last executing test programs:

1m2.301809015s ago: executing program 3 (id=727):
socket$nl_generic(0x10, 0x3, 0x10)
bind$802154_dgram(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_TTY_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x18, 0x3f9, 0x20, 0x70bd28, 0x25dfdbfc}, 0x18}, 0x1, 0x0, 0x0, 0x48004}, 0x4000)
read$eventfd(0xffffffffffffffff, 0x0, 0x0)
bind$packet(0xffffffffffffffff, 0x0, 0x0)

1m2.169903671s ago: executing program 3 (id=730):
syz_mount_image$jfs(&(0x7f0000000240), &(0x7f0000000040)='./file1\x00', 0x3010846, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@nodiscard}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@discard}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@errors_remount}, {@usrquota}, {@usrquota}, {@errors_continue}, {@nodiscard}, {@iocharset={'iocharset', 0x3d, 'default'}}]}, 0x2c, 0x62d7, &(0x7f0000021240)="$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")
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)

58.075605343s ago: executing program 3 (id=738):
openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2})
ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0)
getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2e, 0x0, &(0x7f0000000400))
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
gettid()
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50)
timer_create(0x1, 0x0, 0x0)
r3 = fsopen(&(0x7f0000000200)='configfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
fchdir(r4)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0xc8b573f2c15a223a)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r6, &(0x7f00000076c0)=""/4126, 0x101e)
getdents64(r5, 0x0, 0x0)
getdents64(r5, 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x81}, 0x1c)

56.246223073s ago: executing program 3 (id=741):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$inet6(0xa, 0x802, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x40000001, 0x0, 0x106, 0x1}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0xc, @local, 0x10}}}, 0x30)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x3c, r4, 0x1, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x40}, @ETHTOOL_A_RINGS_TX={0x8}]}, 0x3c}}, 0x0)

48.943058299s ago: executing program 3 (id=753):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
syz_usb_connect(0x0, 0x55, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c00109040000010202010005240010010424020205240100010524060001"], 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x5, [{0x0, 0x2, 0x8000000}]}, @enum]}}, 0x0, 0x3e, 0x0, 0x1}, 0x28)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000680)={{{@in=@empty, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0x100, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
close_range(r3, 0xffffffffffffffff, 0x0)
bind$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e21}, 0xfffffffffffffd81)

46.761741505s ago: executing program 3 (id=759):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
brk(0x8c000000000b68e)
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x40000000000035d, 0x20000084)
recvmmsg(r1, &(0x7f00000000c0), 0x191d1f8, 0x10042, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @multicast1}}}, 0x108)

31.406271659s ago: executing program 32 (id=759):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
brk(0x8c000000000b68e)
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x40000000000035d, 0x20000084)
recvmmsg(r1, &(0x7f00000000c0), 0x191d1f8, 0x10042, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @multicast1}}}, 0x108)

16.135549887s ago: executing program 1 (id=824):
socket$nl_xfrm(0x10, 0x3, 0x6)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8040000, 0x2000009, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
syz_open_procfs(0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write(r3, &(0x7f0000000180)="3300000008000102030405060101", 0xe)
write(r3, &(0x7f0000000200)="34000000070001020304050601", 0xd)

12.883149648s ago: executing program 4 (id=832):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
getpid()
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
pipe2$9p(&(0x7f0000000040), 0x80)
socket$nl_netfilter(0x10, 0x3, 0xc)
inotify_init1(0x80000)
unshare(0x22020600)
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2})
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x101003)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000440)={0x53, 0xffffffffffffffff, 0x6, 0x1d, @scatter={0x0, 0x0, 0x0}, &(0x7f00000000c0)="513d7f3020a8", 0x0, 0x800001fc, 0x10034, 0xffffffff, 0x0})

11.137017892s ago: executing program 4 (id=835):
openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2})
ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0)
getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2e, 0x0, &(0x7f0000000400))
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
gettid()
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="130000001000020000000000000000000000000000000000e190557c87ac14be8066b673", @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50)
timer_create(0x1, 0x0, 0x0)
r3 = fsopen(&(0x7f0000000200)='configfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
fchdir(r4)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0xc8b573f2c15a223a)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r6, &(0x7f00000076c0)=""/4126, 0x101e)
getdents64(r5, 0x0, 0x0)
getdents64(r5, 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x81}, 0x1c)

10.725840671s ago: executing program 1 (id=838):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$inet6(0xa, 0x802, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x40000001, 0x0, 0x106, 0x1}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0xc, @local, 0x10}}}, 0x30)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x3c, r4, 0x1, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x40}, @ETHTOOL_A_RINGS_TX={0x8}]}, 0x3c}}, 0x0)

9.783752841s ago: executing program 1 (id=842):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
syz_usb_connect(0x0, 0x55, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c00109040000010202010005240010010424020205240100010524060001"], 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x5, [{0x0, 0x2, 0x8000000}]}, @enum]}}, 0x0, 0x3e, 0x0, 0x1}, 0x28)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
close_range(r3, 0xffffffffffffffff, 0x0)
bind$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e21}, 0xfffffffffffffd81)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)

8.52772365s ago: executing program 0 (id=843):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40)
writev(r3, &(0x7f00000001c0)=[{0x0}], 0x1)
close_range(0xffffffffffffffff, r3, 0x0)

7.581734351s ago: executing program 1 (id=845):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
getpid()
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
pipe2$9p(&(0x7f0000000040), 0x80)
socket$nl_netfilter(0x10, 0x3, 0xc)
inotify_init1(0x80000)
unshare(0x22020600)
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2})
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x101003)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000440)={0x53, 0xffffffffffffffff, 0x6, 0x1d, @scatter={0x0, 0x0, 0x0}, &(0x7f00000000c0)="513d7f3020a8", 0x0, 0x800001fc, 0x10034, 0xffffffff, 0x0})

7.577336152s ago: executing program 4 (id=846):
r0 = gettid()
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x2000000000}, {}, 0x0, 0xffffffff, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x12}, 0x0, 0x0, 0x0, 0x4}}, 0xe4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
socket$inet6_udp(0xa, 0x2, 0x0)
get_robust_list(r0, &(0x7f00000004c0)=&(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={&(0x7f0000000340)}}}, 0x0)
fsopen(0x0, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2c41, 0x0)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff)
symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/gser.usb0\x00')

7.506557385s ago: executing program 0 (id=847):
socket$nl_xfrm(0x10, 0x3, 0x6)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8040000, 0x2000009, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
syz_open_procfs(0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write(r3, &(0x7f0000000180)="3300000008000102030405060101", 0xe)
write(r3, &(0x7f0000000200)="34000000070001020304050601", 0xd)

6.141227426s ago: executing program 0 (id=848):
io_setup(0x5, 0x0)
r0 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000005c0)={0x7f, "42fce3753785259206be0000000000000000005600"})
io_submit(0x0, 0x0, &(0x7f0000000480))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x90412000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bind$inet6(r1, 0x0, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
ioctl$USBDEVFS_FREE_STREAMS(r5, 0x8008551d, &(0x7f00000002c0)=ANY=[@ANYBLOB="7d92000018"])
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x10000, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@aname={'aname', 0x3d, '\xfc++*)//'}}]}})

6.103399624s ago: executing program 1 (id=849):
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x280028, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
write$P9_RVERSION(r1, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0xb, 0x0, {0x1}}, 0x18)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x790, &(0x7f0000006a80)="$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")
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="010800000000000014001280090001007665"], 0x3c}}, 0x40c4)
write$P9_RUNLINKAT(0xffffffffffffffff, 0x0, 0x0)
flock(0xffffffffffffffff, 0x2)
socket$inet6(0xa, 0x3, 0xff)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0x0, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x13)
openat$rtc(0xffffffffffffff9c, 0x0, 0x800, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000140), 0x4, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})

6.087378517s ago: executing program 4 (id=850):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
get_mempolicy(&(0x7f0000000000), 0x0, 0x7, &(0x7f0000ffd000/0x1000)=nil, 0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_access\x00', 0x0, 0x24, 0x3)
setgroups(0x0, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000840)={0x0, 0x8001, 0x8}, 0xc)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@map=r3, 0xffffffffffffffff, 0x2f, 0x0, 0x0, @void, @value=r3}, 0x20)
sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c000000000b05000000000000000000030000050800024000000005090001006d61726b00000000080003"], 0x7c}}, 0x80)

5.679106045s ago: executing program 2 (id=851):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$inet6(0xa, 0x802, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x40000001, 0x0, 0x106, 0x1}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0xc, @local, 0x10}}}, 0x30)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x3c, r4, 0x1, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x40}, @ETHTOOL_A_RINGS_TX={0x8}]}, 0x3c}}, 0x0)

5.107891074s ago: executing program 0 (id=852):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, 0x0, 0x0)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000280)={0xa, 0x4e22, 0x10000009, @loopback, 0x2}, 0x1c)
connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c)
sendmmsg$inet6(r5, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000002140)='$|', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)="a37d3b31", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000500)='G)', 0x2}], 0x1}}], 0x3, 0x4040881)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000020c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000e40)=""/4096, 0x1000, 0x0, 0x0}, &(0x7f0000002100)=0x40)
write$UHID_INPUT(r1, &(0x7f0000002b40)={0xe, {"a2e3ad099b0d09f91b5f2f0987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f323063090810e0879b0f0a75e70a9b334d959b669a240d5b0af3988f7ef31952010afde8d178708c523c921b1b5b07070d075b0936cd3b78130daa61d8e81a3f00005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397273ce1766769f0c91c00305d3f46635eb016d5b1dda98e2d739be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b7638354a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc3609aa24b7d520c829d095083bba2987a67399eac430d145d546a40b9f6ff14ac488ec130bb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b2860d1b3cff57d8b6d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a4f0492d48604675fde2b34cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827955e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb9754fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94e7475cb74642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd72ea4998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5ff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c58b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b50517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864af090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d885b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1a85ae7e69fd1a47a284f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cef8473b53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b344340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cccf8a97406bb5a68a1f0c4549820a73c8859dde0712ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcb7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c2e14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ec00000000000000b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a52830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec685f068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000e00f96f06817fb903729a7fb6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x942}}, 0x1006)
syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f0000000880)='./file0\x00', 0x18000c6, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYRES16=0x0, @ANYRES8], 0x0, 0x17d, &(0x7f0000001ac0)="$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")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @private=0xa010102}, 0x10)
socket$inet6(0x10, 0x2, 0x4)
ptrace(0x4207, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]})

4.76163678s ago: executing program 2 (id=853):
r0 = syz_open_dev$evdev(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
socket$packet(0x11, 0x3, 0x300)
syz_emit_ethernet(0x3a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaafad1e048716e08004500000000119078000000000000000000004e200018cb3b04000000050000000700000000"], 0x0)
ioctl$EVIOCSREP(r0, 0x80044584, 0xffffffffffffffff)
r4 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r4, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(r4, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
accept4$unix(r4, 0x0, 0x0, 0x80800)

4.442721441s ago: executing program 0 (id=854):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$packet(0x11, 0x3, 0x300)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='children\x00')
pread64(r2, &(0x7f0000001300)=""/4102, 0x1006, 0x9)

3.76725177s ago: executing program 2 (id=855):
openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2})
ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0)
getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2e, 0x0, &(0x7f0000000400))
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
gettid()
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="130000001000020000000000000000000000000000000000e190557c87ac14be8066b673", @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50)
timer_create(0x1, 0x0, 0x0)
r3 = fsopen(&(0x7f0000000200)='configfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
fchdir(r4)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0xc8b573f2c15a223a)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r6, &(0x7f00000076c0)=""/4126, 0x101e)
getdents64(r5, 0x0, 0x0)
getdents64(r5, 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x81}, 0x1c)

2.77350675s ago: executing program 0 (id=856):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
syz_usb_connect(0x0, 0x55, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c00109040000010202010005240010010424020205240100010524060001"], 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x5, [{0x0, 0x2, 0x8000000}]}, @enum]}}, 0x0, 0x3e, 0x0, 0x1}, 0x28)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
close_range(r3, 0xffffffffffffffff, 0x0)
bind$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e21}, 0xfffffffffffffd81)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)

1.971594773s ago: executing program 2 (id=857):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, 0x0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40)
writev(r3, &(0x7f00000001c0)=[{0x0}], 0x1)
close_range(0xffffffffffffffff, r3, 0x0)

1.789865788s ago: executing program 4 (id=858):
socket$nl_xfrm(0x10, 0x3, 0x6)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8040000, 0x2000009, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
syz_open_procfs(0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write(r3, &(0x7f0000000180)="3300000008000102030405060101", 0xe)
write(r3, &(0x7f0000000200)="34000000070001020304050601", 0xd)

977.495473ms ago: executing program 2 (id=859):
r0 = gettid()
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x2000000000}, {}, 0x0, 0xffffffff, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x12}, 0x0, 0x0, 0x0, 0x4}}, 0xe4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
socket$inet6_udp(0xa, 0x2, 0x0)
get_robust_list(r0, &(0x7f00000004c0)=&(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={&(0x7f0000000340)}}}, 0x0)
fsopen(0x0, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2c41, 0x0)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff)
symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/gser.usb0\x00')

746.919667ms ago: executing program 2 (id=860):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, 0x0, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000280)={0xa, 0x4e22, 0x10000009, @loopback, 0x2}, 0x1c)
connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c)
sendmmsg$inet6(r5, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000002140)='$|', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)="a37d3b31", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000500)='G)', 0x2}], 0x1}}], 0x3, 0x4040881)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000020c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000e40)=""/4096, 0x1000, 0x0, 0x0}, &(0x7f0000002100)=0x40)
write$UHID_INPUT(r1, &(0x7f0000002b40)={0xe, {"a2e3ad099b0d09f91b5f2f0987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f323063090810e0879b0f0a75e70a9b334d959b669a240d5b0af3988f7ef31952010afde8d178708c523c921b1b5b07070d075b0936cd3b78130daa61d8e81a3f00005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397273ce1766769f0c91c00305d3f46635eb016d5b1dda98e2d739be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b7638354a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc3609aa24b7d520c829d095083bba2987a67399eac430d145d546a40b9f6ff14ac488ec130bb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b2860d1b3cff57d8b6d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a4f0492d48604675fde2b34cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827955e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb9754fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94e7475cb74642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd72ea4998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5ff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c58b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b50517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864af090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d885b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1a85ae7e69fd1a47a284f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cef8473b53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b344340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cccf8a97406bb5a68a1f0c4549820a73c8859dde0712ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcb7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c2e14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ec00000000000000b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a52830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec685f068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000e00f96f06817fb903729a7fb6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x942}}, 0x1006)
syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f0000000880)='./file0\x00', 0x18000c6, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYRES16=0x0, @ANYRES8], 0x0, 0x17d, &(0x7f0000001ac0)="$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")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
socket$inet6(0x10, 0x2, 0x4)

526.58501ms ago: executing program 4 (id=861):
io_setup(0x5, 0x0)
r0 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000005c0)={0x7f, "42fce3753785259206be0000000000000000005600"})
io_submit(0x0, 0x0, &(0x7f0000000480))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x90412000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bind$inet6(r1, 0x0, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
ioctl$USBDEVFS_FREE_STREAMS(r5, 0x8008551d, &(0x7f00000002c0)=ANY=[@ANYBLOB="7d92000018"])
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x10000, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@aname={'aname', 0x3d, '\xfc++*)//'}}]}})

0s ago: executing program 1 (id=862):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x303, 0x38}, "2cae8100e0be7939", "73b59657269ef929ee540a8a0a86c5d0", '\x00', "404574dd3a00"}, 0x28)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8003}]})
close_range(r1, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCINQ(r0, 0x541b, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x40, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.123' (ED25519) to the list of known hosts.
[   61.311869][ T4172] cgroup: Unknown subsys name 'net'
[   61.439703][ T4172] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   62.956738][ T4172] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   64.431372][ T4191] chnl_net:caif_netlink_parms(): no params data found
[   64.514456][ T4186] chnl_net:caif_netlink_parms(): no params data found
[   64.575519][ T4185] chnl_net:caif_netlink_parms(): no params data found
[   64.588843][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.597096][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.607772][ T4191] device bridge_slave_0 entered promiscuous mode
[   64.619760][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.626992][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.635209][ T4191] device bridge_slave_1 entered promiscuous mode
[   64.685336][ T4194] chnl_net:caif_netlink_parms(): no params data found
[   64.731720][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.745007][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.755279][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.762463][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.771708][ T4186] device bridge_slave_0 entered promiscuous mode
[   64.782413][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.789646][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.798261][ T4186] device bridge_slave_1 entered promiscuous mode
[   64.827187][ T4184] chnl_net:caif_netlink_parms(): no params data found
[   64.873914][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.892970][ T4191] team0: Port device team_slave_0 added
[   64.916296][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.932345][ T4191] team0: Port device team_slave_1 added
[   64.965131][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.972317][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.980847][ T4185] device bridge_slave_0 entered promiscuous mode
[   65.004315][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.011547][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.019664][ T4194] device bridge_slave_0 entered promiscuous mode
[   65.033946][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.041262][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.050208][ T4185] device bridge_slave_1 entered promiscuous mode
[   65.058486][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.066365][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.092889][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.109931][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.117346][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.143792][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.155521][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.163054][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.170995][ T4194] device bridge_slave_1 entered promiscuous mode
[   65.181070][ T4186] team0: Port device team_slave_0 added
[   65.190133][ T4186] team0: Port device team_slave_1 added
[   65.240946][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.252464][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.285117][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.292252][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.300544][ T4184] device bridge_slave_0 entered promiscuous mode
[   65.309391][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.316897][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.325343][ T4184] device bridge_slave_1 entered promiscuous mode
[   65.339981][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.350555][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.358079][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.384862][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.423660][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.433460][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.440447][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.466700][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.487610][ T4191] device hsr_slave_0 entered promiscuous mode
[   65.495069][ T4191] device hsr_slave_1 entered promiscuous mode
[   65.511202][ T4185] team0: Port device team_slave_0 added
[   65.539865][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.551332][ T4185] team0: Port device team_slave_1 added
[   65.570806][ T4186] device hsr_slave_0 entered promiscuous mode
[   65.577770][ T4186] device hsr_slave_1 entered promiscuous mode
[   65.585012][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   65.593052][ T4186] Cannot create hsr debugfs directory
[   65.601789][ T4194] team0: Port device team_slave_0 added
[   65.609510][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.650483][ T4194] team0: Port device team_slave_1 added
[   65.692520][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.699616][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.725728][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.755199][ T4184] team0: Port device team_slave_0 added
[   65.776633][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.783853][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.810914][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.827026][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.834188][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.860645][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.873929][ T4184] team0: Port device team_slave_1 added
[   65.880625][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.888044][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.914249][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.968554][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.976171][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.002352][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.021051][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.028373][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.054419][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.097131][ T4194] device hsr_slave_0 entered promiscuous mode
[   66.104395][ T4194] device hsr_slave_1 entered promiscuous mode
[   66.111042][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   66.118822][ T4194] Cannot create hsr debugfs directory
[   66.164542][ T4185] device hsr_slave_0 entered promiscuous mode
[   66.171768][ T4185] device hsr_slave_1 entered promiscuous mode
[   66.179014][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   66.188405][   T13] Bluetooth: hci1: command 0x0409 tx timeout
[   66.193758][ T1108] Bluetooth: hci2: command 0x0409 tx timeout
[   66.196370][   T13] Bluetooth: hci0: command 0x0409 tx timeout
[   66.204839][ T1108] Bluetooth: hci3: command 0x0409 tx timeout
[   66.208522][ T4185] Cannot create hsr debugfs directory
[   66.221501][ T1108] Bluetooth: hci4: command 0x0409 tx timeout
[   66.329046][ T4184] device hsr_slave_0 entered promiscuous mode
[   66.336926][ T4184] device hsr_slave_1 entered promiscuous mode
[   66.344779][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   66.352393][ T4184] Cannot create hsr debugfs directory
[   66.484063][ T4186] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   66.495832][ T4186] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   66.509390][ T4186] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   66.528625][ T4186] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   66.594414][ T4191] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   66.607763][ T4191] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   66.634818][ T4191] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   66.646891][ T4191] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   66.699682][ T4194] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   66.711496][ T4194] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   66.746775][ T4194] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   66.766020][ T4194] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   66.790138][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.802183][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.819313][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   66.830643][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.877337][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.939492][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.956219][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   66.966864][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   66.976845][ T4184] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   66.990068][ T4184] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   67.016686][ T4186] 8021q: adding VLAN 0 to HW filter on device team0
[   67.027173][ T4191] 8021q: adding VLAN 0 to HW filter on device team0
[   67.035176][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   67.045381][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   67.054854][ T4184] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   67.080186][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   67.089218][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   67.098998][  T155] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.106420][  T155] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.116213][ T4184] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   67.150871][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   67.160399][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   67.169911][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   67.179867][  T155] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.187076][  T155] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.198560][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   67.207612][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   67.217297][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.224452][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.243755][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   67.253909][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   67.293972][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.306690][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.323320][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   67.332503][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   67.343297][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   67.352125][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   67.361417][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   67.370507][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   67.380400][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   67.389230][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.396453][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.404920][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   67.414868][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   67.423463][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   67.437465][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   67.445715][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   67.457659][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   67.479980][ T4185] 8021q: adding VLAN 0 to HW filter on device team0
[   67.495487][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   67.509466][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   67.518486][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   67.527998][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   67.537643][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   67.550682][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   67.561396][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   67.570944][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   67.580778][ T3072] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.587946][ T3072] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.599511][ T4194] 8021q: adding VLAN 0 to HW filter on device team0
[   67.636283][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.646465][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   67.660421][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   67.670445][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   67.684939][ T3072] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.692060][ T3072] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.740637][ T4184] 8021q: adding VLAN 0 to HW filter on device team0
[   67.750832][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   67.766692][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   67.776330][ T3072] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.783507][ T3072] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.792078][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   67.801671][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   67.810899][ T3072] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.818046][ T3072] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.829206][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   67.838601][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   67.853301][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   67.862151][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   67.876588][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   67.885641][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   67.894530][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   67.904340][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   67.914276][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   67.923316][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   67.932386][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   67.942498][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   67.950643][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   67.959293][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   67.969145][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   67.977649][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   67.998641][ T4185] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   68.010172][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   68.033168][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   68.042470][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   68.056761][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   68.066231][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   68.074920][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   68.086196][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   68.095026][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   68.104947][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   68.115075][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   68.124030][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   68.133457][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   68.142111][ T3072] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.149268][ T3072] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.157224][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   68.167297][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   68.175985][ T3072] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.183115][ T3072] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.191600][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   68.201354][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   68.209395][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   68.220404][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   68.231228][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   68.240142][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   68.263568][ T4232] Bluetooth: hci0: command 0x041b tx timeout
[   68.268617][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   68.277550][ T4231] Bluetooth: hci4: command 0x041b tx timeout
[   68.284580][ T4231] Bluetooth: hci3: command 0x041b tx timeout
[   68.291128][ T4231] Bluetooth: hci2: command 0x041b tx timeout
[   68.305229][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   68.317073][ T4231] Bluetooth: hci1: command 0x041b tx timeout
[   68.324447][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   68.336063][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   68.352248][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   68.360490][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   68.368513][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   68.378591][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   68.387925][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   68.429766][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   68.440396][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   68.461587][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   68.474698][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   68.487665][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   68.497588][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   68.510142][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   68.526392][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.549539][ T4194] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   68.568278][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   68.583238][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   68.591776][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   68.601341][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   68.611382][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   68.646089][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   68.675785][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   68.697705][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   68.771639][ T4186] device veth0_vlan entered promiscuous mode
[   68.799526][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   68.809368][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   68.817887][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   68.826411][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   68.839839][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.862851][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   68.883173][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   68.891317][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   68.902150][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   68.915038][ T4186] device veth1_vlan entered promiscuous mode
[   68.935596][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.967671][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   68.990097][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   69.009741][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   69.020175][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   69.056134][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.065714][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   69.086039][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   69.096004][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   69.105478][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   69.117565][ T4186] device veth0_macvtap entered promiscuous mode
[   69.150435][ T4186] device veth1_macvtap entered promiscuous mode
[   69.174241][ T4185] device veth0_vlan entered promiscuous mode
[   69.193324][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   69.202838][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   69.211036][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   69.221234][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   69.230895][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   69.241105][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   69.252362][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   69.260203][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   69.280610][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.296359][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   69.307621][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   69.335421][ T4185] device veth1_vlan entered promiscuous mode
[   69.345925][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   69.359044][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   69.371271][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   69.380193][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   69.389789][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   69.399829][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.416307][ T4184] device veth0_vlan entered promiscuous mode
[   69.427024][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   69.437673][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   69.451167][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   69.494332][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.511253][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   69.528204][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   69.537953][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   69.548937][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   69.564231][ T4184] device veth1_vlan entered promiscuous mode
[   69.579024][ T4186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.588480][ T4186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.598364][ T4186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.607592][ T4186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.629610][ T4185] device veth0_macvtap entered promiscuous mode
[   69.639754][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   69.649309][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   69.658682][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   69.667807][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   69.689361][ T4185] device veth1_macvtap entered promiscuous mode
[   69.700607][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   69.710500][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   69.726103][ T4194] device veth0_vlan entered promiscuous mode
[   69.753115][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   69.764063][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   69.803113][ T4194] device veth1_vlan entered promiscuous mode
[   69.814688][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   69.830552][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   69.840568][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   69.850733][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   69.861199][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   69.879050][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.892703][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.904660][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.931286][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   69.940500][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   69.953051][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   69.977529][ T4184] device veth0_macvtap entered promiscuous mode
[   69.989320][ T4184] device veth1_macvtap entered promiscuous mode
[   70.001491][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.012121][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.025592][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.043626][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.051736][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.065284][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   70.075811][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   70.084689][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   70.095045][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   70.104797][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   70.113647][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   70.122170][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   70.131140][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   70.140690][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   70.153744][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.162489][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.172337][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.181963][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.207034][ T4194] device veth0_macvtap entered promiscuous mode
[   70.219487][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.230339][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.241122][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.252824][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.266135][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.273901][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   70.281753][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   70.290176][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   70.299318][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   70.308668][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   70.318036][ T4191] device veth0_vlan entered promiscuous mode
[   70.343807][   T23] Bluetooth: hci1: command 0x040f tx timeout
[   70.350005][   T23] Bluetooth: hci2: command 0x040f tx timeout
[   70.354391][ T4232] Bluetooth: hci0: command 0x040f tx timeout
[   70.359033][ T4248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.370826][   T23] Bluetooth: hci3: command 0x040f tx timeout
[   70.380729][ T4194] device veth1_macvtap entered promiscuous mode
[   70.389401][ T4248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.397101][   T23] Bluetooth: hci4: command 0x040f tx timeout
[   70.422316][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   70.430871][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   70.462009][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.478172][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.490555][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.501357][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.517735][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.527848][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.544134][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.559010][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.574893][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.591334][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.602138][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.614395][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.626083][ T4191] device veth1_vlan entered promiscuous mode
[   70.640979][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   70.655991][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   70.667825][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   70.678731][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   70.688075][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   70.699059][ T4184] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.708324][ T4184] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.717403][ T4184] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.727180][ T4184] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.744082][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.756130][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.767853][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.780404][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.792347][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.805354][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.837257][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.858024][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   70.875032][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   70.906857][ T4194] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.917354][ T4194] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.927663][ T4194] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.937366][ T4194] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.999468][ T3072] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.015538][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   71.028616][ T3072] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.035605][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   71.051284][ T4191] device veth0_macvtap entered promiscuous mode
[   71.097954][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   71.107781][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   71.118769][ T4191] device veth1_macvtap entered promiscuous mode
[   71.155327][ T3072] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.175170][ T3072] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.197951][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.217326][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.245854][ T4269] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   71.262816][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   71.271003][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   71.306330][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   71.312374][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[   71.320540][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[   71.466629][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.481994][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.492386][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.505343][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.515272][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.525918][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.538632][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.550233][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.562019][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.583569][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   71.593493][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   71.615619][ T4248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.624741][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.637595][ T4248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.644821][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.644949][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.644966][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.644978][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.687322][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.697465][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.709350][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.732943][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.751967][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   71.760602][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   71.770005][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   71.786223][ T4191] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.803088][ T4191] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.811949][ T4191] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.822352][ T4191] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.853352][ T4242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.875754][ T4242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.052301][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   72.137542][ T4278] loop2: detected capacity change from 0 to 2048
[   72.170227][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.183497][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.215482][ T4242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.237962][ T4242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.258566][ T4278] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   72.282851][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   72.303076][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   72.366334][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.392026][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.450188][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   72.541097][ T4275] Bluetooth: hci4: command 0x0419 tx timeout
[   72.552889][ T4275] Bluetooth: hci3: command 0x0419 tx timeout
[   72.562831][ T4275] Bluetooth: hci0: command 0x0419 tx timeout
[   72.572930][ T4275] Bluetooth: hci2: command 0x0419 tx timeout
[   72.579044][ T4275] Bluetooth: hci1: command 0x0419 tx timeout
[   73.727978][ T4299] loop4: detected capacity change from 0 to 8
[   74.775642][ T4333] SQUASHFS error: Unable to read directory block [631:26]
[   75.992472][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!!
[   76.012430][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[   76.022426][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[   76.032431][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[   76.042426][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[   76.062444][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[   76.072426][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[   76.082425][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[   76.092422][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[   76.102438][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[   76.998201][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   77.006761][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   77.564188][ T4324] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[   77.605732][ T4354] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   77.806762][ T4361] hub 8-0:1.0: USB hub found
[   77.812380][ T4361] hub 8-0:1.0: 1 port detected
[   77.830123][ T4324] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[   77.910547][ T4362] FAULT_INJECTION: forcing a failure.
[   77.910547][ T4362] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[   78.264468][ T4362] CPU: 0 PID: 4362 Comm: syz.2.20 Not tainted syzkaller #0
[   78.271764][ T4362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   78.281968][ T4362] Call Trace:
[   78.285283][ T4362]  <TASK>
[   78.288247][ T4362]  dump_stack_lvl+0x188/0x250
[   78.293031][ T4362]  ? show_regs_print_info+0x20/0x20
[   78.298403][ T4362]  ? load_image+0x410/0x410
[   78.302961][ T4362]  ? __lock_acquire+0x7b50/0x7b50
[   78.308040][ T4362]  should_fail+0x383/0x4b0
[   78.312503][ T4362]  prepare_alloc_pages+0x1e3/0x5b0
[   78.317666][ T4362]  __alloc_pages+0x11b/0x480
[   78.322299][ T4362]  ? zone_statistics+0x170/0x170
[   78.327290][ T4362]  ? alloc_pages+0x452/0x560
[   78.331925][ T4362]  __get_free_pages+0x8/0x30
[   78.336569][ T4362]  kasan_populate_vmalloc_pte+0x21/0xc0
[   78.342154][ T4362]  __apply_to_page_range+0x987/0xd10
[   78.347489][ T4362]  ? kasan_populate_vmalloc+0x70/0x70
[   78.352909][ T4362]  alloc_vmap_area+0x19e8/0x1b30
[   78.357908][ T4362]  ? vm_map_ram+0xba0/0xba0
[   78.362472][ T4362]  __get_vm_area_node+0x14f/0x2d0
[   78.367550][ T4362]  __vmalloc_node_range+0xef/0x8b0
[   78.372700][ T4362]  ? n_tty_open+0x19/0x150
[   78.377151][ T4362]  ? clear_nonspinnable+0x60/0x60
[   78.382224][ T4362]  ? n_tty_open+0x19/0x150
[   78.386680][ T4362]  vzalloc+0x75/0x80
[   78.390610][ T4362]  ? n_tty_open+0x19/0x150
[   78.395078][ T4362]  n_tty_open+0x19/0x150
[   78.399462][ T4362]  tty_ldisc_setup+0x1a3/0x250
[   78.404268][ T4362]  tty_init_dev+0x239/0x470
[   78.408816][ T4362]  ptmx_open+0xe1/0x2c0
[   78.413011][ T4362]  ? pty_start+0x140/0x140
[   78.417475][ T4362]  chrdev_open+0x585/0x5f0
[   78.421937][ T4362]  ? cd_forget+0x160/0x160
[   78.426392][ T4362]  ? fsnotify_perm+0x3a7/0x560
[   78.431192][ T4362]  ? cd_forget+0x160/0x160
[   78.435642][ T4362]  do_dentry_open+0x7f7/0xf90
[   78.440361][ T4362]  ? vfs_open+0x2b/0x80
[   78.444558][ T4362]  path_openat+0x2718/0x2fb0
[   78.449206][ T4362]  ? __kasan_slab_alloc+0xa9/0xc0
[   78.452305][    C1] sched: RT throttling activated
[   78.459352][ T4362]  ? do_filp_open+0x400/0x400
[   78.464100][ T4362]  do_filp_open+0x1df/0x400
[   78.468653][ T4362]  ? vfs_tmpfile+0x300/0x300
[   78.473301][ T4362]  ? _raw_spin_unlock+0x24/0x40
[   78.478186][ T4362]  ? alloc_fd+0x59e/0x650
[   78.482563][ T4362]  do_sys_openat2+0x14b/0x500
[   78.487282][ T4362]  ? __lock_acquire+0x7b50/0x7b50
[   78.492365][ T4362]  ? do_sys_open+0xe0/0xe0
[   78.496838][ T4362]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[   78.502881][ T4362]  ? lock_chain_count+0x20/0x20
[   78.507788][ T4362]  __x64_sys_openat+0x135/0x160
[   78.512716][ T4362]  do_syscall_64+0x4c/0xa0
[   78.517171][ T4362]  ? clear_bhb_loop+0x30/0x80
[   78.521965][ T4362]  ? clear_bhb_loop+0x30/0x80
[   78.526674][ T4362]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   78.532626][ T4362] RIP: 0033:0x7fc7d297b159
[   78.537079][ T4362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   78.556719][ T4362] RSP: 002b:00007fc7d0bd3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   78.565184][ T4362] RAX: ffffffffffffffda RBX: 00007fc7d2c02fa0 RCX: 00007fc7d297b159
[   78.573192][ T4362] RDX: 0000000000109000 RSI: 0000200000000000 RDI: ffffffffffffff9c
[   78.581205][ T4362] RBP: 00007fc7d2a1206b R08: 0000000000000000 R09: 0000000000000000
[   78.589205][ T4362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   78.597207][ T4362] R13: 00007fc7d2c03038 R14: 00007fc7d2c02fa0 R15: 00007ffebd757678
[   78.605226][ T4362]  </TASK>
[   78.647472][ T4362] syz.2.20: vmalloc error: size 9120, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1
[   78.692386][ T4362] CPU: 0 PID: 4362 Comm: syz.2.20 Not tainted syzkaller #0
[   78.699843][ T4362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   78.709958][ T4362] Call Trace:
[   78.713268][ T4362]  <TASK>
[   78.716231][ T4362]  dump_stack_lvl+0x188/0x250
[   78.720944][ T4362]  ? rcu_lock_release+0x5/0x20
[   78.725745][ T4362]  ? show_regs_print_info+0x20/0x20
[   78.730986][ T4362]  ? load_image+0x410/0x410
[   78.735527][ T4362]  ? __rcu_read_unlock+0x78/0xd0
[   78.740513][ T4362]  warn_alloc+0x245/0x320
[   78.744883][ T4362]  ? zone_watermark_ok_safe+0x250/0x250
[   78.750466][ T4362]  ? __get_vm_area_node+0x164/0x2d0
[   78.755702][ T4362]  ? kfree+0xef/0x2a0
[   78.759729][ T4362]  __vmalloc_node_range+0x2b1/0x8b0
[   78.764960][ T4362]  ? clear_nonspinnable+0x60/0x60
[   78.770031][ T4362]  ? n_tty_open+0x19/0x150
[   78.774491][ T4362]  vzalloc+0x75/0x80
[   78.778418][ T4362]  ? n_tty_open+0x19/0x150
[   78.782910][ T4362]  n_tty_open+0x19/0x150
[   78.787219][ T4362]  tty_ldisc_setup+0x1a3/0x250
[   78.792015][ T4362]  tty_init_dev+0x239/0x470
[   78.796698][ T4362]  ptmx_open+0xe1/0x2c0
[   78.800934][ T4362]  ? pty_start+0x140/0x140
[   78.805494][ T4362]  chrdev_open+0x585/0x5f0
[   78.809948][ T4362]  ? cd_forget+0x160/0x160
[   78.814404][ T4362]  ? fsnotify_perm+0x3a7/0x560
[   78.819208][ T4362]  ? cd_forget+0x160/0x160
[   78.823667][ T4362]  do_dentry_open+0x7f7/0xf90
[   78.828385][ T4362]  ? vfs_open+0x2b/0x80
[   78.832582][ T4362]  path_openat+0x2718/0x2fb0
[   78.837228][ T4362]  ? __kasan_slab_alloc+0xa9/0xc0
[   78.842300][ T4362]  ? do_filp_open+0x400/0x400
[   78.847047][ T4362]  do_filp_open+0x1df/0x400
[   78.851597][ T4362]  ? vfs_tmpfile+0x300/0x300
[   78.856248][ T4362]  ? _raw_spin_unlock+0x24/0x40
[   78.861144][ T4362]  ? alloc_fd+0x59e/0x650
[   78.865518][ T4362]  do_sys_openat2+0x14b/0x500
[   78.870238][ T4362]  ? __lock_acquire+0x7b50/0x7b50
[   78.875306][ T4362]  ? do_sys_open+0xe0/0xe0
[   78.879755][ T4362]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[   78.885779][ T4362]  ? lock_chain_count+0x20/0x20
[   78.890672][ T4362]  __x64_sys_openat+0x135/0x160
[   78.895559][ T4362]  do_syscall_64+0x4c/0xa0
[   78.900031][ T4362]  ? clear_bhb_loop+0x30/0x80
[   78.904745][ T4362]  ? clear_bhb_loop+0x30/0x80
[   78.909459][ T4362]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   78.915381][ T4362] RIP: 0033:0x7fc7d297b159
[   78.919837][ T4362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   78.939476][ T4362] RSP: 002b:00007fc7d0bd3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   78.947927][ T4362] RAX: ffffffffffffffda RBX: 00007fc7d2c02fa0 RCX: 00007fc7d297b159
[   78.956042][ T4362] RDX: 0000000000109000 RSI: 0000200000000000 RDI: ffffffffffffff9c
[   78.964206][ T4362] RBP: 00007fc7d2a1206b R08: 0000000000000000 R09: 0000000000000000
[   78.972304][ T4362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   78.980390][ T4362] R13: 00007fc7d2c03038 R14: 00007fc7d2c02fa0 R15: 00007ffebd757678
[   78.988426][ T4362]  </TASK>
[   79.107257][ T4362] Mem-Info:
[   79.127897][ T4362] active_anon:308 inactive_anon:12120 isolated_anon:0
[   79.127897][ T4362]  active_file:4479 inactive_file:36709 isolated_file:0
[   79.127897][ T4362]  unevictable:768 dirty:785 writeback:0
[   79.127897][ T4362]  slab_reclaimable:20485 slab_unreclaimable:91985
[   79.127897][ T4362]  mapped:33599 shmem:5640 pagetables:618 bounce:0
[   79.127897][ T4362]  kernel_misc_reclaimable:0
[   79.127897][ T4362]  free:1396456 free_pcp:6607 free_cma:0
[   79.251273][ T4368] loop0: detected capacity change from 0 to 32768
[   79.367393][ T4362] Node 0 active_anon:1200kB inactive_anon:52068kB active_file:17712kB inactive_file:146836kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:136296kB dirty:3124kB writeback:0kB shmem:22280kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10468kB pagetables:2472kB all_unreclaimable? no
[   79.550170][ T4362] Node 1 active_anon:32kB inactive_anon:512kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no
[   79.671396][ T4362] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   79.784735][ T4362] lowmem_reserve[]: 0 2539 2540 2540 2540
[   79.801484][ T4362] Node 0 DMA32 free:1652588kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1200kB inactive_anon:61268kB active_file:17712kB inactive_file:146836kB unevictable:1536kB writepending:3124kB present:3129332kB managed:2606508kB mlocked:0kB bounce:0kB free_pcp:6700kB local_pcp:3016kB free_cma:0kB
[   79.893632][ T4362] lowmem_reserve[]: 0 0 0 0 0
[   79.910116][ T4362] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   80.036241][ T4362] lowmem_reserve[]: 0 0 0 0 0
[   80.041102][ T4362] Node 1 Normal free:3912388kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:16kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:10920kB local_pcp:5928kB free_cma:0kB
[   80.070319][    C1] vkms_vblank_simulate: vblank timer overrun
[   80.090633][ T4372] loop4: detected capacity change from 0 to 8
[   80.098265][ T4362] lowmem_reserve[]: 0 0 0 0 0
[   80.104509][ T4362] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   80.117875][ T4362] Node 0 DMA32: 83*4kB (UE) 78*8kB (UME) 2*16kB (UM) 2*32kB (ME) 0*64kB 1*128kB (U) 0*256kB 1*512kB (E) 3*1024kB (UM) 4*2048kB (UM) 400*4096kB (UM) = 1651356kB
[   80.134761][ T4362] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[   80.146775][ T4362] Node 1 Normal: 32*4kB (UE) 15*8kB (UE) 24*16kB (UME) 59*32kB (UE) 30*64kB (UME) 15*128kB (UME) 6*256kB (UME) 6*512kB (UE) 0*1024kB 1*2048kB (M) 952*4096kB (M) = 3912408kB
[   80.172327][ T4362] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   80.182579][ T4362] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   80.191925][ T4362] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   80.220450][ T4362] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   80.281551][ T4372] SQUASHFS error: zlib decompression failed, data probably corrupt
[   80.293648][ T4362] 47540 total pagecache pages
[   80.302519][ T4372] SQUASHFS error: Failed to read block 0x9b: -5
[   80.319175][ T4372] SQUASHFS error: Unable to read metadata cache entry [99]
[   80.329172][ T4362] 0 pages in swap cache
[   80.343338][ T4374] WARNING! power/level is deprecated; use power/control instead
[   80.351521][ T4362] Swap cache stats: add 0, delete 0, find 0/0
[   80.355120][ T4372] SQUASHFS error: Unable to read inode 0x127
[   80.387650][ T4362] Free swap  = 124996kB
[   80.414935][ T4362] Total swap = 124996kB
[   80.419169][ T4362] 2097051 pages RAM
[   80.432251][ T4362] 0 pages HighMem/MovableOnly
[   80.437159][ T4362] 411501 pages reserved
[   80.447740][ T4362] 0 pages cma reserved
[   80.463875][ T4362] ptm ptm0: ldisc open failed (-12), clearing slot 0
[   80.554514][ T4378] loop3: detected capacity change from 0 to 8
[   80.591517][ T4372] loop4: detected capacity change from 0 to 4096
[   80.623156][ T4372] =======================================================
[   80.623156][ T4372] WARNING: The mand mount option has been deprecated and
[   80.623156][ T4372]          and is ignored by this kernel. Remove the mand
[   80.623156][ T4372]          option from the mount to silence this warning.
[   80.623156][ T4372] =======================================================
[   80.723986][ T4381] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   81.212421][ T4386] SQUASHFS error: Unable to read directory block [631:26]
[   83.459533][ T4410] hub 8-0:1.0: USB hub found
[   83.468988][ T4410] hub 8-0:1.0: 1 port detected
[   85.440616][ T4428] loop0: detected capacity change from 0 to 8
[   85.469830][ T4426] loop3: detected capacity change from 0 to 2048
[   85.773272][ T4426] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   86.045506][ T4437] SQUASHFS error: Unable to read directory block [631:26]
[   87.287845][    T7] cfg80211: failed to load regulatory.db
[   87.627460][ T4458] hub 8-0:1.0: USB hub found
[   87.641653][ T4458] hub 8-0:1.0: 1 port detected
[   90.433397][ T4473] loop0: detected capacity change from 0 to 32768
[   91.818486][ T4481] loop3: detected capacity change from 0 to 40427
[   91.863636][ T4481] F2FS-fs (loop3): Invalid SB checksum offset: 0
[   91.921250][ T4481] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[   91.971874][ T4481] F2FS-fs (loop3): invalid crc value
[   92.035553][ T4481] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   92.220853][ T4481] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[   92.237588][ T4481] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   92.295492][   T26] audit: type=1800 audit(1790673381.283:2): pid=4481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.56" name="file1" dev="loop3" ino=10 res=0 errno=0
[   92.842609][ T4502] loop0: detected capacity change from 0 to 2048
[   93.250282][ T4509] loop0: detected capacity change from 0 to 128
[   93.310886][ T4507] netlink: 76 bytes leftover after parsing attributes in process `syz.4.60'.
[   95.596220][ T4516] loop0: detected capacity change from 0 to 2048
[   95.922966][ T4516] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   96.653297][ T4528] loop2: detected capacity change from 0 to 8
[   97.660823][ T4532] SQUASHFS error: Unable to read directory block [631:26]
[   99.165060][ T4552] loop4: detected capacity change from 0 to 16
[   99.772939][ T4552] erofs: (device loop4): mounted with root inode @ nid 36.
[   99.880676][ T4548] overlayfs: failed to resolve './file1': -2
[  100.270470][ T4561] loop4: detected capacity change from 0 to 2048
[  100.367852][ T4561] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  101.990737][ T4580] loop2: detected capacity change from 0 to 8
[  102.137998][ T4186] attempt to access beyond end of device
[  102.137998][ T4186] loop3: rw=2049, want=45112, limit=40427
[  102.765731][ T4584] SQUASHFS error: Unable to read directory block [631:26]
[  102.898450][ T4591] netlink: 76 bytes leftover after parsing attributes in process `syz.1.82'.
[  104.234990][ T4600] loop4: detected capacity change from 0 to 16
[  104.284730][ T4600] erofs: (device loop4): mounted with root inode @ nid 36.
[  104.295093][ T4600] overlayfs: failed to resolve './file1': -2
[  104.695459][ T4613] loop3: detected capacity change from 0 to 2048
[  104.785690][ T4613] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  109.204770][ T4676] netlink: 76 bytes leftover after parsing attributes in process `syz.1.105'.
[  110.592048][ T4697] loop4: detected capacity change from 0 to 8
[  113.361986][ T4730] usb usb8: usbfs: process 4730 (syz.0.122) did not claim interface 6 before use
[  114.613558][ T4748] netlink: 76 bytes leftover after parsing attributes in process `syz.0.125'.
[  115.749754][ T4765] loop4: detected capacity change from 0 to 8
[  116.232534][ T4772] SQUASHFS error: Unable to read directory block [631:26]
[  117.166644][ T4774] loop4: detected capacity change from 0 to 128
[  117.210608][ T4774] EXT4-fs (loop4): VFS: Found ext4 filesystem with unknown checksum algorithm.
[  117.236297][ T4174] udevd[4174]: incorrect ext4 checksum on /dev/loop4
[  117.508345][ T4779] usb usb8: usbfs: process 4779 (syz.3.135) did not claim interface 6 before use
[  121.109313][ T4822] usb usb8: usbfs: process 4822 (syz.3.147) did not claim interface 6 before use
[  122.461946][ T4835] netlink: 76 bytes leftover after parsing attributes in process `syz.1.146'.
[  124.430301][  T264] block nbd3: Attempted send on invalid socket
[  124.441817][  T264] blk_update_request: I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  124.456163][ T4852] MINIX-fs: unable to read superblock
[  125.566325][ T4866] usb usb8: usbfs: process 4866 (syz.3.159) did not claim interface 6 before use
[  127.055897][ T4875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.162'.
[  127.262636][ T4875] syz.3.162 (4875) used greatest stack depth: 20752 bytes left
[  128.337611][ T4893] netlink: 76 bytes leftover after parsing attributes in process `syz.0.164'.
[  130.589035][ T4912] usb usb8: usbfs: process 4912 (syz.4.172) did not claim interface 6 before use
[  132.608512][ T4922] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  132.616250][ T4922] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  132.680498][ T4922] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  132.759000][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  132.765410][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  133.054107][ T4918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.176'.
[  134.417800][ T4960] netlink: 76 bytes leftover after parsing attributes in process `syz.2.185'.
[  134.543613][ T4962] usb usb8: usbfs: process 4962 (syz.0.186) did not claim interface 6 before use
[  139.450589][ T4995] usb usb8: usbfs: process 4995 (syz.2.197) did not claim interface 6 before use
[  139.828834][ T5002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.196'.
[  140.774052][ T5019] netlink: 76 bytes leftover after parsing attributes in process `syz.0.202'.
[  143.788961][ T5043] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  143.808317][ T5041] usb usb8: usbfs: process 5041 (syz.2.208) did not claim interface 6 before use
[  143.826252][ T5043] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  144.836943][ T5062] hub 8-0:1.0: USB hub found
[  144.844091][ T5062] hub 8-0:1.0: 1 port detected
[  145.951063][ T5072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.211'.
[  148.145763][ T5089] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  148.154284][ T5089] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  148.288396][ T5089] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  148.909096][ T5094] netlink: 76 bytes leftover after parsing attributes in process `syz.4.221'.
[  151.592989][  T150] block nbd1: Attempted send on invalid socket
[  151.599682][  T150] blk_update_request: I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  151.611428][ T5121] MINIX-fs: unable to read superblock
[  152.840128][ T5129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.231'.
[  154.369347][ T5139] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  154.377665][ T5139] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  154.405633][ T5139] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  159.291372][ T5184] netlink: 76 bytes leftover after parsing attributes in process `syz.2.245'.
[  161.685561][ T5203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.252'.
[  164.128097][  T150] block nbd2: Attempted send on invalid socket
[  164.134489][  T150] blk_update_request: I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  164.146720][ T5225] MINIX-fs: unable to read superblock
[  168.729422][ T5270] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  169.188929][ T5270] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  169.270847][  T264] block nbd0: Attempted send on invalid socket
[  169.277194][  T264] blk_update_request: I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  169.289700][ T5277] MINIX-fs: unable to read superblock
[  169.426199][ T5279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.272'.
[  170.063548][ T5292] usb usb8: usbfs: process 5292 (syz.2.275) did not claim interface 6 before use
[  172.728264][ T5320] syz.3.282 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  175.383976][ T5341] usb usb8: usbfs: process 5341 (syz.2.287) did not claim interface 6 before use
[  175.415397][ T5342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.286'.
[  182.084636][ T5388] overlayfs: failed to resolve './file1': -2
[  182.334510][ T5392] usb usb8: usbfs: process 5392 (syz.2.300) did not claim interface 6 before use
[  183.382678][ T5408] netlink: 4 bytes leftover after parsing attributes in process `syz.3.304'.
[  187.737738][ T5457] overlayfs: failed to resolve './file1': -2
[  187.996293][ T1108] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  188.401770][ T5466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.322'.
[  188.607222][ T1108] usb 5-1: New USB device found, idVendor=041e, idProduct=30df, bcdDevice= 0.40
[  188.661778][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.765685][ T1108] usb 5-1: Product: syz
[  188.815936][ T1108] usb 5-1: Manufacturer: syz
[  188.877833][ T1108] usb 5-1: SerialNumber: syz
[  189.582471][ T1108] usb 5-1: 1:1 : invalid UAC_FORMAT_TYPE desc
[  189.607225][ T1108] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  189.783783][ T1108] usb 5-1: USB disconnect, device number 2
[  189.893925][ T5479] udevd[5479]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  191.070650][  T150] block nbd4: Attempted send on invalid socket
[  191.076966][  T150] blk_update_request: I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  191.087959][ T5491] MINIX-fs: unable to read superblock
[  191.141682][ T1108] Bluetooth: hci4: command 0x0406 tx timeout
[  191.148471][ T1108] Bluetooth: hci3: command 0x0406 tx timeout
[  191.154841][ T1108] Bluetooth: hci1: command 0x0406 tx timeout
[  191.166769][ T1108] Bluetooth: hci0: command 0x0406 tx timeout
[  191.172891][ T1108] Bluetooth: hci2: command 0x0406 tx timeout
[  193.214064][ T5516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.334'.
[  193.991396][ T5514] usb usb8: usbfs: process 5514 (syz.3.336) did not claim interface 6 before use
[  194.206711][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  194.213322][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  197.020564][ T5542] netlink: 4 bytes leftover after parsing attributes in process `syz.4.344'.
[  197.055910][ T1108] Bluetooth: hci2: command 0x0401 tx timeout
[  198.417014][ T4232] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  198.434888][ T4232] Bluetooth: hci1: Injecting HCI hardware error event
[  198.465448][ T4202] Bluetooth: hci1: hardware error 0x00
[  198.656809][ T5566] input: syz1 as /devices/virtual/input/input5
[  201.582396][ T5600] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  202.473466][ T5611] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  202.585086][ T5611] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  203.871032][ T5629] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  203.880256][ T5629] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  203.889945][ T5629] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  203.899035][ T5629] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  205.775960][ T5655] usb usb8: usbfs: process 5655 (syz.4.375) did not claim interface 6 before use
[  208.185805][ T5677] device bridge1 entered promiscuous mode
[  211.215041][ T4294] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  211.625153][ T4294] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  211.790239][ T4294] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  212.010611][ T4294] usb 1-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[  212.040322][ T4294] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.091916][ T4294] usb 1-1: Product: syz
[  212.106617][ T4294] usb 1-1: Manufacturer: syz
[  212.122253][ T4294] usb 1-1: SerialNumber: syz
[  212.211798][ T4294] ti_usb_3410_5052 1-1:2.0: TI USB 5052 2 port adapter converter detected
[  212.293693][ T4294] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0
[  212.367676][ T4294] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1
[  213.745466][ T5744] usb usb8: usbfs: process 5744 (syz.2.397) did not claim interface 6 before use
[  214.020511][ T4233] usb 1-1: USB disconnect, device number 2
[  214.061156][ T4233] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0
[  214.095076][ T4233] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1
[  214.127637][ T4233] ti_usb_3410_5052 1-1:2.0: device disconnected
[  217.246720][ T5785] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  217.290662][ T5785] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  217.624758][ T5795] usb usb8: usbfs: process 5795 (syz.3.413) did not claim interface 6 before use
[  217.650188][ T5796] ALSA: mixer_oss: invalid OSS volume 'OGAI'
[  217.663240][ T5796] ALSA: mixer_oss: invalid OSS volume ''
[  217.814912][   T21] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  219.014757][   T21] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  219.054354][   T21] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  219.084437][   T21] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  219.157669][   T21] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00
[  219.354807][   T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  219.406005][ T5808] netlink: 4 bytes leftover after parsing attributes in process `syz.4.418'.
[  220.668617][   T21] usb 2-1: USB disconnect, device number 2
[  223.860739][ T5842] netlink: 4 bytes leftover after parsing attributes in process `syz.3.431'.
[  224.939670][ T5871] usb usb8: usbfs: process 5871 (syz.2.436) did not claim interface 6 before use
[  227.094627][ T5896] netlink: 4 bytes leftover after parsing attributes in process `syz.3.446'.
[  227.443218][ T5906] fuse: Unknown parameter 'ø00000000000000000000'
[  228.863935][   T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  229.074144][ T5923] usb usb8: usbfs: process 5923 (syz.0.452) did not claim interface 6 before use
[  229.103810][   T23] usb 2-1: Using ep0 maxpacket: 32
[  229.294215][   T23] usb 2-1: unable to get BOS descriptor or descriptor too short
[  229.395638][   T23] usb 2-1: config 14 has an invalid interface number: 57 but max is 1
[  229.413810][   T23] usb 2-1: config 14 has an invalid interface number: 228 but max is 1
[  229.442588][   T23] usb 2-1: config 14 has no interface number 0
[  229.452700][   T23] usb 2-1: config 14 has no interface number 1
[  229.483121][   T23] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  229.513801][   T23] usb 2-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping
[  229.543765][   T23] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[  229.583756][   T23] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  229.617938][   T23] usb 2-1: config 14 interface 57 has no altsetting 0
[  229.638176][   T23] usb 2-1: config 14 interface 228 has no altsetting 0
[  229.869658][   T23] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  229.889132][   T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.919536][   T23] usb 2-1: Product: syz
[  229.929677][   T23] usb 2-1: Manufacturer: syz
[  229.949934][   T23] usb 2-1: SerialNumber: syz
[  230.538553][   T23] legousbtower 2-1:14.57: interrupt endpoints not found
[  230.760883][   T23] legousbtower 2-1:14.228: interrupt endpoints not found
[  231.783734][    T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  231.989915][ T5947] capability: warning: `syz.4.461' uses 32-bit capabilities (legacy support in use)
[  232.033748][    T7] usb 3-1: Using ep0 maxpacket: 16
[  235.473737][    T7] usb 3-1: unable to read config index 0 descriptor/all
[  235.480942][    T7] usb 3-1: can't read configurations, error -71
[  235.761320][   T21] usb 2-1: USB disconnect, device number 3
[  236.241608][ T5976] overlayfs: failed to resolve './file1': -2
[  239.718777][  T264] block nbd3: Attempted send on invalid socket
[  239.726371][  T264] blk_update_request: I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  239.740814][ T6008] MINIX-fs: unable to read superblock
[  240.590725][ T6025] Zero length message leads to an empty skb
[  240.989091][ T6033] netlink: 76 bytes leftover after parsing attributes in process `syz.3.484'.
[  241.022467][ T6032] netlink: 64 bytes leftover after parsing attributes in process `syz.4.486'.
[  242.478878][ T6057] usb usb8: usbfs: process 6057 (syz.0.487) did not claim interface 6 before use
[  245.266378][   T26] audit: type=1800 audit(1790673534.252:3): pid=6084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.501" name="c_srate" dev="configfs" ino=40201 res=0 errno=0
[  246.442878][ T6107] netlink: 76 bytes leftover after parsing attributes in process `syz.0.505'.
[  246.449232][ T6108] device bridge1 entered promiscuous mode
[  247.631349][ T6129] usb usb8: usbfs: process 6129 (syz.1.511) did not claim interface 6 before use
[  249.794183][ T6150] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  250.810437][ T6173] ALSA: mixer_oss: invalid OSS volume 'OGAI'
[  250.888412][ T6174] netlink: 76 bytes leftover after parsing attributes in process `syz.1.528'.
[  250.988191][ T6181] netlink: 20 bytes leftover after parsing attributes in process `syz.2.532'.
[  253.270446][ T6204] hsr0 speed is unknown, defaulting to 1000
[  253.301447][ T6204] hsr0 speed is unknown, defaulting to 1000
[  253.351347][ T6204] hsr0 speed is unknown, defaulting to 1000
[  253.435509][ T6204] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  253.535275][ T6204] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  253.740821][ T6204] hsr0 speed is unknown, defaulting to 1000
[  253.800413][ T6204] hsr0 speed is unknown, defaulting to 1000
[  253.833951][ T6204] hsr0 speed is unknown, defaulting to 1000
[  253.881893][ T6204] hsr0 speed is unknown, defaulting to 1000
[  253.913306][ T6204] hsr0 speed is unknown, defaulting to 1000
[  254.094458][ T6211] ALSA: mixer_oss: invalid OSS volume 'OGAI'
[  255.438916][ T6231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.549'.
[  255.720916][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  255.737226][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  256.587155][ T6241] netlink: 76 bytes leftover after parsing attributes in process `syz.3.550'.
[  256.974476][ T5469] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  257.218357][ T6207] udevd[6207]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[  258.549218][ T5469] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  258.585533][ T5469] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  258.625421][ T5469] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  258.703253][ T5469] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00
[  258.754183][ T5469] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.262324][ T6252] usb 1-1: USB disconnect, device number 3
[  260.614986][ T6269] FAULT_INJECTION: forcing a failure.
[  260.614986][ T6269] name failslab, interval 1, probability 0, space 0, times 1
[  260.636823][ T6269] CPU: 1 PID: 6269 Comm: syz.1.559 Not tainted syzkaller #0
[  260.644242][ T6269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  260.654345][ T6269] Call Trace:
[  260.657660][ T6269]  <TASK>
[  260.660621][ T6269]  dump_stack_lvl+0x188/0x250
[  260.665366][ T6269]  ? show_regs_print_info+0x20/0x20
[  260.670612][ T6269]  ? load_image+0x410/0x410
[  260.675153][ T6269]  ? __lock_acquire+0x7b50/0x7b50
[  260.680224][ T6269]  should_fail+0x383/0x4b0
[  260.684720][ T6269]  should_failslab+0x5/0x20
[  260.689269][ T6269]  slab_pre_alloc_hook+0x51/0xc0
[  260.694243][ T6269]  ? getname_kernel+0x56/0x2e0
[  260.699069][ T6269]  kmem_cache_alloc+0x3d/0x280
[  260.703882][ T6269]  getname_kernel+0x56/0x2e0
[  260.708515][ T6269]  kern_path+0x1f/0x190
[  260.712712][ T6269]  do_move_mount_old+0xc0/0x170
[  260.717696][ T6269]  ? do_change_type+0x360/0x360
[  260.722582][ T6269]  ? path_mount+0x6a9/0xfe0
[  260.727130][ T6269]  ? user_path_at_empty+0x13e/0x190
[  260.732367][ T6269]  __se_sys_mount+0x2e3/0x3d0
[  260.737093][ T6269]  ? __x64_sys_mount+0xc0/0xc0
[  260.741908][ T6269]  ? lockdep_hardirqs_on+0x94/0x140
[  260.747141][ T6269]  ? __x64_sys_mount+0x1c/0xc0
[  260.751970][ T6269]  do_syscall_64+0x4c/0xa0
[  260.756417][ T6269]  ? clear_bhb_loop+0x30/0x80
[  260.761145][ T6269]  ? clear_bhb_loop+0x30/0x80
[  260.765868][ T6269]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  260.771835][ T6269] RIP: 0033:0x7fb4b63f4159
[  260.776297][ T6269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  260.795958][ T6269] RSP: 002b:00007fb4b464c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  260.804422][ T6269] RAX: ffffffffffffffda RBX: 00007fb4b667bfa0 RCX: 00007fb4b63f4159
[  260.812431][ T6269] RDX: 0000200000000280 RSI: 0000200000000240 RDI: 0000200000000180
[  260.820441][ T6269] RBP: 00007fb4b648b06b R08: 0000000000000000 R09: 0000000000000000
[  260.828469][ T6269] R10: 0000000002002404 R11: 0000000000000246 R12: 0000000000000000
[  260.836478][ T6269] R13: 00007fb4b667c038 R14: 00007fb4b667bfa0 R15: 00007ffdc803c7a8
[  260.844501][ T6269]  </TASK>
[  260.847645][    C1] vkms_vblank_simulate: vblank timer overrun
[  266.399994][ T6304] udevd[6304]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[  268.421677][ T4187] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  269.179553][ T4187] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  269.197731][ T4187] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  269.380894][ T4187] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  269.394633][ T4187] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00
[  269.404362][ T4187] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  269.907613][ T6323] netlink: 76 bytes leftover after parsing attributes in process `syz.0.575'.
[  269.958100][ T6333] autofs4:pid:6333:autofs_fill_super: called with bogus options
[  272.251593][ T1108] usb 5-1: USB disconnect, device number 3
[  283.901132][ T6407] syz.3.597 uses obsolete (PF_INET,SOCK_PACKET)
[  284.269438][ T6417] bridge0: port 3(syz_tun) entered blocking state
[  284.331113][ T6417] bridge0: port 3(syz_tun) entered disabled state
[  284.338723][ T6417] device syz_tun entered promiscuous mode
[  284.376897][ T6417] bridge0: port 3(syz_tun) entered blocking state
[  284.383878][ T6417] bridge0: port 3(syz_tun) entered forwarding state
[  284.470354][ T6422] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  284.490904][ T6421] FAULT_INJECTION: forcing a failure.
[  284.490904][ T6421] name failslab, interval 1, probability 0, space 0, times 0
[  284.504119][ T6421] CPU: 1 PID: 6421 Comm: syz.0.601 Not tainted syzkaller #0
[  284.511460][ T6421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  284.521555][ T6421] Call Trace:
[  284.524875][ T6421]  <TASK>
[  284.527884][ T6421]  dump_stack_lvl+0x188/0x250
[  284.532653][ T6421]  ? show_regs_print_info+0x20/0x20
[  284.537899][ T6421]  ? load_image+0x410/0x410
[  284.542447][ T6421]  ? mark_lock+0x94/0x320
[  284.546817][ T6421]  ? mark_lock+0x94/0x320
[  284.551199][ T6421]  should_fail+0x383/0x4b0
[  284.555689][ T6421]  should_failslab+0x5/0x20
[  284.560260][ T6421]  slab_pre_alloc_hook+0x51/0xc0
[  284.565244][ T6421]  kmem_cache_alloc_trace+0x47/0x290
[  284.570568][ T6421]  ? nsim_fib_event_nb+0xd8/0xef0
[  284.575665][ T6421]  nsim_fib_event_nb+0xd8/0xef0
[  284.580564][ T6421]  atomic_notifier_call_chain+0x15d/0x280
[  284.586329][ T6421]  call_fib_notifiers+0x2d/0x60
[  284.591233][ T6421]  fib_table_delete+0xc7a/0xfc0
[  284.596155][ T6421]  ? nexthop_get_nhc_lookup+0x400/0x400
[  284.601752][ T6421]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  284.607816][ T6421]  ? lock_chain_count+0x20/0x20
[  284.612721][ T6421]  ? __rwlock_init+0x140/0x140
[  284.617573][ T6421]  ? fib_new_table+0x106/0x2d0
[  284.622382][ T6421]  fib_magic+0x2ea/0x3b0
[  284.626676][ T6421]  ? fib_add_ifaddr+0x5c0/0x5c0
[  284.631568][ T6421]  ? __wake_up_common+0x5b/0x4d0
[  284.636583][ T6421]  fib_del_ifaddr+0xfdb/0x1480
[  284.641390][ T6421]  ? __might_sleep+0xf0/0xf0
[  284.646034][ T6421]  ? inetaddr_event+0xec/0x150
[  284.650839][ T6421]  ? is_eth_active_slave_of_bonding_rcu+0x270/0x270
[  284.657489][ T6421]  fib_inetaddr_event+0xb7/0x1c0
[  284.662476][ T6421]  blocking_notifier_call_chain+0x103/0x1b0
[  284.668420][ T6421]  __inet_del_ifa+0xaac/0x1090
[  284.673246][ T6421]  inetdev_event+0x5aa/0x1350
[  284.677976][ T6421]  ? devinet_exit_net+0x220/0x220
[  284.683050][ T6421]  raw_notifier_call_chain+0xcb/0x160
[  284.688473][ T6421]  dev_set_mtu_ext+0x45f/0x680
[  284.693282][ T6421]  ? dev_validate_mtu+0x170/0x170
[  284.698342][ T6421]  ? is_bpf_text_address+0x254/0x270
[  284.703665][ T6421]  ? __kernel_text_address+0x9a/0x100
[  284.709102][ T6421]  ? unwind_get_return_address+0x49/0x80
[  284.714777][ T6421]  ? stack_trace_save+0xf0/0xf0
[  284.719669][ T6421]  ? validate_linkmsg+0x3db/0x4c0
[  284.724733][ T6421]  do_setlink+0x8f7/0x29d0
[  284.729200][ T6421]  ? __lock_acquire+0x13dc/0x7b50
[  284.734263][ T6421]  ? nlmsg_parse_deprecated_strict+0x110/0x110
[  284.740466][ T6421]  ? __nla_validate_parse+0x1e0a/0x27b0
[  284.746078][ T6421]  ? __nla_validate+0x50/0x50
[  284.750827][ T6421]  ? validate_linkmsg+0x3db/0x4c0
[  284.755907][ T6421]  rtnl_newlink+0x15bb/0x1920
[  284.760721][ T6421]  ? rtnl_newlink+0x451/0x1920
[  284.765539][ T6421]  ? rtnl_setlink+0x500/0x500
[  284.770273][ T6421]  ? mark_lock+0x94/0x320
[  284.774665][ T6421]  ? __lock_acquire+0x13dc/0x7b50
[  284.779745][ T6421]  ? lock_chain_count+0x20/0x20
[  284.784687][ T6421]  ? __lock_acquire+0x1305/0x7b50
[  284.789821][ T6421]  ? rtnetlink_rcv_msg+0x79f/0xf10
[  284.795191][ T6421]  ? rtnl_setlink+0x500/0x500
[  284.799915][ T6421]  rtnetlink_rcv_msg+0x7f1/0xf10
[  284.804911][ T6421]  ? lock_chain_count+0x20/0x20
[  284.809816][ T6421]  ? rtnetlink_bind+0x80/0x80
[  284.814555][ T6421]  ? __local_bh_enable_ip+0x136/0x1c0
[  284.819976][ T6421]  ? lockdep_hardirqs_on+0x94/0x140
[  284.825225][ T6421]  ? __local_bh_enable_ip+0x136/0x1c0
[  284.830647][ T6421]  ? _local_bh_enable+0xa0/0xa0
[  284.835565][ T6421]  ? __dev_queue_xmit+0x1b64/0x2e50
[  284.840829][ T6421]  ? dev_queue_xmit+0x20/0x20
[  284.845554][ T6421]  ? memcpy+0x3c/0x60
[  284.849589][ T6421]  ? __copy_skb_header+0x3ba/0x4f0
[  284.854850][ T6421]  netlink_rcv_skb+0x1e9/0x430
[  284.859710][ T6421]  ? rtnetlink_bind+0x80/0x80
[  284.864471][ T6421]  ? netlink_ack+0xb10/0xb10
[  284.869131][ T6421]  netlink_unicast+0x78f/0x940
[  284.873954][ T6421]  netlink_sendmsg+0x8ba/0xbe0
[  284.878808][ T6421]  ? netlink_getsockopt+0x570/0x570
[  284.884050][ T6421]  ? aa_sock_msg_perm+0x94/0x150
[  284.889042][ T6421]  ? apparmor_socket_sendmsg+0x88/0x230
[  284.894649][ T6421]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  284.899983][ T6421]  ? security_socket_sendmsg+0x7c/0xa0
[  284.905484][ T6421]  ? netlink_getsockopt+0x570/0x570
[  284.910730][ T6421]  ____sys_sendmsg+0x5be/0x8f0
[  284.915549][ T6421]  ? __sys_sendmsg_sock+0x30/0x30
[  284.920631][ T6421]  ? import_iovec+0x6f/0xa0
[  284.925186][ T6421]  ___sys_sendmsg+0x236/0x2e0
[  284.929937][ T6421]  ? __sys_sendmsg+0x290/0x290
[  284.934792][ T6421]  __se_sys_sendmsg+0x1b7/0x2a0
[  284.939699][ T6421]  ? __x64_sys_sendmsg+0x80/0x80
[  284.944681][ T6421]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  284.950748][ T6421]  ? lockdep_hardirqs_on+0x94/0x140
[  284.956010][ T6421]  do_syscall_64+0x4c/0xa0
[  284.960514][ T6421]  ? clear_bhb_loop+0x30/0x80
[  284.965243][ T6421]  ? clear_bhb_loop+0x30/0x80
[  284.969976][ T6421]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  284.975922][ T6421] RIP: 0033:0x7fbba53b2159
[  284.980378][ T6421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  285.000030][ T6421] RSP: 002b:00007fbba360a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  285.008502][ T6421] RAX: ffffffffffffffda RBX: 00007fbba5639fa0 RCX: 00007fbba53b2159
[  285.016525][ T6421] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000004
[  285.024538][ T6421] RBP: 00007fbba544906b R08: 0000000000000000 R09: 0000000000000000
[  285.032556][ T6421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  285.040577][ T6421] R13: 00007fbba563a038 R14: 00007fbba5639fa0 R15: 00007ffd0503c268
[  285.048606][ T6421]  </TASK>
[  285.232403][ T6421] netlink: 128 bytes leftover after parsing attributes in process `syz.0.601'.
[  285.300980][ T6421] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  285.344369][ T6421] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  285.396598][ T6432] hsr0 speed is unknown, defaulting to 1000
[  285.508444][ T6252] kernel write not supported for file /uhid (pid: 6252 comm: kworker/0:9)
[  285.711650][ T6438] hsr0 speed is unknown, defaulting to 1000
[  288.342805][  T264] block nbd4: Attempted send on invalid socket
[  288.349149][  T264] blk_update_request: I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  288.360294][ T6472] MINIX-fs: unable to read superblock
[  288.760567][ T6482] netlink: 76 bytes leftover after parsing attributes in process `syz.0.620'.
[  288.811315][ T6484] hsr0 speed is unknown, defaulting to 1000
[  291.690131][ T6533] fuse: Bad value for 'fd'
[  292.104205][ T6534] netlink: 76 bytes leftover after parsing attributes in process `syz.1.635'.
[  292.802948][ T6543] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  292.811342][ T6543] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  292.899260][ T6543] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  293.474827][ T6551] netlink: 'syz.1.640': attribute type 13 has an invalid length.
[  293.505444][ T6550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  293.520311][ T6551] netlink: 4 bytes leftover after parsing attributes in process `syz.1.640'.
[  296.862491][ T6588] netlink: 76 bytes leftover after parsing attributes in process `syz.3.650'.
[  300.150599][  T264] block nbd2: Attempted send on invalid socket
[  300.156847][  T264] blk_update_request: I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  300.168392][ T6603] MINIX-fs: unable to read superblock
[  305.177372][  T150] block nbd4: Attempted send on invalid socket
[  305.183760][  T150] blk_update_request: I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  305.216088][ T6647] MINIX-fs: unable to read superblock
[  305.277569][ T6652] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check.
[  305.734882][ T6662] netlink: 76 bytes leftover after parsing attributes in process `syz.0.670'.
[  305.981052][ T6669] ALSA: mixer_oss: invalid OSS volume 'OGAI'
[  305.990269][ T6669] ALSA: mixer_oss: invalid OSS volume ''
[  310.229902][   T21] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  310.529426][   T21] usb 3-1: Using ep0 maxpacket: 8
[  311.519287][   T21] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  311.528866][   T21] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  311.559138][   T21] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  311.568984][   T21] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  311.650308][   T21] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  311.691782][   T21] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  311.749250][   T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  312.259463][   T21] usb 3-1: GET_CAPABILITIES returned 0
[  312.299317][   T21] usbtmc 3-1:16.0: can't read capabilities
[  312.911779][   T21] usb 3-1: USB disconnect, device number 4
[  316.456867][  T150] block nbd0: Attempted send on invalid socket
[  317.055586][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  317.062038][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  317.169845][  T150] blk_update_request: I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  317.180888][ T6759] MINIX-fs: unable to read superblock
[  322.876058][  T264] block nbd0: Attempted send on invalid socket
[  322.882416][  T264] blk_update_request: I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  322.906413][ T6813] MINIX-fs: unable to read superblock
[  324.196017][ T6824] overlayfs: failed to resolve './file1': -2
[  327.090155][ T6867] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  327.127071][    C1] vkms_vblank_simulate: vblank timer overrun
[  327.256453][ T6866] overlayfs: failed to resolve './file1': -2
[  328.281093][  T150] block nbd0: Attempted send on invalid socket
[  328.287392][  T150] blk_update_request: I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  328.303464][ T6869] MINIX-fs: unable to read superblock
[  328.349971][ T6872] netlink: 12 bytes leftover after parsing attributes in process `syz.2.733'.
[  328.568622][ T6877] ALSA: mixer_oss: invalid OSS volume 'OGAI'
[  328.577942][ T6877] ALSA: mixer_oss: invalid OSS volume ''
[  329.625798][ T6872] ODEBUG: Out of memory. ODEBUG disabled
[  329.904225][ T1108] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  330.914393][ T1108] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  330.925338][ T1108] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  330.935214][ T1108] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  330.948926][ T1108] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00
[  330.958331][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  332.692703][ T4234] usb 1-1: USB disconnect, device number 4
[  339.424307][ T6940] ALSA: mixer_oss: invalid OSS volume 'OGAI'
[  339.434182][ T6940] ALSA: mixer_oss: invalid OSS volume ''
[  341.552520][  T150] block nbd4: Attempted send on invalid socket
[  341.559337][  T150] blk_update_request: I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  341.570821][ T6953] MINIX-fs: unable to read superblock
[  348.402393][  T150] block nbd4: Attempted send on invalid socket
[  348.408695][  T150] blk_update_request: I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  348.421206][ T7025] MINIX-fs: unable to read superblock
[  350.414698][ T7042] ALSA: mixer_oss: invalid OSS volume 'OGAI'
[  350.425302][ T7042] ALSA: mixer_oss: invalid OSS volume ''
[  355.173932][  T150] block nbd2: Attempted send on invalid socket
[  355.180610][  T150] blk_update_request: I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  355.192314][ T7070] MINIX-fs: unable to read superblock
[  360.598940][ T7108] hsr0 speed is unknown, defaulting to 1000
[  361.393596][ T7108] chnl_net:caif_netlink_parms(): no params data found
[  361.402064][ T7128] netlink: 76 bytes leftover after parsing attributes in process `syz.1.802'.
[  363.247908][ T4267] Bluetooth: hci5: command 0x0409 tx timeout
[  364.179773][ T7108] bridge0: port 1(bridge_slave_0) entered blocking state
[  364.250093][ T7108] bridge0: port 1(bridge_slave_0) entered disabled state
[  364.258685][ T7108] device bridge_slave_0 entered promiscuous mode
[  364.267826][ T7108] bridge0: port 2(bridge_slave_1) entered blocking state
[  364.275238][ T7108] bridge0: port 2(bridge_slave_1) entered disabled state
[  365.274117][ T7108] device bridge_slave_1 entered promiscuous mode
[  365.286402][ T4267] Bluetooth: hci5: command 0x041b tx timeout
[  365.669422][ T7108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  365.683488][ T7108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  365.710643][ T7108] team0: Port device team_slave_0 added
[  365.720097][ T7108] team0: Port device team_slave_1 added
[  365.828554][ T7108] batman_adv: batadv0: Adding interface: batadv_slave_0
[  367.021306][ T7108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  367.990233][ T4267] Bluetooth: hci5: command 0x040f tx timeout
[  368.083036][ T7108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  371.247075][ T1111] Bluetooth: hci5: command 0x0419 tx timeout
[  371.262712][ T7108] batman_adv: batadv0: Adding interface: batadv_slave_1
[  371.275788][ T7108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  372.262896][ T7212] netlink: 76 bytes leftover after parsing attributes in process `syz.0.822'.
[  372.274843][ T7108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  372.607749][ T7214] overlayfs: failed to resolve './file1': -2
[  373.031406][ T4450] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  373.211003][ T7220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.820'.
[  373.220074][ T7220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.820'.
[  373.389216][ T7108] device hsr_slave_0 entered promiscuous mode
[  373.451564][ T7108] device hsr_slave_1 entered promiscuous mode
[  373.503181][ T7108] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  373.755314][ T7108] Cannot create hsr debugfs directory
[  374.083427][ T4450] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  377.473206][ T4450] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  377.926336][ T4450] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  378.066816][ T7268] netlink: 76 bytes leftover after parsing attributes in process `syz.2.836'.
[  378.212044][ T7266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.837'.
[  378.221109][ T7266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.837'.
[  378.576098][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  378.582632][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  378.699149][ T7108] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  378.718073][ T7108] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  378.755571][ T7108] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  378.791728][ T7108] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  380.556639][ T7108] 8021q: adding VLAN 0 to HW filter on device bond0
[  381.313026][ T7108] 8021q: adding VLAN 0 to HW filter on device team0
[  381.431239][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  382.717167][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  382.784957][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  382.805741][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  382.954901][ T4290] bridge0: port 1(bridge_slave_0) entered blocking state
[  382.962128][ T4290] bridge0: port 1(bridge_slave_0) entered forwarding state
[  383.061327][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  383.093524][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  383.110209][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  383.119895][ T4451] bridge0: port 2(bridge_slave_1) entered blocking state
[  383.127058][ T4451] bridge0: port 2(bridge_slave_1) entered forwarding state
[  383.156418][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  383.201475][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  383.215400][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  383.238188][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  383.242948][ T7333] netlink: 76 bytes leftover after parsing attributes in process `syz.4.850'.
[  383.352234][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  383.377606][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  383.411136][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  383.439988][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  383.463625][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  383.503638][ T7108] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  383.541608][ T7108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  383.558898][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  383.573095][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  385.150970][ T4450] device hsr_slave_0 left promiscuous mode
[  385.171330][ T4450] device hsr_slave_1 left promiscuous mode
[  385.204006][ T4450] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  385.229372][ T4450] batman_adv: batadv0: Removing interface: batadv_slave_0
[  385.272156][ T4450] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  385.294641][ T4450] batman_adv: batadv0: Removing interface: batadv_slave_1
[  385.321133][ T4450] device bridge_slave_1 left promiscuous mode
[  385.346617][ T4450] bridge0: port 2(bridge_slave_1) entered disabled state
[  385.411835][ T4450] device bridge_slave_0 left promiscuous mode
[  385.433146][ T4450] bridge0: port 1(bridge_slave_0) entered disabled state
[  386.832170][ T4450] device veth1_macvtap left promiscuous mode
[  386.851480][ T4450] device veth0_macvtap left promiscuous mode
[  386.925248][ T4450] device veth1_vlan left promiscuous mode
[  386.941620][ T4450] device veth0_vlan left promiscuous mode
[  387.287648][   T21] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  388.513781][ T4450] team0 (unregistering): Port device team_slave_1 removed
[  388.531076][ T4450] team0 (unregistering): Port device team_slave_0 removed
[  388.546704][ T4450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  388.565341][ T4450] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  388.639493][ T4450] bond0 (unregistering): Released all slaves
[  388.694347][ T7365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.849'.
[  388.704234][ T7365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.849'.
[  388.792562][   T21] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  388.810917][   T21] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  388.811019][ T4228] hsr0 speed is unknown, defaulting to 1000
[  388.826077][   T21] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  388.849349][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  388.852885][   T21] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00
[  388.867063][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  388.877975][ T4228] ==================================================================
[  388.886477][ T4228] BUG: KASAN: use-after-free in siw_query_port+0x359/0x450
[  388.890862][   T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  388.893715][ T4228] Read of size 4 at addr ffff88807c6360d8 by task kworker/0:4/4228
[  388.909715][ T4228] 
[  388.912087][ T4228] CPU: 0 PID: 4228 Comm: kworker/0:4 Not tainted syzkaller #0
[  388.919849][ T4228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  388.929947][ T4228] Workqueue: infiniband ib_cache_event_task
[  388.935891][ T4228] Call Trace:
[  388.939206][ T4228]  <TASK>
[  388.943987][ T4228]  dump_stack_lvl+0x188/0x250
[  388.948724][ T4228]  ? show_regs_print_info+0x20/0x20
[  388.953983][ T4228]  ? _printk+0xda/0x130
[  388.958182][ T4228]  ? load_image+0x410/0x410
[  388.962721][ T4228]  ? _raw_spin_lock_irqsave+0xbc/0x100
[  388.968232][ T4228]  print_address_description+0x60/0x2d0
[  388.973827][ T4228]  ? siw_query_port+0x359/0x450
[  388.978725][ T4228]  kasan_report+0xdf/0x130
[  388.983191][ T4228]  ? siw_query_port+0x359/0x450
[  388.988078][ T4228]  siw_query_port+0x359/0x450
[  388.992795][ T4228]  ib_cache_update+0x1bd/0x9c0
[  388.997607][ T4228]  ? ib_cache_setup_one+0x5c0/0x5c0
[  389.002840][ T4228]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  389.008863][ T4228]  ? __lock_acquire+0x7b50/0x7b50
[  389.013932][ T4228]  ? read_lock_is_recursive+0x10/0x10
[  389.019348][ T4228]  ? __schedule+0x11cb/0x4350
[  389.024070][ T4228]  ib_cache_event_task+0xcf/0x1c0
[  389.029139][ T4228]  process_one_work+0x867/0xff0
[  389.034047][ T4228]  ? worker_detach_from_pool+0x240/0x240
[  389.039714][ T4228]  ? lockdep_hardirqs_off+0x70/0x100
[  389.045050][ T4228]  ? _raw_spin_lock_irq+0xb7/0xf0
[  389.050117][ T4228]  ? _raw_spin_lock_irqsave+0x100/0x100
[  389.055713][ T4228]  ? wq_worker_running+0x97/0x170
[  389.060793][ T4228]  worker_thread+0xad7/0x12a0
[  389.065531][ T4228]  kthread+0x42e/0x520
[  389.069646][ T4228]  ? rcu_lock_release+0x20/0x20
[  389.074532][ T4228]  ? kthread_blkcg+0xd0/0xd0
[  389.079161][ T4228]  ret_from_fork+0x1f/0x30
[  389.083629][ T4228]  </TASK>
[  389.086679][ T4228] 
[  389.089078][ T4228] Allocated by task 4186:
[  389.093427][ T4228]  __kasan_kmalloc+0xaf/0xe0
[  389.098057][ T4228]  kvmalloc_node+0x84/0x130
[  389.102590][ T4228]  alloc_netdev_mqs+0x84/0xc40
[  389.107391][ T4228]  rtnl_create_link+0x2fd/0xa90
[  389.112278][ T4228]  rtnl_newlink+0x12b6/0x1920
[  389.116990][ T4228]  rtnetlink_rcv_msg+0x7f1/0xf10
[  389.121968][ T4228]  netlink_rcv_skb+0x1e9/0x430
[  389.126775][ T4228]  netlink_unicast+0x78f/0x940
[  389.131573][ T4228]  netlink_sendmsg+0x8ba/0xbe0
[  389.136373][ T4228]  __sys_sendto+0x46d/0x620
[  389.140920][ T4228]  __x64_sys_sendto+0xda/0xf0
[  389.145640][ T4228]  do_syscall_64+0x4c/0xa0
[  389.150086][ T4228]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  389.156017][ T4228] 
[  389.158361][ T4228] Freed by task 4450:
[  389.162340][ T4228]  kasan_set_track+0x4b/0x70
[  389.166943][ T4228]  kasan_set_free_info+0x1f/0x40
[  389.171921][ T4228]  ____kasan_slab_free+0xd5/0x110
[  389.176984][ T4228]  slab_free_freelist_hook+0xec/0x170
[  389.182395][ T4228]  kfree+0xef/0x2a0
[  389.186234][ T4228]  device_release+0x92/0x1c0
[  389.190859][ T4228]  kobject_put+0x217/0x450
[  389.195313][ T4228]  netdev_run_todo+0x942/0xac0
[  389.200108][ T4228]  default_device_exit_batch+0x369/0x3c0
[  389.205771][ T4228]  cleanup_net+0x78e/0xba0
[  389.210241][ T4228]  process_one_work+0x867/0xff0
[  389.215151][ T4228]  worker_thread+0xad7/0x12a0
[  389.219863][ T4228]  kthread+0x42e/0x520
[  389.223964][ T4228]  ret_from_fork+0x1f/0x30
[  389.228424][ T4228] 
[  389.230769][ T4228] The buggy address belongs to the object at ffff88807c636000
[  389.230769][ T4228]  which belongs to the cache kmalloc-cg-4k of size 4096
[  389.245107][ T4228] The buggy address is located 216 bytes inside of
[  389.245107][ T4228]  4096-byte region [ffff88807c636000, ffff88807c637000)
[  389.258502][ T4228] The buggy address belongs to the page:
[  389.264162][ T4228] page:ffffea0001f18c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7c630
[  389.274364][ T4228] head:ffffea0001f18c00 order:3 compound_mapcount:0 compound_pincount:0
[  389.282747][ T4228] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  389.290805][ T4228] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888016c4c280
[  389.299429][ T4228] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000
[  389.308043][ T4228] page dumped because: kasan: bad access detected
[  389.314496][ T4228] page_owner tracks the page as allocated
[  389.320237][ T4228] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4194, ts 65532707801, free_ts 65506775381
[  389.341156][ T4228]  get_page_from_freelist+0x24f6/0x2670
[  389.346758][ T4228]  __alloc_pages+0x1ee/0x480
[  389.351387][ T4228]  new_slab+0xc0/0x4b0
[  389.355491][ T4228]  ___slab_alloc+0x807/0xdd0
[  389.360114][ T4228]  __kmalloc_node+0x142/0x3a0
[  389.364832][ T4228]  kvmalloc_node+0x84/0x130
[  389.369366][ T4228]  alloc_netdev_mqs+0x84/0xc40
[  389.374166][ T4228]  rtnl_create_link+0x2fd/0xa90
[  389.379055][ T4228]  veth_newlink+0x2e1/0xe20
[  389.383620][ T4228]  rtnl_newlink+0x139e/0x1920
[  389.388338][ T4228]  rtnetlink_rcv_msg+0x7f1/0xf10
[  389.393312][ T4228]  netlink_rcv_skb+0x1e9/0x430
[  389.398255][ T4228]  netlink_unicast+0x78f/0x940
[  389.403058][ T4228]  netlink_sendmsg+0x8ba/0xbe0
[  389.407855][ T4228]  __sys_sendto+0x46d/0x620
[  389.412389][ T4228]  __x64_sys_sendto+0xda/0xf0
[  389.417097][ T4228] page last free stack trace:
[  389.421790][ T4228]  free_unref_page_prepare+0x637/0x6c0
[  389.427290][ T4228]  free_unref_page+0x8f/0x2a0
[  389.431996][ T4228]  __unfreeze_partials+0x188/0x1e0
[  389.437143][ T4228]  put_cpu_partial+0x12d/0x190
[  389.441965][ T4228]  qlist_free_all+0x35/0x90
[  389.446494][ T4228]  kasan_quarantine_reduce+0x150/0x160
[  389.451980][ T4228]  __kasan_slab_alloc+0x2f/0xc0
[  389.456882][ T4228]  slab_post_alloc_hook+0x4c/0x380
[  389.462025][ T4228]  kmem_cache_alloc_trace+0x165/0x290
[  389.467425][ T4228]  kset_create_and_add+0x56/0x160
[  389.472477][ T4228]  netdev_register_kobject+0x1ae/0x320
[  389.477971][ T4228]  register_netdevice+0x10e8/0x1720
[  389.483207][ T4228]  veth_newlink+0x8ca/0xe20
[  389.487768][ T4228]  rtnl_newlink+0x139e/0x1920
[  389.492480][ T4228]  rtnetlink_rcv_msg+0x7f1/0xf10
[  389.497446][ T4228]  netlink_rcv_skb+0x1e9/0x430
[  389.502241][ T4228] 
[  389.504588][ T4228] Memory state around the buggy address:
[  389.510241][ T4228]  ffff88807c635f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  389.518327][ T4228]  ffff88807c636000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  389.526453][ T4228] >ffff88807c636080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  389.534537][ T4228]                                                     ^
[  389.541536][ T4228]  ffff88807c636100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  389.549636][ T4228]  ffff88807c636180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  389.557723][ T4228] ==================================================================
[  389.565808][ T4228] Disabling lock debugging due to kernel taint
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  389.630052][ T7108] 8021q: adding VLAN 0 to HW filter on device batadv0
[  389.748285][ T1108] usb 1-1: USB disconnect, device number 5
[  390.141536][ T4228] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  390.148812][ T4228] CPU: 0 PID: 4228 Comm: kworker/0:4 Tainted: G    B             syzkaller #0
[  390.157695][ T4228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  390.167782][ T4228] Workqueue: infiniband ib_cache_event_task
[  390.173716][ T4228] Call Trace:
[  390.177020][ T4228]  <TASK>
[  390.179978][ T4228]  dump_stack_lvl+0x188/0x250
[  390.184695][ T4228]  ? show_regs_print_info+0x20/0x20
[  390.189924][ T4228]  ? load_image+0x410/0x410
[  390.194461][ T4228]  panic+0x2f8/0x850
[  390.198391][ T4228]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  390.204587][ T4228]  ? bpf_jit_dump+0xd0/0xd0
[  390.209124][ T4228]  ? _raw_spin_unlock_irqrestore+0x10d/0x120
[  390.215165][ T4228]  ? _raw_spin_unlock+0x40/0x40
[  390.220048][ T4228]  ? siw_query_port+0x359/0x450
[  390.224924][ T4228]  check_panic_on_warn+0x80/0xa0
[  390.229921][ T4228]  ? siw_query_port+0x359/0x450
[  390.234799][ T4228]  end_report+0x6d/0xf0
[  390.238984][ T4228]  kasan_report+0x102/0x130
[  390.243530][ T4228]  ? siw_query_port+0x359/0x450
[  390.248420][ T4228]  siw_query_port+0x359/0x450
[  390.253173][ T4228]  ib_cache_update+0x1bd/0x9c0
[  390.257972][ T4228]  ? ib_cache_setup_one+0x5c0/0x5c0
[  390.263199][ T4228]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  390.269213][ T4228]  ? __lock_acquire+0x7b50/0x7b50
[  390.274274][ T4228]  ? read_lock_is_recursive+0x10/0x10
[  390.279718][ T4228]  ? __schedule+0x11cb/0x4350
[  390.284428][ T4228]  ib_cache_event_task+0xcf/0x1c0
[  390.289491][ T4228]  process_one_work+0x867/0xff0
[  390.294416][ T4228]  ? worker_detach_from_pool+0x240/0x240
[  390.300080][ T4228]  ? lockdep_hardirqs_off+0x70/0x100
[  390.305413][ T4228]  ? _raw_spin_lock_irq+0xb7/0xf0
[  390.310459][ T4228]  ? _raw_spin_lock_irqsave+0x100/0x100
[  390.316149][ T4228]  ? wq_worker_running+0x97/0x170
[  390.321273][ T4228]  worker_thread+0xad7/0x12a0
[  390.325977][ T4228]  kthread+0x42e/0x520
[  390.330065][ T4228]  ? rcu_lock_release+0x20/0x20
[  390.334934][ T4228]  ? kthread_blkcg+0xd0/0xd0
[  390.339580][ T4228]  ret_from_fork+0x1f/0x30
[  390.344018][ T4228]  </TASK>
[  390.347447][ T4228] Kernel Offset: disabled
[  390.353165][ T4228] Rebooting in 86400 seconds..