last executing test programs:

1m54.674934821s ago: executing program 1 (id=271):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
dup2(r0, r3)

1m54.304085016s ago: executing program 1 (id=276):
syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000001f80)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x553b, &(0x7f000000ac00)="$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")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
read$FUSE(r0, 0x0, 0x0)

1m52.543743186s ago: executing program 1 (id=289):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m52.164081291s ago: executing program 0 (id=294):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000080)='ext4_es_insert_delayed_block\x00', r2}, 0x10)
write$cgroup_subtree(r0, &(0x7f00000009c0)=ANY=[], 0xda00)

1m51.415804901s ago: executing program 0 (id=295):
syz_open_procfs$namespace(0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x9, 0x2a8, &(0x7f0000000500)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0)
getrlimit(0x0, &(0x7f0000000240))
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
setrlimit(0xd, &(0x7f0000000280)={0x89c, 0x4})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000400))
r3 = open(&(0x7f0000000440)='./file0\x00', 0x60c2, 0x0)
r4 = open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
write(r3, &(0x7f0000000600)="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", 0x1a4)
sendfile(r3, r4, 0x0, 0xef85)

1m50.499374127s ago: executing program 1 (id=299):
syz_mount_image$xfs(&(0x7f0000000200), &(0x7f0000000100)='./file1\x00', 0x8000, &(0x7f0000000040), 0x4, 0x9836, &(0x7f0000009b80)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
setxattr$security_ima(&(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x700, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000280), &(0x7f000000a440)=ANY=[], 0x90f, 0x0)

1m47.280020224s ago: executing program 1 (id=310):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200c840, &(0x7f0000000080)={[{@discard}, {@noload}]}, 0x64, 0x526, &(0x7f0000000a40)="$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")

1m44.525959473s ago: executing program 0 (id=321):
syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000180)='./file1\x00', 0x4080, &(0x7f0000000040)=ANY=[], 0x3, 0x7c4, &(0x7f00000006c0)="$eJzs3U9oHOfZAPBn9Em2o/D5C/k+8hnjOGM7BZs6yu4qUSpySDerkTzJalfsropNKYmJ5WAsJyEhpPGhqS9JW1pKTz2muYZcemsptNBD21OhOfTSQyGQU0lLC6WlFFx2dtf6u5JsS3H+/H6L952deead950dz7Oz2pkJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACCS2kypVE6injcWz6bD1WZazfktpg/q+8WaYovlRiTdf3HgQBzqjTr0fyuT7+s+HY8jvVdH4kC3OBBX777vnsf/d3RkMP8WDbpVx4ZPGlv9Ion4ZrdRl88vLy+9vAcN+Rh952f9gQM7nuWf17vPc1kjbzfz+epclubtZjo9NVV6+MxsO53N61n7XLuTzae1VlbtNFvpydqptDw9PZlmE+eai425mWo9G4x87KFKqTSVPjWxkFVb7Wbj4acm2rUzeb2eN+aKmErptejGPNbdEJ/OO2knq86n6cVLy0uT2zW1G1ReM2b/mg3nyIP3fPjqB3+7tNTdIIdVkvQ3zEq5XKmUpx6dfvSxUmm0UqqsHVFaJ25ExEhEN2JPNlo+RSKu/8/u7cDhNoz083/UI49GLMbZSCONkeJ55TEWtZiJVjRjvvv692Prpm/I/194+M+/3Wq5q/P/IMsfWpl8OIr8f7T36uiw/L+hFXv5aLzXa83qca/E63E1Lsf5WI7lWIqXb6Xmfetr3cPHyO7WNxdZNCKPdjQjj/moFmPS/pg0pmMqpqIUz8SZmI12pDEbedQji3aci3Z0Iiu2qFq0IotqdKIZrUjjZNTiVKRRjumYjslII4uJOBfNWIxGzMVMVItaLsalYr1PrmvXfd949qfP/+7Dt7vDN4LKW3Qk6X6Y6wb9dYugDen+JvL/IEL+/6w50N9n7TR+F/fecHuuF/l/9E43AwAAANhDSfHtexIRY3F/MTSb17Ov3ulmAQAAALuo+F3zkW4x1h26P5Lu8X9pk8j3P/a2AQAAALsjKc6xSyJiPB7oDQ1Ol9rsSwAAAADgU6j4+//RbjEe8UYxwvE/AAAAfMZ8a9g19j/Y17/Gbnthf/Lzv0SrNZZcWzj7YHKl2o2rXvmv3nz94is3auzMHk4O9ispiqnRq3cnETFay44kg6tf/nt/r/yoeD68cgHCYdf6T7ZpQGzdgOJVfDeO9WKOXeiVFwZTeksZn83r2UStWX+8nPS/HOm8+sKlr0fR/W835g8mcfHS8tLEcy8uXyjacq1by7Ur/cvDJ4O5dtCW6/01EPdv3uOx4kSM/nLHe8stre7/SG/2ka37n6xe5ptxvBdzfLxXjq/t/4HuMssTj5ejWj040snOdl69vqr3/VaUN+v5TbwLb8aJXsyJkyd6xSatqKxpxQsbW1FZ3YqdrYsdt+LtY2+c/fuvmkk2uV0rJm+zFQB3ysXiqj8rWeiuIgv963pPN6Gty7t3Dea8mb3cxZVPGYP5V+W60diQ3dNbye5vxslezMne54nRw5vkldIme/SXLr306/4e/ZF3f/ijrx39zY9vPbu9G6d6Mf0i7v3lkBzb7fP31mXVd7pzvDN0ue16JYmx7oTi5kNx9aFLV84/v/T80guVyuRU6ZFS6dFKjBUfFfrFkJbKPACfb9vfY2fbiOSRbY6q773xk4KJeC5ejOW4EKeLsw0i4oHNax1f9TOE09sctY6vusPL6W2OLVdiK+tj959IYkjs5Ko19v8/KIp/7N17AgB77fg2efhG/n/tv/tzbMz/p7c57l6by0/1bpw7ODqO4bl8M1/a4/UBAJ8HWeujZLzzVtJq5QvPlKeny9XOmSxtNWtPp618Zi5L80Yna9XOVBtzWbrQanaatcFXxzNZO20vLiw0W510ttlKF5rt/Gxx5/e0f+v3djZfbXTyWnuhnlXbWVprNjrVWiedydu1dGHxyXrePpO1ipnbC1ktn81r1U7ebKTt5mKrlk2kaTvLVgXmM1mjk8/m2ViaN9KFVj5fbV2LiPrifJbOZO1aK1/oNHsVDpaVN2abrfmi2omN3f/Tx72+AeCT4JXXr14+v7y89PKtDfxhJ8F3uo8AwFqyNAAAAAAAAAAAAAAAfPJtPF2vO/amTgQci1s+ffCV/XE7Zx9+9ga++F7vbdmNCm+nnrvWvKf7+hvLnV8/Nz3w7BNPXB4W8+Qbh878MYvYvp7N/6dsdqrrWwcj9v3k+70xXx4SnIzuck/fj530YsPA9WSLmDu2SwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAof4TAAD///vCWDA=")
setxattr$trusted_overlay_opaque(&(0x7f0000000100)='./file1\x00', &(0x7f0000000ec0), 0x0, 0x0, 0x0)

1m44.525500093s ago: executing program 1 (id=323):
syz_open_procfs$namespace(0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x9, 0x2a8, &(0x7f0000000500)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getrlimit(0x0, &(0x7f0000000240))
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
setrlimit(0xd, &(0x7f0000000280)={0x89c, 0x4})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000400))
r3 = open(&(0x7f0000000440)='./file0\x00', 0x60c2, 0x0)
r4 = open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
write(r3, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807", 0x1a4)
sendfile(r3, r4, 0x0, 0xef85)

1m40.012185612s ago: executing program 0 (id=334):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x0, 0x12, 0x0, "1395ab0c9bfb28ec8363181ee2997c5f103c3fa273d4920eb247380efb35d1e1733c730192fb031b4784f677e659afbcc10d98cf3bfa9a93c14a74131830517cb54eddbdf7d4eca87323059c2027e054"}, 0xd8)
sendmmsg$inet(r1, &(0x7f0000005e40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)="c6b8553d5c4bb2dd787d68b45eb9423153e91aefdee5b41d8b786943a80daeced62ee295ee00164228ed28d8032d7a56bb2b5ca15ad23282729949ce7ef207f6f240b37206892def9fe760e40f36dc43d482c2b6c00c4261c28b60ba9f49f40c83827f051b2e74d8013e1802c27070a317dc7a51071879b95d104880942c1dfc72d72b9970cc01abc1a3b40f4e8d2228c21abdedba55e137655aa4a26708e2cbd3389146", 0xa4}, {&(0x7f0000000380)="c837b2e4b75cb92222afa91c3fb042b679", 0x11}], 0x2}}], 0x1, 0x48044)
close_range(r0, 0xffffffffffffffff, 0x0)

1m37.982037112s ago: executing program 0 (id=340):
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001e000100d14a0000fcdbdf2507000000", @ANYRES32, @ANYBLOB="000000000a000200aaaaaaaaaa04000008000f"], 0x40}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd30800140600fe800000000000"], 0x0)

1m37.472736183s ago: executing program 0 (id=343):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000100)={{}, {0xe}, 0x0, 0x7})
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x4)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x33)

1m9.129578654s ago: executing program 4 (id=412):
r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x20, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, <r2=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000440)={0x0, 0x0, 0x0, r1})

1m9.129434364s ago: executing program 4 (id=413):
getpid()
io_submit(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)={0x114, 0x2b, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@dev}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0)
syz_usb_connect(0x2, 0x0, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_buf(r4, 0x29, 0x3e, &(0x7f00002cef88)="58607398", 0x4)

1m7.549555437s ago: executing program 2 (id=416):
mkdir(0x0, 0x0)
chdir(0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xc240, 0x0)
linkat(r0, &(0x7f0000000480)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1400)

1m7.549462667s ago: executing program 2 (id=417):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000040), 0xe)
getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000080))

1m7.549310347s ago: executing program 2 (id=418):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0xfffffffffffffffc}, 0x18)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005380)=[{{&(0x7f00000005c0)={0x2, 0x0, @empty}, 0x10, 0x0}}], 0x1, 0x0)
connect$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18)
sendmmsg(r0, &(0x7f00000038c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff06, 0x0)

1m6.730323399s ago: executing program 2 (id=419):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0xc0089364, &(0x7f0000000180))

1m6.729431399s ago: executing program 4 (id=421):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
mkdir(&(0x7f0000000300)='./bus\x00', 0x52b60aca6cea76de)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

1m4.230258048s ago: executing program 4 (id=422):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240))
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = socket(0x2, 0x3, 0x9)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r3, &(0x7f0000004780)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0}}, {{&(0x7f00000031c0)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x18, 0x0, 0x7, {[@noop, @timestamp_addr={0x7, 0x2, 0x0, 0x3}]}}}], 0x18}}], 0x2, 0x0)

1m4.230001058s ago: executing program 2 (id=423):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={<r1=>0x0, 0x1}, &(0x7f00000001c0)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000200)={r1, @in6={{0xa, 0x4e21, 0x6, @mcast1, 0x4}}, 0xa, 0xfffc}, &(0x7f00000002c0)=0x90)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f0, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f00000005c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}})
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000300)='vegas\x00', 0x6)
socket$kcm(0x2, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xd}, @hci_ev_le_ltk_req={{}, {0xc9}}}}, 0x10)
dup(0xffffffffffffffff)
r5 = socket$nl_generic(0x11, 0x3, 0x10)
syz_emit_ethernet(0x1dc, &(0x7f00000003c0)={@local, @local, @void, {@ipv4={0x800, @igmp={{0x45, 0x4, 0x3, 0x1d, 0x1ce, 0x64, 0x0, 0x77, 0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@lsrr={0x83, 0x13, 0xc5, [@multicast2, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x1a}, @local]}, @lsrr={0x83, 0x1b, 0xe5, [@loopback, @local, @empty, @remote, @remote, @empty]}, @timestamp_addr={0x44, 0x4, 0x94, 0x1, 0x7}, @timestamp_addr={0x44, 0x4c, 0x7c, 0x1, 0xb, [{@multicast2, 0x3}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x2}, {@multicast2}, {@loopback, 0x2}, {@loopback, 0x1}, {@local, 0x5}, {@local, 0xffffffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xc28b}, {@broadcast, 0x7fff}]}, @cipso={0x86, 0x1d, 0x3, [{0x2, 0x8, "ef5e9a8b6d65"}, {0x0, 0x2}, {0x7, 0x5, "e4150a"}, {0x6, 0x8, "ff1bddf95a00"}]}, @ssrr={0x89, 0xb, 0xed, [@private=0xa010101, @local]}, @timestamp_prespec={0x44, 0x44, 0x57, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10}, {@multicast2, 0x10000}, {@multicast1, 0x1}, {@multicast1, 0x7}, {@empty, 0x10000}, {@private=0xa010101, 0x4}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x1}, {@multicast2, 0x9}]}, @noop, @timestamp_addr={0x44, 0x14, 0xdd, 0x1, 0x8, [{@multicast1, 0x81}, {@multicast1, 0x7ff}]}, @noop]}}, {0x13, 0x1, 0x0, @local, "19fe727f03933366b4740c105b727a75c3ce3550fe5642346de6141ae511b0bef4899295de968cf6c0a69eb669730e37d2fdfeb71454e34c3397b6c7d0f84fd5e18ad825c0c5db88e0e8e6e631498c1c951745811f06ded936ed243eb8c48f48a080f0ef71406e0c8097d9cf3f7d0fbecbaf868d2bbc598c671a722377effbf118190c552959301dd21f06bb1456d440f1306365e3fd28b63db4c483bddcae6d16b349baccdc633d9ecf0b5fba675284cdb3"}}}}}, 0x0)
sendmsg(r5, &(0x7f0000000640)={&(0x7f00000000c0)=@llc={0x1a, 0x6, 0x7, 0x0, 0x9, 0xe7, @broadcast}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x80)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
syz_usb_connect(0x0, 0x3e, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0x5a, 0x99, 0xe6, 0x20, 0x13d3, 0x3393, 0x6bed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2c, 0x2, 0x0, 0x0, 0x0, 0x6d, [{{0x9, 0x4, 0xce, 0x7, 0x0, 0xef, 0x5a, 0x1d}}, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x8f, 0x47, 0xe1, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x8, 0xb, "9a00920360c8"}]}}]}}]}}]}}, 0x0)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000680)={0x8ef, {{0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xda000000}}}, 0x88)
sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000002500)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001200010a00000000000000000000003f00000000000000000000000000000000000000e0ffffffff454b086007ecaec800000000e0798deb5d64018ebcdfdc8817"], 0x50}}, 0x0)

55.572010621s ago: executing program 4 (id=427):
syz_emit_vhci(&(0x7f00000012c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_pin_code_reply}}, 0xd)
dup2(0xffffffffffffffff, 0xffffffffffffffff)

55.571765701s ago: executing program 2 (id=428):
r0 = socket$rds(0x15, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$igmp(0x2, 0x3, 0x2)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11}}}}}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@mask_fadd={0x58, 0x10c, 0x8, {{0xfffffffd}, 0x0, 0x0}}, @mask_cswp={0x58, 0x114, 0x9, {{0x40, 0x9}, &(0x7f0000000100), &(0x7f0000000180)=0x2, 0x0, 0x7, 0x401, 0x80000001, 0x1a, 0x51}}], 0xb0}, 0x0)

55.571476441s ago: executing program 4 (id=429):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000400)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x207645b}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
open(0x0, 0x0, 0x8)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e"], 0x16)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604110, &(0x7f0000000380)={0x0, [[0x1fe, 0x0, 0xfffffffc], [0x2000002, 0x1000000], [0x8002]], '\x00', [{0x9, 0x610cfd08}, {0x6, 0xc}, {0x0, 0x1efb660a}, {}, {}, {0x8000, 0x98b}, {}, {}, {0x9b99}, {0x0, 0x1}], '\x00', 0x3f9, 0x0, 0x0, 0x0, 0x0, 0x2})
syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="02c9b01c001800050017031400010008005e98922cdab7ad75a24f1e30960005003b2bb2531700a9033d4ccae2327196b160550ad6b7c7442b4a57f4a165a2fb4c0a4bf9c998a3bcd94f9bf15e8697c5"], 0x21)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000b28000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0)
get_mempolicy(0x0, 0x0, 0x0, &(0x7f000033f000/0x2000)=nil, 0x3)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x38, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf8}}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010800000000000000000c00000008000300", @ANYRES32=r6, @ANYBLOB="0a0006000802110000000074ff382e129f660d02020000004802cb092e987b97ac7125766ff2d5906a02"], 0x34}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_NEW_MPATH(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="5100006dfb0035b66d989d5fc37f5f9ec5281d6f92494b5e5696df411dc5d0b278c949df67ad84e369e2dcca70a904686cf00207605650b0b6b6abe00ccd634eda074356997d7cf0f751559ed559afbcaa92e523fcb4176549dce04cc7", @ANYRES16=r4, @ANYBLOB="280029bd7000fbdbdf251700000008000300", @ANYRES32=r9, @ANYBLOB="0c009900070000004d0000000a001a0008021100000000000a00060008021100000100000a00060008021100000000000a001a00ffffffffffff0000"], 0x58}}, 0x2000c000)

14.747197867s ago: executing program 3 (id=453):
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r0}, 0x10)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
clock_settime(0x0, 0x0)

14.095198162s ago: executing program 3 (id=454):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x830730, &(0x7f0000000340)={[{@nobarrier}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@sysvgroups}, {@data_ordered}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@orlov}]}, 0xfa, 0x44a, &(0x7f0000000400)="$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")
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)

10.079839021s ago: executing program 3 (id=455):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"]}, 0x175)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000003000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0xec2d, 0x9, 0x1, 0x44, 0xffffffffffffffff, 0x1, '\x00', 0x0, r0, 0x5, 0x3, 0x0, 0x8}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYRESHEX=r1], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x72, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r5}, 0x10)
getrusage(0x0, &(0x7f00000006c0))

6.285084472s ago: executing program 3 (id=456):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002380)='./bus\x00', 0x200000, &(0x7f00000023c0)=ANY=[], 0x13, 0x70a, &(0x7f0000000740)="$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")
creat(&(0x7f0000000000)='./bus\x00', 0x0)
mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1001, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x181102, 0x0)
ioctl$BLKDISCARD(r0, 0x2, &(0x7f00000000c0))

4.866133698s ago: executing program 3 (id=457):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = dup2(r0, r1)
sendmmsg$inet(r2, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a00)="316f825a3d29f96a2093a917017b4cd30000000000000035ed313e19d6dd", 0x1e}, {&(0x7f0000000a40)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2c93497d9ae41ebc6099d95fea5e764494873e0d82a172b3bb54f35039c7d81e9ab07f2fb4dad61bd50c4b2c861c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d7756bf4fcaff0c23374ec7c4aadbb8b985f14893a91d0200000050685e0f4f07", 0xa7}], 0x2}}], 0x1, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0)
sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001340)=ANY=[], 0x228}}, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27)

0s ago: executing program 3 (id=458):
openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
pipe2(&(0x7f0000000040), 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0xe93fc6ea26f4008e, &(0x7f00000001c0), 0x1, 0x549, &(0x7f0000002700)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x0, 0x0, 0x0, 0x5}]}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x69, 0x10, 0x26}}, &(0x7f0000000480)='GPL\x00'}, 0x80)

kernel console output (not intermixed with test programs):

   57.601281][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   57.617310][ T1180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.619102][ T3515] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.635956][ T1180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.636004][ T3515] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.652301][ T3515] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.661029][ T3515] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.688661][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   57.708658][ T3509] device veth0_vlan entered promiscuous mode
[   57.723226][ T3555] Bluetooth: hci3: command 0x040f tx timeout
[   57.729411][ T3555] Bluetooth: hci0: command 0x040f tx timeout
[   57.748852][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   57.759469][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   57.773431][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   57.781465][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   57.791986][ T3555] Bluetooth: hci1: command 0x040f tx timeout
[   57.808602][ T3522] device veth0_macvtap entered promiscuous mode
[   57.815220][ T3555] Bluetooth: hci2: command 0x040f tx timeout
[   57.817229][ T1439] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.839070][ T1439] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.847124][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   57.858491][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   57.876239][ T3509] device veth1_vlan entered promiscuous mode
[   57.889899][ T3552] Bluetooth: hci4: command 0x040f tx timeout
[   57.927089][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   57.938214][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   57.950478][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   57.987857][ T3522] device veth1_macvtap entered promiscuous mode
[   58.000676][ T1439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.053998][ T1439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.069460][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   58.085122][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   58.094011][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   58.102540][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   58.111332][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   58.134082][ T3509] device veth0_macvtap entered promiscuous mode
[   58.162484][ T3509] device veth1_macvtap entered promiscuous mode
[   58.182722][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   58.190926][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   58.244041][ T3589] loop1: detected capacity change from 0 to 128
[   58.261453][ T3522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   58.285948][ T3522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.302873][ T3522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   58.314366][ T3522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.324907][ T3522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   58.335963][ T3522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.350859][ T3522] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.372940][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.380968][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.441218][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   58.457255][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   58.479226][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   58.494803][ T3522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   58.510659][ T3522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.521657][ T3522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   58.532471][ T3522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.542502][ T3522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   58.547883][ T3587] loop0: detected capacity change from 0 to 32768
[   58.553684][ T3522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.571040][ T3522] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.591008][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   58.600989][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   58.612916][ T3509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   58.626634][ T3509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.637716][ T3509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   58.648894][ T3509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.658936][ T3509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   58.669543][ T3509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.680331][ T3509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   58.691202][ T3509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.703528][ T3509] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.712213][ T3522] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.720939][ T3522] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.732989][ T3522] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.749771][ T3522] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.774421][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.783647][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   58.792817][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   58.797801][ T3587] XFS (loop0): Mounting V5 Filesystem
[   58.805604][ T3509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   58.818847][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.828206][ T3509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.839900][ T3509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   58.851191][ T3509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.861503][ T3509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   58.873330][ T3509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.883605][ T3509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   58.894884][ T3509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.906998][ T3509] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.918910][ T3587] XFS (loop0): Ending clean mount
[   58.934818][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   58.943600][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   58.952919][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   58.968034][ T3509] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.996098][ T3509] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.007296][ T3509] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.016844][ T3509] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.197035][ T3516] XFS (loop0): Unmounting Filesystem
[   59.297631][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   59.320200][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   59.339880][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   59.397532][ T1180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.426978][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.440676][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.448118][ T1180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.533338][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   59.555263][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   59.602888][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.622105][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.654736][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.661422][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   59.691775][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.737963][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   59.790058][ T3613] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   59.792561][   T21] Bluetooth: hci0: command 0x0419 tx timeout
[   59.857385][ T3616] loop0: detected capacity change from 0 to 512
[   59.883751][   T21] Bluetooth: hci3: command 0x0419 tx timeout
[   59.893176][ T3614] loop4: detected capacity change from 0 to 256
[   59.913190][   T21] Bluetooth: hci2: command 0x0419 tx timeout
[   59.931786][   T21] Bluetooth: hci1: command 0x0419 tx timeout
[   59.938935][ T3616] =======================================================
[   59.938935][ T3616] WARNING: The mand mount option has been deprecated and
[   59.938935][ T3616]          and is ignored by this kernel. Remove the mand
[   59.938935][ T3616]          option from the mount to silence this warning.
[   59.938935][ T3616] =======================================================
[   59.952344][ T3585] Bluetooth: hci4: command 0x0419 tx timeout
[   60.044515][ T3616] EXT4-fs (loop0): Ignoring removed mblk_io_submit option
[   60.068011][ T3616] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   60.068016][ T3614] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d)
[   60.184605][ T3613] kvm: emulating exchange as write
[   60.193317][ T3616] EXT4-fs error (device loop0): __ext4_iget:4861: inode #11: block 1: comm syz.0.8: invalid block
[   60.317858][ T3616] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.8: couldn't read orphan inode 11 (err -117)
[   60.359997][ T3616] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,commit=0x0000000000000005,mblk_io_submit,stripe=0x0000000000000004,auto_da_alloc=0x0000000000000008,dioread_nolock,lazytime,quota,,errors=continue. Quota mode: writeback.
[   60.420559][ T3604] loop2: detected capacity change from 0 to 40427
[   60.488789][ T3604] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   60.530666][ T3604] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   60.552338][ T3604] F2FS-fs (loop2): invalid crc value
[   60.602890][ T3604] F2FS-fs (loop2): Found nat_bits in checkpoint
[   60.817721][ T3604] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   60.831036][ T3604] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   61.049210][ T3620] loop3: detected capacity change from 0 to 32768
[   61.095315][ T3620] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.4 (3620)
[   61.258629][ T3650] loop1: detected capacity change from 0 to 512
[   61.261020][ T3649] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   61.270042][    T9] attempt to access beyond end of device
[   61.270042][    T9] loop2: rw=1, want=45104, limit=40427
[   61.308531][ T3620] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[   61.359174][ T3620] BTRFS info (device loop3): using free space tree
[   61.373262][ T3620] BTRFS info (device loop3): has skinny extents
[   61.434167][ T3650] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   61.499763][ T3650] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   61.561568][ T3650] EXT4-fs (loop1): 1 truncate cleaned up
[   61.571422][ T3650] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,abort,max_batch_time=0x0000000000000004,,errors=continue. Quota mode: none.
[   61.661403][ T3650] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2213: inode #15: comm syz.1.21: corrupted in-inode xattr
[   61.679558][ T3650] EXT4-fs warning (device loop1): ext4_xattr_set_entry:1745: inode #15: comm syz.1.21: unable to update i_inline_off
[   61.695194][ T3650] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   61.702859][ T3556] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   61.709299][ T3650] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2213: inode #15: comm syz.1.21: corrupted in-inode xattr
[   61.781948][ T3620] BTRFS info (device loop3): enabling ssd optimizations
[   61.839362][   T26] audit: type=1326 audit(1719686649.412:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3648 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dc4334b99 code=0x7ffc0000
[   61.917344][   T26] audit: type=1326 audit(1719686649.452:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3648 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dc4334b99 code=0x7ffc0000
[   62.031101][   T26] audit: type=1326 audit(1719686649.482:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3648 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8dc4334b99 code=0x7ffc0000
[   62.123517][   T26] audit: type=1326 audit(1719686649.482:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3648 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dc4334b99 code=0x7ffc0000
[   62.211830][ T3556] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   62.232845][ T3556] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   62.269874][   T26] audit: type=1326 audit(1719686649.482:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3648 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dc4334b99 code=0x7ffc0000
[   62.278679][ T3556] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[   62.362125][ T3556] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   62.402353][   T26] audit: type=1326 audit(1719686649.482:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3648 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f8dc4334b99 code=0x7ffc0000
[   62.442345][ T3556] usb 5-1: config 0 descriptor??
[   62.521094][   T26] audit: type=1326 audit(1719686649.492:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3648 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dc4334b99 code=0x7ffc0000
[   62.629571][   T26] audit: type=1326 audit(1719686649.492:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3648 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dc4334b99 code=0x7ffc0000
[   63.286176][ T3556] usbhid 5-1:0.0: can't add hid device: -71
[   63.294926][ T3556] usbhid: probe of 5-1:0.0 failed with error -71
[   63.336278][ T3556] usb 5-1: USB disconnect, device number 2
[   64.562619][ T3798] serio: Serial port pts0
[   65.949264][ T3847] syz.3.84 (pid 3847) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[   66.402188][   T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   66.678336][   T23] usb 4-1: Using ep0 maxpacket: 8
[   66.832878][   T23] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   66.926285][   T23] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   67.068206][   T23] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024
[   67.228831][   T23] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[   67.360819][   T23] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   67.431823][   T23] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   67.477602][   T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   67.821919][   T23] usb 4-1: GET_CAPABILITIES returned 0
[   67.827507][   T23] usbtmc 4-1:16.0: can't read capabilities
[   67.908531][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!!
[   68.193671][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!!
[   68.203324][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!!
[   68.347925][ T3556] usb 4-1: USB disconnect, device number 2
[   69.229744][ T3871] loop0: detected capacity change from 0 to 32768
[   69.671105][ T3901] process 'syz.3.106' launched './file0' with NULL argv: empty string added
[   69.730372][ T3880] loop1: detected capacity change from 0 to 40427
[   69.738799][ T3890] loop2: detected capacity change from 0 to 32768
[   69.775704][    C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies.  Check SNMP counters.
[   69.815409][ T3890] Dev loop2 SGI disklabel: csum bad, label corrupted
[   69.844215][ T3880] F2FS-fs (loop1): Found nat_bits in checkpoint
[   69.908276][ T2963] Dev loop2 SGI disklabel: csum bad, label corrupted
[   69.962443][ T3880] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   70.144148][ T3880] overlayfs: missing 'lowerdir'
[   70.308788][ T3508] F2FS-fs (loop1): access invalid blkaddr:2048
[   70.328756][ T3508] CPU: 1 PID: 3508 Comm: syz-executor Not tainted 5.15.161-syzkaller #0
[   70.337131][ T3508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[   70.347235][ T3508] Call Trace:
[   70.350540][ T3508]  <TASK>
[   70.353501][ T3508]  dump_stack_lvl+0x1e3/0x2d0
[   70.358236][ T3508]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[   70.363897][ T3508]  ? f2fs_get_next_page_offset+0x6c0/0x6c0
[   70.369749][ T3508]  f2fs_is_valid_blkaddr+0xca6/0x1270
[   70.375165][ T3508]  f2fs_map_blocks+0x159a/0x3720
[   70.380256][ T3508]  ? f2fs_force_buffered_io+0x630/0x630
[   70.385847][ T3508]  ? unlock_page+0x188/0x200
[   70.390469][ T3508]  f2fs_mpage_readpages+0xe98/0x27c0
[   70.395817][ T3508]  ? dquot_release_reservation_block+0x90/0x90
[   70.402033][ T3508]  ? f2fs_is_compress_backend_ready+0x9d/0x130
[   70.408224][ T3508]  ? f2fs_readahead+0x16e/0x310
[   70.413104][ T3508]  ? f2fs_set_data_page_dirty+0xa90/0xa90
[   70.418867][ T3508]  read_pages+0x159/0x8e0
[   70.423253][ T3508]  ? page_cache_ra_unbounded+0x930/0x930
[   70.428932][ T3508]  ? add_to_page_cache_locked+0x40/0x40
[   70.434518][ T3508]  ? down_read+0x1b3/0x2e0
[   70.438970][ T3508]  page_cache_ra_unbounded+0x7b0/0x930
[   70.444476][ T3508]  ? read_cache_pages_invalidate_pages+0x1c0/0x1c0
[   70.451015][ T3508]  ? blk_cgroup_congested+0x30c/0x390
[   70.456423][ T3508]  f2fs_readdir+0x546/0xef0
[   70.461063][ T3508]  ? f2fs_fill_dentries+0xd60/0xd60
[   70.466322][ T3508]  ? f2fs_fill_dentries+0xd60/0xd60
[   70.471561][ T3508]  ? iterate_dir+0x10a/0x570
[   70.476183][ T3508]  ? fsnotify_perm+0x438/0x5a0
[   70.480990][ T3508]  iterate_dir+0x224/0x570
[   70.485433][ T3508]  ? f2fs_fill_dentries+0xd60/0xd60
[   70.491056][ T3508]  __se_sys_getdents64+0x209/0x4f0
[   70.496216][ T3508]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[   70.502236][ T3508]  ? __x64_sys_getdents64+0x80/0x80
[   70.507481][ T3508]  ? filldir+0x720/0x720
[   70.511759][ T3508]  ? syscall_enter_from_user_mode+0x2e/0x240
[   70.517765][ T3508]  ? lockdep_hardirqs_on+0x94/0x130
[   70.523002][ T3508]  ? syscall_enter_from_user_mode+0x2e/0x240
[   70.524683][   T13] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   70.529014][ T3508]  do_syscall_64+0x3b/0xb0
[   70.540877][ T3508]  ? clear_bhb_loop+0x15/0x70
[   70.545589][ T3508]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   70.551525][ T3508] RIP: 0033:0x7f8dc4366c33
[   70.555972][ T3508] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 02 45 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8
[   70.575596][ T3508] RSP: 002b:00007ffd5b0348c8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   70.584038][ T3508] RAX: ffffffffffffffda RBX: 0000555555b0d600 RCX: 00007f8dc4366c33
[   70.592100][ T3508] RDX: 0000000000008000 RSI: 0000555555b0d600 RDI: 0000000000000005
[   70.600140][ T3508] RBP: 0000555555b0d5d4 R08: 0000000000000000 R09: 0000000000000000
[   70.608559][ T3508] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8
[   70.616560][ T3508] R13: 0000000000000010 R14: 0000555555b0d5d0 R15: 00007ffd5b036ba0
[   70.624669][ T3508]  </TASK>
[   70.770482][ T3508] attempt to access beyond end of device
[   70.770482][ T3508] loop1: rw=524288, want=45072, limit=40427
[   70.783806][ T3508] attempt to access beyond end of device
[   70.783806][ T3508] loop1: rw=0, want=45072, limit=40427
[   70.839564][ T3508] attempt to access beyond end of device
[   70.839564][ T3508] loop1: rw=2049, want=45112, limit=40427
[   70.854188][   T13] usb 5-1: Using ep0 maxpacket: 8
[   71.002721][   T13] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   71.013066][   T13] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   71.041695][   T13] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024
[   71.071630][   T13] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[   71.108486][   T13] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   71.167594][   T13] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   71.487844][ T1375] ieee802154 phy0 wpan0: encryption failed: -22
[   71.510509][ T1375] ieee802154 phy1 wpan1: encryption failed: -22
[   71.955568][   T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   72.029511][ T3954] loop0: detected capacity change from 0 to 40427
[   72.036051][ T3971] loop2: detected capacity change from 0 to 64
[   72.059803][ T3969] vivid-002: disconnect
[   72.066631][ T3968] vivid-002: reconnect
[   72.100673][ T3954] F2FS-fs (loop0): invalid crc value
[   72.133730][ T3971] Trying to free block not in datazone
[   72.211721][ T3954] F2FS-fs (loop0): Found nat_bits in checkpoint
[   72.252046][   T13] usb 5-1: GET_CAPABILITIES returned 0
[   72.257581][   T13] usbtmc 5-1:16.0: can't read capabilities
[   72.306701][   T26] audit: type=1800 audit(1719686659.882:10): pid=3977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.129" name="bus" dev="sda1" ino=1962 res=0 errno=0
[   72.367783][ T3979] loop2: detected capacity change from 0 to 8
[   72.445916][ T3979] SQUASHFS error: Failed to read block 0x6e6: -5
[   72.460446][ T3954] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[   72.481109][ T3979] SQUASHFS error: Unable to read metadata cache entry [6e4]
[   72.500286][ T3979] SQUASHFS error: Unable to read directory block [631:26]
[   72.543602][ T3954] attempt to access beyond end of device
[   72.543602][ T3954] loop0: rw=2049, want=45104, limit=40427
[   72.665212][ T3980] loop3: detected capacity change from 0 to 2048
[   72.766463][ T1439] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.855890][ T3980] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   72.950492][ T1439] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.567541][   T21] usb 5-1: USB disconnect, device number 3
[   73.712466][ T1439] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.976475][ T1439] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.112595][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!!
[   74.121682][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!!
[   76.084567][   T26] audit: type=1800 audit(1719686663.662:11): pid=4040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.144" name="bus" dev="sda1" ino=1949 res=0 errno=0
[   76.314795][ T4045] loop4: detected capacity change from 0 to 2048
[   76.322866][ T3994] chnl_net:caif_netlink_parms(): no params data found
[   76.481152][ T4045] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   76.591822][   T23] Bluetooth: hci0: command 0x0409 tx timeout
[   76.913694][ T3994] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.930471][ T3994] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.978410][ T3994] device bridge_slave_0 entered promiscuous mode
[   77.031299][ T3994] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.123361][ T3994] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.181867][ T3994] device bridge_slave_1 entered promiscuous mode
[   77.681095][ T3994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.691777][ T3722] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   77.814446][ T3994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.671755][ T3510] Bluetooth: hci0: command 0x041b tx timeout
[   78.841672][ T3722] usb 5-1: Using ep0 maxpacket: 8
[   78.921564][ T3994] team0: Port device team_slave_0 added
[   78.932024][ T3994] team0: Port device team_slave_1 added
[   78.971076][ T1439] device hsr_slave_0 left promiscuous mode
[   78.981908][ T3722] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   78.992507][ T3722] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   79.021647][ T3722] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024
[   79.071905][ T3722] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[   79.092153][ T3722] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   79.123278][ T3722] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   79.142532][ T3722] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.164181][ T1439] device hsr_slave_1 left promiscuous mode
[   79.180762][ T1439] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   79.198510][ T1439] batman_adv: batadv0: Removing interface: batadv_slave_0
[   79.231034][ T1439] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   79.261683][ T1439] batman_adv: batadv0: Removing interface: batadv_slave_1
[   79.289580][ T1439] device bridge_slave_1 left promiscuous mode
[   79.309719][ T1439] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.369503][ T1439] device bridge_slave_0 left promiscuous mode
[   79.386826][ T1439] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.441948][ T3722] usb 5-1: GET_CAPABILITIES returned 0
[   79.447505][ T3722] usbtmc 5-1:16.0: can't read capabilities
[   79.483396][ T1439] device veth1_macvtap left promiscuous mode
[   79.497323][ T1439] device veth0_macvtap left promiscuous mode
[   79.514001][ T1439] device veth1_vlan left promiscuous mode
[   79.520114][ T1439] device veth0_vlan left promiscuous mode
[   80.092661][ T4088] loop2: detected capacity change from 0 to 40427
[   80.213537][ T3556] usb 5-1: USB disconnect, device number 4
[   80.771779][ T3510] Bluetooth: hci0: command 0x040f tx timeout
[   80.822420][   T26] audit: type=1800 audit(1719686668.402:12): pid=4114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.158" name="bus" dev="sda1" ino=1968 res=0 errno=0
[   80.935413][ T4088] F2FS-fs (loop2): Found nat_bits in checkpoint
[   81.052849][ T4088] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   81.058409][ T4116] loop0: detected capacity change from 0 to 2048
[   81.187699][ T4116] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   81.217429][ T4088] overlayfs: missing 'lowerdir'
[   81.320678][ T1439] team0 (unregistering): Port device team_slave_1 removed
[   81.345263][ T1439] team0 (unregistering): Port device team_slave_0 removed
[   81.456619][ T3515] F2FS-fs (loop2): access invalid blkaddr:2048
[   81.509080][ T1439] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   81.509788][ T3515] CPU: 0 PID: 3515 Comm: syz-executor Not tainted 5.15.161-syzkaller #0
[   81.525950][ T3515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[   81.536020][ T3515] Call Trace:
[   81.539300][ T3515]  <TASK>
[   81.542224][ T3515]  dump_stack_lvl+0x1e3/0x2d0
[   81.546913][ T3515]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[   81.552679][ T3515]  ? f2fs_get_next_page_offset+0x6c0/0x6c0
[   81.558508][ T3515]  f2fs_is_valid_blkaddr+0xca6/0x1270
[   81.563896][ T3515]  f2fs_map_blocks+0x159a/0x3720
[   81.569017][ T3515]  ? f2fs_force_buffered_io+0x630/0x630
[   81.574586][ T3515]  ? unlock_page+0x188/0x200
[   81.579192][ T3515]  f2fs_mpage_readpages+0xe98/0x27c0
[   81.584534][ T3515]  ? dquot_release_reservation_block+0x90/0x90
[   81.590724][ T3515]  ? f2fs_is_compress_backend_ready+0x9d/0x130
[   81.596884][ T3515]  ? f2fs_readahead+0x16e/0x310
[   81.601742][ T3515]  ? f2fs_set_data_page_dirty+0xa90/0xa90
[   81.607494][ T3515]  read_pages+0x159/0x8e0
[   81.611839][ T3515]  ? page_cache_ra_unbounded+0x930/0x930
[   81.617606][ T3515]  ? add_to_page_cache_locked+0x40/0x40
[   81.623161][ T3515]  ? down_read+0x1b3/0x2e0
[   81.627588][ T3515]  page_cache_ra_unbounded+0x7b0/0x930
[   81.633122][ T3515]  ? read_cache_pages_invalidate_pages+0x1c0/0x1c0
[   81.639651][ T3515]  ? blk_cgroup_congested+0x30c/0x390
[   81.645040][ T3515]  f2fs_readdir+0x546/0xef0
[   81.649649][ T3515]  ? f2fs_fill_dentries+0xd60/0xd60
[   81.654849][ T3515]  ? f2fs_fill_dentries+0xd60/0xd60
[   81.660074][ T3515]  ? iterate_dir+0x10a/0x570
[   81.664654][ T3515]  ? fsnotify_perm+0x438/0x5a0
[   81.669414][ T3515]  iterate_dir+0x224/0x570
[   81.673824][ T3515]  ? f2fs_fill_dentries+0xd60/0xd60
[   81.679045][ T3515]  __se_sys_getdents64+0x209/0x4f0
[   81.684170][ T3515]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[   81.690161][ T3515]  ? __x64_sys_getdents64+0x80/0x80
[   81.695351][ T3515]  ? filldir+0x720/0x720
[   81.699589][ T3515]  ? syscall_enter_from_user_mode+0x2e/0x240
[   81.705563][ T3515]  ? lockdep_hardirqs_on+0x94/0x130
[   81.710754][ T3515]  ? syscall_enter_from_user_mode+0x2e/0x240
[   81.716906][ T3515]  do_syscall_64+0x3b/0xb0
[   81.721314][ T3515]  ? clear_bhb_loop+0x15/0x70
[   81.725985][ T3515]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   81.731874][ T3515] RIP: 0033:0x7f6c4992bc33
[   81.736285][ T3515] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 02 45 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8
[   81.755884][ T3515] RSP: 002b:00007ffd16e21218 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   81.764382][ T3515] RAX: ffffffffffffffda RBX: 000055555714a600 RCX: 00007f6c4992bc33
[   81.772347][ T3515] RDX: 0000000000008000 RSI: 000055555714a600 RDI: 0000000000000005
[   81.780314][ T3515] RBP: 000055555714a5d4 R08: 0000000000000000 R09: 0000000000000000
[   81.788276][ T3515] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8
[   81.796255][ T3515] R13: 0000000000000010 R14: 000055555714a5d0 R15: 00007ffd16e234f0
[   81.804239][ T3515]  </TASK>
[   81.814266][ T1792] cfg80211: failed to load regulatory.db
[   81.843190][ T3515] attempt to access beyond end of device
[   81.843190][ T3515] loop2: rw=524288, want=45072, limit=40427
[   81.867421][ T3515] attempt to access beyond end of device
[   81.867421][ T3515] loop2: rw=0, want=45072, limit=40427
[   81.867628][ T1439] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   81.929243][ T3515] attempt to access beyond end of device
[   81.929243][ T3515] loop2: rw=2049, want=45112, limit=40427
[   82.158216][ T1439] bond0 (unregistering): Released all slaves
[   82.372960][ T3994] batman_adv: batadv0: Adding interface: batadv_slave_0
[   82.379947][ T3994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   82.484720][ T3994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   82.505570][ T3994] batman_adv: batadv0: Adding interface: batadv_slave_1
[   82.596077][ T3994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   82.623776][ T3994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   82.758262][ T3994] device hsr_slave_0 entered promiscuous mode
[   82.792490][ T3994] device hsr_slave_1 entered promiscuous mode
[   82.843784][ T3510] Bluetooth: hci0: command 0x0419 tx timeout
[   84.211415][ T3994] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   84.308499][ T3994] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   84.425216][ T3994] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   84.468629][ T3994] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   84.493071][   T26] audit: type=1800 audit(1719686672.072:13): pid=4180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.171" name="bus" dev="sda1" ino=1962 res=0 errno=0
[   84.618790][ T4166] chnl_net:caif_netlink_parms(): no params data found
[   84.728988][ T4191] loop0: detected capacity change from 0 to 2048
[   84.867364][ T4191] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   85.214554][ T4166] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.271387][ T4166] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.310865][ T4166] device bridge_slave_0 entered promiscuous mode
[   85.372554][ T4166] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.392094][ T4166] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.423199][ T4166] device bridge_slave_1 entered promiscuous mode
[   85.438016][ T3994] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.570216][ T4166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.597965][ T3566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   85.609013][ T3566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   85.666100][ T3994] 8021q: adding VLAN 0 to HW filter on device team0
[   85.697201][ T4166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.773379][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   85.784643][ T4231] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.181'.
[   85.802516][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   85.822191][ T3510] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.829307][ T3510] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.875108][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   85.900347][ T4235] dccp_invalid_packet: P.Data Offset(0) too small
[   85.907900][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   85.924948][ T3510] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.932118][ T3510] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.998900][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   86.036289][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   86.066844][   T21] Bluetooth: hci2: command 0x0409 tx timeout
[   86.092983][ T4166] team0: Port device team_slave_0 added
[   86.116965][ T3566] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   86.133423][ T3566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   86.169654][ T3566] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   86.199522][ T4166] team0: Port device team_slave_1 added
[   86.220637][ T3566] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   86.291129][ T3566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   86.308823][   T26] audit: type=1800 audit(1719686673.882:14): pid=4242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.185" name="bus" dev="sda1" ino=1946 res=0 errno=0
[   86.350567][ T3566] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   86.370705][ T3566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   86.382597][ T3566] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   86.486785][ T3994] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   86.552734][ T3994] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   86.585265][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   86.616621][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   86.668695][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.679128][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.710769][ T4247] loop3: detected capacity change from 0 to 2048
[   86.749844][ T4166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.840718][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.881233][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.937852][ T4247] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   87.048061][ T4166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.288335][ T4166] device hsr_slave_0 entered promiscuous mode
[   87.359128][ T4166] device hsr_slave_1 entered promiscuous mode
[   87.421801][ T4166] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   87.429397][ T4166] Cannot create hsr debugfs directory
[   87.453639][ T4280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   87.485430][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   87.513173][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   87.573212][ T3994] 8021q: adding VLAN 0 to HW filter on device batadv0
[   87.896114][ T4166] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.941850][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   87.960316][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   88.077312][ T3994] device veth0_vlan entered promiscuous mode
[   88.111980][ T3510] Bluetooth: hci2: command 0x041b tx timeout
[   88.135541][ T4166] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.209708][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   88.242398][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   88.334825][ T3994] device veth1_vlan entered promiscuous mode
[   88.362120][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   88.370809][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   88.402380][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   88.516572][ T4166] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.607570][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   88.623956][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   88.652610][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   88.703162][ T4166] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.745059][ T3994] device veth0_macvtap entered promiscuous mode
[   88.789820][ T3994] device veth1_macvtap entered promiscuous mode
[   88.886028][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   88.939478][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   88.966808][ T3994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.993181][ T3994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.020881][ T3994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.039095][ T3994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.059725][ T3994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.096805][ T3994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.131630][ T3994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.170855][ T3994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.183012][ T3994] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.282659][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   89.312728][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   89.350752][ T3994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   89.388665][ T3994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.428708][ T3994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   89.461839][ T3994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.484900][ T3994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   89.513232][ T3994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.531699][ T3994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   89.552969][ T3994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.573355][ T3994] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.602669][   T21] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   89.629975][   T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   89.658114][ T4166] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   89.712992][ T3994] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.740731][ T3994] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.768771][ T3994] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.791778][ T3994] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.851830][ T4166] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   89.885965][ T4166] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   89.937060][ T4166] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   90.077859][ T4079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.090704][ T4079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.122123][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   90.198798][   T23] Bluetooth: hci2: command 0x040f tx timeout
[   90.209237][ T4079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.248591][ T4079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.291427][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   90.405971][ T4166] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.451965][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   90.459926][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   90.499775][ T4166] 8021q: adding VLAN 0 to HW filter on device team0
[   90.603500][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   90.623932][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   90.648027][   T23] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.655202][   T23] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.692640][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   90.760255][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   90.782521][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   90.791059][   T23] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.798297][   T23] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.860234][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   90.943219][ T3987] device hsr_slave_0 left promiscuous mode
[   90.978814][ T3987] device hsr_slave_1 left promiscuous mode
[   90.985598][ T3987] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   91.018119][ T3987] batman_adv: batadv0: Removing interface: batadv_slave_0
[   91.041092][ T3987] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   91.061809][ T3987] batman_adv: batadv0: Removing interface: batadv_slave_1
[   91.085337][ T3987] device bridge_slave_1 left promiscuous mode
[   91.091640][ T3987] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.110997][ T3987] device bridge_slave_0 left promiscuous mode
[   91.133138][ T3987] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.187966][ T3987] device veth1_macvtap left promiscuous mode
[   91.200455][ T3987] device veth0_macvtap left promiscuous mode
[   91.221401][ T3987] device veth1_vlan left promiscuous mode
[   91.246342][ T3987] device veth0_vlan left promiscuous mode
[   92.084227][ T3987] team0 (unregistering): Port device team_slave_1 removed
[   92.125851][ T3987] team0 (unregistering): Port device team_slave_0 removed
[   92.167904][ T3987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   92.248391][ T3987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   92.275846][ T3551] Bluetooth: hci2: command 0x0419 tx timeout
[   92.612611][ T3987] bond0 (unregistering): Released all slaves
[   92.722157][ T1792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   92.731088][ T1792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   92.780356][ T1792] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   92.791419][ T1792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   92.818251][ T1792] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   92.873047][ T1792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   92.902386][ T1792] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   92.930589][ T4166] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   92.972630][ T4166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   92.981244][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   93.007879][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   93.032576][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   93.452141][   T21] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   93.459690][   T21] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   93.514789][ T4166] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.602565][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   93.624186][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   93.691009][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   93.731964][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   93.752081][ T4166] device veth0_vlan entered promiscuous mode
[   93.776003][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   93.790042][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   93.818327][ T4166] device veth1_vlan entered promiscuous mode
[   93.924622][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   93.954813][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   93.990707][ T4166] device veth0_macvtap entered promiscuous mode
[   94.019268][ T4166] device veth1_macvtap entered promiscuous mode
[   94.069748][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.101432][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.141222][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.177811][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.211619][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.257190][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.298344][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.326037][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.373062][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.384046][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   94.409103][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   94.438608][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   94.477294][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   94.511190][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.554550][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.581629][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.621644][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.661629][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.707266][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.727883][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.784356][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.807697][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.856391][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   94.875721][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   94.914900][ T4166] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.940432][ T4166] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.970429][ T4166] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.001631][ T4166] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.242923][ T4079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.280217][ T4079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.336297][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   95.372566][ T4079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.401787][ T4079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.447036][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   95.857682][    T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   96.141643][    T7] usb 3-1: Using ep0 maxpacket: 8
[   96.282714][    T7] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   96.302744][    T7] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   96.341641][    T7] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024
[   96.382730][    T7] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[   96.420409][    T7] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   96.447280][    T7] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   96.481656][    T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.782151][    T7] usb 3-1: GET_CAPABILITIES returned 0
[   96.788458][    T7] usbtmc 3-1:16.0: can't read capabilities
[   97.731197][   T13] usb 3-1: USB disconnect, device number 2
[   98.534033][    C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies.  Check SNMP counters.
[   99.360711][ T4393] mmap: syz.3.214 (4393) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  100.127641][ T4426] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  101.008571][ T4463] loop1: detected capacity change from 0 to 1024
[  101.139997][ T4463] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869)
[  101.171963][ T4463] EXT4-fs (loop1): invalid journal inode
[  101.177749][ T4463] EXT4-fs (loop1): can't get journal size
[  101.239979][ T4463] EXT4-fs error (device loop1): ext4_protect_reserved_inode:182: inode #2: comm syz.1.248: blocks 48-48 from inode overlap system zone
[  101.301746][ T4463] EXT4-fs (loop1): failed to initialize system zone (-117)
[  101.309345][ T4463] EXT4-fs (loop1): mount failed
[  101.617908][ T4465] loop3: detected capacity change from 0 to 32768
[  101.798859][ T4465] XFS (loop3): Mounting V5 Filesystem
[  101.982439][ T4465] XFS (loop3): Ending clean mount
[  102.115306][ T4465] syz.3.249 (4465) used greatest stack depth: 19936 bytes left
[  102.165173][ T3509] XFS (loop3): Unmounting Filesystem
[  102.880649][ T4522] loop4: detected capacity change from 0 to 512
[  102.902020][   T26] audit: type=1804 audit(1719686690.472:15): pid=4491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.254" name="/root/syzkaller.yOlc0B/8/file1" dev="sda1" ino=1952 res=1 errno=0
[  102.955324][ T4524] capability: warning: `syz.0.270' uses 32-bit capabilities (legacy support in use)
[  103.008574][ T4522] EXT4-fs (loop4): user quota file already specified
[  103.601718][   T23] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  103.851783][   T23] usb 5-1: Using ep0 maxpacket: 32
[  103.855485][ T4549] loop3: detected capacity change from 0 to 512
[  103.971997][   T23] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  103.998091][   T23] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  104.021880][   T23] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[  104.051730][   T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  104.062580][   T23] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  104.072953][   T23] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  104.075546][ T4549] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  104.086482][   T23] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  104.106703][   T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.117704][   T23] usb 5-1: config 0 descriptor??
[  104.125076][ T4549] ext4 filesystem being mounted at /root/syzkaller.ay9Iuy/75/file0 supports timestamps until 2038 (0x7fffffff)
[  104.391289][   T23] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  104.448485][   T23] usb 5-1: USB disconnect, device number 5
[  104.480488][   T23] usblp0: removed
[  104.638197][ T4540] loop1: detected capacity change from 0 to 40427
[  104.681472][ T4566] syz.3.285[4566] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  104.689185][ T4566] syz.3.285[4566] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  104.708938][ T4540] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  104.787341][ T4540] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  104.875859][ T4540] F2FS-fs (loop1): Found nat_bits in checkpoint
[  104.998642][ T4540] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  105.007326][ T4540] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  105.088650][   T23] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[  105.292793][ T4585] loop4: detected capacity change from 0 to 128
[  105.532692][ T4588] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  105.612647][   T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  105.638133][   T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64
[  105.649510][   T23] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  105.768954][   T23] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  105.920258][   T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.121414][   T23] usb 4-1: config 0 descriptor??
[  106.321992][ T4569] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  106.552076][   T26] audit: type=1800 audit(1719686694.022:16): pid=4599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.293" name="file0" dev="loop4" ino=1048595 res=0 errno=0
[  106.699334][ T4596] loop0: detected capacity change from 0 to 128
[  106.768309][   T26] audit: type=1804 audit(1719686694.042:17): pid=4599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.293" name="/root/syzkaller.goT6p9/74/file0/file0" dev="loop4" ino=1048595 res=1 errno=0
[  106.936681][   T23] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[  106.981985][   T23] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[  107.040802][   T23] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[  107.233924][   T23] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[  107.241411][   T23] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[  107.261677][   T23] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[  107.269125][   T23] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[  107.308656][   T23] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[  107.517116][ T4608] loop2: detected capacity change from 0 to 128
[  107.810667][   T23] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving
[  107.931734][   T23] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  107.943716][ T4611] loop3: detected capacity change from 0 to 8
[  107.972745][   T23] usb 4-1: USB disconnect, device number 3
[  108.076039][ T4611] squashfs image failed sanity check
[  108.587996][ T4617] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  109.257212][ T4620] loop3: detected capacity change from 0 to 512
[  109.357525][ T4620] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  109.401893][ T4620] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002]
[  109.434769][ T4620] System zones: 1-12
[  109.488820][ T4620] EXT4-fs (loop3): 1 truncate cleaned up
[  109.498726][ T4620] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,debug,nombcache,quota,,errors=continue. Quota mode: writeback.
[  109.544802][ T4620] EXT4-fs warning (device loop3): verify_group_input:165: Last group not full
[  109.684919][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!!
[  109.741088][ T4605] loop1: detected capacity change from 0 to 32768
[  109.921639][ T4637] loop4: detected capacity change from 0 to 128
[  109.992143][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!!
[  110.018714][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[  110.031609][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[  110.048315][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[  110.325359][ T4637] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  110.356278][ T4641] loop3: detected capacity change from 0 to 128
[  110.360321][    C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  110.390456][ T4637] ext4 filesystem being mounted at /root/syzkaller.goT6p9/78/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[  111.241767][   T26] audit: type=1800 audit(1719686698.742:18): pid=4647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.308" name="file0" dev="loop3" ino=1048596 res=0 errno=0
[  111.371347][ T4652] loop1: detected capacity change from 0 to 512
[  111.443338][    C0] hrtimer: interrupt took 7216942 ns
[  112.412089][ T4652] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.310: bg 0: block 248: padding at end of block bitmap is not set
[  112.530046][ T4652] Quota error (device loop1): write_blk: dquota write failed
[  112.597849][ T4652] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  112.648083][ T4652] EXT4-fs error (device loop1): ext4_acquire_dquot:6196: comm syz.1.310: Failed to acquire dquot type 1
[  112.731963][ T4652] EXT4-fs (loop1): 1 truncate cleaned up
[  112.758219][ T4652] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,noload,,errors=continue. Quota mode: writeback.
[  112.817585][ T4652] ext4 filesystem being mounted at /root/syzkaller.Zgm9Wq/21/file0 supports timestamps until 2038 (0x7fffffff)
[  112.961346][ T4652] syz.1.310 (4652) used greatest stack depth: 19200 bytes left
[  113.150506][ T4682] loop4: detected capacity change from 0 to 512
[  113.304042][ T4684] loop3: detected capacity change from 0 to 512
[  113.768461][ T4686] program syz.2.326 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  114.091767][   T23] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  114.341760][   T23] usb 3-1: Using ep0 maxpacket: 16
[  114.527071][ T4684] EXT4-fs (loop3): Ignoring removed oldalloc option
[  114.545792][ T4684] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.325: Parent and EA inode have the same ino 15
[  114.552309][ T4691] loop0: detected capacity change from 0 to 764
[  114.567920][ T4684] EXT4-fs (loop3): Remounting filesystem read-only
[  114.575107][ T4684] EXT4-fs error (device loop3): ext4_evict_inode:293: comm syz.3.325: couldn't truncate inode 15 (err -30)
[  114.591298][ T4684] EXT4-fs (loop3): 1 orphan inode deleted
[  114.597781][ T4684] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,oldalloc,stripe=0x0000000000000005,. Quota mode: none.
[  114.632095][   T23] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  114.646724][   T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.655526][   T23] usb 3-1: Product: syz
[  114.659713][   T23] usb 3-1: Manufacturer: syz
[  114.665284][   T23] usb 3-1: SerialNumber: syz
[  114.672474][   T23] usb 3-1: config 0 descriptor??
[  114.713478][   T23] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  115.558051][ T4693] loop1: detected capacity change from 0 to 128
[  115.802178][   T23] ssu100: probe of 3-1:0.0 failed with error -71
[  115.817039][   T23] usb 3-1: USB disconnect, device number 3
[  116.393692][ T4697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.330'.
[  117.594210][ T4682] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  117.603688][ T4682] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  117.620478][ T4682] EXT4-fs: failed to create workqueue
[  117.625970][ T4682] EXT4-fs (loop4): mount failed
[  118.572785][    C0] vkms_vblank_simulate: vblank timer overrun
[  118.938055][    C0] vkms_vblank_simulate: vblank timer overrun
[  119.270294][    C0] vkms_vblank_simulate: vblank timer overrun
[  119.639900][    C0] vkms_vblank_simulate: vblank timer overrun
[  119.814338][  T144] Bluetooth: hci5: Frame reassembly failed (-84)
[  119.830097][ T4731] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[  119.873051][ T4732] netlink: 16 bytes leftover after parsing attributes in process `syz.3.342'.
[  119.948999][ T4734] loop2: detected capacity change from 0 to 256
[  119.996169][    C0] vkms_vblank_simulate: vblank timer overrun
[  120.269148][    C0] vkms_vblank_simulate: vblank timer overrun
[  120.577200][    C0] vkms_vblank_simulate: vblank timer overrun
[  120.866101][    C0] vkms_vblank_simulate: vblank timer overrun
[  121.116993][    C0] vkms_vblank_simulate: vblank timer overrun
[  121.437884][    C0] vkms_vblank_simulate: vblank timer overrun
[  121.711893][   T23] Bluetooth: hci0: command 0x2042 tx timeout
[  121.743078][    C0] vkms_vblank_simulate: vblank timer overrun
[  121.874364][   T23] Bluetooth: hci5: command 0x1003 tx timeout
[  121.880666][ T3521] Bluetooth: hci5: sending frame failed (-49)
[  122.008925][    C0] vkms_vblank_simulate: vblank timer overrun
[  122.312834][ T4734] FAT-fs (loop2): Directory bread(block 64) failed
[  122.320208][ T4734] FAT-fs (loop2): Directory bread(block 65) failed
[  122.334366][    C0] vkms_vblank_simulate: vblank timer overrun
[  122.360996][ T4734] FAT-fs (loop2): Directory bread(block 66) failed
[  122.381189][ T4734] FAT-fs (loop2): Directory bread(block 67) failed
[  122.417765][ T4734] FAT-fs (loop2): Directory bread(block 68) failed
[  122.424675][ T4734] FAT-fs (loop2): Directory bread(block 69) failed
[  122.431316][ T4734] FAT-fs (loop2): Directory bread(block 70) failed
[  122.534929][ T4734] FAT-fs (loop2): Directory bread(block 71) failed
[  122.602078][ T4734] FAT-fs (loop2): Directory bread(block 72) failed
[  122.667319][ T4734] FAT-fs (loop2): Directory bread(block 73) failed
[  122.701959][    C0] vkms_vblank_simulate: vblank timer overrun
[  122.865629][ T4734] attempt to access beyond end of device
[  122.865629][ T4734] loop2: rw=2049, want=1256, limit=256
[  122.885833][ T4734] attempt to access beyond end of device
[  122.885833][ T4734] loop2: rw=2049, want=1320, limit=256
[  122.906989][ T4734] attempt to access beyond end of device
[  122.906989][ T4734] loop2: rw=0, want=1320, limit=256
[  122.921278][   T26] audit: type=1800 audit(1719686710.432:19): pid=4734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.344" name="bus" dev="loop2" ino=1048597 res=0 errno=0
[  122.969135][   T26] audit: type=1800 audit(1719686710.482:20): pid=4734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.344" name="bus" dev="loop2" ino=1048597 res=0 errno=0
[  123.118784][    C0] vkms_vblank_simulate: vblank timer overrun
[  123.414687][ T4740] chnl_net:caif_netlink_parms(): no params data found
[  123.657384][    C0] vkms_vblank_simulate: vblank timer overrun
[  124.000168][ T3566] Bluetooth: hci5: command 0x1001 tx timeout
[  124.000274][ T3521] Bluetooth: hci5: sending frame failed (-49)
[  124.207327][    C0] vkms_vblank_simulate: vblank timer overrun
[  124.660303][    C0] vkms_vblank_simulate: vblank timer overrun
[  125.130008][    C0] vkms_vblank_simulate: vblank timer overrun
[  125.231705][   T23] Bluetooth: hci6: command 0x0409 tx timeout
[  125.560638][    C0] vkms_vblank_simulate: vblank timer overrun
[  125.939805][    C0] vkms_vblank_simulate: vblank timer overrun
[  126.031792][   T23] Bluetooth: hci5: command 0x1009 tx timeout
[  126.285273][ T4746] bridge0: port 3(gretap0) entered blocking state
[  126.285988][ T4746] bridge0: port 3(gretap0) entered disabled state
[  126.289392][ T4746] device gretap0 entered promiscuous mode
[  126.296446][ T4746] bridge0: port 3(gretap0) entered blocking state
[  126.296609][ T4746] bridge0: port 3(gretap0) entered forwarding state
[  126.368016][ T4747] device gretap0 left promiscuous mode
[  126.518576][ T4755] netlink: 104 bytes leftover after parsing attributes in process `syz.2.348'.
[  126.596325][ T4747] bridge0: port 3(gretap0) entered disabled state
[  127.466824][ T3551] Bluetooth: hci6: command 0x041b tx timeout
[  128.730430][ T4770] bridge0: port 3(gretap0) entered blocking state
[  128.738743][ T4770] bridge0: port 3(gretap0) entered disabled state
[  128.746312][ T4770] device gretap0 entered promiscuous mode
[  128.752612][ T4770] bridge0: port 3(gretap0) entered blocking state
[  129.903109][ T4770] bridge0: port 3(gretap0) entered forwarding state
[  129.915960][   T21] Bluetooth: hci6: command 0x040f tx timeout
[  129.933810][ T4740] bridge0: port 1(bridge_slave_0) entered blocking state
[  129.940927][ T4740] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.010924][ T4740] device bridge_slave_0 entered promiscuous mode
[  130.038651][ T4740] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.048164][ T4740] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.080252][ T4740] device bridge_slave_1 entered promiscuous mode
[  130.121442][    C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies.  Check SNMP counters.
[  131.408764][ T4778] device gretap0 left promiscuous mode
[  131.430067][ T4778] bridge0: port 3(gretap0) entered disabled state
[  132.038696][ T3551] Bluetooth: hci6: command 0x0419 tx timeout
[  132.834173][ T1375] ieee802154 phy0 wpan0: encryption failed: -22
[  132.840552][ T1375] ieee802154 phy1 wpan1: encryption failed: -22
[  134.486042][ T4740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  134.511050][ T4740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  135.157731][   T23] Bluetooth: hci0: command 0x0409 tx timeout
[  137.231968][   T23] Bluetooth: hci0: command 0x041b tx timeout
[  139.311865][ T1792] Bluetooth: hci0: command 0x040f tx timeout
[  141.396437][ T3555] Bluetooth: hci0: command 0x0419 tx timeout
[  141.978909][ T4740] team0: Port device team_slave_0 added
[  142.062302][ T4740] team0: Port device team_slave_1 added
[  142.974121][ T4920] fuse: root generation should be zero
[  143.361722][ T3566] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  143.721909][ T3566] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  143.737932][ T3566] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  143.821786][ T3566] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  143.835457][ T3566] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  143.847623][ T3566] usb 3-1: SerialNumber: syz
[  144.156753][ T3566] usb 3-1: 0:2 : does not exist
[  144.170966][ T3566] usb 3-1: unit 255 not found!
[  144.372089][ T3566] usb 3-1: 5:0: cannot get min/max values for control 1 (id 5)
[  144.571761][ T3566] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5)
[  144.771811][ T3566] usb 3-1: 5:0: cannot get min/max values for control 16 (id 5)
[  144.971833][ T3566] usb 3-1: 5:0: cannot get min/max values for control 17 (id 5)
[  145.171775][ T3566] usb 3-1: 5:0: cannot get min/max values for control 18 (id 5)
[  145.250703][ T3566] usb 3-1: USB disconnect, device number 4
[  145.298024][ T3500] udevd[3500]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  148.657748][   T26] audit: type=1800 audit(1719686736.232:21): pid=4944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.416" name="file0" dev="sda1" ino=1980 res=0 errno=0
[  150.953236][ T4740] batman_adv: batadv0: Adding interface: batadv_slave_0
[  150.960366][ T4740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  150.986392][    C1] vkms_vblank_simulate: vblank timer overrun
[  151.004498][ T4740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  151.032897][ T4740] batman_adv: batadv0: Adding interface: batadv_slave_1
[  151.047810][ T4740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  151.108291][ T4740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  155.072941][ T3555] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  155.313069][ T3555] usb 3-1: Using ep0 maxpacket: 32
[  155.441908][ T3555] usb 3-1: config 0 has an invalid interface number: 206 but max is 1
[  155.453375][ T3555] usb 3-1: config 0 has no interface number 1
[  155.466667][ T3555] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  155.484859][ T3555] usb 3-1: config 0 interface 206 has no altsetting 0
[  155.652021][ T3555] usb 3-1: New USB device found, idVendor=13d3, idProduct=3393, bcdDevice=6b.ed
[  155.669664][ T3555] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.678456][ T3555] usb 3-1: Product: syz
[  155.690397][ T3555] usb 3-1: Manufacturer: syz
[  155.695430][ T3555] usb 3-1: SerialNumber: syz
[  155.720025][ T3555] usb 3-1: config 0 descriptor??
[  156.832066][ T3555] Bluetooth: hci2: command 0x201b tx timeout
[  157.783526][ T3516] syz-executor (3516) used greatest stack depth: 18840 bytes left
[  157.822757][ T1792] usb 3-1: USB disconnect, device number 5
[  160.407143][ T4740] device hsr_slave_0 entered promiscuous mode
[  161.372591][ T4987] netlink: 12 bytes leftover after parsing attributes in process `syz.4.429'.
[  164.593789][ T3566] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  164.610763][ T3566] Bluetooth: hci4: Injecting HCI hardware error event
[  164.621487][  T146] Bluetooth: hci4: hardware error 0x00
[  172.196948][ T4740] device hsr_slave_1 entered promiscuous mode
[  173.151674][ T3566] Bluetooth: hci5: command 0x0409 tx timeout
[  173.158937][ T3566] Bluetooth: hci3: command 0x0409 tx timeout
[  173.300400][ T4740] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  173.331716][ T4740] Cannot create hsr debugfs directory
[  173.352211][ T4609] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.044456][ T3510] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  175.060119][ T3510] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  175.068597][ T3510] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  175.083759][ T3510] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  175.091175][ T3510] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  175.107631][ T3510] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  175.121070][ T3510] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  175.136338][ T3510] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  175.146565][ T3510] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  175.160334][ T3510] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  175.170547][ T3510] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  175.185640][ T3510] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  175.195932][ T3510] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  175.222158][ T3510] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  175.222227][ T3510] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  175.222250][ T3510] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  175.222273][ T3510] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  175.222295][ T3510] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  175.222318][ T3510] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  175.222340][ T3510] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  175.222363][ T3510] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  175.222385][ T3510] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  175.222407][ T3510] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  175.222429][ T3510] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  175.222452][ T3510] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  175.222474][ T3510] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  175.222496][ T3510] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  175.222518][ T3510] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  175.222540][ T3510] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  175.222569][ T3510] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  175.222591][ T3510] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  175.222614][ T3510] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  175.222636][ T3510] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  175.222659][ T3510] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  175.222681][ T3510] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  175.222703][ T3510] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  175.222725][ T3510] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  175.222748][ T3510] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  175.222770][ T3510] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  175.222792][ T3510] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  175.222815][ T3510] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  175.222837][ T3510] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  175.222860][ T3510] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  175.252197][ T3510] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  175.272134][ T3510] Bluetooth: hci3: command 0x041b tx timeout
[  175.272243][ T3510] Bluetooth: hci5: command 0x041b tx timeout
[  176.008871][ T4816] chnl_net:caif_netlink_parms(): no params data found
[  176.056622][ T5033] loop3: detected capacity change from 0 to 8
[  176.191719][ T1792] Bluetooth: hci1: command 0x0406 tx timeout
[  176.811168][ T4609] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.850190][ T5033] SQUASHFS error: Unable to read inode 0x9
[  176.928610][ T5018] chnl_net:caif_netlink_parms(): no params data found
[  177.311816][ T1792] Bluetooth: hci5: command 0x040f tx timeout
[  177.318064][ T1792] Bluetooth: hci3: command 0x040f tx timeout
[  178.611787][ T3555] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  178.861731][ T3555] usb 4-1: Using ep0 maxpacket: 16
[  178.981803][ T3555] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  179.068009][ T5018] bridge0: port 1(bridge_slave_0) entered blocking state
[  179.075259][ T5018] bridge0: port 1(bridge_slave_0) entered disabled state
[  179.081938][ T3555] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  179.083602][ T5018] device bridge_slave_0 entered promiscuous mode
[  179.099066][ T3555] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  179.107637][ T4816] bridge0: port 1(bridge_slave_0) entered blocking state
[  179.108486][ T3555] usb 4-1: SerialNumber: syz
[  179.114732][ T4816] bridge0: port 1(bridge_slave_0) entered disabled state
[  179.115970][ T4816] device bridge_slave_0 entered promiscuous mode
[  179.137135][ T4816] bridge0: port 2(bridge_slave_1) entered blocking state
[  179.144286][ T4816] bridge0: port 2(bridge_slave_1) entered disabled state
[  179.152526][ T4816] device bridge_slave_1 entered promiscuous mode
[  179.177563][ T3555] cdc_acm 4-1:1.0: Control and data interfaces are not separated!
[  179.177611][ T3555] cdc_acm 4-1:1.0: This needs exactly 3 endpoints
[  179.177636][ T3555] cdc_acm: probe of 4-1:1.0 failed with error -22
[  179.391852][ T3555] Bluetooth: hci3: command 0x0419 tx timeout
[  179.391905][ T3555] Bluetooth: hci5: command 0x0419 tx timeout
[  179.453703][ T3555] usb 4-1: USB disconnect, device number 4
[  180.025874][ T5018] bridge0: port 2(bridge_slave_1) entered blocking state
[  180.044456][ T5018] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.068160][ T5018] device bridge_slave_1 entered promiscuous mode
[  180.821924][ T4609] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.851368][ T5018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  180.886996][ T5048] netlink: 12 bytes leftover after parsing attributes in process `syz.3.444'.
[  181.430427][ T5018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  181.442527][ T4816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  181.504190][ T4816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  181.535815][ T5018] team0: Port device team_slave_0 added
[  181.968910][ T5018] team0: Port device team_slave_1 added
[  181.983542][ T5017] chnl_net:caif_netlink_parms(): no params data found
[  182.008809][ T4816] team0: Port device team_slave_0 added
[  182.037487][ T4816] team0: Port device team_slave_1 added
[  182.469197][ T5018] batman_adv: batadv0: Adding interface: batadv_slave_0
[  182.476340][ T5018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  182.504277][ T5018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  182.522738][ T4816] batman_adv: batadv0: Adding interface: batadv_slave_0
[  182.529711][ T4816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  183.028132][ T4816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  183.040793][ T4816] batman_adv: batadv0: Adding interface: batadv_slave_1
[  183.047752][ T4816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  183.073631][ T4816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  183.085459][ T5018] batman_adv: batadv0: Adding interface: batadv_slave_1
[  183.104263][ T5018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  183.144355][ T5018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  184.219169][ T4816] device hsr_slave_0 entered promiscuous mode
[  184.258314][ T4816] device hsr_slave_1 entered promiscuous mode
[  184.269562][ T4816] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  184.293250][ T4816] Cannot create hsr debugfs directory
[  184.611755][ T1792] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  184.757851][ T5017] bridge0: port 1(bridge_slave_0) entered blocking state
[  184.765202][ T5017] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.775192][ T5017] device bridge_slave_0 entered promiscuous mode
[  184.790534][ T5018] device hsr_slave_0 entered promiscuous mode
[  184.797385][ T5018] device hsr_slave_1 entered promiscuous mode
[  184.807826][ T5018] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  184.817873][ T5018] Cannot create hsr debugfs directory
[  184.861771][ T1792] usb 4-1: Using ep0 maxpacket: 16
[  184.981809][ T1792] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  185.081971][ T1792] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  185.099569][ T1792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  185.108135][ T1792] usb 4-1: SerialNumber: syz
[  185.172801][ T1792] cdc_acm 4-1:1.0: Control and data interfaces are not separated!
[  185.190912][ T1792] cdc_acm 4-1:1.0: This needs exactly 3 endpoints
[  185.199589][ T1792] cdc_acm: probe of 4-1:1.0 failed with error -22
[  185.396598][ T5017] bridge0: port 2(bridge_slave_1) entered blocking state
[  185.403772][ T5017] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.412153][ T5017] device bridge_slave_1 entered promiscuous mode
[  185.453054][ T5017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  185.466704][ T5017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  185.792029][ T1792] Bluetooth: hci2: command 0x0409 tx timeout
[  186.109085][ T4609] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.139956][ T5017] team0: Port device team_slave_0 added
[  186.151086][ T5017] team0: Port device team_slave_1 added
[  186.869167][ T5017] batman_adv: batadv0: Adding interface: batadv_slave_0
[  186.876460][ T5017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  186.903403][ T5017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  186.919091][ T5017] batman_adv: batadv0: Adding interface: batadv_slave_1
[  186.926511][ T5017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  187.252531][ T3551] usb 4-1: USB disconnect, device number 5
[  187.633073][ T5017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  187.726242][ T5073] overlayfs: conflicting lowerdir path
[  187.872064][ T1792] Bluetooth: hci2: command 0x041b tx timeout
[  189.699519][ T5017] device hsr_slave_0 entered promiscuous mode
[  189.951847][ T3510] Bluetooth: hci2: command 0x040f tx timeout
[  190.530258][ T5017] device hsr_slave_1 entered promiscuous mode
[  190.554156][ T5017] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  190.562686][ T5017] Cannot create hsr debugfs directory
[  192.031734][ T3555] Bluetooth: hci2: command 0x0419 tx timeout
[  192.109845][ T4740] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.041645][ T3566] Bluetooth: hci4: command 0x0409 tx timeout
[  193.553542][ T5064] chnl_net:caif_netlink_parms(): no params data found
[  193.611040][ T5082] chnl_net:caif_netlink_parms(): no params data found
[  194.659451][ T1375] ieee802154 phy0 wpan0: encryption failed: -22
[  194.667359][ T1375] ieee802154 phy1 wpan1: encryption failed: -22
[  195.072774][ T3555] Bluetooth: hci4: command 0x041b tx timeout
[  195.087252][ T5064] bridge0: port 1(bridge_slave_0) entered blocking state
[  195.094389][ T5064] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.102614][ T5064] device bridge_slave_0 entered promiscuous mode
[  196.432517][ T5064] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.439695][ T5064] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.447927][ T5064] device bridge_slave_1 entered promiscuous mode
[  197.247426][ T3555] Bluetooth: hci4: command 0x040f tx timeout
[  197.315028][ T4740] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.338979][ T5064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  197.998003][ T5064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  198.032159][ T5082] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.041797][ T5082] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.050160][ T5082] device bridge_slave_0 entered promiscuous mode
[  198.070849][ T5064] team0: Port device team_slave_0 added
[  198.817931][ T5064] team0: Port device team_slave_1 added
[  198.832344][ T5082] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.839543][ T5082] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.861317][ T5082] device bridge_slave_1 entered promiscuous mode
[  199.579987][ T3510] Bluetooth: hci4: command 0x0419 tx timeout
[  199.665683][ T5064] batman_adv: batadv0: Adding interface: batadv_slave_0
[  199.673090][ T5064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  199.761123][ T5064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  200.589127][ T5082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  200.612378][ T5064] batman_adv: batadv0: Adding interface: batadv_slave_1
[  200.620028][ T5064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  200.664351][ T5064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  201.436504][ T5082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  202.221467][ T5064] device hsr_slave_0 entered promiscuous mode
[  202.229331][ T5064] device hsr_slave_1 entered promiscuous mode
[  202.242392][ T5064] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  202.249975][ T5064] Cannot create hsr debugfs directory
[  202.907037][   T26] audit: type=1326 audit(1719686790.482:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5177 comm="syz.3.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc822145b99 code=0x7ffc0000
[  202.946285][   T26] audit: type=1326 audit(1719686790.512:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5177 comm="syz.3.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc822145b99 code=0x7ffc0000
[  202.951928][ T5082] team0: Port device team_slave_0 added
[  203.525806][   T26] audit: type=1326 audit(1719686790.512:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5177 comm="syz.3.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fc822145b99 code=0x7ffc0000
[  203.547931][   T26] audit: type=1326 audit(1719686790.512:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5177 comm="syz.3.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc822145b99 code=0x7ffc0000
[  203.568915][ T5181] loop3: detected capacity change from 0 to 512
[  203.570015][   T26] audit: type=1326 audit(1719686790.512:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5177 comm="syz.3.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc822145b99 code=0x7ffc0000
[  203.621839][ T5082] team0: Port device team_slave_1 added
[  204.177201][ T4740] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.191826][ T5181] EXT4-fs (sda1): Ignoring removed orlov option
[  204.631832][ T5181] EXT4-fs (sda1): re-mounted. Opts: nobarrier,errors=remount-ro,debug_want_extra_isize=0x000000000000005c,sysvgroups,data=ordered,init_itable=0x0000000000000001,orlov,. Quota mode: none.
[  204.657672][ T5082] batman_adv: batadv0: Adding interface: batadv_slave_0
[  204.664813][ T5082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  204.690708][ T5082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  205.336764][ T5082] batman_adv: batadv0: Adding interface: batadv_slave_1
[  205.343842][ T5082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  205.369736][ T5082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  205.416148][ T5082] device hsr_slave_0 entered promiscuous mode
[  205.423550][ T5082] device hsr_slave_1 entered promiscuous mode
[  206.125914][ T5082] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  206.133522][ T5082] Cannot create hsr debugfs directory
[  207.501750][ T4740] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.810016][ T5018] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.005955][ T5234] loop3: detected capacity change from 0 to 1024
[  212.374787][ T5018] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.478002][ T3509] hfsplus: bad catalog entry type
[  213.877073][ T5018] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.555060][ T5018] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.164439][ T3967] hfsplus: b-tree write err: -5, ino 4
[  220.304456][ T5338] chnl_net:caif_netlink_parms(): no params data found
[  221.578069][ T5338] bridge0: port 1(bridge_slave_0) entered blocking state
[  221.585345][ T5338] bridge0: port 1(bridge_slave_0) entered disabled state
[  221.594567][ T5338] device bridge_slave_0 entered promiscuous mode
[  221.603933][ T5338] bridge0: port 2(bridge_slave_1) entered blocking state
[  221.612496][ T5338] bridge0: port 2(bridge_slave_1) entered disabled state
[  221.620883][ T5338] device bridge_slave_1 entered promiscuous mode
[  222.191936][   T23] Bluetooth: hci1: command 0x0409 tx timeout
[  222.348666][ T5338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  222.362130][ T5338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  222.396979][ T5338] team0: Port device team_slave_0 added
[  222.406090][ T5338] team0: Port device team_slave_1 added
[  222.999440][ T5338] batman_adv: batadv0: Adding interface: batadv_slave_0
[  223.006493][ T5338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  223.032383][ T5338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  223.045204][ T5338] batman_adv: batadv0: Adding interface: batadv_slave_1
[  223.052201][ T5338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  223.078092][ T5338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  224.271772][ T3555] Bluetooth: hci1: command 0x041b tx timeout
[  224.340549][ T5338] device hsr_slave_0 entered promiscuous mode
[  224.363122][ T5338] device hsr_slave_1 entered promiscuous mode
[  224.370292][ T5338] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  224.377892][ T5338] Cannot create hsr debugfs directory
[  226.351733][   T23] Bluetooth: hci1: command 0x040f tx timeout
[  227.341933][ T4609] device hsr_slave_0 left promiscuous mode
[  227.349318][ T4609] device hsr_slave_1 left promiscuous mode
[  227.357088][ T4609] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  227.365145][ T4609] batman_adv: batadv0: Removing interface: batadv_slave_0
[  227.375132][ T4609] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  227.382997][ T4609] batman_adv: batadv0: Removing interface: batadv_slave_1
[  227.745814][ T4609] device bridge_slave_1 left promiscuous mode
[  227.752070][ T4609] bridge0: port 2(bridge_slave_1) entered disabled state
[  227.761064][ T4609] device bridge_slave_0 left promiscuous mode
[  227.767313][ T4609] bridge0: port 1(bridge_slave_0) entered disabled state
[  227.781549][ T4609] device veth1_macvtap left promiscuous mode
[  227.787638][ T4609] device veth0_macvtap left promiscuous mode
[  227.793740][ T4609] device veth1_vlan left promiscuous mode
[  227.799565][ T4609] device veth0_vlan left promiscuous mode
[  228.431646][ T3555] Bluetooth: hci1: command 0x0419 tx timeout
[  229.320628][ T4609] team0 (unregistering): Port device team_slave_1 removed
[  229.337430][ T4609] team0 (unregistering): Port device team_slave_0 removed
[  230.079073][ T4609] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  230.095529][ T4609] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  230.158565][ T4609] bond0 (unregistering): Released all slaves
[  233.696657][ T5500] chnl_net:caif_netlink_parms(): no params data found
[  234.470683][ T5500] bridge0: port 1(bridge_slave_0) entered blocking state
[  234.477792][ T5500] bridge0: port 1(bridge_slave_0) entered disabled state
[  235.333134][ T5500] device bridge_slave_0 entered promiscuous mode
[  235.341049][ T5502] chnl_net:caif_netlink_parms(): no params data found
[  235.372749][ T5500] bridge0: port 2(bridge_slave_1) entered blocking state
[  235.379863][ T5500] bridge0: port 2(bridge_slave_1) entered disabled state
[  235.393862][ T5500] device bridge_slave_1 entered promiscuous mode
[  235.472105][ T1792] Bluetooth: hci6: command 0x0409 tx timeout
[  235.551853][ T1792] Bluetooth: hci7: command 0x0409 tx timeout
[  237.088177][ T5500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  237.115649][ T5017] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.156593][ T5500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  237.551924][ T3555] Bluetooth: hci6: command 0x041b tx timeout
[  237.572282][ T5502] bridge0: port 1(bridge_slave_0) entered blocking state
[  237.579394][ T5502] bridge0: port 1(bridge_slave_0) entered disabled state
[  237.593274][ T5502] device bridge_slave_0 entered promiscuous mode
[  237.625699][ T5502] bridge0: port 2(bridge_slave_1) entered blocking state
[  237.633114][ T3566] Bluetooth: hci7: command 0x041b tx timeout
[  237.645609][ T5502] bridge0: port 2(bridge_slave_1) entered disabled state
[  237.655687][ T5502] device bridge_slave_1 entered promiscuous mode
[  238.070622][ T5500] team0: Port device team_slave_0 added
[  238.102374][ T5500] team0: Port device team_slave_1 added
[  238.732048][ T5017] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.749060][ T5502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  238.766648][ T5502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  238.776488][ T5500] batman_adv: batadv0: Adding interface: batadv_slave_0
[  238.783624][ T5500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  238.809681][ T5500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  238.830684][ T5500] batman_adv: batadv0: Adding interface: batadv_slave_1
[  238.851609][ T5500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  238.888607][ T5500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  239.456178][ T5502] team0: Port device team_slave_0 added
[  239.475986][ T5500] device hsr_slave_0 entered promiscuous mode
[  239.484466][ T5500] device hsr_slave_1 entered promiscuous mode
[  239.633828][   T23] Bluetooth: hci6: command 0x040f tx timeout
[  239.721693][   T23] Bluetooth: hci7: command 0x040f tx timeout
[  240.305376][ T5500] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  240.312974][ T5500] Cannot create hsr debugfs directory
[  240.320182][ T5502] team0: Port device team_slave_1 added
[  240.347489][ T5502] batman_adv: batadv0: Adding interface: batadv_slave_0
[  240.354504][ T5502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  240.380484][ T5502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  241.510921][ T5502] batman_adv: batadv0: Adding interface: batadv_slave_1
[  241.517921][ T5502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  241.711998][ T3566] Bluetooth: hci6: command 0x0419 tx timeout
[  241.792056][ T3566] Bluetooth: hci7: command 0x0419 tx timeout
[  243.470356][ T5502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  243.502738][ T5017] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.529179][ T5502] device hsr_slave_0 entered promiscuous mode
[  244.905942][ T5502] device hsr_slave_1 entered promiscuous mode
[  244.915766][ T5502] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  244.924201][ T5502] Cannot create hsr debugfs directory
[  245.631849][ T3555] Bluetooth: hci0: command 0x0409 tx timeout
[  246.287345][ T5017] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.304311][ T5631] chnl_net:caif_netlink_parms(): no params data found
[  246.351455][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state
[  246.358585][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state
[  246.731955][ T5631] device bridge_slave_0 entered promiscuous mode
[  246.740856][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state
[  246.748056][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state
[  246.756436][ T5631] device bridge_slave_1 entered promiscuous mode
[  246.783024][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  246.795196][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  246.826996][ T5631] team0: Port device team_slave_0 added
[  247.524325][ T5631] team0: Port device team_slave_1 added
[  247.553061][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0
[  247.560137][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  247.586021][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  247.599222][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1
[  247.606200][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  247.711935][   T23] Bluetooth: hci0: command 0x041b tx timeout
[  248.782646][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  248.838051][ T5631] device hsr_slave_0 entered promiscuous mode
[  248.845190][ T5631] device hsr_slave_1 entered promiscuous mode
[  248.851972][ T5631] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  248.859553][ T5631] Cannot create hsr debugfs directory
[  249.792043][ T3566] Bluetooth: hci0: command 0x040f tx timeout
[  251.872185][ T3510] Bluetooth: hci0: command 0x0419 tx timeout
[  252.242791][ T5338] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.791811][ T3555] Bluetooth: hci8: command 0x0409 tx timeout
[  254.640731][ T5338] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.661368][ T5644] chnl_net:caif_netlink_parms(): no params data found
[  255.713857][ T1375] ieee802154 phy0 wpan0: encryption failed: -22
[  255.720172][ T1375] ieee802154 phy1 wpan1: encryption failed: -22
[  255.871911][ T3510] Bluetooth: hci8: command 0x041b tx timeout
[  256.276389][ T5644] bridge0: port 1(bridge_slave_0) entered blocking state
[  256.283554][ T5644] bridge0: port 1(bridge_slave_0) entered disabled state
[  257.951785][ T3555] Bluetooth: hci8: command 0x040f tx timeout
[  258.610731][ T5644] device bridge_slave_0 entered promiscuous mode
[  258.620551][ T5644] bridge0: port 2(bridge_slave_1) entered blocking state
[  258.628057][ T5644] bridge0: port 2(bridge_slave_1) entered disabled state
[  258.636961][ T5644] device bridge_slave_1 entered promiscuous mode
[  260.031644][ T3566] Bluetooth: hci8: command 0x0419 tx timeout
[  260.495911][ T5338] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.529692][ T5644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  260.541186][ T5644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  260.567331][ T5644] team0: Port device team_slave_0 added
[  260.575080][ T5644] team0: Port device team_slave_1 added
[  261.839103][ T5644] batman_adv: batadv0: Adding interface: batadv_slave_0
[  261.861773][ T5644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  261.911698][ T5644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  261.933885][ T5644] batman_adv: batadv0: Adding interface: batadv_slave_1
[  261.940854][ T5644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  262.009741][ T5644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  263.446596][ T5644] device hsr_slave_0 entered promiscuous mode
[  263.462856][ T5644] device hsr_slave_1 entered promiscuous mode
[  263.490892][ T5644] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  263.501798][ T5644] Cannot create hsr debugfs directory
[  279.074096][ T5652] chnl_net:caif_netlink_parms(): no params data found
[  280.751763][ T3510] Bluetooth: hci2: command 0x0409 tx timeout
[  281.451167][ T5652] bridge0: port 1(bridge_slave_0) entered blocking state
[  281.458593][ T5652] bridge0: port 1(bridge_slave_0) entered disabled state
[  281.469079][ T5652] device bridge_slave_0 entered promiscuous mode
[  281.478509][ T5652] bridge0: port 2(bridge_slave_1) entered blocking state
[  281.485579][ T5652] bridge0: port 2(bridge_slave_1) entered disabled state
[  281.493615][ T5652] device bridge_slave_1 entered promiscuous mode
[  282.831830][ T3555] Bluetooth: hci2: command 0x041b tx timeout
[  284.911708][   T23] Bluetooth: hci2: command 0x040f tx timeout
[  286.229258][ T5338] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  286.245907][ T5652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  286.257656][ T5652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  286.291593][ T5652] team0: Port device team_slave_0 added
[  286.299430][ T5652] team0: Port device team_slave_1 added
[  286.991725][ T3555] Bluetooth: hci2: command 0x0419 tx timeout
[  288.306754][ T5652] batman_adv: batadv0: Adding interface: batadv_slave_0
[  288.314299][ T5652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  288.341315][ T5652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  288.358324][ T5652] batman_adv: batadv0: Adding interface: batadv_slave_1
[  288.365762][ T5652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  288.393339][ T5652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  289.307784][ T5652] device hsr_slave_0 entered promiscuous mode
[  289.315041][ T5652] device hsr_slave_1 entered promiscuous mode
[  289.321732][ T5652] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  289.329318][ T5652] Cannot create hsr debugfs directory
[  294.280771][ T5665] chnl_net:caif_netlink_parms(): no params data found
[  294.836138][ T5666] chnl_net:caif_netlink_parms(): no params data found
[  294.909332][ T5665] bridge0: port 1(bridge_slave_0) entered blocking state
[  294.916542][ T5665] bridge0: port 1(bridge_slave_0) entered disabled state
[  294.925068][ T5665] device bridge_slave_0 entered promiscuous mode
[  295.410153][ T5665] bridge0: port 2(bridge_slave_1) entered blocking state
[  295.417710][ T5665] bridge0: port 2(bridge_slave_1) entered disabled state
[  295.432392][ T5665] device bridge_slave_1 entered promiscuous mode
[  295.463860][ T5665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  295.486134][ T5665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  295.495943][ T5666] bridge0: port 1(bridge_slave_0) entered blocking state
[  295.503990][ T5666] bridge0: port 1(bridge_slave_0) entered disabled state
[  295.512535][ T5666] device bridge_slave_0 entered promiscuous mode
[  295.862998][ T5666] bridge0: port 2(bridge_slave_1) entered blocking state
[  295.870097][ T5666] bridge0: port 2(bridge_slave_1) entered disabled state
[  295.879476][ T5666] device bridge_slave_1 entered promiscuous mode
[  295.916702][ T5665] team0: Port device team_slave_0 added
[  295.925472][ T5666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  296.032012][   T23] Bluetooth: hci1: command 0x0409 tx timeout
[  296.111697][   T23] Bluetooth: hci3: command 0x0409 tx timeout
[  296.289666][ T5665] team0: Port device team_slave_1 added
[  296.306745][ T5666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  296.334726][ T5665] batman_adv: batadv0: Adding interface: batadv_slave_0
[  296.341699][ T5665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  296.367586][ T5665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  297.133773][ T5665] batman_adv: batadv0: Adding interface: batadv_slave_1
[  297.140845][ T5665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  297.167178][ T5665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  297.182960][ T5666] team0: Port device team_slave_0 added
[  297.197400][ T5666] team0: Port device team_slave_1 added
[  297.883390][ T5665] device hsr_slave_0 entered promiscuous mode
[  297.890664][ T5665] device hsr_slave_1 entered promiscuous mode
[  297.898286][ T5665] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  297.905868][ T5665] Cannot create hsr debugfs directory
[  297.912192][ T5666] batman_adv: batadv0: Adding interface: batadv_slave_0
[  297.919245][ T5666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  297.945464][ T5666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  298.112180][   T23] Bluetooth: hci1: command 0x041b tx timeout
[  298.211605][   T23] Bluetooth: hci3: command 0x041b tx timeout
[  298.745856][ T5666] batman_adv: batadv0: Adding interface: batadv_slave_1
[  298.752845][ T5666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  300.112611][ T5666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  300.184254][ T5666] device hsr_slave_0 entered promiscuous mode
[  300.191453][ T5666] device hsr_slave_1 entered promiscuous mode
[  300.192108][   T23] Bluetooth: hci1: command 0x040f tx timeout
[  300.203876][ T5666] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  300.271805][   T23] Bluetooth: hci3: command 0x040f tx timeout
[  302.182842][ T5666] Cannot create hsr debugfs directory
[  302.272127][   T23] Bluetooth: hci1: command 0x0419 tx timeout
[  302.351688][   T23] Bluetooth: hci3: command 0x0419 tx timeout
[  304.673365][ T5665] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  304.684985][ T5665] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  305.380387][ T5644] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  305.413961][ T5644] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  306.028776][ T5665] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  306.042298][ T5665] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  306.514717][ T5644] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  306.536820][ T5644] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  307.333273][ T5652] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  307.364436][ T5652] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  307.471803][ T3510] Bluetooth: hci0: command 0x0409 tx timeout
[  308.797237][ T5665] 8021q: adding VLAN 0 to HW filter on device bond0
[  308.813166][ T5652] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  308.827866][ T5665] 8021q: adding VLAN 0 to HW filter on device team0
[  308.865242][ T5665] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  309.551828][ T1792] Bluetooth: hci0: command 0x041b tx timeout
[  311.498744][ T5665] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  311.539178][ T5652] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  311.631754][ T1792] Bluetooth: hci0: command 0x040f tx timeout
[  313.711802][ T3566] Bluetooth: hci0: command 0x0419 tx timeout
[  313.871978][ T3566] Bluetooth: hci4: command 0x0409 tx timeout
[  315.841410][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  315.850928][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  315.858980][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  315.867889][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  315.876407][ T3722] bridge0: port 1(bridge_slave_0) entered blocking state
[  315.883484][ T3722] bridge0: port 1(bridge_slave_0) entered forwarding state
[  315.891345][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  315.900385][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  315.908898][ T3722] bridge0: port 2(bridge_slave_1) entered blocking state
[  315.915975][ T3722] bridge0: port 2(bridge_slave_1) entered forwarding state
[  315.923843][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  315.932956][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  315.951914][ T1792] Bluetooth: hci4: command 0x041b tx timeout
[  317.156750][ T1375] ieee802154 phy0 wpan0: encryption failed: -22
[  317.156837][ T1375] ieee802154 phy1 wpan1: encryption failed: -22
[  318.031874][ T1792] Bluetooth: hci4: command 0x040f tx timeout
[  320.111861][ T1792] Bluetooth: hci4: command 0x0419 tx timeout
[  322.853836][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  322.862919][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  322.871879][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  322.880951][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  322.889760][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  322.898896][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  322.907722][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  334.221092][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  334.260693][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  334.269086][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  334.277262][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  341.631727][ T1792] Bluetooth: hci5: command 0x0409 tx timeout
[  343.711834][ T1792] Bluetooth: hci5: command 0x041b tx timeout
[  345.791827][ T1792] Bluetooth: hci5: command 0x040f tx timeout
[  347.873714][ T1792] Bluetooth: hci5: command 0x0419 tx timeout
[  356.431923][ T3510] Bluetooth: hci6: command 0x0409 tx timeout
[  356.672145][ T3510] Bluetooth: hci7: command 0x0409 tx timeout
[  358.511965][ T3510] Bluetooth: hci6: command 0x041b tx timeout
[  358.752501][ T3510] Bluetooth: hci7: command 0x041b tx timeout
[  360.591846][ T3510] Bluetooth: hci6: command 0x040f tx timeout
[  360.832236][ T3510] Bluetooth: hci7: command 0x040f tx timeout
[  362.671897][ T3566] Bluetooth: hci6: command 0x0419 tx timeout
[  362.912131][ T3566] Bluetooth: hci7: command 0x0419 tx timeout
[  366.751821][ T3510] Bluetooth: hci8: command 0x0409 tx timeout
[  368.831907][ T3510] Bluetooth: hci8: command 0x041b tx timeout
[  370.912688][ T3510] Bluetooth: hci8: command 0x040f tx timeout
[  372.991792][ T3566] Bluetooth: hci8: command 0x0419 tx timeout
[  375.151964][ T3566] Bluetooth: hci9: command 0x0409 tx timeout
[  377.231891][ T3566] Bluetooth: hci9: command 0x041b tx timeout
[  378.593983][ T1375] ieee802154 phy0 wpan0: encryption failed: -22
[  378.600302][ T1375] ieee802154 phy1 wpan1: encryption failed: -22
[  379.311903][ T3510] Bluetooth: hci9: command 0x040f tx timeout
[  381.391905][ T3510] Bluetooth: hci9: command 0x0419 tx timeout
[  401.151952][ T3566] Bluetooth: hci2: command 0x0406 tx timeout
[  402.192231][ T3566] Bluetooth: hci10: command 0x0409 tx timeout
[  404.271938][ T3566] Bluetooth: hci10: command 0x041b tx timeout
[  406.351970][ T3566] Bluetooth: hci10: command 0x040f tx timeout
[  408.431873][ T3566] Bluetooth: hci10: command 0x0419 tx timeout
[  416.511912][ T3566] Bluetooth: hci1: command 0x0406 tx timeout
[  416.518044][ T3566] Bluetooth: hci3: command 0x0406 tx timeout
[  416.671781][ T3566] Bluetooth: hci11: command 0x0409 tx timeout
[  417.231718][ T3566] Bluetooth: hci12: command 0x0409 tx timeout
[  418.751755][ T3566] Bluetooth: hci11: command 0x041b tx timeout
[  419.311698][ T3566] Bluetooth: hci12: command 0x041b tx timeout
[  420.833668][ T3566] Bluetooth: hci11: command 0x040f tx timeout
[  421.392144][ T3566] Bluetooth: hci12: command 0x040f tx timeout
[  422.911767][ T3566] Bluetooth: hci11: command 0x0419 tx timeout
[  423.471731][ T3566] Bluetooth: hci12: command 0x0419 tx timeout
[  426.195420][ T5732] chnl_net:caif_netlink_parms(): no params data found
[  427.871801][ T5736] Bluetooth: hci13: command 0x0409 tx timeout
[  431.871821][ T5736] Bluetooth: hci0: command 0x0406 tx timeout
[  436.511979][   T21] Bluetooth: hci14: command 0x0409 tx timeout
[  436.991729][   T21] Bluetooth: hci4: command 0x0406 tx timeout
[  440.033652][ T1375] ieee802154 phy0 wpan0: encryption failed: -22
[  440.040005][ T1375] ieee802154 phy1 wpan1: encryption failed: -22
[  462.591796][ T5742] Bluetooth: hci5: command 0x0406 tx timeout
[  463.072624][ T5742] Bluetooth: hci15: command 0x0409 tx timeout
[  477.631709][ T5742] Bluetooth: hci16: command 0x0409 tx timeout
[  477.951714][ T5742] Bluetooth: hci6: command 0x0406 tx timeout
[  477.957877][ T5742] Bluetooth: hci7: command 0x0406 tx timeout
[  479.312149][ T5742] Bluetooth: hci17: command 0x0409 tx timeout
[  488.191653][   T21] Bluetooth: hci8: command 0x0406 tx timeout
[  488.831842][   T21] Bluetooth: hci18: command 0x0409 tx timeout
[  494.351745][   T23] Bluetooth: hci17: command 0x041b tx timeout
[  494.359021][   T23] Bluetooth: hci18: command 0x041b tx timeout
[  494.381678][   T23] Bluetooth: hci15: command 0x041b tx timeout
[  494.391982][   T23] Bluetooth: hci16: command 0x041b tx timeout
[  494.402769][   T23] Bluetooth: hci13: command 0x041b tx timeout
[  494.421532][   T23] Bluetooth: hci14: command 0x041b tx timeout
[  496.431713][   T23] Bluetooth: hci14: command 0x040f tx timeout
[  496.439191][   T23] Bluetooth: hci13: command 0x040f tx timeout
[  496.461633][   T23] Bluetooth: hci16: command 0x040f tx timeout
[  496.467943][   T23] Bluetooth: hci15: command 0x040f tx timeout
[  496.481573][   T23] Bluetooth: hci18: command 0x040f tx timeout
[  496.501561][   T23] Bluetooth: hci17: command 0x040f tx timeout
[  497.231709][   T23] Bluetooth: hci19: command 0x0409 tx timeout
[  498.431677][   T23] Bluetooth: hci9: command 0x0406 tx timeout
[  498.511742][   T23] Bluetooth: hci17: command 0x0419 tx timeout
[  498.517942][   T23] Bluetooth: hci18: command 0x0419 tx timeout
[  498.531549][   T23] Bluetooth: hci15: command 0x0419 tx timeout
[  498.551578][   T23] Bluetooth: hci16: command 0x0419 tx timeout
[  498.557756][   T23] Bluetooth: hci13: command 0x0419 tx timeout
[  498.571545][   T23] Bluetooth: hci14: command 0x0419 tx timeout
[  501.473958][ T1375] ieee802154 phy0 wpan0: encryption failed: -22
[  501.480270][ T1375] ieee802154 phy1 wpan1: encryption failed: -22
[  503.392614][   T27] INFO: task kworker/1:2:1792 blocked for more than 143 seconds.
[  503.400386][   T27]       Not tainted 5.15.161-syzkaller #0
[  503.421567][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  503.430284][   T27] task:kworker/1:2     state:D stack:24088 pid: 1792 ppid:     2 flags:0x00004000
[  503.462925][   T27] Workqueue: events switchdev_deferred_process_work
[  503.469617][   T27] Call Trace:
[  503.481518][   T27]  <TASK>
[  503.484494][   T27]  __schedule+0x12c4/0x45b0
[  503.489049][   T27]  ? mark_lock+0x98/0x340
[  503.511610][   T27]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  503.518599][   T27]  ? release_firmware_map_entry+0x190/0x190
[  503.531475][   T27]  ? __mutex_trylock_common+0x8d/0x2e0
[  503.536982][   T27]  ? do_raw_spin_unlock+0x137/0x8b0
[  503.561622][   T27]  ? _raw_spin_unlock_irq+0x1f/0x40
[  503.566874][   T27]  ? lockdep_hardirqs_on+0x94/0x130
[  503.581554][   T27]  schedule+0x11b/0x1f0
[  503.585758][   T27]  schedule_preempt_disabled+0xf/0x20
[  503.591156][   T27]  __mutex_lock_common+0xe34/0x25a0
[  503.611603][   T27]  ? switchdev_deferred_process_work+0xa/0x20
[  503.621951][   T27]  ? mutex_lock_io_nested+0x60/0x60
[  503.627286][   T27]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  503.651600][   T27]  ? print_irqtrace_events+0x210/0x210
[  503.657113][   T27]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  503.671521][   T27]  ? do_raw_spin_unlock+0x137/0x8b0
[  503.676777][   T27]  mutex_lock_nested+0x17/0x20
[  503.691478][   T27]  switchdev_deferred_process_work+0xa/0x20
[  503.697426][   T27]  process_one_work+0x8a1/0x10c0
[  503.720882][   T27]  ? worker_detach_from_pool+0x260/0x260
[  503.727099][   T27]  ? _raw_spin_lock_irqsave+0x120/0x120
[  503.741504][   T27]  ? kthread_data+0x4e/0xc0
[  503.746049][   T27]  ? wq_worker_running+0x97/0x170
[  503.751093][   T27]  worker_thread+0xaca/0x1280
[  503.771572][   T27]  kthread+0x3f6/0x4f0
[  503.775776][   T27]  ? rcu_lock_release+0x20/0x20
[  503.780645][   T27]  ? kthread_blkcg+0xd0/0xd0
[  503.801613][   T27]  ret_from_fork+0x1f/0x30
[  503.806105][   T27]  </TASK>
[  503.809228][   T27] INFO: task syz-executor:5701 blocked for more than 143 seconds.
[  503.831585][   T27]       Not tainted 5.15.161-syzkaller #0
[  503.837352][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  503.861567][   T27] task:syz-executor    state:D stack:26624 pid: 5701 ppid:     1 flags:0x00004004
[  503.870863][   T27] Call Trace:
[  503.891834][   T27]  <TASK>
[  503.894823][   T27]  __schedule+0x12c4/0x45b0
[  503.899379][   T27]  ? release_firmware_map_entry+0x190/0x190
[  503.921582][   T27]  ? __mutex_trylock_common+0x8d/0x2e0
[  503.931915][   T27]  ? do_raw_spin_unlock+0x137/0x8b0
[  503.937163][   T27]  schedule+0x11b/0x1f0
[  503.941341][   T27]  schedule_preempt_disabled+0xf/0x20
[  503.961586][   T27]  __mutex_lock_common+0xe34/0x25a0
[  503.966853][   T27]  ? rtnetlink_rcv_msg+0x94c/0xee0
[  503.991615][   T27]  ? mutex_lock_io_nested+0x60/0x60
[  503.996895][   T27]  mutex_lock_nested+0x17/0x20
[  504.012969][   T27]  rtnetlink_rcv_msg+0x94c/0xee0
[  504.018067][   T27]  ? reacquire_held_locks+0x660/0x660
[  504.032245][   T27]  ? rtnetlink_bind+0x80/0x80
[  504.036991][   T27]  ? stack_trace_save+0x1c0/0x1c0
[  504.051509][   T27]  ? __kernel_text_address+0x94/0x100
[  504.056936][   T27]  ? unwind_get_return_address+0x49/0x80
[  504.081631][   T27]  ? reacquire_held_locks+0x660/0x660
[  504.087061][   T27]  ? arch_stack_walk+0xf3/0x140
[  504.101568][   T27]  ? mark_lock+0x98/0x340
[  504.106143][   T27]  ? mark_lock+0x98/0x340
[  504.110491][   T27]  ? __lock_acquire+0x1295/0x1ff0
[  504.130489][   T27]  netlink_rcv_skb+0x1cf/0x410
[  504.141607][   T27]  ? rtnetlink_bind+0x80/0x80
[  504.146337][   T27]  ? netlink_ack+0xb10/0xb10
[  504.150962][   T27]  netlink_unicast+0x7b6/0x980
[  504.171499][   T27]  ? netlink_detachskb+0x90/0x90
[  504.176498][   T27]  ? __virt_addr_valid+0x39e/0x450
[  504.191560][   T27]  ? 0xffffffff81000000
[  504.195765][   T27]  ? __check_object_size+0x300/0x410
[  504.201075][   T27]  ? bpf_lsm_netlink_send+0x5/0x10
[  504.221583][   T27]  netlink_sendmsg+0xa30/0xd60
[  504.226414][   T27]  ? netlink_getsockopt+0x5b0/0x5b0
[  504.241557][   T27]  ? aa_sock_msg_perm+0x91/0x150
[  504.246563][   T27]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  504.272158][   T27]  ? security_socket_sendmsg+0x7d/0xa0
[  504.277814][   T27]  ? netlink_getsockopt+0x5b0/0x5b0
[  504.291500][   T27]  __sys_sendto+0x564/0x720
[  504.296063][   T27]  ? __ia32_sys_getpeername+0x80/0x80
[  504.311556][   T27]  ? print_irqtrace_events+0x210/0x210
[  504.317061][   T27]  ? vtime_user_exit+0x2d1/0x400
[  504.331359][   T27]  __x64_sys_sendto+0xda/0xf0
[  504.343064][   T27]  do_syscall_64+0x3b/0xb0
[  504.347529][   T27]  ? clear_bhb_loop+0x15/0x70
[  504.372339][   T27]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  504.378330][   T27] RIP: 0033:0x7fa25f65d92c
[  504.391474][   T27] RSP: 002b:00007fff74e45cd0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  504.399981][   T27] RAX: ffffffffffffffda RBX: 00007fa26031a620 RCX: 00007fa25f65d92c
[  504.431889][   T27] RDX: 0000000000000028 RSI: 00007fa26031a670 RDI: 0000000000000003
[  504.452850][   T27] RBP: 0000000000000000 R08: 00007fff74e45d24 R09: 000000000000000c
[  504.460874][   T27] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  504.481576][   T27] R13: 0000000000000000 R14: 00007fa26031a670 R15: 0000000000000000
[  504.489619][   T27]  </TASK>
[  504.501521][   T27] INFO: task syz-executor:5702 blocked for more than 144 seconds.
[  504.509356][   T27]       Not tainted 5.15.161-syzkaller #0
[  504.531588][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  504.551576][   T27] task:syz-executor    state:D stack:27064 pid: 5702 ppid:     1 flags:0x00004004
[  504.560847][   T27] Call Trace:
[  504.581664][   T27]  <TASK>
[  504.584650][   T27]  __schedule+0x12c4/0x45b0
[  504.589205][   T27]  ? release_firmware_map_entry+0x190/0x190
[  504.611722][   T27]  ? __mutex_trylock_common+0x8d/0x2e0
[  504.617346][   T27]  ? do_raw_spin_unlock+0x137/0x8b0
[  504.631475][   T27]  schedule+0x11b/0x1f0
[  504.635687][   T27]  schedule_preempt_disabled+0xf/0x20
[  504.641092][   T27]  __mutex_lock_common+0xe34/0x25a0
[  504.661603][   T27]  ? rtnetlink_rcv_msg+0x94c/0xee0
[  504.666779][   T27]  ? mutex_lock_io_nested+0x60/0x60
[  504.691639][   T27]  mutex_lock_nested+0x17/0x20
[  504.696469][   T27]  rtnetlink_rcv_msg+0x94c/0xee0
[  504.711516][   T27]  ? reacquire_held_locks+0x660/0x660
[  504.716957][   T27]  ? rtnetlink_bind+0x80/0x80
[  504.731545][   T27]  ? do_raw_spin_unlock+0x137/0x8b0
[  504.736796][   T27]  ? _raw_spin_unlock_irqrestore+0x8b/0x130
[  504.751545][   T27]  ? lockdep_hardirqs_on+0x94/0x130
[  504.756801][   T27]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  504.782995][   T27]  ? _raw_spin_unlock+0x40/0x40
[  504.788002][   T27]  ? mark_lock+0x98/0x340
[  504.801524][   T27]  ? __lock_acquire+0x1295/0x1ff0
[  504.806635][   T27]  netlink_rcv_skb+0x1cf/0x410
[  504.821557][   T27]  ? rtnetlink_bind+0x80/0x80
[  504.826291][   T27]  ? netlink_ack+0xb10/0xb10
[  504.830912][   T27]  netlink_unicast+0x7b6/0x980
[  504.847427][   T27]  ? netlink_detachskb+0x90/0x90
[  504.861588][   T27]  ? __virt_addr_valid+0x39e/0x450
[  504.866747][   T27]  ? 0xffffffff81000000
[  504.870917][   T27]  ? __check_object_size+0x300/0x410
[  504.893012][   T27]  ? bpf_lsm_netlink_send+0x5/0x10
[  504.898183][   T27]  netlink_sendmsg+0xa30/0xd60
[  504.911673][   T27]  ? netlink_getsockopt+0x5b0/0x5b0
[  504.916919][   T27]  ? aa_sock_msg_perm+0x91/0x150
[  504.931494][   T27]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  504.937012][   T27]  ? security_socket_sendmsg+0x7d/0xa0
[  504.961610][   T27]  ? netlink_getsockopt+0x5b0/0x5b0
[  504.966874][   T27]  __sys_sendto+0x564/0x720
[  504.981844][   T27]  ? __ia32_sys_getpeername+0x80/0x80
[  504.987323][   T27]  ? print_irqtrace_events+0x210/0x210
[  505.002988][   T27]  ? vtime_user_exit+0x2d1/0x400
[  505.007998][   T27]  __x64_sys_sendto+0xda/0xf0
[  505.021524][   T27]  do_syscall_64+0x3b/0xb0
[  505.026000][   T27]  ? clear_bhb_loop+0x15/0x70
[  505.030696][   T27]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  505.052221][   T27] RIP: 0033:0x7fa2e0c1d92c
[  505.056688][   T27] RSP: 002b:00007ffd2db648b0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  505.081607][   T27] RAX: ffffffffffffffda RBX: 00007fa2e18da620 RCX: 00007fa2e0c1d92c
[  505.089634][   T27] RDX: 0000000000000028 RSI: 00007fa2e18da670 RDI: 0000000000000003
[  505.121684][   T27] RBP: 0000000000000000 R08: 00007ffd2db64904 R09: 000000000000000c
[  505.129708][   T27] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  505.151675][   T27] R13: 0000000000000000 R14: 00007fa2e18da670 R15: 0000000000000000
[  505.171578][   T27]  </TASK>
[  505.174658][   T27] 
[  505.174658][   T27] Showing all locks held in the system:
[  505.191475][   T27] 3 locks held by kworker/0:0/7:
[  505.196446][   T27]  #0: ffff888011c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0
[  505.222947][   T27]  #1: ffffc90000cc7d20 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0
[  505.251563][   T27]  #2: ffff888077a85240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x2cd/0x4120
[  505.271560][   T27] 3 locks held by kworker/0:1/13:
[  505.276729][   T27]  #0: ffff888011c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0
[  505.301595][   T27]  #1: ffffc90000d27d20 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0
[  505.331282][   T27]  #2: ffff88804a0cd240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x2cd/0x4120
[  505.351486][   T27] 1 lock held by khungtaskd/27:
[  505.356369][   T27]  #0: ffffffff8c91fae0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30
[  505.381595][   T27] 3 locks held by kworker/0:2/1065:
[  505.386974][   T27]  #0: ffff888023ada138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0
[  505.431638][   T27]  #1: ffffc900044cfd20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0
[  505.452879][   T27]  #2: ffffffff8d9e8348 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcc/0x1720
[  505.471623][   T27] 3 locks held by kworker/1:2/1792:
[  505.476977][   T27]  #0: ffff888011c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0
[  505.511806][   T27]  #1: ffffc90005597d20 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0
[  505.531482][   T27]  #2: ffffffff8d9e8348 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xa/0x20
[  505.551654][   T27] 1 lock held by dhcpcd/3174:
[  505.556366][   T27]  #0: ffffffff8d9e8348 (rtnl_mutex){+.+.}-{3:3}, at: __netlink_dump_start+0x12e/0x6f0
[  505.581616][   T27] 2 locks held by getty/3263:
[  505.586339][   T27]  #0: ffff88814b2cc098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70
[  505.611613][   T27]  #1: ffffc9000209b2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6af/0x1db0
[  505.631692][   T27] 3 locks held by kworker/1:3/3510:
[  505.636931][   T27]  #0: ffff888011c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0
[  505.666516][   T27]  #1: ffffc90002df7d20 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0
[  505.691486][   T27]  #2: ffffffff8d9e8348 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50
[  505.700539][   T27] 4 locks held by kworker/u5:6/3523:
[  505.721585][   T27]  #0: ffff888065d93938 ((wq_completion)hci19#2){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0
[  505.741559][   T27]  #1: ffffc90002f07d20 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0
[  505.768917][   T27]  #2: ffff8880690d8078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0xb3/0xb50
[  505.791628][   T27]  #3: ffffffff8db316a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x52f/0xb50
[  505.811511][   T27] 2 locks held by kworker/1:4/3551:
[  505.816746][   T27]  #0: ffff888011c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0
[  505.841588][   T27]  #1: ffffc90003097d20 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0
[  505.861503][   T27] 3 locks held by kworker/1:6/3555:
[  505.866741][   T27]  #0: ffff888023ada138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0
[  505.901637][   T27]  #1: ffffc900030d7d20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0
[  505.931596][   T27]  #2: ffffffff8d9e8348 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcc/0x1720
[  505.941074][   T27] 3 locks held by kworker/0:6/3556:
[  505.961590][   T27]  #0: ffff888011c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0
[  505.981525][   T27]  #1: ffffc900030e7d20 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0
[  506.002921][   T27]  #2: ffff88805688a240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x2cd/0x4120
[  506.031686][   T27] 2 locks held by kworker/1:7/3566:
[  506.036927][   T27]  #0: ffff888011c72138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0
[  506.061618][   T27]  #1: ffffc90003147d20 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0
[  506.081782][   T27] 3 locks held by kworker/0:9/3714:
[  506.087025][   T27]  #0: ffff888011c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0
[  506.121682][   T27]  #1: ffffc90003f97d20 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0
[  506.141540][   T27]  #2: ffff88807c10b240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x2cd/0x4120
[  506.161585][   T27] 4 locks held by kworker/0:13/3718:
[  506.166923][   T27] 4 locks held by kworker/u4:13/4609:
[  506.191787][   T27]  #0: ffff888011dcd138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0
[  506.211548][   T27]  #1: ffffc90002507d20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0
[  506.231472][   T27]  #2: ffffffff8d9dc790 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf1/0xb60
[  506.240859][   T27]  #3: ffffffff8d9e8348 (rtnl_mutex){+.+.}-{3:3}, at: netdev_run_todo+0xa4f/0xc40
[  506.271872][   T27] 1 lock held by syz-executor/5644:
[  506.277112][   T27]  #0: ffffffff8c923fb0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x9c/0x4e0
[  506.301645][   T27] 3 locks held by syz-executor/5652:
[  506.306985][   T27]  #0: ffff888055594ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x63/0x1070
[  506.331201][   T27]  #1: ffff888055594078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_do_close+0x431/0x1070
[  506.352147][   T27]  #2: ffffffff8db316a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb8/0x220
[  506.381693][   T27] 4 locks held by syz-executor/5665:
[  506.388009][   T27]  #0: ffff88806a218ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x63/0x1070
[  506.411507][   T27]  #1: ffff88806a218078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_do_close+0x431/0x1070
[  506.421075][   T27]  #2: ffffffff8db316a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb8/0x220
[  506.461637][   T27]  #3: ffffffff8c9240a8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x350/0x740
[  506.481481][   T27] 3 locks held by syz-executor/5666:
[  506.491959][   T27]  #0: ffff8880737a0ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x63/0x1070
[  506.521624][   T27]  #1: ffff8880737a0078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_do_close+0x431/0x1070
[  506.531186][   T27]  #2: ffffffff8db316a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb8/0x220
[  506.562984][   T27] 3 locks held by syz-executor/5683:
[  506.568323][   T27]  #0: ffff88807f130ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x63/0x1070
[  506.588104][   T27]  #1: ffff88807f130078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_do_close+0x431/0x1070
[  506.611563][   T27]  #2: ffffffff8db316a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb8/0x220
[  506.631452][   T27] 2 locks held by syz-executor/5689:
[  506.636775][   T27]  #0: ffff888019468ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x63/0x1070
[  506.661576][   T27]  #1: ffff888019468078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_do_close+0x431/0x1070
[  506.671136][   T27] 3 locks held by syz-executor/5694:
[  506.701692][   T27]  #0: ffff8880153bcff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x63/0x1070
[  506.721542][   T27]  #1: ffff8880153bc078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_do_close+0x431/0x1070
[  506.731104][   T27]  #2: ffffffff8db316a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb8/0x220
[  506.761688][   T27] 1 lock held by syz-executor/5701:
[  506.766926][   T27]  #0: ffffffff8d9e8348 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0
[  506.791532][   T27] 1 lock held by syz-executor/5702:
[  506.797911][   T27]  #0: ffffffff8d9e8348 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0
[  506.821580][   T27] 1 lock held by syz-executor/5713:
[  506.826823][   T27]  #0: ffffffff8d9e8348 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0
[  506.851527][   T27] 1 lock held by syz-executor/5717:
[  506.861958][   T27]  #0: ffffffff8d9e8348 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0
[  506.881566][   T27] 1 lock held by syz-executor/5721:
[  506.886932][   T27]  #0: ffffffff8d9e8348 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0
[  506.921696][   T27] 1 lock held by syz-executor/5725:
[  506.926953][   T27]  #0: ffffffff8d9e8348 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0
[  506.951561][   T27] 1 lock held by syz-executor/5729:
[  506.956849][   T27]  #0: ffffffff8d9e8348 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0
[  506.981639][   T27] 2 locks held by syz-executor/5732:
[  506.986964][   T27]  #0: ffffffff8d9e8348 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0
[  507.011606][   T27]  #1: ffffffff8c9240a8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x350/0x740
[  507.031472][   T27] 1 lock held by syz-executor/5740:
[  507.036717][   T27]  #0: ffffffff8d9e8348 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0
[  507.061600][   T27] 1 lock held by syz-executor/5745:
[  507.066835][   T27]  #0: ffffffff8d9e8348 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0
[  507.091550][   T27] 1 lock held by syz-executor/5749:
[  507.096788][   T27]  #0: ffffffff8d9e8348 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0
[  507.131632][   T27] 1 lock held by syz-executor/5753:
[  507.136978][   T27]  #0: ffffffff8d9e8348 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0
[  507.161658][   T27] 3 locks held by kworker/u4:2/5756:
[  507.167011][   T27] 1 lock held by syz-executor/5760:
[  507.181821][   T27]  #0: ffffffff8d9e8348 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0
[  507.191290][   T27] 1 lock held by syz-executor/5771:
[  507.211508][   T27]  #0: ffffffff8d9e8348 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0
[  507.220994][   T27] 
[  507.241580][   T27] =============================================
[  507.241580][   T27] 
[  507.250063][   T27] NMI backtrace for cpu 1
[  507.254404][   T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.161-syzkaller #0
[  507.262390][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  507.272536][   T27] Call Trace:
[  507.275825][   T27]  <TASK>
[  507.278940][   T27]  dump_stack_lvl+0x1e3/0x2d0
[  507.283637][   T27]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  507.289287][   T27]  ? panic+0x860/0x860
[  507.293372][   T27]  ? nmi_cpu_backtrace+0x23b/0x4a0
[  507.298512][   T27]  nmi_cpu_backtrace+0x46a/0x4a0
[  507.303461][   T27]  ? __wake_up_klogd+0xd5/0x100
[  507.308341][   T27]  ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0
[  507.314505][   T27]  ? _printk+0xd1/0x120
[  507.318673][   T27]  ? panic+0x860/0x860
[  507.322767][   T27]  ? __wake_up_klogd+0xcc/0x100
[  507.327629][   T27]  ? panic+0x860/0x860
[  507.331735][   T27]  ? __rcu_read_unlock+0x92/0x100
[  507.336771][   T27]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  507.342851][   T27]  nmi_trigger_cpumask_backtrace+0x181/0x2a0
[  507.348850][   T27]  watchdog+0xe72/0xeb0
[  507.353030][   T27]  kthread+0x3f6/0x4f0
[  507.357114][   T27]  ? hungtask_pm_notify+0x50/0x50
[  507.362148][   T27]  ? kthread_blkcg+0xd0/0xd0
[  507.366806][   T27]  ret_from_fork+0x1f/0x30
[  507.371269][   T27]  </TASK>
[  507.375350][   T27] Sending NMI from CPU 1 to CPUs 0:
[  507.380592][    C0] NMI backtrace for cpu 0
[  507.380604][    C0] CPU: 0 PID: 3718 Comm: kworker/0:13 Not tainted 5.15.161-syzkaller #0
[  507.380622][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  507.380634][    C0] Workqueue: events_power_efficient gc_worker
[  507.380657][    C0] RIP: 0010:__lock_acquire+0xeff/0x1ff0
[  507.380677][    C0] Code: eb 8c 89 e8 25 ff 1f 00 00 c1 ed 03 81 e5 00 60 00 00 09 c5 4c 89 f8 48 c1 e8 20 29 c5 89 c1 c1 c1 04 31 e9 44 01 f8 41 29 cf <89> ca c1 c2 06 44 31 fa 01 c1 29 d0 89 d6 c1 c6 08 31 c6 01 ca 29
[  507.380691][    C0] RSP: 0018:ffffc900000079e0 EFLAGS: 00000097
[  507.380705][    C0] RAX: 0000000008356a40 RBX: 000000000000005d RCX: 00000000e01bbecc
[  507.380717][    C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: dffffc0000000000
[  507.380729][    C0] RBP: 00000000ab4aeab9 R08: dffffc0000000000 R09: fffffbfff1f7f219
[  507.380742][    C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000004
[  507.380753][    C0] R13: ffff888024838ae8 R14: 1ffff1100490715c R15: 00000000d364962d
[  507.380766][    C0] FS:  0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
[  507.380782][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  507.380794][    C0] CR2: 00007f065458ed00 CR3: 00000000410c9000 CR4: 00000000003506f0
[  507.380810][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  507.380820][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  507.380831][    C0] Call Trace:
[  507.380836][    C0]  <NMI>
[  507.380843][    C0]  ? nmi_cpu_backtrace+0x39f/0x4a0
[  507.380862][    C0]  ? read_lock_is_recursive+0x10/0x10
[  507.380880][    C0]  ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0
[  507.380905][    C0]  ? nmi_cpu_backtrace_handler+0x8/0x10
[  507.380922][    C0]  ? nmi_handle+0xf7/0x370
[  507.380941][    C0]  ? __lock_acquire+0xeff/0x1ff0
[  507.380956][    C0]  ? default_do_nmi+0x62/0x150
[  507.380975][    C0]  ? exc_nmi+0xa8/0x100
[  507.380996][    C0]  ? end_repeat_nmi+0x16/0x31
[  507.381017][    C0]  ? __lock_acquire+0xeff/0x1ff0
[  507.381033][    C0]  ? __lock_acquire+0xeff/0x1ff0
[  507.381050][    C0]  ? __lock_acquire+0xeff/0x1ff0
[  507.381065][    C0]  </NMI>
[  507.381070][    C0]  <IRQ>
[  507.381082][    C0]  lock_acquire+0x1db/0x4f0
[  507.381097][    C0]  ? debug_object_activate+0x63/0x4e0
[  507.381121][    C0]  ? read_lock_is_recursive+0x10/0x10
[  507.381142][    C0]  ? read_lock_is_recursive+0x10/0x10
[  507.381159][    C0]  ? do_raw_spin_lock+0x14a/0x370
[  507.381177][    C0]  _raw_spin_lock_irqsave+0xd1/0x120
[  507.381197][    C0]  ? debug_object_activate+0x63/0x4e0
[  507.381216][    C0]  ? _raw_spin_lock+0x40/0x40
[  507.381234][    C0]  ? do_raw_spin_unlock+0x137/0x8b0
[  507.381255][    C0]  debug_object_activate+0x63/0x4e0
[  507.381274][    C0]  ? _raw_spin_lock_irqsave+0x120/0x120
[  507.381295][    C0]  enqueue_hrtimer+0x30/0x390
[  507.381314][    C0]  __hrtimer_run_queues+0x6b6/0xcf0
[  507.381338][    C0]  ? hrtimer_interrupt+0x980/0x980
[  507.381354][    C0]  ? ktime_get_update_offsets_now+0x407/0x420
[  507.381375][    C0]  hrtimer_interrupt+0x392/0x980
[  507.381402][    C0]  __sysvec_apic_timer_interrupt+0x139/0x470
[  507.381424][    C0]  sysvec_apic_timer_interrupt+0x8c/0xb0
[  507.381446][    C0]  </IRQ>
[  507.381452][    C0]  <TASK>
[  507.381458][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  507.381476][    C0] RIP: 0010:seqcount_lockdep_reader_access+0x1dc/0x220
[  507.381496][    C0] Code: f9 4d 85 ed 75 16 e8 83 57 05 f9 eb 15 e8 7c 57 05 f9 e8 17 3a a3 01 4d 85 ed 74 ea e8 6d 57 05 f9 fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 66 43 c7 44 3c 09 00 00 43 c6 44 3c 0b 00
[  507.381511][    C0] RSP: 0018:ffffc90004307a40 EFLAGS: 00000293
[  507.381527][    C0] RAX: ffffffff887b0363 RBX: 0000000000000000 RCX: ffff888024838000
[  507.381541][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  507.381552][    C0] RBP: ffffc90004307af0 R08: ffffffff887b0339 R09: fffffbfff1f7f22b
[  507.381567][    C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
[  507.381581][    C0] R13: 0000000000000200 R14: 0000000000000046 R15: 1ffff92000860f48
[  507.381596][    C0]  ? seqcount_lockdep_reader_access+0x1a9/0x220
[  507.381613][    C0]  ? seqcount_lockdep_reader_access+0x1d3/0x220
[  507.381634][    C0]  ? nf_conntrack_hash_check_insert+0x750/0x750
[  507.381657][    C0]  gc_worker+0x30f/0x14b0
[  507.381677][    C0]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  507.381696][    C0]  ? print_irqtrace_events+0x210/0x210
[  507.381713][    C0]  ? init_conntrack+0x1740/0x1740
[  507.381729][    C0]  ? do_raw_spin_unlock+0x137/0x8b0
[  507.381751][    C0]  process_one_work+0x8a1/0x10c0
[  507.381777][    C0]  ? worker_detach_from_pool+0x260/0x260
[  507.381797][    C0]  ? _raw_spin_lock_irqsave+0x120/0x120
[  507.381817][    C0]  ? kthread_data+0x4e/0xc0
[  507.381833][    C0]  ? wq_worker_running+0x97/0x170
[  507.381851][    C0]  worker_thread+0xaca/0x1280
[  507.381870][    C0]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  507.381899][    C0]  kthread+0x3f6/0x4f0
[  507.381914][    C0]  ? rcu_lock_release+0x20/0x20
[  507.381931][    C0]  ? kthread_blkcg+0xd0/0xd0
[  507.381948][    C0]  ret_from_fork+0x1f/0x30
[  507.381972][    C0]  </TASK>
[  508.531543][   T27] Kernel panic - not syncing: hung_task: blocked tasks
[  508.538447][   T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.161-syzkaller #0
[  508.546432][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  508.556490][   T27] Call Trace:
[  508.559778][   T27]  <TASK>
[  508.562711][   T27]  dump_stack_lvl+0x1e3/0x2d0
[  508.567598][   T27]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  508.573256][   T27]  ? panic+0x860/0x860
[  508.577348][   T27]  panic+0x318/0x860
[  508.581253][   T27]  ? schedule_preempt_disabled+0x20/0x20
[  508.587014][   T27]  ? nmi_trigger_cpumask_backtrace+0x221/0x2a0
[  508.593199][   T27]  ? fb_is_primary_device+0xd0/0xd0
[  508.598428][   T27]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  508.604511][   T27]  ? nmi_trigger_cpumask_backtrace+0x221/0x2a0
[  508.610683][   T27]  ? nmi_trigger_cpumask_backtrace+0x281/0x2a0
[  508.616848][   T27]  ? nmi_trigger_cpumask_backtrace+0x286/0x2a0
[  508.623014][   T27]  watchdog+0xeb0/0xeb0
[  508.627195][   T27]  kthread+0x3f6/0x4f0
[  508.631273][   T27]  ? hungtask_pm_notify+0x50/0x50
[  508.636309][   T27]  ? kthread_blkcg+0xd0/0xd0
[  508.640909][   T27]  ret_from_fork+0x1f/0x30
[  508.645348][   T27]  </TASK>
[  509.798733][   T27] Shutting down cpus with NMI
[  509.803798][   T27] Kernel Offset: disabled
[  509.808143][   T27] Rebooting in 86400 seconds..