last executing test programs:

23.86439321s ago: executing program 1 (id=131):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x572, &(0x7f00000006c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101242, 0x220)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143442, 0x100)
pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0)
fallocate(r0, 0x3, 0x8, 0xf3d)

16.431855584s ago: executing program 1 (id=136):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
landlock_create_ruleset(&(0x7f0000000180)={0x7f6e}, 0x18, 0x0)

16.429517744s ago: executing program 1 (id=140):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb68, &(0x7f0000000c40)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xcd)
mount$overlay(0x0, 0x0, &(0x7f0000000440), 0x8, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
unshare(0x22020600)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/208, 0xd0, 0x8d35)
syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff)
setxattr$trusted_overlay_opaque(&(0x7f0000000240)='./bus\x00', &(0x7f00000002c0), &(0x7f0000001400), 0x2, 0x2)
unshare(0x24060400)
r3 = socket$rds(0x15, 0x5, 0x0)
setsockopt$sock_int(r3, 0x1, 0x45, &(0x7f0000000080)=0x2, 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x1, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0xa, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0xb, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0x3a3, 0x3, 0x8, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0x7a, 0x0, 0x71, 0x4, 0x57, 0x7, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a5, 0x4, 0x1, 0x20000000, 0x7e, 0x0, 0x20000007, 0x6, 0x8, 0x4, 0x1, 0xe], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x23f, 0x5, 0x1000, 0xfffffffc, 0x43, 0xffffffff, 0x7, 0x5, 0x2f, 0xa, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0xfff, 0x9, 0x9b, 0x3fe, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x3, 0x9, 0x8, 0xb392, 0x6, 0xb, 0xb, 0x1, 0x9, 0x9, 0x2, 0x7d, 0x40009, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400007], [0x6, 0x6, 0x80000001, 0x2, 0x4, 0x100, 0x8d2, 0xd, 0x5, 0x7, 0x0, 0x2, 0xb, 0x4, 0x5, 0x1005, 0xfffffffe, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0xa, 0x3e7, 0x9, 0x5, 0x5, 0x2, 0x1, 0xfffffff3, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x0, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x4, 0xac8, 0xbf, 0x10002, 0x403, 0x17c, 0x3, 0x0, 0x1, 0xffff, 0x100, 0x40010005, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x3, 0xfc], [0x100009, 0xbb31, 0x3, 0xb, 0x101, 0x1, 0x6, 0x65, 0x0, 0x3, 0x80ce7, 0x1ff, 0xc4, 0x400009, 0x5, 0x1003, 0x40000101, 0xc, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0xe00, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0x7, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x832f, 0x5a2c, 0xc, 0x17, 0x1, 0x101, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x400200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

16.426294324s ago: executing program 1 (id=146):
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYRES32=r0], &(0x7f0000000500)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)=@llc={0x1a, 0x108, 0x7, 0x37, 0x6, 0x80, @random="5dc374438677"}, 0x80, 0x0}, 0x40448d4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xcc0, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860186dd", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x1c3641)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000300)={{0x0, 0xff}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0xba21})
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90)
r4 = syz_ublk_setup_io_uring(0x5084, &(0x7f0000000040)={0x0, 0xd3b6, 0x1, 0x1, 0xb7}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000300))
mmap$IORING_OFF_SQ_RING(0x0, 0x1, 0x8, 0x810, r4, 0x0)

15.875864818s ago: executing program 1 (id=151):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x32}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80)

15.728694831s ago: executing program 1 (id=154):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ppoll(&(0x7f00000003c0)=[{r0}], 0x1, &(0x7f0000000440), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x100, 0x1})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x8, 0x1, 0x3c, 0x42}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r3}, 0x38)

10.712584215s ago: executing program 3 (id=169):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x134}}, 0x0)
r0 = syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f0000000880)='./file0\x00', 0x18000c6, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYRES16=0x0, @ANYRES8], 0x0, 0x17d, &(0x7f0000001ac0)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
getdents64(r1, 0x0, 0xc00)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, &(0x7f0000000ec0)=ANY=[@ANYBLOB='filter\x00'/30], &(0x7f0000003000)=0x2a0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="01002dbd7000fddbdf250c0000002000018008000300030000001400020076657468305f766c616e00000000000014000380100003"], 0x48}, 0x1, 0x0, 0x0, 0x4801}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="000000fe8000000000000000000000000000bb000000000000fffe0200"/51, @ANYRES16=r0, @ANYBLOB="9b5ebe03c94797874c17f69ab856ca137c9683b1bf8fd092aaddf13a6a8423b4a07b99314ea8d2890442267427c739343650ed15b797657fa17913a1fb2fa4a4393f0c6470274063416a03d4bd8165681ccda17aafe1179d005ee8021961443ec34ee48776e53ee70954a76d27ca5946680028035ab393c085eab8aee3b7bdbf7783f1430786ff0029b5aa0f9ba3f4a25d8b233b0941fe340c770b2fd0612f9afc"], 0xfc}, 0x1, 0x0, 0x0, 0x4004000}, 0x4004050)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000500)={'ip6gre0\x00', 0x0, 0x2f, 0xff, 0x0, 0xb, 0x28, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x28}, 0x700, 0x80, 0x4, 0x1}})
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[], 0x1b0}, 0x1, 0x0, 0x0, 0x4}, 0x10)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xeed7e89f6334d838})
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
poll(&(0x7f00000002c0)=[{r7, 0x80ad}], 0x1, 0x2)
exit(0xffff)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000200)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000240)=[@request_death, @clear_death], 0x0, 0x0, 0x0})
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000005f00)={'wlan0\x00'})

7.759913918s ago: executing program 0 (id=173):
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket(0x10, 0x3, 0x4)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r5 = memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x00\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\xf3\xff\x00\x00\x00\x00\xdf8\x9c\xc0T\xd2\xa7\v\x9a\xd2b\x8aL\xdd\x9e\x9d0\xb9\xd8K\x7f\x02\xf0\x19?j\x88l)l\xdbO\x88\r\x9c\xc2\x97m\xe0\xd8\xe4\xaaM4\x92\xca\xd7\x03\x11{\x98-\xb3D\xb8L\a\xdc3\xc8\x19\x9dg\x90\xb5?J\xc8\b=\xc5\b\xd9\x9eG[\xa9\xff]\xdaH\xc1Q\x95T\xfe\x9eRq\xdd[\x90MVb\x122m\xef\xeded#\xaf\xb5\xe3 \x8a\xfa\xf6\xdf\n]KbE\xb7\x9cLL\x93\xe7^\xc7\xde\xd0\xc2\xb5\xfe\v\xc3\xe1\x92[\xdbIq\x81\x00\x9b]\xee\xcbk\"\xdc\x89\x1c\xc3\xa1\x04\xa8\x8fF\xe9y\x0f<\xc0\xac\x06/\x8c\xfcP/\x83\x1f\v\xb8\xf1\xb1T\xdf_\xa1}\xf0)\xb3/_X\x9f\xee\tq\xec\xddG\x82\x95\xfe\x00\x94\xcf\xe1\xbd\x95+\xa4\x95\xf3!\xabu\xe1i', 0x2)
ftruncate(r5, 0xffff)
fcntl$addseals(r5, 0x409, 0x7)
r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x8000})
ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000080)=0x1)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]})
close_range(r7, 0xffffffffffffffff, 0x0)

7.759832328s ago: executing program 3 (id=174):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20000, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), 0x0}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x4, 0x0, 0x0)
close(r0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x42000, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180))

6.748980163s ago: executing program 0 (id=176):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@stripe={'stripe', 0x3d, 0x9}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x448, &(0x7f0000000d40)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
mount$fuse(0x0, &(0x7f00000004c0)='./file2\x00', &(0x7f0000000500), 0x8, &(0x7f00000011c0)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x9}}, {@blksize={'blksize', 0x3d, 0xc00}}]}})
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_int(r3, 0x6, 0x25, &(0x7f0000000080)=0x4, 0x4)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x0)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x20000f19}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0xf1}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xa)

6.737590573s ago: executing program 2 (id=177):
r0 = socket$inet(0xa, 0x801, 0x84)
r1 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x2, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r1, 0xfffffffd)
listen(r0, 0x8)
r2 = socket$inet(0xa, 0x801, 0x84)
listen(r2, 0x8)
r3 = socket$inet(0xa, 0x801, 0x84)
listen(r3, 0x8)
listen(0xffffffffffffffff, 0x7)
accept4(r1, 0x0, 0x0, 0x800)
r4 = socket$netlink(0x10, 0x3, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r4)
writev(r4, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1)

6.672531765s ago: executing program 4 (id=178):
socket(0x10, 0x2, 0x0)
openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0)
socket$inet6(0xa, 0x80803, 0x84)
r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0, r0)
openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x68, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "e3de3d7b4cd07ec3ee777de774fc7987cca41989ec53f953f615edc21c4335093450b134"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)

6.602279887s ago: executing program 3 (id=179):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb68, &(0x7f0000000c40)="$eJzs3M9rHFUcAPDvm2y2aRtNiqLWi4EeGihufkmhxUOLeFMQrOCxwaRt7PYHTUTbiym9KhTUP6AHTx5S8NCDl549epEevEsxKJSeIzP7I9smm02bTQfSzwcm+9687L7vzDdvMm/YmQBeWmP5jyzicETcThEjzfVZRFSL0lDEcuP37s3cvZAvKdbWPv03RYqIlZm7F1qflZqvB5sfMBQRfyynmLm1sd/F6zcuztbr89ea9YmlS1cnFq/feHfh0uz5+fPzl6dOnDg+OT194vhk37b12PiRn1a+/vCfO/cmHv/8wbFfUpyK4WZb53b0y1iMtffJ0z7rd2clGYiISkfuc6lSYkAAAGwp6ziHOxwjMRDrJ28jUVsoNTgAAACgL76NiDUAAABgj0vm/wAAALDHtb4HsDJz90JrKfcbCbxIq6cjYrSR/9b93Y2WSiwXr0MxGBEHHqXovK03Nd62Y2MRcfX2rYV8iV26D5vulm9GxFubjf9U5H+0uIt/Y/6ziOjHnfljT9Xl/8XaSf5P9aF/+QcAAHgx7p9uTOQ3zv+y9vWf2GT+N7DJ3O159J7/ZQ/70A1drJ6OeL/j2Y73OvLfNDrQrL1SXA8YTOcW6vOTEfFqRIzH4L68PrVFHwsf//Zmt7bO63/5kvffuhbYjONhZd+T75mbXZrdyTazbvVmxNuVzfKf2uM/dbn++8k2+/j+yx9Wu7X1zj+7ae1OxNFNx//6Ez3T1s9nnSiOBxOto8JGnw//tdKtf/kvVz7+D2yd/+L4335e7+Kz93G2+t1r3dqe9/hfTWeKAKvNdd/MLi1dm4qopo82rp9+9pj3qtb+aO2vPP/jRzb//7/V8T//mzi7zT4f//roTLc2479cef7neoz/9MT4f/bCf3/+/ka3/rc3/t8rghlvrnH+19t2E1R2nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP2SRcRwpKzWLmdZrRZxMCJejwNZ/cri0rFzV766PJe3RYzGYHZuoT4/GREjjXrK61NFeb0+/VR9JiIORcSPI/uLeu2LK/W5sjceAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAtoMRMRwpq0VEVpSzrFZrtP09UnZ0AAAAQN+Mlh0AAAAAsOvM/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYoUPv3H+QImL55P5iyVWbbYOlRgbstqzsAIDSDJQdAFCaStkBAKUxxwdSj/ahri3OIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABeJkcP33+QImL55P5iyVWbbYOlRgbstqzsAIDSDJQdAFCaStkBAKUxxwdSj/ahri3OIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABeJovXb1ycrdfnrykoKCi0C2UfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjL/g8AAP//QQPhyQ==")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xcd)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x8, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
unshare(0x22020600)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/208, 0xd0, 0x8d35)
syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff)
setxattr$trusted_overlay_opaque(&(0x7f0000000240)='./bus\x00', &(0x7f00000002c0), &(0x7f0000001400), 0x2, 0x2)
unshare(0x24060400)
r3 = socket$rds(0x15, 0x5, 0x0)
setsockopt$sock_int(r3, 0x1, 0x45, &(0x7f0000000080)=0x2, 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x1, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0xa, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0xb, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0x3a3, 0x3, 0x8, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0x7a, 0x0, 0x71, 0x4, 0x57, 0x7, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a5, 0x4, 0x1, 0x20000000, 0x7e, 0x0, 0x20000007, 0x6, 0x8, 0x4, 0x1, 0xe], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x23f, 0x5, 0x1000, 0xfffffffc, 0x43, 0xffffffff, 0x7, 0x5, 0x2f, 0xa, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0xfff, 0x9, 0x9b, 0x3fe, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x3, 0x9, 0x8, 0xb392, 0x6, 0xb, 0xb, 0x1, 0x9, 0x9, 0x2, 0x7d, 0x40009, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400007], [0x6, 0x6, 0x80000001, 0x2, 0x4, 0x100, 0x8d2, 0xd, 0x5, 0x7, 0x0, 0x2, 0xb, 0x4, 0x5, 0x1005, 0xfffffffe, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0xa, 0x3e7, 0x9, 0x5, 0x5, 0x2, 0x1, 0xfffffff3, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x0, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x4, 0xac8, 0xbf, 0x10002, 0x403, 0x17c, 0x3, 0x0, 0x1, 0xffff, 0x100, 0x40010005, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x3, 0xfc], [0x100009, 0xbb31, 0x3, 0xb, 0x101, 0x1, 0x6, 0x65, 0x0, 0x3, 0x80ce7, 0x1ff, 0xc4, 0x400009, 0x5, 0x1003, 0x40000101, 0xc, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0xe00, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0x7, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x832f, 0x5a2c, 0xc, 0x17, 0x1, 0x101, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x400200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

6.532000418s ago: executing program 4 (id=180):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x11, 0xa, 0x5)
ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}})
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x12002, 0x0)
ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0)
sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/133, 0x85}], 0x1)

6.177650697s ago: executing program 2 (id=181):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb68, &(0x7f0000000c40)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xcd)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000500))
unshare(0x22020600)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/208, 0xd0, 0x8d35)
syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff)
setxattr$trusted_overlay_opaque(&(0x7f0000000240)='./bus\x00', &(0x7f00000002c0), &(0x7f0000001400), 0x2, 0x2)
unshare(0x24060400)
r3 = socket$rds(0x15, 0x5, 0x0)
setsockopt$sock_int(r3, 0x1, 0x45, &(0x7f0000000080)=0x2, 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x1, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0xa, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0xb, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0x3a3, 0x3, 0x8, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0x7a, 0x0, 0x71, 0x4, 0x57, 0x7, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a5, 0x4, 0x1, 0x20000000, 0x7e, 0x0, 0x20000007, 0x6, 0x8, 0x4, 0x1, 0xe], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x23f, 0x5, 0x1000, 0xfffffffc, 0x43, 0xffffffff, 0x7, 0x5, 0x2f, 0xa, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0xfff, 0x9, 0x9b, 0x3fe, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x3, 0x9, 0x8, 0xb392, 0x6, 0xb, 0xb, 0x1, 0x9, 0x9, 0x2, 0x7d, 0x40009, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400007], [0x6, 0x6, 0x80000001, 0x2, 0x4, 0x100, 0x8d2, 0xd, 0x5, 0x7, 0x0, 0x2, 0xb, 0x4, 0x5, 0x1005, 0xfffffffe, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0xa, 0x3e7, 0x9, 0x5, 0x5, 0x2, 0x1, 0xfffffff3, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x0, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x4, 0xac8, 0xbf, 0x10002, 0x403, 0x17c, 0x3, 0x0, 0x1, 0xffff, 0x100, 0x40010005, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x3, 0xfc], [0x100009, 0xbb31, 0x3, 0xb, 0x101, 0x1, 0x6, 0x65, 0x0, 0x3, 0x80ce7, 0x1ff, 0xc4, 0x400009, 0x5, 0x1003, 0x40000101, 0xc, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0xe00, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0x7, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x832f, 0x5a2c, 0xc, 0x17, 0x1, 0x101, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x400200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

5.24061213s ago: executing program 0 (id=182):
socket(0x10, 0x2, 0x0)
openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0)
socket$inet6(0xa, 0x80803, 0x84)
r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0, r0)
openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x68, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "e3de3d7b4cd07ec3ee777de774fc7987cca41989ec53f953f615edc21c4335093450b134"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), r1)
sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r4, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x1, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0)

4.324771643s ago: executing program 3 (id=183):
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d)

4.240069915s ago: executing program 4 (id=184):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x134}}, 0x0)
r0 = syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f0000000880)='./file0\x00', 0x18000c6, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYRES16=0x0, @ANYRES8], 0x0, 0x17d, &(0x7f0000001ac0)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
getdents64(r1, 0x0, 0xc00)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, &(0x7f0000000ec0)=ANY=[@ANYBLOB='filter\x00'/30], &(0x7f0000003000)=0x2a0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="01002dbd7000fddbdf250c0000002000018008000300030000001400020076657468305f766c616e00000000000014000380100003"], 0x48}, 0x1, 0x0, 0x0, 0x4801}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="000000fe8000000000000000000000000000bb000000000000fffe0200"/51, @ANYRES16=r0, @ANYBLOB="9b5ebe03c94797874c17f69ab856ca137c9683b1bf8fd092aaddf13a6a8423b4a07b99314ea8d2890442267427c739343650ed15b797657fa17913a1fb2fa4a4393f0c6470274063416a03d4bd8165681ccda17aafe1179d005ee8021961443ec34ee48776e53ee70954a76d27ca5946680028035ab393c085eab8aee3b7bdbf7783f1430786ff0029b5aa0f9ba3f4a25d8b233b0941fe340c770b2fd0612f9afc"], 0xfc}, 0x1, 0x0, 0x0, 0x4004000}, 0x4004050)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000500)={'ip6gre0\x00', 0x0, 0x2f, 0xff, 0x0, 0xb, 0x28, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x28}, 0x700, 0x80, 0x4, 0x1}})
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[], 0x1b0}, 0x1, 0x0, 0x0, 0x4}, 0x10)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xeed7e89f6334d838})
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
poll(&(0x7f00000002c0)=[{r7, 0x80ad}], 0x1, 0x2)
exit(0xffff)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000200)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000240)=[@request_death, @clear_death], 0x0, 0x0, 0x0})
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000005f00)={'wlan0\x00'})

4.159607927s ago: executing program 2 (id=185):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000bff000/0x400000)=nil)

4.103209608s ago: executing program 3 (id=186):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
keyctl$instantiate(0xc, 0x0, 0x0, 0x35, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000002000)='./sys\x00', &(0x7f0000002040)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./sys/bus/acpi/devices/PNP0501:00/status\x00', 0x0, 0x0)
read(r2, &(0x7f0000000c80)=""/265, 0x109)

4.101737758s ago: executing program 0 (id=187):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ppoll(&(0x7f0000000280)=[{r0, 0x844d}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)

3.454619034s ago: executing program 3 (id=188):
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write$tun(0xffffffffffffffff, 0x0, 0xffe)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000180)={0xb, 0xa, 0xfff5, 0x3, 0xb, "96ca676bc0d8a891"})
write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x49, 0x4, 0x5, 0x13, "b0bf2ebb48c849ac4000"})
r2 = syz_open_pts(r1, 0x0)
r3 = dup3(r2, r1, 0x0)
read$FUSE(r3, &(0x7f0000004f40)={0x2020}, 0x2020)
write(r0, &(0x7f0000000000)='3', 0x4e)
prlimit64(0x0, 0x7, 0x0, 0x0)

2.922139558s ago: executing program 2 (id=189):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x2, 0x4, 0x10, 0x80000000, @vifc_lcl_ifindex, @loopback}, 0x10)
getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, 0x0, 0x0)
setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000000)=0xa, 0x4)

2.787612041s ago: executing program 4 (id=190):
socket(0x10, 0x2, 0x0)
openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0)
socket$inet6(0xa, 0x80803, 0x84)
r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0, r0)
openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x68, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "e3de3d7b4cd07ec3ee777de774fc7987cca41989ec53f953f615edc21c4335093450b134"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)

2.672737694s ago: executing program 2 (id=191):
r0 = socket$inet(0xa, 0x801, 0x84)
r1 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x2, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r1, 0xfffffffd)
listen(r0, 0x8)
r2 = socket$inet(0xa, 0x801, 0x84)
listen(r2, 0x8)
socket$inet(0xa, 0x801, 0x84)
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
listen(r3, 0x7)
accept4(r1, 0x0, 0x0, 0x800)
r4 = socket$netlink(0x10, 0x3, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r4)
writev(r4, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1)

2.672489334s ago: executing program 0 (id=192):
syz_mount_image$squashfs(&(0x7f0000000940), &(0x7f0000000180)='./file1\x00', 0x2000000, &(0x7f00000003c0)=ANY=[], 0x1, 0x184, &(0x7f0000000700)="$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")
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101901, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0xd8f})
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000005c0)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @msi={0xfffffff9, 0x4, 0x9, 0x3}}]})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], &(0x7f0000001f40)=""/4092, 0x26, 0xffc, 0x1}, 0x28)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x140, 0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x22852, r2, 0x0)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x40000000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x17)
mremap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil)
mremap(&(0x7f00000db000/0x3000)=nil, 0x3000, 0xc000, 0x3, &(0x7f000003e000/0xc000)=nil)

2.556900776s ago: executing program 4 (id=193):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb68, &(0x7f0000000c40)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xcd)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x8, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
unshare(0x22020600)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/208, 0xd0, 0x8d35)
syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff)
setxattr$trusted_overlay_opaque(&(0x7f0000000240)='./bus\x00', &(0x7f00000002c0), &(0x7f0000001400), 0x2, 0x2)
unshare(0x24060400)
r3 = socket$rds(0x15, 0x5, 0x0)
setsockopt$sock_int(r3, 0x1, 0x45, &(0x7f0000000080)=0x2, 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x1, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0xa, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0xb, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0x3a3, 0x3, 0x8, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0x7a, 0x0, 0x71, 0x4, 0x57, 0x7, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a5, 0x4, 0x1, 0x20000000, 0x7e, 0x0, 0x20000007, 0x6, 0x8, 0x4, 0x1, 0xe], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x23f, 0x5, 0x1000, 0xfffffffc, 0x43, 0xffffffff, 0x7, 0x5, 0x2f, 0xa, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0xfff, 0x9, 0x9b, 0x3fe, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x3, 0x9, 0x8, 0xb392, 0x6, 0xb, 0xb, 0x1, 0x9, 0x9, 0x2, 0x7d, 0x40009, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400007], [0x6, 0x6, 0x80000001, 0x2, 0x4, 0x100, 0x8d2, 0xd, 0x5, 0x7, 0x0, 0x2, 0xb, 0x4, 0x5, 0x1005, 0xfffffffe, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0xa, 0x3e7, 0x9, 0x5, 0x5, 0x2, 0x1, 0xfffffff3, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x0, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x4, 0xac8, 0xbf, 0x10002, 0x403, 0x17c, 0x3, 0x0, 0x1, 0xffff, 0x100, 0x40010005, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x3, 0xfc], [0x100009, 0xbb31, 0x3, 0xb, 0x101, 0x1, 0x6, 0x65, 0x0, 0x3, 0x80ce7, 0x1ff, 0xc4, 0x400009, 0x5, 0x1003, 0x40000101, 0xc, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0xe00, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0x7, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x832f, 0x5a2c, 0xc, 0x17, 0x1, 0x101, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x400200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

2.550367467s ago: executing program 2 (id=194):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x11, 0xa, 0x5)
ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}})
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x12002, 0x0)
ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/133, 0x85}], 0x1)

2.042406449s ago: executing program 0 (id=195):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb68, &(0x7f0000000c40)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xcd)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]})
unshare(0x22020600)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/208, 0xd0, 0x8d35)
syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff)
setxattr$trusted_overlay_opaque(&(0x7f0000000240)='./bus\x00', &(0x7f00000002c0), &(0x7f0000001400), 0x2, 0x2)
unshare(0x24060400)
r3 = socket$rds(0x15, 0x5, 0x0)
setsockopt$sock_int(r3, 0x1, 0x45, &(0x7f0000000080)=0x2, 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x1, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0xa, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0xb, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0x3a3, 0x3, 0x8, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0x7a, 0x0, 0x71, 0x4, 0x57, 0x7, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a5, 0x4, 0x1, 0x20000000, 0x7e, 0x0, 0x20000007, 0x6, 0x8, 0x4, 0x1, 0xe], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x23f, 0x5, 0x1000, 0xfffffffc, 0x43, 0xffffffff, 0x7, 0x5, 0x2f, 0xa, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0xfff, 0x9, 0x9b, 0x3fe, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x3, 0x9, 0x8, 0xb392, 0x6, 0xb, 0xb, 0x1, 0x9, 0x9, 0x2, 0x7d, 0x40009, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400007], [0x6, 0x6, 0x80000001, 0x2, 0x4, 0x100, 0x8d2, 0xd, 0x5, 0x7, 0x0, 0x2, 0xb, 0x4, 0x5, 0x1005, 0xfffffffe, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0xa, 0x3e7, 0x9, 0x5, 0x5, 0x2, 0x1, 0xfffffff3, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x0, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x4, 0xac8, 0xbf, 0x10002, 0x403, 0x17c, 0x3, 0x0, 0x1, 0xffff, 0x100, 0x40010005, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x3, 0xfc], [0x100009, 0xbb31, 0x3, 0xb, 0x101, 0x1, 0x6, 0x65, 0x0, 0x3, 0x80ce7, 0x1ff, 0xc4, 0x400009, 0x5, 0x1003, 0x40000101, 0xc, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0xe00, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0x7, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x832f, 0x5a2c, 0xc, 0x17, 0x1, 0x101, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x400200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

1.052717224s ago: executing program 4 (id=196):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000884, &(0x7f0000000480)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-7,shortname=win95,shortname=win95,sys_immutable,shortname=winnt,shortname=winnt,uni_xlate=1,check=normal,codepage=862,iocharset=cp932,nonumtail=0,rodir\x00\x00`\x00\x00\x00\x00\x00et=cp936,shortname=win95,utf8=0,\x00'], 0x2, 0x289, &(0x7f00000001c0)="$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")
socket$inet6_tcp(0xa, 0x1, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x5)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d)

0s ago: executing program 32 (id=154):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ppoll(&(0x7f00000003c0)=[{r0}], 0x1, &(0x7f0000000440), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x100, 0x1})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x8, 0x1, 0x3c, 0x42}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r3}, 0x38)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.102' (ED25519) to the list of known hosts.
[   62.003186][ T4173] cgroup: Unknown subsys name 'net'
[   62.114247][ T4173] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   63.620380][ T4173] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   65.221284][ T4185] chnl_net:caif_netlink_parms(): no params data found
[   65.295851][ T4186] chnl_net:caif_netlink_parms(): no params data found
[   65.326274][ T4187] chnl_net:caif_netlink_parms(): no params data found
[   65.349067][ T4198] chnl_net:caif_netlink_parms(): no params data found
[   65.431275][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.439152][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.447588][ T4185] device bridge_slave_0 entered promiscuous mode
[   65.470617][ T4192] chnl_net:caif_netlink_parms(): no params data found
[   65.481472][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.488704][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.496658][ T4185] device bridge_slave_1 entered promiscuous mode
[   65.570869][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.577973][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.586199][ T4198] device bridge_slave_0 entered promiscuous mode
[   65.596262][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.605756][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.613305][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.621539][ T4186] device bridge_slave_0 entered promiscuous mode
[   65.629301][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.636413][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.644431][ T4187] device bridge_slave_0 entered promiscuous mode
[   65.665633][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.672955][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.681124][ T4198] device bridge_slave_1 entered promiscuous mode
[   65.689825][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.699123][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.706293][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.715040][ T4186] device bridge_slave_1 entered promiscuous mode
[   65.722347][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.730312][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.738488][ T4187] device bridge_slave_1 entered promiscuous mode
[   65.810184][ T4185] team0: Port device team_slave_0 added
[   65.816264][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.823910][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.832523][ T4192] device bridge_slave_0 entered promiscuous mode
[   65.848827][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.859958][ T4198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.871773][ T4198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.883490][ T4185] team0: Port device team_slave_1 added
[   65.890028][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.897132][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.905553][ T4192] device bridge_slave_1 entered promiscuous mode
[   65.914801][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.934008][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.946383][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.020489][ T4198] team0: Port device team_slave_0 added
[   66.028746][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.040023][ T4186] team0: Port device team_slave_0 added
[   66.048241][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.059535][ T4187] team0: Port device team_slave_0 added
[   66.073659][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.081049][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.107755][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.121708][ T4198] team0: Port device team_slave_1 added
[   66.127816][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.135315][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.161503][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.174900][ T4186] team0: Port device team_slave_1 added
[   66.182724][ T4187] team0: Port device team_slave_1 added
[   66.233691][ T4192] team0: Port device team_slave_0 added
[   66.247461][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.254585][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.281084][ T4198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.299292][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.306270][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.333150][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.346110][ T4192] team0: Port device team_slave_1 added
[   66.353207][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.360524][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.386833][ T4198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.399372][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.406351][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.433183][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.445309][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.452842][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.479399][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.511897][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.518994][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.545139][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.582843][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.590057][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.616609][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.648598][ T4186] device hsr_slave_0 entered promiscuous mode
[   66.655378][ T4186] device hsr_slave_1 entered promiscuous mode
[   66.666528][ T4185] device hsr_slave_0 entered promiscuous mode
[   66.673365][ T4185] device hsr_slave_1 entered promiscuous mode
[   66.680956][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   66.689164][ T4185] Cannot create hsr debugfs directory
[   66.695163][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.702449][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.728618][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.771470][ T4198] device hsr_slave_0 entered promiscuous mode
[   66.778440][ T4198] device hsr_slave_1 entered promiscuous mode
[   66.784984][ T4198] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   66.792712][ T4198] Cannot create hsr debugfs directory
[   66.840025][ T4187] device hsr_slave_0 entered promiscuous mode
[   66.847007][ T4187] device hsr_slave_1 entered promiscuous mode
[   66.853957][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   66.862465][ T4187] Cannot create hsr debugfs directory
[   66.878730][ T4192] device hsr_slave_0 entered promiscuous mode
[   66.886007][ T4192] device hsr_slave_1 entered promiscuous mode
[   66.893824][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   66.901545][ T4192] Cannot create hsr debugfs directory
[   66.948855][ T1324] Bluetooth: hci4: command 0x0409 tx timeout
[   66.955542][ T1324] Bluetooth: hci3: command 0x0409 tx timeout
[   66.959555][ T1110] Bluetooth: hci2: command 0x0409 tx timeout
[   66.970590][ T1110] Bluetooth: hci0: command 0x0409 tx timeout
[   66.979091][ T1324] Bluetooth: hci1: command 0x0409 tx timeout
[   67.265123][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   67.284331][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   67.293743][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   67.307123][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   67.359134][ T4198] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   67.376691][ T4198] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   67.393848][ T4198] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   67.406704][ T4198] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   67.450322][ T4192] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   67.462037][ T4192] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   67.481127][ T4192] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   67.494617][ T4192] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   67.561462][ T4185] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   67.576275][ T4185] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   67.591071][ T4185] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   67.604230][ T4185] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   67.622300][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.673885][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   67.685583][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   67.699705][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.724172][ T4186] 8021q: adding VLAN 0 to HW filter on device team0
[   67.738999][ T4187] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   67.751640][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   67.760989][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   67.771929][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.779248][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.795159][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   67.804443][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   67.812857][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   67.822596][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   67.831996][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   67.840600][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.847673][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.859271][ T4187] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   67.871677][ T4187] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   67.884723][ T4198] 8021q: adding VLAN 0 to HW filter on device team0
[   67.901235][ T4187] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   67.919427][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   67.929144][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   67.937926][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   67.946831][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.953981][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.962885][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   67.973995][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   67.983773][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   67.993793][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   68.002430][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.009541][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.032775][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.047716][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   68.059451][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   68.068715][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   68.094586][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   68.103619][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   68.113180][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   68.138919][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.145926][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   68.156380][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   68.165992][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   68.174718][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   68.183613][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   68.193099][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   68.202529][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   68.217630][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   68.227354][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   68.236593][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   68.247269][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   68.257437][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   68.268989][ T4192] 8021q: adding VLAN 0 to HW filter on device team0
[   68.283094][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   68.296466][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   68.305565][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   68.315107][ T1405] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.322248][ T1405] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.331314][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   68.341337][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   68.351016][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   68.370943][ T4198] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   68.383257][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   68.399308][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   68.414636][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   68.424937][ T1405] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.432096][ T1405] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.447766][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   68.456765][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   68.510459][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   68.530442][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   68.544169][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   68.558998][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   68.587163][ T4185] 8021q: adding VLAN 0 to HW filter on device team0
[   68.603611][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   68.614092][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   68.626857][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   68.641677][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   68.664273][ T4192] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   68.675785][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   68.699106][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   68.714077][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   68.733110][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   68.745499][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   68.759484][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   68.775542][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   68.784953][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   68.801181][  T155] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.808425][  T155] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.819536][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   68.834994][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   68.844187][  T155] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.851427][  T155] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.864542][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   68.874230][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   68.899417][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.938732][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   68.957820][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   68.975178][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   68.986008][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   69.001495][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   69.010623][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   69.019811][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   69.027374][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   69.035030][ T4232] Bluetooth: hci1: command 0x041b tx timeout
[   69.035735][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   69.048993][ T4234] Bluetooth: hci3: command 0x041b tx timeout
[   69.055043][ T4234] Bluetooth: hci0: command 0x041b tx timeout
[   69.062559][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   69.063508][ T4234] Bluetooth: hci2: command 0x041b tx timeout
[   69.076266][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   69.083769][ T4234] Bluetooth: hci4: command 0x041b tx timeout
[   69.104553][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   69.113974][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   69.125149][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.140918][ T4187] 8021q: adding VLAN 0 to HW filter on device team0
[   69.151048][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.169884][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   69.187571][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   69.198330][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   69.206200][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   69.221844][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   69.231337][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   69.252241][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   69.262187][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   69.272315][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.279454][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.287586][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   69.296480][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   69.305677][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.312813][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.353666][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   69.366722][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   69.379642][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   69.413255][ T4198] device veth0_vlan entered promiscuous mode
[   69.427884][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   69.436877][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   69.445182][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   69.455451][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   69.464379][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   69.473362][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   69.482810][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   69.492398][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   69.501612][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   69.510664][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   69.538712][ T4198] device veth1_vlan entered promiscuous mode
[   69.552094][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.584327][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   69.593772][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   69.613919][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   69.622103][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   69.630540][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   69.639686][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   69.648535][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   69.657059][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   69.690922][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   69.699704][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   69.708804][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   69.717280][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   69.727930][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   69.739427][ T4186] device veth0_vlan entered promiscuous mode
[   69.745996][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   69.754504][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   69.781104][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.790332][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   69.804431][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   69.813151][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   69.821001][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   69.831543][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   69.841130][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   69.850198][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   69.872252][ T4198] device veth0_macvtap entered promiscuous mode
[   69.881332][ T4186] device veth1_vlan entered promiscuous mode
[   69.899371][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   69.924288][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   69.933286][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   69.949883][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   69.966959][ T4192] device veth0_vlan entered promiscuous mode
[   69.986763][ T4198] device veth1_macvtap entered promiscuous mode
[   70.003455][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   70.015485][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   70.024563][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   70.033398][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   70.053493][ T4192] device veth1_vlan entered promiscuous mode
[   70.083261][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   70.092816][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   70.101737][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   70.127086][ T4185] device veth0_vlan entered promiscuous mode
[   70.143638][ T4185] device veth1_vlan entered promiscuous mode
[   70.159441][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   70.171385][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   70.180060][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   70.189363][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   70.197551][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   70.205480][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   70.217046][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.242140][ T4186] device veth0_macvtap entered promiscuous mode
[   70.253934][ T4192] device veth0_macvtap entered promiscuous mode
[   70.262309][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   70.273204][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   70.282711][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   70.291323][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   70.300896][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   70.311050][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   70.319936][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   70.330265][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   70.339438][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   70.352192][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   70.360948][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   70.372379][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.392601][ T4186] device veth1_macvtap entered promiscuous mode
[   70.403955][ T4192] device veth1_macvtap entered promiscuous mode
[   70.414417][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   70.425052][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   70.435812][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   70.444786][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   70.456494][ T4198] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.467025][ T4198] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.476109][ T4198] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.486895][ T4198] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.503251][ T4185] device veth0_macvtap entered promiscuous mode
[   70.514408][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.562244][ T4185] device veth1_macvtap entered promiscuous mode
[   70.576052][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.588042][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.602343][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.636834][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   70.645401][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   70.661150][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   70.674145][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   70.683399][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.694109][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.704995][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.716519][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.743814][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.766680][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.779551][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.791259][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.803304][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.813849][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.824579][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.836244][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.845074][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   70.858998][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   70.873354][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   70.883986][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   70.902650][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.913554][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.925109][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.942444][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.954274][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.965684][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.978319][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.991104][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.001710][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.013298][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.023820][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.035362][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.045572][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.056290][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.068250][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.075636][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   71.084767][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   71.093991][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   71.102885][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   71.110051][ T4230] Bluetooth: hci3: command 0x040f tx timeout
[   71.113370][   T23] Bluetooth: hci4: command 0x040f tx timeout
[   71.117002][ T4230] Bluetooth: hci1: command 0x040f tx timeout
[   71.126552][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   71.137508][   T23] Bluetooth: hci2: command 0x040f tx timeout
[   71.144345][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   71.152634][   T23] Bluetooth: hci0: command 0x040f tx timeout
[   71.167039][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.179066][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.187849][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.208082][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.220999][ T4192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.235226][ T4192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.244836][ T4192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.259426][ T4192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.292532][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.306368][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.317640][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.326714][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.361511][ T1428] ieee802154 phy0 wpan0: encryption failed: -22
[   71.368772][ T1428] ieee802154 phy1 wpan1: encryption failed: -22
[   71.406899][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.426320][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.460225][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   71.474351][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   71.484324][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   71.573212][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   71.578326][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.587855][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   71.617537][ T4187] device veth0_vlan entered promiscuous mode
[   71.625523][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   71.633035][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.642424][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   71.651555][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   71.665301][ T4238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.687382][ T4187] device veth1_vlan entered promiscuous mode
[   71.701877][ T4238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.717353][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.728926][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.792040][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   71.802167][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   71.812468][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   71.841193][  T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.856316][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.872264][  T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.881208][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.901572][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.912185][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   71.926660][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.927114][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   71.946717][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   71.957111][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   71.986824][ T4187] device veth0_macvtap entered promiscuous mode
[   72.036720][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.057329][ T4187] device veth1_macvtap entered promiscuous mode
[   72.066436][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.117561][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.134877][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.146536][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.162141][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.172666][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.183128][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.193254][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.204140][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.215546][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.232200][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   72.246763][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   72.256996][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   72.267625][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   72.277276][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   72.293261][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   72.936985][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.980200][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.996340][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.007455][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.017670][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.030493][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.047652][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.062695][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.074276][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.082657][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   73.091488][ T4275] loop2: detected capacity change from 0 to 512
[   73.101092][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   73.120927][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   73.140090][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.150304][ T4275] =======================================================
[   73.150304][ T4275] WARNING: The mand mount option has been deprecated and
[   73.150304][ T4275]          and is ignored by this kernel. Remove the mand
[   73.150304][ T4275]          option from the mount to silence this warning.
[   73.150304][ T4275] =======================================================
[   73.188700][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.197553][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.207003][ T4263] Bluetooth: hci0: command 0x0419 tx timeout
[   73.214375][ T4263] Bluetooth: hci2: command 0x0419 tx timeout
[   73.220774][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.230652][ T4263] Bluetooth: hci1: command 0x0419 tx timeout
[   73.240774][ T4274] tipc: Started in network mode
[   73.246197][ T4263] Bluetooth: hci4: command 0x0419 tx timeout
[   73.256467][ T4274] tipc: Node identity 7f000001, cluster identity 4711
[   73.263660][ T4263] Bluetooth: hci3: command 0x0419 tx timeout
[   73.278729][ T4274] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   73.618777][ T4268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.626889][ T4268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.769849][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   73.813786][ T4268] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.869756][ T4268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.323997][ T4307] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   74.717708][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   74.841710][ T4311] syz.2.14 uses obsolete (PF_INET,SOCK_PACKET)
[   75.057545][ T4295] loop0: detected capacity change from 0 to 32768
[   75.147311][ T4295] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.11 (4295)
[   76.478516][ T4295] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[   76.512443][ T4295] BTRFS info (device loop0): using free space tree
[   76.526271][ T4341] loop1: detected capacity change from 0 to 512
[   76.552931][ T4295] BTRFS info (device loop0): has skinny extents
[   76.789382][ T4295] BTRFS error (device loop0): open_ctree failed: -12
[   76.984243][ T4370] tipc: Started in network mode
[   77.015524][ T4370] tipc: Node identity 7f000001, cluster identity 4711
[   77.096869][ T4370] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   77.667605][ T4392] loop4: detected capacity change from 0 to 512
[   78.309747][ T4364] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[   78.345421][ T4392] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   78.359378][ T4364] tipc: Enabled bearer <udp:syz0>, priority 10
[   78.394712][ T4392] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   78.450148][ T4392] EXT4-fs (loop4): 1 truncate cleaned up
[   78.479413][ T4392] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,jqfmt=vfsv0,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none.
[   79.622405][ T4377] tipc: Node number set to 2130706433
[   79.928000][    C1] sched: RT throttling activated
[   80.610427][ T4405] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.28: Invalid block bitmap block 7562872 in block_group 0
[   80.632801][ T4432] netlink: 16 bytes leftover after parsing attributes in process `syz.2.38'.
[   80.682558][ T4405] EXT4-fs (loop4): Remounting filesystem read-only
[   80.711179][ T4405] EXT4-fs error (device loop4): ext4_discard_preallocations:5142: comm syz.4.28: Error -117 reading block bitmap for 0
[   80.749485][ T4405] EXT4-fs (loop4): Remounting filesystem read-only
[   80.871015][ T4441] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   80.901438][ T4439] loop1: detected capacity change from 0 to 1024
[   80.953015][ T4439] EXT4-fs (loop1): Ignoring removed oldalloc option
[   80.976609][ T4439] EXT4-fs (loop1): Ignoring removed orlov option
[   81.051229][ T4439] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,oldalloc,orlov,quota,,errors=continue. Quota mode: writeback.
[   81.096734][ T4439] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   81.214061][ T4447] tipc: Started in network mode
[   81.307626][ T4447] tipc: Node identity 7f000001, cluster identity 4711
[   81.315957][ T4447] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   81.409813][ T4447] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[   81.538042][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #80!!!
[   81.558026][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[   81.568023][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[   81.578033][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[   81.588037][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[   81.598023][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[   81.628027][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[   81.638032][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[   81.658683][ T4447] tipc: Enabled bearer <udp:syz0>, priority 10
[   82.538034][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!!
[   82.558026][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!!
[   82.932534][ T4456] loop1: detected capacity change from 0 to 512
[   83.290876][ T4459] loop2: detected capacity change from 0 to 128
[   83.312374][ T4377] tipc: Node number set to 2130706433
[   83.630907][ T4459] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   85.492535][ T4483] device syzkaller0 entered promiscuous mode
[   85.760809][ T4483] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   85.799298][ T4487] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   85.829704][ T4483] tipc: Resetting bearer <eth:syzkaller0>
[   85.894273][ T4490] loop2: detected capacity change from 0 to 512
[   85.909050][ T4482] tipc: Resetting bearer <eth:syzkaller0>
[   85.975994][ T4482] tipc: Disabling bearer <eth:syzkaller0>
[   85.994493][ T4490] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #2: comm syz.2.54: missing EA_INODE flag
[   86.013471][ T4490] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.54: error while reading EA inode 2 err=-117
[   86.027118][ T4490] EXT4-fs (loop2): 1 orphan inode deleted
[   86.046381][ T4490] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback.
[   86.752171][ T4503] loop0: detected capacity change from 0 to 256
[   86.982469][    T7] cfg80211: failed to load regulatory.db
[   87.040180][ T4503] exfat: Deprecated parameter 'utf8'
[   87.045582][ T4503] exfat: Deprecated parameter 'utf8'
[   87.115835][ T4503] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[   87.369564][ T4516] loop2: detected capacity change from 0 to 512
[   87.915025][ T4492] loop3: detected capacity change from 0 to 32768
[   87.929684][ T4516] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[   87.958787][ T4516] System zones: 1-12
[   88.018851][ T4516] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.61: missing EA_INODE flag
[   88.058215][ T4492] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.58 (4492)
[   88.131725][ T4516] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.61: error while reading EA inode 12 err=-117
[   88.218362][ T4516] EXT4-fs (loop2): 1 orphan inode deleted
[   88.273768][ T4516] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[   89.678157][ T4492] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[   89.763804][ T4492] BTRFS info (device loop3): using free space tree
[   89.818177][ T4492] BTRFS info (device loop3): has skinny extents
[   89.928845][ T4532] loop4: detected capacity change from 0 to 512
[   90.058586][ T4532] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[   90.098292][ T4532] System zones: 1-12
[   90.106961][ T4532] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.66: missing EA_INODE flag
[   90.130521][ T4492] BTRFS error (device loop3): open_ctree failed: -12
[   90.252896][ T4532] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.66: error while reading EA inode 12 err=-117
[   90.381668][ T4532] EXT4-fs (loop4): 1 orphan inode deleted
[   90.387466][ T4532] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[   91.610402][ T4550] loop0: detected capacity change from 0 to 32768
[   91.634678][ T4574] loop4: detected capacity change from 0 to 512
[   91.866976][ T4574] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[   91.890640][ T4574] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.73: invalid indirect mapped block 256 (level 1)
[   92.019384][ T4550] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   92.201547][ T4574] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.73: invalid indirect mapped block 2683928664 (level 1)
[   92.708734][ T4574] EXT4-fs (loop4): 1 truncate cleaned up
[   92.714435][ T4574] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback.
[   92.913576][ T4186] ocfs2: Unmounting device (7,0) on (node local)
[   92.944694][ T4565] loop3: detected capacity change from 0 to 32768
[   93.157905][ T4565] 
[   93.157905][ T4565]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   93.157905][ T4565] 
[   93.514562][ T4586] loop2: detected capacity change from 0 to 8192
[   93.531796][ T4590] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   93.673906][ T4586] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[   93.688355][ T4586] REISERFS (device loop2): using ordered data mode
[   93.694936][ T4586] reiserfs: using flush barriers
[   93.731846][ T4198] 
[   93.731846][ T4198]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   93.731846][ T4198] 
[   93.751924][ T4586] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   93.774703][ T4586] REISERFS (device loop2): checking transaction log (loop2)
[   93.789492][ T4198] 
[   93.789492][ T4198]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   93.789492][ T4198] 
[   93.843712][ T4594] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   93.905415][ T4594] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[   95.015120][ T4586] REISERFS (device loop2): Using tea hash to sort names
[   95.212425][ T4586] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[   95.622714][ T4610] Rounding down aligned max_sectors from 4294967295 to 4294967288
[   95.981348][ T4615] loop0: detected capacity change from 0 to 512
[   96.089147][ T4615] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[   96.171826][ T4615] System zones: 1-12
[   96.215752][ T4615] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.83: missing EA_INODE flag
[   96.265558][ T4615] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.83: error while reading EA inode 12 err=-117
[   96.305633][ T4615] EXT4-fs (loop0): 1 orphan inode deleted
[   96.313370][ T1107] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[   96.335515][ T4615] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[   97.288670][ T1107] usb 4-1: unable to get BOS descriptor or descriptor too short
[   97.328445][ T1107] usb 4-1: not running at top speed; connect to a high speed hub
[   97.418296][ T1107] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   97.443967][ T1107] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[   97.483270][ T1107] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   97.648512][ T1107] usb 4-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00
[   97.669032][ T1107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[   97.677278][ T1107] usb 4-1: Product: syz
[   97.686720][ T1107] usb 4-1: Manufacturer: syz
[   97.792835][ T1107] usb 4-1: Found UVC 1.00 device syz (8086:0ad2)
[   97.815169][ T1107] usb 4-1: No streaming interface found for terminal 2.
[   97.887894][ T4640] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   97.974047][ T1107] usb 4-1: USB disconnect, device number 2
[   98.034020][ T4644] loop4: detected capacity change from 0 to 256
[   98.054168][ T4643] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   98.071408][ T4643] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[   98.103682][ T4644] FAT-fs (loop4): Directory bread(block 64) failed
[   98.127792][ T4644] FAT-fs (loop4): Directory bread(block 65) failed
[   98.140934][ T4644] FAT-fs (loop4): Directory bread(block 66) failed
[   98.147615][ T4644] FAT-fs (loop4): Directory bread(block 67) failed
[   98.167643][ T4644] FAT-fs (loop4): Directory bread(block 68) failed
[   98.175377][ T4648] loop2: detected capacity change from 0 to 512
[   98.183956][ T4644] FAT-fs (loop4): Directory bread(block 69) failed
[   98.191306][ T4644] FAT-fs (loop4): Directory bread(block 70) failed
[   98.198400][ T4644] FAT-fs (loop4): Directory bread(block 71) failed
[   98.205157][ T4644] FAT-fs (loop4): Directory bread(block 72) failed
[   98.212457][ T4644] FAT-fs (loop4): Directory bread(block 73) failed
[   98.295119][ T4648] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[   98.309804][ T4648] System zones: 1-12
[   98.315822][ T4648] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.93: missing EA_INODE flag
[   98.328960][ T4648] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.93: error while reading EA inode 12 err=-117
[   98.342140][ T4648] EXT4-fs (loop2): 1 orphan inode deleted
[   98.348289][ T4648] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[   98.404126][ T4650] loop1: detected capacity change from 0 to 8192
[   98.458375][ T4653] loop4: detected capacity change from 0 to 256
[   98.531043][ T4650] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[   98.559971][ T4650] REISERFS (device loop1): using ordered data mode
[   98.566641][ T4650] reiserfs: using flush barriers
[   98.624168][ T4650] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   98.850846][ T4659] overlayfs: missing 'lowerdir'
[   99.028085][   T26] audit: type=1804 audit(1791526331.583:2): pid=4653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.95" name="/newroot/19/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0" dev="loop4" ino=1048632 res=1 errno=0
[   99.189924][ T4650] REISERFS (device loop1): checking transaction log (loop1)
[   99.388210][ T4664] sctp: failed to load transform for md5: -4
[   99.469315][ T4657] sctp: failed to load transform for md5: -4
[   99.478253][ T4662] sctp: failed to load transform for md5: -4
[   99.667250][ T4674] loop3: detected capacity change from 0 to 512
[   99.696133][ T4650] REISERFS (device loop1): Using tea hash to sort names
[   99.746627][ T4650] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[   99.765151][ T4674] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #2: comm syz.3.99: missing EA_INODE flag
[   99.817461][ T4674] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.99: error while reading EA inode 2 err=-117
[   99.975374][ T4674] EXT4-fs (loop3): 1 orphan inode deleted
[   99.986616][ T4674] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback.
[  101.222137][ T4677] loop2: detected capacity change from 0 to 32768
[  101.455568][ T4677] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.98 (4677)
[  101.465884][ T4691] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  102.195981][ T4677] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  102.269607][ T4677] BTRFS info (device loop2): using free space tree
[  102.312885][ T4677] BTRFS info (device loop2): has skinny extents
[  103.234982][ T4677] BTRFS error (device loop2): open_ctree failed: -12
[  103.259440][ T4699] tipc: Started in network mode
[  103.264328][ T4699] tipc: Node identity 7f000001, cluster identity 4711
[  103.290122][ T4720] loop4: detected capacity change from 0 to 1024
[  103.319699][ T4699] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  103.339088][ T4723] loop0: detected capacity change from 0 to 256
[  103.356455][ T4261] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by udevd (4261)
[  103.374580][ T4725] loop3: detected capacity change from 0 to 512
[  103.470905][ T4725] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  103.518217][ T4725] System zones: 1-12
[  103.574616][ T4725] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.108: missing EA_INODE flag
[  103.595908][ T4723] FAT-fs (loop0): Directory bread(block 64) failed
[  103.603498][ T4725] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.108: error while reading EA inode 12 err=-117
[  103.638519][ T4731] netlink: 24 bytes leftover after parsing attributes in process `syz.1.110'.
[  103.653639][ T4723] FAT-fs (loop0): Directory bread(block 65) failed
[  103.674518][ T4723] FAT-fs (loop0): Directory bread(block 66) failed
[  103.688480][ T4725] EXT4-fs (loop3): 1 orphan inode deleted
[  103.694446][ T4725] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  103.709209][ T4723] FAT-fs (loop0): Directory bread(block 67) failed
[  103.726455][ T4723] FAT-fs (loop0): Directory bread(block 68) failed
[  103.743506][ T4723] FAT-fs (loop0): Directory bread(block 69) failed
[  103.760117][ T4723] FAT-fs (loop0): Directory bread(block 70) failed
[  103.766697][ T4723] FAT-fs (loop0): Directory bread(block 71) failed
[  103.779031][ T4723] FAT-fs (loop0): Directory bread(block 72) failed
[  103.785602][ T4723] FAT-fs (loop0): Directory bread(block 73) failed
[  104.952457][ T4745] se_dev->se_dev_ptr already set for storage object
[  105.064494][ T4738] overlayfs: missing 'lowerdir'
[  105.216460][ T4752] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  106.840152][ T4756] loop4: detected capacity change from 0 to 512
[  106.884672][ T4756] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  106.932441][ T4756] EXT4-fs (loop4): 1 truncate cleaned up
[  106.942003][ T4756] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,stripe=0x0000000000000009,mb_optimize_scan=0x0000000000000001,errors=remount-ro,nombcache,. Quota mode: none.
[  107.296757][ T4769] EXT4-fs error (device loop4): __ext4_iget:4919: inode #16: block 3: comm syz.4.117: invalid block
[  107.323739][ T4769] EXT4-fs (loop4): Remounting filesystem read-only
[  107.339575][ T4769] TCP: TCP_TX_DELAY enabled
[  107.348577][ T4769] Zero length message leads to an empty skb
[  107.819533][ T4776] loop0: detected capacity change from 0 to 512
[  107.851827][ T4777] loop2: detected capacity change from 0 to 1024
[  108.015253][ T4776] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  108.101262][ T4776] System zones: 1-12
[  108.156495][ T4776] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.121: missing EA_INODE flag
[  108.199248][ T4467] hfsplus: b-tree write err: -5, ino 25
[  108.206740][ T4467] hfsplus: b-tree write err: -5, ino 4
[  108.219430][ T4776] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.121: error while reading EA inode 12 err=-117
[  108.238331][ T4467] hfsplus: b-tree write err: -5, ino 2
[  108.259269][ T4467] hfsplus: b-tree write err: -5, ino 26
[  108.275810][ T4776] EXT4-fs (loop0): 1 orphan inode deleted
[  108.283525][ T4776] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  108.314754][ T4784] loop1: detected capacity change from 0 to 512
[  110.018741][ T4794] loop2: detected capacity change from 0 to 512
[  110.034002][ T4784] EXT4-fs (loop1): 1 orphan inode deleted
[  110.189013][ T4784] EXT4-fs (loop1): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback.
[  110.215549][ T4784] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  110.327306][ T4800] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  110.347233][ T4794] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  111.027528][ T4794] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.124: invalid indirect mapped block 256 (level 1)
[  111.146026][ T4794] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.124: invalid indirect mapped block 2683928664 (level 1)
[  111.170397][ T4794] EXT4-fs (loop2): 1 truncate cleaned up
[  111.176327][ T4794] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback.
[  111.691796][ T4819] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  112.778207][ T4228] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  113.125661][ T4838] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  113.268900][   T26] audit: type=1326 audit(1791526345.743:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4839 comm="syz.1.136" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ee82521d9 code=0x7ffc0000
[  113.402563][   T26] audit: type=1326 audit(1791526345.763:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4839 comm="syz.1.136" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ee82521d9 code=0x7ffc0000
[  113.517310][   T26] audit: type=1326 audit(1791526345.763:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4839 comm="syz.1.136" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ee82521d9 code=0x7ffc0000
[  113.611882][   T26] audit: type=1326 audit(1791526345.783:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4839 comm="syz.1.136" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f4ee82521d9 code=0x7ffc0000
[  113.636170][   T26] audit: type=1326 audit(1791526345.783:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4839 comm="syz.1.136" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ee82521d9 code=0x7ffc0000
[  113.660220][ T4228] usb 4-1: Using ep0 maxpacket: 16
[  113.688059][   T26] audit: type=1326 audit(1791526345.783:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4839 comm="syz.1.136" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ee82521d9 code=0x7ffc0000
[  113.725236][ T4846] loop1: detected capacity change from 0 to 512
[  113.753977][   T26] audit: type=1326 audit(1791526345.783:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4839 comm="syz.1.136" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4ee82521d9 code=0x7ffc0000
[  113.818520][   T26] audit: type=1326 audit(1791526345.783:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4839 comm="syz.1.136" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4ee82521d9 code=0x7ffc0000
[  113.859459][ T4846] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  113.868232][ T4228] usb 4-1: unable to get BOS descriptor or descriptor too short
[  113.880164][ T4846] System zones: 1-12
[  113.899932][ T4846] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.140: missing EA_INODE flag
[  113.911912][ T4846] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.140: error while reading EA inode 12 err=-117
[  113.924902][ T4846] EXT4-fs (loop1): 1 orphan inode deleted
[  113.930696][ T4846] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  115.798176][ T4228] usb 4-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.40
[  115.947215][ T4857] tipc: Started in network mode
[  115.952828][ T4228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.961254][ T4857] tipc: Node identity 7f000001, cluster identity 4711
[  115.973975][ T4857] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  115.998392][ T4228] usb 4-1: can't set config #1, error -71
[  116.538192][ T4228] usb 4-1: USB disconnect, device number 3
[  118.020719][ T4868] loop2: detected capacity change from 0 to 512
[  118.336471][ T4877] capability: warning: `syz.1.151' uses deprecated v2 capabilities in a way that may be insecure
[  118.351792][ T4868] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  118.396450][ T4868] System zones: 1-12
[  118.417442][ T4868] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.147: missing EA_INODE flag
[  118.437654][ T4868] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.147: error while reading EA inode 12 err=-117
[  118.450570][ T4868] EXT4-fs (loop2): 1 orphan inode deleted
[  118.456335][ T4868] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  118.714666][ T4883] loop4: detected capacity change from 0 to 2048
[  118.981073][ T4890] overlayfs: missing 'lowerdir'
[  119.420776][ T4883] UDF-fs: bad mount option "ÿÿÿÿÿÿ" or missing value
[  120.454293][ T4904] netlink: 12 bytes leftover after parsing attributes in process `syz.4.152'.
[  120.834265][ T4909] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  120.876435][ T4909] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  120.921112][ T4909] tipc: Enabled bearer <udp:syz0>, priority 10
[  120.957460][ T4911] loop2: detected capacity change from 0 to 512
[  121.101277][ T4911] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  121.224981][ T4911] EXT4-fs (loop2): 1 truncate cleaned up
[  121.313418][ T4911] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,stripe=0x0000000000000009,mb_optimize_scan=0x0000000000000001,errors=remount-ro,nombcache,. Quota mode: none.
[  122.057072][ T4721] tipc: Node number set to 2130706433
[  122.235251][ T4925] EXT4-fs error (device loop2): __ext4_iget:4919: inode #16: block 3: comm syz.2.168: invalid block
[  122.430363][ T4925] EXT4-fs (loop2): Remounting filesystem read-only
[  123.052648][ T4938] loop4: detected capacity change from 0 to 512
[  123.099775][ T4938] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  123.118333][ T4938] System zones: 1-12
[  123.215737][ T4938] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.166: missing EA_INODE flag
[  123.253741][ T4936] loop2: detected capacity change from 0 to 512
[  123.278626][ T4938] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.166: error while reading EA inode 12 err=-117
[  123.355970][ T4938] EXT4-fs (loop4): 1 orphan inode deleted
[  123.364349][ T4938] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  124.076295][ T4955] overlayfs: missing 'lowerdir'
[  124.423207][ T4957] loop3: detected capacity change from 0 to 16
[  124.511609][ T4936] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  124.522742][ T4936] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  124.577307][ T4957] erofs: (device loop3): mounted with root inode @ nid 36.
[  124.620776][ T4936] Quota error (device loop2): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8
[  124.632301][ T4936] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  124.642376][ T4936] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.164: Failed to acquire dquot type 0
[  125.221504][ T4960] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  125.240032][ T4960] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  127.554429][ T4978] loop0: detected capacity change from 0 to 512
[  127.654929][ T4978] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  127.715278][ T4983] loop3: detected capacity change from 0 to 512
[  127.868962][ T4978] EXT4-fs (loop0): 1 truncate cleaned up
[  127.874663][ T4978] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,stripe=0x0000000000000009,mb_optimize_scan=0x0000000000000001,errors=remount-ro,nombcache,. Quota mode: none.
[  127.991150][ T4983] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  128.018867][ T4983] System zones: 1-12
[  128.027137][ T4983] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.179: missing EA_INODE flag
[  128.071369][ T4996] loop2: detected capacity change from 0 to 512
[  128.153189][ T4996] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  128.169506][ T4996] System zones: 1-12
[  128.175085][ T4996] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.181: missing EA_INODE flag
[  128.193875][ T4996] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.181: error while reading EA inode 12 err=-117
[  128.207336][ T4996] EXT4-fs (loop2): 1 orphan inode deleted
[  128.439808][ T4983] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.179: error while reading EA inode 12 err=-117
[  128.452781][ T4996] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  128.454453][ T4983] EXT4-fs (loop3): 1 orphan inode deleted
[  128.538690][ T5000] EXT4-fs error (device loop0): __ext4_iget:4919: inode #16: block 3: comm syz.0.176: invalid block
[  128.716923][ T5000] EXT4-fs (loop0): Remounting filesystem read-only
[  128.962020][ T4983] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  129.923267][ T5008] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  130.008636][ T5008] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  130.105322][ T5015] loop4: detected capacity change from 0 to 16
[  130.169649][ T5015] erofs: (device loop4): mounted with root inode @ nid 36.
[  131.552623][ T5033] loop0: detected capacity change from 0 to 8
[  131.745558][ T5037] loop4: detected capacity change from 0 to 512
[  131.760884][   T26] audit: type=1800 audit(1791526364.323:11): pid=5033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.192" name="file1" dev="loop0" ino=5 res=0 errno=0
[  131.998863][ T5037] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  132.008188][ T5037] System zones: 1-12
[  132.031396][ T5037] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.193: missing EA_INODE flag
[  132.043689][ T5037] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.193: error while reading EA inode 12 err=-117
[  132.056418][ T5037] EXT4-fs (loop4): 1 orphan inode deleted
[  132.084932][ T5037] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  132.221445][ T5033] syz.0.192 (5033) used greatest stack depth: 20816 bytes left
[  132.943761][ T5050] loop0: detected capacity change from 0 to 512
[  133.123207][ T1428] ieee802154 phy0 wpan0: encryption failed: -22
[  133.142210][ T1428] ieee802154 phy1 wpan1: encryption failed: -22
[  133.249730][ T5050] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  133.257776][ T5050] System zones: 1-12
[  133.297269][ T5050] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.195: missing EA_INODE flag
[  133.315165][ T5050] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.195: error while reading EA inode 12 err=-117
[  133.333874][ T5056] loop4: detected capacity change from 0 to 256
[  133.339104][ T5050] EXT4-fs (loop0): 1 orphan inode deleted
[  133.345903][ T5050] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  133.881446][ T5060] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  133.890477][ T5060] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  134.252262][ T5058] FAULT_INJECTION: forcing a failure.
[  134.252262][ T5058] name failslab, interval 1, probability 0, space 0, times 1
[  134.252530][ T5058] 
[  134.252535][ T5058] ======================================================
[  134.252542][ T5058] WARNING: possible circular locking dependency detected
[  134.252560][ T5058] syzkaller #0 Not tainted
[  134.252570][ T5058] ------------------------------------------------------
[  134.252575][ T5058] syz.3.188/5058 is trying to acquire lock:
[  134.252584][ T5058] ffffffff8d113a00 (console_owner){-...}-{0:0}, at: console_lock_spinning_enable+0x2c/0x60
[  134.252647][ T5058] 
[  134.252647][ T5058] but task is already holding lock:
[  134.252652][ T5058] ffff8880796f8158 (&port->lock){-.-.}-{2:2}, at: tty_insert_flip_string_and_push_buffer+0x39/0x380
[  134.252698][ T5058] 
[  134.252698][ T5058] which lock already depends on the new lock.
[  134.252698][ T5058] 
[  134.252703][ T5058] 
[  134.252703][ T5058] the existing dependency chain (in reverse order) is:
[  134.252708][ T5058] 
[  134.252708][ T5058] -> #2 (&port->lock){-.-.}-{2:2}:
[  134.252737][ T5058]        _raw_spin_lock_irqsave+0xb0/0x100
[  134.252760][ T5058]        tty_port_default_wakeup+0x1f/0xf0
[  134.252786][ T5058]        serial8250_tx_chars+0x615/0x800
[  134.252807][ T5058]        serial8250_handle_irq+0x648/0x780
[  134.252826][ T5058]        serial8250_default_handle_irq+0xb4/0x1a0
[  134.252849][ T5058]        serial8250_interrupt+0x9b/0x1c0
[  134.252867][ T5058]        __handle_irq_event_percpu+0x299/0x9d0
[  134.252893][ T5058]        handle_irq_event+0xa5/0x220
[  134.252911][ T5058]        handle_edge_irq+0x242/0xb20
[  134.252932][ T5058]        __common_interrupt+0xd7/0x1e0
[  134.252951][ T5058]        common_interrupt+0xb0/0xd0
[  134.252975][ T5058]        asm_common_interrupt+0x22/0x40
[  134.252995][ T5058]        _raw_spin_unlock_irqrestore+0xbc/0x120
[  134.253015][ T5058]        uart_write+0x62f/0x880
[  134.253030][ T5058]        n_tty_write+0xd19/0x1220
[  134.253051][ T5058]        file_tty_write+0x50c/0x8a0
[  134.253070][ T5058]        vfs_write+0x748/0xd70
[  134.253087][ T5058]        ksys_write+0x153/0x260
[  134.253103][ T5058]        do_syscall_64+0x4c/0xa0
[  134.253121][ T5058]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  134.253143][ T5058] 
[  134.253143][ T5058] -> #1 (&port_lock_key){-.-.}-{2:2}:
[  134.253167][ T5058]        _raw_spin_lock_irqsave+0xb0/0x100
[  134.253186][ T5058]        serial8250_console_write+0x16c/0xf50
[  134.253206][ T5058]        console_unlock+0xb47/0x10f0
[  134.253222][ T5058]        vprintk_emit+0xc0/0x150
[  134.253237][ T5058]        _printk+0xda/0x130
[  134.253254][ T5058]        register_console+0x693/0x970
[  134.253270][ T5058]        univ8250_console_init+0x41/0x50
[  134.253291][ T5058]        console_init+0x177/0x5d0
[  134.253307][ T5058]        start_kernel+0x2fc/0x540
[  134.253325][ T5058]        secondary_startup_64_no_verify+0xb1/0xbb
[  134.253345][ T5058] 
[  134.253345][ T5058] -> #0 (console_owner){-...}-{0:0}:
[  134.253369][ T5058]        __lock_acquire+0x38f7/0x7d40
[  134.253390][ T5058]        lock_acquire+0x19f/0x400
[  134.253417][ T5058]        console_lock_spinning_enable+0x51/0x60
[  134.253435][ T5058]        console_unlock+0x8b5/0x10f0
[  134.253451][ T5058]        vprintk_emit+0xc0/0x150
[  134.253467][ T5058]        _printk+0xda/0x130
[  134.253483][ T5058]        should_fail+0x364/0x4b0
[  134.253502][ T5058]        should_failslab+0x5/0x20
[  134.253520][ T5058]        slab_pre_alloc_hook+0x51/0xc0
[  134.253538][ T5058]        __kmalloc+0x6b/0x340
[  134.253553][ T5058]        __tty_buffer_request_room+0x1db/0x500
[  134.253572][ T5058]        tty_insert_flip_string_and_push_buffer+0x7e/0x380
[  134.253593][ T5058]        n_tty_write+0x5dc/0x1220
[  134.253614][ T5058]        file_tty_write+0x50c/0x8a0
[  134.253633][ T5058]        vfs_write+0x748/0xd70
[  134.253650][ T5058]        ksys_write+0x153/0x260
[  134.253666][ T5058]        do_syscall_64+0x4c/0xa0
[  134.253684][ T5058]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  134.253705][ T5058] 
[  134.253705][ T5058] other info that might help us debug this:
[  134.253705][ T5058] 
[  134.253710][ T5058] Chain exists of:
[  134.253710][ T5058]   console_owner --> &port_lock_key --> &port->lock
[  134.253710][ T5058] 
[  134.253737][ T5058]  Possible unsafe locking scenario:
[  134.253737][ T5058] 
[  134.253741][ T5058]        CPU0                    CPU1
[  134.253745][ T5058]        ----                    ----
[  134.253750][ T5058]   lock(&port->lock);
[  134.253760][ T5058]                                lock(&port_lock_key);
[  134.253772][ T5058]                                lock(&port->lock);
[  134.253783][ T5058]   lock(console_owner);
[  134.253793][ T5058] 
[  134.253793][ T5058]  *** DEADLOCK ***
[  134.253793][ T5058] 
[  134.253797][ T5058] 6 locks held by syz.3.188/5058:
[  134.253807][ T5058]  #0: ffff888061fdb098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70
[  134.253851][ T5058]  #1: ffff888061fdb130 (&tty->atomic_write_lock){+.+.}-{3:3}, at: file_tty_write+0x23c/0x8a0
[  134.253897][ T5058]  #2: ffff888061fdb2e8 (&tty->termios_rwsem){++++}-{3:3}, at: n_tty_write+0x1ec/0x1220
[  134.253944][ T5058]  #3: ffffc90002023378 (&ldata->output_lock){+.+.}-{3:3}, at: n_tty_write+0x592/0x1220
[  134.253986][ T5058]  #4: ffff8880796f8158 (&port->lock){-.-.}-{2:2}, at: tty_insert_flip_string_and_push_buffer+0x39/0x380
[  134.254029][ T5058]  #5: ffffffff8d113ae0 (console_lock){+.+.}-{0:0}, at: vprintk_emit+0xa7/0x150
[  134.254070][ T5058] 
[  134.254070][ T5058] stack backtrace:
[  134.254082][ T5058] CPU: 1 PID: 5058 Comm: syz.3.188 Not tainted syzkaller #0
[  134.254101][ T5058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  134.254121][ T5058] Call Trace:
[  134.254127][ T5058]  <TASK>
[  134.254133][ T5058]  dump_stack_lvl+0x188/0x250
[  134.254154][ T5058]  ? load_image+0x410/0x410
[  134.254173][ T5058]  ? show_regs_print_info+0x20/0x20
[  134.254197][ T5058]  ? print_circular_bug+0x12b/0x1a0
[  134.254217][ T5058]  check_noncircular+0x2f8/0x400
[  134.254239][ T5058]  ? print_deadlock_bug+0x5d0/0x5d0
[  134.254256][ T5058]  ? lockdep_lock+0xf1/0x1f0
[  134.254278][ T5058]  ? lockdep_unlock+0x143/0x2e0
[  134.254303][ T5058]  __lock_acquire+0x38f7/0x7d40
[  134.254325][ T5058]  ? put_dec_trunc8+0x1fd/0x340
[  134.254355][ T5058]  ? format_decode+0x19b/0x1330
[  134.254378][ T5058]  ? verify_lock_unused+0x140/0x140
[  134.254415][ T5058]  ? sprintf+0xe4/0x140
[  134.254438][ T5058]  lock_acquire+0x19f/0x400
[  134.254459][ T5058]  ? console_lock_spinning_enable+0x2c/0x60
[  134.254478][ T5058]  ? prb_read_valid+0x60/0x60
[  134.254497][ T5058]  ? read_lock_is_recursive+0x10/0x10
[  134.254519][ T5058]  ? do_raw_spin_lock+0x128/0x2f0
[  134.254546][ T5058]  ? __rwlock_init+0x140/0x140
[  134.254566][ T5058]  ? do_raw_spin_unlock+0x11d/0x230
[  134.254587][ T5058]  console_lock_spinning_enable+0x51/0x60
[  134.254607][ T5058]  ? console_lock_spinning_enable+0x2c/0x60
[  134.254626][ T5058]  console_unlock+0x8b5/0x10f0
[  134.254645][ T5058]  ? read_lock_is_recursive+0x10/0x10
[  134.254672][ T5058]  ? console_trylock_spinning+0x370/0x370
[  134.254699][ T5058]  ? __down_trylock_console_sem+0x19f/0x1f0
[  134.254719][ T5058]  ? vprintk_emit+0xa7/0x150
[  134.254737][ T5058]  ? printk_parse_prefix+0x310/0x310
[  134.254755][ T5058]  ? vprintk_emit+0xa7/0x150
[  134.254773][ T5058]  ? console_trylock+0x70/0x70
[  134.254797][ T5058]  ? vprintk_emit+0x150/0x150
[  134.254818][ T5058]  ? verify_lock_unused+0x140/0x140
[  134.254840][ T5058]  ? __lock_acquire+0x13b3/0x7d40
[  134.254866][ T5058]  vprintk_emit+0xc0/0x150
[  134.254886][ T5058]  _printk+0xda/0x130
[  134.254909][ T5058]  ? load_image+0x410/0x410
[  134.254933][ T5058]  should_fail+0x364/0x4b0
[  134.254957][ T5058]  should_failslab+0x5/0x20
[  134.254975][ T5058]  slab_pre_alloc_hook+0x51/0xc0
[  134.254995][ T5058]  __kmalloc+0x6b/0x340
[  134.255013][ T5058]  ? __tty_buffer_request_room+0x1db/0x500
[  134.255036][ T5058]  __tty_buffer_request_room+0x1db/0x500
[  134.255060][ T5058]  tty_insert_flip_string_and_push_buffer+0x7e/0x380
[  134.255087][ T5058]  n_tty_write+0x5dc/0x1220
[  134.255120][ T5058]  ? n_tty_read+0x1a50/0x1a50
[  134.255142][ T5058]  ? wait_woken+0x1b0/0x1b0
[  134.255166][ T5058]  ? __virt_addr_valid+0x3c6/0x470
[  134.255185][ T5058]  ? __phys_addr_symbol+0x2b/0x70
[  134.255202][ T5058]  ? __check_object_size+0x30c/0x410
[  134.255226][ T5058]  file_tty_write+0x50c/0x8a0
[  134.255250][ T5058]  ? n_tty_read+0x1a50/0x1a50
[  134.255273][ T5058]  vfs_write+0x748/0xd70
[  134.255295][ T5058]  ? file_end_write+0x250/0x250
[  134.255317][ T5058]  ? __fget_files+0x402/0x470
[  134.255340][ T5058]  ? __fdget_pos+0x1e2/0x370
[  134.255357][ T5058]  ? ksys_write+0x70/0x260
[  134.255376][ T5058]  ksys_write+0x153/0x260
[  134.255395][ T5058]  ? __ia32_sys_read+0x80/0x80
[  134.255424][ T5058]  ? lockdep_hardirqs_on+0x94/0x140
[  134.255450][ T5058]  do_syscall_64+0x4c/0xa0
[  134.255470][ T5058]  ? clear_bhb_loop+0x30/0x80
[  134.255492][ T5058]  ? clear_bhb_loop+0x30/0x80
[  134.255514][ T5058]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  134.255544][ T5058] RIP: 0033:0x7fa19aad31d9
[  134.255563][ T5058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  134.255580][ T5058] RSP: 002b:00007fa198d2b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  134.255601][ T5058] RAX: ffffffffffffffda RBX: 00007fa19ad5afa0 RCX: 00007fa19aad31d9
[  134.255616][ T5058] RDX: 000000000000ff2e RSI: 0000200000000080 RDI: 0000000000000004
[  134.255629][ T5058] RBP: 00007fa19ab6a888 R08: 0000000000000000 R09: 0000000000000000
[  134.255641][ T5058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  134.255653][ T5058] R13: 00007fa19ad5b038 R14: 00007fa19ad5afa0 R15: 00007ffc314d0ef8
[  134.255674][ T5058]  </TASK>
[  135.185166][ T5058] CPU: 1 PID: 5058 Comm: syz.3.188 Not tainted syzkaller #0
[  135.192483][ T5058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  135.202567][ T5058] Call Trace:
[  135.205871][ T5058]  <TASK>
[  135.208820][ T5058]  dump_stack_lvl+0x188/0x250
[  135.213562][ T5058]  ? show_regs_print_info+0x20/0x20
[  135.218777][ T5058]  ? load_image+0x410/0x410
[  135.223306][ T5058]  should_fail+0x383/0x4b0
[  135.227749][ T5058]  should_failslab+0x5/0x20
[  135.232270][ T5058]  slab_pre_alloc_hook+0x51/0xc0
[  135.237230][ T5058]  __kmalloc+0x6b/0x340
[  135.241403][ T5058]  ? __tty_buffer_request_room+0x1db/0x500
[  135.247224][ T5058]  __tty_buffer_request_room+0x1db/0x500
[  135.252880][ T5058]  tty_insert_flip_string_and_push_buffer+0x7e/0x380
[  135.259576][ T5058]  n_tty_write+0x5dc/0x1220
[  135.264133][ T5058]  ? n_tty_read+0x1a50/0x1a50
[  135.268834][ T5058]  ? wait_woken+0x1b0/0x1b0
[  135.273381][ T5058]  ? __virt_addr_valid+0x3c6/0x470
[  135.278510][ T5058]  ? __phys_addr_symbol+0x2b/0x70
[  135.283573][ T5058]  ? __check_object_size+0x30c/0x410
[  135.288879][ T5058]  file_tty_write+0x50c/0x8a0
[  135.293577][ T5058]  ? n_tty_read+0x1a50/0x1a50
[  135.298274][ T5058]  vfs_write+0x748/0xd70
[  135.302536][ T5058]  ? file_end_write+0x250/0x250
[  135.307401][ T5058]  ? __fget_files+0x402/0x470
[  135.312090][ T5058]  ? __fdget_pos+0x1e2/0x370
[  135.316693][ T5058]  ? ksys_write+0x70/0x260
[  135.321123][ T5058]  ksys_write+0x153/0x260
[  135.325465][ T5058]  ? __ia32_sys_read+0x80/0x80
[  135.330241][ T5058]  ? lockdep_hardirqs_on+0x94/0x140
[  135.335460][ T5058]  do_syscall_64+0x4c/0xa0
[  135.339896][ T5058]  ? clear_bhb_loop+0x30/0x80
[  135.344587][ T5058]  ? clear_bhb_loop+0x30/0x80
[  135.349286][ T5058]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  135.355285][ T5058] RIP: 0033:0x7fa19aad31d9
[  135.359715][ T5058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  135.379336][ T5058] RSP: 002b:00007fa198d2b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  135.387766][ T5058] RAX: ffffffffffffffda RBX: 00007fa19ad5afa0 RCX: 00007fa19aad31d9
[  135.395751][ T5058] RDX: 000000000000ff2e RSI: 0000200000000080 RDI: 0000000000000004
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  135.404194][ T5058] RBP: 00007fa19ab6a888 R08: 0000000000000000 R09: 0000000000000000
[  135.412182][ T5058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  135.420342][ T5058] R13: 00007fa19ad5b038 R14: 00007fa19ad5afa0 R15: 00007ffc314d0ef8
[  135.428345][ T5058]  </TASK>
[  136.063308][ T4471] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.151544][ T4471] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.261391][ T4471] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.312407][ T4471] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.390185][ T4471] tipc: Left network mode
[  137.013961][ T4471] device hsr_slave_0 left promiscuous mode
[  137.022056][ T4471] device hsr_slave_1 left promiscuous mode
[  137.028883][ T4471] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  137.036327][ T4471] batman_adv: batadv0: Removing interface: batadv_slave_0
[  137.044310][ T4471] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  137.052022][ T4471] batman_adv: batadv0: Removing interface: batadv_slave_1
[  137.059945][ T4471] device bridge_slave_1 left promiscuous mode
[  137.066200][ T4471] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.074851][ T4471] device bridge_slave_0 left promiscuous mode
[  137.081393][ T4471] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.092522][ T4471] device veth1_macvtap left promiscuous mode
[  137.102092][ T4471] device veth0_macvtap left promiscuous mode
[  137.108668][ T4471] device veth1_vlan left promiscuous mode
[  137.114503][ T4471] device veth0_vlan left promiscuous mode
[  137.262436][ T4471] team0 (unregistering): Port device team_slave_1 removed
[  137.274268][ T4471] team0 (unregistering): Port device team_slave_0 removed
[  137.285530][ T4471] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  137.300598][ T4471] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  137.346423][ T4471] bond0 (unregistering): Released all slaves
[  138.149167][ T4471] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.223666][ T4471] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.272151][ T4471] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.322198][ T4471] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.418915][ T4471] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.471952][ T4471] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.512256][ T4471] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.563594][ T4471] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.646338][ T4471] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.691145][ T4471] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.742141][ T4471] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.783686][ T4471] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.873316][ T4471] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.933993][ T4471] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.985199][ T4471] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.033427][ T4471] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.140946][ T4471] tipc: Disabling bearer <udp:syz0>
[  139.146434][ T4471] tipc: Left network mode
[  139.155625][ T4471] tipc: Left network mode
[  139.160874][ T4471] tipc: Disabling bearer <udp:syz0>
[  139.166356][ T4471] tipc: Left network mode
[  139.174371][ T4471] tipc: Disabling bearer <udp:syz0>
[  139.180705][ T4471] tipc: Left network mode
[  140.295270][ T4471] device hsr_slave_0 left promiscuous mode
[  140.301621][ T4471] device hsr_slave_1 left promiscuous mode
[  140.308757][ T4471] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  140.316188][ T4471] batman_adv: batadv0: Removing interface: batadv_slave_0
[  140.324205][ T4471] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  140.332428][ T4471] batman_adv: batadv0: Removing interface: batadv_slave_1
[  140.341852][ T4471] device bridge_slave_1 left promiscuous mode
[  140.348415][ T4471] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.356691][ T4471] device bridge_slave_0 left promiscuous mode
[  140.364967][ T4471] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.376375][ T4471] device hsr_slave_0 left promiscuous mode
[  140.384435][ T4471] device hsr_slave_1 left promiscuous mode
[  140.391134][ T4471] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  140.400531][ T4471] batman_adv: batadv0: Removing interface: batadv_slave_0
[  140.408508][ T4471] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  140.416051][ T4471] batman_adv: batadv0: Removing interface: batadv_slave_1
[  140.426085][ T4471] device bridge_slave_1 left promiscuous mode
[  140.432776][ T4471] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.442956][ T4471] device bridge_slave_0 left promiscuous mode
[  140.449399][ T4471] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.462575][ T4471] device hsr_slave_0 left promiscuous mode
[  140.469415][ T4471] device hsr_slave_1 left promiscuous mode
[  140.475747][ T4471] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  140.485263][ T4471] batman_adv: batadv0: Removing interface: batadv_slave_0
[  140.493230][ T4471] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  140.503114][ T4471] batman_adv: batadv0: Removing interface: batadv_slave_1
[  140.511018][ T4471] device bridge_slave_1 left promiscuous mode
[  140.517218][ T4471] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.527462][ T4471] device bridge_slave_0 left promiscuous mode
[  140.534351][ T4471] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.547517][ T4471] device hsr_slave_0 left promiscuous mode
[  140.555910][ T4471] device hsr_slave_1 left promiscuous mode
[  140.564309][ T4471] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  140.572000][ T4471] batman_adv: batadv0: Removing interface: batadv_slave_0
[  140.581948][ T4471] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  140.590267][ T4471] batman_adv: batadv0: Removing interface: batadv_slave_1
[  140.597886][ T4471] device bridge_slave_1 left promiscuous mode
[  140.606012][ T4471] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.614523][ T4471] device bridge_slave_0 left promiscuous mode
[  140.622938][ T4471] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.638763][ T4471] device veth1_macvtap left promiscuous mode
[  140.644868][ T4471] device veth0_macvtap left promiscuous mode
[  140.653525][ T4471] device veth1_vlan left promiscuous mode
[  140.659412][ T4471] device veth0_vlan left promiscuous mode
[  140.666038][ T4471] device veth1_macvtap left promiscuous mode
[  140.674050][ T4471] device veth0_macvtap left promiscuous mode
[  140.680312][ T4471] device veth1_vlan left promiscuous mode
[  140.686123][ T4471] device veth0_vlan left promiscuous mode
[  140.695064][ T4471] device veth1_macvtap left promiscuous mode
[  140.701762][ T4471] device veth0_macvtap left promiscuous mode
[  140.707852][ T4471] device veth1_vlan left promiscuous mode
[  140.715709][ T4471] device veth0_vlan left promiscuous mode
[  140.722715][ T4471] device veth1_macvtap left promiscuous mode
[  140.731173][ T4471] device veth0_macvtap left promiscuous mode
[  140.737256][ T4471] device veth1_vlan left promiscuous mode
[  140.743591][ T4471] device veth0_vlan left promiscuous mode
[  141.011940][ T4471] team0 (unregistering): Port device team_slave_1 removed
[  141.023125][ T4471] team0 (unregistering): Port device team_slave_0 removed
[  141.037209][ T4471] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  141.050114][ T4471] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  141.097111][ T4471] bond0 (unregistering): Released all slaves
[  141.154273][ T4471] team0 (unregistering): Port device team_slave_1 removed
[  141.165463][ T4471] team0 (unregistering): Port device team_slave_0 removed
[  141.176076][ T4471] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  141.195872][ T4471] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  141.241296][ T4471] bond0 (unregistering): Released all slaves
[  141.297334][ T4471] team0 (unregistering): Port device team_slave_1 removed
[  141.309536][ T4471] team0 (unregistering): Port device team_slave_0 removed
[  141.321493][ T4471] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  141.335030][ T4471] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  141.379508][ T4471] bond0 (unregistering): Released all slaves
[  141.437825][ T4471] team0 (unregistering): Port device team_slave_1 removed
[  141.450079][ T4471] team0 (unregistering): Port device team_slave_0 removed
[  141.462727][ T4471] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  141.474814][ T4471] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  141.517896][ T4471] bond0 (unregistering): Released all slaves