last executing test programs:

37.193382571s ago: executing program 3 (id=384):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r2, 0x8b2a, &(0x7f0000000040))

37.097444604s ago: executing program 3 (id=386):
r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="4011d1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="201006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

36.609299908s ago: executing program 3 (id=396):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18)
r1 = socket$igmp6(0xa, 0x3, 0x2)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef)

36.513894191s ago: executing program 3 (id=398):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="600000000e06010800000000000000000500000605000100070000000900020073797a310000000005000100070000000900020073797a31000000000500010007000000050001000700000005000100070000000900020073797a30"], 0x60}, 0x1, 0x0, 0x0, 0x81}, 0x4060090)

36.466561452s ago: executing program 3 (id=399):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8})

36.349462715s ago: executing program 3 (id=400):
r0 = syz_usb_connect(0x5, 0x207, &(0x7f0000009a00)=ANY=[@ANYBLOB="12011003a9372540f30c1010db26010203010902f50101030250070904"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_disconnect(r0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[], 0x0)

21.366429567s ago: executing program 32 (id=400):
r0 = syz_usb_connect(0x5, 0x207, &(0x7f0000009a00)=ANY=[@ANYBLOB="12011003a9372540f30c1010db26010203010902f50101030250070904"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_disconnect(r0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[], 0x0)

5.345603109s ago: executing program 1 (id=718):
socket$alg(0x26, 0x5, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$inet6_buf(r1, 0x3a, 0x6, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
keyctl$revoke(0x3, r5)
r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0)
syz_emit_ethernet(0x8f, &(0x7f0000000280)=ANY=[@ANYBLOB="bbbbbbbbbbbb000000000000810015000800450000a50080000000119078ac1e01017f0000018200278e6a0bb540232b0a4994000000050061e0000001ac1414bbffffffffe0000002ac1e0101ac1e01010000004ea000699078c070d7670d8ac43d9ac5797880cf60799aed17691273bf266d23c1286a7acbd80ac8b904c2d25ff626ac4432ba8785c9fe49a8"], 0x0)
ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000000c0)={'pcl711\x00', [0xf27, 0x80000000, 0x2, 0xa, 0xe, 0x3, 0x8, 0x3, 0x8, 0xfd, 0x2, 0x1, 0x1, 0x1, 0x7, 0x101, 0xfffffffe, 0x7f, 0x4, 0x40000003, 0x89, 0xca9f, 0x3, 0x20001e58, 0xffffffff, 0x7, 0x3, 0x4000008, 0x4085, 0x0, 0xfffffff8]})
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="c40100002a00070127bd700000000000017c00000c00028005007c80280000"], 0x1c4}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$sndctrl(&(0x7f00000000c0), 0x9, 0x1e9100)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r7, &(0x7f0000000180)={'#! ', './file0'}, 0xb)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r7, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000004c0)={0x1f, 0x1}, 0xe)
socket$inet_udp(0x2, 0x2, 0x0)

5.025511628s ago: executing program 4 (id=721):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a270000140000006c07010033d42cfffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a)

4.986817889s ago: executing program 5 (id=723):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0)
connect$inet(r0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
setresuid(0xee00, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r4, 0x1, 0xb, &(0x7f00000000c0)=0x10004, 0x4)

4.925541391s ago: executing program 4 (id=724):
r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES8], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0)
socket$inet(0x2, 0x3, 0x2)

4.452704724s ago: executing program 1 (id=725):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
socket$key(0xf, 0x3, 0x2)
syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f00000000c0)={[{@filestreams}, {@usrquota}, {@noalign}, {@pquota}, {@inode32}, {@discard}, {@prjquota}, {@usrquota}, {@gquota}, {@nolargeio}]}, 0x1, 0x975c, &(0x7f000001c600)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x5)

4.131144723s ago: executing program 4 (id=728):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TCFLSH(r1, 0x400455c8, 0x2)
ioctl$TIOCSETD(r1, 0x5412, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040))
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)=0xff)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180))
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x80)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240))

3.829281912s ago: executing program 5 (id=729):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4098884, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0)

3.798702543s ago: executing program 4 (id=730):
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e0009"], 0x0)
r0 = socket(0x400000000010, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000380)=ANY=[@ANYRES64=r2], 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
ioctl$TCXONC(r4, 0x540a, 0x0)
ioctl$TCXONC(r4, 0x540a, 0x1)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc)
socket(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r6=>0x0}, 0x0)
setregid(0xffffffffffffffff, r6)
getgroups(0x0, 0x0)
r7 = fsopen(&(0x7f0000000180)='vfat\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000040))
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'veth0_macvtap\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x9, 0x20040001, 0xfffffffc, 0x9, 0x0, 0x0, 0x3, 0x3}})

3.317047606s ago: executing program 1 (id=732):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0})
dup3(r1, r0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x70, 0x18, &(0x7f00000008c0)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x2, 0x3e}, @ptr={0x70742a85, 0x20000000, &(0x7f0000000580)=""/236, 0x1c, 0x1, 0x26}, @fda={0x66646185, 0x7, 0x1, 0xb8}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0})

3.196644639s ago: executing program 0 (id=734):
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c80060005c00010000000000ff7f"], 0x65)

3.077494413s ago: executing program 0 (id=736):
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$vim2m(0x0, 0x0, 0x2)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c)

2.8245686s ago: executing program 5 (id=738):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x240, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x6b4, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = syz_open_dev$vim2m(0x0, 0x33c, 0x2)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x2, {0x2, @sliced={0x0, [0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x88b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}})
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xd)
ioctl$TIOCSTI(r1, 0x5412, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044815}, 0x40850)
ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000340)={0x0, @phonet={0x23, 0x3, 0x7, 0x6}, @hci={0x1f, 0x2}, @sco, 0x9, 0x0, 0x0, 0x0, 0x40, &(0x7f0000000040)='virt_wifi0\x00', 0x10, 0x9, 0x2})
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c)
r7 = socket(0x2b, 0x80801, 0x1)
bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10)

2.209075287s ago: executing program 0 (id=739):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
ioprio_set$pid(0x1, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000300)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0xbff, 0x43, 0x2, 0xc, 0x6e})
fanotify_init(0xf00, 0x1)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xfffffc37, 0x0}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000004340)='/proc/key-users\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f0000002280)={0x2020}, 0x2020)

2.208701637s ago: executing program 1 (id=740):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TCFLSH(r1, 0x400455c8, 0x2)
ioctl$TIOCSETD(r1, 0x5412, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040))
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)=0xff)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180))
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x80)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240))

2.074975231s ago: executing program 1 (id=741):
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r0, 0x550c, 0x0)

1.855628677s ago: executing program 5 (id=742):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4})
r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0})
dup3(r1, r0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x70, 0x18, &(0x7f00000008c0)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x2, 0x3e}, @ptr={0x70742a85, 0x20000000, &(0x7f0000000580)=""/236, 0xec, 0x1, 0x26}, @fda={0x66646185, 0x7, 0x1, 0xb8}}, &(0x7f0000000240)={0x58, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0})

1.855162657s ago: executing program 5 (id=743):
syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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")
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff)
write$binfmt_script(r4, &(0x7f0000000080)={'#! ', './file1'}, 0xb)

1.39387988s ago: executing program 2 (id=744):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000300)=ANY=[], 0x340a)

1.316664283s ago: executing program 0 (id=745):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x4000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r3, &(0x7f0000000000)={0x24, @long={0x3, 0x1}}, 0x14)

1.226098405s ago: executing program 2 (id=746):
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x8000, &(0x7f00000000c0), 0x9, 0xbdc, &(0x7f0000001f40)="$eJzs3M1rHOcZAPBnRquVbKtduZRS91KVUmwoXUsuMrUp1C4uvfRQaK8Fq/LKCK0/kFRcyTqs2n8gX+dALoEQk5BDfPYlIbnmktjXhBwCJihWAjkkCrMf0kbSSnK8q5Hl3w9ezfvOO6vneXbYnXlhdwN4Zo1kf9KIExFxOYkoNfenEVGs9wYjao3jVleWJr9aWZpMYm3tH58nkUTEo5Wlydb/SprbY83BYER88OckfvL/rXHnFhZnJqrVymxzfHr+2s3TcwuLv5u+NnG1crVyfezsH8bPjJ8dPTfetVq//vjC3S9/9ddPa9X45s4XL76axIUYas6119EtIzGy/py0K0TERLeD5aSvWU97nUlhlwelPU4KAICO0rZ7uJ9FKfpi4+atFO98mGtyAAAAQFes9UWsAQAAAIdcYv0PAAAAh1zrcwCPVpYmWy3fTyTsr4cXI2K4Uf9qszVmClGrbwejPyKOPkqi/WutSeNhT2wkIj55cO7NrEWPvoe8k9pyRPx8u/Of1Osfrn+Le2v9aUSMdiH+4Kbx01T/hS7EH9k0ftZefwDk497FxoVs6/UvXb//iW2uf4Vtrl0/RN7Xv9b93+qW+7+N+vs63P/9fY8xbr/28q1Oc1n9f7z7lzdaLYufbZ+oqMfwcDniF4Xt6k/W60861H95jzFK396qdJrLu/61VyJOxvb1tyQ7/z7R6anpamW08XfbGMvvj7/eKX7e9Wfn/2iH+lu//9Tp/N/cY4x/Xbr01padDza6O9efflZM/lnvFZt7/jsxPz87FlFM/rZ1/5mdc2kd0/ofWf2nfr3z63+7+rP3hFrzecjWAsvNbTb+36aYf7pz++1O+bTWf3me/ysdzn97/e8Vtp7/5/YY4zfvvnCq01z7+jdrWfzWWhgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWtKIGIokLa/307RcjjgWET+No2n1xtz8b6du/Of6lWwuYjj606npamU0IkqNcZKNx+r9jfGZTePfR8TxiHipdKQ+Lk/eqF7Ju3gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADWHYuIoUjSckSkEbFaStNyec8PL/Y0OQAAAKB7hnc7oH9/8gAAAAB6Z9f1PwAAAPDUs/4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgx47/8t79JCJq54/UW6bYnOvPNTOg19K8EwBy05d3AkBuCnknAOTmMdf4bhfgEEp2mR/sODPQ9VwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOLhOnrh3P4mI2vkj9ZYpNuf6c80M6LW0rZ/kmAew//p2mizsXx7A/vMSh2eXNT6w29p/cOOY2vdnBnqWEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHz1C9JWk5IorNfeVyxI8iYjj6k6npamU0In4cER+V+gey8VjOOQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANB9cwuLMxPVamU266TR7Kzv6UGnrxm5hyF600kaedcOSj6HuzPw/G7H/DueMEQxDkSlB7ST57sSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5mVtYnJmoViuzc3lnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAORtbmFxZqJarcz2sJN3jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5Oe7AAAA//8iFgUB")
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x9)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0x7f)
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000080)=@sg0, 0x0, &(0x7f0000000100)={0x9, 0x7, 0x93e, 0x7ffffff7fffffffc, 0xfffffffffffffff8, 0xfffffffffffffffb, 0xfffffffffffffffb, 0x800007ffb, 0x5})

1.129447397s ago: executing program 2 (id=747):
mkdirat(0xffffffffffffff9c, 0x0, 0x1c1)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioprio_set$uid(0x3, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
mount$tmpfs(0x0, 0x0, 0x0, 0x420, &(0x7f00000000c0))
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000300)={0x0, 0x9, 0x3})
socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r3, &(0x7f00000021c0)={0x2020}, 0x2020)
write$FUSE_INIT(r3, 0x0, 0x0)

1.012199181s ago: executing program 1 (id=748):
r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5})
preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x2, 0xd)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000080)={0x6, {"4b81b0c732e92eb1fd60fbf401687d72", "1cea03ca4fe1c1f1e31253bda1f1fed5", "d80190bae206002cb2a1a28cde21dbfd"}, 0x2, 0x7})

691.61445ms ago: executing program 5 (id=749):
mkdirat(0xffffffffffffff9c, 0x0, 0x1c1)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x109880)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000300)={0x0, 0x9, 0x3})
r4 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f00000002c0)={0x3, 0x8000, 0xfffffffb, 0x6}, 0x10)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}})
write$FUSE_INIT(r5, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50)

681.15105ms ago: executing program 4 (id=750):
r0 = io_uring_setup(0x5d2d, &(0x7f00000002c0)={0x0, 0x43d3, 0x400, 0x2, 0x235})
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000"], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

220.361313ms ago: executing program 2 (id=751):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TCFLSH(r1, 0x400455c8, 0x2)
ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)=0xffffffc0)
ioctl$TIOCSTI(r1, 0x5412, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)=0xff)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180))
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x80)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240))

121.448626ms ago: executing program 0 (id=752):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0})
dup3(r1, r0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x70, 0x18, &(0x7f00000008c0)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x2, 0x3e}, @ptr={0x70742a85, 0x20000000, &(0x7f0000000580)=""/236, 0x1c, 0x1, 0x26}, @fda={0x66646185, 0x7, 0x1, 0xb8}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0})

107.150977ms ago: executing program 2 (id=753):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet(0x2, 0x3, 0x1)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='macvlan0\x00', 0x10)

59.265548ms ago: executing program 2 (id=754):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, 0x1af, &(0x7f0000000480)="$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")
pread64(0xffffffffffffffff, 0x0, 0x0, 0x8001)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x21c91c, &(0x7f0000000440)={[{@dioread_nolock}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000000}}, {@resgid}, {@norecovery}, {@quota}, {@auto_da_alloc}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1}}, {@resgid, 0x32}]}, 0x1, 0x519, &(0x7f00000014c0)="$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")

58.751338ms ago: executing program 0 (id=755):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x12001, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1c0000000000", @ANYRES32, @ANYBLOB, @ANYRES32=<r1=>0xffffffffffffffff, @ANYBLOB="270f66e9af4510a3098bda648fbe735f44dc3c374117cbd1872db242fa6ffe761f4e803301348b1c66233eb65cdf36d98e9ff58749e01596d96d18d293b8392831bd3f1157b5c7a071544b47038f0e9d84dd6c6c99573864f149b4b739a3014a45cb5fc921ed604416b5e57cfac2bce8d172d1588f38bc5c07d26105d1334b9d75535f2cdaecc196c1027bd8d23a5096d49d2949d7bc7f2ef545972914e519fcc2a0cc28ea1011554bf9f0447a98a815a43a15f592ec42566a199b801292e64572ff3c005bb5dd7d40882d02d956eb02a4d6af4bbeba0d24e2fb8d9bebfe8bb51053dfdf1845e3d49aebd5", @ANYRES64=0x0], 0x20)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = fanotify_init(0x200, 0x0)
fanotify_mark(r3, 0x2, 0x1062, r3, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000300)='mand\x00', 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0x11}, {0x0, 0x100000000000000}]}, 0x68)
sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
fsmount(r5, 0x0, 0x19)
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002200)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYRES32, @ANYBLOB="0800050006000000"], 0x24}, 0x1, 0x0, 0x0, 0x20008801}, 0x808)
r7 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r7, 0x5000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14)
r8 = socket(0x10, 0x3, 0x0)
r9 = syz_usb_connect(0x2, 0x3b, &(0x7f0000000a40)=ANY=[@ANYBLOB="120100026e694b109911039024d7010203010902290001060780020904000000ffd36b050524260000020040"], &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0})
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="40f24a5ee1630304400000000000000008020000630e0f5b1e3d205fca444cdf2cca46d6c5b561c4d7994982ff7bf28489b78463e57de0f65170a293d08c97cecda46ad810e8571dd2a019a8ebc8ef02ce12b922790a8d7a93729deac50fcf08ccc8a4afc81de0776a219178e169d7fb13553991e4ff950bd1e99065bd85da80f3d16badc04c55557f537217d453c83a16be823df26e7c56921ec522d3f80c086b8344d7cfc6af13e5730f923a8d87e7f4cfa31bdea0da25dd5899f58c5e7a6ee06254a771f65d9d4316e3a6b25b398a0824e6b29ba1faba40ef50b2dc2b6ba52d1e3a1309abe1", @ANYRES32=r1, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32, @ANYRESHEX=r9, @ANYRESHEX=r9], 0x40}, 0x1, 0x0, 0x0, 0x20040010}, 0x8000)

0s ago: executing program 4 (id=756):
r0 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r1, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000340)={r2, 0x101, 0x3, 0x0, 0x0, [], [0x0, 0x7, 0x0, 0xfffffffc], [0x0, 0x80000006, 0x2], [0x5, 0x0, 0x1, 0x5]})
r3 = syz_open_dev$dri(0x0, 0x1, 0x400)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r4, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000340)={r5, 0x101, 0x3, 0x0, 0x0, [], [0x0, 0x7, 0x0, 0xfffffffc], [0x0, 0x80000006, 0x2], [0x5, 0x0, 0x1, 0x5]})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.25' (ED25519) to the list of known hosts.
[   28.993283][ T4312] cgroup: Unknown subsys name 'net'
[   29.210635][ T4312] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   29.471338][ T4312] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k SSFS
[   30.116863][ T4328] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   30.121493][ T4325] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   30.123878][ T4330] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   30.125560][ T4330] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   30.129332][ T4330] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   30.130761][ T4330] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   30.132322][ T4330] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   30.133720][ T4330] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   30.135195][ T4330] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   30.135373][ T4338] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   30.136303][ T4330] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   30.138324][ T4338] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   30.138615][ T4338] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   30.140809][ T4338] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   30.142392][ T4330] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   30.142697][ T4338] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   30.145370][ T4340] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   30.145603][ T4330] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   30.148703][ T4330] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   30.148745][ T4338] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   30.150033][ T4330] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   30.151307][ T4338] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   30.152292][ T4330] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   30.153405][ T4338] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   30.154705][ T4330] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   30.156901][ T4341] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   30.161212][ T4330] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   30.162814][ T4341] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   30.164167][ T4341] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   30.164509][ T4330] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   30.301501][ T4324] chnl_net:caif_netlink_parms(): no params data found
[   30.311850][ T4332] chnl_net:caif_netlink_parms(): no params data found
[   30.353967][ T4327] chnl_net:caif_netlink_parms(): no params data found
[   30.363157][ T4335] chnl_net:caif_netlink_parms(): no params data found
[   30.379870][ T4324] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.381089][ T4324] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.382669][ T4324] device bridge_slave_0 entered promiscuous mode
[   30.390990][ T4329] chnl_net:caif_netlink_parms(): no params data found
[   30.396115][ T4332] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.397433][ T4332] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.399118][ T4332] device bridge_slave_0 entered promiscuous mode
[   30.402097][ T4324] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.403260][ T4324] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.404716][ T4324] device bridge_slave_1 entered promiscuous mode
[   30.411172][ T4332] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.412395][ T4332] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.413828][ T4332] device bridge_slave_1 entered promiscuous mode
[   30.423777][ T4324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.427827][ T4324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.436674][ T4327] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.437783][ T4327] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.439493][ T4327] device bridge_slave_0 entered promiscuous mode
[   30.452451][ T4327] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.453672][ T4327] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.455228][ T4327] device bridge_slave_1 entered promiscuous mode
[   30.461331][ T4332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.467537][ T4324] team0: Port device team_slave_0 added
[   30.469373][ T4324] team0: Port device team_slave_1 added
[   30.470442][ T4335] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.471639][ T4335] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.473106][ T4335] device bridge_slave_0 entered promiscuous mode
[   30.475271][ T4332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.482900][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.484111][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.485649][ T4329] device bridge_slave_0 entered promiscuous mode
[   30.493347][ T4335] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.494607][ T4335] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.496154][ T4335] device bridge_slave_1 entered promiscuous mode
[   30.501012][ T4332] team0: Port device team_slave_0 added
[   30.502795][ T4332] team0: Port device team_slave_1 added
[   30.508278][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.509488][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.510983][ T4329] device bridge_slave_1 entered promiscuous mode
[   30.513724][ T4327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.515474][ T4324] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.516571][ T4324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.520894][ T4324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.527208][ T4332] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.530730][ T4332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.534876][ T4332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.537760][ T4327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.541548][ T4324] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.542680][ T4324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.547183][ T4324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.554712][ T4329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.556425][ T4332] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.557551][ T4332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.564508][ T4332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.572601][ T4335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.574824][ T4329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.577813][ T4327] team0: Port device team_slave_0 added
[   30.582057][ T4327] team0: Port device team_slave_1 added
[   30.587289][ T4335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.649353][ T4332] device hsr_slave_0 entered promiscuous mode
[   30.688339][ T4332] device hsr_slave_1 entered promiscuous mode
[   30.731199][ T4329] team0: Port device team_slave_0 added
[   30.769813][ T4324] device hsr_slave_0 entered promiscuous mode
[   30.808248][ T4324] device hsr_slave_1 entered promiscuous mode
[   30.848113][ T4324] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   30.849557][ T4324] Cannot create hsr debugfs directory
[   30.851608][ T4335] team0: Port device team_slave_0 added
[   30.853564][ T4329] team0: Port device team_slave_1 added
[   30.854863][ T4327] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.855927][ T4327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.860032][ T4327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.868435][ T4335] team0: Port device team_slave_1 added
[   30.873341][ T4327] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.874430][ T4327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.878765][ T4327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.893459][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.894601][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.898589][ T4329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.900607][ T4335] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.901750][ T4335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.905865][ T4335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.908015][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.911670][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.915938][ T4329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.923102][ T4335] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.924301][ T4335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.930638][ T4335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.999278][ T4327] device hsr_slave_0 entered promiscuous mode
[   31.038267][ T4327] device hsr_slave_1 entered promiscuous mode
[   31.078076][ T4327] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   31.079352][ T4327] Cannot create hsr debugfs directory
[   31.139174][ T4335] device hsr_slave_0 entered promiscuous mode
[   31.178259][ T4335] device hsr_slave_1 entered promiscuous mode
[   31.218113][ T4335] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   31.219356][ T4335] Cannot create hsr debugfs directory
[   31.249273][ T4329] device hsr_slave_0 entered promiscuous mode
[   31.288268][ T4329] device hsr_slave_1 entered promiscuous mode
[   31.330469][ T4329] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   31.331705][ T4329] Cannot create hsr debugfs directory
[   31.423888][ T4324] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   31.444323][ T4324] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   31.489182][ T4324] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   31.540228][ T4324] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   31.603327][ T4332] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   31.664733][ T4332] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   31.700390][ T4332] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   31.745941][ T4332] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   31.786929][ T4327] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   31.839503][ T4327] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   31.892112][ T4329] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   31.940820][ T4327] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   31.970372][ T4329] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   31.999689][ T4329] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   32.031375][ T4329] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   32.072175][ T4327] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   32.130287][ T4335] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   32.173033][ T4335] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   32.234506][ T4335] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   32.238665][ T4341] Bluetooth: hci1: command 0x0409 tx timeout
[   32.239784][ T4341] Bluetooth: hci2: command 0x0409 tx timeout
[   32.240911][ T4341] Bluetooth: hci0: command 0x0409 tx timeout
[   32.241995][ T4341] Bluetooth: hci3: command 0x0409 tx timeout
[   32.243050][ T4341] Bluetooth: hci4: command 0x0409 tx timeout
[   32.272474][ T4324] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.275091][ T4335] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   32.332394][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   32.334185][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   32.337646][ T4329] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.344451][ T4324] 8021q: adding VLAN 0 to HW filter on device team0
[   32.354506][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   32.356211][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   32.357993][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.359254][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.365889][ T4329] 8021q: adding VLAN 0 to HW filter on device team0
[   32.367277][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   32.369158][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   32.370641][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   32.376536][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   32.381732][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   32.383494][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.384575][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.391239][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   32.392799][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   32.394256][   T39] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.395405][   T39] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.396742][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   32.402990][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   32.413763][ T4332] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.416353][ T1675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   32.417907][ T1675] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   32.422394][ T1675] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.423453][ T1675] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.424963][ T1675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   32.433061][   T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   32.434941][   T88] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   32.436445][   T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   32.440787][   T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   32.442539][   T88] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   32.444119][   T88] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   32.449946][ T4327] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.454633][   T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   32.456865][   T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   32.462435][   T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   32.465467][ T4332] 8021q: adding VLAN 0 to HW filter on device team0
[   32.470962][ T1675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   32.472648][ T1675] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   32.474170][ T1675] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.475302][ T1675] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.476674][ T1675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   32.479354][ T1675] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   32.481254][ T1675] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   32.487436][   T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   32.489151][   T88] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   32.490586][   T88] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.491781][   T88] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.493260][   T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   32.494965][   T88] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   32.496596][   T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   32.497987][   T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   32.499932][   T88] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   32.516368][   T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   32.519610][   T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   32.521316][   T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   32.523033][   T88] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   32.524624][   T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   32.526266][   T88] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   32.527827][   T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   32.530481][   T88] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   32.532085][   T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   32.533547][   T88] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   32.535036][   T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   32.536526][   T88] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   32.537980][   T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   32.539897][   T88] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   32.542681][   T88] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   32.544975][ T4327] 8021q: adding VLAN 0 to HW filter on device team0
[   32.551381][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   32.552919][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   32.554430][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.555544][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.556925][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   32.561655][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   32.563165][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   32.564662][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   32.566105][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   32.567737][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   32.570167][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.571364][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.573269][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   32.575085][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   32.576960][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   32.582083][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   32.587631][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   32.591129][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   32.593755][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   32.595733][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   32.603346][ T4335] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.611439][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   32.614879][ T1675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   32.616603][ T1675] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   32.622674][ T1675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   32.624245][ T1675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   32.631846][ T4335] 8021q: adding VLAN 0 to HW filter on device team0
[   32.641192][ T1675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   32.642920][ T1675] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   32.646608][ T1675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   32.649295][ T1675] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   32.652531][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   32.654121][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   32.655548][ T4383] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.656669][ T4383] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.658839][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   32.669803][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   32.671336][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   32.672807][ T4383] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.673937][ T4383] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.676812][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   32.685867][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   32.692974][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   32.702794][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   32.704599][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   32.710825][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   32.721062][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   32.722708][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   32.725577][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   32.727141][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   32.737925][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   32.740069][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   32.741444][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   32.743032][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   32.745969][ T4329] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.759350][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   32.760617][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   32.764225][ T4324] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.774825][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   32.781648][   T88] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   32.782930][   T88] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   32.786478][ T4332] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.809467][   T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   32.811191][   T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   32.817024][   T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   32.818979][   T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   32.823609][   T88] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   32.824999][   T88] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   32.831057][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   32.832395][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   32.834791][ T4324] device veth0_vlan entered promiscuous mode
[   32.846206][ T4327] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.847524][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   32.849306][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   32.859749][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   32.861237][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   32.862914][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   32.864240][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   32.871646][ T4324] device veth1_vlan entered promiscuous mode
[   32.874516][ T4332] device veth0_vlan entered promiscuous mode
[   32.893771][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   32.895477][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   32.896981][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   32.901602][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   32.913108][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   32.914679][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   32.916413][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   32.917708][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   32.928690][ T4327] device veth0_vlan entered promiscuous mode
[   32.932641][ T4332] device veth1_vlan entered promiscuous mode
[   32.942631][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   32.944197][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   32.945658][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   32.946901][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   32.952425][ T4332] device veth0_macvtap entered promiscuous mode
[   32.955298][ T4327] device veth1_vlan entered promiscuous mode
[   32.956984][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   32.958508][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   32.960112][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   32.961614][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   32.963225][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   32.964953][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   32.967897][ T4332] device veth1_macvtap entered promiscuous mode
[   32.973537][ T4335] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.977457][ T4324] device veth0_macvtap entered promiscuous mode
[   32.990682][ T4324] device veth1_macvtap entered promiscuous mode
[   32.992488][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   32.994011][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   32.995488][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   32.997060][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   32.998673][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   33.000247][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   33.010399][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.012868][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   33.014493][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   33.016096][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   33.017726][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   33.019981][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   33.021425][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   33.024810][ T4329] device veth0_vlan entered promiscuous mode
[   33.031521][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.035236][   T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   33.036844][   T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   33.039047][   T88] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   33.040654][   T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   33.042372][   T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   33.043961][   T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   33.047536][ T4327] device veth0_macvtap entered promiscuous mode
[   33.050729][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   33.052383][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.054678][ T4324] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.056497][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   33.058119][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   33.059544][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   33.062129][ T4329] device veth1_vlan entered promiscuous mode
[   33.064272][ T4332] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.065798][ T4332] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.067334][ T4332] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.071792][ T4332] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.080487][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   33.081957][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   33.083394][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   33.085905][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   33.087315][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   33.093599][ T4327] device veth1_macvtap entered promiscuous mode
[   33.099344][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   33.101331][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.103574][ T4324] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.105267][ T4335] device veth0_vlan entered promiscuous mode
[   33.109572][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   33.111182][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   33.112584][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   33.114112][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   33.118861][ T4329] device veth0_macvtap entered promiscuous mode
[   33.122089][ T4324] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.123455][ T4324] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.124885][ T4324] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.126392][ T4324] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.129479][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   33.131156][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   33.132703][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   33.134479][ T4329] device veth1_macvtap entered promiscuous mode
[   33.136118][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   33.137779][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.140872][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   33.142591][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.144864][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.151389][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   33.152927][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   33.154576][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   33.162059][ T4335] device veth1_vlan entered promiscuous mode
[   33.176939][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   33.181404][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.183123][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   33.184780][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.187052][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.191363][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   33.193005][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.194617][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   33.196449][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.202071][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   33.203791][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.206009][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.208512][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   33.210122][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   33.211535][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   33.213112][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   33.214630][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   33.216123][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   33.222932][ T4327] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.224315][ T4327] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.225605][ T4327] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.226913][ T4327] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.240692][   T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   33.242279][   T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   33.244705][   T88] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   33.245907][ T4335] device veth0_macvtap entered promiscuous mode
[   33.256261][ T4335] device veth1_macvtap entered promiscuous mode
[   33.256500][   T88] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   33.269334][   T88] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   33.270968][   T88] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   33.272390][   T88] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   33.274389][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   33.276088][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.277595][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   33.280331][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.281927][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   33.283697][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.285338][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   33.287012][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.290531][ T4335] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.291988][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   33.293604][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.295268][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   33.297030][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.300225][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   33.301733][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.303868][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.308268][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   33.309875][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   33.311399][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   33.312699][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   33.321633][   T88] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   33.322993][   T88] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   33.324424][   T88] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   33.333815][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   33.336380][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.338788][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   33.340448][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.342044][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   33.343827][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.345578][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   33.347450][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   33.349832][ T4335] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.355182][   T88] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   33.362180][   T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   33.365668][ T4335] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.367055][ T4335] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.369297][ T4335] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.370790][ T4335] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.376836][ T4329] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.380878][ T4329] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.382234][ T4329] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.383619][ T4329] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.387544][ T4383] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   33.389762][ T4383] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   33.392181][ T4383] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   33.393757][ T4383] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   33.401923][   T88] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   33.403418][   T88] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   33.416804][ T4383] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   33.418274][ T4383] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   33.419834][   T88] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   33.452857][ T4383] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   33.454238][ T4383] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   33.455622][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   33.461031][ T4383] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   33.462298][ T4383] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   33.463593][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   33.486135][   T88] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   33.486381][ T4383] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   33.487401][   T88] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   33.489211][ T4383] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   33.490930][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   33.492511][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   33.542811][ T4412] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'.
[   33.566723][ T4378] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   33.573529][ T4378] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   33.574954][ T1675] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   34.328350][ T4325] Bluetooth: hci4: command 0x041b tx timeout
[   34.329691][ T4325] Bluetooth: hci3: command 0x041b tx timeout
[   34.330980][ T4325] Bluetooth: hci0: command 0x041b tx timeout
[   34.332391][ T4325] Bluetooth: hci2: command 0x041b tx timeout
[   34.333713][ T4325] Bluetooth: hci1: command 0x041b tx timeout
[   34.531926][ T4433] netlink: 260 bytes leftover after parsing attributes in process `syz.3.10'.
[   34.568526][ T4435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   34.570201][ T4435] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   34.616235][ T4436] process 'syz.0.1' launched './file0' with NULL argv: empty string added
[   34.653605][ T4441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   34.655148][ T4441] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   35.062162][ T4441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   35.077984][ T4441] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   35.084617][ T4449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14'.
[   35.597472][ T4457] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17'.
[   36.236705][ T4470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   36.238663][ T4470] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   36.539874][ T4341] Bluetooth: hci1: command 0x040f tx timeout
[   36.542358][ T4325] Bluetooth: hci2: command 0x040f tx timeout
[   36.543437][ T4325] Bluetooth: hci0: command 0x040f tx timeout
[   36.544338][ T4325] Bluetooth: hci3: command 0x040f tx timeout
[   36.545463][ T4341] Bluetooth: hci4: command 0x040f tx timeout
[   37.306320][ T4499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.26'.
[   37.328851][ T4499] netlink: 12 bytes leftover after parsing attributes in process `syz.3.26'.
[   37.827945][ T4516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   37.828509][ T4516] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   37.848519][ T4499] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.848803][ T4499] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.215575][ T4499] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   38.229300][ T4499] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   38.476921][ T4499] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   38.478739][ T4499] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   38.480205][ T4499] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   38.481753][ T4499] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   38.558130][ T4333] Bluetooth: hci2: command 0x0419 tx timeout
[   38.559196][ T4333] Bluetooth: hci3: command 0x0419 tx timeout
[   38.560219][ T4333] Bluetooth: hci4: command 0x0419 tx timeout
[   38.561246][ T4333] Bluetooth: hci1: command 0x0419 tx timeout
[   38.562292][ T4333] Bluetooth: hci0: command 0x0419 tx timeout
[   38.895951][ T4551] netlink: 'syz.2.48': attribute type 1 has an invalid length.
[   39.157932][ T4561] : renamed from team_slave_1
[   39.375034][ T4584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.60'.
[   39.398052][ T4584] netlink: 12 bytes leftover after parsing attributes in process `syz.0.60'.
[   39.904182][ T4584] bridge0: port 2(bridge_slave_1) entered disabled state
[   39.905809][ T4584] bridge0: port 1(bridge_slave_0) entered disabled state
[   40.407970][ T4610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   40.409962][ T4610] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   40.742308][ T4584] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   40.757534][ T4584] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   41.217513][ T4584] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   41.219639][ T4584] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   41.221403][ T4584] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   41.224057][ T4584] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   41.624927][ T4621] netlink: 4 bytes leftover after parsing attributes in process `syz.4.74'.
[   41.626557][ T4622] netlink: 12 bytes leftover after parsing attributes in process `syz.4.74'.
[   42.155770][ T4623] bridge0: port 2(bridge_slave_1) entered disabled state
[   42.157187][ T4623] bridge0: port 1(bridge_slave_0) entered disabled state
[   42.568945][ T4640] block nbd3: shutting down sockets
[   42.776185][ T4655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.84'.
[   42.836883][ T4663] netlink: 12 bytes leftover after parsing attributes in process `syz.0.88'.
[   42.927821][ T4623] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   42.942095][ T4623] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   43.042769][ T4676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   43.047987][ T4676] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   43.058199][ T4333] block nbd1: Receive control failed (result -32)
[   43.058225][ T4649] block nbd1: shutting down sockets
[   43.286480][ T4686] syz.0.93: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0
[   43.289358][ T4686] CPU: 0 PID: 4686 Comm: syz.0.93 Not tainted syzkaller #0
[   43.290464][ T4686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[   43.291996][ T4686] Call trace:
[   43.292505][ T4686]  dump_backtrace+0x1c0/0x1ec
[   43.293271][ T4686]  show_stack+0x2c/0x3c
[   43.293953][ T4686]  __dump_stack+0x30/0x40
[   43.294636][ T4686]  dump_stack_lvl+0xf4/0x15c
[   43.295359][ T4686]  dump_stack+0x1c/0x5c
[   43.296006][ T4686]  warn_alloc+0x214/0x328
[   43.296697][ T4686]  __vmalloc_node_range+0x118/0xe3c
[   43.297528][ T4686]  vmalloc+0x9c/0xd4
[   43.298109][ T4686]  dvb_dmxdev_set_buffer_size+0xc8/0x1b0
[   43.299037][ T4686]  dvb_demux_do_ioctl+0x3fc/0x4d8
[   43.299933][ T4686]  dvb_usercopy+0x240/0x45c
[   43.300675][ T4686]  dvb_demux_ioctl+0x3c/0x54
[   43.301490][ T4686]  __arm64_sys_ioctl+0x14c/0x1c8
[   43.302352][ T4686]  invoke_syscall+0x98/0x2b4
[   43.303150][ T4686]  el0_svc_common+0x138/0x258
[   43.304011][ T4686]  do_el0_svc+0x58/0x130
[   43.304754][ T4686]  el0_svc+0x58/0x128
[   43.305434][ T4686]  el0t_64_sync_handler+0x84/0xf0
[   43.306278][ T4686]  el0t_64_sync+0x18c/0x190
[   43.307147][ T4686] Mem-Info:
[   43.307764][ T4686] active_anon:11613 inactive_anon:0 isolated_anon:0
[   43.307764][ T4686]  active_file:4920 inactive_file:2078 isolated_file:0
[   43.307764][ T4686]  unevictable:768 dirty:641 writeback:0
[   43.307764][ T4686]  slab_reclaimable:18616 slab_unreclaimable:89861
[   43.307764][ T4686]  mapped:37989 shmem:6713 pagetables:597
[   43.307764][ T4686]  sec_pagetables:0 bounce:0
[   43.307764][ T4686]  kernel_misc_reclaimable:0
[   43.307764][ T4686]  free:1440259 free_pcp:6397 free_cma:7360
[   43.315358][ T4686] Node 0 active_anon:46452kB inactive_anon:0kB active_file:19680kB inactive_file:8312kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:151956kB dirty:2564kB writeback:0kB shmem:26852kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:8412kB pagetables:2388kB sec_pagetables:0kB all_unreclaimable? no
[   43.320795][ T4686] Node 0 DMA free:3076864kB boost:0kB min:20656kB low:25820kB high:30984kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:29440kB
[   43.325469][ T4686] lowmem_reserve[]: 0 0 3552 3552 3552
[   43.326626][ T4686] Node 0 Normal free:2684172kB boost:0kB min:24396kB low:30492kB high:36588kB reserved_highatomic:0KB active_anon:46452kB inactive_anon:0kB active_file:19680kB inactive_file:8312kB unevictable:3072kB writepending:2564kB present:5242880kB managed:3641540kB mlocked:0kB bounce:0kB free_pcp:25588kB local_pcp:12188kB free_cma:0kB
[   43.331993][ T4686] lowmem_reserve[]: 0 0 0 0 0
[   43.332909][ T4686] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 0*1024kB 0*2048kB 751*4096kB (MC) = 3076864kB
[   43.335569][ T4686] Node 0 Normal: 47*4kB (UE) 26*8kB (U) 76*16kB (UME) 2*32kB (UM) 0*64kB 1*128kB (U) 20*256kB (UME) 11*512kB (UM) 5*1024kB (ME) 2*2048kB (UM) 650*4096kB (M) = 2684172kB
[   43.338785][ T4686] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   43.340413][ T4686] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB
[   43.341979][ T4686] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[   43.343539][ T4686] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB
[   43.345028][ T4686] 13711 total pagecache pages
[   43.345850][ T4686] 0 pages in swap cache
[   43.346560][ T4686] Free swap  = 124996kB
[   43.347248][ T4686] Total swap = 124996kB
[   43.347969][ T4686] 2097152 pages RAM
[   43.348679][ T4686] 0 pages HighMem/MovableOnly
[   43.349546][ T4686] 416719 pages reserved
[   43.350279][ T4686] 8192 pages cma reserved
[   43.351042][ T4686] 0 pages hwpoisoned
[   43.493384][ T4623] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   43.495009][ T4623] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   43.496676][ T4623] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   43.498429][ T4623] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   43.777426][ T4706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   43.781581][ T4706] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   43.850589][ T4712] netlink: 149 bytes leftover after parsing attributes in process `syz.3.109'.
[   43.880807][ T4716] binder: 4715:4716 tried to acquire reference to desc 0, got 1 instead
[   43.990142][ T4725] capability: warning: `syz.2.113' uses 32-bit capabilities (legacy support in use)
[   44.707460][ T4484] binder: release 4715:4716 transaction 5 out, still active
[   44.708935][ T4484] binder: undelivered TRANSACTION_COMPLETE
[   44.725484][ T3898] binder: send failed reply for transaction 5, target dead
[   44.811610][ T4747] syz.0.121 uses obsolete (PF_INET,SOCK_PACKET)
[   45.264595][ T4761] tipc: Started in network mode
[   45.265728][ T4761] tipc: Node identity 5a8376b4bb2d, cluster identity 4711
[   45.267162][ T4761] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   45.270963][ T4761] tipc: Resetting bearer <eth:syzkaller0>
[   45.296247][ T4767] binder: 4766:4767 tried to acquire reference to desc 0, got 1 instead
[   45.303701][ T4760] tipc: Disabling bearer <eth:syzkaller0>
[   46.014247][ T4784] ieee802154 phy0 wpan0: encryption failed: -22
[   46.130068][ T4406] binder: release 4766:4767 transaction 10 out, still active
[   46.443061][ T4406] binder: send failed reply for transaction 10, target dead
[   46.575504][ T4814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   46.577287][ T4814] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   46.643997][ T4821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   46.645749][ T4821] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   46.676572][ T4823] netlink: 'syz.4.153': attribute type 8 has an invalid length.
[   46.684697][ T4825] binder: 4824:4825 tried to acquire reference to desc 0, got 1 instead
[   47.805455][ T4372] binder: release 4824:4825 transaction 15 out, still active
[   47.836189][ T4406] binder: send failed reply for transaction 15, target dead
[   48.248249][ T3898] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   48.401603][ T4879] binder: 4878:4879 tried to acquire reference to desc 0, got 1 instead
[   48.403390][ T4879] binder: 4878:4879 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   48.407491][ T4879] binder: 4879 RLIMIT_NICE not set
[   48.427662][ T4883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   48.434269][ T3898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[   48.436504][ T3898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[   48.437670][ T4883] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   48.439442][ T3898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[   48.441345][ T3898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[   48.447930][ T3898] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[   48.449905][ T3898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   48.451324][ T3898] usb 1-1: Product: syz
[   48.451966][ T3898] usb 1-1: Manufacturer: syz
[   48.452743][ T3898] usb 1-1: SerialNumber: syz
[   48.454852][ T4884] binder: 4878:4884 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   48.457238][ T4884] binder: 4884 RLIMIT_NICE not set
[   48.464261][ T3898] usb 1-1: config 0 descriptor??
[   48.672779][ T3898] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[   48.877104][ T4484] usb 1-1: USB disconnect, device number 2
[   48.947429][ T4902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   48.949451][ T4902] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   49.432795][ T4920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   49.440176][ T4920] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   49.478734][ T4925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   49.480395][ T4925] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   49.778116][ T3898] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   49.968177][ T3898] usb 1-1: Using ep0 maxpacket: 32
[   49.970404][ T3898] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[   49.971904][ T3898] usb 1-1: config 0 has no interface number 0
[   49.973190][ T3898] usb 1-1: config 0 interface 184 has no altsetting 0
[   49.975878][ T3898] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   49.977489][ T3898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   49.980046][ T3898] usb 1-1: Product: syz
[   49.980719][ T3898] usb 1-1: Manufacturer: syz
[   49.981426][ T3898] usb 1-1: SerialNumber: syz
[   49.983912][ T3898] usb 1-1: config 0 descriptor??
[   49.986928][ T3898] smsc75xx v1.0.0
[   50.059413][ T4940] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0.
[   50.282788][ T4939] binder: 4938:4939 tried to acquire reference to desc 0, got 1 instead
[   50.285498][ T4939] binder: 4938:4939 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   50.287991][ T4939] binder: 4939 RLIMIT_NICE not set
[   50.335850][ T4945] binder: 4938:4945 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   50.338212][ T4945] binder: 4945 RLIMIT_NICE not set
[   50.365213][ T4949] overlayfs: upper fs does not support tmpfile.
[   50.454310][ T4959] Zero length message leads to an empty skb
[   51.005726][ T4978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   51.007340][ T4978] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   51.288577][ T3898] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71
[   51.290375][ T3898] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA
[   51.292254][ T3898] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[   51.294070][ T3898] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[   51.295686][ T3898] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[   51.297345][ T3898] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[   51.307531][ T3898] smsc75xx: probe of 1-1:0.184 failed with error -71
[   51.311897][ T3898] usb 1-1: USB disconnect, device number 3
[   51.533221][ T4995] binder: 4994:4995 tried to acquire reference to desc 0, got 1 instead
[   51.535067][ T4995] binder: 4994:4995 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   51.537149][ T4995] binder: 4995 RLIMIT_NICE not set
[   51.585969][ T4996] binder: 4994:4996 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   51.588245][ T4996] binder: 4996 RLIMIT_NICE not set
[   51.771873][ T5000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   51.773571][ T5000] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   51.776637][ T5000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   51.779040][ T5000] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   52.108380][ T3898] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   52.298286][ T3898] usb 1-1: Using ep0 maxpacket: 16
[   52.307136][ T3898] usb 1-1: unable to get BOS descriptor or descriptor too short
[   52.317623][ T3898] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[   52.362413][ T3898] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[   52.402055][ T3898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   52.445051][ T3898] usb 1-1: Product: syz
[   52.446619][ T3898] usb 1-1: Manufacturer: syz
[   52.474415][ T3898] usb 1-1: SerialNumber: syz
[   52.607513][ T5022] netlink: 'syz.3.235': attribute type 39 has an invalid length.
[   52.705379][ T3898] usb 1-1: Audio class v2/v3 interfaces need an interface association
[   52.708692][ T3898] snd-usb-audio: probe of 1-1:1.0 failed with error -22
[   52.878758][ T4328] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[   52.880679][ T4328] Bluetooth: hci3: Injecting HCI hardware error event
[   52.882048][ T4328] Bluetooth: hci3: hardware error 0x00
[   52.897349][ T3898] usb 1-1: 2:1 : can't get High Capability descriptor
[   52.998454][ T5043] binder: 5043:5042 cannot find target node
[   52.999735][ T5043] binder: 5042:5043 transaction call to 0:0 failed 31/29201/-22, size 0-0 line 3045
[   53.101792][ T4374] usb 1-1: USB disconnect, device number 4
[   53.472680][ T5050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   53.474382][ T5050] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   53.639494][ T5056] Bluetooth: (null): Invalid header checksum
[   53.692401][ T5058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   53.696428][ T5058] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   53.783443][ T5068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   53.819298][ T5052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   53.820937][ T5052] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   54.015920][ T5082] =======================================================
[   54.015920][ T5082] WARNING: The mand mount option has been deprecated and
[   54.015920][ T5082]          and is ignored by this kernel. Remove the mand
[   54.015920][ T5082]          option from the mount to silence this warning.
[   54.015920][ T5082] =======================================================
[   54.022000][ T5082] tmpfs: Unknown parameter '0x000000000000ee01'
[   54.242062][ T5093] binder: 5093:5092 cannot find target node
[   54.243246][ T5093] binder: 5092:5093 transaction call to 0:0 failed 35/29201/-22, size 0-0 line 3045
[   54.254202][ T5095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   54.255762][ T5095] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   54.578103][ T4484] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   54.758087][ T4484] usb 1-1: Using ep0 maxpacket: 16
[   54.760788][ T4484] usb 1-1: config 0 has an invalid interface number: 34 but max is 0
[   54.762003][ T4484] usb 1-1: config 0 has no interface number 0
[   54.762954][ T4484] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[   54.764614][ T4484] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[   54.767855][ T4484] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[   54.769395][ T4484] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   54.770723][ T4484] usb 1-1: Product: syz
[   54.771385][ T4484] usb 1-1: Manufacturer: syz
[   54.772084][ T4484] usb 1-1: SerialNumber: syz
[   54.773769][ T4484] usb 1-1: config 0 descriptor??
[   54.774940][ T5098] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   54.776579][ T5098] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   54.800525][ T5102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   54.802146][ T5102] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   54.815935][ T4333] Bluetooth: hci3: Unable to find connection with handle 0x00c9
[   54.983659][ T5098] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   54.985067][ T5098] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   55.038163][ T4328] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[   55.116944][ T5113] block nbd4: NBD_DISCONNECT
[   55.156636][   T78] block nbd4: Attempted send on invalid socket
[   55.159676][   T78] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[   55.161940][ T5113] XFS (nbd4): SB validate failed with error -5.
[   55.191666][ T4484] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[   55.297726][ T5128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   55.302084][ T5128] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   55.385428][ T5135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   55.387043][ T5135] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   55.492058][ T5138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   55.493523][ T5138] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   55.833820][ T5140] binder_user_error: 6 callbacks suppressed
[   55.833830][ T5140] binder: 5139:5140 got transaction to invalid handle, 1
[   55.836196][ T5140] binder: 5140:5139 cannot find target node
[   55.837231][ T5140] binder: 5139:5140 transaction call to 0:0 failed 39/29201/-22, size 0-0 line 3045
[   55.841380][ T5140] binder: 5139:5140 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   55.843452][ T5140] binder: 5140 RLIMIT_NICE not set
[   56.068860][ T5155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   56.071603][ T5155] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   56.152182][ T5157] binder: 5156:5157 ioctl c0306201 20000080 returned -14
[   56.155422][ T5157] binder: 5156:5157 tried to acquire reference to desc 0, got 1 instead
[   56.156964][ T5157] binder: 5156:5157 ioctl c0306201 200003c0 returned -14
[   56.159169][ T5157] binder: 5156:5157 parent offset not aligned correctly.
[   56.160435][ T5157] binder: 5157:5156 translate fd array failed
[   56.161706][ T5157] binder: 5156:5157 transaction async to 5156:0 failed 44/29201/-22, size 96-24 line 3486
[   56.163726][  T112] binder: undelivered TRANSACTION_ERROR: 29201
[   56.197655][ T4484] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[   56.199987][ T4484] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[   56.201716][ T4484] asix: probe of 1-1:0.34 failed with error -71
[   56.205149][ T4484] usb 1-1: USB disconnect, device number 5
[   56.237397][ T5164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   56.239333][ T5164] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   56.523928][ T5182] random: crng reseeded on system resumption
[   56.533377][ T5182] hibernate: Hibernate image not generated by this kernel!
[   56.534659][ T5182] PM: hibernation: Image mismatch: architecture specific data
[   56.559605][ T5184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   56.561320][ T5184] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   56.765469][ T5198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   56.778939][ T5198] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   56.808822][ T5204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.311'.
[   56.851254][ T5210] binder: tried to use weak ref as strong ref
[   56.852400][ T5210] binder: 5209:5210 Acquire 1 refcount change on invalid ref 0 ret -22
[   56.854229][ T5210] binder: 5209:5210 got transaction to invalid handle, 1
[   56.856797][ T5210] binder: 5210:5209 cannot find target node
[   56.858164][ T5210] binder: 5209:5210 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   56.860247][ T5210] binder: 5210 RLIMIT_NICE not set
[   56.879629][ T5213] tipc: Started in network mode
[   56.880556][ T5213] tipc: Node identity 2212115680ce, cluster identity 4711
[   56.881819][ T5213] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   56.884040][ T5213] device syzkaller0 entered promiscuous mode
[   56.886680][ T5212] tipc: Resetting bearer <eth:syzkaller0>
[   56.920006][ T5212] tipc: Disabling bearer <eth:syzkaller0>
[   56.967705][ T5222] netlink: 'syz.2.319': attribute type 1 has an invalid length.
[   56.969759][ T5222] netlink: 'syz.2.319': attribute type 4 has an invalid length.
[   56.971050][ T5222] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.319'.
[   57.101134][ T5235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   57.105178][ T5235] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   57.131199][ T5239] fuseblk: Bad value for 'fd'
[   57.142235][ T5241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   57.147120][ T5241] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   57.435205][ T4328] Bluetooth: Frame is too long (len 96, expected len 4)
[   57.700468][ T5272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   57.702045][ T5272] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   57.815196][ T4328] Bluetooth: Frame is too long (len 96, expected len 4)
[   58.069968][ T5318] fuseblk: Bad value for 'fd'
[   58.131634][ T5328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   58.135652][ T5328] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   58.255557][ T5349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   58.257078][ T5349] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   58.431762][ T5374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   58.437526][ T5374] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   58.447047][ T5376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   58.452186][ T5376] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   58.682378][ T5401] netlink: 'syz.1.374': attribute type 1 has an invalid length.
[   58.773970][ T5406] tmpfs: Bad value for 'nr_inodes'
[   58.920010][ T5419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   58.922638][ T5419] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   59.042078][ T5430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   59.047955][ T5430] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   59.222108][   T27] audit: type=1326 audit(59.210:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5432 comm="syz.2.387" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f3789e8 code=0x7ffc0000
[   59.226258][   T27] audit: type=1326 audit(59.210:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5432 comm="syz.2.387" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f3789e8 code=0x7ffc0000
[   59.236293][   T27] audit: type=1326 audit(59.210:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5432 comm="syz.2.387" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff7f3789e8 code=0x7ffc0000
[   59.245147][   T27] audit: type=1326 audit(59.210:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5432 comm="syz.2.387" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffff7f3789e8 code=0x7ffc0000
[   59.254783][ T5435] tmpfs: Bad value for 'nr_inodes'
[   59.326989][ T5439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   59.328624][ T5439] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   60.834733][ T5490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   60.836322][ T5490] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   60.858206][ T4406] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   61.038186][ T4406] usb 1-1: Using ep0 maxpacket: 16
[   61.041479][ T4406] usb 1-1: too many configurations: 22, using maximum allowed: 8
[   61.043476][ T4406] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[   61.044941][ T4406] usb 1-1: config 0 has no interface number 0
[   61.046673][ T4406] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[   61.048002][ T4406] usb 1-1: config 0 has no interface number 0
[   61.050505][ T4406] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[   61.051819][ T4406] usb 1-1: config 0 has no interface number 0
[   61.053696][ T4406] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[   61.055130][ T4406] usb 1-1: config 0 has no interface number 0
[   61.056959][ T4406] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[   61.060488][ T4406] usb 1-1: config 0 has no interface number 0
[   61.062570][ T4406] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[   61.064118][ T4406] usb 1-1: config 0 has no interface number 0
[   61.066088][ T4406] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[   61.067673][ T4406] usb 1-1: config 0 has no interface number 0
[   61.069778][ T4406] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[   61.071296][ T4406] usb 1-1: config 0 has no interface number 0
[   61.074000][ T4406] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[   61.075713][ T4406] usb 1-1: New USB device strings: Mfr=127, Product=6, SerialNumber=36
[   61.077195][ T4406] usb 1-1: Product: syz
[   61.077846][ T4406] usb 1-1: Manufacturer: syz
[   61.079721][ T4406] usb 1-1: SerialNumber: syz
[   61.085005][ T4406] usb 1-1: config 0 descriptor??
[   61.090317][ T4406] gspca_main: spca1528-2.14.0 probing 04fc:1528
[   61.577517][ T4447] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1
[   61.585668][ T4447] Bluetooth: hci5: Frame reassembly failed (-84)
[   61.798831][ T5510] binder: 5509:5510 ioctl c0306201 20000080 returned -14
[   61.806034][ T5510] binder_user_error: 5 callbacks suppressed
[   61.806041][ T5510] binder: 5509:5510 tried to acquire reference to desc 0, got 1 instead
[   61.811030][ T5510] binder: 5509:5510 ioctl c0306201 200003c0 returned -14
[   61.812772][ T5510] binder: 5509:5510 got transaction with invalid offset (88, min 0 max 112) or object.
[   61.814277][ T5510] binder_debug: 3 callbacks suppressed
[   61.814283][ T5510] binder: 5509:5510 transaction async to 5509:0 failed 55/29201/-22, size 112-24 line 3346
[   61.817326][ T4484] binder: undelivered TRANSACTION_ERROR: 29201
[   62.649604][ T5518] netlink: 'syz.4.426': attribute type 1 has an invalid length.
[   62.859799][ T4406] gspca_spca1528: reg_r err -71
[   62.860928][ T4406] spca1528: probe of 1-1:0.1 failed with error -71
[   62.863759][ T4406] usb 1-1: USB disconnect, device number 6
[   62.885121][ T5520] binder: 5519:5520 ioctl c0306201 20000080 returned -14
[   62.891827][ T5520] binder: 5519:5520 got transaction to invalid handle, 1
[   62.893043][ T5520] binder: 5520:5519 cannot find target node
[   62.894171][ T5520] binder: 5519:5520 transaction async to 0:0 failed 59/29201/-22, size 96-24 line 3045
[   62.895976][ T4484] binder: undelivered TRANSACTION_ERROR: 29201
[   63.051080][ T5524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.428'.
[   63.059563][ T5524] netlink: 12 bytes leftover after parsing attributes in process `syz.2.428'.
[   63.485725][ T5524] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.487082][ T5524] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.598185][ T4333] Bluetooth: hci5: command 0x1003 tx timeout
[   63.599921][ T4328] Bluetooth: hci5: Opcode 0x1003 failed: -110
[   64.005579][ T5524] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   64.036724][ T5524] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   64.335023][ T5524] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   64.336655][ T5524] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   64.338306][ T5524] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   64.339738][ T5524] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   64.479289][ T2060] ieee802154 phy0 wpan0: encryption failed: -22
[   64.480426][ T2060] ieee802154 phy1 wpan1: encryption failed: -22
[   65.116031][ T5555] binder: 5554:5555 ioctl c0306201 20000080 returned -14
[   65.120475][ T5555] binder: 5554:5555 ioctl c0306201 200003c0 returned -14
[   65.122125][ T5555] binder: 5554:5555 got transaction to invalid handle, 1
[   65.123446][ T5555] binder: 5555:5554 cannot find target node
[   65.124543][ T5555] binder: 5554:5555 transaction async to 0:0 failed 62/29201/-22, size 112-24 line 3045
[   65.126566][ T4371] binder: undelivered TRANSACTION_ERROR: 29201
[   65.386536][ T5567] binder: 5566:5567 ioctl c0306201 20000080 returned -14
[   65.389504][ T5567] binder: 5566:5567 got transaction to invalid handle, 1
[   65.390963][ T5567] binder: 5567:5566 cannot find target node
[   65.392103][ T5567] binder: 5566:5567 transaction async to 0:0 failed 66/29201/-22, size 112-24 line 3045
[   65.530353][ T4371] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   65.706455][ T5579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   65.709400][ T5579] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   65.728320][ T4371] usb 1-1: Using ep0 maxpacket: 32
[   65.730939][ T4371] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[   65.732390][ T4371] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   65.737301][ T4371] usb 1-1: config 0 descriptor??
[   65.744312][ T4371] gspca_main: sunplus-2.14.0 probing 041e:400b
[   65.782993][ T5581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   65.786173][ T5581] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   66.947987][ T5606] netlink: 'syz.4.457': attribute type 1 has an invalid length.
[   67.397567][ T5616] binder: 5615:5616 ioctl c0306201 20000080 returned -14
[   67.400477][ T5616] binder: 5615:5616 tried to acquire reference to desc 0, got 1 instead
[   67.401949][ T5616] binder: 5615:5616 ioctl c0306201 200003c0 returned -14
[   67.403497][ T5616] binder_alloc: 5615: binder_alloc_buf, no vma
[   67.404647][ T5616] binder_debug: 1 callbacks suppressed
[   67.404654][ T5616] binder: cannot allocate buffer: vma cleared, target dead or dying
[   67.405550][ T5616] binder: 5615:5616 transaction async to 5615:0 failed 71/29189/-3, size 96-24 line 3230
[   67.409600][ T3898] binder: undelivered TRANSACTION_ERROR: 29189
[   67.437953][ T5618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   67.443855][ T5618] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   68.103830][ T4371] gspca_sunplus: reg_w_riv err -71
[   68.104912][ T4371] sunplus: probe of 1-1:0.0 failed with error -71
[   68.107287][ T4371] usb 1-1: USB disconnect, device number 7
[   68.353411][ T5642] binder: 5641:5642 ioctl c0306201 20000080 returned -14
[   68.357674][ T5642] binder: 5641:5642 tried to acquire reference to desc 0, got 1 instead
[   68.359481][ T5642] binder: 5641:5642 ioctl c0306201 200003c0 returned -14
[   68.360855][ T5642] binder_alloc: 5641: binder_alloc_buf, no vma
[   68.362519][ T5642] binder: cannot allocate buffer: vma cleared, target dead or dying
[   68.362569][ T5642] binder: 5641:5642 transaction async to 5641:0 failed 76/29189/-3, size 96-24 line 3230
[   68.365946][ T4371] binder: undelivered TRANSACTION_ERROR: 29189
[   68.452935][ T5646] device syzkaller1 entered promiscuous mode
[   68.459826][ T5648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   68.461284][ T5648] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   68.677491][ T5652] binder: 5651:5652 tried to acquire reference to desc 0, got 1 instead
[   68.681811][  T112] binder: release 5651:5652 transaction 81 out, still active
[   68.739423][  T112] binder: undelivered TRANSACTION_COMPLETE
[   68.745713][ T5654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.479'.
[   68.752913][ T5654] netlink: 12 bytes leftover after parsing attributes in process `syz.2.479'.
[   68.898389][ T4371] binder: send failed reply for transaction 81, target dead
[   69.368605][ T5671] binder: 5670:5671 ioctl c0306201 20000080 returned -14
[   69.370740][ T5671] binder: 5670:5671 tried to acquire reference to desc 0, got 1 instead
[   69.372219][ T5671] binder: 5670:5671 ioctl c0306201 200003c0 returned -14
[   69.373521][ T5671] binder_alloc: 5670: binder_alloc_buf, no vma
[   69.374549][ T5671] binder: cannot allocate buffer: vma cleared, target dead or dying
[   69.439747][ T5676] binder: 5675:5676 ioctl c0306201 20000080 returned -14
[   69.443531][ T5676] binder: 5675:5676 ioctl c0306201 200003c0 returned -14
[   69.444942][ T5676] binder: 5675:5676 got transaction to invalid handle, 1
[   69.532375][ T5682] binder: 5681:5682 ioctl c0306201 20000080 returned -14
[   69.541443][ T5682] binder: 5681:5682 ioctl c0306201 200003c0 returned -14
[   69.542988][ T5682] binder: 5681:5682 got transaction to invalid handle, 1
[   69.558193][ T4371] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[   69.598832][   T24] cfg80211: failed to load regulatory.db
[   69.738977][ T4371] usb 1-1: not running at top speed; connect to a high speed hub
[   69.741072][ T4371] usb 1-1: config 6 has an invalid descriptor of length 64, skipping remainder of the config
[   69.744480][ T4371] usb 1-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.24
[   69.746008][ T4371] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   69.747488][ T4371] usb 1-1: Product: syz
[   69.758117][ T4371] usb 1-1: Manufacturer: syz
[   69.758964][ T4371] usb 1-1: SerialNumber: syz
[   69.899431][ T5702] binder: 5701:5702 ioctl c0306201 20000080 returned -14
[   69.910270][ T5702] binder: 5701:5702 tried to acquire reference to desc 0, got 1 instead
[   69.911787][ T5702] binder: 5701:5702 ioctl c0306201 200003c0 returned -14
[   69.919430][ T5702] binder_alloc: 5701: binder_alloc_buf, no vma
[   69.973599][ T4371] qmi_wwan 1-1:6.0: invalid descriptor buffer length
[   69.975013][ T4371] qmi_wwan: probe of 1-1:6.0 failed with error -22
[   69.979572][ T4371] usb 1-1: USB disconnect, device number 8
[   70.037531][ T5716] netlink: 156 bytes leftover after parsing attributes in process `syz.1.504'.
[   70.147501][ T5726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   70.151482][ T5726] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   70.325198][ T5732] netlink: 'syz.1.510': attribute type 1 has an invalid length.
[   70.718935][ T5743] binder: 5742:5743 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   70.721116][ T5743] binder: 5743 RLIMIT_NICE not set
[   70.769838][ T5748] binder: 5742:5748 unknown command 1074553619
[   70.772486][ T5748] binder: 5742:5748 ioctl c0306201 20000540 returned -22
[   70.856970][ T5755] netlink: 156 bytes leftover after parsing attributes in process `syz.4.518'.
[   70.878363][ T4328] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[   70.879977][ T4328] Bluetooth: hci4: Injecting HCI hardware error event
[   70.881805][ T4333] Bluetooth: hci4: hardware error 0x00
[   71.166932][ T5774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   71.172471][ T5774] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   71.250051][ T5770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   71.258452][ T5770] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   71.375989][ T5774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   71.377738][ T5774] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   71.589749][ T5780] netlink: 156 bytes leftover after parsing attributes in process `syz.0.529'.
[   72.242256][ T5819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   72.261647][ T5819] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   72.604468][ T5837] xt_SECMARK: invalid mode: 2
[   72.946611][ T5841] binder: 5840:5841 ioctl c0306201 20000080 returned -14
[   72.952761][ T5841] binder: 5840:5841 tried to acquire reference to desc 0, got 1 instead
[   72.954261][ T5841] binder: 5840:5841 ioctl c0306201 200003c0 returned -14
[   72.959773][ T5841] binder: 5840:5841 got transaction with invalid fd, -1
[   72.960900][ T5841] binder_debug: 11 callbacks suppressed
[   72.960913][ T5841] binder: 5841:5840 translate fd failed
[   72.967004][ T5841] binder: 5840:5841 transaction async to 5840:0 failed 104/29201/-9, size 96-24 line 3415
[   72.972142][ T4371] binder: undelivered TRANSACTION_ERROR: 29201
[   73.038260][ T4333] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[   73.047579][ T5849] binder: 5848:5849 tried to acquire reference to desc 0, got 1 instead
[   73.063327][ T5849] binder: 5848:5849 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   73.065499][ T5849] binder: 5849 RLIMIT_NICE not set
[   73.074241][ T5853] binder: 5852:5853 ioctl c0306201 20000080 returned -14
[   73.076741][ T5853] binder: BINDER_SET_CONTEXT_MGR already set
[   73.078000][ T5853] binder: 5852:5853 ioctl 4018620d 20000040 returned -16
[   73.079931][ T5853] binder: 5852:5853 ioctl c0306201 200003c0 returned -14
[   73.081447][ T5853] binder: 5852:5853 got transaction to invalid handle, 1
[   73.082572][ T5853] binder: 5853:5852 cannot find target node
[   73.083443][ T5853] binder: 5852:5853 transaction async to 0:0 failed 112/29201/-22, size 112-24 line 3045
[   73.085398][ T4371] binder: undelivered TRANSACTION_ERROR: 29201
[   73.086737][ T5849] binder: 5849 RLIMIT_NICE not set
[   73.087619][ T5849] binder: send failed reply for transaction 109 to 5848:5849
[   73.091877][ T5849] binder: 5848:5849 transaction 109 fd fixups failed 29201/-12, line 4667
[   73.094162][ T4371] binder: undelivered TRANSACTION_COMPLETE
[   73.095212][ T4371] binder: undelivered TRANSACTION_ERROR: 29201
[   73.581583][ T5865] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   73.585703][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.588813][ T5865] 8021q: adding VLAN 0 to HW filter on device team0
[   73.613774][ T5865] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   73.621139][ T5872] binder: 5871:5872 ioctl c0306201 20000080 returned -14
[   73.624052][ T5872] binder: 5871:5872 tried to acquire reference to desc 0, got 1 instead
[   73.625683][ T5872] binder: 5871:5872 ioctl c0306201 200003c0 returned -14
[   73.627088][ T5872] binder: 5871:5872 got transaction with invalid fd, -1
[   73.918270][ T4333] Bluetooth: hci2: command 0x2021 tx timeout
[   74.178011][ T5888] binder: 5887:5888 ioctl c0306201 20000080 returned -14
[   74.185164][ T5888] binder: BINDER_SET_CONTEXT_MGR already set
[   74.186371][ T5888] binder: 5887:5888 ioctl 4018620d 20000040 returned -16
[   74.195247][ T5888] binder: 5887:5888 ioctl c0306201 200003c0 returned -14
[   74.197866][ T5888] binder: 5887:5888 got transaction to invalid handle, 1
[   74.438837][ T5896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   74.440439][ T5896] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   74.542514][ T5913] binder: 5912:5913 ioctl c0306201 20000080 returned -14
[   74.544708][ T5913] binder: BINDER_SET_CONTEXT_MGR already set
[   74.545713][ T5913] binder: 5912:5913 ioctl 4018620d 20000040 returned -16
[   74.547195][ T5913] binder: 5912:5913 ioctl c0306201 200003c0 returned -14
[   74.640356][ T5919] Bluetooth: MGMT ver 1.22
[   75.181984][ T5941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   75.192030][ T5941] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   75.209046][ T5944] binder: 5943:5944 ioctl c0306201 20000080 returned -14
[   75.213855][ T4341] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   75.215828][ T4341] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   75.217543][ T4341] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   75.220611][ T4341] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   75.222169][ T4341] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   75.223606][ T4341] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   75.225996][ T5944] binder: BINDER_SET_CONTEXT_MGR already set
[   75.227787][ T5944] binder: 5943:5944 ioctl 4018620d 20000040 returned -16
[   75.234321][ T5944] binder: 5943:5944 ioctl c0306201 200003c0 returned -14
[   75.301845][ T5955] binder: 5954:5955 ioctl c0306201 20000080 returned -14
[   75.303761][ T5955] binder: 5954:5955 ioctl c0306201 200003c0 returned -14
[   75.507673][ T5942] chnl_net:caif_netlink_parms(): no params data found
[   75.537871][ T5965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   75.539379][ T5965] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   75.581733][ T5978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   75.590576][ T5978] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   75.602253][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.603512][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.605122][ T5942] device bridge_slave_0 entered promiscuous mode
[   75.607355][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.609022][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.610455][ T5942] device bridge_slave_1 entered promiscuous mode
[   75.617329][ T5942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   75.623727][ T5942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   75.630999][ T5942] team0: Port device team_slave_0 added
[   75.633737][ T5942] team0: Port device team_slave_1 added
[   75.670413][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_0
[   75.671557][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.676257][ T5942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   75.679350][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_1
[   75.680572][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.685211][ T5942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   75.721497][ T5942] device hsr_slave_0 entered promiscuous mode
[   75.751031][ T5986] binder: 5985:5986 ioctl c0306201 20000080 returned -14
[   75.753257][ T5986] binder: BINDER_SET_CONTEXT_MGR already set
[   75.754225][ T5986] binder: 5985:5986 ioctl 4018620d 20000040 returned -16
[   75.755598][ T5986] binder: 5985:5986 ioctl c0306201 200003c0 returned -14
[   75.778694][ T5942] device hsr_slave_1 entered promiscuous mode
[   75.798172][ T5942] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   75.799416][ T5942] Cannot create hsr debugfs directory
[   75.931206][ T5942] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   75.973409][ T5942] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   76.029346][ T5942] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   76.066538][ T5942] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   76.095565][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.096787][ T5942] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.098405][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.099586][ T5942] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.130277][ T5942] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.135604][ T5942] 8021q: adding VLAN 0 to HW filter on device team0
[   76.256654][ T6006] netlink: 'syz.1.622': attribute type 1 has an invalid length.
[   76.559887][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   76.562820][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   76.566548][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.624276][ T6019] binder: 6018:6019 ioctl c0306201 200003c0 returned -14
[   76.635044][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   76.637484][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   76.642980][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.644236][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.655920][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   76.662726][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   76.666573][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   76.700897][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   76.706219][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   76.716018][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   76.778537][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   76.782273][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   76.788801][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   76.791024][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   76.792654][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   76.804597][ T5942] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   76.923647][ T6037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   76.925196][ T6037] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   76.991414][ T6041] binder: BINDER_SET_CONTEXT_MGR already set
[   76.992491][ T6041] binder: 6040:6041 ioctl 4018620d 20000040 returned -16
[   77.174843][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   77.176379][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   77.179700][ T5942] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.278167][ T4341] Bluetooth: hci5: command 0x0409 tx timeout
[   77.381349][ T6080] binder: 6078:6080 ioctl c0306201 200003c0 returned -14
[   77.461916][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   77.463561][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   77.477394][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   77.479015][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   77.480608][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   77.482010][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   77.486149][ T5942] device veth0_vlan entered promiscuous mode
[   77.731047][ T6099] netlink: 'syz.2.639': attribute type 1 has an invalid length.
[   77.956051][ T5942] device veth1_vlan entered promiscuous mode
[   77.965779][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   77.967431][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   77.970300][ T5942] device veth0_macvtap entered promiscuous mode
[   77.973525][ T5942] device veth1_macvtap entered promiscuous mode
[   78.018366][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.020329][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.023185][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.027579][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   78.030609][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   78.033351][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   78.035468][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   78.095537][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.097355][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.099921][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_1
[   78.165950][ T6117] binder: BINDER_SET_CONTEXT_MGR already set
[   78.167164][ T6117] binder: 6116:6117 ioctl 4018620d 20000040 returned -16
[   78.168736][ T6117] binder_user_error: 10 callbacks suppressed
[   78.168741][ T6117] binder: 6116:6117 got transaction to invalid handle, 1
[   78.170823][ T6117] binder_debug: 30 callbacks suppressed
[   78.170836][ T6117] binder: 6117:6116 cannot find target node
[   78.172794][ T6117] binder: 6116:6117 transaction async to 0:0 failed 147/29201/-22, size 112-24 line 3045
[   78.174833][ T4371] binder: undelivered TRANSACTION_ERROR: 29201
[   78.291551][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   78.293486][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   78.302186][ T5942] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.304727][ T5942] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.308441][ T5942] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.313434][ T5942] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.395735][ T4650] device hsr_slave_0 left promiscuous mode
[   78.438333][ T4650] device hsr_slave_1 left promiscuous mode
[   78.528242][ T4650] batman_adv: batadv0: Removing interface: batadv_slave_0
[   78.530387][ T4650] batman_adv: batadv0: Removing interface: batadv_slave_1
[   78.531937][ T4650] device bridge_slave_1 left promiscuous mode
[   78.533918][ T4650] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.579134][ T4650] device bridge_slave_0 left promiscuous mode
[   78.580413][ T4650] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.105597][ T6129] binder: 6128:6129 ioctl c0306201 200003c0 returned -14
[   79.107035][ T6129] binder: 6128:6129 got transaction to invalid handle, 1
[   79.113563][ T6129] binder: 6129:6128 cannot find target node
[   79.114588][ T6129] binder: 6128:6129 transaction async to 0:0 failed 151/29201/-22, size 96-24 line 3045
[   79.116640][ T4373] binder: undelivered TRANSACTION_ERROR: 29201
[   79.301512][ T6136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   79.303270][ T6136] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   79.358508][ T4333] Bluetooth: hci5: command 0x041b tx timeout
[   80.642262][ T4650] team0 (unregistering): Port device 
2 removed
[   80.779577][ T4650] team0 (unregistering): Port device team_slave_0 removed
[   80.938614][ T4650] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   81.139268][ T4650] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   81.438057][ T4333] Bluetooth: hci5: command 0x040f tx timeout
[   82.609515][ T4650] bond0 (unregistering): Released all slaves
[   82.933929][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.935166][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.942813][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   82.970184][ T4447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.971544][ T4447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.972831][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   83.460245][ T6173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.656'.
[   83.469456][ T6173] netlink: 12 bytes leftover after parsing attributes in process `syz.1.656'.
[   83.538244][ T4333] Bluetooth: hci5: command 0x0419 tx timeout
[   83.860507][ T6190] binder: 6189:6190 tried to acquire reference to desc 0, got 1 instead
[   83.863254][ T6190] binder: 6189:6190 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   83.865440][ T6190] binder: 6190 RLIMIT_NICE not set
[   83.866268][ T6190] binder: 6190 RLIMIT_NICE not set
[   83.867266][ T6190] binder: send failed reply for transaction 156 to 6189:6190
[   83.869162][ T6190] binder: 6189:6190 ioctl c0306201 20000680 returned -14
[   83.927968][ T6192] netlink: 'syz.0.657': attribute type 1 has an invalid length.
[   84.186530][ T4371] binder: undelivered TRANSACTION_COMPLETE
[   84.187674][ T4371] binder: undelivered TRANSACTION_ERROR: 29201
[   84.233935][ T6196] loop1: detected capacity change from 0 to 1024
[   84.286199][ T6196] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   84.415928][ T6208] fuse: Bad value for 'fd'
[   84.571984][ T6211] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #15: comm syz.1.661: lblock 0 mapped to illegal pblock 0 (length 1)
[   84.615166][ T6211] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[   84.617517][ T6211] EXT4-fs (loop1): This should not happen!! Data will be lost
[   84.617517][ T6211] 
[   84.964036][ T6220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   84.966943][ T6220] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   85.004497][ T4333] Bluetooth: hci2: link tx timeout
[   85.006213][ T4333] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[   85.104364][ T4332] EXT4-fs (loop1): unmounting filesystem.
[   85.301965][ T6262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.672'.
[   85.310141][ T6262] netlink: 12 bytes leftover after parsing attributes in process `syz.2.672'.
[   85.783994][ T6267] device syzkaller0 entered promiscuous mode
[   86.074888][ T6285] loop2: detected capacity change from 0 to 7
[   86.081074][ T4318] Dev loop2: unable to read RDB block 7
[   86.082078][ T4318]  loop2: AHDI p1 p2 p3
[   86.082832][ T4318] loop2: partition table partially beyond EOD, truncated
[   86.086649][ T4318] loop2: p1 start 1601398130 is beyond EOD, truncated
[   86.087761][ T4318] loop2: p2 start 1702059890 is beyond EOD, truncated
[   86.104470][ T6285] Dev loop2: unable to read RDB block 7
[   86.105345][ T6285]  loop2: AHDI p1 p2 p3
[   86.105975][ T6285] loop2: partition table partially beyond EOD, truncated
[   86.107488][ T6285] loop2: p1 start 1601398130 is beyond EOD, truncated
[   86.110633][ T6285] loop2: p2 start 1702059890 is beyond EOD, truncated
[   86.192381][ T6294] binder: 6293:6294 Acquire 1 refcount change on invalid ref 0 ret -22
[   86.193743][ T6294] binder: 6293:6294 ioctl c0306201 20000080 returned -14
[   86.200056][ T6294] binder: 6293:6294 ioctl c0306201 200003c0 returned -14
[   86.212509][ T4333] Bluetooth: hci2: link tx timeout
[   86.213417][ T4333] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[   86.300012][ T6304] loop5: detected capacity change from 0 to 1024
[   86.332948][ T6304] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[   86.911096][ T6324] EXT4-fs error (device loop5): ext4_map_blocks:747: inode #15: comm syz.5.683: lblock 0 mapped to illegal pblock 0 (length 1)
[   86.938537][ T6324] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[   86.940870][ T6324] EXT4-fs (loop5): This should not happen!! Data will be lost
[   86.940870][ T6324] 
[   87.039186][ T4341] Bluetooth: hci2: command 0x0406 tx timeout
[   87.171984][ T5942] EXT4-fs (loop5): unmounting filesystem.
[   87.294775][ T6334] netlink: 4 bytes leftover after parsing attributes in process `syz.0.687'.
[   87.302178][ T6334] netlink: 12 bytes leftover after parsing attributes in process `syz.0.687'.
[   87.557332][ T6332] binder: 6331:6332 ioctl c0306201 200003c0 returned -14
[   87.566497][ T6332] binder: 6331:6332 got transaction to invalid handle, 1
[   87.567730][ T6332] binder: 6332:6331 cannot find target node
[   87.575093][ T6332] binder: 6331:6332 transaction async to 0:0 failed 161/29201/-22, size 96-24 line 3045
[   87.579407][ T4371] binder: undelivered TRANSACTION_ERROR: 29201
[   87.696780][ T6350] binder: 6349:6350 Acquire 1 refcount change on invalid ref 0 ret -22
[   87.701540][ T6350] binder: 6349:6350 ioctl c0306201 20000080 returned -14
[   87.736238][ T6350] binder: 6349:6350 ioctl c0306201 200003c0 returned -14
[   88.183796][ T6355] loop5: detected capacity change from 0 to 16
[   88.212491][ T6355] erofs: (device loop5): mounted with root inode @ nid 36.
[   88.602898][ T6366] binder: 6365:6366 Acquire 1 refcount change on invalid ref 0 ret -22
[   88.604346][ T6366] binder: 6365:6366 ioctl c0306201 20000080 returned -14
[   88.606570][ T6366] binder: 6365:6366 ioctl c0306201 200003c0 returned -14
[   88.749739][ T6378] netlink: 'syz.2.697': attribute type 1 has an invalid length.
[   89.040754][ T6384] binder: 6382:6384 Acquire 1 refcount change on invalid ref 0 ret -22
[   89.042092][ T6384] binder: 6382:6384 ioctl c0306201 20000080 returned -14
[   89.044490][ T6384] binder: 6382:6384 ioctl c0306201 200003c0 returned -14
[   89.211615][ T6398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.709'.
[   89.215828][ T6398] netlink: 12 bytes leftover after parsing attributes in process `syz.1.709'.
[   90.011536][ T4371] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[   90.049541][ T6408] binder: 6407:6408 Acquire 1 refcount change on invalid ref 0 ret -22
[   90.050952][ T6408] binder: 6407:6408 ioctl c0306201 20000080 returned -14
[   90.061178][ T6408] binder: 6407:6408 ioctl c0306201 200003c0 returned -14
[   90.092476][ T4333] Bluetooth: Unknown BR/EDR signaling command 0xff
[   90.093679][ T4333] Bluetooth: Wrong link type (-22)
[   90.198561][ T4371] usb 1-1: device descriptor read/64, error -71
[   90.688072][ T4371] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[   90.838160][ T4371] usb 1-1: device descriptor read/64, error -71
[   90.958206][ T4371] usb usb1-port1: attempt power cycle
[   91.072294][ T6426] binder: 6425:6426 Acquire 1 refcount change on invalid ref 0 ret -22
[   91.084497][ T6426] binder: 6425:6426 ioctl c0306201 20000080 returned -14
[   91.087116][ T6426] binder: 6425:6426 ioctl c0306201 200003c0 returned -14
[   91.261555][ T6441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   91.264551][ T6441] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   91.442801][ T4371] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[   91.764408][ T4371] usb 1-1: device descriptor read/8, error -71
[   91.829481][ T6449] loop1: detected capacity change from 0 to 32768
[   91.872425][ T6449] XFS (loop1): Mounting V5 Filesystem
[   91.905995][ T6449] XFS (loop1): Ending clean mount
[   91.914209][ T6449] XFS (loop1): Quotacheck needed: Please wait.
[   91.928791][ T6449] XFS (loop1): Quotacheck: Done.
[   92.028095][ T4371] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[   92.058605][ T4371] usb 1-1: device descriptor read/8, error -71
[   92.332777][ T4371] usb usb1-port1: unable to enumerate USB device
[   92.400174][ T6474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   92.406299][ T6474] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   92.862379][ T4332] XFS (loop1): Unmounting Filesystem
[   93.037715][ T4341] Bluetooth: Unknown BR/EDR signaling command 0xff
[   93.038856][ T4341] Bluetooth: Wrong link type (-22)
[   93.039831][ T4341] Bluetooth: hci0: link tx timeout
[   93.040862][ T4341] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[   93.425431][ T6498] binder: 6496:6498 ioctl 4018620d 0 returned -22
[   93.427104][ T6498] binder: 6496:6498 Acquire 1 refcount change on invalid ref 0 ret -22
[   93.497735][ T6498] binder: 6496:6498 ioctl c0306201 20000080 returned -14
[   93.505739][ T6498] binder: 6496:6498 ioctl c0306201 200003c0 returned -14
[   93.511336][ T6498] binder: 6496:6498 got transaction to invalid handle, 1
[   93.512594][ T6498] binder: 6498:6496 cannot find target node
[   93.516871][ T6498] binder: 6496:6498 transaction async to 0:0 failed 174/29201/-22, size 112-24 line 3045
[   93.524753][ T4372] binder: undelivered TRANSACTION_ERROR: 29201
[   94.026161][ T6495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   94.029215][ T6495] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   94.295842][ T6512] binder: BINDER_SET_CONTEXT_MGR already set
[   94.297082][ T6512] binder: 6511:6512 ioctl 4018620d 20000040 returned -16
[   94.302663][ T6512] binder: 6511:6512 got transaction to invalid handle, 1
[   94.303842][ T6512] binder: 6512:6511 cannot find target node
[   94.304955][ T6512] binder: 6511:6512 transaction async to 0:0 failed 176/29201/-22, size 112-24 line 3045
[   94.308950][ T4484] binder: undelivered TRANSACTION_ERROR: 29201
[   94.336760][ T6514] loop5: detected capacity change from 0 to 2048
[   94.343681][ T6514] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   94.427500][ T6510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   94.430090][ T6510] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   94.974634][ T6537] loop2: detected capacity change from 0 to 4096
[   94.985175][ T6537] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   95.043912][ T4335] EXT4-fs (loop2): unmounting filesystem.
[   95.118101][ T4341] Bluetooth: hci0: command 0x0406 tx timeout
[   95.514039][ T6549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   95.515662][ T6549] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   96.077373][ T6565] binder: 6564:6565 ioctl 4018620d 0 returned -22
[   96.086203][ T6565] binder: 6564:6565 Acquire 1 refcount change on invalid ref 0 ret -22
[   96.087390][ T6565] binder: 6564:6565 ioctl c0306201 20000080 returned -14
[   96.089905][ T6565] binder: 6564:6565 ioctl c0306201 200003c0 returned -14
[   96.091122][ T6565] binder: 6564:6565 got transaction to invalid handle, 1
[   96.092256][ T6565] binder: 6565:6564 cannot find target node
[   96.093158][ T6565] binder: 6564:6565 transaction async to 0:0 failed 179/29201/-22, size 112-24 line 3045
[   96.095076][ T4372] binder: undelivered TRANSACTION_ERROR: 29201
[   96.127718][ T6571] loop2: detected capacity change from 0 to 16
[   96.134405][ T6571] erofs: (device loop2): mounted with root inode @ nid 36.
[   96.169941][ T6571] syz.2.754: attempt to access beyond end of device
[   96.169941][ T6571] loop2: rw=524288, sector=88, nr_sectors = 48 limit=16
[   96.179043][ T6571] syz.2.754: attempt to access beyond end of device
[   96.179043][ T6571] loop2: rw=524288, sector=8, nr_sectors = 80 limit=16
[   96.186635][ T6571] ==================================================================
[   96.187867][ T6571] BUG: KASAN: use-after-free in z_erofs_transform_plain+0x3a4/0x490
[   96.189095][ T6571] Read of size 4096 at addr ffff0000dbf37000 by task syz.2.754/6571
[   96.190323][ T6571] 
[   96.190672][ T6571] CPU: 1 PID: 6571 Comm: syz.2.754 Not tainted syzkaller #0
[   96.191764][ T6571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[   96.193326][ T6571] Call trace:
[   96.193837][ T6571]  dump_backtrace+0x1c0/0x1ec
[   96.194610][ T6571]  show_stack+0x2c/0x3c
[   96.195295][ T6571]  __dump_stack+0x30/0x40
[   96.196027][ T6571]  dump_stack_lvl+0xf4/0x15c
[   96.196732][ T6571]  print_address_description+0x88/0x218
[   96.197583][ T6571]  print_report+0x50/0x68
[   96.198246][ T6571]  kasan_report+0xa8/0xfc
[   96.198909][ T6571]  kasan_check_range+0x258/0x290
[   96.199727][ T6571]  memcpy+0x48/0x90
[   96.200339][ T6571]  z_erofs_transform_plain+0x3a4/0x490
[   96.201256][ T6571]  z_erofs_decompress+0x9c/0xd4
[   96.202106][ T6571]  z_erofs_decompress_queue+0x100c/0x1b40
[   96.203125][ T6571]  z_erofs_runqueue+0x1564/0x16cc
[   96.203971][ T6571]  z_erofs_read_folio+0x2d8/0x5c8
[   96.204789][ T6571]  filemap_read_folio+0x134/0x384
[   96.205648][ T6571]  filemap_fault+0x98c/0xe98
[   96.206443][ T6571]  __do_fault+0x11c/0x3d8
[   96.207206][ T6571]  handle_mm_fault+0x1cac/0x2fb0
[   96.208046][ T6571]  do_page_fault+0x310/0x98c
[   96.208790][ T6571]  do_translation_fault+0x94/0xc8
[   96.209633][ T6571]  do_mem_abort+0x70/0x194
[   96.210377][ T6571]  el0_da+0x70/0x144
[   96.211065][ T6571]  el0t_64_sync_handler+0x90/0xf0
[   96.211892][ T6571]  el0t_64_sync+0x18c/0x190
[   96.212628][ T6571] 
[   96.213005][ T6571] Allocated by task 4329:
[   96.213747][ T6571]  kasan_set_track+0x4c/0x80
[   96.214515][ T6571]  kasan_save_alloc_info+0x24/0x30
[   96.215321][ T6571]  __kasan_slab_alloc+0x70/0x88
[   96.216068][ T6571]  slab_post_alloc_hook+0x74/0x430
[   96.216894][ T6571]  kmem_cache_alloc+0x22c/0x308
[   96.217692][ T6571]  anon_vma_fork+0x190/0x470
[   96.218456][ T6571]  copy_mm+0x8bc/0x11ec
[   96.219175][ T6571]  copy_process+0x18f8/0x36e4
[   96.219969][ T6571]  kernel_clone+0x1ec/0x918
[   96.220710][ T6571]  __arm64_sys_clone+0x154/0x1c0
[   96.221524][ T6571]  invoke_syscall+0x98/0x2b4
[   96.222257][ T6571]  el0_svc_common+0x138/0x258
[   96.223072][ T6571]  do_el0_svc+0x58/0x130
[   96.223784][ T6571]  el0_svc+0x58/0x128
[   96.224393][ T6571]  el0t_64_sync_handler+0x84/0xf0
[   96.225197][ T6571]  el0t_64_sync+0x18c/0x190
[   96.225955][ T6571] 
[   96.226304][ T6571] Freed by task 6478:
[   96.226921][ T6571]  kasan_set_track+0x4c/0x80
[   96.227669][ T6571]  kasan_save_free_info+0x38/0x5c
[   96.228519][ T6571]  ____kasan_slab_free+0x148/0x1b0
[   96.229360][ T6571]  __kasan_slab_free+0x18/0x28
[   96.230133][ T6571]  slab_free_freelist_hook+0x16c/0x1e8
[   96.231059][ T6571]  kmem_cache_free+0x118/0x314
[   96.231839][ T6571]  unlink_anon_vmas+0x48c/0x51c
[   96.232674][ T6571]  free_pgtables+0x1e4/0x34c
[   96.233461][ T6571]  exit_mmap+0x2a0/0x938
[   96.234196][ T6571]  __mmput+0xec/0x394
[   96.234853][ T6571]  mmput+0x70/0xa8
[   96.235504][ T6571]  exit_mm+0x140/0x220
[   96.236192][ T6571]  do_exit+0x4d0/0x19b0
[   96.236858][ T6571]  do_group_exit+0x194/0x22c
[   96.237581][ T6571]  get_signal+0x11cc/0x1304
[   96.238370][ T6571]  do_notify_resume+0x33c/0x2aa4
[   96.239176][ T6571]  el0_svc+0x98/0x128
[   96.239816][ T6571]  el0t_64_sync_handler+0x84/0xf0
[   96.240604][ T6571]  el0t_64_sync+0x18c/0x190
[   96.241292][ T6571] 
[   96.241658][ T6571] The buggy address belongs to the object at ffff0000dbf37000
[   96.241658][ T6571]  which belongs to the cache anon_vma_chain of size 80
[   96.243841][ T6571] The buggy address is located 0 bytes inside of
[   96.243841][ T6571]  80-byte region [ffff0000dbf37000, ffff0000dbf37050)
[   96.245836][ T6571] 
[   96.246206][ T6571] The buggy address belongs to the physical page:
[   96.247231][ T6571] page:0000000032e226be refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11bf37
[   96.248913][ T6571] memcg:ffff0000f3abbc01
[   96.249608][ T6571] flags: 0x5ffc00000000200(slab|node=0|zone=2|lastcpupid=0x7ff)
[   96.250850][ T6571] raw: 05ffc00000000200 dead000000000100 dead000000000122 ffff0000c03dac00
[   96.252198][ T6571] raw: 0000000000000000 0000000000240024 00000001ffffffff ffff0000f3abbc01
[   96.253638][ T6571] page dumped because: kasan: bad access detected
[   96.254717][ T6571] 
[   96.255114][ T6571] Memory state around the buggy address:
[   96.256020][ T6571]  ffff0000dbf36f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   96.257249][ T6571]  ffff0000dbf36f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   96.258666][ T6571] >ffff0000dbf37000: fa fb fb fb fb fb fb fb fb fb fc fc fc fc fa fb
[   96.259948][ T6571]                    ^
[   96.260637][ T6571]  ffff0000dbf37080: fb fb fb fb fb fb fb fb fc fc fc fc fa fb fb fb
[   96.261937][ T6571]  ffff0000dbf37100: fb fb fb fb fb fb fc fc fc fc fa fb fb fb fb fb
[   96.263184][ T6571] ==================================================================
[   96.270990][ T6571] Disabling lock debugging due to kernel taint
[   96.578088][ T4372] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[   96.770075][ T4372] usb 1-1: not running at top speed; connect to a high speed hub
[   96.772146][ T4372] usb 1-1: config 6 has an invalid descriptor of length 64, skipping remainder of the config
[   96.775150][ T4372] usb 1-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.24
[   96.776907][ T4372] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.779068][ T4372] usb 1-1: Product: syz
[   96.779744][ T4372] usb 1-1: Manufacturer: syz
[   96.780435][ T4372] usb 1-1: SerialNumber: syz
[   96.988523][ T4372] qmi_wwan 1-1:6.0: invalid descriptor buffer length
[   96.989721][ T4372] qmi_wwan: probe of 1-1:6.0 failed with error -22
[   96.992551][ T4372] usb 1-1: USB disconnect, device number 13