last executing test programs:

4.924359608s ago: executing program 4 (id=332):
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0)
ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000300)=""/41)

4.257120292s ago: executing program 1 (id=340):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket$packet(0x11, 0x3, 0x300)
syz_emit_ethernet(0x86, &(0x7f0000000ac0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6000000000502c00fe8000000000000000000000000000aafe800000000000000800000000000005020000050200000037868cedae1376c198b4d7d7f5eb0e3031695f8c967d754f6c1202dfcc607e1cbab86b22e94475ccfa68ce1ce9d79c2e0d10f880cab0621e00000000000000"], 0x0)
syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000180)=ANY=[@ANYBLOB="88390900505050505050080211000000ffffffffffff5600b800d558dd00007c1d01b7b7875f4767f4b533e6bd8859a2eb88a5ead25cdca950e8453e8fcefe44a8e0498aee41e1"], 0x47)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendto$inet(r1, &(0x7f0000000040)='\x00', 0x1, 0x0, 0x0, 0x0)
recvfrom$inet(r1, &(0x7f0000000080)=""/128, 0xfffffce3, 0x0, 0x0, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_group_source_req(r2, 0x0, 0x2c, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_int(r3, 0x1, 0x9, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000003080)=@device_b, &(0x7f00000030c0)=ANY=[@ANYBLOB="680080000802110000010802110000005050505050500000"], 0x18)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000140)={0x2, 0x0, @multicast2}, 0x10)
getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000380)=0x4)
close(r4)
syz_80211_inject_frame(&(0x7f0000000100), &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], 0x94)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000b80)="5a0881da383b0bcc0c1c960825cf6cbd3e443163a091", 0x16}], 0x1}}, {{&(0x7f00000003c0)={0xa, 0x4e24, 0xfffffff9, @private1, 0x2}, 0x1c, &(0x7f0000000bc0)=[{&(0x7f0000000540)="3a567bc265a79fe51283d535ec4d0c1de04f543833ee5d292046a71509bc5da11b33ecb3978fc2ecfeb63dc3445f7036775843204c52a13104cf364bb46a789e796a9a0bf94693b416fbf87f8856efd60b4f579e159b11954e317511ece5c35ba73cb9281e78", 0x66}, {&(0x7f00000012c0)="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", 0x1000}, {&(0x7f00000005c0)="cfc1e25b6e81bcd52550bb34386ad2c6664b46ec7dfd6fed46f8d09533bf429567bdb87d7691bd31ecbc5bc559b83586e689e7375363755cd0ff2b2af20c71b1467ba787e06c67b14c493b45af0aff03def67ee26f5b8309538f0c2af0ce144f59d310d5c7eb5572bc3379133fc16ed9df11d528d80729bc257eeb936931e4de33e018b1959633ab1a12333dee229bf6f106e59359b3809f3f528921b948aef85755cb47df24e2b9ebc5f00a5effa3fc5eef079672786f00e7", 0xb9}, {&(0x7f0000000680)="f4d43f5a746e1ee1067624ea004262b05e832d11d3d7013062df8b5a4326f8d82ba45bc8214cdf13ec52e66bb729d4769b4ecb0907e9cfebabd16cfb8de5528ed83243679b04ebe6a3ee5efc410ffd3e0c32bda1b82af4bd57ec023801cdd01cecc609b9fdcc490326bbe8826d1f9c26b766877f0c51152856cdddeeb3b716216c0969442d6d68b2850595bda0", 0x8d}, {&(0x7f0000000400)}], 0x5, &(0x7f00000024c0)=[@hoplimit={{0x14, 0x29, 0x34, 0x81}}, @rthdrdstopts={{0xd0, 0x29, 0x37, {0x32, 0x16, '\x00', [@generic={0x2, 0xb2, "9c5f7cf9830b199dfbc365f67688c2c7d2108dc0d5868b2272780870055af611958fd560a0d50ac46e19d093821ec02d9f935ed3a93d510011bfb8de02cf97bbdd4e9d8ad17ac53f8cc93b5527ef5b011e4766ebe4609f60c6f9b8b8de6357a9e64a654ea7b8b6abd6aaf3372ff261e0aae51d75949b588781204dbdfc86267cad9801819ee31410594f2d5f897cb27d9c44268b4cc11582545b8b60769f5948054d11ef692d10ae34e6d1bf3705f092bcbc"}]}}}, @dstopts_2292={{0x38, 0x29, 0x4, {0x0, 0x3, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x7}, @enc_lim={0x4, 0x1, 0xad}, @ra, @enc_lim={0x4, 0x1, 0x3}, @jumbo={0xc2, 0x4, 0xa45}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x1}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}], 0x150}}], 0x2, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000740)=ANY=[@ANYBLOB="80940200ffffffffffffffffffffffffffffffffffff03020a000881060000000000000035824000000601010101010103010b0406091f65fb030006024000052f0774032a9443ea78e9ed294bc72d68aba95ef719010d719ceb2237357071a696f26f8464a84b2a624dfe8ec4d8cdbb2d1a080011018000000000000006000500020000000800ff7f0000057206030303030303dd0634dec83a0858ddd90f90e372a967f2f010df1bef0bf8d87e86112bb9cf570c967dcf97cb854e73c121dcc839c4694d777436d5df4e79ae916703456783cff4883e360aa077de44d02b8b284e06a8b4ee7b6ec8af3a210ba97d6f4d6b01b106bd396b39682d2d1ccaae063c0316c085de89c9d38aa963248a4c3fe2850e97dd99729fd02335f1c8583840d591d415efef1176d68961cb8692fa255dc3b802e9b59c05d70a5da0bfe3ad2d8204f7af65159c4a610d8a4a4a0545f3bb0d3387dfd4aa6c528a315620655721ceaa055c3f78fe298fe3f460c815875a5e6c65663addcff03d4fee723271ffec1126c774449f543eb7431935781ff9b3c7e8c3263fe04282b8d673669b02b0bd2e1f75cd2751bea9ee7dc3c1c6fb25890c8626cf8097dabfe366d1ddcc8726b31a204b647900aaa855da34b8e7ff42181035b733130b815b78a16fc48b0225769e0beb8a1775f50c253658137e55e08917358a38ff4549e504dbd8b784bb2d0625087192b62b2ee52c2498f6e6476ffcc20c8a31dd74f41ae191096b786db4ddbd9ba8a5e71335b37a3a3101757bfb894cb4681efcad3f2038c4915bd27a551498c7d3d7da38dd3e44d8f4ad36c0046098ef7bf549867f7d1211f07d6f87fef7ac70cdfef5337ff2dd007f5c7123db1ba24762af339a018a8a53379aec02a997c8b33839d607ddbe2af95ebb3b9098eec85536434e31f996fef44d411c03d908e52e1e5303ee5f4701cff38bde43d29ef8961a66c908539cd530d285cb4811d2d1b65787d81b92a918563d3db63416fe4164b16b327cb3eb12e8a4b2cf68d0c5abb93745e53eaad8f010c539614b9ad3eab4c41fce5704bb46e9f6f1ff477b08456a53ee5041bd836281b07d59ed4574bf360bd94a3980c107bdc26ec973f90db1dff084d245dae1dbf2b4ad91be0b5c8d9dd6013101a3e38dc45d79ddb10fca1fe557c59f840c4314a024705b0e86fae939d7c5e5767845c8d32fe3a29d5e2f60f49696ec45e36dcf196971bb3538bf3202f8f00f9159d986bdfbcd101d4d5df7afbbac807d503e10e164836b07d826e1c03240fd0365a09851d97b439b43e7084e508ab9dc8f9b70de344480ad59f1c235e39f1217f6c0aa4abd691cb15d8a31f231ae4b7de3e46d78166a801c4bc83d"], 0x4e0)
r5 = socket$l2tp(0x2, 0x2, 0x73)
getpeername(r5, &(0x7f0000000440)=@pppoe={0x18, 0x0, {0x0, @random}}, &(0x7f0000000500)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0xfffc, @rand_addr=0x64010100}], 0x10)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000340)={'veth1_vlan\x00', 0x2000})
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x4e7)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000002400)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x80}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e24, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0xeb2}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, @in6={0xa, 0x4e24, 0x762, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e24, @rand_addr=0x64010102}], 0x94)
sendmmsg$inet6(r0, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000008900)=[{&(0x7f0000008500)="88", 0x1}], 0x1}}], 0x1, 0x0)

3.997995563s ago: executing program 3 (id=343):
socket$inet6(0xa, 0xa, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="04060300c900544d6413c2f208687ccfc7e7344b5901c77db578252ed0f7d417e0d8753065075d2bf0fdb218b0f675212af8"], 0x6)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
syz_mount_image$btrfs(&(0x7f00000000c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000480)={[{@nossd}, {@commit={'commit', 0x3d, 0x4}}, {@check_int_data}, {@max_inline={'max_inline', 0x3d, [0x37, 0x36, 0x38, 0x37, 0x6d, 0x36, 0x6d]}}], [{@fsname={'fsname', 0x3d, '^\'++,&!'}}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0x0, 0x31, 0x39, 0x36, 0x30, 0x32, 0x31], 0x2d, [0x37, 0x31, 0x65, 0x34], 0x2d, [0x33, 0x37, 0x36, 0x3e], 0x2d, [0x61, 0x32, 0x65, 0x61], 0x2d, [0x37, 0x62, 0x64, 0x31, 0x30, 0x39, 0x33, 0x33]}}}, {@smackfsroot={'smackfsroot', 0x3d, 'commit'}}]}, 0x1, 0x55c1, &(0x7f000000ac40)="$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")
openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x121c82, 0x109)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x100800001)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_emit_vhci(&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x2fe)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="02c90012000ec6d61001be95c03f000700ffff00000700"], 0x17)

3.939863448s ago: executing program 2 (id=344):
socket$inet_udplite(0x2, 0x2, 0x88)
syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x0, 0x9, 0x2480, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x4}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/8, 0x2}, 0x20)
r1 = fsopen(&(0x7f00000001c0)='ocfs2_dlmfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
socket(0x10, 0x80002, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0xc}}, 0x80, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1000000000000000100120000100ef00950a807764b603b3776978e87b1e95d35b1e41c290bf5de740b78c7672042d8cef564ab937eb3d2259867126240bc0086d259038770388c16c3d14720d10aba47a149150dd579b658a3a9e65bebf02aa9613498165e7502d3319cc0876383864553b3e8b2429b21531daf438cbfa4808"], 0x10}, 0x8000)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000340)={<r4=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000180)={r4})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000002780)={<r5=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={r5, 0x3, r3, 0x5})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
syz_emit_ethernet(0xfdef, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500002800000000003c907800"/38, @ANYRES32=0x41424344, @ANYRES32=0x0, @ANYBLOB="2d000002907877c6e6d260000077838cdba5ca4ede5d1da550c19de7ae69c7099b8f8604fa04e4fd7e364e54484000f23c38152a9583c6ce45aeba8c41e78e23840da0810f8cd55126b91fdd9d7e43047034867f95e0401ecd31130cac0e2656f6961ddc6cc3b0a1880357"], 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r7}, 0x10)

3.464552177s ago: executing program 1 (id=345):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x8, 0x7fe2, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x600}, 0x1f00)
sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x1000000}, 0x0)

2.944629689s ago: executing program 2 (id=348):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000080), 0x1, 0x53a, &(0x7f0000000a80)="$eJzs3c9vHFcdAPDvjH82desEeoAKSIFCQFF2400bVb00uYBQVQlRcUAcUmNvLJPdrPGuS20s4f4NIIHECf4EDkgckHriwI0jEgeEVA5IBixQjATSopkdu1t7XW/j9S71fj7SaObN23nf9+LMvJm39rwAxtZzEbETEdMR8UZEzBf7k2KJO50l+9yjve2l/b3tpSTa7df/nuT52b7oOibzZFHmbER846sR30mOx21ubj1YrNWq60W63KqvlZubWzdW64sr1ZXqw0rl9sLtmy/derEysLZerf9y9yurr37zN7/+9Lu/3/nyD7JqzRV53e0YpE7Tpw7jZCYj4tXzCDYCE8V6esT14PGkEfGxiPhcfv7Px0T+vxMAuMja7floz3enAYCLLs3HwJK0VIwFzEWalkqdMbxn4lJaazRb1+83Nh4ud8bKLsdUen+1Vr15ZeaP38vvGKaSLL2Q5+X5ebpyJH0rIq5ExI9nnsjTpaVGbXl0tz0AMNaePNL//2um0//3oce3egDAR8bsqCsAAAyd/h8Axo/+HwDGTx/9f/Fl/8651wUAGA7P/wAwfvT/ADB+9P8AMFa+/tpr2dLeL95/vfzm5saDxps3lqvNB6X6xlJpqbG+VlppNFbyd/bUTyuv1misLbwQG2+VW9Vmq9zc3LpXb2w8bN3L3+t9rzo1lFYBAB/kytV3/pBExM7LT+RLdM3loK+Giy0ddQWAkZkYdQWAkTHbF4yv/p/xf3eu9QBGp+fLvGd7br7fTz9EEL9nBP9Xrn2y//F/czzDxWL8H8bX443/vzLwegDDZ/wfxle7nRyd83/6MAsAuJDO8Dv+7R8O6iYEGKnTJvMeyPf/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcMHMRcR3I0lLxVzgc5GmpVLEUxFxOaaS+6u16s2IeDquRsTUTJZeGHWlAYAzSv+aFPN/XZt/fu5o7nTy75l8HRHf/9nrP3lrsdVaX8j2/+Nw/8zB9GGV9447w7yCAECfnuvzc3n/XSnWXQ/yj/a2lw6W7s+nA67nUbt347/FVMRL+3vb+dLJmYzJfD2b30tc+mdSpDtzkT4bERMDiL/zdkR8olf7k3xs5HIx82l3/ChiPzXU+On74qd5Xmed3Xx9fAB1gXHzzt2IuNPr/EuLa2rv8382v0Kd3e7dTmEH1779rvgH17+JHvGTD3HN333ht187trM938l7O+LZyV7xk8P4yQnxn+8z/p8+9ZkfvXJCXvvnEdeid/zuWOVWfa3c3Ny6sVpfXKmuVB9WKrcXbt986daLlXI+Rl0+GKk+7m8vX3/6pLpl7b90QvzZnu2fPjz2C322/xf/eePbn/2A+F/6fO+f/zM943dkfeIX+4y/eOlXJ07fncVfPqH9p/38r/cZ/92/bC33+VEAYAiam1sPFmu16vqZNrKn0EGUc2wjq+JACzxl488xyALvnO3wqfP6Vz33jcnDe8XBlvytrMQhNycdeCvOtPGosxHnHmu01yXg/L130o+6JgAAAAAAAAAAAAAAwEmG8adLo24jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF9f/AgAA//91qMwl")
r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)

2.919091871s ago: executing program 4 (id=349):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2000003, &(0x7f0000000000), 0x1, 0x4e9, &(0x7f0000000240)="$eJzs3VFrHFsdAPD/TLL3pr25bi6K1IJtsZW0aHeTxrZBpFYQfSqo9T3GZBNCNtmQ3dQmFE3xVRBEVPDJJ18EP4Ag/QgiFPRdtCiirT74oB3Z3dm2SXeTlKRZ3fx+cDrnzJmZ/znT7OzMzmEmgBPrQkTcjoihiLgSEcV8fpqnmWZhu73cs6cP5popiSy7+7ckknxeZ1vN8nBEvNdeJUYi4mtfjvhm8nrc+ubW8my1WlnPy+XGylq5vrl1dWlldrGyWFmdmpq8MX1z+vr0RJY7VD/PRsStLz750fd//qVbv/70t/4w85fL324263Mfbbc7IuYOFaCH9rYLrX3R0dxH628jWB8M5f0p9LshAAAcSPMc/2JEfKJ1/l+ModbZHAAAADBIss+Pxr+TiAwAAAAYWGlEjEaSlvKxAKORpqVSewzvR+J0Wq3VG59aqG2szjfrIsaikC4sVSsT+VjhsSgkzfJkK/+yfG1XeSoiPoiIHxZPtcqluVp1vt8/fgAAAMAJ8d75ndf//yymrTwAAAAwYMZ6FgAAAIBB4ZIfAAAABp/rfwAAABhoX7lzp5myznu85+9tbizX7l2dr9SXSysbc6W52vpaabFWW2w9s2+lx2a+18lUa7W1z8Tqxv1yo1JvlOubWzMrtY3VxszSjldgAwAAAMfog/OPfp9ExPZnT7VS5M8BBNjhT/1uAHCUhvrdAKBvhvvdAKBvCvsuMfwGywL/j5J96nsO3vnN0bcFAAB4O8Y/9vr9/3fyOtf7MNiM9QGAk8f9fzi5CkYAwol3qT15t1f94e//Z9kbNwoAADhSo62UpKX8XuBopGmpFPF+67UAhWRhqVqZiIgPRcTvioV3m+XJ1prJvmOGAQAAAAAAAAAAAAAAAAAAAAAAAIC2LEsiAwAAAAZaRPrnpPU0/4jx4qXR3b8PvJP8qxhP8sJP7/74/myjsT7ZnP/3Yqs+Iho/yedfy7wSAAAAAP4HtK/T8+lkv1sDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKB59vTBXCcdZ9y/fiEixrrFH46R1nQkChFx+h9JDL+yXhIRQ0cQf/thRJx5NX72IsLzLMvG8lZ0i3/qrcTv9D9p7pbYFX+ks156BLHhpHvUPP7c7vb5S+NCa9r98z+cp8PqffxLXxz/hnocf94/YIyzj39Z7hn/YcTZ4e7Hn078pEf8iweM/42vb231qst+FjHe9fsn2RGr3FhZK9c3t64urcwuVhYrq1NTkzemb05fn54oLyxVK/m/XWP84OO/er5X/0/3iD+2T/8vHbD//3l8/+mH29lCt/iXL3b//j3TI36af/d9Ms8368c7+e12/lXnfvHbc3v1f75H//f7/798wP5f+ep3/3jARQGAY1Df3FqerVYr63tkRg6wjIzMYTLZd9p/j4fbziFXfy2T9Xu39DHT7yMTAABw1F6e9Pe7JQAAAAAAAAAAAAAAAAAAAHByHcfjxHbH3O5PVwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9vTfAAAA//9Sgd77")

2.428509981s ago: executing program 4 (id=351):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x4508, &(0x7f0000000c40)={[{@nodelalloc}, {@block_validity}, {@sysvgroups}]}, 0xa, 0x4e4, &(0x7f0000001400)="$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")
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0xd7d}}, 0x1006)

2.296262592s ago: executing program 1 (id=352):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0)

2.272285594s ago: executing program 2 (id=353):
syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000003200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x40}}}}}]}}]}}, 0x0)

2.096462148s ago: executing program 1 (id=354):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x1, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x33}})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f00000000c0), 0x6db6e559)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r3 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x8, 0x0, &(0x7f0000000000))

1.928588312s ago: executing program 1 (id=355):
socket(0x10, 0x3, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x40000)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vxcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f00000004c0)={0x1d, r1}, 0x10)
sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="0500000000f6ffffdfffffffff008f00", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000005f67de5272232c32"], 0x48}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r3, &(0x7f0000001e40)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000001cc0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f00000014c0)=""/54, 0x36}, &(0x7f0000001540)=[{&(0x7f0000000040)=""/25, 0x19}], 0x1, 0x20}}], 0x48}, 0x0)
socket(0x1d, 0x2, 0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vcan0\x00'})
sendmsg$nl_route(r2, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYRES8], 0x20}, 0x1, 0x0, 0x0, 0xc010}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect$cdc_ncm(0x4, 0x0, 0x0, &(0x7f0000000280)={0xa, &(0x7f00000000c0)={0xa}, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]})
syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000406b1d010140000102030109028c0003010000000904000000010100000a24010000000201020b240700000000323416810924030000000000000a240500fce0182c143b09040100000102000009040101010102000007240109030100082402010004a158090501090004013f0007250102ff3f00090402e7ca6510500f3d010102000009058209ff0300040907250180840000000000"], &(0x7f00000006c0)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x201, 0x81, 0x40, 0x4, 0x20, 0x81}, 0x15, &(0x7f0000000500)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0x6, 0x1, 0xc, 0xf00, 0x101, [0x0]}]}, 0x3, [{0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x415}}, {0x9d, &(0x7f0000000300)=ANY=[@ANYBLOB="9d0379594b8573ba1de807f914061bb486a9eeb5549fd83515f82e0ca4117d5ecd579cf2a3eafef7377079eb0ecbf1b89b7a7dd3f19e9d890fe3648f133d8272af8bcd0802d8594252b1872d5a6286"]}, {0x3d, &(0x7f0000000680)=@string={0x3d, 0x3, "a162a8057c983cc4c9206ba7e83958361307aac221a037db83269f2d9458f0e1fc84a4f2230f3e9d90a6275173d68b06f6dc97ca15d80e9efad8aa"}}]})
sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05040500d3fc09000000478803", 0xd, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x22, &(0x7f0000000700)={@remote, @empty, @val={@val, {0x88ca}}, {@x25={0x805, {0x0, 0x0, 0x0, "a67fb3ede2addfa3f1"}}}}, &(0x7f0000000100)={0x0, 0x0, [0x2b2]})
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x20000004}, 0x4)

1.328783681s ago: executing program 3 (id=356):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x5}, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f00000000c0), 0x4)
syz_init_net_socket$rose(0xb, 0x5, 0x0)

656.665766ms ago: executing program 4 (id=357):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x79)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fa0000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)

608.37253ms ago: executing program 4 (id=358):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001439)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x20022, 0x0)
ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000240))
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
close(r0)
writev(r1, &(0x7f0000000840)=[{&(0x7f0000000280)="fa8e", 0x2}], 0x1)

496.045909ms ago: executing program 0 (id=360):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f00000014c0)=""/145, &(0x7f0000000080)=0x91)

494.309699ms ago: executing program 4 (id=361):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x29632}}, 0x50)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff)
socket$inet6_udplite(0xa, 0x2, 0x88)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00'}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f00000003c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010102, 0x0, 0x6c}, @in=@rand_addr=0x64010101, {0x0, 0x0, 0x0, 0x20000, 0x3, 0x4000, 0x0, 0x8}, {0x10000000}, {}, 0x0, 0x0, 0x2, 0x0, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @sec_ctx={0xc, 0x8, {0x8}}]}, 0x140}}, 0x4810)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655"], &(0x7f0000000340)='syzkaller\x00'}, 0x90)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r6=>0x0})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000000111001000000000000000000d98ad0dcdd563cfc0000000000000000000a003300efc1e5ea560bded694393d9a72f2c1f858"], 0x28}}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r7, &(0x7f0000000000)={0x1f, @fixed}, 0x8)
setsockopt$bt_BT_SNDMTU(r7, 0x112, 0xb, 0x0, 0x0)
r8 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000040)='wlan0\x00', 0x10)
bind$inet(r8, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
connect$inet(r8, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

440.674724ms ago: executing program 0 (id=362):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10)
r1 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
setsockopt(r1, 0x84, 0x81, 0x0, 0x0)
listen(r1, 0x8)
r2 = accept4(r1, 0x0, 0x0, 0x0)
close(r2)

403.112547ms ago: executing program 0 (id=363):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, <r1=>0x0}, &(0x7f0000000280)=0x5)
setuid(r1)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, 0x0, 0x8)

353.33628ms ago: executing program 3 (id=364):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0)

288.573036ms ago: executing program 2 (id=365):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x1, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x33}})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f00000000c0), 0x6db6e559)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r2 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x8, 0x0, &(0x7f0000000000))

268.917278ms ago: executing program 0 (id=366):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c, 0x3b, 0x107, 0x0, 0x0, {0x4}, [@typed={0x8, 0x1, 0x0, 0x0, @u32}]}, 0xfce1}}, 0x0)

177.273285ms ago: executing program 3 (id=367):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r0, 0x0, 0x3e, 0x0, &(0x7f0000000280)="e46000fbef2408002900119386dd6a00000000072feb3014cd3ec8a755c1e13800810400000456e8d50000070100000bb500000500242c108906d3591cc3", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

115.7219ms ago: executing program 0 (id=368):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x79)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fa0000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)

115.19658ms ago: executing program 2 (id=369):
pipe(&(0x7f0000000080))
r0 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}})
add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0)

72.559814ms ago: executing program 3 (id=370):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
write(0xffffffffffffffff, &(0x7f0000000000)="2e000300010002", 0x7)
setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000000)={{{@in, @in6=@dev}}, {{@in6=@private1}, 0x0, @in=@dev}}, 0xe8)

72.349644ms ago: executing program 0 (id=371):
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
pipe2$watch_queue(&(0x7f0000000400)={<r0=>0xffffffffffffffff}, 0x80)
r1 = add_key$keyring(&(0x7f0000001680), &(0x7f00000016c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x0)

47.039226ms ago: executing program 3 (id=372):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x14, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x4}]}]}, 0x34}}, 0x0)

28.940837ms ago: executing program 2 (id=373):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10)
r1 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
setsockopt(r1, 0x84, 0x81, 0x0, 0x0)
listen(r1, 0x8)
r2 = accept4(r1, 0x0, 0x0, 0x0)
close(r2)

0s ago: executing program 1 (id=374):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x5}, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f00000000c0), 0x4)
syz_init_net_socket$rose(0xb, 0x5, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.5' (ED25519) to the list of known hosts.
[   50.066708][ T3544] cgroup: Unknown subsys name 'net'
[   50.199359][ T3544] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.505919][ T3544] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   53.180975][ T3568] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   53.181191][ T3567] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   53.189937][ T3568] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   53.203659][ T3567] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   53.204758][ T3568] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   53.212546][ T3567] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   53.218914][ T3568] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   53.225914][ T3567] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   53.238980][ T3569] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   53.239475][ T3567] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   53.247118][ T3569] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   53.253225][ T3567] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   53.260465][ T3569] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   53.267875][ T3567] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   53.275563][ T3569] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   53.282368][ T3567] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   53.289039][ T3569] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   53.295466][ T3567] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   53.302196][ T3569] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   53.309476][ T3567] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   53.316985][ T3569] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   53.323388][ T3567] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   53.341261][ T3569] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   53.343152][ T3567] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   53.349448][ T3569] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   53.356467][ T3567] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   53.370330][ T3567] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   53.390256][ T3567] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   53.398840][ T3567] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   53.420819][ T3566] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   53.801385][ T3559] chnl_net:caif_netlink_parms(): no params data found
[   53.835341][ T3556] chnl_net:caif_netlink_parms(): no params data found
[   53.846198][ T3553] chnl_net:caif_netlink_parms(): no params data found
[   53.900217][ T3555] chnl_net:caif_netlink_parms(): no params data found
[   53.980465][ T3554] chnl_net:caif_netlink_parms(): no params data found
[   54.016378][ T3556] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.023519][ T3556] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.033191][ T3556] device bridge_slave_0 entered promiscuous mode
[   54.041650][ T3559] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.049049][ T3559] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.056972][ T3559] device bridge_slave_0 entered promiscuous mode
[   54.090597][ T3556] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.097800][ T3556] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.106072][ T3556] device bridge_slave_1 entered promiscuous mode
[   54.113826][ T3559] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.120928][ T3559] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.129280][ T3559] device bridge_slave_1 entered promiscuous mode
[   54.170641][ T3553] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.177924][ T3553] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.186361][ T3553] device bridge_slave_0 entered promiscuous mode
[   54.197143][ T3555] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.204222][ T3555] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.212595][ T3555] device bridge_slave_0 entered promiscuous mode
[   54.235977][ T3553] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.243079][ T3553] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.251419][ T3553] device bridge_slave_1 entered promiscuous mode
[   54.261409][ T3555] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.268620][ T3555] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.276826][ T3555] device bridge_slave_1 entered promiscuous mode
[   54.285673][ T3556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.296648][ T3559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.325245][ T3556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.343716][ T3559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.384419][ T3556] team0: Port device team_slave_0 added
[   54.399883][ T3553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.417807][ T3555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.428408][ T3556] team0: Port device team_slave_1 added
[   54.435677][ T3555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.454140][ T3553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.472378][ T3554] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.480202][ T3554] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.488091][ T3554] device bridge_slave_0 entered promiscuous mode
[   54.512644][ T3559] team0: Port device team_slave_0 added
[   54.527530][ T3554] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.535913][ T3554] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.543577][ T3554] device bridge_slave_1 entered promiscuous mode
[   54.565412][ T3559] team0: Port device team_slave_1 added
[   54.571823][ T3556] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.578872][ T3556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.604875][ T3556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.618910][ T3553] team0: Port device team_slave_0 added
[   54.632805][ T3555] team0: Port device team_slave_0 added
[   54.646968][ T3556] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.654107][ T3556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.680117][ T3556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.692594][ T3553] team0: Port device team_slave_1 added
[   54.713519][ T3555] team0: Port device team_slave_1 added
[   54.741091][ T3554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.758409][ T3559] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.765491][ T3559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.792082][ T3559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.815388][ T3554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.840850][ T3559] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.847906][ T3559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.874199][ T3559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.886974][ T3553] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.894609][ T3553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.920690][ T3553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.940560][ T3555] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.947894][ T3555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.974030][ T3555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.986478][ T3555] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.993516][ T3555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.019503][ T3555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.042398][ T3553] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.049540][ T3553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.075460][ T3553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.099215][ T3556] device hsr_slave_0 entered promiscuous mode
[   55.106336][ T3556] device hsr_slave_1 entered promiscuous mode
[   55.127598][ T3554] team0: Port device team_slave_0 added
[   55.146106][ T3554] team0: Port device team_slave_1 added
[   55.181595][ T3559] device hsr_slave_0 entered promiscuous mode
[   55.188400][ T3559] device hsr_slave_1 entered promiscuous mode
[   55.195162][ T3559] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.202913][ T3559] Cannot create hsr debugfs directory
[   55.238565][ T3553] device hsr_slave_0 entered promiscuous mode
[   55.245305][ T3553] device hsr_slave_1 entered promiscuous mode
[   55.251760][ T3553] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.259576][ T3553] Cannot create hsr debugfs directory
[   55.283665][ T3555] device hsr_slave_0 entered promiscuous mode
[   55.290662][ T3555] device hsr_slave_1 entered promiscuous mode
[   55.297399][ T3555] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.305578][ T3555] Cannot create hsr debugfs directory
[   55.319012][ T3554] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.326985][ T3554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.353079][ T3554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.363963][ T3566] Bluetooth: hci0: command tx timeout
[   55.400367][ T3554] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.407602][ T3554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.433573][ T3554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.444669][ T3566] Bluetooth: hci4: command tx timeout
[   55.444683][   T47] Bluetooth: hci3: command tx timeout
[   55.444816][   T47] Bluetooth: hci2: command tx timeout
[   55.508756][ T3554] device hsr_slave_0 entered promiscuous mode
[   55.515713][   T47] Bluetooth: hci1: command tx timeout
[   55.521652][ T3554] device hsr_slave_1 entered promiscuous mode
[   55.528767][ T3554] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.536486][ T3554] Cannot create hsr debugfs directory
[   55.787695][ T3556] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.798294][ T3556] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.808550][ T3556] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.818415][ T3556] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.880204][ T3555] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.901866][ T3555] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.912263][ T3555] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.932860][ T3555] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.983373][ T3559] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.001765][ T3556] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.029878][ T3559] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.039514][ T3559] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.050389][ T3559] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.063299][ T3556] 8021q: adding VLAN 0 to HW filter on device team0
[   56.070319][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   56.080170][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   56.116860][ T1149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   56.126029][ T1149] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   56.134960][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.142108][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.150721][ T1149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   56.160458][ T1149] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   56.169204][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.176337][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.185889][ T1149] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   56.196934][ T3553] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   56.228627][ T3553] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   56.238054][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   56.246859][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   56.270189][ T3553] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   56.279641][ T3553] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   56.289422][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   56.298673][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   56.308349][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   56.317348][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   56.325975][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   56.334183][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   56.348530][ T3556] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.363845][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   56.386410][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   56.395671][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   56.404076][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   56.457739][ T3555] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.472488][ T3554] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   56.502113][ T3554] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   56.513698][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   56.525118][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   56.536571][ T3555] 8021q: adding VLAN 0 to HW filter on device team0
[   56.572498][ T3554] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   56.582232][ T3554] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   56.594418][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   56.603217][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   56.613328][ T3596] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.620490][ T3596] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.656942][ T3559] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.669480][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   56.711088][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   56.720461][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   56.729682][ T3606] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.736820][ T3606] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.745192][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   56.753240][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   56.761175][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   56.776955][ T3553] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.792934][ T3556] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.805641][ T3559] 8021q: adding VLAN 0 to HW filter on device team0
[   56.820460][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   56.828330][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   56.838737][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   56.847769][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   56.859211][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   56.867900][ T3601] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.875212][ T3601] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.883703][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   56.912457][ T3555] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   56.923875][ T3555] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.937889][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   56.949483][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   56.958485][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   56.967671][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   56.976098][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   56.984534][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   56.993174][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   57.001960][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   57.010423][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   57.018413][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   57.050372][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   57.060258][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   57.071628][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.078760][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.086795][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   57.095674][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   57.117649][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   57.127079][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   57.145184][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   57.160943][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   57.170336][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   57.194961][ T3553] 8021q: adding VLAN 0 to HW filter on device team0
[   57.217081][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   57.227120][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   57.239837][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   57.249123][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   57.257827][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   57.266355][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   57.275118][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   57.283399][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   57.296704][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   57.311948][ T3556] device veth0_vlan entered promiscuous mode
[   57.325049][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   57.333533][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   57.356207][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   57.365426][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   57.373960][ T3606] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.381113][ T3606] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.396461][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   57.404219][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   57.412976][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   57.434462][ T3567] Bluetooth: hci0: command tx timeout
[   57.447471][ T3556] device veth1_vlan entered promiscuous mode
[   57.463453][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   57.472283][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   57.481431][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   57.490164][    T7] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.497310][    T7] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.505123][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   57.513938][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   57.522252][ T3567] Bluetooth: hci2: command tx timeout
[   57.527733][ T3567] Bluetooth: hci4: command tx timeout
[   57.532875][   T47] Bluetooth: hci3: command tx timeout
[   57.547727][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   57.557866][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   57.594057][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   57.601707][   T47] Bluetooth: hci1: command tx timeout
[   57.614833][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   57.622825][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   57.632423][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   57.641030][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   57.649880][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   57.662376][ T3554] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.678707][ T3553] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.692244][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   57.719539][ T3556] device veth0_macvtap entered promiscuous mode
[   57.727051][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   57.741724][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   57.750445][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   57.766005][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   57.779602][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   57.809355][ T3556] device veth1_macvtap entered promiscuous mode
[   57.828121][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   57.836275][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   57.851054][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   57.860292][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   57.871626][ T3555] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.899070][ T3556] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.912576][ T3559] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.921314][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   57.929163][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   57.936654][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   57.946339][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   57.958353][ T3554] 8021q: adding VLAN 0 to HW filter on device team0
[   57.972997][ T3556] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.986294][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   57.999624][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   58.011767][ T3556] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.021179][ T3556] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.031054][ T3556] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.040032][ T3556] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.066954][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   58.075790][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   58.084083][ T3606] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.091210][ T3606] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.099780][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   58.108646][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   58.117519][ T3606] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.124705][ T3606] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.132292][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   58.141162][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   58.149710][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   58.168110][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   58.198196][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   58.208015][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   58.217592][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   58.226589][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   58.233999][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   58.241778][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   58.250377][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   58.258916][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   58.267728][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   58.276890][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   58.291782][ T3554] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   58.306067][ T3554] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   58.330906][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   58.339780][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   58.348710][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   58.357107][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   58.367427][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   58.375917][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   58.384196][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   58.392155][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   58.400342][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   58.412696][ T3555] device veth0_vlan entered promiscuous mode
[   58.431931][ T3553] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.498520][ T3559] device veth0_vlan entered promiscuous mode
[   58.527628][ T3555] device veth1_vlan entered promiscuous mode
[   58.550814][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   58.567878][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   58.580185][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   58.592734][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   58.604242][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   58.641275][ T3559] device veth1_vlan entered promiscuous mode
[   58.662761][ T3555] device veth0_macvtap entered promiscuous mode
[   58.684721][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   58.696620][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   58.705655][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   58.714795][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   58.742334][ T3555] device veth1_macvtap entered promiscuous mode
[   58.757728][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.773729][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.784194][ T3559] device veth0_macvtap entered promiscuous mode
[   58.811816][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   58.821765][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   58.845246][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   58.859440][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   58.867481][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   58.877956][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   58.904055][ T3559] device veth1_macvtap entered promiscuous mode
[   58.913928][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   58.928914][ T3555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   58.946271][ T3555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.962915][ T3555] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.001959][ T3559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   59.013782][ T3559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.024581][ T3559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   59.036230][ T3559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.047125][ T3559] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.058158][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   59.067198][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   59.076089][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   59.083459][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   59.090962][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   59.099751][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   59.113317][ T3555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   59.124862][ T3555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.137564][ T3555] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.151205][ T3555] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.160518][ T3555] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.169516][ T3555] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.178679][ T3555] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.203080][ T1149] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   59.213502][ T1149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   59.223483][ T1149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   59.232292][ T1149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   59.245107][ T3554] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.255507][ T3559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   59.266031][ T3559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.277370][ T3559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   59.287922][ T3559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.299369][ T3559] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.311471][ T3559] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.320525][ T3559] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.329855][ T3559] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.339014][ T3559] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.361833][ T2483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.371224][ T2483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.377084][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   59.387979][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   59.397668][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   59.406589][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   59.415579][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   59.459359][ T3553] device veth0_vlan entered promiscuous mode
[   59.470627][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   59.480386][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   59.509011][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   59.515706][ T3566] Bluetooth: hci0: command tx timeout
[   59.522256][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   59.530180][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   59.541395][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   59.550499][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   59.559098][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   59.570089][ T3553] device veth1_vlan entered promiscuous mode
[   59.594877][ T3566] Bluetooth: hci4: command tx timeout
[   59.594888][   T47] Bluetooth: hci2: command tx timeout
[   59.605795][ T3566] Bluetooth: hci3: command tx timeout
[   59.615889][ T3554] device veth0_vlan entered promiscuous mode
[   59.675327][ T3567] Bluetooth: hci1: command tx timeout
[   59.708221][ T3554] device veth1_vlan entered promiscuous mode
[   59.738960][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   59.753507][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   59.763692][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   59.778528][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   59.789436][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   59.803071][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   59.828956][ T3553] device veth0_macvtap entered promiscuous mode
[   59.860298][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   59.879713][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.888037][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.900827][ T3553] device veth1_macvtap entered promiscuous mode
[   59.919694][ T2483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.923949][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   59.929017][ T2483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.951114][ T3554] device veth0_macvtap entered promiscuous mode
[   59.972792][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   59.981275][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   59.990026][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   59.999378][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   60.012962][ T3553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   60.024392][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.024700][ T3553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.032402][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.043418][ T3553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   60.063707][ T3553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.074683][ T3597] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   60.074808][ T3553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   60.092868][ T3553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.104856][ T3553] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.123400][ T3554] device veth1_macvtap entered promiscuous mode
[   60.131049][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   60.143137][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   60.151410][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   60.160444][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   60.181883][ T3553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   60.198699][ T3553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.209205][ T3553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   60.219940][ T3553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.230161][ T3553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   60.242280][ T3553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.254121][ T3553] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.271448][ T3554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   60.282170][ T3554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.299726][ T3554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   60.310438][ T3554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.320982][ T3554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   60.331573][ T3554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.341482][ T3554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   60.352717][ T3554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.364961][ T3554] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.375254][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   60.383972][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   60.393751][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   60.402697][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   60.413221][ T3553] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.425686][ T3553] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.434789][ T3553] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.443525][ T3553] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.462987][ T3554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   60.474095][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.474919][ T3597] usb 2-1: config index 0 descriptor too short (expected 23569, got 27)
[   60.489656][ T3554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.502400][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.518389][ T3554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   60.522652][ T3597] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   60.538825][ T3554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.563501][ T3554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   60.593790][ T3554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.604725][ T3554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   60.624542][ T3597] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[   60.633909][ T3597] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[   60.639038][ T3554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.654109][ T3597] usb 2-1: Manufacturer: syz
[   60.662644][ T3554] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.674212][ T3597] usb 2-1: config 0 descriptor??
[   60.675937][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   60.690207][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   60.699160][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   60.725322][ T3554] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.734041][ T3554] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.745215][ T3554] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.754024][ T3554] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.893344][ T3646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'.
[   60.904798][ T3597] rc_core: IR keymap rc-hauppauge not found
[   60.909945][ T1149] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   60.917634][ T3597] Registered IR keymap rc-empty
[   60.935349][ T2483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.945392][ T3597] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[   60.952908][ T2483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.998513][ T3597] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input5
[   61.001785][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   61.018580][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.042401][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.051839][ T3597] usb 2-1: USB disconnect, device number 2
[   61.081074][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   61.113153][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.123847][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.143403][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   61.158789][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.168966][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.179823][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   61.184972][ T1149] usb 3-1: Using ep0 maxpacket: 16
[   61.270005][ T3656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'.
[   61.325092][ T1149] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   61.360486][ T1149] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA3, skipping
[   61.462995][ T3663] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14'.
[   61.509698][ T3665] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   61.564554][ T1149] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a
[   61.578268][ T1149] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   61.595767][ T3567] Bluetooth: hci0: command tx timeout
[   61.597877][ T1149] usb 3-1: Product: syz
[   61.613347][ T1149] usb 3-1: Manufacturer: syz
[   61.633666][ T1149] usb 3-1: SerialNumber: syz
[   61.652951][ T1149] usb 3-1: config 0 descriptor??
[   61.676947][ T3566] Bluetooth: hci3: command tx timeout
[   61.676966][ T3567] Bluetooth: hci4: command tx timeout
[   61.682550][ T3566] Bluetooth: hci2: command tx timeout
[   61.709464][ T1149] pegasus_notetaker 3-1:0.0: Invalid number of endpoints
[   61.732936][ T1149] pegasus_notetaker: probe of 3-1:0.0 failed with error -22
[   61.764659][ T3566] Bluetooth: hci1: command tx timeout
[   61.923742][   T14] usb 3-1: USB disconnect, device number 2
[   62.109423][ T3659] loop3: detected capacity change from 0 to 32768
[   62.163964][ T3659] XFS (loop3): DAX unsupported by block device. Turning off DAX.
[   62.202360][ T3691] 9pnet_fd: Insufficient options for proto=fd
[   62.215284][ T3659] XFS (loop3): Mounting V5 Filesystem
[   62.303928][ T3659] XFS (loop3): Ending clean mount
[   62.334382][ T3659] XFS (loop3): Quotacheck needed: Please wait.
[   62.433502][ T3659] XFS (loop3): Quotacheck: Done.
[   62.464750][ T3708] netlink: 12 bytes leftover after parsing attributes in process `syz.1.26'.
[   62.543547][ T3554] XFS (loop3): Unmounting Filesystem
[   62.606740][ T3710] loop2: detected capacity change from 0 to 256
[   62.613734][ T3710] exfat: Unknown parameter '����L���±����V�'
[   62.706156][ T3677] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   62.757945][ T3718] netlink: 'syz.4.29': attribute type 4 has an invalid length.
[   62.855584][ T3719] loop1: detected capacity change from 0 to 512
[   62.862512][ T3719] EXT4-fs: Ignoring removed oldalloc option
[   63.496725][ T3719] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.32: Parent and EA inode have the same ino 15
[   63.558448][ T3719] EXT4-fs (loop1): Remounting filesystem read-only
[   63.558935][ T3723] netlink: 'syz.4.29': attribute type 4 has an invalid length.
[   63.565384][ T3719] EXT4-fs (loop1): 1 orphan inode deleted
[   63.580960][ T3719] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   63.598133][ T3723] syz.4.29 (3723) used greatest stack depth: 19896 bytes left
[   63.606441][ T3719] EXT4-fs error (device loop1): ext4_lookup:1859: inode #2: comm syz.1.32: deleted inode referenced: 15
[   63.625650][ T3719] EXT4-fs (loop1): Remounting filesystem read-only
[   63.810978][ T3556] EXT4-fs (loop1): unmounting filesystem.
[   63.822659][ T2966] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   64.084388][ T2966] usb 1-1: Using ep0 maxpacket: 32
[   64.153015][ T3747] netlink: 16162 bytes leftover after parsing attributes in process `syz.1.39'.
[   64.204514][ T2966] usb 1-1: config index 0 descriptor too short (expected 156, got 27)
[   64.216585][ T2966] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[   64.257277][ T2966] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[   64.281085][ T2966] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[   64.301348][ T3753] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[   64.313204][ T3753] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[   64.330328][ T2966] usb 1-1: config 0 interface 0 has no altsetting 0
[   64.340052][ T3752] netlink: 12 bytes leftover after parsing attributes in process `syz.1.41'.
[   64.494619][ T2966] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[   64.511539][ T2966] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[   64.534186][ T2966] usb 1-1: Product: syz
[   64.542957][ T2966] usb 1-1: Manufacturer: syz
[   64.556740][ T2966] usb 1-1: SerialNumber: syz
[   64.571130][ T2966] usb 1-1: config 0 descriptor??
[   64.627113][ T2966] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[   64.667688][ T2966] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[   64.721014][ T3749] loop2: detected capacity change from 0 to 32768
[   64.724128][ T3761] loop4: detected capacity change from 0 to 256
[   64.734677][ T3761] exfat: Unknown parameter '����L���±����V�'
[   64.757717][ T3547] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   64.965090][ T3749] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[   64.974414][ T3749] XFS (loop2): Mounting V5 Filesystem
[   64.980362][ T3728] ldusb 1-1:0.0: Write buffer overflow, 1 bytes dropped
[   65.040688][ T3749] XFS (loop2): Ending clean mount
[   65.094594][ T3749] XFS (loop2): Quotacheck needed: Please wait.
[   65.166768][ T3749] XFS (loop2): Quotacheck: Done.
[   65.720113][ T3555] XFS (loop2): Unmounting Filesystem
[   65.745635][ T3728] ldusb 1-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[   65.752850][ T3335] usb 1-1: USB disconnect, device number 2
[   65.758755][    C1] ldusb 1-1:0.0: usb_submit_urb failed (-19)
[   65.769109][ T3335] ldusb 1-1:0.0: LD USB Device #0 now disconnected
[   66.090338][ T3783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   66.120033][ T3783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   66.134425][ T2966] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   66.150697][ T3783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   66.165619][ T3779] kvm: emulating exchange as write
[   66.172413][ T3783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   66.191739][ T3783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   66.385692][ T2966] usb 2-1: Using ep0 maxpacket: 32
[   66.510210][ T2966] usb 2-1: config index 0 descriptor too short (expected 156, got 27)
[   66.540552][ T2966] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[   66.564525][ T2966] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[   66.576512][ T2966] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[   66.590918][ T2966] usb 2-1: config 0 interface 0 has no altsetting 0
[   66.754601][ T2966] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[   66.774037][ T2966] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[   66.809443][ T2966] usb 2-1: Product: syz
[   66.813918][ T2966] usb 2-1: Manufacturer: syz
[   66.828029][ T2966] usb 2-1: SerialNumber: syz
[   66.859026][ T2966] usb 2-1: config 0 descriptor??
[   66.874830][    T7] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   66.895758][ T2966] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[   66.932352][ T2966] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[   67.079625][    T7] usb 4-1: device descriptor read/64, error -71
[   67.251053][ T3801] loop2: detected capacity change from 0 to 32768
[   67.265307][ T3801] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[   67.274093][ T3801] XFS (loop2): Mounting V5 Filesystem
[   67.275673][   T27] usb 2-1: USB disconnect, device number 3
[   67.285388][    C1] ldusb 2-1:0.0: usb_submit_urb failed (-19)
[   67.291887][ T3777] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[   67.299707][ T3808] ldusb 2-1:0.0: Write buffer overflow, 448 bytes dropped
[   67.315343][   T27] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[   67.345253][ T3801] XFS (loop2): Ending clean mount
[   67.352003][ T3801] XFS (loop2): Quotacheck needed: Please wait.
[   67.358682][    T7] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   67.375663][ T3801] XFS (loop2): Quotacheck: Done.
[   67.408764][ T3555] XFS (loop2): Unmounting Filesystem
[   67.554719][    T7] usb 4-1: device descriptor read/64, error -71
[   67.623603][ T3822] loop2: detected capacity change from 0 to 256
[   67.631089][ T3822] exfat: Unknown parameter '����L���±����V�'
[   67.677849][ T3677] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   67.687850][    T7] usb usb4-port1: attempt power cycle
[   67.974517][ T2966] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   68.214330][    T7] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   68.235618][ T2966] usb 1-1: Using ep0 maxpacket: 32
[   68.345374][    T7] usb 4-1: device descriptor read/8, error -71
[   68.355325][ T2966] usb 1-1: config 0 has no interfaces?
[   68.624938][ T2966] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed
[   68.650274][ T2966] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   68.673495][ T2966] usb 1-1: Product: syz
[   68.689984][ T2966] usb 1-1: Manufacturer: syz
[   68.702474][ T2966] usb 1-1: SerialNumber: syz
[   68.713020][    T7] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   68.764051][ T2966] usb 1-1: config 0 descriptor??
[   68.883500][    T7] usb 4-1: device descriptor read/8, error -71
[   69.015161][    T7] usb usb4-port1: unable to enumerate USB device
[   69.047331][ T3843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   69.077089][ T3843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   69.114197][ T3843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   69.126804][ T3843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   69.140139][ T3843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   69.151222][ T3846] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[   69.174959][ T3846] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[   69.209634][ T3848] loop2: detected capacity change from 0 to 1024
[   69.313956][ T3848] hfsplus: inconsistency in B*Tree (128,1,255,1,0)
[   69.942938][ T3850] loop2: detected capacity change from 0 to 32768
[   70.009240][ T3850] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[   70.029399][ T3850] XFS (loop2): Mounting V5 Filesystem
[   70.117475][ T3850] XFS (loop2): Ending clean mount
[   70.129320][ T3850] XFS (loop2): Quotacheck needed: Please wait.
[   70.151351][ T3850] XFS (loop2): Quotacheck: Done.
[   70.354979][    T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   70.391998][ T3555] XFS (loop2): Unmounting Filesystem
[   70.637780][    T7] usb 5-1: Using ep0 maxpacket: 32
[   70.756279][    T7] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[   70.802845][    T7] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[   70.888734][    T7] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[   70.926099][    T7] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[   70.950186][    T7] usb 5-1: config 0 interface 0 has no altsetting 0
[   70.991097][ T1149] usb 1-1: USB disconnect, device number 3
[   71.072578][ T3886] syz.0.78 uses obsolete (PF_INET,SOCK_PACKET)
[   71.102511][ T3886] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4032
[   71.146599][    T7] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[   71.166669][    T7] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[   71.193276][    T7] usb 5-1: Product: syz
[   71.203138][ T3890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.81'.
[   71.223266][    T7] usb 5-1: Manufacturer: syz
[   71.233403][    T7] usb 5-1: SerialNumber: syz
[   71.260078][    T7] usb 5-1: config 0 descriptor??
[   71.284916][ T1246] ieee802154 phy0 wpan0: encryption failed: -22
[   71.291432][ T1246] ieee802154 phy1 wpan1: encryption failed: -22
[   71.315732][    T7] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[   71.335872][    T7] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[   71.626448][ T3907] loop0: detected capacity change from 0 to 512
[   71.648348][ T3907] EXT4-fs (loop0): unsupported inode size: 143
[   71.654714][ T3907] EXT4-fs (loop0): blocksize: 4096
[   72.443733][ T2966] usb 5-1: USB disconnect, device number 2
[   72.455689][ T3870] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[   72.467517][ T3913] ldusb 5-1:0.0: Write buffer overflow, 448 bytes dropped
[   72.485333][ T2966] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[   72.745064][ T3923] netlink: 16 bytes leftover after parsing attributes in process `syz.3.89'.
[   72.770427][ T3925] fuse: Bad value for 'fd'
[   72.879190][ T3927] 9pnet_fd: Insufficient options for proto=fd
[   73.072662][ T3901] loop1: detected capacity change from 0 to 32768
[   73.153110][ T3901] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[   73.169938][ T3901] XFS (loop1): Mounting V5 Filesystem
[   73.221814][ T3948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.97'.
[   73.228972][ T3901] XFS (loop1): Ending clean mount
[   73.264797][ T3901] XFS (loop1): Quotacheck needed: Please wait.
[   73.302498][ T3901] XFS (loop1): Quotacheck: Done.
[   73.394490][ T3556] XFS (loop1): Unmounting Filesystem
[   73.577080][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   73.853214][ T3965] 9pnet_fd: Insufficient options for proto=fd
[   74.100501][ T3979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.108'.
[   75.087494][ T4002] loop2: detected capacity change from 0 to 1024
[   75.449669][ T4008] netlink: 8 bytes leftover after parsing attributes in process `syz.4.123'.
[   75.735978][ T3597] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   75.772623][ T3981] loop3: detected capacity change from 0 to 32768
[   75.852255][ T4028] loop4: detected capacity change from 0 to 256
[   75.888876][ T3981] XFS (loop3): DAX unsupported by block device. Turning off DAX.
[   75.918348][ T3981] XFS (loop3): Mounting V5 Filesystem
[   75.929466][ T4028] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[   75.984517][ T3597] usb 1-1: Using ep0 maxpacket: 16
[   76.023659][ T4040] xt_CT: You must specify a L4 protocol and not use inversions on it
[   76.044804][ T3981] XFS (loop3): Ending clean mount
[   76.081062][ T3981] XFS (loop3): Quotacheck needed: Please wait.
[   76.117426][ T3597] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[   76.127345][ T4046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.135'.
[   76.422656][ T3981] XFS (loop3): Quotacheck: Done.
[   76.912855][  T152] cfg80211: failed to load regulatory.db
[   76.990044][ T3554] XFS (loop3): Unmounting Filesystem
[   77.014999][ T4052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   77.035148][ T4054] loop1: detected capacity change from 0 to 128
[   77.093092][ T4054] FAT-fs (loop1): Directory bread(block 32) failed
[   77.101258][ T4054] FAT-fs (loop1): Directory bread(block 33) failed
[   77.109862][ T4054] FAT-fs (loop1): Directory bread(block 34) failed
[   77.116647][ T3597] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   77.118030][ T4054] FAT-fs (loop1): Directory bread(block 35) failed
[   77.130543][ T3597] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.146831][ T4054] FAT-fs (loop1): Directory bread(block 36) failed
[   77.153465][ T4054] FAT-fs (loop1): Directory bread(block 37) failed
[   77.155863][ T3597] usb 1-1: Product: syz
[   77.164821][ T3597] usb 1-1: Manufacturer: syz
[   77.169438][ T3597] usb 1-1: SerialNumber: syz
[   77.178451][ T4054] FAT-fs (loop1): Directory bread(block 38) failed
[   77.186258][ T4054] FAT-fs (loop1): Directory bread(block 39) failed
[   77.212627][ T4054] FAT-fs (loop1): Directory bread(block 40) failed
[   77.226122][ T3597] cdc_ether: probe of 1-1:1.0 failed with error -22
[   77.234500][ T4054] FAT-fs (loop1): Directory bread(block 41) failed
[   77.457559][ T2966] usb 1-1: USB disconnect, device number 4
[   77.489076][ T4068] netlink: 16162 bytes leftover after parsing attributes in process `syz.4.144'.
[   77.596895][ T4071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.146'.
[   78.901225][   T26] audit: type=1326 audit(1720790774.389:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4097 comm="syz.3.160" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd1f4b75bd9 code=0x0
[   78.904611][    T7] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   79.214548][    T7] usb 2-1: Using ep0 maxpacket: 32
[   79.335061][    T7] usb 2-1: config index 0 descriptor too short (expected 156, got 27)
[   79.351737][    T7] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[   79.494553][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   79.504301][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[   79.512772][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[   79.521154][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[   79.529526][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[   79.537928][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[   79.546275][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[   79.554578][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[   79.562877][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[   79.752854][ T4116] netlink: 'syz.0.163': attribute type 4 has an invalid length.
[   79.785921][    T7] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[   79.844037][    T7] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[   79.867309][    T7] usb 2-1: config 0 interface 0 has no altsetting 0
[   79.947012][ T4116] netlink: 15334 bytes leftover after parsing attributes in process `syz.0.163'.
[   80.055011][    T7] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[   80.096606][    T7] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[   80.129715][    T7] usb 2-1: Product: syz
[   80.144184][    T7] usb 2-1: Manufacturer: syz
[   80.163011][    T7] usb 2-1: SerialNumber: syz
[   80.328647][    T7] usb 2-1: config 0 descriptor??
[   80.391415][    T7] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[   80.446295][    T7] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[   80.615919][ T3598] usb 2-1: USB disconnect, device number 4
[   80.668879][ T3598] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[   80.967739][ T4143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.174'.
[   81.102357][ T4151] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   81.133145][ T4151] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   81.184004][ T4151] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   81.216407][ T4151] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   81.243298][ T4156] device pim6reg1 entered promiscuous mode
[   81.255257][ T4151] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   81.452771][ T4137] loop2: detected capacity change from 0 to 32768
[   81.478622][ T4161] rdma_op ffff88805b18c9f0 conn xmit_rdma 0000000000000000
[   81.504002][ T4137] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[   81.513920][ T4137] XFS (loop2): Mounting V5 Filesystem
[   81.549265][ T4137] XFS (loop2): Ending clean mount
[   81.561884][ T4137] XFS (loop2): Quotacheck needed: Please wait.
[   81.592508][ T4137] XFS (loop2): Quotacheck: Done.
[   81.670986][ T3555] XFS (loop2): Unmounting Filesystem
[   81.759966][ T3645] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   82.132666][   T26] audit: type=1326 audit(1720790777.619:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4178 comm="syz.2.183" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fae74f75bd9 code=0x0
[   82.155093][ T3645] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   82.185610][ T3645] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   82.374576][ T3645] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   82.409518][ T3645] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.454149][ T3645] usb 2-1: Product: 抡֨顼쐼⃉ꝫ㧨㙘ܓ슪ꀡ⚃⶟墔蓼༣鴾Ꚑ儧홳ڋ쪗鸎
[   82.535833][ T3645] usb 2-1: Manufacturer: 她蕋멳龜ؔ됛ꦆ뗮齔㗘మᆤ幽埍瀷쬎룱窛퍽黱覝轤㴓犂讯࣍䉙녒ⶇ扚†
[   82.609682][ T3645] usb 2-1: SerialNumber: syz
[   82.971074][ T4183] loop4: detected capacity change from 0 to 40427
[   82.996881][ T3645] usb 2-1: 0:2 : does not exist
[   83.044988][ T4183] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[   83.053582][ T4183] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   83.105728][ T3645] usb 2-1: USB disconnect, device number 5
[   83.131546][ T4183] F2FS-fs (loop4): invalid crc value
[   83.291547][ T4183] F2FS-fs (loop4): Found nat_bits in checkpoint
[   83.445806][ T4196] process 'syz.2.189' launched '/dev/fd/-1' with NULL argv: empty string added
[   83.584045][ T3677] udevd[3677]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   84.012337][ T4183] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   84.072289][ T4183] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   84.434336][    T7] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   84.686418][    T7] usb 2-1: Using ep0 maxpacket: 32
[   84.801689][ T4211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   84.811842][    T7] usb 2-1: config index 0 descriptor too short (expected 156, got 27)
[   84.832219][    T7] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[   84.863150][ T4212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   84.866548][    T7] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[   84.924342][    T7] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[   84.930841][ T4211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   84.955164][    T7] usb 2-1: config 0 interface 0 has no altsetting 0
[   85.004510][ T4212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   85.074614][ T4212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   85.103219][ T4205] loop2: detected capacity change from 0 to 32768
[   85.134549][    T7] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[   85.149276][    T7] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[   85.159231][    T7] usb 2-1: Product: syz
[   85.163783][    T7] usb 2-1: Manufacturer: syz
[   85.173457][    T7] usb 2-1: SerialNumber: syz
[   85.191527][ T4205] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[   85.216302][    T7] usb 2-1: config 0 descriptor??
[   85.223116][ T4205] XFS (loop2): Mounting V5 Filesystem
[   85.287295][    T7] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[   85.326915][    T7] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[   85.409265][ T4205] XFS (loop2): Ending clean mount
[   85.420427][ T4205] XFS (loop2): Quotacheck needed: Please wait.
[   85.450887][ T4205] XFS (loop2): Quotacheck: Done.
[   86.164163][ T3555] XFS (loop2): Unmounting Filesystem
[   86.739166][ T4229] loop3: detected capacity change from 0 to 32768
[   86.820158][ T4242] loop2: detected capacity change from 0 to 1024
[   86.918810][ T3005]  loop3: p1 p2 p3 < p5 p6 p7 >
[   87.050638][ T4242] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   87.945103][ T3545] udevd[3545]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[   87.947385][ T3547] udevd[3547]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[   87.972176][ T3677] udevd[3677]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[   87.986272][ T3647] udevd[3647]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory
[   88.029829][ T4254] udevd[4254]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory
[   88.053441][ T4256] udevd[4256]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory
[   89.116699][ T4266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   89.151642][ T4266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   89.203222][ T4266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   89.233441][ T4266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   89.261759][ T4266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   89.518466][ T4276] Zero length message leads to an empty skb
[   89.631923][ T4272] loop4: detected capacity change from 0 to 32768
[   89.673785][ T4272] XFS (loop4): DAX unsupported by block device. Turning off DAX.
[   89.689993][ T4272] XFS (loop4): Mounting V5 Filesystem
[   89.727950][ T4272] XFS (loop4): Ending clean mount
[   89.739340][ T4272] XFS (loop4): Quotacheck needed: Please wait.
[   89.773960][ T4272] XFS (loop4): Quotacheck: Done.
[   89.866801][ T3553] XFS (loop4): Unmounting Filesystem
[   90.043603][ T4297] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[   90.111784][ T4297] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[   90.154542][ T3567] Bluetooth: hci4: command tx timeout
[   90.310603][ T4308] loop4: detected capacity change from 0 to 256
[   90.366529][ T3677] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   90.509440][ T4314] 9pnet_fd: Insufficient options for proto=fd
[   90.814658][ T4201] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110
[   90.854878][   T22] usb 2-1: USB disconnect, device number 6
[   90.894830][   T22] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[   91.415822][ T4334] netlink: 'syz.0.233': attribute type 8 has an invalid length.
[   91.452117][ T4337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.234'.
[   91.464405][ T4334] netlink: 56 bytes leftover after parsing attributes in process `syz.0.233'.
[   91.508501][ T4334] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[   91.517404][ T4319] loop3: detected capacity change from 0 to 32768
[   91.591417][ T4347] 9pnet_fd: Insufficient options for proto=fd
[   91.622675][ T4319] XFS (loop3): DAX unsupported by block device. Turning off DAX.
[   91.651784][ T4319] XFS (loop3): Mounting V5 Filesystem
[   91.712360][ T4319] XFS (loop3): Ending clean mount
[   91.758071][ T4319] XFS (loop3): Quotacheck needed: Please wait.
[   91.806330][ T4319] XFS (loop3): Quotacheck: Done.
[   91.891868][ T3554] XFS (loop3): Unmounting Filesystem
[   91.934559][ T3598] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   91.976994][ T4364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.021181][ T4364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.080805][ T4364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.105754][ T4367] netlink: 16 bytes leftover after parsing attributes in process `syz.2.244'.
[   92.121342][ T4364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.162164][ T4364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.344650][ T3598] usb 1-1: config index 0 descriptor too short (expected 23569, got 27)
[   92.353595][ T3598] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   92.392107][ T4381] 9pnet_fd: Insufficient options for proto=fd
[   92.468856][ T3598] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[   92.493056][ T3598] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[   92.510186][ T3598] usb 1-1: Manufacturer: syz
[   92.526075][ T3598] usb 1-1: config 0 descriptor??
[   92.553333][ T4387] team0: Port device team_slave_0 removed
[   92.560139][ T4387] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[   92.654397][ T3598] rc_core: IR keymap rc-hauppauge not found
[   92.660522][ T3598] Registered IR keymap rc-empty
[   92.667185][ T3598] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[   92.679546][ T3598] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input6
[   92.838546][ T3645] usb 1-1: USB disconnect, device number 5
[   93.040925][ T4396] loop1: detected capacity change from 0 to 32768
[   93.056195][ T4396] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[   93.068772][ T4396] XFS (loop1): Mounting V5 Filesystem
[   93.099608][ T4396] XFS (loop1): Ending clean mount
[   93.132482][ T4396] XFS (loop1): Quotacheck needed: Please wait.
[   93.165509][ T4396] XFS (loop1): Quotacheck: Done.
[   93.227267][ T3556] XFS (loop1): Unmounting Filesystem
[   93.514599][ T3645] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   93.662041][ T4422] loop3: detected capacity change from 0 to 256
[   93.712490][ T4425] 9pnet_fd: Insufficient options for proto=fd
[   93.718859][ T3645] usb 3-1: device descriptor read/64, error -71
[   93.994439][ T3645] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   94.334506][ T3645] usb 3-1: device descriptor read/64, error -71
[   94.387468][ T4445] IPv6: NLM_F_REPLACE set, but no existing node found!
[   94.465377][ T3645] usb usb3-port1: attempt power cycle
[   94.964645][ T3645] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   95.065764][ T4452] loop3: detected capacity change from 0 to 256
[   95.074489][ T3645] usb 3-1: device descriptor read/8, error -71
[   95.103447][ T4452] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   95.147406][ T4452] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   95.414597][ T4459] IPv6: NLM_F_REPLACE set, but no existing node found!
[   95.454718][ T3645] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   95.480372][ T4461] 9pnet_fd: Insufficient options for proto=fd
[   95.554635][ T3645] usb 3-1: device descriptor read/8, error -71
[   95.726128][ T3645] usb usb3-port1: unable to enumerate USB device
[   96.541530][ T4477] IPv6: NLM_F_REPLACE set, but no existing node found!
[   97.241977][   T14] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   97.264983][   T14] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   97.272421][   T14] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   97.302828][   T14] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   97.318796][   T14] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   97.332993][   T14] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   97.347358][   T14] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   97.361593][   T14] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   97.376828][   T14] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   97.401942][   T14] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   97.432961][   T14] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   97.446269][   T14] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   97.464551][   T14] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   97.472368][   T14] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   97.473607][ T4485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   97.494351][   T14] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   97.507813][   T14] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   97.529678][   T14] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   97.544429][   T14] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   97.552805][ T4485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   97.574389][   T14] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   97.581889][   T14] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   97.599690][   T14] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   97.628940][   T14] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   97.637524][ T4485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   97.654326][   T14] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   97.672100][   T14] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   97.681302][ T4485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   97.704322][   T14] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   97.711746][   T14] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   97.731414][   T14] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   97.754448][   T14] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   97.761870][   T14] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   97.774502][   T14] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   97.781912][   T14] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   97.826410][   T14] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[   98.044774][ T4501] netlink: 44 bytes leftover after parsing attributes in process `syz.2.285'.
[   98.172193][ T4505] netlink: 'syz.2.287': attribute type 1 has an invalid length.
[   98.182335][ T4505] netlink: 'syz.2.287': attribute type 4 has an invalid length.
[   98.190674][ T4505] netlink: 15334 bytes leftover after parsing attributes in process `syz.2.287'.
[   98.348686][ T4511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.289'.
[   99.869584][ T4542] netlink: 44 bytes leftover after parsing attributes in process `syz.1.297'.
[   99.918946][ T4539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   99.942568][ T4541] netlink: 'syz.3.300': attribute type 1 has an invalid length.
[   99.965269][ T4541] netlink: 'syz.3.300': attribute type 4 has an invalid length.
[   99.981575][ T4541] netlink: 15334 bytes leftover after parsing attributes in process `syz.3.300'.
[  100.025359][ T4539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  100.078612][ T4539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  100.090053][ T4539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  100.102525][ T4539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  100.137303][ T4550] syz.1.301[4550] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  100.137408][ T4550] syz.1.301[4550] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  100.259977][ T4554] loop3: detected capacity change from 0 to 128
[  100.427287][ T4562] IPv6: NLM_F_REPLACE set, but no existing node found!
[  100.462464][ T4554] =======================================================
[  100.462464][ T4554] WARNING: The mand mount option has been deprecated and
[  100.462464][ T4554]          and is ignored by this kernel. Remove the mand
[  100.462464][ T4554]          option from the mount to silence this warning.
[  100.462464][ T4554] =======================================================
[  100.524445][ T3598] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  100.834639][ T3598] usb 3-1: Using ep0 maxpacket: 32
[  100.968989][ T4554] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[  101.010968][ T3598] usb 3-1: config 0 has no interfaces?
[  101.129740][ T4554] syz.3.304: attempt to access beyond end of device
[  101.129740][ T4554] loop3: rw=3, sector=6950, nr_sectors = 2 limit=128
[  101.231602][ T4571] syzkaller0: mtu less than device minimum
[  101.255391][ T3598] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed
[  101.278247][ T3598] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.295073][ T4554] syz.3.304: attempt to access beyond end of device
[  101.295073][ T4554] loop3: rw=2051, sector=6952, nr_sectors = 942 limit=128
[  101.425605][ T3598] usb 3-1: Product: syz
[  101.506147][ T3598] usb 3-1: Manufacturer: syz
[  101.590139][ T3598] usb 3-1: SerialNumber: syz
[  101.724526][ T3598] usb 3-1: config 0 descriptor??
[  102.160196][ T4584] netlink: 44 bytes leftover after parsing attributes in process `syz.0.311'.
[  102.843866][ T4590] netlink: 'syz.1.315': attribute type 1 has an invalid length.
[  102.902174][ T4590] netlink: 'syz.1.315': attribute type 4 has an invalid length.
[  102.924353][ T4590] netlink: 15334 bytes leftover after parsing attributes in process `syz.1.315'.
[  102.991442][ T4595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  103.037641][ T4595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  103.067173][ T4595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  103.090623][ T4595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  103.094609][ T3005] udevd[3005]: worker [3677] terminated by signal 33 (Unknown signal 33)
[  103.117468][ T4595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  103.120410][ T3005] udevd[3005]: worker [3677] failed while handling '/devices/virtual/block/loop4'
[  103.147434][ T4602] loop4: detected capacity change from 0 to 512
[  103.172203][    T7] usb 3-1: USB disconnect, device number 7
[  103.211608][ T4602] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors
[  103.235925][ T4602] EXT4-fs (loop4): group descriptors corrupted!
[  103.374138][ T4611] netlink: 44 bytes leftover after parsing attributes in process `syz.4.324'.
[  103.473387][ T4615] input: syz0 as /devices/virtual/input/input7
[  103.770507][ T4623] netlink: 'syz.0.330': attribute type 1 has an invalid length.
[  103.778330][ T4623] netlink: 'syz.0.330': attribute type 4 has an invalid length.
[  103.786838][ T4623] netlink: 15334 bytes leftover after parsing attributes in process `syz.0.330'.
[  105.107322][ T4638] loop2: detected capacity change from 0 to 256
[  105.119472][ T4638] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[  105.154083][   T26] audit: type=1800 audit(1720790800.639:4): pid=4638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.335" name="file1" dev="loop2" ino=1048597 res=0 errno=0
[  105.184398][ T4641] netlink: 44 bytes leftover after parsing attributes in process `syz.0.336'.
[  105.206302][ T4638] syz.2.335: attempt to access beyond end of device
[  105.206302][ T4638] loop2: rw=0, sector=184, nr_sectors = 120 limit=256
[  105.219745][ T3597] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  105.368177][ T4647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  105.437607][ T4647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  105.456605][ T4647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  105.469566][ T4647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  105.481244][ T4647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  105.588294][ T3597] usb 5-1: config index 0 descriptor too short (expected 23569, got 27)
[  105.621012][ T3597] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  105.714540][ T3597] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  105.734345][ T3597] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  105.752279][ T3597] usb 5-1: Manufacturer: syz
[  105.770577][ T3597] usb 5-1: config 0 descriptor??
[  105.904383][ T3597] rc_core: IR keymap rc-hauppauge not found
[  105.910591][ T3597] Registered IR keymap rc-empty
[  105.913970][ T4661] loop3: detected capacity change from 0 to 32768
[  105.928385][ T4661] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.343 (4661)
[  105.931328][ T3597] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  105.956975][ T3597] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input8
[  106.007965][ T4661] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  106.033201][ T3597] usb 5-1: USB disconnect, device number 3
[  106.065774][ T4661] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  106.085848][ T4661] BTRFS error (device loop3): support for check_integrity* not compiled in!
[  106.117090][ T4661] BTRFS error (device loop3): open_ctree failed
[  106.229537][ T3567] Bluetooth: hci1: unexpected event 0x2f length: 763 > 260
[  106.647821][ T4676] loop2: detected capacity change from 0 to 512
[  106.720250][ T4679] loop4: detected capacity change from 0 to 512
[  106.842093][ T4676] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  106.853320][ T4679] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  106.881735][ T4679] EXT4-fs (loop4): orphan cleanup on readonly fs
[  106.896597][ T4679] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #4: comm syz.4.349: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048)
[  106.901856][ T4676] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038 (0x7fffffff)
[  106.922108][ T4679] EXT4-fs error (device loop4): ext4_quota_enable:6971: comm syz.4.349: Bad quota inode: 4, type: 1
[  106.941922][ T4679] EXT4-fs warning (device loop4): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  106.971293][ T4679] EXT4-fs (loop4): Cannot turn on quotas: error -117
[  106.979023][ T4679] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  107.078810][ T3553] EXT4-fs (loop4): unmounting filesystem.
[  107.160575][ T4676] EXT4-fs (loop2): re-mounted. Quota mode: writeback.
[  107.204174][ T4687] loop4: detected capacity change from 0 to 512
[  107.261908][ T3555] EXT4-fs (loop2): unmounting filesystem.
[  107.272298][ T4687] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  107.395368][ T4687] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  107.422565][ T4687] EXT4-fs (loop4): 1 truncate cleaned up
[  107.442008][ T4687] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  107.634572][   T14] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[  107.680812][ T4698] rdma_op ffff88807bb269f0 conn xmit_rdma 0000000000000000
[  107.954328][ T1149] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  108.004692][   T14] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  108.199724][   T14] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  108.223560][   T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.243114][   T14] usb 3-1: Product: syz
[  108.253179][   T14] usb 3-1: Manufacturer: syz
[  108.273354][   T14] usb 3-1: SerialNumber: syz
[  108.335626][ T1149] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  108.373016][ T1149] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  108.588630][   T14] usb 3-1: USB disconnect, device number 8
[  108.594951][ T1149] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  108.628095][ T1149] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.644686][ T1149] usb 2-1: Product: 抡֨顼쐼⃉ꝫ㧨㙘ܓ슪ꀡ⚃⶟墔蓼༣鴾Ꚑ儧홳ڋ쪗鸎
[  108.665574][ T1149] usb 2-1: Manufacturer: 她蕋멳龜ؔ됛ꦆ뗮齔㗘మᆤ幽埍瀷쬎룱窛퍽黱覝轤㴓犂讯࣍䉙녒ⶇ扚†
[  108.695998][ T1149] usb 2-1: SerialNumber: syz
[  108.829889][ T3553] EXT4-fs (loop4): unmounting filesystem.
[  109.034765][ T1149] usb 2-1: 0:2 : does not exist
[  109.068123][ T1149] usb 2-1: USB disconnect, device number 7
[  109.237952][ T4717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.361'.
[  109.326278][ T4724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.366'.
[  109.821013][ T3559] 
[  109.823381][ T3559] ======================================================
[  109.830389][ T3559] WARNING: possible circular locking dependency detected
[  109.837383][ T3559] 6.1.98-syzkaller #0 Not tainted
[  109.842466][ T3559] ------------------------------------------------------
[  109.849460][ T3559] syz-executor/3559 is trying to acquire lock:
[  109.855725][ T3559] ffff88807b3fa130 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at: sco_conn_del+0x104/0x300
[  109.866142][ T3559] 
[  109.866142][ T3559] but task is already holding lock:
[  109.873483][ T3559] ffffffff8e3f0d08 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb8/0x2a0
[  109.883029][ T3559] 
[  109.883029][ T3559] which lock already depends on the new lock.
[  109.883029][ T3559] 
[  109.893494][ T3559] 
[  109.893494][ T3559] the existing dependency chain (in reverse order) is:
[  109.902486][ T3559] 
[  109.902486][ T3559] -> #2 (hci_cb_list_lock){+.+.}-{3:3}:
[  109.910196][ T3559]        lock_acquire+0x1f8/0x5a0
[  109.915207][ T3559]        __mutex_lock+0x132/0xd80
[  109.920209][ T3559]        hci_remote_features_evt+0x664/0xab0
[  109.926174][ T3559]        hci_event_packet+0xa9d/0x1510
[  109.931614][ T3559]        hci_rx_work+0x3cd/0xce0
[  109.936530][ T3559]        process_one_work+0x8a9/0x11d0
[  109.941972][ T3559]        worker_thread+0xa47/0x1200
[  109.947149][ T3559]        kthread+0x28d/0x320
[  109.951719][ T3559]        ret_from_fork+0x1f/0x30
[  109.956644][ T3559] 
[  109.956644][ T3559] -> #1 (&hdev->lock){+.+.}-{3:3}:
[  109.963923][ T3559]        lock_acquire+0x1f8/0x5a0
[  109.968933][ T3559]        __mutex_lock+0x132/0xd80
[  109.973940][ T3559]        sco_sock_connect+0x181/0x8f0
[  109.979301][ T3559]        __sys_connect+0x2c9/0x300
[  109.984399][ T3559]        __x64_sys_connect+0x76/0x80
[  109.989686][ T3559]        do_syscall_64+0x3b/0xb0
[  109.994611][ T3559]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  110.001009][ T3559] 
[  110.001009][ T3559] -> #0 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}:
[  110.010109][ T3559]        validate_chain+0x1661/0x5950
[  110.015467][ T3559]        __lock_acquire+0x125b/0x1f80
[  110.020822][ T3559]        lock_acquire+0x1f8/0x5a0
[  110.025828][ T3559]        lock_sock_nested+0x44/0x100
[  110.031097][ T3559]        sco_conn_del+0x104/0x300
[  110.036103][ T3559]        hci_conn_hash_flush+0x10e/0x2a0
[  110.041718][ T3559]        hci_dev_close_sync+0x9a9/0x1020
[  110.047429][ T3559]        hci_unregister_dev+0x1d7/0x4d0
[  110.053127][ T3559]        vhci_release+0x7f/0xd0
[  110.057958][ T3559]        __fput+0x3f6/0x8d0
[  110.062441][ T3559]        task_work_run+0x246/0x300
[  110.067534][ T3559]        do_exit+0xa73/0x26a0
[  110.072194][ T3559]        do_group_exit+0x202/0x2b0
[  110.077492][ T3559]        __x64_sys_exit_group+0x3b/0x40
[  110.083110][ T3559]        do_syscall_64+0x3b/0xb0
[  110.088384][ T3559]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  110.094878][ T3559] 
[  110.094878][ T3559] other info that might help us debug this:
[  110.094878][ T3559] 
[  110.105173][ T3559] Chain exists of:
[  110.105173][ T3559]   sk_lock-AF_BLUETOOTH-BTPROTO_SCO --> &hdev->lock --> hci_cb_list_lock
[  110.105173][ T3559] 
[  110.119627][ T3559]  Possible unsafe locking scenario:
[  110.119627][ T3559] 
[  110.127061][ T3559]        CPU0                    CPU1
[  110.132407][ T3559]        ----                    ----
[  110.137758][ T3559]   lock(hci_cb_list_lock);
[  110.142248][ T3559]                                lock(&hdev->lock);
[  110.148852][ T3559]                                lock(hci_cb_list_lock);
[  110.155884][ T3559]   lock(sk_lock-AF_BLUETOOTH-BTPROTO_SCO);
[  110.161783][ T3559] 
[  110.161783][ T3559]  *** DEADLOCK ***
[  110.161783][ T3559] 
[  110.169911][ T3559] 3 locks held by syz-executor/3559:
[  110.175174][ T3559]  #0: ffff88801f2d10b8 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x1cf/0x4d0
[  110.185095][ T3559]  #1: ffff88801f2d0078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x48d/0x1020
[  110.194746][ T3559]  #2: ffffffff8e3f0d08 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb8/0x2a0
[  110.204736][ T3559] 
[  110.204736][ T3559] stack backtrace:
[  110.210608][ T3559] CPU: 0 PID: 3559 Comm: syz-executor Not tainted 6.1.98-syzkaller #0
[  110.218740][ T3559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  110.228779][ T3559] Call Trace:
[  110.232128][ T3559]  <TASK>
[  110.235042][ T3559]  dump_stack_lvl+0x1e3/0x2cb
[  110.239818][ T3559]  ? nf_tcp_handle_invalid+0x642/0x642
[  110.245285][ T3559]  ? print_circular_bug+0x12b/0x1a0
[  110.250479][ T3559]  check_noncircular+0x2fa/0x3b0
[  110.255408][ T3559]  ? stack_trace_snprint+0xe0/0xe0
[  110.260508][ T3559]  ? add_chain_block+0x850/0x850
[  110.265438][ T3559]  ? lockdep_lock+0x11f/0x2a0
[  110.270109][ T3559]  ? lockdep_unlock+0x165/0x300
[  110.274945][ T3559]  ? lockdep_lock+0x2a0/0x2a0
[  110.279604][ T3559]  ? _find_first_zero_bit+0xd0/0x100
[  110.284980][ T3559]  validate_chain+0x1661/0x5950
[  110.289837][ T3559]  ? reacquire_held_locks+0x660/0x660
[  110.295203][ T3559]  ? reacquire_held_locks+0x660/0x660
[  110.300576][ T3559]  ? mark_lock+0x9a/0x340
[  110.304908][ T3559]  ? __lock_acquire+0x125b/0x1f80
[  110.309930][ T3559]  ? mark_lock+0x9a/0x340
[  110.314252][ T3559]  __lock_acquire+0x125b/0x1f80
[  110.319103][ T3559]  lock_acquire+0x1f8/0x5a0
[  110.323611][ T3559]  ? sco_conn_del+0x104/0x300
[  110.328282][ T3559]  ? read_lock_is_recursive+0x10/0x10
[  110.333653][ T3559]  ? sco_conn_del+0xfa/0x300
[  110.338325][ T3559]  ? __lock_acquire+0x1f80/0x1f80
[  110.343354][ T3559]  ? do_raw_spin_lock+0x14a/0x370
[  110.348374][ T3559]  lock_sock_nested+0x44/0x100
[  110.353153][ T3559]  ? sco_conn_del+0x104/0x300
[  110.357836][ T3559]  sco_conn_del+0x104/0x300
[  110.362337][ T3559]  ? sco_connect_cfm+0xb10/0xb10
[  110.367258][ T3559]  hci_conn_hash_flush+0x10e/0x2a0
[  110.372362][ T3559]  hci_dev_close_sync+0x9a9/0x1020
[  110.377466][ T3559]  hci_unregister_dev+0x1d7/0x4d0
[  110.382477][ T3559]  vhci_release+0x7f/0xd0
[  110.386811][ T3559]  ? vhci_open+0x360/0x360
[  110.391308][ T3559]  __fput+0x3f6/0x8d0
[  110.395282][ T3559]  task_work_run+0x246/0x300
[  110.400046][ T3559]  ? kasan_quarantine_put+0xd4/0x220
[  110.405325][ T3559]  ? task_work_cancel+0x2b0/0x2b0
[  110.410346][ T3559]  ? kmem_cache_free+0x292/0x510
[  110.415361][ T3559]  ? do_exit+0xa6e/0x26a0
[  110.419734][ T3559]  do_exit+0xa73/0x26a0
[  110.423888][ T3559]  ? put_task_struct+0x80/0x80
[  110.428699][ T3559]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  110.434695][ T3559]  ? print_irqtrace_events+0x210/0x210
[  110.440157][ T3559]  ? _raw_spin_unlock_irq+0x1f/0x40
[  110.445347][ T3559]  ? lockdep_hardirqs_on+0x94/0x130
[  110.450537][ T3559]  do_group_exit+0x202/0x2b0
[  110.455207][ T3559]  __x64_sys_exit_group+0x3b/0x40
[  110.460220][ T3559]  do_syscall_64+0x3b/0xb0
[  110.464640][ T3559]  ? clear_bhb_loop+0x45/0xa0
[  110.469321][ T3559]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  110.475206][ T3559] RIP: 0033:0x7f2f8fd75bd9
[  110.479613][ T3559] Code: Unable to access opcode bytes at 0x7f2f8fd75baf.
[  110.486610][ T3559] RSP: 002b:00007ffc176e9048 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  110.495006][ T3559] RAX: ffffffffffffffda RBX: 00007f2f8fde4a70 RCX: 00007f2f8fd75bd9
[  110.502957][ T3559] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043
[  110.511441][ T3559] RBP: 00007f2f8fde4a82 R08: 00007ffc176e6de7 R09: 0000000000000bb8
[  110.519415][ T3559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[  110.527368][ T3559] R13: 0000000000000bb8 R14: 000000000001ab90 R15: 000000000001ab69
[  110.535414][ T3559]  </TASK>
[  110.690049][ T3875] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.758845][ T3875] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.807355][ T3875] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.857840][ T3875] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.492887][ T3875] device hsr_slave_0 left promiscuous mode
[  111.499362][ T3875] device hsr_slave_1 left promiscuous mode
[  111.505507][ T3875] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  111.512879][ T3875] batman_adv: batadv0: Removing interface: batadv_slave_0
[  111.520438][ T3875] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  111.528062][ T3875] batman_adv: batadv0: Removing interface: batadv_slave_1
[  111.535488][ T3875] device bridge_slave_1 left promiscuous mode
[  111.541606][ T3875] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.550097][ T3875] device bridge_slave_0 left promiscuous mode
[  111.556372][ T3875] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.565967][ T3875] device veth1_macvtap left promiscuous mode
[  111.571952][ T3875] device veth0_macvtap left promiscuous mode
[  111.578094][ T3875] device veth1_vlan left promiscuous mode
[  111.583837][ T3875] device veth0_vlan left promiscuous mode
[  111.745398][ T3875] team0 (unregistering): Port device team_slave_1 removed
[  111.754336][ T3566] Bluetooth: hci1: command 0x0406 tx timeout
[  111.763999][ T3875] team0 (unregistering): Port device team_slave_0 removed
[  111.784604][ T3875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  111.802472][ T3875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  111.838997][ T3875] bond0 (unregistering): Released all slaves
[  112.270223][ T3875] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.337119][ T3875] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.398816][ T3875] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.437142][ T3875] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.489658][ T3875] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.547694][ T3875] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.598022][ T3875] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.667061][ T3875] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.719965][ T3875] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.767290][ T3875] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.817012][ T3875] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.857941][ T3875] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.919174][ T3875] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.977233][ T3875] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.017423][ T3875] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.067193][ T3875] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.993458][ T3875] device hsr_slave_0 left promiscuous mode
[  113.999662][ T3875] device hsr_slave_1 left promiscuous mode
[  114.006015][ T3875] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  114.013497][ T3875] batman_adv: batadv0: Removing interface: batadv_slave_0
[  114.020928][ T3875] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  114.028383][ T3875] batman_adv: batadv0: Removing interface: batadv_slave_1
[  114.036106][ T3875] device bridge_slave_1 left promiscuous mode
[  114.042260][ T3875] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.050171][ T3875] device bridge_slave_0 left promiscuous mode
[  114.056431][ T3875] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.066476][ T3875] device hsr_slave_0 left promiscuous mode
[  114.072560][ T3875] device hsr_slave_1 left promiscuous mode
[  114.078651][ T3875] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  114.086059][ T3875] batman_adv: batadv0: Removing interface: batadv_slave_0
[  114.093497][ T3875] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  114.100952][ T3875] batman_adv: batadv0: Removing interface: batadv_slave_1
[  114.108829][ T3875] device bridge_slave_1 left promiscuous mode
[  114.115042][ T3875] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.122711][ T3875] device bridge_slave_0 left promiscuous mode
[  114.129107][ T3875] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.138698][ T3875] device hsr_slave_0 left promiscuous mode
[  114.145254][ T3875] device hsr_slave_1 left promiscuous mode
[  114.151361][ T3875] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  114.159072][ T3875] batman_adv: batadv0: Removing interface: batadv_slave_0
[  114.166591][ T3875] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  114.173998][ T3875] batman_adv: batadv0: Removing interface: batadv_slave_1
[  114.181499][ T3875] device bridge_slave_1 left promiscuous mode
[  114.187731][ T3875] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.195449][ T3875] device bridge_slave_0 left promiscuous mode
[  114.201561][ T3875] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.211613][ T3875] device hsr_slave_0 left promiscuous mode
[  114.217940][ T3875] device hsr_slave_1 left promiscuous mode
[  114.224023][ T3875] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  114.231514][ T3875] batman_adv: batadv0: Removing interface: batadv_slave_0
[  114.238986][ T3875] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  114.246468][ T3875] batman_adv: batadv0: Removing interface: batadv_slave_1
[  114.253843][ T3875] device bridge_slave_1 left promiscuous mode
[  114.260148][ T3875] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.267863][ T3875] device bridge_slave_0 left promiscuous mode
[  114.273972][ T3875] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.285158][ T3875] device veth1_macvtap left promiscuous mode
[  114.291336][ T3875] device veth0_macvtap left promiscuous mode
[  114.297447][ T3875] device veth1_vlan left promiscuous mode
[  114.303450][ T3875] device veth0_vlan left promiscuous mode
[  114.309690][ T3875] device veth1_macvtap left promiscuous mode
[  114.315749][ T3875] device veth0_macvtap left promiscuous mode
[  114.321770][ T3875] device veth1_vlan left promiscuous mode
[  114.327832][ T3875] device veth0_vlan left promiscuous mode
[  114.334088][ T3875] device veth1_macvtap left promiscuous mode
[  114.340246][ T3875] device veth0_macvtap left promiscuous mode
[  114.346442][ T3875] device veth1_vlan left promiscuous mode
[  114.352194][ T3875] device veth0_vlan left promiscuous mode
[  114.358504][ T3875] device veth1_macvtap left promiscuous mode
[  114.364659][ T3875] device veth0_macvtap left promiscuous mode
[  114.370756][ T3875] device veth1_vlan left promiscuous mode
[  114.376549][ T3875] device veth0_vlan left promiscuous mode
[  114.584696][ T3875] team0 (unregistering): Port device team_slave_1 removed
[  114.613861][ T3875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  114.626478][ T3875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  114.663565][ T3875] bond0 (unregistering): Released all slaves
[  114.751191][ T3875] team0 (unregistering): Port device team_slave_1 removed
[  114.770331][ T3875] team0 (unregistering): Port device team_slave_0 removed
[  114.786247][ T3875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  114.803738][ T3875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  114.840759][ T3875] bond0 (unregistering): Released all slaves
[  114.928246][ T3875] team0 (unregistering): Port device team_slave_1 removed
[  114.947858][ T3875] team0 (unregistering): Port device team_slave_0 removed
[  114.963717][ T3875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  114.981460][ T3875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  115.017462][ T3875] bond0 (unregistering): Released all slaves
[  115.146063][ T3875] team0 (unregistering): Port device team_slave_1 removed
[  115.162595][ T3875] team0 (unregistering): Port device team_slave_0 removed
[  115.178596][ T3875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  115.196093][ T3875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  115.232005][ T3875] bond0 (unregistering): Released all slaves