last executing test programs:

16.076680824s ago: executing program 0 (id=326):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/diskstats\x00', 0x0, 0x0)
sendfile(r0, r4, 0x0, 0x4000000000010046)

10.242612928s ago: executing program 1 (id=348):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001129ad819b6d6a2f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x4, {0x0, 0x1d}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x0, 0x2, 0x2, 0x100, 0x2, 0x8, {0x6, 0x9, 0x2, 0x80000000000000ff, 0x3, 0x0, 0x7fffffff, 0x58, 0x3, 0x8000, 0x9, r2, r3, 0x1, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0xf9, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x00\x00'}}]}, 0x0, 0x0, 0x0})
getdents64(r4, &(0x7f0000000100)=""/134, 0x86)
syz_fuse_handle_req(r0, &(0x7f000000a3c0)="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", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x30, 0x0, 0x4000000000200, [{0x0, 0x8001, 0x1, 0x10000, ')'}]}, 0x0, 0x0, 0x0, 0x0})
getdents(r4, 0x0, 0x0)

10.097985251s ago: executing program 0 (id=350):
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1c0059fc70ef5fd28788068200000000000000007db196ca0fbff8bc77e1d8c4c2", @ANYRESDEC=0x0, @ANYRES8, @ANYRES32=0x0, @ANYRES32, @ANYRES8], 0x48)
r0 = socket$inet(0x2, 0x3, 0x2f)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x820000, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_HYPERV_EVENTFD(r2, 0xc048aec8, &(0x7f0000000000)={0x2, 0xffffffffffffffff, 0xfffffffe})
sendto$inet(r0, &(0x7f0000000180)="dffe6b9acf6ed5c952063c79666285ee3cbd2d553a25e2f9ffe01ae6b542f2cf6f0f36a7", 0x24, 0x404c000, &(0x7f0000000f00)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
syz_usb_connect$uac1(0x0, 0xfffffffffffffeef, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10)
listen(0xffffffffffffffff, 0x3)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$inet6(r3, &(0x7f0000001dc0)={&(0x7f00000000c0)={0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000000440)="3475b5f970d26147237a69db87bb09d4431a13a1004ffe84990ce06955ceb0f33151dda08809cfdaca7226dca05a12da0435386af4ae22f6bb8af4042c4f479823b56dbb8e5bebf93e6a4ae489c084f35e98b1f400000948d7f825c1ef891dc32b0d8ea896da862f28c1aa88fe4b96a577c0d73ef536c91fe384e5e0e4b62bd8f97e822944545196ce61fd24cfa170bb5f37338db2ca4703d52000081c3f0a3b2c52d85f", 0xa4}], 0x1}, 0x85)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$inet6(r4, 0x0, 0x85)
shutdown(r4, 0x1)
r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000040)={0x15, 0x1, 0x100, "2742528909000000ce0198666a0084feea0be6b8a80052d763e61f9d13f019e3", 0x4f565559})
r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000)
r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b"], 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
syz_usb_control_io$hid(r7, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0xa8, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r8, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x8106)
bind$l2tp(r6, &(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000080)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)

9.230097742s ago: executing program 1 (id=355):
add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x800}, 0x50)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f0a00c900"], 0x22)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x9590f6cc3ea35512)
accept(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)

8.053477182s ago: executing program 1 (id=359):
r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1)
r1 = dup(r0)
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r2 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d000609058202", @ANYRES8], 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)

6.606476097s ago: executing program 4 (id=369):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
r2 = shmget(0x1, 0x2000, 0x8, &(0x7f0000ffb000/0x2000)=nil)
shmat(r2, &(0x7f0000ffc000/0x2000)=nil, 0x2000)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0xc0001, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0)
listxattr(0x0, 0x0, 0x0)
r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x100, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", <r5=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", <r6=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb010000000000000000070200", r6, <r7=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_INC(r3, 0x40045701, &(0x7f0000000280)=0xfffffffc)
ioctl$SW_SYNC_IOC_INC(r4, 0x40045701, &(0x7f0000000240)=0xffff)
ioctl$SYNC_IOC_FILE_INFO(r7, 0x40103e05, &(0x7f00000003c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0})
ptrace(0x10, 0x0)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x12)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0)

5.936969914s ago: executing program 4 (id=370):
add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x800}, 0x50)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f0a00c900"], 0x22)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x9590f6cc3ea35512)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)

5.836529476s ago: executing program 3 (id=371):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x6)
fchdir(r2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
syz_socket_connect_nvme_tcp()
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14b302, 0x8c)
pwritev2(r6, &(0x7f0000000100)=[{&(0x7f0000000080)="7f", 0x1}], 0x1, 0x5412, 0x0, 0x0)

4.061345889s ago: executing program 4 (id=373):
socket$xdp(0x2c, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
modify_ldt$read(0x0, &(0x7f0000000400)=""/213, 0xd5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fsopen(0x0, 0x0)
r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0)
write$proc_mixer(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="4f47410444e1bf43617074754faa272ee28b4c2a388c5038387f8d726520566f6c756d65272030303030303030303030303030303030303030300a494741494e0a50486ce2369e9e7101d386d8c8cc4f4e454f55540a535045414b455220274344204361707475726527"], 0xaf)
close(r3)

3.932460392s ago: executing program 3 (id=374):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x3)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0xa002803f})
syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0xc0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xfffffffe}]}}}}}}}, 0x0)

3.932052363s ago: executing program 0 (id=375):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f0000005180)={0x2020}, 0x2020)

3.890570113s ago: executing program 2 (id=376):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000440)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setns(0xc9, 0x0)
syz_ublk_setup_io_uring(0x1b1e, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00')
preadv(r3, &(0x7f0000000640)=[{&(0x7f0000000480)=""/179, 0xb3}], 0x1, 0x4f, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x0)
read(r4, &(0x7f00000002c0)=""/10, 0x5b)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r5, 0x6, 0x1f, &(0x7f0000001540)='t', 0x1)
setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0xbe05, 0x4)

3.726069908s ago: executing program 3 (id=377):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x5f, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1fe}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c8}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xedad, 0x80000001, 0x10000000, 0x6, 0x401}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x20044004)
r7 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000480)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000340)="2c548f2664234aea5882c40b00", 0xd}], 0x1, 0x0, 0x0, 0x86dd}, 0x40045)

2.996029206s ago: executing program 0 (id=378):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0x206b19, 0x4, 0x4ffff, 0x400e06, 0x7f, "0a4c00765e000080fffffffffffffff200", 0x1, 0x5})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xff)

2.995385406s ago: executing program 2 (id=379):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/rcu_expedited', 0xa82, 0x0)
write$cgroup_int(r0, &(0x7f0000000000)=0xffffffff, 0x12)

2.994950046s ago: executing program 4 (id=380):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000002f000000b709000000000000850000000700000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000001300)=r2, 0x4)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)

2.732626012s ago: executing program 1 (id=381):
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
getxattr(&(0x7f0000000000)='mtd0\x00', &(0x7f0000000080)=@known='user.incfs.id\x00', &(0x7f0000000140)=""/155, 0x9b)

2.685107903s ago: executing program 3 (id=382):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x8014}, 0x20000040)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002100)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x270, 0xd0, 0x1a0, 0xd0, 0x360, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@remote, @private1, [0xff], [0xffffff00, 0x0, 0xffffff00, 0xffffffff], 'gre0\x00', 'syzkaller1\x00', {0xff}, {}, 0x0, 0x0, 0x7}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x360}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@remote, 0x20, 0xe, 0x6}}}, {{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @loopback}, [0x0, 0xff000000, 0xff000000], [0xff000000, 0x0, 0xff], 'tunl0\x00', 'veth0_to_bond\x00', {}, {0xf7d589580f149d60}, 0xff, 0x5, 0x7, 0x76}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'veth1\x00'})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route(r5, 0x0, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="7800000013000500010000000000000007000000", @ANYRES32=r6, @ANYBLOB="000000000000000058001a0006000000020000004c0004801c00018008000100010000", @ANYRES32, @ANYBLOB="080003", @ANYBLOB=',\x00'], 0x78}}, 0x0)
socket$packet(0x11, 0x3, 0x300)
sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)

2.643494354s ago: executing program 4 (id=383):
socket$inet_udp(0x2, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6)
ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000280)={0x0, @generic={0x1a, "acacea66b69a654e9ba453912930"}, @generic={0x3a, "a0597fe543db1829d41c589657f1"}, @vsock={0x28, 0x0, 0x0, @my=0x1}, 0xfff8, 0x0, 0x0, 0x0, 0x38, 0x0, 0x1, 0x0, 0x4})
open$dir(0x0, 0x48000, 0x0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40042, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$vga_arbiter(r5, &(0x7f0000000080)=@other={'decodes', ' ', 'none'}, 0xd)
setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000080)='wg0\x00', 0x4)
sendto$inet(r4, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0)
shutdown(r4, 0x1)
close_range(0xffffffffffffffff, r3, 0x2)

2.592355186s ago: executing program 2 (id=384):
add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x800}, 0x50)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f0a00c900"], 0x22)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x9590f6cc3ea35512)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)

2.534714957s ago: executing program 0 (id=385):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x2, 0x0)
write(r0, &(0x7f0000000500)='1', 0x1)

2.450419329s ago: executing program 1 (id=386):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001a000100000000000000008080"], 0x1c}}, 0x20000000)

1.369148336s ago: executing program 2 (id=387):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x23, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x6, 0x1, 0x203, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c030}, 0x20004080)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc980000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000006c0003806800008008000340000000025c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c000140"], 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x844)
syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0xc000, &(0x7f0000000e00)=ANY=[@ANYBLOB='map=acorn,sbsector=0x0000000000000000,uid=', @ANYRESDEC=0x0, @ANYBLOB="0000b18eb0ea96e8437d91edf727e1e38533740c5b1da10b83273fa468d364205a63adda5262cda8e690c1049c88d615fd8362cd464a35e122ae29c203d5ce837a5f88eb1f09a8a7f55959926a7fd5ac27fd519b5c217ed420e41ddcfd9072f503656169e720fdc2da8c998a870683232e5263a0", @ANYBLOB="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", @ANYRESDEC, @ANYRES16, @ANYRESOCT], 0x1, 0x63a, &(0x7f0000005880)="$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")

1.227012419s ago: executing program 4 (id=388):
r0 = syz_open_dev$radio(0x0, 0x2, 0x2)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x8fc0, 0x65f40})
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x201, "5660359c3245d1c42317afad7d48ed51000000000000000100"})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f00000000c0)={0x5, "373a7d352fb4b8a73c10738789d9b58148e014ef281af7a2ae6939183bb72cd9"})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd1d3a6e6498c25f58fad9987ffe9ff22deab4a2700"})
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x14)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007bc0)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}, @NFT_MSG_DELOBJ={0x1c, 0x14, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TYPE={0x8}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x98}}, 0x0)
ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x1)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000040)={{0x9}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r1, 0x5501)
write$input_event(r1, &(0x7f00000000a0)={{}, 0x1, 0x1, 0x1}, 0x18)
r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff03000000090582030004"], 0x0)
syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xffffffffffffff9f, &(0x7f0000000080)=ANY=[])
write$input_event(r1, &(0x7f00000000c0), 0x18)

1.115373942s ago: executing program 3 (id=389):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00')
preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000740)=""/4100, 0x1004}], 0x1, 0x145, 0x0)
mount$fuseblk(&(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}})

960.298006ms ago: executing program 1 (id=390):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x101042)
writev(r3, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000280)='_\'', 0x2}], 0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff)
socket$xdp(0x2c, 0x3, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143442, 0x80)
pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0xfff6)
setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000040)=0x20085, 0x4)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x38)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0x401, 0xf, 0x8, 0x86, 0x2, 0x3, 0x7f, 0xa6, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0xdb, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0x10, 0x80, 0x207, 0x20003, 0x8, 0x4c76, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7fc, 0x17, 0x0, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000004, 0x9, 0x8000012f, 0x8004, 0x8, 0xffffbff3, 0x129432f6, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x8, 0x4, 0x7, 0x7ffb, 0x6, 0x500, 0x401, 0x10001, 0x1, 0xff, 0x5, 0xfffff572, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0xd, 0xfffff256, 0x2, 0x1, 0xfdfffffd, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0xe79, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0xff, 0x4, 0xb, 0x6, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0xfffffffd, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3039, 0xfffffffa, 0xb, 0x5, 0xffffffff, 0x2, 0x400003, 0x6, 0x4, 0x6d01, 0x6, 0x34, 0x800003, 0x200, 0x83, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x50, 0x3, 0x7ff, 0x12b, 0x8a6, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x2008077f, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2000004, 0xffff, 0x6, 0x80000000, 0xb9, 0xce4, 0x10001fc, 0x10002, 0x4184, 0x5, 0x3, 0x0, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x6, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x1622, 0x7, 0x200af, 0x20000008, 0x5, 0x226, 0x3, 0x5, 0x0, 0x30b1d693, 0xfffff4f0, 0x4, 0x7, 0x7, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0x30, 0xfff]}, 0x45c)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r5}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r5}, 0x38)
syz_usb_connect(0x0, 0x5d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414003824d0062413"], 0x0)

664.496733ms ago: executing program 2 (id=391):
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01)
ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000004c0)={0x4, 0x9b, &(0x7f0000000400)="2072871afeed7ef366b116932ec3edd94c2c93389a7c88e3df51d56cb0079f5b969d472c97a4c5e530c2dce0975dae4c751c8a86a2702d505ea96b19cbd08b9fcacbc4740255be90e15b2bbe8da850fbca97ef4d241ec54fb5fb50bb84d8a032c1eb47d8b481928352ad4e7bc74771ad53b76148caaca5dbdc6c9e76f85be9c6ffbcb8de534a0c20658fb9974633321dc2e94cc07391db9d435442"})

578.090575ms ago: executing program 2 (id=392):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x5f, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1fe}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c8}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xedad, 0x80000001, 0x10000000, 0x6, 0x401}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x20044004)
r7 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000480)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000340)="2c548f2664234aea5882c40b00", 0xd}], 0x1, 0x0, 0x0, 0x86dd}, 0x40045)

73.751468ms ago: executing program 3 (id=393):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2f)
ioctl$KVM_TDX_INIT_VM(r0, 0xc008aeba, &(0x7f00000003c0)={0x1, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]})
r1 = dup(0xffffffffffffffff)
execveat(r1, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x1000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
io_setup(0x5, &(0x7f0000000140)=<r3=>0x0)
eventfd2(0x0, 0x0)
io_submit(r3, 0x0, 0x0)
ppoll(&(0x7f0000000040)=[{r2, 0x35e5}], 0x1, 0x0, 0x0, 0x0)
shutdown(r2, 0x0)
mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/platform/drivers/serial8250/unbind\x00', 0x1, 0x0)
write(r4, &(0x7f0000000500)='serial8250', 0xa)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/platform/devices/serial8250/driver_override\x00', 0x1, 0x0)
write(r5, &(0x7f0000000700)='usb251xb', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/platform/drivers/usb251xb/bind\x00', 0x1, 0x0)
write(r6, &(0x7f0000000900)='serial8250', 0xa)
r7 = syz_usb_connect(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d000609058202", @ANYRESHEX], 0x0)
syz_usb_control_io$uac1(r7, 0x0, 0x0)

0s ago: executing program 0 (id=394):
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = socket$netlink(0x10, 0x3, 0xf)
r1 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r1, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x18)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.243' (ED25519) to the list of known hosts.
[   66.524085][ T4174] cgroup: Unknown subsys name 'net'
[   66.674057][ T4174] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   68.177276][ T4174] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   70.079240][ T4191] chnl_net:caif_netlink_parms(): no params data found
[   70.099105][ T4198] chnl_net:caif_netlink_parms(): no params data found
[   70.144389][ T4196] chnl_net:caif_netlink_parms(): no params data found
[   70.166132][ T4187] chnl_net:caif_netlink_parms(): no params data found
[   70.229210][ T4188] chnl_net:caif_netlink_parms(): no params data found
[   70.317807][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.325153][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.333559][ T4191] device bridge_slave_0 entered promiscuous mode
[   70.348080][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.355193][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.363281][ T4198] device bridge_slave_0 entered promiscuous mode
[   70.390427][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.397615][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.405854][ T4191] device bridge_slave_1 entered promiscuous mode
[   70.417190][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.424366][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.432760][ T4198] device bridge_slave_1 entered promiscuous mode
[   70.444467][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.453093][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.461732][ T4196] device bridge_slave_0 entered promiscuous mode
[   70.476530][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.484321][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.492859][ T4196] device bridge_slave_1 entered promiscuous mode
[   70.560766][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.575650][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.592243][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.599583][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.607726][ T4187] device bridge_slave_0 entered promiscuous mode
[   70.617282][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.628464][ T4198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.639736][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.649125][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.656203][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.664683][ T4188] device bridge_slave_0 entered promiscuous mode
[   70.672597][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.679835][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.688014][ T4187] device bridge_slave_1 entered promiscuous mode
[   70.703741][ T4198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.727534][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.734634][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.742983][ T4188] device bridge_slave_1 entered promiscuous mode
[   70.766171][ T4196] team0: Port device team_slave_0 added
[   70.799364][ T4196] team0: Port device team_slave_1 added
[   70.808226][ T4191] team0: Port device team_slave_0 added
[   70.829372][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.841198][ T4198] team0: Port device team_slave_0 added
[   70.849538][ T4191] team0: Port device team_slave_1 added
[   70.864204][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.876142][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.888543][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.907610][ T4198] team0: Port device team_slave_1 added
[   70.921486][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.928749][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.954766][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.973680][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.980776][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.007016][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.058012][ T4187] team0: Port device team_slave_0 added
[   71.065862][ T4188] team0: Port device team_slave_0 added
[   71.088743][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.095737][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.122161][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.135912][ T4187] team0: Port device team_slave_1 added
[   71.143570][ T4188] team0: Port device team_slave_1 added
[   71.156436][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.163579][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.190557][ T4198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.202549][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.209925][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.236092][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.268840][ T4196] device hsr_slave_0 entered promiscuous mode
[   71.275581][ T4196] device hsr_slave_1 entered promiscuous mode
[   71.290519][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.299775][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.325957][ T4198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.358142][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[   71.364658][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[   71.396974][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.403970][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.430158][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.442252][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.449371][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.475331][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.503370][ T4191] device hsr_slave_0 entered promiscuous mode
[   71.510293][ T4191] device hsr_slave_1 entered promiscuous mode
[   71.517577][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   71.525404][ T4191] Cannot create hsr debugfs directory
[   71.531483][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.538836][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.565388][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.577621][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.584610][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.610830][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.637363][ T4198] device hsr_slave_0 entered promiscuous mode
[   71.644197][ T4198] device hsr_slave_1 entered promiscuous mode
[   71.651238][ T4198] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   71.659151][ T4198] Cannot create hsr debugfs directory
[   71.747789][    T7] Bluetooth: hci3: command 0x0409 tx timeout
[   71.749444][   T23] Bluetooth: hci1: command 0x0409 tx timeout
[   71.755910][    T7] Bluetooth: hci0: command 0x0409 tx timeout
[   71.766595][    T7] Bluetooth: hci2: command 0x0409 tx timeout
[   71.805689][ T4187] device hsr_slave_0 entered promiscuous mode
[   71.813293][ T4187] device hsr_slave_1 entered promiscuous mode
[   71.820188][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   71.828380][    T7] Bluetooth: hci4: command 0x0409 tx timeout
[   71.833348][ T4187] Cannot create hsr debugfs directory
[   71.862528][ T4188] device hsr_slave_0 entered promiscuous mode
[   71.869636][ T4188] device hsr_slave_1 entered promiscuous mode
[   71.877263][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   71.884851][ T4188] Cannot create hsr debugfs directory
[   72.144180][ T4196] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   72.156176][ T4196] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   72.170313][ T4196] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   72.186375][ T4196] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   72.236078][ T4191] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   72.245339][ T4191] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   72.256679][ T4191] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   72.272155][ T4191] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   72.355024][ T4187] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   72.373923][ T4187] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   72.385737][ T4187] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   72.411182][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.419481][ T4187] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   72.473284][ T4198] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   72.485398][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   72.495725][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   72.512096][ T4196] 8021q: adding VLAN 0 to HW filter on device team0
[   72.525932][ T4198] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   72.536244][ T4198] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   72.551587][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.575492][ T4198] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   72.588117][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   72.597225][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   72.606715][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.614079][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.623357][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   72.632664][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   72.642044][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.649178][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.657386][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   72.687567][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   72.696018][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   72.708983][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   72.719454][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   72.728432][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   72.737490][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   72.746144][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   72.763695][ T4191] 8021q: adding VLAN 0 to HW filter on device team0
[   72.779678][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   72.789132][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   72.798523][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   72.807756][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   72.816223][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.823363][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.832396][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   72.841305][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   72.850035][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   72.859925][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   72.868885][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.876003][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.883842][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   72.905957][ T4196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   72.919414][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   72.933502][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   72.943109][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   72.954729][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   72.973132][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   72.982770][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   73.008930][  T522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   73.020870][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   73.068441][  T522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   73.079519][  T522] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   73.089996][  T522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   73.100354][  T522] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   73.109397][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   73.130981][  T522] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   73.141536][  T522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   73.152768][  T522] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   73.181851][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.199816][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   73.210319][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   73.243626][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   73.272872][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.294441][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   73.305537][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   73.325845][ T4187] 8021q: adding VLAN 0 to HW filter on device team0
[   73.347115][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   73.363145][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   73.376723][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.402343][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   73.423198][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   73.444034][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.451204][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.463549][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   73.472843][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   73.508329][ T4198] 8021q: adding VLAN 0 to HW filter on device team0
[   73.524274][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   73.533080][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   73.549827][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   73.564794][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.572027][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.586104][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   73.596153][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   73.611570][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   73.621610][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   73.631310][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   73.640221][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   73.648843][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.656194][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.664054][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   73.673678][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   73.683520][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.690666][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.706568][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.743970][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   73.755477][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   73.773976][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   73.784226][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   73.799816][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   73.809105][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   73.817759][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   73.828108][ T4232] Bluetooth: hci1: command 0x041b tx timeout
[   73.839549][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   73.850097][ T4232] Bluetooth: hci2: command 0x041b tx timeout
[   73.856231][ T4232] Bluetooth: hci0: command 0x041b tx timeout
[   73.863048][ T4232] Bluetooth: hci3: command 0x041b tx timeout
[   73.870723][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   73.887489][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   73.896245][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   73.917292][ T4231] Bluetooth: hci4: command 0x041b tx timeout
[   73.924676][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   73.944420][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   73.952718][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   73.972770][ T4188] 8021q: adding VLAN 0 to HW filter on device team0
[   73.987665][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   73.995508][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   74.018558][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   74.036171][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   74.051229][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   74.063081][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.088837][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   74.099705][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   74.111062][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.118232][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.132648][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   74.144916][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   74.159239][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   74.212844][ T4198] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   74.227565][ T4198] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   74.240246][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   74.255130][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   74.264686][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   74.274379][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   74.283861][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   74.292881][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   74.301766][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.308895][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.317390][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   74.326356][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   74.335714][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   74.344558][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   74.363129][ T4191] device veth0_vlan entered promiscuous mode
[   74.406020][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   74.423996][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   74.437878][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   74.446621][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   74.462969][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   74.477933][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   74.486975][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   74.496610][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   74.504658][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   74.512384][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   74.520715][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   74.529621][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   74.539188][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   74.549781][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   74.562911][ T4191] device veth1_vlan entered promiscuous mode
[   74.573212][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.586603][ T4196] device veth0_vlan entered promiscuous mode
[   74.603678][ T4188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   74.621428][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   74.643876][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   74.658981][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   74.675151][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   74.685154][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   74.694927][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   74.704548][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   74.713912][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   74.724458][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   74.732841][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   74.741863][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   74.756785][ T4196] device veth1_vlan entered promiscuous mode
[   74.813500][ T4191] device veth0_macvtap entered promiscuous mode
[   74.831481][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   74.845888][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   74.854614][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   74.864233][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   74.878875][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   74.886435][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   74.903800][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   74.914349][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   74.929272][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   74.940373][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   74.956353][ T4191] device veth1_macvtap entered promiscuous mode
[   74.971007][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.993787][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   75.003214][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   75.018837][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   75.046896][ T4187] device veth0_vlan entered promiscuous mode
[   75.065873][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.076311][ T4196] device veth0_macvtap entered promiscuous mode
[   75.085779][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   75.096154][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   75.104732][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   75.114276][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   75.123504][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   75.134611][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   75.145175][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   75.166021][ T4187] device veth1_vlan entered promiscuous mode
[   75.180498][ T4196] device veth1_macvtap entered promiscuous mode
[   75.198452][  T522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   75.207437][  T522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   75.221376][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.242799][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   75.252226][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   75.264926][ T4191] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.278672][ T4191] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.288544][ T4191] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.297828][ T4191] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.313127][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.324964][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.336696][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.367565][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   75.377879][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   75.387302][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   75.394812][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   75.404545][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.415448][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.427068][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.443792][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.460647][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   75.471764][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   75.481967][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   75.493004][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   75.502379][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   75.515147][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   75.527663][ T4198] device veth0_vlan entered promiscuous mode
[   75.542365][ T4196] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.552128][ T4196] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.561323][ T4196] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.570985][ T4196] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.624134][ T4198] device veth1_vlan entered promiscuous mode
[   75.669761][ T4187] device veth0_macvtap entered promiscuous mode
[   75.679221][  T522] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   75.688973][  T522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   75.697730][  T522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   75.706402][  T522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   75.715464][  T522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   75.732006][  T522] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   75.758681][ T4187] device veth1_macvtap entered promiscuous mode
[   75.799797][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   75.809412][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   75.817717][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   75.825962][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   75.839404][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   75.849090][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   75.863440][ T3097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.875478][ T3097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.887944][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.901747][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.914111][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.917778][ T1108] Bluetooth: hci3: command 0x040f tx timeout
[   75.925374][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.942831][ T1108] Bluetooth: hci0: command 0x040f tx timeout
[   75.943538][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.958781][ T1108] Bluetooth: hci2: command 0x040f tx timeout
[   75.965133][ T1108] Bluetooth: hci1: command 0x040f tx timeout
[   75.984685][ T4198] device veth0_macvtap entered promiscuous mode
[   75.993178][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   75.999807][ T4243] Bluetooth: hci4: command 0x040f tx timeout
[   76.005919][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   76.016438][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   76.025938][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   76.035472][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   76.044496][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   76.053395][ T4188] device veth0_vlan entered promiscuous mode
[   76.062402][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.073149][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.086375][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.097684][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.109223][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.121335][ T4198] device veth1_macvtap entered promiscuous mode
[   76.138597][  T522] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   76.147242][  T522] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   76.156120][  T522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   76.175281][ T4187] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.184365][ T4187] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.193617][ T4187] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.203574][ T4187] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.222427][ T4188] device veth1_vlan entered promiscuous mode
[   76.247221][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.255088][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.272803][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.284083][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.295002][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.305761][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.316470][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.327611][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.339788][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.355118][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.371710][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.380494][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   76.389502][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   76.400362][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   76.411212][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   76.431016][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.444102][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.452289][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.464492][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.478525][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.495617][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.505859][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.516376][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.530973][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.549330][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   76.565602][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   76.575321][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   76.607034][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   76.615664][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   76.640238][ T4198] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.652728][ T4198] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.664070][ T4198] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.676347][ T4198] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.706700][ T4188] device veth0_macvtap entered promiscuous mode
[   76.756027][ T3030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.774053][ T3030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.813940][ T4188] device veth1_macvtap entered promiscuous mode
[   76.822220][  T522] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   76.851755][  T522] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   76.890035][  T522] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   77.967649][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.975522][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.988248][ T4231] Bluetooth: hci1: command 0x0419 tx timeout
[   77.994366][ T4231] Bluetooth: hci2: command 0x0419 tx timeout
[   78.001081][ T4231] Bluetooth: hci0: command 0x0419 tx timeout
[   78.007332][ T4231] Bluetooth: hci3: command 0x0419 tx timeout
[   78.025967][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.041361][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.051870][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.062534][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.072950][ T4286] Bluetooth: hci4: command 0x0419 tx timeout
[   78.079464][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.090399][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.108225][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.124970][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.141198][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.208260][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   78.238145][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   78.289695][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   78.579374][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.610992][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.047509][ T4290] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.072987][ T4290] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.171888][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   79.203685][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.216386][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   79.227286][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.237371][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   79.250230][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.260331][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   79.271784][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.283599][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1
[   79.291385][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   79.322079][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   79.358664][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   79.401419][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   79.427368][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.452329][ T4304] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   79.462730][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.480170][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.489444][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.523177][ T4296] device syzkaller0 entered promiscuous mode
[   79.573321][ T4233] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   79.755738][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.782855][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.818092][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   79.844125][ T3097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.852900][ T3097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.861708][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   80.062298][ T4308] loop4: detected capacity change from 0 to 32768
[   80.077172][ T4233] usb 4-1: Using ep0 maxpacket: 8
[   80.101256][ T4310] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2'.
[   80.114002][ T4310] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2'.
[   80.162701][ T4308] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.10 (4308)
[   80.198673][ T4308] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[   80.208549][ T4308] BTRFS info (device loop4): using free space tree
[   80.215095][ T4308] BTRFS info (device loop4): has skinny extents
[   80.240211][ T4233] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   80.277319][ T4233] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   80.297088][ T4233] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[   80.453400][ T4308] BTRFS info (device loop4): enabling ssd optimizations
[   80.507206][ T4233] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[   80.516301][ T4233] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.536909][ T4233] usb 4-1: Product: syz
[   80.541140][ T4233] usb 4-1: Manufacturer: syz
[   80.545806][ T4233] usb 4-1: SerialNumber: syz
[   80.623638][ T4306] loop2: detected capacity change from 0 to 32768
[   80.919414][ T4321] loop1: detected capacity change from 0 to 32768
[   80.959027][ T4306] =======================================================
[   80.959027][ T4306] WARNING: The mand mount option has been deprecated and
[   80.959027][ T4306]          and is ignored by this kernel. Remove the mand
[   80.959027][ T4306]          option from the mount to silence this warning.
[   80.959027][ T4306] =======================================================
[   81.408855][ T4321] XFS (loop1): Mounting V5 Filesystem
[   81.647277][ T4233] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[   81.657558][ T4233] usb 4-1: clock source 0 is not valid, cannot use
[   81.697088][ T4233] usb 4-1: 1:1: cannot get freq (v2/v3): err -32
[   81.709573][ T4306] XFS (loop2): Mounting V5 Filesystem
[   81.769689][ T4321] XFS (loop1): Ending clean mount
[   81.824649][ T4360] comedi comedi3: aio_iiro_16: a I/O base address must be specified
[   81.906086][ T4306] XFS (loop2): Ending clean mount
[   82.859153][ T1108] usb 4-1: USB disconnect, device number 2
[   82.918535][ T4198] XFS (loop2): Unmounting Filesystem
[   83.247187][ T4368] udevd[4368]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   83.316505][ T4373] xt_l2tp: invalid flags combination: 8
[   83.387590][   T23] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[   83.724238][ T4385] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   84.405651][ T4380] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   85.307027][ T4380] usb 4-1: Using ep0 maxpacket: 8
[   85.341751][ T4321] syz.1.11 (4321) used greatest stack depth: 20400 bytes left
[   85.351274][ T4188] XFS (loop1): Unmounting Filesystem
[   85.387097][   T23] usb 2-1: unable to get BOS descriptor or descriptor too short
[   85.457298][ T4380] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   85.467180][   T23] usb 2-1: no configurations
[   85.471836][   T23] usb 2-1: can't read configurations, error -22
[   85.477056][ T4380] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   85.495821][ T4380] usb 4-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0xB6, skipping
[   85.556947][ T4380] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   85.614668][ T4397] loop4: detected capacity change from 0 to 4096
[   85.617286][ T4380] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   85.662959][ T4380] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.758884][ T4380] usbtmc 4-1:16.0: bulk endpoints not found
[   86.343911][ T4400] batman_adv: batadv0: Adding interface: veth0
[   86.352520][ T4400] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.467886][ T4400] batman_adv: batadv0: Interface activated: veth0
[   86.512164][ T4407] batman_adv: batadv0: Interface deactivated: veth0
[   86.526104][ T4407] batman_adv: batadv0: Removing interface: veth0
[   86.582216][ T4407] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   86.613813][ T4407] batman_adv: batadv0: Removing interface: batadv_slave_0
[   86.643029][ T4407] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   86.652419][ T4407] batman_adv: batadv0: Removing interface: batadv_slave_1
[   86.711010][ T2855] cfg80211: failed to load regulatory.db
[   86.929511][ T4412] loop1: detected capacity change from 0 to 4096
[   87.197696][ T4412] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[   87.257859][ T4412] ntfs3: loop1: ino=5, "/" directory corrupted
[   87.602252][ T4417] loop0: detected capacity change from 0 to 164
[   87.794615][ T2855] usb 4-1: USB disconnect, device number 3
[   87.808811][ T4422] ALSA: mixer_oss: invalid OSS volume 'OGADá¿CaptuOª'.â‹L*8ŒP88�re'
[   87.817505][ T4422] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžq
Ó†ØÈÌONEOUT'
[   88.346960][ T2855] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   88.596965][ T2855] usb 4-1: Using ep0 maxpacket: 16
[   88.717153][ T2855] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   88.737570][ T2855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   88.777493][ T2855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   88.805003][ T2855] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[   88.836928][ T2855] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   88.852334][ T4424] loop0: detected capacity change from 0 to 32768
[   88.961144][ T4434] loop1: detected capacity change from 0 to 4096
[   88.977948][ T2855] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[   88.993027][ T2855] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[   89.020816][ T2855] usb 4-1: Manufacturer: syz
[   89.070822][ T2855] usb 4-1: config 0 descriptor??
[   89.124394][ T4424] XFS (loop0): Mounting V5 Filesystem
[   89.325716][ T4424] XFS (loop0): Starting recovery (logdev: internal)
[   89.393644][ T4424] XFS (loop0): Ending recovery (logdev: internal)
[   89.484999][ T4191] XFS (loop0): Unmounting Filesystem
[   89.517219][ T2855] rc_core: IR keymap rc-hauppauge not found
[   89.528405][ T2855] Registered IR keymap rc-empty
[   89.541110][ T2855] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[   89.587052][ T2855] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[   89.727639][ T2855] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[   90.063759][ T2855] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input5
[   90.514812][ T2855] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[   90.554714][ T4452] comedi comedi3: aio_iiro_16: a I/O base address must be specified
[   90.567001][ T2855] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[   90.608271][ T2855] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[   90.653640][ T2855] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[   90.707025][ T2855] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[   90.737367][ T2855] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[   90.771233][ T2855] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[   90.829397][ T2855] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[   90.883669][ T2855] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[   90.930839][ T2855] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[   90.991604][ T2855] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[   91.025370][ T4459] binder: BINDER_SET_CONTEXT_MGR already set
[   91.052650][ T4463] xt_l2tp: invalid flags combination: 8
[   91.059941][ T2855] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[   91.082793][ T4459] binder: 4458:4459 ioctl 4018620d 200000004a80 returned -16
[   91.127216][ T4464] binder: 4458:4464 ioctl c0306201 0 returned -14
[   91.635873][ T4176] usb 4-1: USB disconnect, device number 4
[   91.804218][ T4474] batman_adv: batadv0: Adding interface: veth0
[   91.847274][ T4474] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.933749][ T4474] batman_adv: batadv0: Interface activated: veth0
[   91.974280][ T4479] batman_adv: batadv0: Interface deactivated: veth0
[   92.005225][ T4479] batman_adv: batadv0: Removing interface: veth0
[   92.023011][ T4479] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   92.071595][ T4479] batman_adv: batadv0: Removing interface: batadv_slave_0
[   92.111858][ T4479] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   92.144482][ T4479] batman_adv: batadv0: Removing interface: batadv_slave_1
[   92.250809][ T4481] loop1: detected capacity change from 0 to 164
[   92.734758][ T4470] loop0: detected capacity change from 0 to 32768
[   92.743500][ T4377] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   93.080931][ T4200] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[   93.091060][ T4200] CPU: 1 PID: 4200 Comm: kworker/u5:5 Not tainted syzkaller #0
[   93.098649][ T4200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   93.108742][ T4200] Workqueue: hci0 hci_rx_work
[   93.113487][ T4200] Call Trace:
[   93.116792][ T4200]  <TASK>
[   93.119749][ T4200]  dump_stack_lvl+0x188/0x250
[   93.124468][ T4200]  ? show_regs_print_info+0x20/0x20
[   93.129701][ T4200]  ? load_image+0x410/0x410
[   93.134250][ T4200]  sysfs_create_dir_ns+0x26a/0x290
[   93.139402][ T4200]  ? sysfs_warn_dup+0xa0/0xa0
[   93.144110][ T4200]  ? kthread+0x42e/0x520
[   93.148380][ T4200]  ? do_raw_spin_unlock+0x11d/0x230
[   93.153613][ T4200]  kobject_add_internal+0x5ba/0xcd0
[   93.158856][ T4200]  kobject_add+0x160/0x230
[   93.163317][ T4200]  ? kobject_init+0x1c0/0x1c0
[   93.168034][ T4200]  ? __raw_spin_lock_init+0x41/0x100
[   93.173351][ T4200]  ? klist_children_get+0x50/0x50
[   93.178410][ T4200]  ? get_device_parent+0x121/0x3e0
[   93.183552][ T4200]  device_add+0x470/0x1050
[   93.188007][ T4200]  hci_conn_add_sysfs+0xd1/0x1e0
[   93.192987][ T4200]  le_conn_complete_evt+0xc2e/0x14d0
[   93.198403][ T4200]  ? cs_le_create_conn+0x5e0/0x5e0
[   93.203554][ T4200]  ? __mutex_trylock_common+0x15c/0x260
[   93.209141][ T4200]  hci_le_meta_evt+0xd36/0x3ca0
[   93.214028][ T4200]  ? hci_event_packet+0x363/0x1310
[   93.219173][ T4200]  ? __lock_acquire+0x7b50/0x7b50
[   93.224231][ T4200]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[   93.230259][ T4200]  ? lock_chain_count+0x20/0x20
[   93.235151][ T4200]  ? hci_remote_host_features_evt+0x240/0x240
[   93.241252][ T4200]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[   93.246926][ T4200]  ? mutex_unlock+0x10/0x10
[   93.251466][ T4200]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[   93.257134][ T4200]  ? hci_event_packet+0x79/0x1310
[   93.262195][ T4200]  hci_event_packet+0xe0b/0x1310
[   93.267169][ T4200]  ? _raw_spin_unlock+0x40/0x40
[   93.272042][ T4200]  ? rcu_lock_release+0x20/0x20
[   93.276927][ T4200]  ? hci_send_to_monitor+0x9c/0x4a0
[   93.282162][ T4200]  hci_rx_work+0x255/0xa10
[   93.286624][ T4200]  process_one_work+0x867/0xff0
[   93.291527][ T4200]  ? worker_detach_from_pool+0x240/0x240
[   93.297211][ T4200]  ? lockdep_hardirqs_off+0x70/0x100
[   93.302546][ T4200]  ? _raw_spin_lock_irq+0xb7/0xf0
[   93.307595][ T4200]  ? _raw_spin_lock_irqsave+0x100/0x100
[   93.313219][ T4200]  ? wq_worker_running+0x97/0x170
[   93.318285][ T4200]  worker_thread+0xad7/0x12a0
[   93.323035][ T4200]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[   93.328979][ T4200]  kthread+0x42e/0x520
[   93.333077][ T4200]  ? rcu_lock_release+0x20/0x20
[   93.337955][ T4200]  ? kthread_blkcg+0xd0/0xd0
[   93.342579][ T4200]  ret_from_fork+0x1f/0x30
[   93.347048][ T4200]  </TASK>
[   93.389564][ T4200] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[   93.405994][ T4200] Bluetooth: hci0: failed to register connection device
[   93.827125][ T4377] usb 2-1: Using ep0 maxpacket: 8
[   93.953325][ T4470] XFS (loop0): Mounting V5 Filesystem
[   93.959148][ T4377] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   94.018012][ T4377] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   94.175359][ T4377] usb 2-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0xB6, skipping
[   94.210761][ T4377] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   94.239380][ T4377] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   94.269043][ T4377] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.329640][ T4470] XFS (loop0): Ending clean mount
[   94.360673][ T4377] usbtmc 2-1:16.0: bulk endpoints not found
[   94.469607][ T4191] XFS (loop0): Unmounting Filesystem
[   94.758440][ T4176] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   95.067117][ T4176] usb 4-1: Using ep0 maxpacket: 32
[   95.197360][ T4176] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[   95.215814][ T4176] usb 4-1: config 0 has no interface number 0
[   95.507071][   T23] Bluetooth: hci0: command 0x2016 tx timeout
[   95.627411][ T4176] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   95.741334][ T4176] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.904931][ T4176] usb 4-1: Product: syz
[   95.988619][ T4176] usb 4-1: Manufacturer: syz
[   96.095313][ T4176] usb 4-1: SerialNumber: syz
[   96.548694][ T4176] usb 4-1: config 0 descriptor??
[   96.628996][ T4176] smsc95xx v2.0.0
[   96.723837][   T23] usb 2-1: USB disconnect, device number 4
[   97.026904][    C0] sched: RT throttling activated
[   97.046279][ T4176] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[   97.525429][ T4176] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   97.657520][ T4551] tmpfs: Unknown parameter 'usrquota'
[   98.017196][ T4176] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[   98.029945][ T4176] smsc95xx: probe of 4-1:0.67 failed with error -71
[   98.043803][ T4556] loop0: detected capacity change from 0 to 164
[   98.057570][ T4176] usb 4-1: USB disconnect, device number 5
[   99.931936][ T4563] binder: 4562:4563 ioctl c0306201 0 returned -14
[  100.314065][ T4580] xt_l2tp: invalid flags combination: 8
[  100.627772][ T4590] loop3: detected capacity change from 0 to 32768
[  100.670641][ T4590] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.62 (4590)
[  100.687884][ T4590] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  100.697721][ T4590] BTRFS info (device loop3): using free space tree
[  100.704257][ T4590] BTRFS info (device loop3): has skinny extents
[  100.904457][ T4605] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  101.961143][ T4590] BTRFS info (device loop3): enabling ssd optimizations
[  105.315448][ T4642] device syzkaller0 entered promiscuous mode
[  105.956879][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!!
[  105.976875][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!!
[  105.986872][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!!
[  105.996874][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!!
[  106.006873][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!!
[  106.016870][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!!
[  106.026870][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!!
[  106.036872][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!!
[  106.046870][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!!
[  106.056877][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!!
[  106.162481][ T4200] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201'
[  106.172349][ T4200] CPU: 1 PID: 4200 Comm: kworker/u5:5 Not tainted syzkaller #0
[  106.179940][ T4200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  106.190036][ T4200] Workqueue: hci4 hci_rx_work
[  106.194804][ T4200] Call Trace:
[  106.198112][ T4200]  <TASK>
[  106.201079][ T4200]  dump_stack_lvl+0x188/0x250
[  106.205810][ T4200]  ? show_regs_print_info+0x20/0x20
[  106.211052][ T4200]  ? load_image+0x410/0x410
[  106.215621][ T4200]  sysfs_create_dir_ns+0x26a/0x290
[  106.220768][ T4200]  ? sysfs_warn_dup+0xa0/0xa0
[  106.225452][ T4200]  ? kthread+0x42e/0x520
[  106.229716][ T4200]  ? do_raw_spin_unlock+0x11d/0x230
[  106.234963][ T4200]  kobject_add_internal+0x5ba/0xcd0
[  106.240200][ T4200]  kobject_add+0x160/0x230
[  106.244653][ T4200]  ? kobject_init+0x1c0/0x1c0
[  106.249353][ T4200]  ? __raw_spin_lock_init+0x41/0x100
[  106.254729][ T4200]  ? klist_children_get+0x50/0x50
[  106.259777][ T4200]  ? get_device_parent+0x121/0x3e0
[  106.264910][ T4200]  device_add+0x470/0x1050
[  106.269370][ T4200]  ? device_initialize+0x2a5/0x4d0
[  106.274520][ T4200]  hci_conn_add_sysfs+0xd1/0x1e0
[  106.279485][ T4200]  le_conn_complete_evt+0xc2e/0x14d0
[  106.284806][ T4200]  ? cs_le_create_conn+0x5e0/0x5e0
[  106.289954][ T4200]  ? __mutex_trylock_common+0x15c/0x260
[  106.295530][ T4200]  hci_le_meta_evt+0xd36/0x3ca0
[  106.300409][ T4200]  ? hci_event_packet+0x363/0x1310
[  106.305541][ T4200]  ? __lock_acquire+0x7b50/0x7b50
[  106.310586][ T4200]  ? hci_remote_host_features_evt+0x240/0x240
[  106.316679][ T4200]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  106.322336][ T4200]  ? mark_lock+0x94/0x320
[  106.326674][ T4200]  ? mutex_unlock+0x10/0x10
[  106.331188][ T4200]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  106.337287][ T4200]  ? lock_chain_count+0x20/0x20
[  106.342155][ T4200]  ? __rwlock_init+0x140/0x140
[  106.346945][ T4200]  hci_event_packet+0xe0b/0x1310
[  106.351924][ T4200]  ? _raw_spin_unlock+0x40/0x40
[  106.356785][ T4200]  ? rcu_lock_release+0x20/0x20
[  106.361786][ T4200]  ? hci_send_to_monitor+0x9c/0x4a0
[  106.367039][ T4200]  hci_rx_work+0x255/0xa10
[  106.371505][ T4200]  process_one_work+0x867/0xff0
[  106.376384][ T4200]  ? worker_detach_from_pool+0x240/0x240
[  106.382029][ T4200]  ? lockdep_hardirqs_off+0x70/0x100
[  106.387329][ T4200]  ? _raw_spin_lock_irq+0xb7/0xf0
[  106.392361][ T4200]  ? _raw_spin_lock_irqsave+0x100/0x100
[  106.397909][ T4200]  ? wq_worker_running+0x97/0x170
[  106.402943][ T4200]  worker_thread+0xad7/0x12a0
[  106.407640][ T4200]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  106.413545][ T4200]  kthread+0x42e/0x520
[  106.417616][ T4200]  ? rcu_lock_release+0x20/0x20
[  106.422468][ T4200]  ? kthread_blkcg+0xd0/0xd0
[  106.427074][ T4200]  ret_from_fork+0x1f/0x30
[  106.431523][ T4200]  </TASK>
[  106.457851][ T4200] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  106.471399][ T4200] Bluetooth: hci4: failed to register connection device
[  107.979811][ T4661] sg_write: data in/out 462812/136 bytes for SCSI command 0x0-- guessing data in;
[  107.979811][ T4661]    program syz.0.71 not setting count and/or reply_len properly
[  108.116944][ T2855] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  108.333159][ T4667] batman_adv: batadv0: Adding interface: veth0
[  108.367054][ T4667] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  108.420367][ T2855] usb 5-1: Using ep0 maxpacket: 32
[  108.546952][   T13] Bluetooth: hci4: command 0x2016 tx timeout
[  108.557890][ T4667] batman_adv: batadv0: Interface activated: veth0
[  108.613319][ T4667] batman_adv: batadv0: Interface deactivated: veth0
[  108.652004][ T4667] batman_adv: batadv0: Removing interface: veth0
[  108.668216][ T4667] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  108.691890][ T4667] batman_adv: batadv0: Removing interface: batadv_slave_0
[  108.856383][ T4667] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  109.246628][ T4667] batman_adv: batadv0: Removing interface: batadv_slave_1
[  109.464543][ T2855] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[  109.472809][ T2855] usb 5-1: config 0 has no interface number 0
[  109.515085][ T4652] loop2: detected capacity change from 0 to 32768
[  109.667385][ T2855] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  109.673570][ T4652] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.69 (4652)
[  109.676803][ T2855] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.397493][ T2855] usb 5-1: Product: syz
[  110.401716][ T2855] usb 5-1: Manufacturer: syz
[  110.406335][ T2855] usb 5-1: SerialNumber: syz
[  110.413222][ T2855] usb 5-1: config 0 descriptor??
[  110.432205][ T4652] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  110.468000][ T2855] smsc95xx v2.0.0
[  110.474476][ T4652] BTRFS info (device loop2): setting nodatasum
[  110.480926][ T4652] BTRFS info (device loop2): force zlib compression, level 3
[  110.488841][ T4652] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8)
[  110.499706][ T4652] BTRFS info (device loop2): use lzo compression, level 0
[  110.506960][ T4652] BTRFS info (device loop2): turning on flush-on-commit
[  110.513936][ T4652] BTRFS info (device loop2): enabling auto defrag
[  110.521739][ T4652] BTRFS info (device loop2): max_inline at 4096
[  110.541653][ T4652] BTRFS info (device loop2): using free space tree
[  110.586903][ T4652] BTRFS info (device loop2): has skinny extents
[  110.727800][ T2855] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71
[  110.895496][ T4704] loop1: detected capacity change from 0 to 32768
[  110.910255][ T4652] BTRFS error (device loop2): open_ctree failed: -12
[  110.928511][ T2855] smsc95xx: probe of 5-1:0.67 failed with error -71
[  110.946070][ T4706] loop0: detected capacity change from 0 to 164
[  110.957931][ T2855] usb 5-1: USB disconnect, device number 2
[  111.041300][ T4704] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.79 (4704)
[  111.246268][ T4680] loop3: detected capacity change from 0 to 32768
[  111.364091][ T4200] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201'
[  111.374160][ T4200] CPU: 0 PID: 4200 Comm: kworker/u5:5 Not tainted syzkaller #0
[  111.381776][ T4200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  111.391871][ T4200] Workqueue: hci3 hci_rx_work
[  111.396597][ T4200] Call Trace:
[  111.399903][ T4200]  <TASK>
[  111.402867][ T4200]  dump_stack_lvl+0x188/0x250
[  111.407584][ T4200]  ? show_regs_print_info+0x20/0x20
[  111.412819][ T4200]  ? load_image+0x410/0x410
[  111.417371][ T4200]  sysfs_create_dir_ns+0x26a/0x290
[  111.422538][ T4200]  ? sysfs_warn_dup+0xa0/0xa0
[  111.427242][ T4200]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  111.433261][ T4200]  ? do_raw_spin_unlock+0x11d/0x230
[  111.438523][ T4200]  kobject_add_internal+0x5ba/0xcd0
[  111.443766][ T4200]  kobject_add+0x160/0x230
[  111.448219][ T4200]  ? kobject_init+0x1c0/0x1c0
[  111.452934][ T4200]  ? __raw_spin_lock_init+0x41/0x100
[  111.458246][ T4200]  ? klist_children_get+0x50/0x50
[  111.463301][ T4200]  ? get_device_parent+0x121/0x3e0
[  111.468513][ T4200]  device_add+0x470/0x1050
[  111.473048][ T4200]  ? device_initialize+0x2a5/0x4d0
[  111.478199][ T4200]  hci_conn_add_sysfs+0xd1/0x1e0
[  111.483171][ T4200]  le_conn_complete_evt+0xc2e/0x14d0
[  111.488504][ T4200]  ? cs_le_create_conn+0x5e0/0x5e0
[  111.493649][ T4200]  ? __mutex_trylock_common+0x15c/0x260
[  111.499234][ T4200]  hci_le_meta_evt+0xd36/0x3ca0
[  111.504149][ T4200]  ? hci_event_packet+0x363/0x1310
[  111.509321][ T4200]  ? __lock_acquire+0x7b50/0x7b50
[  111.514392][ T4200]  ? hci_remote_host_features_evt+0x240/0x240
[  111.520500][ T4200]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  111.526167][ T4200]  ? mutex_unlock+0x10/0x10
[  111.530706][ T4200]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  111.536718][ T4200]  ? __cond_resched+0xd0/0xd0
[  111.541423][ T4200]  ? lock_chain_count+0x20/0x20
[  111.546315][ T4200]  hci_event_packet+0xe0b/0x1310
[  111.551289][ T4200]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  111.556966][ T4200]  ? rcu_lock_release+0x20/0x20
[  111.561851][ T4200]  ? hci_rx_work+0x224/0xa10
[  111.566474][ T4200]  ? __sanitizer_cov_trace_switch+0x69/0xe0
[  111.572409][ T4200]  hci_rx_work+0x255/0xa10
[  111.576868][ T4200]  process_one_work+0x867/0xff0
[  111.581769][ T4200]  ? worker_detach_from_pool+0x240/0x240
[  111.587433][ T4200]  ? lockdep_hardirqs_off+0x70/0x100
[  111.592759][ T4200]  ? _raw_spin_lock_irq+0xb7/0xf0
[  111.597844][ T4200]  ? _raw_spin_lock_irqsave+0x100/0x100
[  111.603423][ T4200]  ? wq_worker_running+0x97/0x170
[  111.608491][ T4200]  worker_thread+0xad7/0x12a0
[  111.613245][ T4200]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  111.619207][ T4200]  kthread+0x42e/0x520
[  111.623300][ T4200]  ? rcu_lock_release+0x20/0x20
[  111.628179][ T4200]  ? kthread_blkcg+0xd0/0xd0
[  111.632798][ T4200]  ret_from_fork+0x1f/0x30
[  111.637260][ T4200]  </TASK>
[  111.679902][ T4200] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  111.695282][ T4200] Bluetooth: hci3: failed to register connection device
[  112.258102][ T4704] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  112.267639][ T4704] BTRFS info (device loop1): using free space tree
[  112.274285][ T4704] BTRFS info (device loop1): has skinny extents
[  115.508376][ T4758] netlink: 'syz.2.84': attribute type 30 has an invalid length.
[  116.123894][ T4704] BTRFS error (device loop1): open_ctree failed: -12
[  116.182970][ T4763] Bluetooth: hci3: command 0x2016 tx timeout
[  116.507490][ T4369] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by udevd (4369)
[  116.582938][ T4181] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by udevd (4181)
[  116.728991][ T4771] CIFS: Attempting to mount \\127.0.0.1\share
[  116.789370][ T4786] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  117.059616][ T4788] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes)
[  117.282231][ T4771] CIFS: VFS: cifs_mount failed w/return code = -112
[  118.201394][ T4813] device syzkaller0 entered promiscuous mode
[  118.354260][ T4816] loop2: detected capacity change from 0 to 1024
[  119.427764][ T4785] loop0: detected capacity change from 0 to 32768
[  119.575899][ T4785] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.92 (4785)
[  120.080250][ T4785] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  120.199279][ T4785] BTRFS info (device loop0): using free space tree
[  120.205858][ T4785] BTRFS info (device loop0): has skinny extents
[  120.469199][ T4785] BTRFS error (device loop0): open_ctree failed: -12
[  120.839974][ T4858] batman_adv: batadv0: Adding interface: veth0
[  120.846201][ T4858] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  120.923440][ T4858] batman_adv: batadv0: Interface activated: veth0
[  120.947881][ T4858] netlink: 88 bytes leftover after parsing attributes in process `syz.2.106'.
[  120.957920][ T4858] batman_adv: batadv0: Interface deactivated: veth0
[  120.964602][ T4858] batman_adv: batadv0: Removing interface: veth0
[  121.053197][ T4858] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  121.091361][ T4858] batman_adv: batadv0: Removing interface: batadv_slave_0
[  121.122602][ T4858] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  121.154906][ T4858] batman_adv: batadv0: Removing interface: batadv_slave_1
[  121.270135][ T4869] device gretap1 entered promiscuous mode
[  121.297172][ T4849] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  121.409715][ T4828] loop1: detected capacity change from 0 to 32768
[  121.465307][ T4828] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  121.500646][ T4828] netlink: 12 bytes leftover after parsing attributes in process `syz.1.102'.
[  121.556912][ T4849] usb 4-1: Using ep0 maxpacket: 32
[  121.633129][ T4188] ocfs2: Unmounting device (7,1) on (node local)
[  121.697103][ T4849] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  121.716787][ T4849] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  121.727293][ T4849] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  121.736371][ T4849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.746737][ T4849] usb 4-1: config 0 descriptor??
[  122.582198][ T4849] hub 4-1:0.0: USB hub found
[  122.627051][ T4849] hub 4-1:0.0: 1 port detected
[  123.578293][ T4849] hub 4-1:0.0: hub_hub_status failed (err = -71)
[  123.585250][ T4849] hub 4-1:0.0: config failed, can't get hub status (err -71)
[  123.927118][ T4849] usbhid 4-1:0.0: can't add hid device: -71
[  123.933173][ T4849] usbhid: probe of 4-1:0.0 failed with error -71
[  124.123238][ T4894] netlink: 24 bytes leftover after parsing attributes in process `syz.3.116'.
[  124.771527][ T4896] loop0: detected capacity change from 0 to 736
[  124.788188][ T4849] usb 4-1: USB disconnect, device number 6
[  125.129762][ T4199] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201'
[  125.140900][ T4199] CPU: 0 PID: 4199 Comm: kworker/u5:4 Not tainted syzkaller #0
[  125.148511][ T4199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  125.158596][ T4199] Workqueue: hci4 hci_rx_work
[  125.163316][ T4199] Call Trace:
[  125.166655][ T4199]  <TASK>
[  125.169610][ T4199]  dump_stack_lvl+0x188/0x250
[  125.174327][ T4199]  ? show_regs_print_info+0x20/0x20
[  125.180164][ T4199]  ? load_image+0x410/0x410
[  125.184715][ T4199]  sysfs_create_dir_ns+0x26a/0x290
[  125.189859][ T4199]  ? sysfs_warn_dup+0xa0/0xa0
[  125.194576][ T4199]  ? do_raw_spin_unlock+0x11d/0x230
[  125.199807][ T4199]  kobject_add_internal+0x5ba/0xcd0
[  125.205043][ T4199]  kobject_add+0x160/0x230
[  125.209490][ T4199]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  125.215177][ T4199]  ? kobject_init+0x1c0/0x1c0
[  125.219899][ T4199]  ? get_device_parent+0x121/0x3e0
[  125.225041][ T4199]  device_add+0x470/0x1050
[  125.229483][ T4199]  ? device_initialize+0x2a5/0x4d0
[  125.234626][ T4199]  hci_conn_add_sysfs+0xd1/0x1e0
[  125.239597][ T4199]  le_conn_complete_evt+0xc2e/0x14d0
[  125.244942][ T4199]  ? cs_le_create_conn+0x5e0/0x5e0
[  125.250083][ T4199]  ? preempt_schedule_common+0xa5/0xd0
[  125.255665][ T4199]  ? preempt_schedule+0xbc/0xd0
[  125.260545][ T4199]  ? schedule_preempt_disabled+0x20/0x20
[  125.266313][ T4199]  ? __mutex_trylock_common+0x15c/0x260
[  125.271909][ T4199]  hci_le_meta_evt+0xd36/0x3ca0
[  125.276805][ T4199]  ? hci_event_packet+0x363/0x1310
[  125.281998][ T4199]  ? __lock_acquire+0x7b50/0x7b50
[  125.287069][ T4199]  ? hci_remote_host_features_evt+0x240/0x240
[  125.293193][ T4199]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  125.298855][ T4199]  ? mark_lock+0x94/0x320
[  125.303239][ T4199]  ? mutex_unlock+0x10/0x10
[  125.307862][ T4199]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  125.313896][ T4199]  ? lock_chain_count+0x20/0x20
[  125.318782][ T4199]  ? __rwlock_init+0x140/0x140
[  125.323662][ T4199]  hci_event_packet+0xe0b/0x1310
[  125.328643][ T4199]  ? _raw_spin_unlock+0x40/0x40
[  125.333523][ T4199]  ? rcu_lock_release+0x20/0x20
[  125.338409][ T4199]  ? hci_send_to_monitor+0x9c/0x4a0
[  125.343666][ T4199]  hci_rx_work+0x255/0xa10
[  125.348133][ T4199]  process_one_work+0x867/0xff0
[  125.353029][ T4199]  ? worker_detach_from_pool+0x240/0x240
[  125.358687][ T4199]  ? lockdep_hardirqs_off+0x70/0x100
[  125.364006][ T4199]  ? _raw_spin_lock_irq+0xb7/0xf0
[  125.369062][ T4199]  ? _raw_spin_lock_irqsave+0x100/0x100
[  125.374643][ T4199]  ? wq_worker_running+0x97/0x170
[  125.379700][ T4199]  worker_thread+0xad7/0x12a0
[  125.384467][ T4199]  kthread+0x42e/0x520
[  125.388567][ T4199]  ? rcu_lock_release+0x20/0x20
[  125.393450][ T4199]  ? kthread_blkcg+0xd0/0xd0
[  125.398075][ T4199]  ret_from_fork+0x1f/0x30
[  125.402555][ T4199]  </TASK>
[  125.432956][ T4199] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  125.447880][ T4199] Bluetooth: hci4: failed to register connection device
[  126.085981][ T4898] loop3: detected capacity change from 0 to 164
[  126.286969][ T4762] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[  127.151026][ T4919] loop3: detected capacity change from 0 to 16
[  127.184326][ T4919] erofs: (device loop3): mounted with root inode @ nid 36.
[  127.236946][   T13] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  127.261058][ T4199] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -10 in[4096, 0] out[9000]
[  127.292740][ T4919] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -10 in[4096, 0] out[4096]
[  127.361094][   T26] audit: type=1800 audit(1786328910.108:2): pid=4919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.125" name="file2" dev="loop3" ino=89 res=0 errno=0
[  127.516961][ T4763] Bluetooth: hci4: command 0x2016 tx timeout
[  127.537040][   T13] usb 1-1: Using ep0 maxpacket: 16
[  127.678976][   T13] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  127.690133][ T4762] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  127.700686][ T4925] loop3: detected capacity change from 0 to 164
[  127.707058][ T4762] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.715088][ T4762] usb 3-1: Product: syz
[  127.720588][   T13] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  127.736872][   T13] usb 1-1: config 0 interface 0 has no altsetting 0
[  127.745339][   T13] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  127.755935][ T4762] usb 3-1: Manufacturer: syz
[  127.766882][ T4762] usb 3-1: SerialNumber: syz
[  127.786906][   T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.797081][ T4762] usb 3-1: config 0 descriptor??
[  127.808995][ T4925] Unable to read rock-ridge attributes
[  127.828266][   T13] usb 1-1: config 0 descriptor??
[  127.835108][ T4925] Unable to read rock-ridge attributes
[  127.865433][ T4925] iso9660: Corrupted directory entry in block 1 of inode 1792
[  128.059199][ T4762] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  128.531486][ T4933] loop4: detected capacity change from 0 to 32768
[  128.616116][ T4933] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  128.624955][ T4933] BTRFS info (device loop4): setting nodatacow, compression disabled
[  128.633165][ T4933] BTRFS info (device loop4): max_inline at 0
[  128.639252][ T4933] BTRFS info (device loop4): using free space tree
[  128.645774][ T4933] BTRFS info (device loop4): has skinny extents
[  128.652723][   T13] usbhid 1-1:0.0: can't add hid device: -71
[  128.661416][   T13] usbhid: probe of 1-1:0.0 failed with error -71
[  128.681504][   T13] usb 1-1: USB disconnect, device number 2
[  129.424105][   T26] audit: type=1326 audit(1786328912.168:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4932 comm="syz.4.129" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2ce92ef0d9 code=0x0
[  130.477030][ T4243] Bluetooth: hci3: command 0x0409 tx timeout
[  130.690770][ T4965] loop0: detected capacity change from 0 to 164
[  130.807001][ T4762] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71
[  130.973506][ T4762] usb 3-1: USB disconnect, device number 2
[  131.531805][ T4200] Bluetooth: hci3: ACL packet for unknown connection handle 3439
[  131.616919][ T4976] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  131.667531][ T4983] loop3: detected capacity change from 0 to 2048
[  131.829726][ T4987] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  131.974644][ T4983] NILFS (loop3): nilfs_sufile_do_free: segment 9 is already clean
[  132.007208][ T4976] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  132.022044][ T4976] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  132.041542][ T4976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.071287][ T4976] usb 1-1: config 0 descriptor??
[  132.129667][ T4976] pwc: Askey VC010 type 2 USB webcam detected.
[  132.340848][ T4976] pwc: send_video_command error -71
[  132.346125][ T4976] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  132.364464][ T4976] Philips webcam: probe of 1-1:0.0 failed with error -71
[  132.377344][ T4994] loop3: detected capacity change from 0 to 128
[  132.406707][ T4976] usb 1-1: USB disconnect, device number 3
[  132.449234][ T4994] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 4)
[  132.547964][ T4994] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  132.574632][ T4994] FAT-fs (loop3): Filesystem has been set read-only
[  132.790644][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  132.797037][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  132.916982][ T4976] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  134.156942][ T4762] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  134.203258][ T5008] loop2: detected capacity change from 0 to 164
[  134.247014][ T4976] usb 1-1: unable to read config index 0 descriptor/all
[  134.267067][ T4976] usb 1-1: can't read configurations, error -71
[  134.294856][ T5013] netlink: 88 bytes leftover after parsing attributes in process `syz.0.148'.
[  134.427001][ T4762] usb 5-1: Using ep0 maxpacket: 16
[  134.547317][ T4762] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  134.571936][ T4762] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[  134.602105][ T4762] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  134.769228][ T4762] usb 5-1: config 0 interface 0 has no altsetting 0
[  134.848809][ T4762] usb 5-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00
[  134.952731][ T4762] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.195182][ T4762] usb 5-1: config 0 descriptor??
[  135.394719][ T5024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.151'.
[  135.425790][ T5026] loop2: detected capacity change from 0 to 24
[  135.771848][ T4762] hid-generic 0003:04D8:00DF.0001: item fetching failed at offset 6/7
[  135.813612][ T4762] hid-generic: probe of 0003:04D8:00DF.0001 failed with error -22
[  135.980781][ T4200] Bluetooth: hci2: ACL packet for unknown connection handle 3439
[  136.026453][ T4762] usb 5-1: USB disconnect, device number 3
[  136.986245][ T5050] netlink: 88 bytes leftover after parsing attributes in process `syz.0.160'.
[  139.103738][ T4200] Bluetooth: hci4: ACL packet for unknown connection handle 3439
[  140.087446][ T5082] loop2: detected capacity change from 0 to 16
[  140.161863][ T5062] loop0: detected capacity change from 0 to 32768
[  140.214784][ T5082] erofs: (device loop2): mounted with root inode @ nid 36.
[  140.232689][ T5062] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  140.253909][ T4200] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -10 in[4096, 0] out[9000]
[  140.256750][ T5062] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  140.291719][ T5082] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -10 in[4096, 0] out[4096]
[  140.316145][   T26] audit: type=1800 audit(1786328923.058:4): pid=5082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.171" name="file2" dev="loop2" ino=89 res=0 errno=0
[  140.394218][ T5062] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  140.490149][ T4977] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  140.507556][ T4977] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  140.659932][ T4977] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 152ms
[  140.697133][ T4977] gfs2: fsid=syz:syz.0: jid=0: Done
[  140.709614][ T5062] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  140.909990][ T5094] netlink: 88 bytes leftover after parsing attributes in process `syz.4.172'.
[  141.398553][ T5102] netlink: 24 bytes leftover after parsing attributes in process `syz.2.174'.
[  141.619634][ T5105] process 'syz.3.175' launched './file0' with NULL argv: empty string added
[  143.271514][ T5118] loop1: detected capacity change from 0 to 64
[  143.818386][ T4200] Bluetooth: hci3: ACL packet for unknown connection handle 3439
[  144.175357][ T5118] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing
[  144.475740][ T5118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.181'.
[  145.718266][ T4380] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  146.097229][ T4380] usb 2-1: config 0 has an invalid interface number: 117 but max is 0
[  146.714743][ T4380] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  146.804849][ T4380] usb 2-1: config 0 has no interface number 0
[  146.811435][ T4380] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  147.448983][ T4380] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  147.462245][ T4380] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  147.627174][ T4380] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  147.648887][ T4380] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.687862][ T4380] usb 2-1: Product: syz
[  147.692093][ T4380] usb 2-1: Manufacturer: syz
[  147.696722][ T4380] usb 2-1: SerialNumber: syz
[  147.732619][ T4380] usb 2-1: config 0 descriptor??
[  148.513924][ T4200] Bluetooth: hci4: ACL packet for unknown connection handle 3439
[  148.539159][ T4380] usbtouchscreen: probe of 2-1:0.117 failed with error -71
[  148.784642][ T4380] usb 2-1: USB disconnect, device number 5
[  149.158811][ T5171] ieee802154 phy0 wpan0: encryption failed: -22
[  150.212852][ T5193] capability: warning: `syz.4.202' uses 32-bit capabilities (legacy support in use)
[  150.222713][ T5190] netlink: 'syz.0.201': attribute type 1 has an invalid length.
[  150.271537][ T5190] netlink: 'syz.0.201': attribute type 2 has an invalid length.
[  150.294126][ T5195] loop2: detected capacity change from 0 to 64
[  150.349524][ T5195] BFS-fs: bfs_fill_super(): Impossible last inode number 524447 > 513 on loop2
[  151.467643][ T4200] Bluetooth: hci1: ACL packet for unknown connection handle 3439
[  151.479829][ T5216] loop4: detected capacity change from 0 to 1024
[  152.651263][ T5232] fuse: Bad value for 'fd'
[  154.862367][ T5256] autofs4:pid:5256:autofs_fill_super: called with bogus options
[  155.037665][ T5254] loop4: detected capacity change from 0 to 32768
[  155.107348][   T21] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[  155.131237][ T5254] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.223 (5254)
[  155.527486][   T21] usb 1-1: config 0 has an invalid interface number: 41 but max is 0
[  155.562129][   T21] usb 1-1: config 0 has no interface number 0
[  155.628006][   T21] usb 1-1: config 0 interface 41 has no altsetting 0
[  155.720527][ T5254] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  155.729273][ T5254] BTRFS info (device loop4): use zlib compression, level 3
[  155.736572][ T5254] BTRFS info (device loop4): turning on sync discard
[  155.743438][ T5254] BTRFS info (device loop4): using free space tree
[  155.750259][ T5254] BTRFS info (device loop4): has skinny extents
[  155.878653][   T21] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  155.899617][   T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.939870][   T21] usb 1-1: Product: syz
[  155.944125][   T21] usb 1-1: Manufacturer: syz
[  155.966899][   T21] usb 1-1: SerialNumber: syz
[  155.971681][ T5254] BTRFS info (device loop4): enabling ssd optimizations
[  155.984469][   T21] usb 1-1: config 0 descriptor??
[  155.997176][   T26] audit: type=1800 audit(1786328938.748:5): pid=5254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.223" name="file1" dev="loop4" ino=260 res=0 errno=0
[  156.937205][   T21] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[  157.232946][ T5288] loop1: detected capacity change from 0 to 512
[  157.559694][ T5286] loop2: detected capacity change from 0 to 4096
[  157.596289][   T21] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[  157.608194][   T21] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71
[  157.624666][ T5288] EXT4-fs error (device loop1): ext4_orphan_get:1432: comm syz.1.228: bad orphan inode 13
[  157.645138][   T21] CoreChips: probe of 1-1:0.41 failed with error -71
[  157.655522][ T5286] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512)
[  157.661698][ T5288] ext4_test_bit(bit=12, block=4) = 1
[  157.767336][ T5288] is_bad_inode(inode)=0
[  157.771998][ T5288] NEXT_ORPHAN(inode)=0
[  157.776348][ T5288] max_ino=32
[  157.857238][ T5288] i_nlink=1
[  157.876171][ T5288] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  158.364731][ T5299] lo speed is unknown, defaulting to 1000
[  158.405347][ T5299] lo speed is unknown, defaulting to 1000
[  158.430554][ T5299] lo speed is unknown, defaulting to 1000
[  158.442999][   T21] usb 1-1: USB disconnect, device number 6
[  159.487521][   T21] lo speed is unknown, defaulting to 1000
[  159.494965][ T5299] infiniband syz0: set active
[  159.500066][ T5299] infiniband syz0: added lo
[  159.526568][ T5299] infiniband syz0: Couldn't open port 1
[  159.623798][ T5299] RDS/IB: syz0: added
[  159.638976][ T5299] smc: adding ib device syz0 with port count 1
[  159.667304][ T5299] smc:    ib device syz0 port 1 has pnetid 
[  159.676427][   T21] lo speed is unknown, defaulting to 1000
[  159.785284][ T5299] lo speed is unknown, defaulting to 1000
[  160.056932][ T5290] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  160.073406][ T5308] netlink: 'syz.3.233': attribute type 1 has an invalid length.
[  160.418275][ T4200] Bluetooth: hci1: ACL packet for unknown connection handle 3439
[  161.296403][ T5299] lo speed is unknown, defaulting to 1000
[  161.577113][   T21] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[  163.417162][   T21] usb 2-1: config 0 has an invalid interface number: 41 but max is 0
[  163.659332][   T21] usb 2-1: config 0 has no interface number 0
[  163.665498][   T21] usb 2-1: config 0 interface 41 has no altsetting 0
[  163.802191][ T5351] loop4: detected capacity change from 0 to 4096
[  163.815682][ T5299] lo speed is unknown, defaulting to 1000
[  163.825257][ T5349] loop2: detected capacity change from 0 to 4096
[  163.850266][   T21] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  163.869671][   T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.887005][   T21] usb 2-1: Product: syz
[  163.898491][   T21] usb 2-1: Manufacturer: syz
[  163.912796][   T21] usb 2-1: SerialNumber: syz
[  163.947826][   T21] usb 2-1: config 0 descriptor??
[  163.954129][ T5353] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  164.118511][ T5351] EXT4-fs (loop4): Test dummy encryption mode enabled
[  164.125433][ T5351] EXT4-fs (loop4): Ignoring removed orlov option
[  164.171554][ T5299] lo speed is unknown, defaulting to 1000
[  164.177661][ T5351] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback.
[  164.223035][   T21] CoreChips: probe of 2-1:0.41 failed with error -71
[  164.321417][   T21] usb 2-1: USB disconnect, device number 6
[  165.346549][ T5351] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  165.775218][ T5373] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  165.785405][ T5373] overlayfs: upper fs does not support tmpfile.
[  165.794086][ T5373] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  166.187906][ T5376] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  166.875313][ T5299] lo speed is unknown, defaulting to 1000
[  166.989069][ T5388] Zero length message leads to an empty skb
[  167.247067][ T4200] Bluetooth: hci3: ACL packet for unknown connection handle 3439
[  169.576985][ T4291] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  169.773840][ T5418] jffs2: notice: (5418) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  169.947173][ T4291] usb 3-1: Using ep0 maxpacket: 8
[  170.107788][ T4291] usb 3-1: unable to get BOS descriptor or descriptor too short
[  170.217230][ T4291] usb 3-1: config 1 has an invalid descriptor of length 156, skipping remainder of the config
[  170.265251][ T4291] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  170.305392][ T4291] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  170.507193][ T4291] usb 3-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40
[  170.524230][ T4291] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.562792][ T4291] usb 3-1: Product: syz
[  170.573060][ T4291] usb 3-1: Manufacturer: syz
[  170.584066][ T4291] usb 3-1: SerialNumber: syz
[  170.843587][ T5406] udc-core: couldn't find an available UDC or it's busy
[  170.852788][ T5415] loop4: detected capacity change from 0 to 131072
[  170.872164][ T5406] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  170.914884][ T5415] F2FS-fs (loop4): invalid crc value
[  170.960125][ T5415] F2FS-fs (loop4): Found nat_bits in checkpoint
[  171.012801][ T5415] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2
[  171.025768][ T5415] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  171.081846][   T26] audit: type=1804 audit(1786328953.828:6): pid=5415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.260" name="/newroot/52/file1/file1" dev="loop4" ino=7 res=1 errno=0
[  171.110668][ T4291] usb 3-1: interface 2 not found
[  171.160347][ T4291] usb 3-1: USB disconnect, device number 3
[  171.493415][ T4200] Bluetooth: hci2: ACL packet for unknown connection handle 3439
[  172.458717][ T5452] loop1: detected capacity change from 0 to 164
[  173.507699][ T5466] jffs2: notice: (5466) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  174.264174][ T5466] jffs2: fork failed for JFFS2 garbage collect thread: 4
[  174.965901][ T4200] Bluetooth: hci4: ACL packet for unknown connection handle 3439
[  176.126970][   T21] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  176.348264][ T5498] loop2: detected capacity change from 0 to 164
[  177.235117][   T21] usb 2-1: device descriptor read/64, error -71
[  177.463758][ T5514] device syzkaller0 entered promiscuous mode
[  177.507593][   T21] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  177.834734][ T5508] loop4: detected capacity change from 0 to 4096
[  177.983787][ T5508] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512)
[  179.104623][ T5525] vivid-000: disconnect
[  179.174940][ T5522] vivid-000: reconnect
[  179.314898][ T5534] loop1: detected capacity change from 0 to 164
[  179.356569][ T5540] trusted_key: encrypted_key: master key parameter '' is invalid
[  179.497000][ T4200] Bluetooth: hci4: ACL packet for unknown connection handle 3439
[  180.603254][ T5554] loop2: detected capacity change from 0 to 8
[  182.086926][   T21] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  182.847433][ T5553] loop4: detected capacity change from 0 to 32768
[  183.167167][ T5553] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.298 (5553)
[  183.226478][ T5553] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  183.245964][ T5553] BTRFS info (device loop4): using free space tree
[  183.257290][ T5553] BTRFS info (device loop4): has skinny extents
[  183.417117][   T21] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  183.436656][   T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.438493][ T5593] kvm: pic: non byte write
[  183.453428][   T21] usb 3-1: Product: syz
[  183.467956][   T21] usb 3-1: Manufacturer: syz
[  183.477105][   T21] usb 3-1: SerialNumber: syz
[  183.489152][   T21] usb 3-1: config 0 descriptor??
[  183.494306][ T5553] BTRFS info (device loop4): enabling ssd optimizations
[  183.539229][   T21] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  183.597172][   T21] gspca_sunplus: reg_r err -71
[  183.612458][   T21] usb 3-1: USB disconnect, device number 4
[  183.705318][ T5601] vivid-004: disconnect
[  183.779824][ T5604] netlink: 16 bytes leftover after parsing attributes in process `syz.0.309'.
[  184.067076][ T4200] Bluetooth: hci2: ACL packet for unknown connection handle 3439
[  184.492935][ T5600] vivid-004: reconnect
[  185.168801][ T4724] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  185.189128][ T5616] device syzkaller0 entered promiscuous mode
[  185.557478][ T4724] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  185.739430][ T4724] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  185.751955][ T4724] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  185.764318][ T4724] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  186.061777][ T4724] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  186.071452][ T4724] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.554068][ T5636] loop4: detected capacity change from 0 to 512
[  186.600267][ T5634] netlink: 'syz.0.319': attribute type 1 has an invalid length.
[  186.635085][ T5618] loop2: detected capacity change from 0 to 40427
[  186.642459][ T5634] netlink: 'syz.0.319': attribute type 2 has an invalid length.
[  187.114806][ T5618] F2FS-fs (loop2): Invalid log_blocksize (4294967295), supports only 12
[  187.339629][ T5618] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  187.462403][ T5618] F2FS-fs (loop2): invalid crc value
[  187.505797][ T5636] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback.
[  187.520174][ T5636] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  187.536238][ T5618] F2FS-fs (loop2): Found nat_bits in checkpoint
[  187.577390][ T4724] gud 2-1:1.0: USB-1: Failed to add properties (ret=-5)
[  187.607052][ T4724] gud 2-1:1.0: Failed to get connectors (error=-5)
[  187.615003][ T4724] gud: probe of 2-1:1.0 failed with error -5
[  187.789091][ T4200] Bluetooth: hci2: ACL packet for unknown connection handle 3439
[  188.758589][   T13] usb 2-1: USB disconnect, device number 9
[  189.010535][ T5658] device syzkaller0 entered promiscuous mode
[  190.657082][ T4229] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  191.348097][ T4229] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  191.418187][ T5695] jffs2: notice: (5695) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  191.437771][ T4724] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  191.488822][ T4229] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  191.560861][ T4229] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  191.606991][ T4229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.638423][ T4229] usb 5-1: config 0 descriptor??
[  191.687033][ T4724] usb 3-1: Using ep0 maxpacket: 32
[  191.807325][ T4724] usb 3-1: config 1 interface 0 altsetting 211 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  191.827553][ T4724] usb 3-1: config 1 interface 0 altsetting 211 endpoint 0x81 has invalid wMaxPacketSize 0
[  191.838039][ T4724] usb 3-1: config 1 interface 0 has no altsetting 0
[  192.017180][ T4724] usb 3-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.40
[  192.034044][ T4724] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.055717][ T4724] usb 3-1: Product: syz
[  192.062438][ T4724] usb 3-1: Manufacturer: syz
[  192.074300][ T4724] usb 3-1: SerialNumber: syz
[  192.158584][ T4229] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0
[  192.175661][ T4229] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0
[  192.221448][ T4229] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0
[  192.229418][ T4229] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0
[  192.368897][ T4229] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0
[  192.387051][ T4229] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0
[  192.393902][ T4229] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0
[  193.270939][ T4200] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[  193.280762][ T4200] CPU: 1 PID: 4200 Comm: kworker/u5:5 Not tainted syzkaller #0
[  193.288408][ T4200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  193.298466][ T4200] Workqueue: hci0 hci_rx_work
[  193.303183][ T4200] Call Trace:
[  193.306489][ T4200]  <TASK>
[  193.309423][ T4200]  dump_stack_lvl+0x188/0x250
[  193.314130][ T4200]  ? show_regs_print_info+0x20/0x20
[  193.319355][ T4200]  ? load_image+0x410/0x410
[  193.323890][ T4200]  sysfs_create_dir_ns+0x26a/0x290
[  193.329008][ T4200]  ? sysfs_warn_dup+0xa0/0xa0
[  193.333715][ T4200]  kobject_add_internal+0x5ba/0xcd0
[  193.338941][ T4200]  kobject_add+0x160/0x230
[  193.343403][ T4200]  ? kobject_init+0x1c0/0x1c0
[  193.348121][ T4200]  ? __raw_spin_lock_init+0x41/0x100
[  193.353447][ T4200]  ? klist_children_get+0x50/0x50
[  193.358566][ T4200]  ? get_device_parent+0x121/0x3e0
[  193.363686][ T4200]  device_add+0x470/0x1050
[  193.368120][ T4200]  hci_conn_add_sysfs+0xd1/0x1e0
[  193.373071][ T4200]  le_conn_complete_evt+0xc2e/0x14d0
[  193.378377][ T4200]  ? cs_le_create_conn+0x5e0/0x5e0
[  193.383495][ T4200]  ? mark_lock+0x94/0x320
[  193.387839][ T4200]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  193.393861][ T4200]  hci_le_meta_evt+0xd36/0x3ca0
[  193.398753][ T4200]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  193.404394][ T4200]  ? lockdep_hardirqs_on+0x94/0x140
[  193.409601][ T4200]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  193.415261][ T4200]  ? __mutex_unlock_slowpath+0xd5/0x6c0
[  193.420845][ T4200]  ? hci_remote_host_features_evt+0x240/0x240
[  193.426940][ T4200]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  193.432587][ T4200]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  193.438578][ T4200]  ? mutex_unlock+0x10/0x10
[  193.443115][ T4200]  ? lock_chain_count+0x20/0x20
[  193.447999][ T4200]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  193.453637][ T4200]  hci_event_packet+0xe0b/0x1310
[  193.458699][ T4200]  ? __hci_send_to_channel+0x1d1/0x280
[  193.464187][ T4200]  ? hci_send_to_monitor+0x27/0x4a0
[  193.469390][ T4200]  ? rcu_lock_release+0x20/0x20
[  193.474251][ T4200]  ? kasan_check_range+0x84/0x290
[  193.479310][ T4200]  ? hci_send_to_monitor+0x9c/0x4a0
[  193.484699][ T4200]  hci_rx_work+0x255/0xa10
[  193.489175][ T4200]  process_one_work+0x867/0xff0
[  193.494060][ T4200]  ? worker_detach_from_pool+0x240/0x240
[  193.499720][ T4200]  ? lockdep_hardirqs_off+0x70/0x100
[  193.505025][ T4200]  ? _raw_spin_lock_irq+0xb7/0xf0
[  193.510052][ T4200]  ? _raw_spin_lock_irqsave+0x100/0x100
[  193.515611][ T4200]  ? wq_worker_running+0x97/0x170
[  193.520640][ T4200]  worker_thread+0xad7/0x12a0
[  193.525339][ T4200]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  193.531305][ T4200]  kthread+0x42e/0x520
[  193.535394][ T4200]  ? rcu_lock_release+0x20/0x20
[  193.540259][ T4200]  ? kthread_blkcg+0xd0/0xd0
[  193.544862][ T4200]  ret_from_fork+0x1f/0x30
[  193.549298][ T4200]  </TASK>
[  193.557721][ T4724] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input10
[  193.566961][ T4200] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  193.580367][ T4200] Bluetooth: hci0: failed to register connection device
[  193.593620][ T4229] pyra 0003:1E7D:2CF6.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0
[  193.620686][ T5710] netlink: 'syz.3.344': attribute type 3 has an invalid length.
[  193.627707][ T3544] bcm5974 3-1:1.0: could not read from device
[  193.762614][ T5710] netlink: 'syz.3.344': attribute type 3 has an invalid length.
[  193.817638][ T4229] pyra 0003:1E7D:2CF6.0002: couldn't init struct pyra_device
[  193.825426][ T4229] pyra 0003:1E7D:2CF6.0002: couldn't install mouse
[  194.211451][ T4229] pyra: probe of 0003:1E7D:2CF6.0002 failed with error -71
[  194.235188][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  194.241599][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  194.261904][ T4724] usb 3-1: USB disconnect, device number 5
[  194.282554][ T4229] usb 5-1: USB disconnect, device number 5
[  194.466548][ T5717] loop1: detected capacity change from 0 to 164
[  194.498346][ T5716] device syzkaller0 entered promiscuous mode
[  195.532227][ T5729] fido_id[5729]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  195.596947][ T4291] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  195.675525][ T4977] Bluetooth: hci0: command 0x2016 tx timeout
[  195.931579][ T4291] usb 1-1: Using ep0 maxpacket: 32
[  196.184259][ T4203] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[  196.195774][ T4203] CPU: 0 PID: 4203 Comm: kworker/u5:7 Not tainted syzkaller #0
[  196.203366][ T4203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  196.213474][ T4203] Workqueue: hci1 hci_rx_work
[  196.218216][ T4203] Call Trace:
[  196.221540][ T4203]  <TASK>
[  196.224509][ T4203]  dump_stack_lvl+0x188/0x250
[  196.229228][ T4203]  ? show_regs_print_info+0x20/0x20
[  196.234463][ T4203]  ? load_image+0x410/0x410
[  196.239030][ T4203]  sysfs_create_dir_ns+0x26a/0x290
[  196.244181][ T4203]  ? sysfs_warn_dup+0xa0/0xa0
[  196.248883][ T4203]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  196.254897][ T4203]  ? do_raw_spin_unlock+0x11d/0x230
[  196.260135][ T4203]  kobject_add_internal+0x5ba/0xcd0
[  196.265393][ T4203]  kobject_add+0x160/0x230
[  196.269846][ T4203]  ? kobject_init+0x1c0/0x1c0
[  196.274566][ T4203]  ? __raw_spin_lock_init+0x41/0x100
[  196.279882][ T4203]  ? klist_children_get+0x50/0x50
[  196.284938][ T4203]  ? get_device_parent+0x121/0x3e0
[  196.290081][ T4203]  device_add+0x470/0x1050
[  196.294532][ T4203]  hci_conn_add_sysfs+0xd1/0x1e0
[  196.299503][ T4203]  le_conn_complete_evt+0xc2e/0x14d0
[  196.304821][ T4203]  ? cs_le_create_conn+0x5e0/0x5e0
[  196.309967][ T4203]  ? __mutex_trylock_common+0x15c/0x260
[  196.315552][ T4203]  hci_le_meta_evt+0xd36/0x3ca0
[  196.320447][ T4203]  ? hci_event_packet+0x363/0x1310
[  196.325599][ T4203]  ? __lock_acquire+0x7b50/0x7b50
[  196.330664][ T4203]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  196.336688][ T4203]  ? lock_chain_count+0x20/0x20
[  196.341601][ T4203]  ? hci_remote_host_features_evt+0x240/0x240
[  196.347708][ T4203]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  196.353378][ T4203]  ? mutex_unlock+0x10/0x10
[  196.357912][ T4203]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  196.363589][ T4203]  hci_event_packet+0xe0b/0x1310
[  196.368568][ T4203]  ? _raw_spin_unlock+0x40/0x40
[  196.373452][ T4203]  ? rcu_lock_release+0x20/0x20
[  196.378345][ T4203]  ? hci_send_to_monitor+0x9c/0x4a0
[  196.383605][ T4203]  hci_rx_work+0x255/0xa10
[  196.388074][ T4203]  process_one_work+0x867/0xff0
[  196.392977][ T4203]  ? worker_detach_from_pool+0x240/0x240
[  196.398648][ T4203]  ? lockdep_hardirqs_off+0x70/0x100
[  196.403978][ T4203]  ? _raw_spin_lock_irq+0xb7/0xf0
[  196.409029][ T4203]  ? _raw_spin_lock_irqsave+0x100/0x100
[  196.414606][ T4203]  ? wq_worker_running+0x97/0x170
[  196.419681][ T4203]  worker_thread+0xad7/0x12a0
[  196.424410][ T4203]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  196.430345][ T4203]  kthread+0x42e/0x520
[  196.434438][ T4203]  ? rcu_lock_release+0x20/0x20
[  196.439319][ T4203]  ? kthread_blkcg+0xd0/0xd0
[  196.443938][ T4203]  ret_from_fork+0x1f/0x30
[  196.448407][ T4203]  </TASK>
[  196.463976][ T4724] Bluetooth: hci3: command 0x0406 tx timeout
[  196.473045][ T4724] Bluetooth: hci1: command 0x0406 tx timeout
[  196.479383][ T4203] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  196.493907][ T4203] Bluetooth: hci1: failed to register connection device
[  196.512914][ T4762] Bluetooth: hci2: command 0x0406 tx timeout
[  196.955540][ T4291] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  196.966036][ T4291] usb 1-1: config 0 has no interfaces?
[  196.980523][ T5761] loop2: detected capacity change from 0 to 164
[  196.983797][ T4762] Bluetooth: hci4: command 0x0406 tx timeout
[  197.055970][ T5766] loop4: detected capacity change from 0 to 256
[  197.217085][ T4291] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  197.247190][ T4291] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.292409][ T4291] usb 1-1: Product: syz
[  197.310947][ T4291] usb 1-1: Manufacturer: syz
[  197.315627][ T4291] usb 1-1: SerialNumber: syz
[  197.321307][ T5773] device syzkaller0 entered promiscuous mode
[  197.349619][ T4291] usb 1-1: config 0 descriptor??
[  197.616988][ T4229] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  197.750779][ T4977] Bluetooth: hci0: command 0x0406 tx timeout
[  197.833289][ T5785] netlink: 52 bytes leftover after parsing attributes in process `syz.2.365'.
[  198.093079][ T5785] IPVS: Unknown mcast interface: vetN1_macvtap
[  198.137154][ T4229] usb 2-1: Using ep0 maxpacket: 32
[  198.257184][ T4229] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[  198.291074][ T4229] usb 2-1: config 0 has no interface number 0
[  198.334509][ T4229] usb 2-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 255
[  198.377291][ T4229] usb 2-1: config 0 interface 184 has no altsetting 0
[  198.395579][ T5800] jffs2: notice: (5800) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  198.546928][ T4977] Bluetooth: hci1: command 0x2016 tx timeout
[  198.617439][ T4229] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  198.628144][ T4229] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.636714][ T4229] usb 2-1: Product: syz
[  198.641802][ T4229] usb 2-1: Manufacturer: syz
[  198.646549][ T4229] usb 2-1: SerialNumber: syz
[  198.929234][ T4229] usb 2-1: config 0 descriptor??
[  198.978935][ T5772] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  198.998545][ T4229] smsc75xx v1.0.0
[  199.373162][ T4200] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201'
[  199.383440][ T4200] CPU: 1 PID: 4200 Comm: kworker/u5:5 Not tainted syzkaller #0
[  199.391027][ T4200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  199.401108][ T4200] Workqueue: hci3 hci_rx_work
[  199.405825][ T4200] Call Trace:
[  199.409239][ T4200]  <TASK>
[  199.412196][ T4200]  dump_stack_lvl+0x188/0x250
[  199.416909][ T4200]  ? show_regs_print_info+0x20/0x20
[  199.422139][ T4200]  ? load_image+0x410/0x410
[  199.426680][ T4200]  sysfs_create_dir_ns+0x26a/0x290
[  199.431821][ T4200]  ? sysfs_warn_dup+0xa0/0xa0
[  199.436544][ T4200]  kobject_add_internal+0x5ba/0xcd0
[  199.441800][ T4200]  kobject_add+0x160/0x230
[  199.446265][ T4200]  ? kobject_init+0x1c0/0x1c0
[  199.450997][ T4200]  ? __raw_spin_lock_init+0x41/0x100
[  199.456313][ T4200]  ? klist_children_get+0x50/0x50
[  199.461371][ T4200]  ? get_device_parent+0x121/0x3e0
[  199.466528][ T4200]  device_add+0x470/0x1050
[  199.470979][ T4200]  hci_conn_add_sysfs+0xd1/0x1e0
[  199.475954][ T4200]  le_conn_complete_evt+0xc2e/0x14d0
[  199.481280][ T4200]  ? cs_le_create_conn+0x5e0/0x5e0
[  199.486417][ T4200]  ? finish_lock_switch+0x12d/0x290
[  199.491656][ T4200]  ? __mutex_trylock_common+0x15c/0x260
[  199.497238][ T4200]  hci_le_meta_evt+0xd36/0x3ca0
[  199.502128][ T4200]  ? hci_event_packet+0x363/0x1310
[  199.507271][ T4200]  ? __lock_acquire+0x7b50/0x7b50
[  199.512337][ T4200]  ? hci_remote_host_features_evt+0x240/0x240
[  199.518443][ T4200]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  199.524111][ T4200]  ? mark_lock+0x94/0x320
[  199.528464][ T4200]  ? mutex_unlock+0x10/0x10
[  199.533011][ T4200]  ? mark_lock+0x94/0x320
[  199.537367][ T4200]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  199.543390][ T4200]  ? __cond_resched+0xd0/0xd0
[  199.548100][ T4200]  hci_event_packet+0xe0b/0x1310
[  199.553078][ T4200]  ? rcu_lock_release+0x20/0x20
[  199.557962][ T4200]  ? hci_rx_work+0x248/0xa10
[  199.562582][ T4200]  hci_rx_work+0x255/0xa10
[  199.567044][ T4200]  process_one_work+0x867/0xff0
[  199.571939][ T4200]  ? worker_detach_from_pool+0x240/0x240
[  199.577598][ T4200]  ? lockdep_hardirqs_off+0x70/0x100
[  199.583007][ T4200]  ? _raw_spin_lock_irq+0xb7/0xf0
[  199.588117][ T4200]  ? _raw_spin_lock_irqsave+0x100/0x100
[  199.593694][ T4200]  ? wq_worker_running+0x97/0x170
[  199.598746][ T4200]  worker_thread+0xad7/0x12a0
[  199.603474][ T4200]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  199.609412][ T4200]  kthread+0x42e/0x520
[  199.613515][ T4200]  ? rcu_lock_release+0x20/0x20
[  199.618401][ T4200]  ? kthread_blkcg+0xd0/0xd0
[  199.623030][ T4200]  ret_from_fork+0x1f/0x30
[  199.627594][ T4200]  </TASK>
[  200.618458][ T4200] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  200.631822][ T4200] Bluetooth: hci3: failed to register connection device
[  200.659743][ T4977] usb 1-1: USB disconnect, device number 7
[  200.804244][ T5765] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  201.312759][ T5825] ALSA: mixer_oss: invalid OSS volume 'OGADá¿CaptuOª'.â‹L*8ŒP88�re'
[  201.321179][ T5825] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžq
Ó†ØÈÌONEOUT'
[  201.332190][ T4229] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  201.803453][ T4229] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  201.871742][ T4229] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  201.947043][ T4229] smsc75xx: probe of 2-1:0.184 failed with error -71
[  202.052269][ T4229] usb 2-1: USB disconnect, device number 10
[  202.188895][ T5844] jffs2: notice: (5844) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  202.819327][ T4229] Bluetooth: hci3: command 0x2016 tx timeout
[  202.834134][ T4200] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201'
[  202.843880][ T4200] CPU: 1 PID: 4200 Comm: kworker/u5:5 Not tainted syzkaller #0
[  202.851481][ T4200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  202.861562][ T4200] Workqueue: hci4 hci_rx_work
[  202.866301][ T4200] Call Trace:
[  202.869607][ T4200]  <TASK>
[  202.872565][ T4200]  dump_stack_lvl+0x188/0x250
[  202.877281][ T4200]  ? show_regs_print_info+0x20/0x20
[  202.882511][ T4200]  ? load_image+0x410/0x410
[  202.887083][ T4200]  sysfs_create_dir_ns+0x26a/0x290
[  202.892227][ T4200]  ? sysfs_warn_dup+0xa0/0xa0
[  202.897078][ T4200]  ? do_raw_spin_unlock+0x11d/0x230
[  202.902329][ T4200]  kobject_add_internal+0x5ba/0xcd0
[  202.907584][ T4200]  kobject_add+0x160/0x230
[  202.912049][ T4200]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  202.917718][ T4200]  ? kobject_init+0x1c0/0x1c0
[  202.922448][ T4200]  ? get_device_parent+0x121/0x3e0
[  202.927598][ T4200]  device_add+0x470/0x1050
[  202.932057][ T4200]  hci_conn_add_sysfs+0xd1/0x1e0
[  202.937029][ T4200]  le_conn_complete_evt+0xc2e/0x14d0
[  202.942356][ T4200]  ? cs_le_create_conn+0x5e0/0x5e0
[  202.947518][ T4200]  hci_le_meta_evt+0xd36/0x3ca0
[  202.952420][ T4200]  ? mark_lock+0x94/0x320
[  202.956794][ T4200]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  202.962839][ T4200]  ? __cond_resched+0xd0/0xd0
[  202.967578][ T4200]  ? lock_chain_count+0x20/0x20
[  202.972472][ T4200]  ? hci_remote_host_features_evt+0x240/0x240
[  202.978585][ T4200]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  202.984248][ T4200]  ? lockdep_hardirqs_on+0x94/0x140
[  202.989481][ T4200]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  202.995161][ T4200]  ? hci_event_packet+0x5b7/0x1310
[  203.000316][ T4200]  hci_event_packet+0xe0b/0x1310
[  203.005288][ T4200]  ? lockdep_hardirqs_on+0x94/0x140
[  203.010527][ T4200]  ? rcu_lock_release+0x20/0x20
[  203.015421][ T4200]  ? hci_rx_work+0x101/0xa10
[  203.020076][ T4200]  ? hci_rx_work+0x139/0xa10
[  203.024726][ T4200]  ? kasan_check_range+0x84/0x290
[  203.029800][ T4200]  hci_rx_work+0x255/0xa10
[  203.034259][ T4200]  process_one_work+0x867/0xff0
[  203.039153][ T4200]  ? worker_detach_from_pool+0x240/0x240
[  203.044815][ T4200]  ? lockdep_hardirqs_off+0x70/0x100
[  203.050142][ T4200]  ? _raw_spin_lock_irq+0xb7/0xf0
[  203.055198][ T4200]  ? _raw_spin_lock_irqsave+0x100/0x100
[  203.060775][ T4200]  ? wq_worker_running+0x97/0x170
[  203.065830][ T4200]  worker_thread+0xad7/0x12a0
[  203.070554][ T4200]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  203.076487][ T4200]  kthread+0x42e/0x520
[  203.080589][ T4200]  ? rcu_lock_release+0x20/0x20
[  203.085473][ T4200]  ? kthread_blkcg+0xd0/0xd0
[  203.090103][ T4200]  ret_from_fork+0x1f/0x30
[  203.094571][ T4200]  </TASK>
[  203.165403][ T5859] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem
[  203.508309][ T4200] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  203.521817][ T4200] Bluetooth: hci4: failed to register connection device
[  203.705995][ T5867] input: syz0 as /devices/virtual/input/input11
[  203.806653][ T5862] loop2: detected capacity change from 0 to 164
[  204.070612][ T5856] svc: failed to register nfsdv3 RPC service (errno 512).
[  204.101531][ T5856] svc: failed to register nfsaclv3 RPC service (errno 512).
[  204.258078][ T4762] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  204.417007][ T4724] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  204.490275][ T5880] device syzkaller0 entered promiscuous mode
[  204.647226][ T4762] usb 5-1: config 0 has an invalid interface number: 69 but max is 0
[  204.657001][ T4724] usb 2-1: Using ep0 maxpacket: 32
[  204.681930][ T4762] usb 5-1: config 0 has no interface number 0
[  204.689754][ T4762] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  204.768059][ T4762] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  204.779757][ T4724] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  204.823284][ T4191] ==================================================================
[  204.832338][ T4191] BUG: KASAN: use-after-free in nfsd_shutdown_threads+0x89/0x1a0
[  204.840085][ T4191] Write of size 4 at addr ffff88805f604850 by task syz-executor/4191
[  204.848150][ T4191] 
[  204.850489][ T4191] CPU: 1 PID: 4191 Comm: syz-executor Not tainted syzkaller #0
[  204.858034][ T4191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  204.868094][ T4191] Call Trace:
[  204.871377][ T4191]  <TASK>
[  204.874309][ T4191]  dump_stack_lvl+0x188/0x250
[  204.879109][ T4191]  ? show_regs_print_info+0x20/0x20
[  204.884349][ T4191]  ? load_image+0x410/0x410
[  204.888890][ T4191]  ? _raw_spin_lock_irqsave+0xbc/0x100
[  204.894386][ T4191]  ? rcu_lock_release+0x5/0x20
[  204.899198][ T4191]  print_address_description+0x60/0x2d0
[  204.904816][ T4191]  ? nfsd_shutdown_threads+0x89/0x1a0
[  204.910233][ T4191]  kasan_report+0xdf/0x130
[  204.914732][ T4191]  ? nfsd_shutdown_threads+0x89/0x1a0
[  204.920128][ T4191]  kasan_check_range+0x235/0x290
[  204.925118][ T4191]  nfsd_shutdown_threads+0x89/0x1a0
[  204.930333][ T4191]  nfsd_umount+0x3e/0xc0
[  204.934610][ T4191]  deactivate_locked_super+0x93/0xf0
[  204.939928][ T4191]  cleanup_mnt+0x426/0x4d0
[  204.944377][ T4191]  task_work_run+0x125/0x1a0
[  204.948984][ T4191]  exit_to_user_mode_loop+0x10f/0x130
[  204.954374][ T4191]  exit_to_user_mode_prepare+0xee/0x180
[  204.959927][ T4191]  syscall_exit_to_user_mode+0x16/0x40
[  204.965391][ T4191]  do_syscall_64+0x58/0xa0
[  204.969819][ T4191]  ? clear_bhb_loop+0x30/0x80
[  204.974519][ T4191]  ? clear_bhb_loop+0x30/0x80
[  204.979243][ T4191]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  204.985203][ T4191] RIP: 0033:0x7f2025546317
[  204.989645][ T4191] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  205.009455][ T4191] RSP: 002b:00007ffdac3bcc98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  205.017905][ T4191] RAX: 0000000000000000 RBX: 00007f20255db474 RCX: 00007f2025546317
[  205.025896][ T4191] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdac3bcd50
[  205.033880][ T4191] RBP: 00007ffdac3bcd50 R08: 00007ffdac3bdd50 R09: 00000000ffffffff
[  205.041887][ T4191] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdac3bdde0
[  205.049872][ T4191] R13: 00007f20255db474 R14: 0000000000031b24 R15: 00007ffdac3bde20
[  205.057892][ T4191]  </TASK>
[  205.060915][ T4191] 
[  205.063285][ T4191] Allocated by task 5856:
[  205.067627][ T4191]  __kasan_kmalloc+0xaf/0xe0
[  205.072243][ T4191]  __svc_create+0x60/0x9d0
[  205.076675][ T4191]  svc_create_pooled+0x62f/0x810
[  205.081647][ T4191]  nfsd_create_serv+0x2f9/0x700
[  205.086526][ T4191]  nfsd_svc+0x132/0x9e0
[  205.090711][ T4191]  write_threads+0x2ea/0x350
[  205.095307][ T4191]  nfsctl_transaction_write+0x105/0x150
[  205.100855][ T4191]  vfs_write+0x304/0xd70
[  205.105096][ T4191]  ksys_write+0x153/0x260
[  205.109430][ T4191]  do_syscall_64+0x4c/0xa0
[  205.113861][ T4191]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  205.119759][ T4191] 
[  205.122092][ T4191] Freed by task 5856:
[  205.126079][ T4191]  kasan_set_track+0x4b/0x70
[  205.130686][ T4191]  kasan_set_free_info+0x1f/0x40
[  205.135660][ T4191]  ____kasan_slab_free+0xd5/0x110
[  205.136316][ T4762] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  205.140713][ T4191]  slab_free_freelist_hook+0xec/0x170
[  205.153477][ T4762] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.155171][ T4191]  kfree+0xef/0x2a0
[  205.155194][ T4191]  nfsd_svc+0x7cf/0x9e0
[  205.163965][ T4762] usb 5-1: Product: syz
[  205.166998][ T4191]  write_threads+0x2ea/0x350
[  205.167023][ T4191]  nfsctl_transaction_write+0x105/0x150
[  205.167045][ T4191]  vfs_write+0x304/0xd70
[  205.171403][ T4762] usb 5-1: Manufacturer: syz
[  205.175368][ T4191]  ksys_write+0x153/0x260
[  205.175391][ T4191]  do_syscall_64+0x4c/0xa0
[  205.175410][ T4191]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  205.175433][ T4191] 
[  205.175439][ T4191] The buggy address belongs to the object at ffff88805f604800
[  205.175439][ T4191]  which belongs to the cache kmalloc-512 of size 512
[  205.184381][ T4762] usb 5-1: SerialNumber: syz
[  205.185579][ T4191] The buggy address is located 80 bytes inside of
[  205.185579][ T4191]  512-byte region [ffff88805f604800, ffff88805f604a00)
[  205.185605][ T4191] The buggy address belongs to the page:
[  205.185643][ T4191] page:ffffea00017d8100 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5f604
[  205.259498][ T4191] head:ffffea00017d8100 order:2 compound_mapcount:0 compound_pincount:0
[  205.267663][ T4762] usb 5-1: config 0 descriptor??
[  205.267854][ T4191] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  205.267906][ T4191] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016c41c80
[  205.289444][ T4191] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[  205.298023][ T4191] page dumped because: kasan: bad access detected
[  205.304454][ T4191] page_owner tracks the page as allocated
[  205.310170][ T4191] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4188, ts 75751809897, free_ts 75742592431
[  205.329307][ T4191]  get_page_from_freelist+0x24f6/0x2670
[  205.332785][ T5865] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  205.334895][ T4191]  __alloc_pages+0x1ee/0x480
[  205.346541][ T4191]  new_slab+0xc0/0x4b0
[  205.350648][ T4191]  ___slab_alloc+0x807/0xdd0
[  205.355343][ T4191]  __kmalloc_node_track_caller+0x13d/0x3a0
[  205.361181][ T4191]  __alloc_skb+0x22c/0x750
[  205.365726][ T4191]  netlink_ack+0x35c/0xb10
[  205.370174][ T4191]  netlink_rcv_skb+0x267/0x430
[  205.374965][ T4191]  netlink_unicast+0x78f/0x940
[  205.379751][ T4191]  netlink_sendmsg+0x8ba/0xbe0
[  205.384560][ T4191]  __sys_sendto+0x46d/0x620
[  205.389352][ T4191]  __x64_sys_sendto+0xda/0xf0
[  205.392210][ T4762] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  205.394061][ T4191]  do_syscall_64+0x4c/0xa0
[  205.407342][ T4191]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  205.413369][ T4191] page last free stack trace:
[  205.418067][ T4191]  free_unref_page_prepare+0x637/0x6c0
[  205.423560][ T4191]  free_unref_page+0x8f/0x2a0
[  205.428273][ T4191]  stack_depot_save+0x42f/0x460
[  205.433160][ T4191]  __kasan_slab_alloc+0xa9/0xc0
[  205.438062][ T4191]  slab_post_alloc_hook+0x4c/0x380
[  205.443209][ T4191]  kmem_cache_alloc+0x15d/0x280
[  205.448092][ T4191]  __kernfs_new_node+0xe3/0x6b0
[  205.452730][ T4762] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  205.452973][ T4191]  kernfs_new_node+0x148/0x250
[  205.466966][ T4191]  kernfs_create_dir_ns+0x40/0x120
[  205.472116][ T4191]  internal_create_group+0x21a/0xd00
[  205.477482][ T4191]  dpm_sysfs_add+0x66/0x270
[  205.482035][ T4191]  device_add+0x745/0x1050
[  205.486492][ T4191]  wiphy_register+0x1e74/0x2c40
[  205.491415][ T4191]  ieee80211_register_hw+0x2a03/0x3a60
[  205.497029][ T4191]  mac80211_hwsim_new_radio+0x209d/0x4050
[  205.502794][ T4191]  hwsim_new_radio_nl+0xa7d/0xc50
[  205.507862][ T4191] 
[  205.510214][ T4191] Memory state around the buggy address:
[  205.515872][ T4191]  ffff88805f604700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  205.523977][ T4191]  ffff88805f604780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  205.532074][ T4191] >ffff88805f604800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  205.540165][ T4191]                                                  ^
[  205.546873][ T4191]  ffff88805f604880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  205.554976][ T4191]  ffff88805f604900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  205.563067][ T4191] ==================================================================
[  205.571264][ T4191] Disabling lock debugging due to kernel taint
[  205.579254][ T4191] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  205.586483][ T4191] CPU: 1 PID: 4191 Comm: syz-executor Tainted: G    B             syzkaller #0
[  205.595448][ T4191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  205.605545][ T4191] Call Trace:
[  205.608881][ T4191]  <TASK>
[  205.611836][ T4191]  dump_stack_lvl+0x188/0x250
[  205.616561][ T4191]  ? show_regs_print_info+0x20/0x20
[  205.621820][ T4191]  ? load_image+0x410/0x410
[  205.626369][ T4191]  panic+0x2f8/0x850
[  205.630296][ T4191]  ? bpf_jit_dump+0xd0/0xd0
[  205.634832][ T4191]  ? _raw_spin_unlock_irqrestore+0x10d/0x120
[  205.640937][ T4191]  ? _raw_spin_unlock+0x40/0x40
[  205.645813][ T4191]  ? nfsd_shutdown_threads+0x89/0x1a0
[  205.651274][ T4191]  check_panic_on_warn+0x80/0xa0
[  205.656223][ T4191]  ? nfsd_shutdown_threads+0x89/0x1a0
[  205.661639][ T4191]  end_report+0x6d/0xf0
[  205.665815][ T4191]  kasan_report+0x102/0x130
[  205.670548][ T4191]  ? nfsd_shutdown_threads+0x89/0x1a0
[  205.675931][ T4191]  kasan_check_range+0x235/0x290
[  205.680882][ T4191]  nfsd_shutdown_threads+0x89/0x1a0
[  205.686121][ T4191]  nfsd_umount+0x3e/0xc0
[  205.690398][ T4191]  deactivate_locked_super+0x93/0xf0
[  205.695725][ T4191]  cleanup_mnt+0x426/0x4d0
[  205.700186][ T4191]  task_work_run+0x125/0x1a0
[  205.704815][ T4191]  exit_to_user_mode_loop+0x10f/0x130
[  205.710374][ T4191]  exit_to_user_mode_prepare+0xee/0x180
[  205.715960][ T4191]  syscall_exit_to_user_mode+0x16/0x40
[  205.721463][ T4191]  do_syscall_64+0x58/0xa0
[  205.725926][ T4191]  ? clear_bhb_loop+0x30/0x80
[  205.730630][ T4191]  ? clear_bhb_loop+0x30/0x80
[  205.735348][ T4191]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  205.741278][ T4191] RIP: 0033:0x7f2025546317
[  205.745760][ T4191] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  205.765399][ T4191] RSP: 002b:00007ffdac3bcc98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  205.773841][ T4191] RAX: 0000000000000000 RBX: 00007f20255db474 RCX: 00007f2025546317
[  205.781825][ T4191] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdac3bcd50
[  205.789807][ T4191] RBP: 00007ffdac3bcd50 R08: 00007ffdac3bdd50 R09: 00000000ffffffff
[  205.797788][ T4191] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdac3bdde0
[  205.805774][ T4191] R13: 00007f20255db474 R14: 0000000000031b24 R15: 00007ffdac3bde20
[  205.813777][ T4191]  </TASK>
[  205.817065][ T4191] Kernel Offset: disabled
[  205.821416][ T4191] Rebooting in 86400 seconds..