregistering): Port device team_slave_1 removed
[  136.608916][ T5895] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  136.650282][  T144] team0 (unregistering): Port device team_slave_0 removed
[  136.697515][  T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  136.775739][  T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  136.939144][  T144] bond0 (unregistering): Released all slaves
[  137.161915][ T5915] dlm: no local IP address has been set
[  137.167904][ T5915] dlm: cannot start dlm midcomms -107
[  137.737446][ T5934] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  137.893391][ T5931] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  137.962233][ T5931] kvm: pic: level sensitive irq not supported
[  137.963626][ T5931] kvm: pic: non byte read
[  138.001808][ T5931] kvm: pic: level sensitive irq not supported
[  138.002299][ T5931] kvm: pic: non byte read
[  138.045457][ T5931] kvm: pic: level sensitive irq not supported
[  138.045535][ T5931] kvm: pic: non byte read
[  140.479625][ T4250] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  140.769470][ T4250] usb 10-1: Using ep0 maxpacket: 8
[  140.929733][ T4250] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  140.978012][ T4250] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  141.026449][ T4250] usb 10-1: config 0 interface 0 has no altsetting 0
[  141.055698][ T4250] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  141.095643][ T4250] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.189029][ T4250] usb 10-1: config 0 descriptor??
[  141.557915][ T6072] netlink: 4 bytes leftover after parsing attributes in process `syz.7.449'.
[  141.706117][ T4250] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0
[  141.714549][ T6079] capability: warning: `syz.8.450' uses deprecated v2 capabilities in a way that may be insecure
[  141.734815][ T4250] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0
[  141.756867][ T4250] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0
[  141.785673][ T4250] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0
[  141.817190][ T4250] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0
[  141.846559][ T4250] mcp2221 0003:04D8:00DD.0001: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.9-1/input0
[  142.083021][ T4250] usb 10-1: USB disconnect, device number 2
[  142.369476][    T7] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  142.529765][ T6104] netlink: 40 bytes leftover after parsing attributes in process `syz.9.456'.
[  142.619490][ T1108] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  142.629623][    T7] usb 9-1: Using ep0 maxpacket: 16
[  142.749702][    T7] usb 9-1: config 0 has no interfaces?
[  142.833378][    T7] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  142.849715][    T7] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  142.860173][ T1108] usb 8-1: Using ep0 maxpacket: 32
[  142.888486][    T7] usb 9-1: SerialNumber: syz
[  142.905101][    T7] usb 9-1: config 0 descriptor??
[  142.915004][ T6120] 9pnet_virtio: no channels available for device syz
[  142.980137][ T1108] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  143.169918][ T1108] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  143.185643][ T1108] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  143.223360][ T1108] usb 8-1: Product: syz
[  143.247672][ T1108] usb 8-1: Manufacturer: syz
[  143.261182][ T1108] usb 8-1: SerialNumber: syz
[  143.268900][ T5477] usb 9-1: USB disconnect, device number 2
[  143.302478][ T1108] usb 8-1: config 0 descriptor??
[  143.369840][ T6093] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  143.391273][ T1108] hub 8-1:0.0: bad descriptor, ignoring hub
[  143.397785][ T1108] hub: probe of 8-1:0.0 failed with error -5
[  143.720294][ T4250] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[  143.827976][ T6175] netlink: 32 bytes leftover after parsing attributes in process `syz.8.474'.
[  144.109513][ T6185] overlayfs: failed to set xattr on upper
[  144.115595][ T6185] overlayfs: ...falling back to index=off,metacopy=off.
[  144.132964][ T4250] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  144.154675][ T4250] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  144.188508][ T4250] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  144.209510][ T4250] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.219562][ T4190] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  144.333905][ T6190] APIC base relocation is unsupported by KVM
[  144.473011][ T4190] usb 9-1: Using ep0 maxpacket: 16
[  144.508197][ T1111] usb 8-1: USB disconnect, device number 2
[  144.514408][ T4250] usb 3-1: usb_control_msg returned -32
[  144.520823][ T4250] usbtmc 3-1:16.0: can't read capabilities
[  144.613578][ T4190] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  144.790515][ T4190] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  144.819502][ T4190] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.837962][ T4190] usb 9-1: Product: syz
[  144.842964][ T4190] usb 9-1: Manufacturer: syz
[  144.847606][ T4190] usb 9-1: SerialNumber: syz
[  144.884374][ T4190] usb 9-1: config 0 descriptor??
[  144.942860][ T4190] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  144.989530][ T4190] em28xx 9-1:0.0: DVB interface 0 found: bulk
[  145.612658][ T4190] em28xx 9-1:0.0: unknown em28xx chip ID (0)
[  145.929718][ T6220] comedi comedi3: reset error (fatal)
[  146.120282][ T4190] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  146.150422][ T4190] em28xx 9-1:0.0: board has no eeprom
[  146.279588][ T4190] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  146.298751][ T6271] netlink: 60 bytes leftover after parsing attributes in process `syz.1.492'.
[  146.325601][ T4190] em28xx 9-1:0.0: dvb set to bulk mode.
[  146.360271][ T5477] em28xx 9-1:0.0: Binding DVB extension
[  146.424588][ T4190] usb 9-1: USB disconnect, device number 3
[  146.464869][ T4190] em28xx 9-1:0.0: Disconnecting em28xx
[  146.560753][ T5477] em28xx 9-1:0.0: Registering input extension
[  146.582882][ T4190] em28xx 9-1:0.0: Closing input extension
[  146.769691][ T4190] em28xx 9-1:0.0: Freeing device
[  147.029100][ T4190] usb 3-1: USB disconnect, device number 2
[  147.774984][ T6328] block device autoloading is deprecated and will be removed.
[  147.798788][   T26] kauditd_printk_skb: 1 callbacks suppressed
[  147.798805][   T26] audit: type=1326 audit(1759300480.372:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6319 comm="syz.8.507" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe6f0fd6ec9 code=0x0
[  148.948252][ T6379] tipc: Started in network mode
[  148.997717][ T6379] tipc: Node identity fa184ce4f4a4, cluster identity 4711
[  149.059560][ T6379] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  149.066542][ T6383] device syzkaller0 entered promiscuous mode
[  149.149230][ T6379] tipc: Resetting bearer <eth:syzkaller0>
[  149.171658][ T6387] tipc: Started in network mode
[  149.176609][ T6387] tipc: Node identity , cluster identity 4711
[  149.209780][ T4250] Bluetooth: hci1: command 0x0406 tx timeout
[  149.217533][ T6387] tipc: Failed to obtain node identity
[  149.236791][ T6387] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  149.260357][ T6378] tipc: Resetting bearer <eth:syzkaller0>
[  149.295759][ T6378] tipc: Disabling bearer <eth:syzkaller0>
[  149.492834][ T6389] device syzkaller0 entered promiscuous mode
[  149.758888][ T6407] binder_alloc: 6406: pid 6406 spamming oneway? 2 buffers allocated for a total size of 5384
[  149.788060][ T6409] netlink: 164 bytes leftover after parsing attributes in process `syz.8.531'.
[  149.918202][ T6413] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  150.126196][   T26] audit: type=1326 audit(1759300482.702:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6416 comm="syz.2.535" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff731cd9ec9 code=0x0
[  150.148139][    C1] vkms_vblank_simulate: vblank timer overrun
[  150.351578][ T4191] Bluetooth: Unexpected continuation frame (len 179)
[  150.373714][ T6423] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  150.382428][ T6423] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  150.859741][ T4190] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  151.250094][ T4190] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  151.277282][ T4190] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  151.299126][   T26] audit: type=1326 audit(1759300483.872:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6473 comm="syz.9.548" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7ae599bec9 code=0x0
[  151.325796][ T4190] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.360851][ T4190] usb 2-1: config 0 descriptor??
[  151.709497][ T4190] usbhid 2-1:0.0: can't add hid device: -71
[  151.721020][ T4190] usbhid: probe of 2-1:0.0 failed with error -71
[  151.762494][ T4190] usb 2-1: USB disconnect, device number 2
[  151.826310][ T6489] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  151.838325][ T6489] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  152.003930][ T6503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.555'.
[  152.026081][ T6503] device bridge_slave_1 left promiscuous mode
[  152.045569][ T6503] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.090570][ T6503] device bridge_slave_0 left promiscuous mode
[  152.097006][ T6503] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.203999][ T4190] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  152.296025][ T6521] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  152.449466][ T4190] usb 2-1: Using ep0 maxpacket: 32
[  152.570931][ T4190] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  152.576774][ T6533] kvm: pic: non byte write
[  152.607830][ T4190] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  152.659521][ T4190] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.697355][ T4190] usb 2-1: config 0 descriptor??
[  152.751355][ T4190] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  152.783509][ T6542] block device autoloading is deprecated and will be removed.
[  152.808334][ T4190] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  152.830462][ T6541] md2: error: bitmap file must be a regular file
[  152.972928][ T5481] usb 2-1: USB disconnect, device number 3
[  152.990765][ T5481] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[  153.289497][ T4250] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  153.326208][   T26] audit: type=1326 audit(1759300485.902:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6557 comm="syz.8.570" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe6f0fd6ec9 code=0x0
[  153.559551][ T4250] usb 3-1: Using ep0 maxpacket: 16
[  153.700401][ T4250] usb 3-1: config 0 has no interfaces?
[  153.705999][ T4250] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  153.742026][ T4250] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.791993][ T4250] usb 3-1: config 0 descriptor??
[  153.803765][ T6582] netlink: 'syz.9.575': attribute type 1 has an invalid length.
[  153.878633][ T6582] device bond1 entered promiscuous mode
[  153.887694][ T6582] 8021q: adding VLAN 0 to HW filter on device bond1
[  153.901313][ T6587] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  153.941993][ T6587] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  153.953526][ T6587] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  154.030256][ T6557] delete_channel: no stack
[  154.071232][ T6593] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  154.079126][ T6549] program syz.2.567 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  154.154974][ T4190] usb 3-1: USB disconnect, device number 3
[  154.245995][ T4191] Bluetooth: hci3: ACL packet for unknown connection handle 0
[  154.254283][ T4191] Bluetooth: hci3: SCO packet for unknown connection handle 201
[  155.176483][   T26] audit: type=1326 audit(1759300487.752:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6635 comm="syz.8.591" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe6f0fd6ec9 code=0x0
[  155.239714][ T4250] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  155.839698][ T4250] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  155.849095][ T4250] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.905151][ T4250] usb 8-1: Product: syz
[  155.919427][ T4250] usb 8-1: Manufacturer: syz
[  155.924349][ T4250] usb 8-1: SerialNumber: syz
[  156.001183][ T4250] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  156.166927][  T144] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  156.319468][ T4243] usb 10-1: new full-speed USB device number 3 using dummy_hcd
[  156.602221][ T6707] input: syz1 as /devices/virtual/input/input6
[  156.731590][ T4243] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  156.766306][ T4243] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2
[  156.831045][ T4243] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  156.870729][ T4250] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  156.875742][ T4243] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.935797][ T4243] usb 10-1: config 0 descriptor??
[  157.076141][ T2289] usb 8-1: USB disconnect, device number 3
[  157.165943][ T4243] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  157.179810][ T4243] dvb-usb: bulk message failed: -22 (3/0)
[  157.197867][ T4243] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  157.231136][ T4243] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  157.238741][ T4243] usb 10-1: media controller created
[  157.273054][ T4243] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  157.405639][ T4243] dvb-usb: bulk message failed: -22 (6/0)
[  157.453913][ T4243] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  157.521443][ T4243] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input7
[  157.576495][ T4243] dvb-usb: schedule remote query interval to 150 msecs.
[  157.603808][ T4243] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  157.626347][ T4243] usb 10-1: USB disconnect, device number 3
[  157.703148][ T4243] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  157.712773][ T6744] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  157.733209][ T6744] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  157.939745][ T4250] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive
[  157.947211][ T4250] ath9k_htc: Failed to initialize the device
[  157.953882][ T6756] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[  157.992502][ T2289] usb 8-1: ath9k_htc: USB layer deinitialized
[  158.162165][ T6760] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  158.202973][ T6760] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  159.982408][ T6837] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  160.010069][ T6837] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  160.840398][ T6869] tipc: Started in network mode
[  160.845720][ T6869] tipc: Node identity , cluster identity 4711
[  160.933507][ T6869] tipc: Failed to obtain node identity
[  160.960857][ T6869] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  160.990393][ T6873] device syzkaller0 entered promiscuous mode
[  161.005433][ T5481] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  161.259603][ T5481] usb 10-1: Using ep0 maxpacket: 8
[  161.299707][ T5481] usb 10-1: no configurations
[  161.304597][ T5481] usb 10-1: can't read configurations, error -22
[  161.469475][ T5481] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  161.719486][ T5481] usb 10-1: Using ep0 maxpacket: 8
[  161.759741][ T5481] usb 10-1: no configurations
[  161.764622][ T5481] usb 10-1: can't read configurations, error -22
[  161.801879][ T5481] usb usb10-port1: attempt power cycle
[  162.219531][ T2289] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  162.272473][ T5481] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  162.336552][ T6911] 9pnet_virtio: no channels available for device syz
[  162.344727][ T6910] 9pnet_virtio: no channels available for device syz
[  162.382376][ T5481] usb 10-1: Using ep0 maxpacket: 8
[  162.419747][ T5481] usb 10-1: no configurations
[  162.424508][ T5481] usb 10-1: can't read configurations, error -22
[  162.529537][ T2289] usb 3-1: Using ep0 maxpacket: 16
[  162.599610][ T5481] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  162.679599][ T2289] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  162.689762][ T5481] usb 10-1: Using ep0 maxpacket: 8
[  162.729887][ T5481] usb 10-1: no configurations
[  162.734696][ T5481] usb 10-1: can't read configurations, error -22
[  162.749528][ T5481] usb usb10-port1: unable to enumerate USB device
[  162.917299][ T2289] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  162.933640][ T2289] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.966716][ T2289] usb 3-1: Product: syz
[  162.989659][ T2289] usb 3-1: Manufacturer: syz
[  163.005076][ T2289] usb 3-1: SerialNumber: syz
[  163.041427][ T2289] usb 3-1: config 0 descriptor??
[  163.108807][ T2289] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  163.138671][ T2289] em28xx 3-1:0.0: DVB interface 0 found: bulk
[  163.769647][ T2289] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  163.877723][ T4191] Bluetooth: hci2: ACL packet too small
[  164.052228][ T6955] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  164.419614][ T2289] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  164.427695][ T2289] em28xx 3-1:0.0: board has no eeprom
[  164.629512][ T2289] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  164.637719][ T2289] em28xx 3-1:0.0: dvb set to bulk mode.
[  164.675077][ T4300] em28xx 3-1:0.0: Binding DVB extension
[  164.694855][ T2289] usb 3-1: USB disconnect, device number 4
[  164.735819][ T2289] em28xx 3-1:0.0: Disconnecting em28xx
[  164.747665][ T6975] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  164.756544][ T6975] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  164.765341][ T6975] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  164.774416][ T6975] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  164.847805][ T6970] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  164.884381][ T6970] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  164.897480][ T4300] em28xx 3-1:0.0: Registering input extension
[  164.907180][ T2289] em28xx 3-1:0.0: Closing input extension
[  164.907301][ T6975] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  164.922681][ T6975] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  164.932034][ T6975] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  164.941204][ T6975] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  164.958135][ T2289] em28xx 3-1:0.0: Freeing device
[  165.192842][ T6991] 9pnet_virtio: no channels available for device syz
[  165.679886][ T7005] syz.7.682 (7005) used greatest stack depth: 18592 bytes left
[  166.616079][ T7046] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  166.741524][ T7046] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  167.287880][ T7070] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[  167.295008][ T7070] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  167.341936][ T7070] vhci_hcd vhci_hcd.0: Device attached
[  167.539942][ T4228] vhci_hcd: vhci_device speed not set
[  167.561623][ T7072] vhci_hcd: connection closed
[  167.565015][  T144] vhci_hcd: stop threads
[  167.582637][  T144] vhci_hcd: release socket
[  167.616117][  T144] vhci_hcd: disconnect device
[  167.621219][ T4228] usb 35-1: new full-speed USB device number 2 using vhci_hcd
[  168.869490][ T4243] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  169.179411][ T4243] usb 8-1: Using ep0 maxpacket: 8
[  169.299623][ T4243] usb 8-1: config 0 has no interfaces?
[  169.426126][ T7133] netlink: 16 bytes leftover after parsing attributes in process `syz.9.714'.
[  169.459593][ T4243] usb 8-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[  169.472293][ T4243] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.493026][ T4243] usb 8-1: Product: syz
[  169.505232][ T4243] usb 8-1: Manufacturer: syz
[  169.524305][ T4243] usb 8-1: SerialNumber: syz
[  169.552607][ T4243] usb 8-1: config 0 descriptor??
[  170.022966][ T7156] netlink: zone id is out of range
[  170.945658][ T7187] binder_alloc: 7186: binder_alloc_buf size 16384 failed, no address space
[  170.959921][ T7187] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  171.409863][ T7207] binder_alloc: 7206: binder_alloc_buf size 4096 failed, no address space
[  171.433239][ T7207] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 4088 (num: 1 largest: 4088)
[  171.609183][ T5481] usb 8-1: USB disconnect, device number 4
[  172.187961][ T7205] overlayfs: statfs failed on './file0'
[  172.604598][ T7242] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0)
[  172.829478][ T4228] vhci_hcd: vhci_device speed not set
[  173.119559][ T4243] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  173.248686][ T7263] input input9: cannot allocate more than FF_MAX_EFFECTS effects
[  173.599983][ T4243] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  173.621693][ T4243] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  173.666979][ T4243] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  173.687361][ T4243] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.739911][ T7253] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  174.063825][ T4243] usb 3-1: USB disconnect, device number 5
[  174.449559][ T4300] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  174.463627][ T4202] udevd[4202]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  174.869719][ T4300] usb 8-1: config index 0 descriptor too short (expected 45, got 36)
[  174.879126][ T7314] netlink: 'syz.1.755': attribute type 1 has an invalid length.
[  174.894149][ T4300] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  174.935915][ T7314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.755'.
[  174.952814][ T4300] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  175.007596][ T4300] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  175.035480][ T4300] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.043573][ T7324] binder: 7319:7324 ioctl c0306201 0 returned -14
[  175.081683][ T4300] usb 8-1: config 0 descriptor??
[  175.139860][ T7292] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  175.171985][ T4300] usbhid 8-1:0.0: couldn't find an input interrupt endpoint
[  175.560710][ T7348] 9pnet_virtio: no channels available for device syz
[  175.686113][ T4190] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  175.929906][ T4190] usb 9-1: Using ep0 maxpacket: 8
[  176.049896][ T4190] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  176.069431][ T4190] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  176.092957][ T4190] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  176.116161][ T4190] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  176.156653][ T4190] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  176.184974][ T4190] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.499564][ T4190] usb 9-1: GET_CAPABILITIES returned 0
[  176.505250][ T4190] usbtmc 9-1:16.0: can't read capabilities
[  176.539602][ T4243] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  176.709623][ T4190] usb 9-1: USB disconnect, device number 4
[  176.789625][ T4243] usb 2-1: Using ep0 maxpacket: 8
[  176.909845][ T4243] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  176.935869][ T4243] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  176.957282][ T4243] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  176.982059][ T4243] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  177.009595][ T4243] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  177.028566][ T4243] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.183242][ T5477] usb 8-1: USB disconnect, device number 5
[  177.339782][ T4243] usb 2-1: usb_control_msg returned -71
[  177.346373][ T4243] usbtmc 2-1:16.0: can't read capabilities
[  177.447677][ T4243] usb 2-1: USB disconnect, device number 4
[  177.729432][ T1111] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  177.740642][ T7417] tipc: Started in network mode
[  177.759541][ T7417] tipc: Node identity 62a1b96539f9, cluster identity 4711
[  177.772914][ T7417] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  177.803051][ T7418] device syzkaller0 entered promiscuous mode
[  177.921715][ T7417] tipc: Resetting bearer <eth:syzkaller0>
[  177.999507][ T1111] usb 9-1: Using ep0 maxpacket: 32
[  178.005335][ T7416] tipc: Resetting bearer <eth:syzkaller0>
[  178.053886][ T7416] tipc: Disabling bearer <eth:syzkaller0>
[  178.279506][ T1111] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 247, changing to 11
[  178.314743][ T1111] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59022, setting to 1024
[  178.330326][ T1111] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  178.519743][ T1111] usb 9-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  178.538228][ T1111] usb 9-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  178.549188][ T1111] usb 9-1: Product: syz
[  178.554081][ T1111] usb 9-1: Manufacturer: syz
[  178.559166][ T1111] usb 9-1: SerialNumber: syz
[  178.607255][ T7412] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  178.751169][ T1111] input: appletouch as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/input/input10
[  179.649431][ T4300] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  179.917121][ T4300] usb 2-1: Using ep0 maxpacket: 16
[  180.059635][ T4300] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[  180.067889][ T4300] usb 2-1: config 0 has no interface number 0
[  180.099492][ T4300] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  180.139496][ T4300] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  180.309667][ T4300] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  180.335035][ T4300] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  180.363102][ T4300] usb 2-1: Product: syz
[  180.378405][ T4300] usb 2-1: SerialNumber: syz
[  180.413703][ T4300] usb 2-1: config 0 descriptor??
[  180.421172][ T7495] binder: 7494:7495 unknown command 1074553619
[  180.427983][ T7495] binder: 7494:7495 ioctl c0306201 200000000540 returned -22
[  180.459472][ T4243] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  180.472110][ T4300] cm109 2-1:0.8: invalid payload size 0, expected 4
[  180.492016][ T4300] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input11
[  180.550837][ T4300] usb 9-1: USB disconnect, device number 5
[  180.602360][ T4300] appletouch 9-1:1.0: input: appletouch disconnected
[  180.684841][   T21] usb 2-1: USB disconnect, device number 5
[  180.692181][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  180.692518][    C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  180.699591][ T4243] usb 8-1: Using ep0 maxpacket: 16
[  180.732743][   T21] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  180.849771][ T4243] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  180.871188][ T4243] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  180.884082][ T4243] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  180.912467][ T4243] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  180.933720][ T4243] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.041420][ T4243] usb 8-1: config 0 descriptor??
[  181.563798][ T4243] hid-generic 0003:0955:7214.0002: hidraw0: USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.7-1/input0
[  181.759097][ T4190] usb 8-1: USB disconnect, device number 6
[  181.869539][ T4243] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  182.032547][ T7549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.808'.
[  182.119482][ T4243] usb 2-1: Using ep0 maxpacket: 16
[  182.208622][ T7532] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  182.221993][ T7532] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  182.413438][ T4243] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  182.590022][ T4243] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  182.599164][ T4243] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.610109][ T4243] usb 2-1: Product: syz
[  182.614378][ T4243] usb 2-1: Manufacturer: syz
[  182.629497][ T4243] usb 2-1: SerialNumber: syz
[  182.648311][ T4243] usb 2-1: config 0 descriptor??
[  182.691925][ T4243] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  182.709413][ T4243] em28xx 2-1:0.0: DVB interface 0 found: bulk
[  183.116122][ T7585] 9pnet: p9_fd_create_tcp (7585): problem binding to privport
[  183.339516][ T4243] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[  183.829485][ T4243] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  183.845791][ T4243] em28xx 2-1:0.0: board has no eeprom
[  183.965220][ T7612] binder: 7606:7612 ioctl c0306201 0 returned -14
[  183.991658][ T7609] binder: 7606:7609 ioctl c0306201 200000000200 returned -14
[  183.992309][ T4243] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  184.023889][ T4243] em28xx 2-1:0.0: dvb set to bulk mode.
[  184.032474][ T7614] binder: BINDER_SET_CONTEXT_MGR already set
[  184.038873][ T7614] binder: 7613:7614 ioctl 4018620d 2000000002c0 returned -16
[  184.105505][ T4243] usb 2-1: USB disconnect, device number 6
[  184.144920][ T4243] em28xx 2-1:0.0: Disconnecting em28xx
[  184.162283][ T7619] 9pnet_virtio: no channels available for device syz
[  184.172906][ T5481] em28xx 2-1:0.0: Binding DVB extension
[  184.278375][ T5481] em28xx 2-1:0.0: Registering input extension
[  184.301223][ T4243] em28xx 2-1:0.0: Closing input extension
[  184.352782][ T4243] em28xx 2-1:0.0: Freeing device
[  184.762014][ T7640] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  184.842818][ T7640] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  186.020311][ T7691] device syzkaller1 entered promiscuous mode
[  186.069711][ T7700] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  186.098626][ T7692] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  186.112089][ T7692] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  186.123392][ T7698] netlink: 'syz.7.839': attribute type 1 has an invalid length.
[  186.218631][ T7701] bond1: (slave ip6gretap1): making interface the new active one
[  186.327864][ T7701] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  186.387271][ T7701] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  186.426189][ T7701] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  186.733355][ T7716] netlink: 'syz.9.842': attribute type 5 has an invalid length.
[  186.891044][ T4250] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  186.920541][ T4250] Bluetooth: hci2: Injecting HCI hardware error event
[  186.945079][ T4186] Bluetooth: hci2: hardware error 0x00
[  187.501081][ T7742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.850'.
[  187.550694][ T7744] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  188.116529][ T7772] device syzkaller0 entered promiscuous mode
[  188.191532][ T7778] loop4: detected capacity change from 0 to 524287936
[  188.243329][ T7777] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  188.515938][ T7792] netlink: 16 bytes leftover after parsing attributes in process `syz.1.866'.
[  191.823785][ T7927] 9p: Unknown Cache mode readahead
[  191.942817][ T7931] netlink: 16 bytes leftover after parsing attributes in process `syz.7.904'.
[  193.669514][    T7] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  193.919533][    T7] usb 9-1: Using ep0 maxpacket: 16
[  194.039598][    T7] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  194.084807][    T7] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  194.137451][    T7] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  194.165673][    T7] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.239777][    T7] usb 9-1: config 0 descriptor??
[  194.282257][    T7] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[  194.493004][ T1431] ieee802154 phy0 wpan0: encryption failed: -22
[  194.501555][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!!
[  194.654811][ T4300] usb 9-1: USB disconnect, device number 6
[  195.794653][ T8042] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  195.802033][ T8042] device syzkaller0 entered promiscuous mode
[  195.822695][ T8042] tipc: Resetting bearer <eth:syzkaller0>
[  195.833972][ T8041] tipc: Resetting bearer <eth:syzkaller0>
[  196.010322][ T8041] tipc: Disabling bearer <eth:syzkaller0>
[  196.611534][ T8064] device bpq0 entered promiscuous mode
[  196.643273][ T8064] ==================================================================
[  196.652328][ T8064] BUG: KASAN: use-after-free in ax25_dev_device_down+0x35e/0x520
[  196.660124][ T8064] Write of size 4 at addr ffff88801bd3efb8 by task syz.8.932/8064
[  196.668061][ T8064] 
[  196.670487][ T8064] CPU: 1 PID: 8064 Comm: syz.8.932 Not tainted syzkaller #0
[  196.678245][ T8064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  196.688368][ T8064] Call Trace:
[  196.691786][ T8064]  <TASK>
[  196.694745][ T8064]  dump_stack_lvl+0x168/0x230
[  196.699480][ T8064]  ? show_regs_print_info+0x20/0x20
[  196.705636][ T8064]  ? load_image+0x3b0/0x3b0
[  196.710467][ T8064]  ? _raw_spin_lock_irqsave+0xb0/0xf0
[  196.716003][ T8064]  ? lockdep_hardirqs_on+0x94/0x140
[  196.721250][ T8064]  print_address_description+0x60/0x2d0
[  196.727021][ T8064]  ? ax25_dev_device_down+0x35e/0x520
[  196.732899][ T8064]  kasan_report+0xdf/0x130
[  196.737627][ T8064]  ? ax25_dev_device_down+0x35e/0x520
[  196.743148][ T8064]  ? kfree+0xef/0x2a0
[  196.747343][ T8064]  kasan_check_range+0x27b/0x290
[  196.752526][ T8064]  ax25_dev_device_down+0x35e/0x520
[  196.757919][ T8064]  ax25_device_event+0x4b4/0x4f0
[  196.763086][ T8064]  raw_notifier_call_chain+0xcb/0x160
[  196.768550][ T8064]  __dev_notify_flags+0x178/0x2d0
[  196.773921][ T8064]  ? __dev_change_flags+0x47c/0x6a0
[  196.779535][ T8064]  ? __dev_change_flags+0x6a0/0x6a0
[  196.785030][ T8064]  ? __dev_change_flags+0x4bb/0x6a0
[  196.790516][ T8064]  ? dev_get_flags+0x1c0/0x1c0
[  196.795871][ T8064]  ? dev_ioctl+0x54e/0xe50
[  196.800433][ T8064]  ? dev_ioctl+0x54e/0xe50
[  196.804892][ T8064]  dev_change_flags+0xe3/0x1a0
[  196.809698][ T8064]  dev_ifsioc+0x147/0xe70
[  196.814157][ T8064]  ? dev_ioctl+0xe50/0xe50
[  196.818679][ T8064]  ? apparmor_capable+0x12c/0x190
[  196.823729][ T8064]  ? full_name_hash+0x8e/0xe0
[  196.829087][ T8064]  dev_ioctl+0x55f/0xe50
[  196.834260][ T8064]  ? _copy_from_user+0x111/0x170
[  196.839247][ T8064]  sock_do_ioctl+0x222/0x2f0
[  196.844045][ T8064]  ? sock_show_fdinfo+0xb0/0xb0
[  196.848951][ T8064]  sock_ioctl+0x4ed/0x6e0
[  196.853474][ T8064]  ? sock_poll+0x3f0/0x3f0
[  196.858181][ T8064]  ? bpf_lsm_file_ioctl+0x5/0x10
[  196.863147][ T8064]  ? security_file_ioctl+0x7c/0xa0
[  196.868390][ T8064]  ? sock_poll+0x3f0/0x3f0
[  196.872846][ T8064]  __se_sys_ioctl+0xfa/0x170
[  196.877747][ T8064]  do_syscall_64+0x4c/0xa0
[  196.882189][ T8064]  ? clear_bhb_loop+0x30/0x80
[  196.886902][ T8064]  ? clear_bhb_loop+0x30/0x80
[  196.891715][ T8064]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  196.897648][ T8064] RIP: 0033:0x7fe6f0fd6ec9
[  196.902112][ T8064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  196.922288][ T8064] RSP: 002b:00007fe6ef23e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  196.930750][ T8064] RAX: ffffffffffffffda RBX: 00007fe6f122dfa0 RCX: 00007fe6f0fd6ec9
[  196.938984][ T8064] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000006
[  196.947002][ T8064] RBP: 00007fe6f1059f91 R08: 0000000000000000 R09: 0000000000000000
[  196.955106][ T8064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  196.963199][ T8064] R13: 00007fe6f122e038 R14: 00007fe6f122dfa0 R15: 00007ffdd05683d8
[  196.971397][ T8064]  </TASK>
[  196.974457][ T8064] 
[  196.976784][ T8064] Allocated by task 6756:
[  196.981305][ T8064]  __kasan_kmalloc+0xb5/0xf0
[  196.985999][ T8064]  ax25_dev_device_up+0x50/0x580
[  196.991033][ T8064]  ax25_device_event+0x483/0x4f0
[  196.996023][ T8064]  raw_notifier_call_chain+0xcb/0x160
[  197.001859][ T8064]  __dev_notify_flags+0x178/0x2d0
[  197.007061][ T8064]  dev_change_flags+0xe3/0x1a0
[  197.012153][ T8064]  dev_ifsioc+0x147/0xe70
[  197.016597][ T8064]  dev_ioctl+0x55f/0xe50
[  197.020961][ T8064]  sock_do_ioctl+0x222/0x2f0
[  197.025841][ T8064]  sock_ioctl+0x4ed/0x6e0
[  197.030366][ T8064]  __se_sys_ioctl+0xfa/0x170
[  197.035173][ T8064]  do_syscall_64+0x4c/0xa0
[  197.039703][ T8064]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  197.045741][ T8064] 
[  197.048180][ T8064] Freed by task 8064:
[  197.052220][ T8064]  kasan_set_track+0x4b/0x70
[  197.056916][ T8064]  kasan_set_free_info+0x1f/0x40
[  197.061865][ T8064]  ____kasan_slab_free+0xd5/0x110
[  197.066902][ T8064]  slab_free_freelist_hook+0xea/0x170
[  197.072305][ T8064]  kfree+0xef/0x2a0
[  197.076332][ T8064]  ax25_dev_device_down+0x1c0/0x520
[  197.081652][ T8064]  ax25_device_event+0x4b4/0x4f0
[  197.086930][ T8064]  raw_notifier_call_chain+0xcb/0x160
[  197.092423][ T8064]  __dev_notify_flags+0x178/0x2d0
[  197.097653][ T8064]  dev_change_flags+0xe3/0x1a0
[  197.102466][ T8064]  dev_ifsioc+0x147/0xe70
[  197.106930][ T8064]  dev_ioctl+0x55f/0xe50
[  197.111186][ T8064]  sock_do_ioctl+0x222/0x2f0
[  197.115902][ T8064]  sock_ioctl+0x4ed/0x6e0
[  197.120236][ T8064]  __se_sys_ioctl+0xfa/0x170
[  197.124834][ T8064]  do_syscall_64+0x4c/0xa0
[  197.129435][ T8064]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  197.135332][ T8064] 
[  197.137663][ T8064] Last potentially related work creation:
[  197.143374][ T8064]  kasan_save_stack+0x35/0x60
[  197.148126][ T8064]  kasan_record_aux_stack+0xb8/0x100
[  197.153431][ T8064]  call_rcu+0x182/0x930
[  197.157597][ T8064]  addrconf_ifdown+0x16a1/0x1970
[  197.162541][ T8064]  addrconf_notify+0x445/0xf00
[  197.167314][ T8064]  raw_notifier_call_chain+0xcb/0x160
[  197.172807][ T8064]  unregister_netdevice_many+0xf57/0x18f0
[  197.178532][ T8064]  default_device_exit_batch+0x336/0x390
[  197.184275][ T8064]  cleanup_net+0x77b/0xb80
[  197.188699][ T8064]  process_one_work+0x863/0x1000
[  197.193644][ T8064]  worker_thread+0xaa8/0x12a0
[  197.198345][ T8064]  kthread+0x436/0x520
[  197.202445][ T8064]  ret_from_fork+0x1f/0x30
[  197.206865][ T8064] 
[  197.209203][ T8064] Second to last potentially related work creation:
[  197.215799][ T8064]  kasan_save_stack+0x35/0x60
[  197.220552][ T8064]  kasan_record_aux_stack+0xb8/0x100
[  197.225847][ T8064]  insert_work+0x54/0x3d0
[  197.230204][ T8064]  __queue_work+0x9c5/0xd50
[  197.234713][ T8064]  queue_work_on+0x11d/0x1d0
[  197.239392][ T8064]  call_usermodehelper_exec+0x26b/0x460
[  197.245131][ T8064]  kobject_uevent_env+0x681/0x890
[  197.250186][ T8064]  device_add+0x91c/0xfb0
[  197.254576][ T8064]  tick_init_sysfs+0xe7/0x1c0
[  197.259276][ T8064]  do_one_initcall+0x1ee/0x680
[  197.264056][ T8064]  do_initcall_level+0x137/0x1f0
[  197.269095][ T8064]  do_initcalls+0x4b/0x90
[  197.273603][ T8064]  kernel_init_freeable+0x3ce/0x560
[  197.278835][ T8064]  kernel_init+0x19/0x1b0
[  197.283284][ T8064]  ret_from_fork+0x1f/0x30
[  197.287707][ T8064] 
[  197.290037][ T8064] The buggy address belongs to the object at ffff88801bd3ef00
[  197.290037][ T8064]  which belongs to the cache kmalloc-192 of size 192
[  197.304529][ T8064] The buggy address is located 184 bytes inside of
[  197.304529][ T8064]  192-byte region [ffff88801bd3ef00, ffff88801bd3efc0)
[  197.317821][ T8064] The buggy address belongs to the page:
[  197.323468][ T8064] page:ffffea00006f4f80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1bd3e
[  197.333827][ T8064] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[  197.341389][ T8064] raw: 00fff00000000200 0000000000000000 0000000200000001 ffff888016841a00
[  197.350286][ T8064] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[  197.358979][ T8064] page dumped because: kasan: bad access detected
[  197.365540][ T8064] page_owner tracks the page as allocated
[  197.371426][ T8064] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 5088500015, free_ts 5085497246
[  197.387171][ T8064]  get_page_from_freelist+0x1b77/0x1c60
[  197.392750][ T8064]  __alloc_pages+0x1e1/0x470
[  197.397483][ T8064]  alloc_page_interleave+0x24/0x1e0
[  197.402702][ T8064]  new_slab+0xc0/0x4b0
[  197.406873][ T8064]  ___slab_alloc+0x81e/0xdf0
[  197.411481][ T8064]  kmem_cache_alloc_trace+0x1a5/0x2a0
[  197.416860][ T8064]  call_usermodehelper_setup+0x8a/0x260
[  197.422415][ T8064]  kobject_uevent_env+0x65e/0x890
[  197.427445][ T8064]  kset_register+0x170/0x1d0
[  197.432045][ T8064]  __class_register+0x24f/0x400
[  197.436897][ T8064]  __class_create+0xbf/0x100
[  197.441497][ T8064]  msr_init+0x3e/0x100
[  197.445579][ T8064]  do_one_initcall+0x1ee/0x680
[  197.450357][ T8064]  do_initcall_level+0x137/0x1f0
[  197.455327][ T8064]  do_initcalls+0x4b/0x90
[  197.459667][ T8064]  kernel_init_freeable+0x3ce/0x560
[  197.464892][ T8064] page last free stack trace:
[  197.469581][ T8064]  free_unref_page_prepare+0x637/0x6c0
[  197.475068][ T8064]  free_unref_page+0x94/0x280
[  197.479764][ T8064]  __mmdrop+0xaa/0x3e0
[  197.483843][ T8064]  free_bprm+0x141/0x300
[  197.488085][ T8064]  kernel_execve+0x380/0x900
[  197.492676][ T8064]  call_usermodehelper_exec_async+0x207/0x350
[  197.498746][ T8064]  ret_from_fork+0x1f/0x30
[  197.503169][ T8064] 
[  197.505503][ T8064] Memory state around the buggy address:
[  197.511132][ T8064]  ffff88801bd3ee80: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc
[  197.519199][ T8064]  ffff88801bd3ef00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  197.527351][ T8064] >ffff88801bd3ef80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  197.535508][ T8064]                                         ^
[  197.541702][ T8064]  ffff88801bd3f000: 00 00 00 fc fc fc fc fc fa fb fb fb fc fc fc fc
[  197.550539][ T8064]  ffff88801bd3f080: fa fb fb fb fc fc fc fc 00 00 00 fc fc fc fc fc
[  197.558719][ T8064] ==================================================================
[  197.566918][ T8064] Disabling lock debugging due to kernel taint
[  197.630532][ T8064] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  197.637882][ T8064] CPU: 0 PID: 8064 Comm: syz.8.932 Tainted: G    B             syzkaller #0
[  197.647006][ T8064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  197.657166][ T8064] Call Trace:
[  197.660463][ T8064]  <TASK>
[  197.663479][ T8064]  dump_stack_lvl+0x168/0x230
[  197.668277][ T8064]  ? show_regs_print_info+0x20/0x20
[  197.673699][ T8064]  ? load_image+0x3b0/0x3b0
[  197.678385][ T8064]  panic+0x2c9/0x7f0
[  197.682382][ T8064]  ? bpf_jit_dump+0xd0/0xd0
[  197.686899][ T8064]  ? _raw_spin_unlock_irqrestore+0xf6/0x100
[  197.692930][ T8064]  ? _raw_spin_unlock+0x40/0x40
[  197.697814][ T8064]  ? ax25_dev_device_down+0x35e/0x520
[  197.703211][ T8064]  check_panic_on_warn+0x80/0xa0
[  197.708169][ T8064]  ? ax25_dev_device_down+0x35e/0x520
[  197.713832][ T8064]  end_report+0x6d/0xf0
[  197.718456][ T8064]  kasan_report+0x102/0x130
[  197.723275][ T8064]  ? ax25_dev_device_down+0x35e/0x520
[  197.728799][ T8064]  ? kfree+0xef/0x2a0
[  197.733030][ T8064]  kasan_check_range+0x27b/0x290
[  197.738085][ T8064]  ax25_dev_device_down+0x35e/0x520
[  197.743301][ T8064]  ax25_device_event+0x4b4/0x4f0
[  197.748245][ T8064]  raw_notifier_call_chain+0xcb/0x160
[  197.753723][ T8064]  __dev_notify_flags+0x178/0x2d0
[  197.758782][ T8064]  ? __dev_change_flags+0x47c/0x6a0
[  197.764156][ T8064]  ? __dev_change_flags+0x6a0/0x6a0
[  197.769586][ T8064]  ? __dev_change_flags+0x4bb/0x6a0
[  197.774891][ T8064]  ? dev_get_flags+0x1c0/0x1c0
[  197.779678][ T8064]  ? dev_ioctl+0x54e/0xe50
[  197.784192][ T8064]  ? dev_ioctl+0x54e/0xe50
[  197.788818][ T8064]  dev_change_flags+0xe3/0x1a0
[  197.793705][ T8064]  dev_ifsioc+0x147/0xe70
[  197.798040][ T8064]  ? dev_ioctl+0xe50/0xe50
[  197.802689][ T8064]  ? apparmor_capable+0x12c/0x190
[  197.807759][ T8064]  ? full_name_hash+0x8e/0xe0
[  197.812661][ T8064]  dev_ioctl+0x55f/0xe50
[  197.817215][ T8064]  ? _copy_from_user+0x111/0x170
[  197.822176][ T8064]  sock_do_ioctl+0x222/0x2f0
[  197.826818][ T8064]  ? sock_show_fdinfo+0xb0/0xb0
[  197.831775][ T8064]  sock_ioctl+0x4ed/0x6e0
[  197.836462][ T8064]  ? sock_poll+0x3f0/0x3f0
[  197.840897][ T8064]  ? bpf_lsm_file_ioctl+0x5/0x10
[  197.845839][ T8064]  ? security_file_ioctl+0x7c/0xa0
[  197.850958][ T8064]  ? sock_poll+0x3f0/0x3f0
[  197.855381][ T8064]  __se_sys_ioctl+0xfa/0x170
[  197.859983][ T8064]  do_syscall_64+0x4c/0xa0
[  197.864403][ T8064]  ? clear_bhb_loop+0x30/0x80
[  197.869084][ T8064]  ? clear_bhb_loop+0x30/0x80
[  197.873853][ T8064]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  197.879846][ T8064] RIP: 0033:0x7fe6f0fd6ec9
[  197.884424][ T8064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  197.904256][ T8064] RSP: 002b:00007fe6ef23e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  197.913238][ T8064] RAX: ffffffffffffffda RBX: 00007fe6f122dfa0 RCX: 00007fe6f0fd6ec9
[  197.921218][ T8064] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000006
[  197.929195][ T8064] RBP: 00007fe6f1059f91 R08: 0000000000000000 R09: 0000000000000000
[  197.937169][ T8064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  197.945292][ T8064] R13: 00007fe6f122e038 R14: 00007fe6f122dfa0 R15: 00007ffdd05683d8
[  197.953380][ T8064]  </TASK>
[  197.956692][ T8064] Kernel Offset: disabled
[  197.961031][ T8064] Rebooting in 86400 seconds..