last executing test programs:

18.478393875s ago: executing program 0 (id=387):
socket$nl_xfrm(0x10, 0x3, 0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x4084)
socket$nl_netfilter(0x10, 0x3, 0xc)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
socket$rds(0x15, 0x5, 0x0)

18.200278749s ago: executing program 1 (id=388):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
openat$ptp0(0xffffff9c, &(0x7f0000000080), 0x400, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
socket$vsock_stream(0x28, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x40000)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)

17.125746086s ago: executing program 1 (id=390):
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8)
connect$ax25(0xffffffffffffffff, 0x0, 0x0)
ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000200)={0x7, "aca9913eccda1fe0d12d9c99f0479e388c3406995aab45f8af2e8b9378423adb5c70402a7db3a9938d503536144dd0030c92a4f2877b0bdb833d219537096d7c1a21e4c7aca6605881f8a1ede5a20fef4524281c757d7590bedb3ea3bd4f25dc9e0f3aa3203820aeda2ac14935a1c791889e24476330871903d82063f10a73892c8968be358cabcfc5aa00b021a29e1e5ed3bffbbeadc0eeb416236f667eb319e6cbd40f01350a8192b46b93b63a5033745ae56c7fbd052b1c06a320244518739448d54539002353a4267bef0c9398661252e290577ee6dd07bce530978eaa290f3cd92350ece7442c280a055f6d6221e8a5576fb432399a6dd12040472d190607cb64375f2f9bd881e92b958ac80006433c6d03e834227f711dc9c0fe28e33ddbf76b1ff0298276036c608a9e499f2c017287ec6ee86b5e3acbc0f7f92d0bf9f9ac77a323bc6fa32b315aa55bc300eaa1f58e78147d9a823988a3f3189d81aa3c608474dc4fecac1df2f98d8e06810d9b5ada3d4b7d0c0519e607343f542dc08733037c4064540587deb231b62cca4993448c49b8277739950ba0ecc504819e8ecba424bdc1dcde7f319d36263b85abd266318510e01e16de9e3d4bc0107d47d38c09c30547080bea8a000cc7299009265d5a5a25873fde7c72e742d7ba9b623e00bd8442fef84f30928ff5e3fe415a296c0cd43e613296d5ea6d1e51505b51"})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0xfffffffe}, 0x80, 0x0}, 0x0)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
syz_emit_ethernet(0x86, 0x0, 0x0)

14.094791316s ago: executing program 1 (id=395):
socket$nl_xfrm(0x10, 0x3, 0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x15, 0x1, 0x70bd26, 0x25dfdbff, {0x5}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x48080}, 0x40010)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2000002}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1cb98379cbe8a848bfd58677dea8b8c4243d00000f7ff071f68e5013e2988852da00002e0009002500001a0000c589308a03f70c7af4b48419672400cd5219b4fe07424e1fae1ededf09"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x4084)
rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x3}]}}}, {0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf0}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
sendmsg$rds(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x40)

13.709619557s ago: executing program 0 (id=396):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000002000), 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40844}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c)
r5 = socket$netlink(0x10, 0x3, 0x4)
write(r5, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)
syz_open_dev$tty20(0xc, 0x4, 0x1)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f000000c2c0)=[0x0], 0x1}, 0x58)
r6 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002840)=ANY=[@ANYBLOB="40000000200025a72bbd7000f9dbdf250a0020cdff000001020001000800060000000000140002000000000000000000000000000000000108000e000602000025b5120c65d26023055ee826f0939729c44571867785f848b0a5e56929a19f67a2358d0f84c7ad207258e7dfd4a0323dd8847fdb5b74a127b68c27f2b2eaa071be52da6029df21ff5507b5755e1741168360b4ffc20ab28a65e250170769332ec54e97e6b3d8ef0d697ab1e5b2e6ebe8958f57b30ac483242bb05eb5aefae8ffa7662992bc3a1b4028"], 0x40}, 0x1, 0x0, 0x0, 0x845}, 0x4000000)

11.837901316s ago: executing program 2 (id=400):
socket(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200800, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200))
r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1})

11.656348025s ago: executing program 2 (id=402):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

11.600625968s ago: executing program 4 (id=403):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x8000000)

11.453795976s ago: executing program 4 (id=404):
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x10a600, 0x0)
openat$vicodec0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0xf0f041})

11.348382501s ago: executing program 2 (id=405):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
iopl(0x3)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff)

10.406552991s ago: executing program 2 (id=406):
socket$nl_xfrm(0x10, 0x3, 0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x4084)
socket$nl_netfilter(0x10, 0x3, 0xc)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
socket$rds(0x15, 0x5, 0x0)

10.350203474s ago: executing program 4 (id=407):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
r1 = getpgid(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='esdfs\x00', 0x300a4a2, 0x0)
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r4, 0x0, 0x0}, 0x20)
mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x200000, 0x2)
bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20)
connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20)
r5 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r5, 0x0, 0x0)
sendto$l2tp(r5, &(0x7f0000000280)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10)
recvfrom$l2tp(r5, 0x0, 0x0, 0x2062, 0x0, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'vlan1\x00'})
sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00)

10.064273129s ago: executing program 3 (id=408):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x42, 0x5)
io_setup(0x5, &(0x7f00000002c0))
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket(0x5, 0x5, 0x0)
sendmsg$nl_route_sched(r3, 0x0, 0x8c1)
sched_setscheduler(r0, 0x5, &(0x7f00000000c0)=0xc18)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@allocspi={0x208, 0x16, 0x1, 0x0, 0x0, {{{@in6=@empty, @in6=@mcast2, 0x8000, 0x0, 0x3, 0x0, 0x0, 0x80, 0xa0}, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d5, 0x33}, @in=@remote, {0x0, 0xffffffffffff0000, 0x1, 0x0, 0xffffffffffffffff, 0xffffffffffffffed, 0x4}, {0xffffffffffffffff, 0x0, 0x2, 0x7}, {0x5, 0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe55286f1921f74f6}, 0x4, 0x1a0b1}, [@algo_crypt={0x108, 0x2, {{'ecb-aes-aesni\x00'}, 0x600, "0b421bcbfc29ca5934277be888bce6845df589ee09b4e0dbb46763c47850d976b1771a19fb45a83a5c74a9e47ac351019bff00787001108053113da3e896fc960be004776e904026a4af9611b3bd4158c3ea10534ad85ed4efa36dc1e56aef5cbebd51766ed75161b63ab705f86a4e1e2198323bfcc8f9b2753349ebd4eba4559ab6da5f1e1d4b150b162ce9d2eb7c476f9dbef62c6252e567a85c5643718c53a97cbf0a2101139815e420e165d74778dfdf4c632d626b504bab626d8b82966a"}}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}]}, 0x208}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r5, 0x0, 0x7fffefff)
mremap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000001000/0x4000)=nil)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10)

8.424483496s ago: executing program 1 (id=409):
socket$nl_rdma(0x10, 0x3, 0x14)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_usbip_server_init(0x6)
bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000004080)=@base={0x8, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x4}, 0x50)

8.009568097s ago: executing program 3 (id=410):
socket$packet(0x11, 0x3, 0x300)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1a27f8ca4e3a7305", "99327bc5fac62d6a6b9b6ebbaece973f7e58c49dfd4fa152a0522422c37c70f8", "e58b9f99", "a645f9c4b6c9efe1"}, 0x38)
recvfrom(r1, 0x0, 0x0, 0x17, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1)
recvmmsg(r1, &(0x7f0000008bc0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000440)=""/79, 0x4f}], 0x1}, 0x7fffffff}], 0x2, 0x10002, 0x0)
setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10)
r2 = syz_open_dev$loop(&(0x7f0000000280), 0x80010a, 0x1cb600)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/oops_count', 0x28a003, 0x214)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000640)={r3, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0x1c, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc30900000058128b3ad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35afcff0e38f5eb010001", "32d8cc263d9e234b02000000000000004a6783cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a000000020000000000000400", "67523760fd40f78d2cfc03d81a8cad5ba139c01802c4dae4162e43ac61b7ad33", [0x4, 0x1]}})
ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x400)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
socket$inet_mptcp(0x2, 0x1, 0x106)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default usez 00000000000000004093\x00'], 0x2a, 0x0)
syz_open_dev$sndmidi(&(0x7f00000001c0), 0x400, 0x200)
io_setup(0x3ff, &(0x7f0000000500))

5.801076794s ago: executing program 0 (id=411):
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2169802, 0x0, 0x0, 0x0, &(0x7f00000003c0))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4, "e3c00fb6"}, &(0x7f00000000c0)=0x28)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0)

5.747892307s ago: executing program 4 (id=412):
socket(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200800, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200))
r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1})

5.720489728s ago: executing program 3 (id=413):
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045731, &(0x7f0000000300))

5.568272386s ago: executing program 3 (id=414):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_tcp(0x2, 0x1, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0)

5.49933776s ago: executing program 4 (id=415):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

4.577701698s ago: executing program 0 (id=416):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

3.377367682s ago: executing program 2 (id=417):
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00)
sendmsg$tipc(r1, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, 0x0, 0x0, 0x0, 0x158}, 0x40)
syz_io_uring_setup(0x88f, &(0x7f0000000340)={0x0, 0x3cfa, 0x400, 0x3, 0x3b9}, 0x0, 0x0, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r4, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r6 = accept(r3, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="76878333053815a364361705a8f63e992cf5c69e206fc60b7a3e6d0392d653806c8b303ad1840096c570e4bacde87e20a3f0e7cb318d42b1efae6c1443a2c8686a673bcb858030603b4facfa14bd80fb5ac71a2759fb25e0511ea5bb8b72bfb2055b24", @ANYRES16=r2, @ANYRES8=r2, @ANYRES64=r6, @ANYRES32=r5, @ANYRESHEX=r3], 0xfffffdef}, 0x1, 0x0, 0x0, 0x8000080}, 0x1)
recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0)

3.319070725s ago: executing program 0 (id=418):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c000180090001006d617371000000000c000280080002"], 0xbc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r1 = openat$dlm_control(0xffffff9c, &(0x7f0000000140), 0x410081, 0x0)
ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r1, 0x4002f516, &(0x7f0000000180)={0x52, 0x1})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
userfaultfd(0x80001)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x22020400)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0)

3.303151196s ago: executing program 3 (id=419):
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0)
syz_io_uring_setup(0xb9a, 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)=0xf7e)
read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000)
write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008800)
openat$kvm(0xffffffffffffff9c, 0x0, 0x28100, 0x0)

3.096208567s ago: executing program 4 (id=420):
syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2010880, &(0x7f0000007400)=ANY=[], 0x1, 0x6174, &(0x7f0000001280)="$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")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40))
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))

1.994954705s ago: executing program 0 (id=421):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000002000), 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40844}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c)
r5 = socket$netlink(0x10, 0x3, 0x4)
write(r5, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)
syz_open_dev$tty20(0xc, 0x4, 0x1)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f000000c2c0)=[0x0], 0x1}, 0x58)
r6 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002840)=ANY=[@ANYBLOB="40000000200025a72bbd7000f9dbdf250a0020cdff000001020001000800060000000000140002000000000000000000000000000000000108000e000602000025b5120c65d26023055ee826f0939729c44571867785f848b0a5e56929a19f67a2358d0f84c7ad207258e7dfd4a0323dd8847fdb5b74a127b68c27f2b2eaa071be52da6029df21ff5507b5755e1741168360b4ffc20ab28a65e250170769332ec54e97e6b3d8ef0d697ab1e5b2e6ebe8958f57b30ac483242bb05eb5aefae8ffa7662992bc3a1b4028"], 0x40}, 0x1, 0x0, 0x0, 0x845}, 0x4000000)

1.741183388s ago: executing program 1 (id=422):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
r1 = getpgid(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='esdfs\x00', 0x300a4a2, 0x0)
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r4, 0x0, 0x0}, 0x20)
mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x200000, 0x2)
bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20)
connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20)
r5 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r5, &(0x7f00000000c0), 0x10)
sendto$l2tp(r5, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10)
recvfrom$l2tp(r5, 0x0, 0x0, 0x2062, 0x0, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'vlan1\x00'})
sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00)

1.504189491s ago: executing program 2 (id=423):
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mount(&(0x7f0000000140)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ntfs3\x00', 0x2208004, 0x0)
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socket$rxrpc(0x21, 0x2, 0xa)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0x87, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000340)={0x1c, r4, 0x11, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0x0, 0x99, {0xd, 0x61}}}}}, 0xffffffffffffff73}, 0x1, 0x0, 0x0, 0x80c1}, 0x40800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x0, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2442, 0x20)
fcntl$setlease(r6, 0x400, 0x0)
rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file1\x00')
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xb8}}, 0x20000080)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendto$inet6(r7, &(0x7f0000000240)="c8", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=@newtaction={0x1c0, 0x30, 0x8, 0x0, 0x0, {}, [{0x1ac, 0x1, [@m_simple={0x1a8, 0x1, 0x0, 0x0, {{0xb}, {0x18, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'nat\x00'}, @TCA_DEF_DATA={0xa, 0x3, '.#-@/\x00'}]}, {0x166, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
mount(&(0x7f0000000180)=@sr0, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000200)='overlay\x00', 0x4841, &(0x7f0000000300)='nat\x00')
r8 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x6, 0x0, &(0x7f0000000100)=[r8, r8, r8]}, 0x3)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

156.564522ms ago: executing program 1 (id=424):
socket$packet(0x11, 0x3, 0x300)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1a27f8ca4e3a7305", "99327bc5fac62d6a6b9b6ebbaece973f7e58c49dfd4fa152a0522422c37c70f8", "e58b9f99", "a645f9c4b6c9efe1"}, 0x38)
recvfrom(r1, 0x0, 0x0, 0x17, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1)
recvmmsg(r1, &(0x7f0000008bc0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000440)=""/79, 0x4f}], 0x1}, 0x7fffffff}], 0x2, 0x10002, 0x0)
setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10)
r2 = syz_open_dev$loop(&(0x7f0000000280), 0x80010a, 0x1cb600)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/oops_count', 0x28a003, 0x214)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000640)={r3, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0x1c, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc30900000058128b3ad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35afcff0e38f5eb010001", "32d8cc263d9e234b02000000000000004a6783cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a000000020000000000000400", "67523760fd40f78d2cfc03d81a8cad5ba139c01802c4dae4162e43ac61b7ad33", [0x4, 0x1]}})
ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x400)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
socket$inet_mptcp(0x2, 0x1, 0x106)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default usez 00000000000000004093\x00'], 0x2a, 0x0)
syz_open_dev$sndmidi(&(0x7f00000001c0), 0x400, 0x200)
io_setup(0x3ff, &(0x7f0000000500))

0s ago: executing program 3 (id=425):
socket(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200800, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200))
r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.111' (ED25519) to the list of known hosts.
[   70.562330][ T4254] cgroup: Unknown subsys name 'net'
[   70.664391][ T4254] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   71.538905][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[   71.545498][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[   72.204332][ T4254] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   73.683249][ T4271] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   73.697086][ T4281] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   73.705451][ T4281] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   73.713554][ T4281] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   73.721599][ T4281] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   73.729691][ T4281] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   73.738752][ T4281] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   73.741267][ T4282] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   73.747080][ T4281] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   73.755000][ T4282] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   73.762620][ T4281] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   73.768638][ T4282] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   73.776821][ T4281] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   73.783551][ T4283] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   73.789890][ T4281] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   73.803439][ T4283] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   73.803834][ T4281] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   73.810993][ T4283] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   73.818418][ T4281] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   73.827382][ T4283] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   73.832772][ T4281] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   73.846836][ T4283] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   73.847040][ T4281] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   73.854093][ T4283] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   73.861512][ T4281] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   73.870080][ T4283] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   73.875535][ T4281] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   73.883139][ T4283] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   73.939462][ T4277] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   73.952799][ T4283] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   74.363552][ T4279] chnl_net:caif_netlink_parms(): no params data found
[   74.387364][ T4272] chnl_net:caif_netlink_parms(): no params data found
[   74.441828][ T4268] chnl_net:caif_netlink_parms(): no params data found
[   74.585979][ T4275] chnl_net:caif_netlink_parms(): no params data found
[   74.598517][ T4267] chnl_net:caif_netlink_parms(): no params data found
[   74.619896][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.627620][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.635523][ T4279] device bridge_slave_0 entered promiscuous mode
[   74.644083][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.651294][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.660331][ T4272] device bridge_slave_0 entered promiscuous mode
[   74.671646][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.679005][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.687481][ T4272] device bridge_slave_1 entered promiscuous mode
[   74.705891][ T4268] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.713523][ T4268] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.721546][ T4268] device bridge_slave_0 entered promiscuous mode
[   74.729403][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.739772][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.747806][ T4279] device bridge_slave_1 entered promiscuous mode
[   74.779184][ T4268] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.789549][ T4268] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.797452][ T4268] device bridge_slave_1 entered promiscuous mode
[   74.836980][ T4268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   74.862665][ T4268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   74.873818][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   74.893746][ T4279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   74.913069][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   74.941164][ T4279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   74.966515][ T4268] team0: Port device team_slave_0 added
[   75.002143][ T4268] team0: Port device team_slave_1 added
[   75.008414][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.015742][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.024105][ T4275] device bridge_slave_0 entered promiscuous mode
[   75.048011][ T4272] team0: Port device team_slave_0 added
[   75.063311][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.070678][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.079012][ T4275] device bridge_slave_1 entered promiscuous mode
[   75.095058][ T4267] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.103046][ T4267] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.114095][ T4267] device bridge_slave_0 entered promiscuous mode
[   75.123256][ T4279] team0: Port device team_slave_0 added
[   75.134145][ T4272] team0: Port device team_slave_1 added
[   75.153407][ T4267] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.160685][ T4267] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.171839][ T4267] device bridge_slave_1 entered promiscuous mode
[   75.180063][ T4279] team0: Port device team_slave_1 added
[   75.202251][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_0
[   75.210642][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.237246][ T4268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   75.251633][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   75.261501][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_1
[   75.272748][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.299670][ T4268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   75.355046][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   75.367286][ T4267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   75.378117][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_0
[   75.385189][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.411956][ T4279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   75.423785][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0
[   75.431031][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.458191][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   75.491154][ T4267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   75.503797][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_1
[   75.511271][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.545790][ T4279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   75.558496][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1
[   75.565788][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.591954][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   75.607247][ T4268] device hsr_slave_0 entered promiscuous mode
[   75.614259][ T4268] device hsr_slave_1 entered promiscuous mode
[   75.654836][ T4275] team0: Port device team_slave_0 added
[   75.673121][ T4279] device hsr_slave_0 entered promiscuous mode
[   75.680140][ T4279] device hsr_slave_1 entered promiscuous mode
[   75.687244][ T4279] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   75.695256][ T4279] Cannot create hsr debugfs directory
[   75.712233][ T4275] team0: Port device team_slave_1 added
[   75.739867][ T4267] team0: Port device team_slave_0 added
[   75.757046][ T4267] team0: Port device team_slave_1 added
[   75.782975][ T4272] device hsr_slave_0 entered promiscuous mode
[   75.792794][ T4272] device hsr_slave_1 entered promiscuous mode
[   75.799940][ T4272] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   75.810814][ T4272] Cannot create hsr debugfs directory
[   75.834489][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0
[   75.842099][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.868495][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   75.911398][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1
[   75.919194][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.937120][ T4284] Bluetooth: hci4: command 0x0409 tx timeout
[   75.950780][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   75.964446][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_0
[   75.972207][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.998923][ T4267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   76.016861][ T4282] Bluetooth: hci1: command 0x0409 tx timeout
[   76.016892][ T4284] Bluetooth: hci0: command 0x0409 tx timeout
[   76.017042][ T4284] Bluetooth: hci2: command 0x0409 tx timeout
[   76.023113][ T4282] Bluetooth: hci3: command 0x0409 tx timeout
[   76.051507][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_1
[   76.059059][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.085341][ T4267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   76.127809][ T4275] device hsr_slave_0 entered promiscuous mode
[   76.134933][ T4275] device hsr_slave_1 entered promiscuous mode
[   76.141902][ T4275] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   76.149638][ T4275] Cannot create hsr debugfs directory
[   76.243824][ T4267] device hsr_slave_0 entered promiscuous mode
[   76.251481][ T4267] device hsr_slave_1 entered promiscuous mode
[   76.258298][ T4267] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   76.266065][ T4267] Cannot create hsr debugfs directory
[   76.525028][ T4268] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   76.542198][ T4268] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   76.552810][ T4268] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   76.565381][ T4268] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   76.603790][ T4279] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   76.622808][ T4279] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   76.633497][ T4279] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   76.651109][ T4279] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   76.704082][ T4275] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   76.741548][ T4275] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   76.761876][ T4275] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   76.778199][ T4275] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   76.827427][ T4272] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   76.858072][ T4272] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   76.893502][ T4268] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.900515][ T4272] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   76.910422][ T4272] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   76.927347][ T4279] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.973875][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   76.987352][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   77.003035][ T4268] 8021q: adding VLAN 0 to HW filter on device team0
[   77.012441][ T4267] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   77.025378][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   77.033762][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   77.059404][ T4267] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   77.072606][ T4279] 8021q: adding VLAN 0 to HW filter on device team0
[   77.081119][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   77.090348][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   77.100600][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.108011][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.120572][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   77.131170][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   77.143779][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.151175][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.160983][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   77.170236][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   77.187356][ T4267] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   77.201953][ T4267] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   77.232231][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   77.243534][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   77.254042][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   77.262900][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.270068][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.279144][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   77.319700][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0
[   77.332295][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   77.344175][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   77.353319][   T47] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.360639][   T47] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.369998][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   77.381073][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   77.390007][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   77.428018][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   77.439156][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   77.448410][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   77.462798][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   77.471521][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   77.480952][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   77.490507][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   77.499435][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   77.511764][ T4275] 8021q: adding VLAN 0 to HW filter on device team0
[   77.534792][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   77.544029][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   77.553508][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   77.564026][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   77.575025][   T56] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.582212][   T56] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.590950][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   77.602758][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   77.611620][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   77.620703][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   77.634509][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   77.666645][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   77.682321][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   77.693435][   T56] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.700639][   T56] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.723009][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   77.738766][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   77.784981][ T4279] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   77.798125][ T4279] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   77.817856][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   77.829720][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   77.839603][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   77.849338][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   77.858672][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   77.867933][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   77.877182][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   77.885693][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   77.894579][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   77.903604][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   77.913514][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   77.927248][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   77.958846][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   77.979481][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   78.016714][ T4282] Bluetooth: hci4: command 0x041b tx timeout
[   78.027534][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   78.056558][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   78.070251][ T4267] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.096556][ T4282] Bluetooth: hci3: command 0x041b tx timeout
[   78.096617][ T4277] Bluetooth: hci2: command 0x041b tx timeout
[   78.102719][ T4282] Bluetooth: hci1: command 0x041b tx timeout
[   78.109948][ T4277] Bluetooth: hci0: command 0x041b tx timeout
[   78.136036][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   78.185466][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.202354][ T4267] 8021q: adding VLAN 0 to HW filter on device team0
[   78.230674][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   78.247020][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   78.287164][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   78.297103][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   78.326828][   T47] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.334041][   T47] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.355956][ T4272] 8021q: adding VLAN 0 to HW filter on device team0
[   78.377403][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   78.385717][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   78.404088][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   78.412918][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   78.429549][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   78.439803][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   78.452474][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   78.461794][   T47] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.468977][   T47] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.496044][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   78.510807][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   78.522192][   T47] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.529694][   T47] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.539207][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   78.548864][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   78.558044][   T47] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.565308][   T47] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.573737][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   78.584470][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   78.593927][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   78.603805][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   78.615153][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   78.629218][ T4268] 8021q: adding VLAN 0 to HW filter on device batadv0
[   78.668821][ T4279] 8021q: adding VLAN 0 to HW filter on device batadv0
[   78.699226][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   78.718370][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   78.733707][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   78.744049][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   78.759197][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   78.768837][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   78.778312][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   78.788002][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   78.795665][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   78.804756][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   78.814359][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   78.823795][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   78.833738][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   78.844301][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   78.853726][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   78.862344][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   78.910661][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   78.921966][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   78.930369][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   78.939058][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   78.952898][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   78.963259][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   78.973033][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   79.002403][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   79.020242][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   79.030091][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   79.070398][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.095926][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   79.117843][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   79.163082][ T4279] device veth0_vlan entered promiscuous mode
[   79.179451][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   79.197884][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   79.239017][ T4279] device veth1_vlan entered promiscuous mode
[   79.291241][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   79.318259][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   79.327491][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   79.363591][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   79.401435][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   79.417835][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   79.479778][ T4275] device veth0_vlan entered promiscuous mode
[   79.495249][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   79.504877][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   79.527148][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   79.537664][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   79.565740][ T4279] device veth0_macvtap entered promiscuous mode
[   79.593830][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   79.614142][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   79.644508][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   79.667733][ T4275] device veth1_vlan entered promiscuous mode
[   79.681319][ T4268] device veth0_vlan entered promiscuous mode
[   79.720572][ T4279] device veth1_macvtap entered promiscuous mode
[   79.728094][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   79.745085][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   79.753684][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   79.762938][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   79.771090][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   79.804892][ T4268] device veth1_vlan entered promiscuous mode
[   79.821410][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0
[   79.833732][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   79.843524][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   79.852741][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   79.865911][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   79.874544][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   79.883659][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   79.891725][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   79.918746][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1
[   79.933432][ T4279] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.943979][ T4279] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.953318][ T4279] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.963774][ T4279] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.002860][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   80.013994][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   80.024687][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   80.045144][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.060827][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.073818][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   80.089766][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   80.098003][ T4277] Bluetooth: hci4: command 0x040f tx timeout
[   80.121247][ T4268] device veth0_macvtap entered promiscuous mode
[   80.140622][ T4268] device veth1_macvtap entered promiscuous mode
[   80.162901][ T4275] device veth0_macvtap entered promiscuous mode
[   80.176637][ T4282] Bluetooth: hci1: command 0x040f tx timeout
[   80.176885][ T4277] Bluetooth: hci2: command 0x040f tx timeout
[   80.182694][ T4282] Bluetooth: hci3: command 0x040f tx timeout
[   80.189089][ T4277] Bluetooth: hci0: command 0x040f tx timeout
[   80.202001][ T4275] device veth1_macvtap entered promiscuous mode
[   80.211529][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   80.223541][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   80.232038][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   80.241374][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   80.250356][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   80.290742][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   80.299811][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   80.309607][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   80.331999][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.349111][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.362559][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.373218][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.384375][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.398000][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.422631][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   80.432359][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   80.441508][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   80.450974][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   80.468701][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.480247][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.491085][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.505851][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.518505][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.547317][ T4268] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.558578][ T4268] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.568995][ T4268] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.579102][ T4268] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.591319][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   80.601023][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   80.610846][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   80.620471][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   80.631793][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.645632][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.657938][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.668584][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.680195][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.711883][ T4342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.723146][ T4342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.734931][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   80.753679][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   80.763240][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   80.782590][ T4267] device veth0_vlan entered promiscuous mode
[   80.792097][ T4275] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.802066][ T4275] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.811779][ T4275] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.821556][ T4275] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.852018][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   80.864912][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   80.874814][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   80.884157][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   80.903424][ T4267] device veth1_vlan entered promiscuous mode
[   80.911991][ T4272] device veth0_vlan entered promiscuous mode
[   80.941336][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   80.952073][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   80.960871][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   80.972185][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   80.981443][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   81.002187][ T4272] device veth1_vlan entered promiscuous mode
[   81.036848][   T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.044748][   T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.063234][ T4342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.077005][ T4342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.096829][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   81.105931][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   81.127652][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   81.143360][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   81.180084][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   81.190673][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   81.210113][ T4267] device veth0_macvtap entered promiscuous mode
[   81.247031][ T4342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.254932][ T4342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.276957][ T4267] device veth1_macvtap entered promiscuous mode
[   81.292848][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   81.331965][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   81.342338][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   81.351450][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   81.372743][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.393705][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.438755][ T4272] device veth0_macvtap entered promiscuous mode
[   81.448791][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   81.458575][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   81.468458][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   81.494737][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   81.540721][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.571408][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   81.582529][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.592985][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   81.604216][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.618130][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.633395][ T4272] device veth1_macvtap entered promiscuous mode
[   81.642547][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   81.654402][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   81.663549][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   81.683322][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   81.720168][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   81.745089][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.762486][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   81.773455][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.806369][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   81.830002][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.864795][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.904020][ T4342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.910158][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   81.952957][ T4342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.958564][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.990923][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.011924][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.032540][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.056343][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.076202][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.107130][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.127923][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.135549][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   82.154411][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   82.176317][ T4277] Bluetooth: hci4: command 0x0419 tx timeout
[   82.191974][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   82.213641][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   82.241971][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   82.261044][ T4282] Bluetooth: hci0: command 0x0419 tx timeout
[   82.261070][ T4277] Bluetooth: hci3: command 0x0419 tx timeout
[   82.267468][ T4282] Bluetooth: hci2: command 0x0419 tx timeout
[   82.273495][ T4284] Bluetooth: hci1: command 0x0419 tx timeout
[   82.312615][ T4267] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.334952][ T4267] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.346693][ T4267] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.360956][ T4267] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.441451][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.469952][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.482935][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.501731][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.514039][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.531214][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.542303][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.559868][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.573153][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.597934][ T4366] netlink: 'syz.2.6': attribute type 1 has an invalid length.
[   82.721597][ T4369] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6'.
[   82.774635][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   82.784423][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   82.797938][ T4272] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.807252][ T4272] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.818544][ T4272] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.833407][ T4272] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.029310][   T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.048995][   T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.161105][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   83.207657][ T4342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.216612][ T4342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.234020][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   83.319176][ T4342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.378815][ T4342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.468469][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   83.530908][ T4329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.549815][ T4329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.589993][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   84.022851][ T4387] sg_write: data in/out 161/120 bytes for SCSI command 0x0-- guessing data in;
[   84.022851][ T4387]    program syz.0.1 not setting count and/or reply_len properly
[   84.089442][ T4391] raw_sendmsg: syz.1.2 forgot to set AF_INET. Fix it!
[   84.126248][ T4351] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   84.338835][ T4351] usb 5-1: Using ep0 maxpacket: 8
[   84.366026][ T4351] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[   84.389495][ T4392] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   84.457752][ T4351] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   84.492926][ T4351] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   84.526299][ T4351] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   84.545572][ T4351] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   84.626174][ T4351] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   84.687114][ T4351] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.006303][ T4398] loop4: detected capacity change from 0 to 7
[   85.022420][    C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   85.032412][    C0] Buffer I/O error on dev loop4, logical block 0, async page read
[   85.046133][    T0] NOHZ tick-stop error: local softirq work is pending, handler #11a!!!
[   85.066124][    T0] NOHZ tick-stop error: local softirq work is pending, handler #19a!!!
[   85.086127][    T0] NOHZ tick-stop error: local softirq work is pending, handler #19a!!!
[   85.106131][    T0] NOHZ tick-stop error: local softirq work is pending, handler #19a!!!
[   85.256115][    T0] NOHZ tick-stop error: local softirq work is pending, handler #19a!!!
[   85.287107][ T4402] trusted_key: encrypted_key: master key parameter 'usez' is invalid
[   85.406125][    T0] NOHZ tick-stop error: local softirq work is pending, handler #19a!!!
[   85.436121][    T0] NOHZ tick-stop error: local softirq work is pending, handler #19a!!!
[   85.566124][    T0] NOHZ tick-stop error: local softirq work is pending, handler #19a!!!
[   85.596122][    T0] NOHZ tick-stop error: local softirq work is pending, handler #19a!!!
[   85.626128][    T0] NOHZ tick-stop error: local softirq work is pending, handler #19a!!!
[   86.459217][    C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   86.468515][    C0] Buffer I/O error on dev loop4, logical block 0, async page read
[   86.479963][ T4351] usb 5-1: usb_control_msg returned -32
[   86.485738][ T4351] usbtmc 5-1:16.0: can't read capabilities
[   86.629022][    C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   86.638438][    C0] Buffer I/O error on dev loop4, logical block 0, async page read
[   86.690229][    C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   86.699621][    C0] Buffer I/O error on dev loop4, logical block 0, async page read
[   86.755594][    C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   86.765054][    C0] Buffer I/O error on dev loop4, logical block 0, async page read
[   86.780232][    C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   86.789486][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[   86.797735][ T4398] ldm_validate_partition_table(): Disk read failed.
[   86.912945][   T14] cfg80211: failed to load regulatory.db
[   87.023676][    C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   87.032988][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[   87.156580][    C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   87.166046][    C0] Buffer I/O error on dev loop4, logical block 0, async page read
[   87.217770][    C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   87.227280][    C0] Buffer I/O error on dev loop4, logical block 0, async page read
[   87.242936][    C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   87.252364][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[   87.260579][ T4398] Dev loop4: unable to read RDB block 0
[   87.276260][ T4398]  loop4: unable to read partition table
[   87.282251][ T4398] loop4: partition table beyond EOD, truncated
[   87.293145][ T4398] loop_reread_partitions: partition scan of loop4 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=Ã	) failed (rc=-5)
[   87.367417][ T4406] loop7: detected capacity change from 0 to 16384
[   87.571753][ T4311] usb 5-1: USB disconnect, device number 2
[   87.646066][ T4408] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11'.
[   87.765818][ T4407] loop7: detected capacity change from 16384 to 0
[   87.893337][ T4408] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11'.
[   87.976502][ T4416] 9pnet_virtio: no channels available for device syz
[   88.290270][ T4422] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[   88.922071][ T4428] device syzkaller0 entered promiscuous mode
[   91.196266][ T4445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19'.
[   91.205202][ T4445] netlink: 24 bytes leftover after parsing attributes in process `syz.2.19'.
[   91.222553][ T4445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19'.
[   91.232008][ T4445] netlink: 24 bytes leftover after parsing attributes in process `syz.2.19'.
[   91.244679][ T4445] Zero length message leads to an empty skb
[   91.517129][ T4451] netlink: 14 bytes leftover after parsing attributes in process `syz.0.21'.
[   92.204810][ T4463] 9pnet_virtio: no channels available for device syz
[   92.458593][ T4469] capability: warning: `syz.0.27' uses 32-bit capabilities (legacy support in use)
[   92.543463][ T4471] device syzkaller0 entered promiscuous mode
[   92.947712][ T4484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.31'.
[   92.956646][ T4484] netlink: 24 bytes leftover after parsing attributes in process `syz.2.31'.
[   93.134372][ T4486] netlink: 28 bytes leftover after parsing attributes in process `syz.4.33'.
[   93.997613][ T4484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.31'.
[   94.007242][ T4484] netlink: 24 bytes leftover after parsing attributes in process `syz.2.31'.
[   94.552558][ T4503] device vlan2 entered promiscuous mode
[   94.616276][ T4351] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   94.667793][ T4503] netlink: 4 bytes leftover after parsing attributes in process `syz.4.37'.
[   94.818509][ T4351] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   94.835924][ T4351] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[   94.847865][ T4351] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   94.857227][ T4351] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.876605][ T4497] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   95.295784][ T4514] device syzkaller0 entered promiscuous mode
[   95.418369][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880788a3c00: rx timeout, send abort
[   95.428439][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880788a3c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   98.858481][ T4529] sched: RT throttling activated
[   99.746753][ T4351] usb 4-1: USB disconnect, device number 2
[  100.200894][ T4541] netlink: 28 bytes leftover after parsing attributes in process `syz.0.47'.
[  103.847342][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  103.855003][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  103.946657][ T4567] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  104.329067][ T4574] device syzkaller0 entered promiscuous mode
[  108.294362][    C1] vcan0: j1939_tp_rxtimer: 0xffff88807bd1c800: rx timeout, send abort
[  108.302863][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807bd1c800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  109.611327][ T4558] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.619906][ T4558] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.296528][ T4558] device bridge_slave_0 left promiscuous mode
[  111.303257][ T4558] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.323742][ T4558] device bridge_slave_1 left promiscuous mode
[  111.333823][ T4558] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.355193][ T4558] bond0: (slave bond_slave_0): Releasing backup interface
[  111.426052][ T4558] bond0: (slave bond_slave_1): Releasing backup interface
[  111.469945][ T4558] team0: Port device team_slave_0 removed
[  111.506763][ T4558] team0: Port device team_slave_1 removed
[  111.525820][ T4558] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  111.543218][ T4558] batman_adv: batadv0: Removing interface: batadv_slave_0
[  111.568041][ T4558] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  111.591887][ T4558] batman_adv: batadv0: Removing interface: batadv_slave_1
[  111.955896][ T4558] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.964984][ T4558] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.978618][ T4558] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.988870][ T4558] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  112.139807][ T4605] netlink: 28 bytes leftover after parsing attributes in process `syz.3.61'.
[  112.461259][ T4619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.63'.
[  112.471110][ T4619] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled
[  113.229650][ T4648] netlink: 209840 bytes leftover after parsing attributes in process `syz.0.73'.
[  113.846193][    T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  114.046174][    T7] usb 1-1: Using ep0 maxpacket: 32
[  114.053650][    T7] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  114.083690][    T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.131993][    T7] usb 1-1: config 0 descriptor??
[  114.161873][    T7] as10x_usb: device has been detected
[  114.187231][    T7] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  114.298316][    T7] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  114.364735][    T7] as10x_usb: error during firmware upload part1
[  114.392084][    T7] Registered device nBox DVB-T Dongle
[  114.501154][    C1] vcan0: j1939_tp_rxtimer: 0xffff88802e220400: rx timeout, send abort
[  114.515235][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802e220400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  114.610192][ T4256] usb 1-1: USB disconnect, device number 2
[  114.679844][ T4256] Unregistered device nBox DVB-T Dongle
[  114.695721][ T4256] as10x_usb: device has been disconnected
[  114.972173][ T4664] overlayfs: unrecognized mount option "volatile:mask=^MAY_EXEC" or missing value
[  116.830659][ T4673] syz.3.78 (4673) used greatest stack depth: 17520 bytes left
[  116.851229][ T4679] netlink: 'syz.0.81': attribute type 1 has an invalid length.
[  119.012076][ T4376] libceph: connect (1)[c::]:6789 error -101
[  119.020733][ T4376] libceph: mon0 (1)[c::]:6789 connect error
[  119.034200][ T4685] netlink: 14 bytes leftover after parsing attributes in process `syz.0.81'.
[  119.052272][ T4698] 8021q: adding VLAN 0 to HW filter on device batadv1
[  119.916357][ T4701] Bluetooth: MGMT ver 1.22
[  120.930304][ T4612] libceph: connect (1)[c::]:6789 error -101
[  120.941772][ T4612] libceph: mon0 (1)[c::]:6789 connect error
[  121.929834][ T4612] libceph: connect (1)[c::]:6789 error -101
[  121.935933][ T4612] libceph: mon0 (1)[c::]:6789 connect error
[  121.952878][ T4695] netlink: 48 bytes leftover after parsing attributes in process `syz.3.85'.
[  121.962578][ T4695] netlink: 48 bytes leftover after parsing attributes in process `syz.3.85'.
[  122.130869][ T4376] libceph: connect (1)[c::]:6789 error -101
[  122.146263][ T4376] libceph: mon0 (1)[c::]:6789 connect error
[  122.152942][ T4689] ceph: No mds server is up or the cluster is laggy
[  122.369103][ T4704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.86'.
[  122.473195][ T4712] vivid-001: disconnect
[  122.496826][ T4707] vivid-001: reconnect
[  123.009278][ T4720] kvm [4716]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffff
[  123.097087][ T4612] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  123.302886][ T4612] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  123.325154][ T4612] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  123.400885][ T4612] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  123.432214][ T4612] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.492948][ T4717] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  125.236442][ T4256] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[  125.428510][ T4256] usb 2-1: config index 0 descriptor too short (expected 28277, got 36)
[  125.451625][ T4256] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  125.515305][ T4256] usb 2-1: config 0 has no interfaces?
[  125.523921][ T4256] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  125.544533][ T4256] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.583949][ T4256] usb 2-1: config 0 descriptor??
[  125.793690][ T4256] usb 3-1: USB disconnect, device number 2
[  125.980354][ T4745] netlink: 48 bytes leftover after parsing attributes in process `syz.4.97'.
[  125.989996][ T4745] netlink: 48 bytes leftover after parsing attributes in process `syz.4.97'.
[  126.086411][ T4747] netlink: 'syz.2.98': attribute type 1 has an invalid length.
[  126.159129][ T4747] bridge2: port 1(veth3) entered blocking state
[  126.177572][ T4747] bridge2: port 1(veth3) entered disabled state
[  126.194320][ T4747] device veth3 entered promiscuous mode
[  126.221950][ T4750] netlink: 14 bytes leftover after parsing attributes in process `syz.2.98'.
[  126.241426][ T4749] netlink: 28 bytes leftover after parsing attributes in process `syz.4.99'.
[  126.270567][ T4749] netlink: 28 bytes leftover after parsing attributes in process `syz.4.99'.
[  126.705640][ T4758] vivid-004: disconnect
[  126.713677][ T4756] vivid-004: reconnect
[  127.121060][ T4764] capability: warning: `syz.4.104' uses deprecated v2 capabilities in a way that may be insecure
[  127.135055][ T4764] tmpfs: Unknown parameter 'grpquota'
[  128.221702][ T4612] usb 2-1: USB disconnect, device number 2
[  128.866494][ T4783] netlink: 48 bytes leftover after parsing attributes in process `syz.3.109'.
[  128.877290][ T4783] netlink: 48 bytes leftover after parsing attributes in process `syz.3.109'.
[  129.708178][ T4785] netlink: 28 bytes leftover after parsing attributes in process `syz.1.111'.
[  129.947359][ T4785] netlink: 28 bytes leftover after parsing attributes in process `syz.1.111'.
[  130.128709][ T4791] vivid-002: disconnect
[  130.145080][ T4786] vivid-002: reconnect
[  132.080265][ T4805] 9pnet_virtio: no channels available for device syz
[  132.586284][ T4256] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  132.776417][ T4256] usb 3-1: Using ep0 maxpacket: 16
[  132.788105][ T4256] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  132.878229][ T4256] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  132.911822][ T4256] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.930843][ T4256] usb 3-1: Product: syz
[  132.941193][ T4256] usb 3-1: Manufacturer: syz
[  132.951347][ T4256] usb 3-1: SerialNumber: syz
[  132.989280][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  132.995658][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  133.015373][ T4256] usb 3-1: config 0 descriptor??
[  133.050690][ T4256] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  133.068298][ T4256] em28xx 3-1:0.0: DVB interface 0 found: bulk
[  133.336314][ T4612] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  133.547964][ T4612] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  133.567693][ T4820] netlink: 48 bytes leftover after parsing attributes in process `syz.1.122'.
[  133.577802][ T4820] netlink: 48 bytes leftover after parsing attributes in process `syz.1.122'.
[  133.606267][ T4612] usb 1-1: config 0 has no interfaces?
[  133.621796][ T4612] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  133.641084][ T4256] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  133.665643][ T4612] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.729467][ T4612] usb 1-1: config 0 descriptor??
[  133.996162][ T4612] usb 1-1: USB disconnect, device number 3
[  134.070090][ T4256] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  134.079532][ T4826] netlink: 28 bytes leftover after parsing attributes in process `syz.3.125'.
[  134.096519][ T4256] em28xx 3-1:0.0: board has no eeprom
[  134.099130][ T4826] netlink: 28 bytes leftover after parsing attributes in process `syz.3.125'.
[  134.246796][ T4256] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  134.274352][ T4256] em28xx 3-1:0.0: dvb set to bulk mode.
[  134.480555][ T4351] em28xx 3-1:0.0: Binding DVB extension
[  134.503550][ T4256] usb 3-1: USB disconnect, device number 3
[  134.679555][ T4256] em28xx 3-1:0.0: Disconnecting em28xx
[  135.170219][ T4835] netlink: 'syz.2.128': attribute type 1 has an invalid length.
[  135.300495][ T4351] em28xx 3-1:0.0: Registering input extension
[  135.374750][ T4256] em28xx 3-1:0.0: Closing input extension
[  135.425795][ T4835] 8021q: adding VLAN 0 to HW filter on device bond1
[  135.445927][ T4840] netlink: 14 bytes leftover after parsing attributes in process `syz.2.128'.
[  135.555590][ T4256] em28xx 3-1:0.0: Freeing device
[  135.602241][ T4841] 9pnet_virtio: no channels available for device syz
[  136.312418][ T4855] netlink: 48 bytes leftover after parsing attributes in process `syz.4.133'.
[  136.322280][ T4855] netlink: 48 bytes leftover after parsing attributes in process `syz.4.133'.
[  136.506739][ T4857] 9pnet_virtio: no channels available for device syz
[  137.395166][ T4866] netlink: 28 bytes leftover after parsing attributes in process `syz.0.137'.
[  137.454960][ T4866] netlink: 28 bytes leftover after parsing attributes in process `syz.0.137'.
[  139.252193][ T4877] netlink: 'syz.2.140': attribute type 1 has an invalid length.
[  139.278936][ T4877] 8021q: adding VLAN 0 to HW filter on device bond2
[  139.303262][ T4877] netlink: 14 bytes leftover after parsing attributes in process `syz.2.140'.
[  140.314310][ T4905] netlink: 28 bytes leftover after parsing attributes in process `syz.1.148'.
[  140.325474][ T4905] netlink: 28 bytes leftover after parsing attributes in process `syz.1.148'.
[  141.370870][ T4908] netlink: 28 bytes leftover after parsing attributes in process `syz.4.151'.
[  141.399067][ T4908] netlink: 28 bytes leftover after parsing attributes in process `syz.4.151'.
[  142.006339][ T4376] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  143.737486][ T4376] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  143.789406][ T4376] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  143.876321][ T4376] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  143.891505][ T4376] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.911445][ T4919] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  143.911971][ T4930] netlink: 'syz.0.155': attribute type 1 has an invalid length.
[  144.113568][ T4930] 8021q: adding VLAN 0 to HW filter on device bond1
[  144.336212][ T4376] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  144.401925][ T4933] bond1: (slave veth3): Enslaving as an active interface with a down link
[  144.482310][ T4935] netlink: 14 bytes leftover after parsing attributes in process `syz.0.155'.
[  144.532270][ T4376] usb 3-1: Using ep0 maxpacket: 8
[  144.546898][ T4376] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b
[  144.614600][ T4376] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.657783][ T4376] usb 3-1: Product: syz
[  144.662028][ T4376] usb 3-1: Manufacturer: syz
[  144.705404][ T4376] usb 3-1: SerialNumber: syz
[  144.745506][ T4376] usb 3-1: config 0 descriptor??
[  144.780719][ T4376] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state.
[  144.823522][ T4376] dvb-usb: bulk message failed: -22 (2/0)
[  144.894561][ T4376] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  144.945365][ T4376] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201))
[  144.995898][ T4376] usb 3-1: media controller created
[  145.059430][ T4376] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  145.195712][ T4376] dvb-usb: bulk message failed: -22 (1/0)
[  145.381081][ T4376] DVB: Unable to find symbol mt352_attach()
[  145.390062][ T4376] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)'
[  145.648026][ T4351] usb 2-1: USB disconnect, device number 3
[  145.662097][ T4376] rc_core: IR keymap rc-dvico-portable not found
[  145.677390][ T4376] Registered IR keymap rc-empty
[  145.701643][ T4376] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0
[  145.764042][ T4376] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input7
[  145.804837][ T4376] dvb-usb: schedule remote query interval to 100 msecs.
[  145.828554][ T4376] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected.
[  145.954552][ T4376] usb 3-1: USB disconnect, device number 4
[  146.139292][ T4376] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected.
[  153.538721][ T4965] Set syz1 is full, maxelem 65536 reached
[  154.381790][ T4959] netlink: 28 bytes leftover after parsing attributes in process `syz.2.162'.
[  154.393282][ T4958] netlink: 28 bytes leftover after parsing attributes in process `syz.2.162'.
[  154.766896][ T5007] syz.3.176 uses obsolete (PF_INET,SOCK_PACKET)
[  157.260863][ T5022] device syzkaller0 entered promiscuous mode
[  157.429847][ T5008] input: syz0 as /devices/virtual/input/input8
[  157.606222][ T5025] overlayfs: failed to clone upperpath
[  157.753874][ T5008] overlayfs: failed to clone upperpath
[  159.856842][ T5054] =======================================================
[  159.856842][ T5054] WARNING: The mand mount option has been deprecated and
[  159.856842][ T5054]          and is ignored by this kernel. Remove the mand
[  159.856842][ T5054]          option from the mount to silence this warning.
[  159.856842][ T5054] =======================================================
[  159.902422][ T5054] overlayfs: unrecognized mount option "nat" or missing value
[  160.608651][ T5065] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  161.052509][ T5071] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0
[  163.303234][ T5086] device syzkaller0 entered promiscuous mode
[  164.259144][ T5103] autofs4:pid:5103:autofs_fill_super: called with bogus options
[  164.271414][ T5103] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  164.280377][ T5103] overlayfs: missing 'lowerdir'
[  164.685439][ T5107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.198'.
[  166.080233][ T5133] random: crng reseeded on system resumption
[  172.209765][ T5148] device syzkaller0 entered promiscuous mode
[  173.819933][ T5186] binder_alloc: 5185: binder_alloc_buf, no vma
[  174.167023][ T5192] netlink: 128 bytes leftover after parsing attributes in process `syz.1.218'.
[  174.266694][ T5192] netlink: 20 bytes leftover after parsing attributes in process `syz.1.218'.
[  174.306969][ T5192] netlink: 20 bytes leftover after parsing attributes in process `syz.1.218'.
[  175.261777][ T5204] device syzkaller0 entered promiscuous mode
[  175.672325][ T5205] overlayfs: unrecognized mount option "nat" or missing value
[  175.878661][ T5214] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  176.235704][ T5214] wg2 speed is unknown, defaulting to 1000
[  176.258448][ T5214] wg2 speed is unknown, defaulting to 1000
[  176.290342][ T5214] wg2 speed is unknown, defaulting to 1000
[  177.082210][ T5239] netlink: 14 bytes leftover after parsing attributes in process `syz.3.226'.
[  178.633501][ T5214] infiniband syz2: set down
[  178.639302][    T7] wg2 speed is unknown, defaulting to 1000
[  178.645458][ T5214] infiniband syz2: added wg2
[  178.802243][ T5264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.230'.
[  178.811095][ T5264] netlink: 24 bytes leftover after parsing attributes in process `syz.3.230'.
[  178.840428][ T5214] infiniband syz2: Couldn't open port 1
[  178.863835][ T5268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.230'.
[  178.880502][ T5268] netlink: 24 bytes leftover after parsing attributes in process `syz.3.230'.
[  179.204091][ T5214] RDS/IB: syz2: added
[  179.240763][ T5214] smc: adding ib device syz2 with port count 1
[  179.261646][ T5214] smc:    ib device syz2 port 1 has pnetid 
[  179.318797][    T7] wg2 speed is unknown, defaulting to 1000
[  179.395913][ T5214] wg2 speed is unknown, defaulting to 1000
[  179.836340][ T4376] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  180.038069][ T4376] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  180.091387][ T4376] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  180.144649][ T4376] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  180.192856][ T4376] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.212467][ T5214] wg2 speed is unknown, defaulting to 1000
[  180.271599][ T5281] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  181.089757][ T5214] wg2 speed is unknown, defaulting to 1000
[  181.288892][ T5327] netlink: 12 bytes leftover after parsing attributes in process `syz.2.241'.
[  181.585764][ T5214] wg2 speed is unknown, defaulting to 1000
[  181.790039][ T5214] wg2 speed is unknown, defaulting to 1000
[  181.866158][ T4376] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  182.056204][ T4376] usb 4-1: Using ep0 maxpacket: 16
[  182.065164][ T4376] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  182.090321][ T4376] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  182.110150][ T4376] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.121155][ T4376] usb 4-1: Product: syz
[  182.130986][ T4376] usb 4-1: Manufacturer: syz
[  182.135721][ T4376] usb 4-1: SerialNumber: syz
[  182.161884][ T4376] usb 4-1: config 0 descriptor??
[  182.177384][ T4376] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  182.187110][ T4376] em28xx 4-1:0.0: DVB interface 0 found: bulk
[  182.436445][ T4542] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  182.643536][ T4542] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  183.093906][ T4542] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  183.113496][ T4351] usb 1-1: USB disconnect, device number 4
[  183.116562][ T4542] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  183.186930][ T4542] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.207956][ T5340] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  183.294553][ T4376] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[  183.323537][ T5351] netlink: 28 bytes leftover after parsing attributes in process `syz.2.246'.
[  183.347542][ T5348] netlink: 28 bytes leftover after parsing attributes in process `syz.2.246'.
[  183.736432][ T5358] loop5: detected capacity change from 0 to 7
[  183.779998][ T4376] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  183.784916][ T5358] Dev loop5: unable to read RDB block 7
[  183.818886][ T4376] em28xx 4-1:0.0: board has no eeprom
[  183.882494][ T5358]  loop5: AHDI p1 p2 p3
[  183.887293][ T5358] loop5: partition table partially beyond EOD, truncated
[  183.902039][ T5358] loop5: p1 start 1601398130 is beyond EOD, truncated
[  183.926237][ T4376] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  183.937559][ T4376] em28xx 4-1:0.0: dvb set to bulk mode.
[  183.950613][ T4316] em28xx 4-1:0.0: Binding DVB extension
[  183.976252][ T5358] loop5: p2 start 1702059890 is beyond EOD, truncated
[  183.992449][ T4376] usb 4-1: USB disconnect, device number 3
[  184.033261][ T4376] em28xx 4-1:0.0: Disconnecting em28xx
[  184.329035][ T4316] em28xx 4-1:0.0: Registering input extension
[  184.336937][ T4376] em28xx 4-1:0.0: Closing input extension
[  184.373232][ T4376] em28xx 4-1:0.0: Freeing device
[  185.127746][ T4542] usb 2-1: USB disconnect, device number 4
[  185.867669][ T5391] netlink: 28 bytes leftover after parsing attributes in process `syz.1.259'.
[  185.893449][ T5391] netlink: 28 bytes leftover after parsing attributes in process `syz.1.259'.
[  186.409486][ T5400] netlink: 28 bytes leftover after parsing attributes in process `syz.1.260'.
[  186.420362][ T5400] netlink: 28 bytes leftover after parsing attributes in process `syz.1.260'.
[  188.347950][ T5410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.266'.
[  188.371308][ T5410] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled
[  188.759207][ T5417] autofs4:pid:5417:autofs_fill_super: called with bogus options
[  188.790440][ T5417] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  188.799373][ T5417] overlayfs: missing 'lowerdir'
[  188.824160][ T5417] input: syz1 as /devices/virtual/input/input10
[  188.942097][ T5417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.268'.
[  189.314936][    T7] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  189.377748][ T5430] netlink: 28 bytes leftover after parsing attributes in process `syz.0.270'.
[  189.402280][ T5430] netlink: 28 bytes leftover after parsing attributes in process `syz.0.270'.
[  189.541232][    T7] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  189.564729][    T7] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  189.703018][    T7] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  189.740851][    T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.785128][ T5426] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  190.839106][ T5447] netlink: 'syz.0.274': attribute type 5 has an invalid length.
[  191.816534][ T4355] usb 2-1: USB disconnect, device number 5
[  192.700170][ T5463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.280'.
[  193.203523][ T5463] device bond3 entered promiscuous mode
[  193.210992][ T5463] 8021q: adding VLAN 0 to HW filter on device bond3
[  193.220222][ T5466] netlink: 28 bytes leftover after parsing attributes in process `syz.2.280'.
[  194.170752][ T5468] autofs4:pid:5468:autofs_fill_super: called with bogus options
[  194.217253][ T5468] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  194.226666][ T5468] overlayfs: missing 'lowerdir'
[  194.243443][ T5468] input: syz1 as /devices/virtual/input/input11
[  194.428126][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  194.434436][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  194.455760][ T5469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.281'.
[  194.519179][ T5470] kAFS: unable to lookup cell '(,c¾Ì'
[  194.734280][ T5480] 9pnet_virtio: no channels available for device syz
[  194.814007][ T5480] comedi comedi2: dt2814: I/O port conflict (0xfffffffffffffff9,2)
[  196.452398][ T5489] overlayfs: unrecognized mount option "volatile:mask=^MAY_EXEC" or missing value
[  199.627095][ T5514] gre0 speed is unknown, defaulting to 1000
[  199.653070][ T5514] gre0 speed is unknown, defaulting to 1000
[  199.674596][ T5514] gre0 speed is unknown, defaulting to 1000
[  199.774147][ T5517] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready
[  199.862094][ T5517] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  199.972492][ T5517] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  201.445949][ T5514] infiniband syz1: set active
[  201.451209][ T4355] gre0 speed is unknown, defaulting to 1000
[  201.509539][ T5514] infiniband syz1: added gre0
[  201.755280][ T5514] RDS/IB: syz1: added
[  201.784600][ T5514] smc: adding ib device syz1 with port count 1
[  201.817299][ T5514] smc:    ib device syz1 port 1 has pnetid 
[  201.938083][ T5532] netlink: 28 bytes leftover after parsing attributes in process `syz.4.297'.
[  201.971287][ T4355] gre0 speed is unknown, defaulting to 1000
[  201.971405][ T5534] netlink: 28 bytes leftover after parsing attributes in process `syz.4.297'.
[  202.057715][ T5514] gre0 speed is unknown, defaulting to 1000
[  202.280025][ T5539] overlayfs: unrecognized mount option "volatile:mask=^MAY_EXEC" or missing value
[  203.823174][ T5514] gre0 speed is unknown, defaulting to 1000
[  204.135249][ T5548] autofs4:pid:5548:autofs_fill_super: called with bogus options
[  204.177669][ T5548] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  204.186556][ T5548] overlayfs: missing 'lowerdir'
[  204.216925][ T5548] input: syz1 as /devices/virtual/input/input12
[  204.340243][ T5514] gre0 speed is unknown, defaulting to 1000
[  204.369172][ T5548] netlink: 8 bytes leftover after parsing attributes in process `syz.4.302'.
[  204.659926][ T5514] gre0 speed is unknown, defaulting to 1000
[  204.748201][ T5554] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0
[  205.274463][ T5514] gre0 speed is unknown, defaulting to 1000
[  206.356674][    C0] vcan0: j1939_tp_rxtimer: 0xffff88802fa7d400: rx timeout, send abort
[  206.365162][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802fa7d400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  206.768340][ T5579] netlink: 28 bytes leftover after parsing attributes in process `syz.3.312'.
[  206.794898][ T5579] netlink: 28 bytes leftover after parsing attributes in process `syz.3.312'.
[  207.200779][ T5584] input: syz1 as /devices/virtual/input/input13
[  209.344868][ T5608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.320'.
[  209.347338][ T5608] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled
[  212.593683][ T5627] infiniband syz1: set active
[  212.619883][ T5627] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready
[  212.657361][ T5627] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  212.715060][ T5627] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  212.776932][ T5627] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  212.815588][ T5627] device bridge_slave_0 left promiscuous mode
[  212.856374][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state
[  212.921995][ T5627] device bridge_slave_1 left promiscuous mode
[  212.939935][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state
[  213.004432][ T5627] bond0: (slave bond_slave_0): Releasing backup interface
[  213.067794][ T5627] bond0: (slave bond_slave_1): Releasing backup interface
[  213.267190][ T5627] team0: Port device team_slave_0 removed
[  213.338755][ T5627] team0: Port device team_slave_1 removed
[  213.357260][ T5627] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  213.423892][ T5627] batman_adv: batadv0: Removing interface: batadv_slave_0
[  213.552292][ T5627] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  213.571053][ T5627] batman_adv: batadv0: Removing interface: batadv_slave_1
[  213.605621][ T5627] device veth3 left promiscuous mode
[  213.654226][ T5627] bridge2: port 1(veth3) entered disabled state
[  213.704735][    T7] gre0 speed is unknown, defaulting to 1000
[  216.288624][ T5665] device syzkaller0 entered promiscuous mode
[  218.353671][ T5687] netlink: 4 bytes leftover after parsing attributes in process `syz.2.342'.
[  218.560992][ T5691] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled
[  220.967202][   T26] audit: type=1326 audit(1776469280.539:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5694 comm="syz.3.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f312e19c819 code=0x7ffc0000
[  221.027658][ T5704] process 'syz.3.347' launched './file2' with NULL argv: empty string added
[  221.067269][   T26] audit: type=1326 audit(1776469280.599:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5694 comm="syz.3.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f312e19c819 code=0x7ffc0000
[  221.210298][   T26] audit: type=1326 audit(1776469280.599:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5694 comm="syz.3.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f312e19c819 code=0x7ffc0000
[  221.264382][   T26] audit: type=1326 audit(1776469280.609:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5694 comm="syz.3.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f312e19c819 code=0x7ffc0000
[  221.321326][   T26] audit: type=1326 audit(1776469280.609:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5694 comm="syz.3.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f312e19c819 code=0x7ffc0000
[  221.374270][   T26] audit: type=1326 audit(1776469280.609:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5694 comm="syz.3.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f312e19c819 code=0x7ffc0000
[  221.601781][   T26] audit: type=1326 audit(1776469281.179:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5694 comm="syz.3.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f312e19c819 code=0x7ffc0000
[  221.695175][   T26] audit: type=1326 audit(1776469281.189:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5694 comm="syz.3.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f312e19c819 code=0x7ffc0000
[  222.687109][ T5726] input: syz1 as /devices/virtual/input/input14
[  228.361667][ T5765] netlink: 'syz.3.365': attribute type 1 has an invalid length.
[  229.591250][ T5765] device bond1 entered promiscuous mode
[  229.625232][ T5765] 8021q: adding VLAN 0 to HW filter on device bond1
[  229.673295][ T5767] netlink: 28 bytes leftover after parsing attributes in process `syz.3.365'.
[  234.012107][ T5789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.370'.
[  234.091330][ T5786] overlayfs: failed to resolve './file0': -2
[  234.296458][ T5789] autofs4:pid:5789:autofs_fill_super: called with bogus options
[  234.785074][ T5812] loop3: detected capacity change from 0 to 256
[  234.849315][ T5812] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  235.282121][ T5818] netlink: 36 bytes leftover after parsing attributes in process `syz.4.383'.
[  235.312375][ T5818] netlink: 36 bytes leftover after parsing attributes in process `syz.4.383'.
[  235.465496][ T5822] autofs4:pid:5822:autofs_fill_super: called with bogus options
[  235.474691][ T5822] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  235.483571][ T5822] overlayfs: missing 'lowerdir'
[  235.503085][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880797bf000: rx timeout, send abort
[  235.536512][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880797bf000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  235.767663][ T5823] input: syz1 as /devices/virtual/input/input15
[  235.945560][ T5823] netlink: 8 bytes leftover after parsing attributes in process `syz.4.384'.
[  236.077096][ T4355] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  236.327517][ T4355] usb 3-1: unable to get BOS descriptor or descriptor too short
[  236.352691][ T4355] usb 3-1: config 9 has an invalid interface number: 176 but max is 0
[  236.362950][ T4355] usb 3-1: config 9 has no interface number 0
[  236.375638][ T4355] usb 3-1: config 9 interface 176 has no altsetting 0
[  236.405253][ T5826] device bridge1 entered promiscuous mode
[  236.407239][ T4355] usb 3-1: New USB device found, idVendor=04b8, idProduct=0002, bcdDevice=ae.16
[  236.449180][ T4355] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  236.474067][ T4355] usb 3-1: Product: syz
[  236.613771][ T4355] usb 3-1: Manufacturer: syz
[  236.638395][ T4355] usb 3-1: SerialNumber: syz
[  237.657231][ T4355] usb 3-1: USB disconnect, device number 5
[  238.372422][ T5846] netlink: 28 bytes leftover after parsing attributes in process `syz.4.391'.
[  238.381531][ T5846] netlink: 28 bytes leftover after parsing attributes in process `syz.4.391'.
[  238.445676][ T5847] netlink: 16 bytes leftover after parsing attributes in process `syz.4.391'.
[  239.398730][ T5846] device syz_tun entered promiscuous mode
[  239.489915][ T5846] device syz_tun left promiscuous mode
[  239.639620][  T126] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  239.868123][  T126] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  239.906213][  T126] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  239.946989][  T126] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  239.970493][  T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.048127][ T5852] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  240.426805][ T5852] fuse: Bad value for 'fd'
[  241.140778][ T5865] 9pnet_virtio: no channels available for device syz
[  242.923234][ T4355] usb 3-1: USB disconnect, device number 6
[  243.568759][   T26] audit: type=1326 audit(1776469303.149:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5888 comm="syz.2.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f03d9c819 code=0x7ffc0000
[  243.590944][    C0] vkms_vblank_simulate: vblank timer overrun
[  244.077375][ T5892] vivid-004: disconnect
[  244.395262][ T5889] vivid-004: reconnect
[  244.461857][   T26] audit: type=1326 audit(1776469303.189:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5888 comm="syz.2.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f03d9c819 code=0x7ffc0000
[  244.581312][   T26] audit: type=1326 audit(1776469303.189:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5888 comm="syz.2.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7f4f03d9c819 code=0x7ffc0000
[  244.819085][   T26] audit: type=1326 audit(1776469303.189:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5888 comm="syz.2.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f03d9c819 code=0x7ffc0000
[  244.841357][    C0] vkms_vblank_simulate: vblank timer overrun
[  244.931972][   T26] audit: type=1326 audit(1776469303.189:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5888 comm="syz.2.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f03d9c819 code=0x7ffc0000
[  244.954813][   T26] audit: type=1326 audit(1776469303.189:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5888 comm="syz.2.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4f03d9e087 code=0x7ffc0000
[  244.998647][   T26] audit: type=1326 audit(1776469303.189:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5888 comm="syz.2.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f4f03d5d04e code=0x7ffc0000
[  245.077865][   T26] audit: type=1326 audit(1776469303.189:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5888 comm="syz.2.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f4f03d5d04e code=0x7ffc0000
[  246.324792][   T26] audit: type=1326 audit(1776469303.189:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5888 comm="syz.2.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f4f03d5d04e code=0x7ffc0000
[  246.526311][   T26] audit: type=1326 audit(1776469303.189:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5888 comm="syz.2.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4f03d5d04e code=0x7ffc0000
[  249.092504][ T5920] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  249.427186][ T5930] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  253.437712][ T5948] loop4: detected capacity change from 0 to 32768
[  253.733690][ T5948] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt
[  253.733690][ T5948] 
[  253.773574][ T5948] ERROR: (device loop4): remounting filesystem as read-only
[  253.832143][ T5948] xtLookup: xtSearch returned -5
[  253.878936][ T5948] free_index: error reading directory table
[  253.907416][ T5948] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt
[  253.907416][ T5948] 
[  253.933617][ T5948] xtLookup: xtSearch returned -5
[  253.945748][ T5948] free_index: error reading directory table
[  253.964180][ T5948] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt
[  253.964180][ T5948] 
[  253.994972][ T5948] xtLookup: xtSearch returned -5
[  254.056909][ T5948] free_index: error reading directory table
[  254.076207][ T5948] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt
[  254.076207][ T5948] 
[  254.201832][ T5948] xtLookup: xtSearch returned -5
[  254.216197][ T5948] free_index: error reading directory table
[  254.316211][ T5948] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt
[  254.316211][ T5948] 
[  254.354707][ T5948] xtLookup: xtSearch returned -5
[  254.360093][ T5948] free_index: error reading directory table
[  254.375505][ T5961] overlayfs: unrecognized mount option "nat" or missing value
[  254.395119][ T5948] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt
[  254.395119][ T5948] 
[  254.449247][ T5948] xtLookup: xtSearch returned -5
[  254.485009][ T5948] add_index: get/read_metapage failed!
[  254.515362][ T5948] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt
[  254.515362][ T5948] 
[  254.577019][ T5948] xtLookup: xtSearch returned -5
[  254.586449][ T5948] free_index: error reading directory table
[  254.596410][ T5948] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt
[  254.596410][ T5948] 
[  254.745388][ T5948] xtLookup: xtSearch returned -5
[  254.762625][ T5948] free_index: error reading directory table
[  254.785956][ T5948] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt
[  254.785956][ T5948] 
[  254.838789][ T5948] xtLookup: xtSearch returned -5
[  254.848916][ T5948] free_index: error reading directory table
[  254.937594][ T5948] BUG: Bad page state in process syz.4.420  pfn:2f799
[  254.944841][ T5948] page:ffffea0000bde640 refcount:0 mapcount:0 mapping:0000000000000000 index:0x2f pfn:0x2f799
[  255.867805][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  255.874492][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  255.876595][ T5948] flags: 0xfff00000002006(referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff)
[  255.918620][ T5948] raw: 00fff00000002006 ffffea0001f0d088 ffffc9000c3cf980 0000000000000000
[  255.943451][ T5948] raw: 000000000000002f ffff88802072f4d8 00000000ffffffff 0000000000000000
[  255.972343][ T5948] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set
[  255.998599][ T5948] page_owner tracks the page as allocated
[  256.022183][ T5948] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 5948, tgid 5947 (syz.4.420), ts 253709984542, free_ts 253310775935
[  256.088710][ T5948]  post_alloc_hook+0x173/0x1a0
[  256.109017][ T5948]  get_page_from_freelist+0x1a1e/0x1ab0
[  256.129620][ T5948]  __alloc_pages+0x1ec/0x4f0
[  256.140561][ T5948]  folio_alloc+0x1c/0x60
[  256.145720][ T5948]  filemap_alloc_folio+0xdb/0x480
[  256.150967][ T5948]  __filemap_get_folio+0x6ab/0xdb0
[  256.160288][ T5948]  pagecache_get_page+0x26/0x250
[  256.166107][ T5948]  __get_metapage+0x2a4/0xfa0
[  256.173684][ T5948]  diNewExt+0x9f1/0x2cc0
[  256.182253][ T5948]  diAllocAG+0xe19/0x1c30
[  256.187951][ T5948]  diAlloc+0x1c9/0x1900
[  256.192257][ T5948]  ialloc+0x88/0x950
[  256.203657][ T5948]  jfs_mkdir+0x1db/0xad0
[  256.208114][ T5948]  vfs_mkdir+0x387/0x570
[  256.213705][ T5948]  do_mkdirat+0x1d8/0x440
[  256.222793][ T5948]  __x64_sys_mkdirat+0x85/0x90
[  256.227844][ T5948] page last free stack trace:
[  256.240432][ T5948]  free_unref_page_prepare+0x8b4/0x9a0
[  256.254952][ T5948]  free_unref_page_list+0xbb/0x8e0
[  256.274399][ T5948]  release_pages+0x1fa6/0x2220
[  256.294797][ T5948]  tlb_flush_mmu+0x105/0x220
[  256.306168][ T5948]  tlb_finish_mmu+0xf5/0x220
[  256.315415][ T5948]  exit_mmap+0x384/0x960
[  256.331507][ T5948]  __mmput+0x118/0x3c0
[  256.354383][ T5948]  exit_mm+0x1fe/0x2d0
[  256.370005][ T5948]  do_exit+0x905/0x2480
[  256.388965][ T5948]  do_group_exit+0x217/0x2d0
[  256.411175][ T5948]  get_signal+0x1272/0x1350
[  256.432851][ T5948]  arch_do_signal_or_restart+0xc4/0x1350
[  256.462651][ T5948]  exit_to_user_mode_loop+0x70/0x110
[  256.484039][ T5948]  exit_to_user_mode_prepare+0xee/0x180
[  256.506574][ T5948]  syscall_exit_to_user_mode+0x16/0x40
[  256.529106][ T5948]  do_syscall_64+0x58/0xa0
[  256.546753][ T5948] Modules linked in:
[  256.561037][ T5948] CPU: 0 PID: 5948 Comm: syz.4.420 Not tainted syzkaller #0
[  256.568544][ T5948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  256.578617][ T5948] Call Trace:
[  256.581946][ T5948]  <TASK>
[  256.584879][ T5948]  dump_stack_lvl+0x188/0x24e
[  256.589571][ T5948]  ? show_regs_print_info+0x12/0x12
[  256.594788][ T5948]  ? swiotlb_print_info+0x60/0x60
[  256.599846][ T5948]  bad_page+0x14b/0x170
[  256.604124][ T5948]  free_unref_page_prepare+0x42a/0x9a0
[  256.609616][ T5948]  ? percpu_ref_put+0x19/0x180
[  256.614515][ T5948]  free_unref_page_list+0xbb/0x8e0
[  256.619687][ T5948]  release_pages+0x1fa6/0x2220
[  256.624553][ T5948]  ? lru_cache_disable+0x30/0x30
[  256.629517][ T5948]  ? mlock_page_drain_local+0x75/0x490
[  256.634994][ T5948]  ? mlock_page_drain_local+0x75/0x490
[  256.640559][ T5948]  ? mlock_page_drain_local+0x289/0x490
[  256.646122][ T5948]  __pagevec_release+0x6d/0xe0
[  256.650906][ T5948]  truncate_inode_pages_range+0x352/0x1090
[  256.656741][ T5948]  ? mapping_evict_folio+0x520/0x520
[  256.662229][ T5948]  ? parse_options+0xcdf/0xe40
[  256.667206][ T5948]  ? jfs_fill_super+0xad0/0xad0
[  256.672092][ T5948]  ? sync_filesystem+0x103/0x220
[  256.677144][ T5948]  jfs_remount+0x33d/0x5b0
[  256.681582][ T5948]  ? jfs_statfs+0x550/0x550
[  256.686105][ T5948]  ? hook_sb_remount+0x19/0xc0
[  256.690924][ T5948]  reconfigure_super+0x219/0x8a0
[  256.695887][ T5948]  path_mount+0xe13/0x1020
[  256.700315][ T5948]  ? kmem_cache_free+0xf7/0x290
[  256.705283][ T5948]  __se_sys_mount+0x2e3/0x3d0
[  256.710168][ T5948]  ? __x64_sys_mount+0xc0/0xc0
[  256.714954][ T5948]  ? lockdep_hardirqs_on+0x94/0x140
[  256.720162][ T5948]  ? __x64_sys_mount+0x1c/0xc0
[  256.724947][ T5948]  do_syscall_64+0x4c/0xa0
[  256.729386][ T5948]  ? clear_bhb_loop+0x60/0xb0
[  256.734092][ T5948]  ? clear_bhb_loop+0x60/0xb0
[  256.738786][ T5948]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  256.744722][ T5948] RIP: 0033:0x7f0febd9da8a
[  256.749157][ T5948] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  256.768893][ T5948] RSP: 002b:00007f0fecbb1e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  256.777339][ T5948] RAX: ffffffffffffffda RBX: 00007f0fecbb1ee0 RCX: 00007f0febd9da8a
[  256.785331][ T5948] RDX: 0000200000000180 RSI: 0000200000000100 RDI: 0000000000000000
[  256.793317][ T5948] RBP: 0000200000000180 R08: 00007f0fecbb1ee0 R09: 00000000000820f8
[  256.801389][ T5948] R10: 00000000000820f8 R11: 0000000000000246 R12: 0000200000000100
[  256.809475][ T5948] R13: 00007f0fecbb1ea0 R14: 0000000000000000 R15: 00002000000001c0
[  256.817475][ T5948]  </TASK>
[  256.820609][    C0] vkms_vblank_simulate: vblank timer overrun
[  257.009508][ T5948] Disabling lock debugging due to kernel taint
[  257.015944][ T5948] BUG: Bad page state in process syz.4.420  pfn:7c342
[  257.022965][ T5948] page:ffffea0001f0d080 refcount:0 mapcount:0 mapping:0000000000000000 index:0x2e pfn:0x7c342
[  257.035889][ T5948] flags: 0xfff00000002006(referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff)
[  257.045857][ T5948] raw: 00fff00000002006 ffffea00007bc748 ffffc9000c3cf980 0000000000000000
[  257.054671][ T5948] raw: 000000000000002e ffff88802072f3e0 00000000ffffffff 0000000000000000
[  257.064722][ T5948] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set
[  257.073455][ T5948] page_owner tracks the page as allocated
[  257.080585][ T5948] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 5948, tgid 5947 (syz.4.420), ts 253709941571, free_ts 253310781703
[  257.099512][ T5948]  post_alloc_hook+0x173/0x1a0
[  257.104434][ T5948]  get_page_from_freelist+0x1a1e/0x1ab0
[  257.110274][ T5948]  __alloc_pages+0x1ec/0x4f0
[  257.114917][ T5948]  folio_alloc+0x1c/0x60
[  257.119253][ T5948]  filemap_alloc_folio+0xdb/0x480
[  257.124320][ T5948]  __filemap_get_folio+0x6ab/0xdb0
[  257.129551][ T5948]  pagecache_get_page+0x26/0x250
[  257.134620][ T5948]  __get_metapage+0x2a4/0xfa0
[  257.139543][ T5948]  diNewExt+0x9f1/0x2cc0
[  257.143827][ T5948]  diAllocAG+0xe19/0x1c30
[  257.150572][ T5948]  diAlloc+0x1c9/0x1900
[  257.154800][ T5948]  ialloc+0x88/0x950
[  257.158792][ T5948]  jfs_mkdir+0x1db/0xad0
[  257.163121][ T5948]  vfs_mkdir+0x387/0x570
[  257.168378][ T5948]  do_mkdirat+0x1d8/0x440
[  257.172899][ T5948]  __x64_sys_mkdirat+0x85/0x90
[  257.177784][ T5948] page last free stack trace:
[  257.182521][ T5948]  free_unref_page_prepare+0x8b4/0x9a0
[  257.188318][ T5948]  free_unref_page_list+0xbb/0x8e0
[  257.193534][ T5948]  release_pages+0x1fa6/0x2220
[  257.198429][ T5948]  tlb_flush_mmu+0x105/0x220
[  257.203407][ T5948]  tlb_finish_mmu+0xf5/0x220
[  257.208292][ T5948]  exit_mmap+0x384/0x960
[  257.212575][ T5948]  __mmput+0x118/0x3c0
[  257.217027][ T5948]  exit_mm+0x1fe/0x2d0
[  257.221172][ T5948]  do_exit+0x905/0x2480
[  257.225541][ T5948]  do_group_exit+0x217/0x2d0
[  257.230494][ T5948]  get_signal+0x1272/0x1350
[  257.235454][ T5948]  arch_do_signal_or_restart+0xc4/0x1350
[  257.241298][ T5948]  exit_to_user_mode_loop+0x70/0x110
[  257.246978][ T5948]  exit_to_user_mode_prepare+0xee/0x180
[  257.252572][ T5948]  syscall_exit_to_user_mode+0x16/0x40
[  257.258199][ T5948]  do_syscall_64+0x58/0xa0
[  257.262937][ T5948] Modules linked in:
[  257.267007][ T5948] CPU: 1 PID: 5948 Comm: syz.4.420 Tainted: G    B              syzkaller #0
[  257.275888][ T5948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  257.286055][ T5948] Call Trace:
[  257.289455][ T5948]  <TASK>
[  257.292476][ T5948]  dump_stack_lvl+0x188/0x24e
[  257.297180][ T5948]  ? show_regs_print_info+0x12/0x12
[  257.302853][ T5948]  ? swiotlb_print_info+0x60/0x60
[  257.307890][ T5948]  bad_page+0x14b/0x170
[  257.312052][ T5948]  free_unref_page_prepare+0x42a/0x9a0
[  257.317521][ T5948]  ? percpu_ref_put+0x19/0x180
[  257.322290][ T5948]  free_unref_page_list+0xbb/0x8e0
[  257.327418][ T5948]  release_pages+0x1fa6/0x2220
[  257.332206][ T5948]  ? lru_cache_disable+0x30/0x30
[  257.337282][ T5948]  ? mlock_page_drain_local+0x75/0x490
[  257.342755][ T5948]  ? mlock_page_drain_local+0x75/0x490
[  257.348224][ T5948]  ? mlock_page_drain_local+0x289/0x490
[  257.353874][ T5948]  __pagevec_release+0x6d/0xe0
[  257.358657][ T5948]  truncate_inode_pages_range+0x352/0x1090
[  257.364488][ T5948]  ? mapping_evict_folio+0x520/0x520
[  257.369786][ T5948]  ? parse_options+0xcdf/0xe40
[  257.374607][ T5948]  ? jfs_fill_super+0xad0/0xad0
[  257.379488][ T5948]  ? sync_filesystem+0x103/0x220
[  257.384644][ T5948]  jfs_remount+0x33d/0x5b0
[  257.389111][ T5948]  ? jfs_statfs+0x550/0x550
[  257.393650][ T5948]  ? hook_sb_remount+0x19/0xc0
[  257.398457][ T5948]  reconfigure_super+0x219/0x8a0
[  257.403435][ T5948]  path_mount+0xe13/0x1020
[  257.407866][ T5948]  ? kmem_cache_free+0xf7/0x290
[  257.412726][ T5948]  __se_sys_mount+0x2e3/0x3d0
[  257.417472][ T5948]  ? __x64_sys_mount+0xc0/0xc0
[  257.422250][ T5948]  ? lockdep_hardirqs_on+0x94/0x140
[  257.427457][ T5948]  ? __x64_sys_mount+0x1c/0xc0
[  257.432322][ T5948]  do_syscall_64+0x4c/0xa0
[  257.436769][ T5948]  ? clear_bhb_loop+0x60/0xb0
[  257.441455][ T5948]  ? clear_bhb_loop+0x60/0xb0
[  257.446144][ T5948]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  257.452045][ T5948] RIP: 0033:0x7f0febd9da8a
[  257.456559][ T5948] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  257.476434][ T5948] RSP: 002b:00007f0fecbb1e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  257.484964][ T5948] RAX: ffffffffffffffda RBX: 00007f0fecbb1ee0 RCX: 00007f0febd9da8a
[  257.493031][ T5948] RDX: 0000200000000180 RSI: 0000200000000100 RDI: 0000000000000000
[  257.501016][ T5948] RBP: 0000200000000180 R08: 00007f0fecbb1ee0 R09: 00000000000820f8
[  257.509021][ T5948] R10: 00000000000820f8 R11: 0000000000000246 R12: 0000200000000100
[  257.517000][ T5948] R13: 00007f0fecbb1ea0 R14: 0000000000000000 R15: 00002000000001c0
[  257.525072][ T5948]  </TASK>
[  257.532074][ T5948] BUG: Bad page state in process syz.4.420  pfn:1ef1d
[  257.539596][ T5948] page:ffffea00007bc740 refcount:0 mapcount:0 mapping:0000000000000000 index:0x2d pfn:0x1ef1d
[  257.551196][ T5948] flags: 0xfff00000002006(referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff)
[  257.560862][ T5948] raw: 00fff00000002006 ffffea0000bbd248 ffffc9000c3cf980 0000000000000000
[  257.570424][ T5948] raw: 000000000000002d ffff88802072f2e8 00000000ffffffff 0000000000000000
[  257.579185][ T5948] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set
[  257.586589][ T5948] page_owner tracks the page as allocated
[  257.592342][ T5948] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 5948, tgid 5947 (syz.4.420), ts 253709892532, free_ts 253310786616
[  257.610565][ T5948]  post_alloc_hook+0x173/0x1a0
[  257.615621][ T5948]  get_page_from_freelist+0x1a1e/0x1ab0
[  257.621222][ T5948]  __alloc_pages+0x1ec/0x4f0
[  257.625838][ T5948]  folio_alloc+0x1c/0x60
[  257.630144][ T5948]  filemap_alloc_folio+0xdb/0x480
[  257.635289][ T5948]  __filemap_get_folio+0x6ab/0xdb0
[  257.641739][ T5948]  pagecache_get_page+0x26/0x250
[  257.646867][ T5948]  __get_metapage+0x2a4/0xfa0
[  257.651572][ T5948]  diNewExt+0x9f1/0x2cc0
[  257.655817][ T5948]  diAllocAG+0xe19/0x1c30
[  257.660191][ T5948]  diAlloc+0x1c9/0x1900
[  257.664401][ T5948]  ialloc+0x88/0x950
[  257.668392][ T5948]  jfs_mkdir+0x1db/0xad0
[  257.672749][ T5948]  vfs_mkdir+0x387/0x570
[  257.677125][ T5948]  do_mkdirat+0x1d8/0x440
[  257.681568][ T5948]  __x64_sys_mkdirat+0x85/0x90
[  257.686404][ T5948] page last free stack trace:
[  257.691096][ T5948]  free_unref_page_prepare+0x8b4/0x9a0
[  257.697173][ T5948]  free_unref_page_list+0xbb/0x8e0
[  257.702298][ T5948]  release_pages+0x1fa6/0x2220
[  257.707170][ T5948]  tlb_flush_mmu+0x105/0x220
[  257.711786][ T5948]  tlb_finish_mmu+0xf5/0x220
[  257.716478][ T5948]  exit_mmap+0x384/0x960
[  257.720743][ T5948]  __mmput+0x118/0x3c0
[  257.724822][ T5948]  exit_mm+0x1fe/0x2d0
[  257.729010][ T5948]  do_exit+0x905/0x2480
[  257.733199][ T5948]  do_group_exit+0x217/0x2d0
[  257.737839][ T5948]  get_signal+0x1272/0x1350
[  257.742397][ T5948]  arch_do_signal_or_restart+0xc4/0x1350
[  257.748340][ T5948]  exit_to_user_mode_loop+0x70/0x110
[  257.753856][ T5948]  exit_to_user_mode_prepare+0xee/0x180
[  257.759498][ T5948]  syscall_exit_to_user_mode+0x16/0x40
[  257.764986][ T5948]  do_syscall_64+0x58/0xa0
[  257.769514][ T5948] Modules linked in:
[  257.773440][ T5948] CPU: 1 PID: 5948 Comm: syz.4.420 Tainted: G    B              syzkaller #0
[  257.782227][ T5948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  257.792307][ T5948] Call Trace:
[  257.795593][ T5948]  <TASK>
[  257.798524][ T5948]  dump_stack_lvl+0x188/0x24e
[  257.803217][ T5948]  ? show_regs_print_info+0x12/0x12
[  257.808440][ T5948]  ? swiotlb_print_info+0x60/0x60
[  257.813471][ T5948]  bad_page+0x14b/0x170
[  257.817633][ T5948]  free_unref_page_prepare+0x42a/0x9a0
[  257.823098][ T5948]  ? percpu_ref_put+0x19/0x180
[  257.827873][ T5948]  free_unref_page_list+0xbb/0x8e0
[  257.833006][ T5948]  release_pages+0x1fa6/0x2220
[  257.837795][ T5948]  ? lru_cache_disable+0x30/0x30
[  257.842747][ T5948]  ? mlock_page_drain_local+0x75/0x490
[  257.848231][ T5948]  ? mlock_page_drain_local+0x75/0x490
[  257.853700][ T5948]  ? mlock_page_drain_local+0x289/0x490
[  257.859344][ T5948]  __pagevec_release+0x6d/0xe0
[  257.864130][ T5948]  truncate_inode_pages_range+0x352/0x1090
[  257.870047][ T5948]  ? mapping_evict_folio+0x520/0x520
[  257.875435][ T5948]  ? parse_options+0xcdf/0xe40
[  257.880218][ T5948]  ? jfs_fill_super+0xad0/0xad0
[  257.885088][ T5948]  ? sync_filesystem+0x103/0x220
[  257.890041][ T5948]  jfs_remount+0x33d/0x5b0
[  257.894475][ T5948]  ? jfs_statfs+0x550/0x550
[  257.899084][ T5948]  ? hook_sb_remount+0x19/0xc0
[  257.903867][ T5948]  reconfigure_super+0x219/0x8a0
[  257.909804][ T5948]  path_mount+0xe13/0x1020
[  257.914319][ T5948]  ? kmem_cache_free+0xf7/0x290
[  257.919282][ T5948]  __se_sys_mount+0x2e3/0x3d0
[  257.924059][ T5948]  ? __x64_sys_mount+0xc0/0xc0
[  257.928925][ T5948]  ? lockdep_hardirqs_on+0x94/0x140
[  257.934135][ T5948]  ? __x64_sys_mount+0x1c/0xc0
[  257.938911][ T5948]  do_syscall_64+0x4c/0xa0
[  257.943342][ T5948]  ? clear_bhb_loop+0x60/0xb0
[  257.948034][ T5948]  ? clear_bhb_loop+0x60/0xb0
[  257.952725][ T5948]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  257.958634][ T5948] RIP: 0033:0x7f0febd9da8a
[  257.963063][ T5948] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  257.982880][ T5948] RSP: 002b:00007f0fecbb1e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  257.991329][ T5948] RAX: ffffffffffffffda RBX: 00007f0fecbb1ee0 RCX: 00007f0febd9da8a
[  257.999355][ T5948] RDX: 0000200000000180 RSI: 0000200000000100 RDI: 0000000000000000
[  258.007367][ T5948] RBP: 0000200000000180 R08: 00007f0fecbb1ee0 R09: 00000000000820f8
[  258.015441][ T5948] R10: 00000000000820f8 R11: 0000000000000246 R12: 0000200000000100
[  258.023438][ T5948] R13: 00007f0fecbb1ea0 R14: 0000000000000000 R15: 00002000000001c0
[  258.031439][ T5948]  </TASK>
[  258.051036][  T108] BUG: Bad page state in process jfsCommit  pfn:18b92
[  258.058596][  T108] page:ffffea000062e480 refcount:0 mapcount:0 mapping:0000000000000000 index:0x30 pfn:0x18b92
[  258.069029][  T108] flags: 0xfff00000002007(locked|referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff)
[  258.079450][  T108] raw: 00fff00000002007 dead000000000100 dead000000000122 0000000000000000
[  258.088227][  T108] raw: 0000000000000030 ffff88802072f5d0 00000000ffffffff 0000000000000000
[  258.097108][  T108] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set
[  258.104494][  T108] page_owner tracks the page as allocated
[  258.110257][  T108] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 5948, tgid 5947 (syz.4.420), ts 253733496491, free_ts 253310770318
[  258.128580][  T108]  post_alloc_hook+0x173/0x1a0
[  258.133377][  T108]  get_page_from_freelist+0x1a1e/0x1ab0
[  258.139120][  T108]  __alloc_pages+0x1ec/0x4f0
[  258.143929][  T108]  folio_alloc+0x1c/0x60
[  258.148361][  T108]  filemap_alloc_folio+0xdb/0x480
[  258.153490][  T108]  __filemap_get_folio+0x6ab/0xdb0
[  258.158873][  T108]  pagecache_get_page+0x26/0x250
[  258.163860][  T108]  __get_metapage+0x2a4/0xfa0
[  258.168906][  T108]  dtSplitRoot+0x1de/0x14e0
[  258.173484][  T108]  dtInsert+0xe7b/0x5950
[  258.177915][  T108]  jfs_mkdir+0x758/0xad0
[  258.182204][  T108]  vfs_mkdir+0x387/0x570
[  258.186481][  T108]  do_mkdirat+0x1d8/0x440
[  258.190858][  T108]  __x64_sys_mkdirat+0x85/0x90
[  258.195710][  T108]  do_syscall_64+0x4c/0xa0
[  258.200180][  T108]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  258.206225][  T108] page last free stack trace:
[  258.211034][  T108]  free_unref_page_prepare+0x8b4/0x9a0
[  258.216639][  T108]  free_unref_page_list+0xbb/0x8e0
[  258.221935][  T108]  release_pages+0x1fa6/0x2220
[  258.226740][  T108]  tlb_flush_mmu+0x105/0x220
[  258.231372][  T108]  tlb_finish_mmu+0xf5/0x220
[  258.235971][  T108]  exit_mmap+0x384/0x960
[  258.240408][  T108]  __mmput+0x118/0x3c0
[  258.244502][  T108]  exit_mm+0x1fe/0x2d0
[  258.248735][  T108]  do_exit+0x905/0x2480
[  258.252933][  T108]  do_group_exit+0x217/0x2d0
[  258.257605][  T108]  get_signal+0x1272/0x1350
[  258.262162][  T108]  arch_do_signal_or_restart+0xc4/0x1350
[  258.267842][  T108]  exit_to_user_mode_loop+0x70/0x110
[  258.273166][  T108]  exit_to_user_mode_prepare+0xee/0x180
[  258.278842][  T108]  syscall_exit_to_user_mode+0x16/0x40
[  258.285207][  T108]  do_syscall_64+0x58/0xa0
[  258.289691][  T108] Modules linked in:
[  258.293726][  T108] CPU: 0 PID: 108 Comm: jfsCommit Tainted: G    B              syzkaller #0
[  258.302503][  T108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  258.312741][  T108] Call Trace:
[  258.316115][  T108]  <TASK>
[  258.319075][  T108]  dump_stack_lvl+0x188/0x24e
[  258.323822][  T108]  ? show_regs_print_info+0x12/0x12
[  258.329033][  T108]  ? swiotlb_print_info+0x60/0x60
[  258.334183][  T108]  bad_page+0x14b/0x170
[  258.338396][  T108]  free_unref_page_prepare+0x42a/0x9a0
[  258.343971][  T108]  free_unref_page+0x2e/0x3f0
[  258.348750][  T108]  ? __folio_put+0xf1/0x210
[  258.353526][  T108]  txUnlock+0x27e/0xcb0
[  258.357875][  T108]  jfs_lazycommit+0x56a/0xa70
[  258.362564][  T108]  ? txFreelock+0x5a0/0x5a0
[  258.367074][  T108]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  258.373067][  T108]  ? do_task_dead+0xd0/0xd0
[  258.377584][  T108]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  258.383490][  T108]  ? __kthread_parkme+0x162/0x1c0
[  258.388535][  T108]  kthread+0x29d/0x330
[  258.392612][  T108]  ? txFreelock+0x5a0/0x5a0
[  258.397128][  T108]  ? kthread_blkcg+0xd0/0xd0
[  258.401745][  T108]  ret_from_fork+0x1f/0x30
[  258.406197][  T108]  </TASK>
[  258.409307][    C0] vkms_vblank_simulate: vblank timer overrun
[  258.416658][  T108] page:ffffea000062e480 refcount:0 mapcount:0 mapping:0000000000000000 index:0x30 pfn:0x18b92
[  258.428278][  T108] flags: 0xfff00000002007(locked|referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff)
[  258.438600][  T108] raw: 00fff00000002007 dead000000000100 dead000000000122 0000000000000000
[  258.447346][  T108] raw: 0000000000000030 ffff88802072f5d0 00000000ffffffff 0000000000000000
[  258.455974][  T108] page dumped because: VM_BUG_ON_FOLIO(((unsigned int) folio_ref_count(folio) + 127u <= 127u))
[  258.466402][  T108] page_owner tracks the page as allocated
[  258.472135][  T108] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 5948, tgid 5947 (syz.4.420), ts 253733496491, free_ts 253310770318
[  258.490337][  T108]  post_alloc_hook+0x173/0x1a0
[  258.495174][  T108]  get_page_from_freelist+0x1a1e/0x1ab0
[  258.500901][  T108]  __alloc_pages+0x1ec/0x4f0
[  258.505525][  T108]  folio_alloc+0x1c/0x60
[  258.509872][  T108]  filemap_alloc_folio+0xdb/0x480
[  258.514928][  T108]  __filemap_get_folio+0x6ab/0xdb0
[  258.520261][  T108]  pagecache_get_page+0x26/0x250
[  258.525244][  T108]  __get_metapage+0x2a4/0xfa0
[  258.530027][  T108]  dtSplitRoot+0x1de/0x14e0
[  258.534563][  T108]  dtInsert+0xe7b/0x5950
[  258.538902][  T108]  jfs_mkdir+0x758/0xad0
[  258.543179][  T108]  vfs_mkdir+0x387/0x570
[  258.547540][  T108]  do_mkdirat+0x1d8/0x440
[  258.551893][  T108]  __x64_sys_mkdirat+0x85/0x90
[  258.556721][  T108]  do_syscall_64+0x4c/0xa0
[  258.561168][  T108]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  258.567139][  T108] page last free stack trace:
[  258.571821][  T108]  free_unref_page_prepare+0x8b4/0x9a0
[  258.577478][  T108]  free_unref_page_list+0xbb/0x8e0
[  258.582748][  T108]  release_pages+0x1fa6/0x2220
[  258.587604][  T108]  tlb_flush_mmu+0x105/0x220
[  258.592225][  T108]  tlb_finish_mmu+0xf5/0x220
[  258.597185][  T108]  exit_mmap+0x384/0x960
[  258.601465][  T108]  __mmput+0x118/0x3c0
[  258.605646][  T108]  exit_mm+0x1fe/0x2d0
[  258.609960][  T108]  do_exit+0x905/0x2480
[  258.614229][  T108]  do_group_exit+0x217/0x2d0
[  258.618878][  T108]  get_signal+0x1272/0x1350
[  258.623429][  T108]  arch_do_signal_or_restart+0xc4/0x1350
[  258.629269][  T108]  exit_to_user_mode_loop+0x70/0x110
[  258.634696][  T108]  exit_to_user_mode_prepare+0xee/0x180
[  258.640321][  T108]  syscall_exit_to_user_mode+0x16/0x40
[  258.645913][  T108]  do_syscall_64+0x58/0xa0
[  258.650740][  T108] ------------[ cut here ]------------
[  258.656261][  T108] kernel BUG at include/linux/mm.h:1146!
[  258.662014][  T108] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  258.668109][  T108] CPU: 1 PID: 108 Comm: jfsCommit Tainted: G    B              syzkaller #0
[  258.676877][  T108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  258.687112][  T108] RIP: 0010:put_metapage+0x24f/0x340
[  258.692418][  T108] Code: 38 c1 0f 8c 32 ff ff ff 4c 89 ef e8 1b b7 e0 fe e9 25 ff ff ff e8 e1 aa 8f fe 48 8b 3c 24 48 c7 c6 c0 31 c6 8a e8 41 ca ca fe <0f> 0b 4c 8b 2c 24 4c 89 ee 48 81 e6 ff 0f 00 00 31 ff e8 9a ae 8f
[  258.712217][  T108] RSP: 0018:ffffc90002d47ce0 EFLAGS: 00010246
[  258.718469][  T108] RAX: 35e3527ccca12900 RBX: ffff88802072f5d0 RCX: 35e3527ccca12900
[  258.726622][  T108] RDX: 0000000000000000 RSI: ffffffff8adf1180 RDI: ffffffff8adf1140
[  258.734603][  T108] RBP: 000000000000007f R08: ffffffff8e1ff26f R09: 1ffffffff1c3fe4d
[  258.742686][  T108] R10: dffffc0000000000 R11: fffffbfff1c3fe4e R12: ffff88802072f5f8
[  258.750702][  T108] R13: ffffea000062e4b4 R14: 1ffff110040e5ebf R15: 1ffff110040e5ecc
[  258.758863][  T108] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  258.767816][  T108] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  258.774435][  T108] CR2: 00007f4f03fe92f8 CR3: 0000000073d1e000 CR4: 00000000003506e0
[  258.782682][  T108] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  258.790663][  T108] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  258.798646][  T108] Call Trace:
[  258.801958][  T108]  <TASK>
[  258.805008][  T108]  txUnlock+0x427/0xcb0
[  258.809203][  T108]  jfs_lazycommit+0x56a/0xa70
[  258.813902][  T108]  ? txFreelock+0x5a0/0x5a0
[  258.818418][  T108]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  258.824334][  T108]  ? do_task_dead+0xd0/0xd0
[  258.828850][  T108]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  258.834844][  T108]  ? __kthread_parkme+0x162/0x1c0
[  258.839886][  T108]  kthread+0x29d/0x330
[  258.843966][  T108]  ? txFreelock+0x5a0/0x5a0
[  258.848483][  T108]  ? kthread_blkcg+0xd0/0xd0
[  258.853084][  T108]  ret_from_fork+0x1f/0x30
[  258.857615][  T108]  </TASK>
[  258.860640][  T108] Modules linked in:
[  258.865504][  T108] ---[ end trace 0000000000000000 ]---
[  258.871757][  T108] RIP: 0010:put_metapage+0x24f/0x340
[  258.877196][  T108] Code: 38 c1 0f 8c 32 ff ff ff 4c 89 ef e8 1b b7 e0 fe e9 25 ff ff ff e8 e1 aa 8f fe 48 8b 3c 24 48 c7 c6 c0 31 c6 8a e8 41 ca ca fe <0f> 0b 4c 8b 2c 24 4c 89 ee 48 81 e6 ff 0f 00 00 31 ff e8 9a ae 8f
[  258.897416][  T108] RSP: 0018:ffffc90002d47ce0 EFLAGS: 00010246
[  258.903518][  T108] RAX: 35e3527ccca12900 RBX: ffff88802072f5d0 RCX: 35e3527ccca12900
[  258.911535][  T108] RDX: 0000000000000000 RSI: ffffffff8adf1180 RDI: ffffffff8adf1140
[  258.919579][  T108] RBP: 000000000000007f R08: ffffffff8e1ff26f R09: 1ffffffff1c3fe4d
[  258.927712][  T108] R10: dffffc0000000000 R11: fffffbfff1c3fe4e R12: ffff88802072f5f8
[  258.935721][  T108] R13: ffffea000062e4b4 R14: 1ffff110040e5ebf R15: 1ffff110040e5ecc
[  258.943865][  T108] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  258.952863][  T108] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  258.959702][  T108] CR2: 00007f4f03fe92f8 CR3: 000000002fa4c000 CR4: 00000000003506e0
[  258.967855][  T108] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  258.975851][  T108] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  258.983997][  T108] Kernel panic - not syncing: Fatal exception
[  258.990590][  T108] Kernel Offset: disabled
[  258.995083][  T108] Rebooting in 86400 seconds..