last executing test programs:

1m18.920254432s ago: executing program 0 (id=128):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000100000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x3, 0x0, &(0x7f00002bf000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$inet6(0xa, 0x803, 0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$pppoe(0x18, 0x1, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
syz_init_net_socket$ax25(0x3, 0x3, 0xca)
pipe(0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000580)=ANY=[], 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r3 = openat$cgroup_freezer_state(r2, &(0x7f00000000c0), 0x2, 0x0)
write$cgroup_freezer_state(r3, &(0x7f0000000400)='FROZEN\x00', 0x7)
mkdirat$cgroup(r2, &(0x7f0000000200)='syz0\x00', 0x1ff)

1m17.299803516s ago: executing program 0 (id=135):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, <r2=>0x0, <r3=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, r2, r3, 0x100, 0x0, 0x9, 0x40, {0x3, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffff0000, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}})

1m16.138009251s ago: executing program 0 (id=137):
r0 = socket(0x11, 0x800000003, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x5, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socket$kcm(0x10, 0x2, 0x10)
r1 = getpid()
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000080)=""/213, &(0x7f0000000180)=0xd5)
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f00000001c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(0x0, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, 0x0, 0x0)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
r5 = fsopen(&(0x7f0000000040)='afs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f00000005c0)='#mS\xb2j\xcb\xa18:.)\xc7\xcb\xc5\xd8\x91\xa1\"\xd5\r\x89M;\x99\xd6\x8e?K\x82\xd5\xd7\xab\x10\xea\x14\n\xea\xe9\xcc\xdc\xf3\xc0\xf8\x89\xd0\x0ep\xb1I\x04T[\r&\xf0z\xde\xc0\xf3\xcd\x9a\xae\xa8*v_(\x94]\xdf\xf1\x95!\xb3+\x1aD\xda\xa1G\x06M\xdaz2\xe9\xe6\xda\x92U\xaaN\xff\xca\xb37-<3\xb28\xb8:UQ\x95|\xe5\xaa\x0e\xe7{\xd4T\x84\x83\x86\x9d', 0x0)
r6 = io_uring_setup(0x2e34, 0x0)
r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
close(r7)
close_range(r6, 0xffffffffffffffff, 0x0)

1m13.359745371s ago: executing program 0 (id=140):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRESDEC, @ANYRES8=0x0, @ANYRES64, @ANYBLOB="01ce6671a3b30f673148672100038bbb4413ea284b892438cdddda3da4c78d940655fbd68a286059c5766f98f85fb413503eaf8c90a24dda1e09f68cd741168d69dae50652ca7b67c5b0a27ab80ff9afa5000443de8c748e1d5beabee7c1346b215f641ae190d56ea4ab81bacd909929deb5757040e8d5b2752ea779c30f600bd516a68d881e7fc7289826d49e35134a94e27f115c8195a0f152cbd840ffdb008356c72319cceb43ccb1280556efdf0fdf582fd3cfc830dff1787f000000b7400f5aef57b6dcbfde7af6012383adb085c40e4c295c2a3be750a42400e58523d24b8eecd75caabcee22347bdb78b72b400d080a044ebde5d39ad91ff0ef75aa244381cf00cd6fe9b9a92a9968104bf02481022af426853287e521a4e3cfe480f984efcea1359ff932ebd3bc75aefea41074799f3502a7472a6686b4011a41d7f0cfb25b3dc3077b4e8ded17cfff2b1d59bc12f637c36690f5ca91ee999ec138f6ce66522e652939a37435edb78f9ae18489f9d2b73c81609399f0d123f1721171bd72c012623f04d8965d3e5785d057c15798ab36af821c9b308731422ba3858b9895ace14068ea58f8cb6060c205caf209a73628eff5b9270a4a55c2d7fc59a4fe6e023bd424d8b010e2232d1b2e6ca603b466b2c82afff4a8cc469e8664d54769fc97df122b3ff8c34354dad46f900eaf6e72e538c0595caa056984ab8974af7cdae5bde6a12f412fe2a876aa191e78e91fbf780e2f4a20f57d41376b29f990ce63aa6edf622d2203fee37df269abf869d13b175852b775fff70491d1e5d1311b7eef954a101ddb98c5ba2b312528485ece7aff23cc6fee599daea0fca71a5970cf0fc82b49640cc3fabbc401dead4f83aa0c4072a9e98ab5afb790be17961fc073e2f8f800000000000000005089d6db5ad893ee9b22b9250d01980952d0a3e0076c877556fa43f90cb574fd6ad67398ac4d9f8ff4e3ef09f99220928602523adc2289b51328ac152bd7edc66d4e962cbc2d2b0c5f8e48384eff563a10787b0199642385e811504e7168804114842d51f42dd6937515fa64b2fd14ef427072c6556b99171bd00165a9aada7173f001679ac791ee67188c670f583f7b1f8df68b97f4dcb5652f2b13aa941b7ff56c48fb7162e91ef53c70938a92e4bf55d65319f74766a309722f767fc8f3db2a194a2f098336601be2edcbcc9b562f2fc64e2deff9a16e84f1e8bc5fb82c91f4d10e34f5a093fc4fcbdb89342274857c8e6aa8864b3214f51b9e515bf645235007cede80ff5931bff340780a3b43bc0466340c195a515f779d0333dd467bb665508d9c89e18e86d1975e273f937e3bd1", @ANYRES8=0x0, @ANYRES32=0x0], 0x1, 0x1e9, &(0x7f0000000980)="$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")

1m13.342058601s ago: executing program 2 (id=141):
socket$rds(0x15, 0x5, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$xdp(0x2c, 0x3, 0x0)
close(r0)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2008480, &(0x7f0000000000), 0x0, 0x790, &(0x7f0000001040)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x0, [0x0, 0x8000000], [0x8200, 0x1]}}})
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000440)=0x2, 0x4)
fcntl$setsig(r1, 0xa, 0x21)
creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2481, 0x0)
ioctl$BLKRRPART(r7, 0x125f, 0x0)

1m13.05078094s ago: executing program 0 (id=143):
syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd0924030500000004000724050401"], 0x0)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0xff0a, 0x0)
r2 = syz_open_dev$vim2m(0x0, 0x3fe, 0x2)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x80800, 0x0, <r3=>0xffffffffffffffff})
setsockopt(r3, 0x470, 0xfffffffa, &(0x7f0000000480)="b7d5739ea066701ab1a6d679462464a54f6938296c5c12acf70d2d418d2947038a3bb2e94170bad335691d28d53a46b3d57dc529ecb1b466094c27a294b60f34532b6a0449daf44b716c7ec8e14c7b10102ded86c59711a3c92867bbd8e4c5f6b2972813fa4b2351de0218ecae6083a1f40b40644389945aee776c184c846f1d826c7ff6ee59b63aa1eaff7669e2bb50d809bdebb4ca5172e885a6a998e1f69a5dea31c0d738d9e1b8fd8e61e376810777b6a7c00c", 0xb5)
ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x502, 0x0)
ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000000))
ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000300)=0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x410000bce)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r7 = add_key$keyring(&(0x7f0000000280), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
add_key(0x0, 0x0, 0x0, 0x0, r7)
r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r8, &(0x7f00000002c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x2, @null}, 0x1c)

1m11.771171455s ago: executing program 0 (id=146):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = dup(r3)
ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x101, 0x100}})
chdir(&(0x7f00000000c0)='./file1\x00')
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
readlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000012c0)=""/168, 0xa8)
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000000, &(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRESHEX=0x0, @ANYRESHEX=0x0, @ANYRES32=0x0], 0x8, 0xad, &(0x7f0000000040)="$eJzs0btpA0EUBdC7H/xJ7ALcg3tw6twVbOjQkY3BjlSGOlArKmE7ULCpkhHLrkChEAhJcA7MzA3mwYW33q5e8pSUv6SUUu6SPGbKX98/nx/v490kyTJt7jPZv9y4ej4P486fp7x5y+L/4E8//HZ9la4fyuyChQEAgJPVeZ1TdfxQm6Q5VyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA67ILAAD//1vZIlc=")
openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)

1m11.337928033s ago: executing program 4 (id=147):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, <r2=>0x0, <r3=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, r2, r3, 0x100, 0x0, 0x9, 0x40, {0x3, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffff0000, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}})

1m10.300787139s ago: executing program 32 (id=146):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = dup(r3)
ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x101, 0x100}})
chdir(&(0x7f00000000c0)='./file1\x00')
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
readlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000012c0)=""/168, 0xa8)
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000000, &(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRESHEX=0x0, @ANYRESHEX=0x0, @ANYRES32=0x0], 0x8, 0xad, &(0x7f0000000040)="$eJzs0btpA0EUBdC7H/xJ7ALcg3tw6twVbOjQkY3BjlSGOlArKmE7ULCpkhHLrkChEAhJcA7MzA3mwYW33q5e8pSUv6SUUu6SPGbKX98/nx/v490kyTJt7jPZv9y4ej4P486fp7x5y+L/4E8//HZ9la4fyuyChQEAgJPVeZ1TdfxQm6Q5VyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA67ILAAD//1vZIlc=")
openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)

1m10.285244529s ago: executing program 4 (id=150):
r0 = socket(0x11, 0x800000003, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x5, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socket$kcm(0x10, 0x2, 0x10)
r1 = getpid()
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000080)=""/213, &(0x7f0000000180)=0xd5)
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f00000001c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(0x0, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, 0x0, 0x0)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
r5 = fsopen(&(0x7f0000000040)='afs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f00000005c0)='#mS\xb2j\xcb\xa18:.)\xc7\xcb\xc5\xd8\x91\xa1\"\xd5\r\x89M;\x99\xd6\x8e?K\x82\xd5\xd7\xab\x10\xea\x14\n\xea\xe9\xcc\xdc\xf3\xc0\xf8\x89\xd0\x0ep\xb1I\x04T[\r&\xf0z\xde\xc0\xf3\xcd\x9a\xae\xa8*v_(\x94]\xdf\xf1\x95!\xb3+\x1aD\xda\xa1G\x06M\xdaz2\xe9\xe6\xda\x92U\xaaN\xff\xca\xb37-<3\xb28\xb8:UQ\x95|\xe5\xaa\x0e\xe7{\xd4T\x84\x83\x86\x9d', 0x0)
r6 = io_uring_setup(0x2e34, 0x0)
r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
close(r7)
close_range(r6, 0xffffffffffffffff, 0x0)

1m8.850661034s ago: executing program 4 (id=152):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000480)={0x2020, 0x0, 0x0, <r4=>0x0, <r5=>0x0}, 0x2020)
fchown(0xffffffffffffffff, r4, r5)
setfsuid(r4)
prctl$PR_SET_PTRACER(0x59616d61, r0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x20)
socket(0x10, 0x803, 0x0)
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x221488e, &(0x7f0000000140)={[{@map_off}, {@showassoc, 0x0}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@block={'block', 0x3d, 0x600}}, {@mode={'mode', 0x3d, 0x6}}, {@gid, 0x41}, {@map_acorn}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@sbsector={'sbsector', 0x3d, 0xd280}}, {@map_acorn}, {@overriderock}, {@gid}]}, 0xfd, 0x6b1, &(0x7f0000000840)="$eJzs3c9v2+Ydx/EP5V+yOwTFNgRBkCZPkhVwsEyR5MaBkQGtRlE2N0kUSHmwgQFF1thFEDndkgxYfOl82Q+gA3berZcddts/MKDn/he7bUCx3QbswoGkqB+WKFmN7TbN+2W0osgvn+dLUuEXtMWHAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsuxqsViyVHeb2zsmm131vcaE5UlrC7qVTNya2q9kRf8pn9elZNal7/YXX4z+d0NXkndXlI9e8jp84+Kb978zn0vXn5DQl6FZG3z24vDxg05n7+kJYuc0c/NfJeVOELTpNN3AcxuVTce4gWc21teLd7Zqgam5dSfYDdpOw9i+k2t7vlm1b5nSxsaacQq73nZzs1qpO+nMez8oF4vr5sdLyYGWVAjsLbded5ubcUy0OIq5Zz75WRLgVBrG7D/q7K1NSzIKKp0kqDyyD44dsnKxXC6VyuXS+t2Nu/eKxfmRGcWIVezRSMSpf2jxijm1czfwsnJR/f+HJdWVV1Pb2pEZ+2OrKl+eGhnLu9L6//YdZ2K/g/U/rfKXpHe7iy8rrv9Xk3dXs+p/Ri5GJl5h3BIrY/5sPwtxRkbP9EKHeqwH6qijPT09hbaNzLVTaeUcfjblqClXgTy5aqgSzzHdOUYbWte6inpfW6opkFFNrupyFGhXgdpy4k+ULV+OKmrLky+jVdm6JaOSNrShNRk5KmhXnrbV1Kaqqui/YRju61G839cm5Kg0qJQRsDQYVJ7QUlb9//nHyee0W/+L1P/XVfI5WEpePp8UA3wNhN3r/xldO5tsAAAAAADAWbDi375b8d/u35IUqubWnWL2CovnmR0AAAAAADgNlsIlXZEVXf9LekvWlOt/AAAAAADwyrHie+wsSSvxl/qt/p1QJ/klwNw5pAgAAAAAAF5SfOf/1UUpjAetuCZrput/AAAAAADwCvj9wBj78+kYu2H6Z/2cpKC1ZP3930vyF6yj1s73rINKtKRyMJeLQ0a+AdCuXbaCPyUD9cbj9S5Kit/ZzhWr21t3EMzeuINf7I+O9Z8OBZ+M9Wv5xxJYnBts4FgCF7ojBVtRz+vz3Xf6RNffHYp9eJhTvCTpZaXm1p2C7dXvl1SpXMi1nZ32r548+rXk97Zz/1Fnr/DBR52HcS5H0ayjgyiPj9N0/rbY3XXDucQv/Vyex+MtxPdcjBvdeFm1tMs/NBsrVtxvMd3+OVUOcv1jlLn9x/r8rW4kx+zGShK7ctgbcT/a/ny0/aVCfMiGtt5fsPpZlI5v+bgDkZFFPs7iZhJzc/Vm8pLmF7WTs/Lfn5PKhdFjMJRFeTCL6fvC+s/IvpiURXdfrEVZfBY1lJHF2mxZjBwRAPiq7PerUDyI+cgY+2l5SE9qX6rujKnuw71Y7w1X9+d/DsN4hTlpvvu3iYm95BWd0VetuA4tKj6xzl8eOaOnW1O5kFfGGb34EtUt6uuv/WcgddMeyeJ/YRjeL8X9/vFYVf00WuHTzH6DerLb7zw/+EU8AH7kw70P956Uy2vrxXeKxbtlLcSb0X2ZE7UHADBi+jN2pkZY7+h6EnH94b/eTqaGKt63e18pKOgDfaSOHup2+giBa+NbXRn4GsLt5KpVA1et5uKb95el47El3c68qotr6UBsuRe7oHSV4Urdj10746MAAMD5ujGlDo+v//mh+n9bq0nE6uWx190r3Wt5xbW8e3Xcu6TPqrml6cm/d5p7AgCA14fjf2GttH9n+b7ber+0sVGqtLcc43v2T4zvVjcd4zbbjm9vVZqbjmn5Xtuzvbpp+Vpyq05ggu1Wy/Pbpub5puUF7k785HfTffR74DQqzbZrB626UwkcY3vNdsVum6ob2Ka1/aO6G2w5frxy0HJst+balbbrNU3gbfu2UzAmcJyBQLfqNNtuzY0mm6blu42Kv2t+6tW3G46pOoHtu622lzSY9uU2a57fiJstKJz5QYcAAHwTPXtx+PhBp7P39PjEcnRpnsw5UkbM6MTimAYZIwgAgK+ZfrmeYaXeN/P1WXgmWQEAAAAAAAAAAAAAAAAAAAAAgEHTb+mbcWJh3M2CUm/OLy905+g36t9iONKOpdNObJaJ3KxrpbdEHD7+fELwcm9OuvsHY47OdLvyA33981vSG/EiJXPmx62Vz27Qmt7p8oSDe8KJuWgHnTT4h/vJHs2MiRaOXbTUOxbzp//PIZp48peMRWEYhpNXXxreh4uTNnB4Yl7S08WXOATnfy4CcL7+HwAA//9bUjR2")
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'})
syz_usb_connect$uac1(0x2, 0x90, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109027e0003010000000904000000010100000a2401e700000201020a2408000f0000000000090401000001020000090401010101020000090501092000ff080a072501800908000904020000010200000904020101010200000e2402010903bd02bcad197504a207240100000000090502"], 0x0)

1m5.34948482s ago: executing program 4 (id=157):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRESDEC, @ANYRES8=0x0, @ANYRES64, @ANYBLOB="01ce6671a3b30f673148672100038bbb4413ea284b892438cdddda3da4c78d940655fbd68a286059c5766f98f85fb413503eaf8c90a24dda1e09f68cd741168d69dae50652ca7b67c5b0a27ab80ff9afa5000443de8c748e1d5beabee7c1346b215f641ae190d56ea4ab81bacd909929deb5757040e8d5b2752ea779c30f600bd516a68d881e7fc7289826d49e35134a94e27f115c8195a0f152cbd840ffdb008356c72319cceb43ccb1280556efdf0fdf582fd3cfc830dff1787f000000b7400f5aef57b6dcbfde7af6012383adb085c40e4c295c2a3be750a42400e58523d24b8eecd75caabcee22347bdb78b72b400d080a044ebde5d39ad91ff0ef75aa244381cf00cd6fe9b9a92a9968104bf02481022af426853287e521a4e3cfe480f984efcea1359ff932ebd3bc75aefea41074799f3502a7472a6686b4011a41d7f0cfb25b3dc3077b4e8ded17cfff2b1d59bc12f637c36690f5ca91ee999ec138f6ce66522e652939a37435edb78f9ae18489f9d2b73c81609399f0d123f1721171bd72c012623f04d8965d3e5785d057c15798ab36af821c9b308731422ba3858b9895ace14068ea58f8cb6060c205caf209a73628eff5b9270a4a55c2d7fc59a4fe6e023bd424d8b010e2232d1b2e6ca603b466b2c82afff4a8cc469e8664d54769fc97df122b3ff8c34354dad46f900eaf6e72e538c0595caa056984ab8974af7cdae5bde6a12f412fe2a876aa191e78e91fbf780e2f4a20f57d41376b29f990ce63aa6edf622d2203fee37df269abf869d13b175852b775fff70491d1e5d1311b7eef954a101ddb98c5ba2b312528485ece7aff23cc6fee599daea0fca71a5970cf0fc82b49640cc3fabbc401dead4f83aa0c4072a9e98ab5afb790be17961fc073e2f8f800000000000000005089d6db5ad893ee9b22b9250d01980952d0a3e0076c877556fa43f90cb574fd6ad67398ac4d9f8ff4e3ef09f99220928602523adc2289b51328ac152bd7edc66d4e962cbc2d2b0c5f8e48384eff563a10787b0199642385e811504e7168804114842d51f42dd6937515fa64b2fd14ef427072c6556b99171bd00165a9aada7173f001679ac791ee67188c670f583f7b1f8df68b97f4dcb5652f2b13aa941b7ff56c48fb7162e91ef53c70938a92e4bf55d65319f74766a309722f767fc8f3db2a194a2f098336601be2edcbcc9b562f2fc64e2deff9a16e84f1e8bc5fb82c91f4d10e34f5a093fc4fcbdb89342274857c8e6aa8864b3214f51b9e515bf645235007cede80ff5931bff340780a3b43bc0466340c195a515f779d0333dd467bb665508d9c89e18e86d1975e273f937e3bd1", @ANYRES8=0x0, @ANYRES32=0x0], 0x1, 0x1e9, &(0x7f0000000980)="$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")

1m5.114040359s ago: executing program 2 (id=159):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000100000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x3, 0x0, &(0x7f00002bf000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$inet6(0xa, 0x803, 0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$pppoe(0x18, 0x1, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
syz_init_net_socket$ax25(0x3, 0x3, 0xca)
pipe(&(0x7f0000000100))
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000580)=ANY=[], 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r3 = openat$cgroup_freezer_state(r2, &(0x7f00000000c0), 0x2, 0x0)
write$cgroup_freezer_state(r3, &(0x7f0000000400)='FROZEN\x00', 0x7)
mkdirat$cgroup(r2, &(0x7f0000000200)='syz0\x00', 0x1ff)

1m4.583670687s ago: executing program 4 (id=160):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, <r2=>0x0, <r3=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, r2, r3, 0x100, 0x0, 0x9, 0x40, {0x3, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffff0000, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}})

1m3.748434394s ago: executing program 2 (id=162):
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
mkdirat(0xffffffffffffffff, 0x0, 0x180)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
r0 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804165000000000003d09022400010000c04009040000010300000009210900000122a000090581034000000000"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
flock(0xffffffffffffffff, 0x1)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='freezer.parent_freezing\x00', 0x275a, 0x0)
fchmod(r1, 0x20049549e2a2d659)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000380), 0x0, 0x1)
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, 0x0, 0x0, {0x2, 0xf0, 0x2}}, 0x18)
capset(&(0x7f0000000080)={0x20080522}, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0)

1m3.523477664s ago: executing program 4 (id=163):
r0 = mq_open(&(0x7f0000000980)='grpquota', 0x42, 0x120, &(0x7f0000000a80)={0x0, 0x3, 0x2, 0xfe3b})
mq_timedsend(r0, &(0x7f00000014c0)="f4bd1d", 0x3, 0x4, 0x0)

1m1.805928127s ago: executing program 33 (id=163):
r0 = mq_open(&(0x7f0000000980)='grpquota', 0x42, 0x120, &(0x7f0000000a80)={0x0, 0x3, 0x2, 0xfe3b})
mq_timedsend(r0, &(0x7f00000014c0)="f4bd1d", 0x3, 0x4, 0x0)

58.433214844s ago: executing program 2 (id=170):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRESDEC, @ANYRES8=0x0, @ANYRES64, @ANYBLOB="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", @ANYRES8=0x0, @ANYRES32=0x0], 0x1, 0x1e9, &(0x7f0000000980)="$eJzslc1qU0EUx39z76RpNIuuXRUsthttcwviG9gH8AEM6bUWb/zoDWhCweimGxfiSxR8CheC7l2ICG7qQkEXFVcVicydM+OEBGKlCoX5Qzgfcz5z55y5Wd4r68DPw90OC1RQNHmvFBpYVlZ3NGfpN6EjwSdt5Zbonwv9KLTsD948sezgVrso8p2yP4NRCmbZFCMsI+kZN9JTkjnLmaFfPx7XKKYaJ8Af9XMijMk2cdRLbUuTXk/HNPVpNuLLfyj+75nFY9wb26llvjfHr8Tnky6sxr/uHbzmR3P2Z3r3zH7OqTapuDcmJuW0McmxvEpkfZVXHyV8rYS3h7sdw1yXLWZ0m/bnRqKyMcLLwOachiGolJGPo6ttCcvAaq97d7XsDy5ud9tb+VZ+O8vWL6+9OisjOnoI20W+poIyzFDj9hJg5rQRnNeAD7/PhwRQQWkGZ0DJzvUh3XJeOR84NiAJfMMYNu4Ln78uupQu17jAPHB/qBYhw/5bS5homhumtQ0UqQgtHdQJRyTMVweXOneKzT0Uyrnto32M1gE1L2QimET5+hXf/p7QJaEbQveFHgh1b5d7k3QV4YtIK0OY40G719upHi/LeV3mddmCz5xIVvcaKldJnYiIiIiIiIiIU4JfAQAA//9E3UGM")

58.085263452s ago: executing program 2 (id=172):
r0 = syz_open_dev$vim2m(&(0x7f0000000680), 0x1f, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0)
pipe2(&(0x7f0000000000), 0x0)
pipe2(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}, 0x0, 0x0, <r2=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1)
ppoll(&(0x7f0000000080)=[{r0, 0x24c0}], 0x1, &(0x7f0000000100), 0x0, 0x0)
syz_mount_image$hfs(&(0x7f0000000440), &(0x7f0000000080)='./file1\x00', 0xacc90, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYRESHEX=r2, @ANYRES16=r2, @ANYRESOCT, @ANYRES32], 0x1, 0x292, &(0x7f00000006c0)="$eJzs3c9qE1EUx/HfnUSNtrTTPyKIC6kWXElbN+pGkO5cunElahOhGCpoBXVVXYsP4N5XEJ9BN9K14M6VD9CVkXvmTjNpZpo0JJ3Efj+QMOncc++58yczJyVEAE6su+u/Pt/47R9Oqqgi6bYUSapJVUnndaH2amt7c7vZqB/WUcUi/MMpiXRdbTa2GnmhPs4igti/qmo6+zeMRu1n2RlgHNjZnyOSzoSz09bXjj2z0dgpO4GSuT3t6bVmys4DAFCucP2PwnV+Oty/R5G0HC77dv3/20pM+gV0r+wERqa77Mpt1b7+W5XVcn7/ztqqdr1nffn1UVolDpLRadmRtduZwP4oty7nRlku0dmnm83G9Y3nzXqk97oTZJot2nM9OXRT2WzfdXe91OdGyuntaKZsDqf8HNYK8l/Q12GO2Jv75n64hy7WJ9X37/+qLed3k+2p+EApkOS/UtyjzTJOWhXMcs4GuRhGCPJmeS9dqKigIlF6RM2p8wOCuFeeFjV/ICqZ3apaRYNZ1EJu1FqPsRYPRrWP5uLIUXMf3QO3pD/6ovXM/X/kt/ayOs//4k6sZTgyDp1P1VrG9sYUzrqdS7kto0FnhAF80BPd1MzLN2+fPW42Gy9YOEEL6UGQWeXfqMpPrJSFavfWGNaC+t6q6S458hD5Oy6d0+DJH/cbEsrQ3un9tf8+Gxb438z/wt93uaT+y9QrK3az5p/iQ6qRVq/OMz2uFtQG8/Z8rriC6+Dss/up4gqur5pL0pVr0tV+RkzEmj9a1Tje3Lp29YjP/wEAAAAAAAAAAAAAAAAAACbN8L7wUCv86kLZcwQAAAAAAAAAAAAAAAAAAAAAYNKN3e//3lfyit//BUbuXwAAAP//LdJ4VA==")
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
chdir(&(0x7f0000000040)='./file1\x00')
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x9, 0x1010, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)

51.853749628s ago: executing program 2 (id=180):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = mq_open(&(0x7f0000000980)='grpquota', 0x42, 0x120, &(0x7f0000000a80)={0x0, 0x3, 0x2, 0xfe3b})
mq_timedsend(r3, &(0x7f00000014c0)="f4bd1d", 0x3, 0x4, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0x144, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@mcast2, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x1c}, {0x0, 0x0, 0x0, 0xfffffff800000003, 0x0, 0x0, 0xffffffffffffffd}, {0x0, 0x4}, {}, 0x0, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x1}}]}, 0x144}, 0x1, 0x0, 0x0, 0x4004050}, 0x8000)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
dup(r5)
clock_gettime(0x0, &(0x7f0000001a80))
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r6, 0x0, r6)

51.446352947s ago: executing program 34 (id=180):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = mq_open(&(0x7f0000000980)='grpquota', 0x42, 0x120, &(0x7f0000000a80)={0x0, 0x3, 0x2, 0xfe3b})
mq_timedsend(r3, &(0x7f00000014c0)="f4bd1d", 0x3, 0x4, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0x144, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@mcast2, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x1c}, {0x0, 0x0, 0x0, 0xfffffff800000003, 0x0, 0x0, 0xffffffffffffffd}, {0x0, 0x4}, {}, 0x0, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x1}}]}, 0x144}, 0x1, 0x0, 0x0, 0x4004050}, 0x8000)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
dup(r5)
clock_gettime(0x0, &(0x7f0000001a80))
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r6, 0x0, r6)

14.024402054s ago: executing program 1 (id=221):
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0)
io_setup(0x1, &(0x7f0000000b80)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0)
signalfd4(r2, &(0x7f00000001c0), 0x8, 0x0)

12.98414453s ago: executing program 1 (id=223):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[<r4=>0x0], 0x1})
r5 = syz_open_procfs(0x0, 0x0)
preadv2(r5, 0x0, 0x0, 0x0, 0x0, 0x0)
read$FUSE(r5, &(0x7f0000012400)={0x2020}, 0x2020)
ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000003c0)={r4, <r6=>0x0, <r7=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, r6, r7, 0x100, 0x0, 0x9, 0x40, {0x3, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffff0000, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}})
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0)

11.795206445s ago: executing program 1 (id=224):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[<r4=>0x0], 0x1})
r5 = syz_open_procfs(0x0, 0x0)
preadv2(r5, 0x0, 0x0, 0x0, 0x0, 0x0)
read$FUSE(r5, &(0x7f0000012400)={0x2020}, 0x2020)
ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000003c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0)

11.351631514s ago: executing program 3 (id=225):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = syz_open_dev$usbfs(0x0, 0x75, 0x101301)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
creat(&(0x7f0000000440)='./file0/file0\x00', 0x188)
lsetxattr$security_capability(&(0x7f0000000040)='./file0/file0\x00', 0x0, &(0x7f0000000600)=@v3={0x3000000, [{0x4, 0x3}, {0xffff, 0xc4}]}, 0x18, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
ioctl$USBDEVFS_SUBMITURB(r3, 0xc0185500, 0x0)
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRESDEC, @ANYRES8=0x0, @ANYRES64, @ANYBLOB="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", @ANYRES8=0x0, @ANYRES32=0x0], 0x1, 0x1e9, &(0x7f0000000980)="$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")

10.50353299s ago: executing program 1 (id=226):
userfaultfd(0x80001)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000a40)={r3, r3, r3}, 0x0, 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x1)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000180))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
truncate(&(0x7f0000000000)='./file1\x00', 0x0)
memfd_secret(0x0)

8.140778262s ago: executing program 3 (id=227):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
socket$inet6_sctp(0xa, 0x801, 0x84)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x4008880)
bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000)=r1, 0x4)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)

6.966492187s ago: executing program 3 (id=228):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_open_dev$usbfs(0x0, 0x75, 0x101301)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
creat(&(0x7f0000000440)='./file0/file0\x00', 0x188)
lsetxattr$security_capability(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100), &(0x7f0000000600)=@v3={0x3000000, [{0x4, 0x3}, {0xffff, 0xc4}]}, 0x18, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRESDEC, @ANYRES8=0x0, @ANYRES64, @ANYBLOB="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", @ANYRES8=0x0, @ANYRES32=0x0], 0x1, 0x1e9, &(0x7f0000000980)="$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")

4.537707447s ago: executing program 3 (id=229):
r0 = syz_open_dev$vim2m(&(0x7f0000000680), 0x1f, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0)
pipe2(&(0x7f0000000000), 0x0)
pipe2(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}, 0x0, 0x0, <r2=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1)
ppoll(&(0x7f0000000080)=[{r0, 0x24c0}], 0x1, &(0x7f0000000100), 0x0, 0x0)
syz_mount_image$hfs(&(0x7f0000000440), &(0x7f0000000080)='./file1\x00', 0xacc90, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYRESHEX=r2, @ANYRES16=r2, @ANYRESOCT, @ANYRES32], 0x1, 0x292, &(0x7f00000006c0)="$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")
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)

3.540932774s ago: executing program 3 (id=230):
socket$rds(0x15, 0x5, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$xdp(0x2c, 0x3, 0x0)
close(r0)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2008480, &(0x7f0000000000), 0x0, 0x790, &(0x7f0000001040)="$eJzs3c9rHGUfAPDvbJJuk/Z9kxde0HoKCBoo3ZgaWwUPFQ8iWCjo2XbZbEPNJluym9KEgC0iehFURAS99OyPihev/rjqf+FBWqqmxYoHicxmt902u+mmzW5C8/nAZJ9nZnaf57vPzDPP7AyTAHat0fRPJuJARLyfRAzX5ycRMVBL9UccW1vv5spyIZ2SWF199fekts6NleVCNL0nta+eeTQifng74mBmfbmVxaWZfKlUnK/nx6uzZ8cri0uHzszmp4vTxbkjE5OTh48+c/TI1sX6589L+69+8NKTXx37+61HLr/3Y5IGVtccx1YZjdH6dzLQVNKaF7e6sG2W3GuF5d7Ug81Jd82+tb08DsRw9NVSbQz2smYAQLe8GRGrAMAukzj+A8Au0/gd4MbKcqExbe8vEr117YWI2LsWf+P65tqS/vo1u72166BDN5I7rowkETGyBeWPRsRn377+RTpFl65DArRy4WJEnBoZXd//J+vuWdispzZauJqtvYzeNVv/B73zXTr+ebbV+C9za/wTLcY/2Rb77v249/6fubIFxbSVjv+eb7q37WZT/HUjffXcf2pjvoHk9JlSMe3b/hsRYzGQTfMTtVVb3wU1dv2f6+3Kbx7//fHhG5+n5aevt9fIXOnP3vmeqXw1/6BxN1y7GPFYf6v4k1vtn7QZ/57osIyXn3v303bL0vjTeBvT+vi7a/VSxBMt2/92WyYb3p84XtscxhsbRQtf//LJULvym9s/ndLyG+cCvZC2/9DG8Y8kzfdrVjZfxk+Xhr9vt+ze8bfe/vckr9XSe+rzzuer1fmJiD3JK+vnH7793ka+sX4a/9jjrff/jbb/9JzwVIfx91/97cv7j7+70vinNtX+m09cvjnT1678ztp/spYaq8/ppP/rtIIP8t0BAAAAAAAAAAAAAAAAAAAAAAAAQKcyEbE/kkzuVjqTyeUi9n38Tvw/hjKlcqV68HR5YW4qXVZ7/mmm8ajL4abnoU7Un4ffyB++K/90RPwvIj7KDtbyuUK5NLXdwQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA3b42//8/9Wt2u2sHAHTN3g2XftOzegAAvbPx8R8AeBht7vg/2LV6AAC94/wfAHafjo//p7pbDwCgd5z/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0GUnjh9Pp9W/VpYLaX7q3OLCTPncoaliZSY3u1DIFcrzZ3PT5fJ0qZgrlGfbftCFtZdSuXx2MuYWzo9Xi5XqeGVx6eRseWGuevLMbH66eLI40LPIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBzlcWlmXypVJx/WBPZrfmcwR0Szk5J9MeOqIZE1xLNvcTg9nVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADvcvwEAAP//5pAsrA==")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x0, [0x0, 0x8000000], [0x8200, 0x1]}}})
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000440)=0x2, 0x4)
fcntl$setsig(r1, 0xa, 0x21)
creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2481, 0x0)
ioctl$BLKRRPART(r6, 0x125f, 0x0)

2.287111299s ago: executing program 3 (id=231):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1, 0x4436, &(0x7f0000004480)="$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")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0)
r1 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0)
fallocate(r1, 0x0, 0x0, 0x1000f4)
getgroups(0x27, &(0x7f0000002540))
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000280)={0x3000, 0xffffffff000, 0x0, 0x0, 0x2})

1.215496835s ago: executing program 1 (id=232):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[<r4=>0x0], 0x1})
r5 = syz_open_procfs(0x0, 0x0)
preadv2(r5, 0x0, 0x0, 0x0, 0x0, 0x0)
read$FUSE(r5, &(0x7f0000012400)={0x2020}, 0x2020)
ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000003c0)={r4, <r6=>0x0, <r7=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, r6, r7, 0x100, 0x0, 0x9, 0x40, {0x3, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffff0000, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}})
readv(0xffffffffffffffff, &(0x7f0000000080), 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0)

1.071811604s ago: executing program 7 (id=181):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000100000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x3, 0x0, &(0x7f00002bf000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$inet6(0xa, 0x803, 0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$pppoe(0x18, 0x1, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
syz_init_net_socket$ax25(0x3, 0x3, 0xca)
pipe(&(0x7f0000000100))
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r3 = openat$cgroup_freezer_state(r2, &(0x7f00000000c0), 0x2, 0x0)
write$cgroup_freezer_state(r3, &(0x7f0000000400)='FROZEN\x00', 0x7)
mkdirat$cgroup(r2, &(0x7f0000000200)='syz0\x00', 0x1ff)

483.930922ms ago: executing program 7 (id=233):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1})
r4 = syz_open_procfs(0x0, 0x0)
preadv2(r4, 0x0, 0x0, 0x0, 0x0, 0x0)
read$FUSE(r4, &(0x7f0000012400)={0x2020}, 0x2020)
ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x40, {0x3, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffff0000, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}})
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0)

0s ago: executing program 1 (id=234):
socket$rds(0x15, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
close(0xffffffffffffffff)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2008480, &(0x7f0000000000), 0x0, 0x790, &(0x7f0000001040)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x0, [0x0, 0x8000000], [0x8200, 0x1]}}})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.203' (ED25519) to the list of known hosts.
[   66.081674][ T4238] cgroup: Unknown subsys name 'net'
[   66.188982][ T4238] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   67.641478][ T4238] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   69.631227][ T4257] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   69.633549][ T4255] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   69.647001][ T4255] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   69.654936][ T4255] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   69.662748][ T4255] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   69.670895][ T4255] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   69.678033][ T4255] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   69.686831][ T4255] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   69.695912][ T4255] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   69.709119][ T4263] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   69.709807][ T4266] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   69.717322][ T4263] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   69.725059][ T4266] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   69.731549][ T4263] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   69.738282][ T4266] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   69.753245][ T4263] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   69.753724][ T4266] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   69.768384][ T4252] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   69.768470][ T4266] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   69.778781][ T4252] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   69.786473][ T4266] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   69.793258][ T4267] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   69.800219][ T4266] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   69.814513][ T4266] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   69.822000][ T4266] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   69.829274][ T4266] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   69.837331][ T4266] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   69.875247][ T4268] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   69.911163][ T4268] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   69.918584][ T4268] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   70.225069][ T4258] chnl_net:caif_netlink_parms(): no params data found
[   70.318163][ T4261] chnl_net:caif_netlink_parms(): no params data found
[   70.406117][ T4250] chnl_net:caif_netlink_parms(): no params data found
[   70.454705][ T4258] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.463311][ T4258] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.472841][ T4258] device bridge_slave_0 entered promiscuous mode
[   70.485892][ T4249] chnl_net:caif_netlink_parms(): no params data found
[   70.515128][ T4258] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.522442][ T4258] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.530457][ T4258] device bridge_slave_1 entered promiscuous mode
[   70.545995][ T4262] chnl_net:caif_netlink_parms(): no params data found
[   70.614199][ T4261] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.621474][ T4261] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.629469][ T4261] device bridge_slave_0 entered promiscuous mode
[   70.666439][ T4261] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.673660][ T4261] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.682296][ T4261] device bridge_slave_1 entered promiscuous mode
[   70.691881][ T4258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.727559][ T4258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.737145][ T4250] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.744822][ T4250] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.753105][ T4250] device bridge_slave_0 entered promiscuous mode
[   70.797719][ T4250] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.805671][ T4250] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.813786][ T4250] device bridge_slave_1 entered promiscuous mode
[   70.832869][ T4261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.844592][ T4258] team0: Port device team_slave_0 added
[   70.853080][ T4258] team0: Port device team_slave_1 added
[   70.885902][ T4261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.911804][ T4249] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.918902][ T4249] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.927103][ T4249] device bridge_slave_0 entered promiscuous mode
[   70.959929][ T4250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.969715][ T4249] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.978602][ T4249] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.987181][ T4249] device bridge_slave_1 entered promiscuous mode
[   70.995638][ T4262] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.005335][ T4262] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.013778][ T4262] device bridge_slave_0 entered promiscuous mode
[   71.029177][ T4258] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.036209][ T4258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.065395][ T4258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.080609][ T4250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.090240][ T4258] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.097294][ T4258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.123673][ T4258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.142322][ T4262] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.149488][ T4262] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.158692][ T4262] device bridge_slave_1 entered promiscuous mode
[   71.168351][ T4261] team0: Port device team_slave_0 added
[   71.206487][ T4249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.224737][ T4261] team0: Port device team_slave_1 added
[   71.241049][ T4250] team0: Port device team_slave_0 added
[   71.256490][ T4249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.293939][ T4250] team0: Port device team_slave_1 added
[   71.303214][ T4258] device hsr_slave_0 entered promiscuous mode
[   71.310006][ T4258] device hsr_slave_1 entered promiscuous mode
[   71.326342][ T4262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.365105][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[   71.366177][ T4262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.371745][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[   71.397423][ T4261] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.406111][ T4261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.432401][ T4261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.463241][ T4249] team0: Port device team_slave_0 added
[   71.469703][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.477198][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.503838][ T4250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.522327][ T4261] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.529286][ T4261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.555672][ T4261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.582678][ T4249] team0: Port device team_slave_1 added
[   71.593976][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.601066][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.628358][ T4250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.642057][ T4262] team0: Port device team_slave_0 added
[   71.679117][ T4262] team0: Port device team_slave_1 added
[   71.698354][ T4249] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.705864][ T4249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.732968][ T4249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.749511][ T4249] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.756817][ T4249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.782920][ T4249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.814897][ T4250] device hsr_slave_0 entered promiscuous mode
[   71.821660][ T4250] device hsr_slave_1 entered promiscuous mode
[   71.828254][ T4250] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   71.836103][ T4250] Cannot create hsr debugfs directory
[   71.879166][ T4261] device hsr_slave_0 entered promiscuous mode
[   71.886533][ T4261] device hsr_slave_1 entered promiscuous mode
[   71.893978][ T4261] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   71.901727][ T4261] Cannot create hsr debugfs directory
[   71.913045][ T4262] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.920012][ T4262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.920946][ T4268] Bluetooth: hci2: command 0x0409 tx timeout
[   71.946154][ T4259] Bluetooth: hci3: command 0x0409 tx timeout
[   71.952728][ T4263] Bluetooth: hci0: command 0x0409 tx timeout
[   71.958358][ T4252] Bluetooth: hci1: command 0x0409 tx timeout
[   71.971945][ T4262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.000703][ T4252] Bluetooth: hci4: command 0x0409 tx timeout
[   72.025326][ T4249] device hsr_slave_0 entered promiscuous mode
[   72.032125][ T4249] device hsr_slave_1 entered promiscuous mode
[   72.038573][ T4249] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   72.046246][ T4249] Cannot create hsr debugfs directory
[   72.061117][ T4262] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.068112][ T4262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.095473][ T4262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.227611][ T4262] device hsr_slave_0 entered promiscuous mode
[   72.234905][ T4262] device hsr_slave_1 entered promiscuous mode
[   72.241446][ T4262] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   72.249005][ T4262] Cannot create hsr debugfs directory
[   72.446623][ T4258] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   72.461308][ T4258] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   72.487630][ T4258] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   72.505206][ T4258] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   72.584620][ T4250] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   72.604788][ T4250] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   72.617072][ T4250] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   72.640042][ T4250] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   72.693978][ T4258] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.706113][ T4261] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   72.724540][ T4261] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   72.733963][ T4261] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   72.744405][ T4261] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   72.776349][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   72.786635][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   72.804999][ T4258] 8021q: adding VLAN 0 to HW filter on device team0
[   72.828221][ T4249] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   72.840624][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   72.849391][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   72.860310][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.867696][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.885346][ T4249] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   72.896814][ T4249] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   72.908210][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   72.928750][ T4249] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   72.963284][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   72.975090][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   72.984462][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.991587][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.999321][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   73.021711][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   73.063128][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   73.076626][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   73.086291][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   73.121365][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   73.129993][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   73.146106][ T4258] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   73.158974][ T4258] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   73.190782][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   73.199811][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   73.209051][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   73.217544][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   73.238807][ T4250] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.247371][ T4262] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   73.275101][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   73.304380][ T4262] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   73.326405][ T4250] 8021q: adding VLAN 0 to HW filter on device team0
[   73.345884][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   73.354804][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   73.363368][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   73.372443][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   73.381925][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.389059][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.397664][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   73.406805][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   73.415451][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.422564][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.430409][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   73.439102][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   73.455279][ T4262] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   73.467449][ T4261] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.496682][ T4262] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   73.513560][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   73.524235][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   73.534073][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   73.544263][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   73.554893][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   73.565243][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   73.574608][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   73.614563][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   73.623094][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   73.632706][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   73.645342][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   73.656606][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   73.665225][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   73.676326][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   73.684251][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   73.708762][ T4249] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.726629][ T4261] 8021q: adding VLAN 0 to HW filter on device team0
[   73.748390][ T4258] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.777707][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   73.786566][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   73.795967][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   73.806078][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   73.815393][ T4296] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.822682][ T4296] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.845064][ T4249] 8021q: adding VLAN 0 to HW filter on device team0
[   73.867874][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   73.877570][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   73.887049][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   73.896336][ T4296] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.903536][ T4296] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.911900][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   73.955103][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   73.965437][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   73.978963][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   73.987959][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   73.998467][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   74.007281][ T4252] Bluetooth: hci2: command 0x041b tx timeout
[   74.007324][ T4252] Bluetooth: hci0: command 0x041b tx timeout
[   74.010736][ T4252] Bluetooth: hci1: command 0x041b tx timeout
[   74.014014][ T4259] Bluetooth: hci3: command 0x041b tx timeout
[   74.032505][ T4296] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.039616][ T4296] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.047937][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   74.057180][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   74.066255][ T4296] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.073620][ T4296] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.082467][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   74.090778][ T4259] Bluetooth: hci4: command 0x041b tx timeout
[   74.097983][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   74.116467][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   74.124562][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   74.145237][ T4261] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   74.156523][ T4261] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   74.189621][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   74.199857][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   74.209129][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   74.218183][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   74.228964][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   74.237469][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   74.247922][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   74.257257][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   74.267565][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   74.276765][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   74.291774][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   74.301349][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   74.310030][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   74.318400][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   74.327968][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   74.337196][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   74.376252][ T4249] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   74.396299][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   74.414477][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   74.423545][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   74.432116][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   74.440794][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   74.460425][ T4262] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.485791][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   74.494560][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   74.507981][ T4250] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.521105][ T4258] device veth0_vlan entered promiscuous mode
[   74.541424][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   74.556804][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   74.593750][ T4258] device veth1_vlan entered promiscuous mode
[   74.617151][ T4262] 8021q: adding VLAN 0 to HW filter on device team0
[   74.658262][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   74.674121][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   74.687302][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   74.697786][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   74.707431][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   74.732892][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   74.743317][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   74.753680][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   74.762879][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.770029][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.785317][ T4250] device veth0_vlan entered promiscuous mode
[   74.820645][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   74.829266][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   74.842350][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   74.853715][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   74.863987][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   74.876735][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.884075][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.901269][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   74.913036][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   74.922655][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   74.931784][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   74.940452][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   74.949082][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   74.958785][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   74.967612][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   74.977311][ T4250] device veth1_vlan entered promiscuous mode
[   74.988633][ T4258] device veth0_macvtap entered promiscuous mode
[   75.010448][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   75.019643][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   75.027922][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   75.036532][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   75.052733][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   75.063119][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   75.076191][ T4261] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.094412][ T4249] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.122478][ T4258] device veth1_macvtap entered promiscuous mode
[   75.140782][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   75.149763][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   75.165538][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   75.176031][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   75.187387][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   75.196513][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   75.206484][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   75.231025][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   75.239329][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   75.256030][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   75.282986][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   75.304940][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   75.327669][ T4258] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.348544][ T4261] device veth0_vlan entered promiscuous mode
[   75.359909][ T4250] device veth0_macvtap entered promiscuous mode
[   75.375812][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   75.387414][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   75.401864][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   75.412341][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   75.422159][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   75.430881][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   75.444301][ T4258] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.462131][ T4261] device veth1_vlan entered promiscuous mode
[   75.473285][ T4250] device veth1_macvtap entered promiscuous mode
[   75.484209][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   75.493427][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   75.503080][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   75.516469][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   75.525065][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   75.539109][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   75.548316][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   75.559650][ T4258] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.568823][ T4258] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.577930][ T4258] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.587408][ T4258] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.646266][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.690252][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.722263][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.737608][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   75.754365][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   75.788757][ T4261] device veth0_macvtap entered promiscuous mode
[   75.816719][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   75.826171][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   75.835324][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   75.853796][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.868645][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.881303][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.898360][ T4261] device veth1_macvtap entered promiscuous mode
[   75.927275][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   75.935100][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.936323][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   75.949845][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.952892][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   75.977006][ T4250] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.986028][ T4250] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.995111][ T4250] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.005561][ T4250] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.030420][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   76.038133][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   76.048299][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   76.079546][ T4261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.094704][ T4261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.100164][ T4259] Bluetooth: hci1: command 0x040f tx timeout
[   76.105346][ T4268] Bluetooth: hci3: command 0x040f tx timeout
[   76.110805][ T4259] Bluetooth: hci0: command 0x040f tx timeout
[   76.116813][ T4268] Bluetooth: hci2: command 0x040f tx timeout
[   76.129183][ T4261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.139834][ T4261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.152530][ T4261] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.160925][ T4268] Bluetooth: hci4: command 0x040f tx timeout
[   76.176685][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   76.186811][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   76.195237][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   76.206102][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   76.215558][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   76.224286][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   76.234054][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   76.242479][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   76.259018][ T4261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.269923][ T4261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.281910][ T4261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.292726][ T4261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.306399][ T4261] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.317576][ T4249] device veth0_vlan entered promiscuous mode
[   76.330769][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   76.339521][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   76.375630][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.379661][ T4262] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.384375][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.412268][ T4261] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.423286][ T4261] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.432473][ T4261] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.441286][ T4261] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.474380][ T4249] device veth1_vlan entered promiscuous mode
[   76.491093][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   76.506812][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   76.557646][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   76.586807][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   76.616034][ T4311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.627902][ T4311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.676117][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   76.687629][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   76.707939][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   76.717363][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   76.741390][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   76.774512][ T4262] device veth0_vlan entered promiscuous mode
[   76.790714][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   76.800025][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   76.813569][ T4249] device veth0_macvtap entered promiscuous mode
[   76.843998][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.862664][ T4249] device veth1_macvtap entered promiscuous mode
[   76.877376][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.888609][ T4262] device veth1_vlan entered promiscuous mode
[   76.896316][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.906451][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.917235][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   76.929846][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   76.938388][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   76.946620][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   76.955715][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   76.991579][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   77.003383][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.004424][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.026722][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.028302][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.036896][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.045233][ T4297] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[   77.057243][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.073423][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.087079][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.106464][ T4249] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.125685][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   77.134540][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   77.144774][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   77.156186][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   77.165888][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   77.179059][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.197142][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.208750][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.224471][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.235366][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.252354][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.257382][ T4335] loop1: detected capacity change from 0 to 512
[   77.268572][ T4249] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.287637][ T4297] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   77.303077][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   77.319783][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   77.319890][ T4297] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   77.336962][ T4262] device veth0_macvtap entered promiscuous mode
[   77.340871][ T4262] device veth1_macvtap entered promiscuous mode
[   77.353851][ T4297] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[   77.376141][ T4249] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.378539][ T4297] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   77.385881][ T4249] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.404730][ T4249] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.413599][ T4249] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.424317][ T4297] usb 1-1: SerialNumber: syz
[   77.469229][ T4335] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   77.473048][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.499724][ T4335] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   77.510228][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.510250][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.510277][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.510289][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.510304][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.510316][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.510329][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.512681][ T4262] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.537951][ T4297] usb 1-1: 0:2 : does not exist
[   77.629461][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   77.644167][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   77.654023][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   77.664102][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   77.678898][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.692639][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.703408][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.714821][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.726826][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.737376][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.749171][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.772755][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.799815][ T4262] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.844326][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   77.873454][  T126] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   77.884101][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   77.895828][ T4250] EXT4-fs (loop1): unmounting filesystem.
[   77.908052][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   77.946647][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   77.949016][ T4262] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.964741][ T4262] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.126488][  T126] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   78.160417][ T4268] Bluetooth: hci0: command 0x0419 tx timeout
[   78.161753][ T4259] Bluetooth: hci1: command 0x0419 tx timeout
[   78.161772][ T4252] Bluetooth: hci3: command 0x0419 tx timeout
[   78.174703][ T4259] Bluetooth: hci2: command 0x0419 tx timeout
[   78.191045][  T126] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[   78.216043][  T126] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   78.240674][ T4252] Bluetooth: hci4: command 0x0419 tx timeout
[   78.281096][ T4262] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.290125][  T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.378446][ T4340] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   78.415294][ T4262] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.631618][ T4340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   78.642056][ T4340] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   78.720581][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   78.728800][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   78.738228][    T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!!
[   78.749938][    T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!!
[   79.589858][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   79.850470][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   79.900281][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   79.994632][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   80.277450][   T14] usb 1-1: USB disconnect, device number 2
[   80.284080][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.325509][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.395727][ T4351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.409931][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   80.448413][ T4351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.470469][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   80.527532][ T4344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.565833][ T4344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.591029][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   80.628683][ T4331] usb 3-1: USB disconnect, device number 2
[   80.636636][ T4351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.657328][ T4351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.668559][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   80.783272][ T4359] loop4: detected capacity change from 0 to 2048
[   80.862601][ T4359] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   81.761361][ T4268] Bluetooth: hci5: command 0xfc11 tx timeout
[   81.768235][ T4252] Bluetooth: hci5: Entering manufacturer mode failed (-110)
[   81.983745][ T4249] EXT4-fs (loop4): unmounting filesystem.
[   83.765187][ T4379] loop2: detected capacity change from 0 to 64
[   84.239261][ T4378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   84.374802][ T4251] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   84.971247][ T4390] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   85.913159][ T4395] loop0: detected capacity change from 0 to 64
[   87.376204][   T22] cfg80211: failed to load regulatory.db
[   87.524467][ T4251] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   87.630307][ T4299] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[   87.723777][ T4392] syz.0.15 uses obsolete (PF_INET,SOCK_PACKET)
[   87.857428][ T4299] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   87.890308][ T4299] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   87.924493][ T4299] usb 2-1: config 1 has no interface number 1
[   87.945155][ T4299] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0
[   87.975947][ T4299] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   88.014071][ T4299] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.030093][ T4299] usb 2-1: Product: syz
[   88.034427][ T4299] usb 2-1: Manufacturer: syz
[   88.039029][ T4299] usb 2-1: SerialNumber: syz
[   88.114934][ T4412] Bluetooth: MGMT ver 1.22
[   88.338381][ T4414] loop4: detected capacity change from 0 to 16
[   88.363410][ T4414] erofs: (device loop4): mounted with root inode @ nid 36.
[   88.411372][ T4414] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[   88.425595][ T4414] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -3 in[47, 4049] out[1851]
[   88.436713][ T4414] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117]
[   89.449719][ T4423] capability: warning: `syz.0.21' uses deprecated v2 capabilities in a way that may be insecure
[   89.899644][ T4299] usb 2-1: USB disconnect, device number 2
[   89.908051][ T4425] loop3: detected capacity change from 0 to 64
[   89.931679][ T4425] hfs: unable to parse mount options
[   91.433804][ T4434] device bridge1 entered promiscuous mode
[   92.233119][ T4437] loop2: detected capacity change from 0 to 512
[   92.258647][ T4437] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   92.273709][ T4251] udevd[4251]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   92.299573][ T4437] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   92.497612][ T4437] EXT4-fs (loop2): 1 truncate cleaned up
[   92.511717][ T4437] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   92.531396][ T4269] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   92.567696][   T26] audit: type=1800 audit(1738500724.700:2): pid=4437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.25" name="bus" dev="loop2" ino=18 res=0 errno=0
[   92.724763][ T4445] loop1: detected capacity change from 0 to 512
[   92.846274][ T4445] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   93.602642][ T4261] EXT4-fs (loop2): unmounting filesystem.
[   93.634518][ T4453] loop3: detected capacity change from 0 to 128
[   93.650155][ T4445] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   93.659804][ T4445] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   93.685247][ T4453] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   93.695906][ T4453] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   93.714781][ T4445] EXT4-fs error (device loop1): ext4_get_verity_descriptor_location:337: inode #15: comm syz.1.28: verity file corrupted; can't find descriptor
[   93.741517][ T4445] EXT4-fs (loop1): Remounting filesystem read-only
[   93.749757][ T4445] fs-verity (loop1, inode 15): Error -117 getting verity descriptor size
[   93.766570][ T4456] EXT4-fs error (device loop1): ext4_get_verity_descriptor_location:337: inode #15: comm syz.1.28: verity file corrupted; can't find descriptor
[   93.784979][ T4456] EXT4-fs (loop1): Remounting filesystem read-only
[   93.791908][ T4456] fs-verity (loop1, inode 15): Error -117 getting verity descriptor size
[   93.834156][ T4445] EXT4-fs error (device loop1): ext4_get_verity_descriptor_location:337: inode #15: comm syz.1.28: verity file corrupted; can't find descriptor
[   93.876983][ T4445] EXT4-fs (loop1): Remounting filesystem read-only
[   93.890707][ T4445] fs-verity (loop1, inode 15): Error -117 getting verity descriptor size
[   93.955669][ T4441] loop0: detected capacity change from 0 to 32768
[   93.975032][ T4441] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.26 (4441)
[   94.099422][ T4262] EXT4-fs (loop3): unmounting filesystem.
[   94.118517][ T4441] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   94.265161][ T4441] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[   94.311250][ T4441] BTRFS info (device loop0): using free space tree
[   95.566995][ T4441] BTRFS error (device loop0): open_ctree failed
[   95.721887][ T4484] loop4: detected capacity change from 0 to 2048
[   95.775553][ T4250] EXT4-fs (loop1): unmounting filesystem.
[   95.792386][ T4484] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   95.925722][ T4458] loop2: detected capacity change from 0 to 32768
[   95.957502][ T4458] =======================================================
[   95.957502][ T4458] WARNING: The mand mount option has been deprecated and
[   95.957502][ T4458]          and is ignored by this kernel. Remove the mand
[   95.957502][ T4458]          option from the mount to silence this warning.
[   95.957502][ T4458] =======================================================
[   96.317823][ T4499] loop1: detected capacity change from 0 to 2048
[   96.399992][ T4499] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   96.626485][ T4504] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4)
[   96.633275][ T4504] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   96.672555][ T4504] vhci_hcd vhci_hcd.0: Device attached
[   96.800590][ T4252] Bluetooth: hci4: command 0x0405 tx timeout
[   96.870263][ T4494] vhci_hcd: vhci_device speed not set
[   96.930199][ T4435] usb 1-1: new low-speed USB device number 3 using dummy_hcd
[   96.940379][ T4494] usb 33-1: new full-speed USB device number 2 using vhci_hcd
[   97.129661][ T4489] loop3: detected capacity change from 0 to 32768
[   97.139268][ T4435] usb 1-1: config 0 has no interfaces?
[   97.144093][ T4458] ERROR: (device loop2): dbAllocNext: Corrupt dmap page
[   97.144093][ T4458] 
[   97.144860][ T4435] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[   97.170287][ T4458] ialloc: diAlloc returned -5!
[   97.193763][ T4435] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.221025][ T4489] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[   97.229408][ T4489] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[   97.234360][ T4499] EXT4-fs error (device loop1): ext4_find_extent:936: inode #2: comm syz.1.35: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[   97.258277][ T4435] usb 1-1: config 0 descriptor??
[   97.305447][ T4499] EXT4-fs (loop1): Remounting filesystem read-only
[   97.313706][ T4499] EXT4-fs error (device loop1): ext4_find_extent:936: inode #2: comm syz.1.35: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[   97.414129][ T4499] EXT4-fs (loop1): Remounting filesystem read-only
[   97.436616][ T4489] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[   97.464056][ T4435] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[   97.474521][ T4435] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[   97.554699][ T4493] usb 1-1: USB disconnect, device number 3
[   97.572603][ T4505] vhci_hcd: connection reset by peer
[   97.583164][ T4351] vhci_hcd: stop threads
[   97.610836][ T4351] vhci_hcd: release socket
[   97.619676][ T4435] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 145ms
[   97.630303][ T4494] vhci_hcd: vhci_device speed not set
[   97.640250][ T4351] vhci_hcd: disconnect device
[   97.653375][ T4435] gfs2: fsid=syz:syz.0: jid=0: Done
[   97.680019][ T4489] gfs2: fsid=syz:syz.0: first mount done, others may mount
[   97.701426][ T4494] usb 33-1: device descriptor read/64, error -71
[   97.769195][ T4250] EXT4-fs (loop1): unmounting filesystem.
[   97.831536][ T4511] mmap: syz.2.37 (4511) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   97.893029][ T4249] EXT4-fs (loop4): unmounting filesystem.
[   97.924335][ T4494] vhci_hcd: vhci_device speed not set
[   99.146377][   T52] block nbd1: Attempted send on invalid socket
[   99.154416][   T52] I/O error, dev nbd1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[   99.171978][ T4518] qnx6: unable to read the first superblock
[   99.180897][   T52] block nbd1: Attempted send on invalid socket
[   99.187633][   T52] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[   99.197458][ T4518] qnx6: unable to read the first superblock
[   99.203451][ T4518] qnx6: unable to read the first superblock
[   99.510944][ T4435] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[   99.587134][ T4528] Zero length message leads to an empty skb
[  100.339558][ T4526] loop4: detected capacity change from 0 to 32768
[  100.349261][ T4526] (syz.4.39,4526,0):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "" or missing value
[  100.361250][ T4526] (syz.4.39,4526,0):ocfs2_fill_super:1176 ERROR: status = -22
[  100.412052][ T4251] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  100.929402][ T4435] usb 2-1: unable to get BOS descriptor or descriptor too short
[  100.949645][ T4435] usb 2-1: unable to read config index 0 descriptor/start: -71
[  100.974698][ T4435] usb 2-1: can't read configurations, error -71
[  101.028608][ T4533] loop2: detected capacity change from 0 to 32768
[  101.292013][ T4533] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  101.554723][ T4547] loop3: detected capacity change from 0 to 8
[  102.462218][   T26] audit: type=1800 audit(1738500734.600:3): pid=4533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.41" name="bus" dev="loop2" ino=17058 res=0 errno=0
[  102.560268][   T26] audit: type=1800 audit(1738500734.640:4): pid=4548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.41" name="bus" dev="loop2" ino=17058 res=0 errno=0
[  102.641367][ T4550] loop0: detected capacity change from 0 to 512
[  102.706402][   T26] audit: type=1800 audit(1738500734.750:5): pid=4533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.41" name="bus" dev="loop2" ino=17058 res=0 errno=0
[  102.850067][    C0] sched: RT throttling activated
[  102.891901][ T4550] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2186: inode #15: comm syz.0.47: corrupted in-inode xattr
[  102.955075][ T4550] EXT4-fs (loop0): Remounting filesystem read-only
[  103.000291][ T4550] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.47: couldn't read orphan inode 15 (err -117)
[  103.049936][ T4261] ocfs2: Unmounting device (7,2) on (node local)
[  103.082873][ T4550] EXT4-fs (loop0): Remounting filesystem read-only
[  103.118275][ T4550] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  103.463371][ T4544] loop1: detected capacity change from 0 to 32768
[  103.500328][ T4544] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.45 (4544)
[  103.530248][ T2117] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  103.584355][ T4544] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  103.598742][ T4557] syz.3.50 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  103.627434][ T4544] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  103.656307][ T4544] BTRFS info (device loop1): enabling disk space caching
[  103.670674][ T4544] BTRFS info (device loop1): turning off barriers
[  103.683242][ T4557] loop3: detected capacity change from 0 to 512
[  103.687552][ T4544] BTRFS info (device loop1): doing ref verification
[  103.707820][ T4544] BTRFS info (device loop1): use no compression
[  103.728113][ T4544] BTRFS info (device loop1): force clearing of disk cache
[  103.740203][ T2117] usb 1-1: Using ep0 maxpacket: 8
[  103.748722][ T2117] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 97, changing to 10
[  103.758570][ T4544] BTRFS info (device loop1): setting nodatacow, compression disabled
[  103.789003][ T4544] BTRFS info (device loop1): turning on barriers
[  103.795678][ T2117] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 25183, setting to 1024
[  103.817567][ T2117] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  103.834705][ T4544] BTRFS info (device loop1): doing ref verification
[  103.837010][ T2117] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.860639][ T4544] BTRFS info (device loop1): disk space caching is enabled
[  103.930253][ T4494] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  103.971913][ T4557] EXT4-fs (loop3): Test dummy encryption mode enabled
[  104.005162][ T4557] EXT4-fs error (device loop3): __ext4_iget:5055: inode #11: block 1: comm syz.3.50: invalid block
[  104.027522][ T4557] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.50: couldn't read orphan inode 11 (err -117)
[  104.046515][ T4557] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  104.120295][ T4494] usb 3-1: Using ep0 maxpacket: 8
[  104.127566][ T4494] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  104.217684][ T4544] BTRFS info (device loop1): enabling ssd optimizations
[  104.226596][ T4494] usb 3-1: config 179 has no interface number 0
[  104.264454][ T4544] BTRFS info (device loop1): rebuilding free space tree
[  104.270707][ T4554] loop4: detected capacity change from 0 to 40427
[  104.287589][ T4494] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10
[  104.305595][ T4554] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  104.347351][ T4494] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024
[  104.368663][ T4494] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  104.386320][ T4554] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  104.414937][ T4494] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  104.453994][ T4554] F2FS-fs (loop4): invalid crc value
[  104.465170][ T4494] usb 3-1: config 179 interface 65 has no altsetting 0
[  104.478870][ T4494] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  104.489204][ T4494] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.502021][ T4554] F2FS-fs (loop4): Found nat_bits in checkpoint
[  104.514247][ T4559] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  104.566038][ T4494] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input5
[  104.791979][ T4544] BTRFS info (device loop1): disabling free space tree
[  104.894389][ T4554] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  104.931995][ T4544] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  104.939522][ T4554] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  104.975385][ T4435] usb 3-1: USB disconnect, device number 3
[  104.975532][    C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  105.005000][ T4544] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  105.017957][ T4435] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  105.464436][ T4250] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  106.268721][ T2117] usb 1-1: string descriptor 0 read error: -71
[  106.287502][ T2117] hub 1-1:32.0: USB hub found
[  106.403568][ T2117] hub 1-1:32.0: config failed, can't read hub descriptor (err -22)
[  106.523912][ T4258] EXT4-fs (loop0): unmounting filesystem.
[  106.550305][ T4300] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  106.661172][ T2117] usb 1-1: USB disconnect, device number 4
[  106.783724][ T4300] usb 3-1: Using ep0 maxpacket: 8
[  106.795520][ T4300] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2
[  106.830351][ T4300] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.858831][ T4300] usb 3-1: Product: syz
[  106.864153][ T4300] usb 3-1: Manufacturer: syz
[  106.899413][ T4300] usb 3-1: SerialNumber: syz
[  106.923745][ T4300] usb 3-1: config 0 descriptor??
[  107.153555][ T4300] gspca_main: sunplus-2.14.0 probing 04a5:3003
[  107.292554][ T4262] EXT4-fs (loop3): unmounting filesystem.
[  107.531745][ T4596] loop1: detected capacity change from 0 to 32768
[  108.561297][ T4252] Bluetooth: hci5: sending frame failed (-49)
[  108.572424][ T4259] Bluetooth: hci5: Entering manufacturer mode failed (-49)
[  108.702705][ T4300] gspca_sunplus: reg_w_riv err -71
[  108.707964][ T4300] sunplus: probe of 3-1:0.0 failed with error -71
[  108.733933][ T4300] usb 3-1: USB disconnect, device number 4
[  109.201349][ T4297] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  109.252647][ T4622] loop3: detected capacity change from 0 to 512
[  109.404255][ T4297] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  109.427037][ T4297] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.460968][ T4297] usb 1-1: Product: syz
[  109.479853][ T4297] usb 1-1: Manufacturer: syz
[  109.499665][ T4297] usb 1-1: SerialNumber: syz
[  109.579774][ T4625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  110.011477][ T4297] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  110.322754][ T4297] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  111.875414][ T4297] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  111.891504][ T4297] ath9k_htc: Failed to initialize the device
[  112.062825][ T4297] usb 1-1: ath9k_htc: USB layer deinitialized
[  112.123561][ T4617] syz.4.56 (4617): drop_caches: 2
[  112.157759][ T4638] loop1: detected capacity change from 0 to 1024
[  112.163600][ T4622] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  112.176526][ T4622] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  112.306217][ T4619] loop0: detected capacity change from 0 to 512
[  112.324271][ T4619] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  112.415949][ T4619] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.57: bad orphan inode 131083
[  112.553644][ T4262] EXT4-fs (loop3): unmounting filesystem.
[  112.640374][ T4641] syz.3.59 (4641) used greatest stack depth: 19488 bytes left
[  112.750200][ T4619] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  113.410650][ T4619] EXT4-fs (loop0): unmounting filesystem.
[  113.457779][ T4648] tty tty23: ldisc open failed (-12), clearing slot 22
[  113.710613][ T4346] usb 1-1: USB disconnect, device number 5
[  113.829521][ T4655] loop0: detected capacity change from 0 to 64
[  113.933099][   T26] audit: type=1800 audit(1738500746.070:6): pid=4655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.67" name="file1" dev="loop0" ino=21 res=0 errno=0
[  114.040145][ T2117] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[  114.224791][ T4658] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  115.049772][ T2117] usb 2-1: unable to get BOS descriptor or descriptor too short
[  115.245324][ T2117] usb 2-1: not running at top speed; connect to a high speed hub
[  115.265987][ T2117] usb 2-1: config 2 has an invalid interface number: 140 but max is 0
[  115.274830][ T2117] usb 2-1: config 2 has no interface number 0
[  116.320350][ T2117] usb 2-1: config 2 interface 140 has no altsetting 0
[  116.330822][ T2117] usb 2-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=e9.89
[  116.365306][ T2117] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.419355][ T2117] usb 2-1: Product: syz
[  116.424222][ T2117] usb 2-1: Manufacturer: syz
[  116.634233][ T2117] usb 2-1: SerialNumber: syz
[  116.859462][ T4675] loop3: detected capacity change from 0 to 8
[  117.918455][ T2117] esd_usb 2-1:2.140: sending version message failed
[  118.851290][ T4252] Bluetooth: hci5: command 0xfc11 tx timeout
[  118.857773][ T4259] Bluetooth: hci5: Entering manufacturer mode failed (-110)
[  118.892389][ T2117] esd_usb: probe of 2-1:2.140 failed with error -22
[  119.723689][ T2117] usb 2-1: USB disconnect, device number 5
[  119.925668][ T4684] loop3: detected capacity change from 0 to 1024
[  124.501417][ T4706] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  125.123352][ T4714] loop2: detected capacity change from 0 to 2048
[  125.300179][ T4252] Bluetooth: hci5: sending frame failed (-49)
[  125.311048][ T4259] Bluetooth: hci5: Entering manufacturer mode failed (-49)
[  125.418102][ T4723] device bridge1 entered promiscuous mode
[  126.303432][ T4714] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  127.231338][ T4730] loop0: detected capacity change from 0 to 2048
[  127.267392][ T4733] loop1: detected capacity change from 0 to 2048
[  127.733405][ T4739] loop4: detected capacity change from 0 to 64
[  127.965553][ T4724] syz.3.86 (4724): drop_caches: 2
[  127.997680][ T4261] EXT4-fs (loop2): unmounting filesystem.
[  128.028564][ T4733] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  128.092331][ T4730] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  130.287183][ T4258] EXT4-fs (loop0): unmounting filesystem.
[  131.988358][ T4770] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  132.871351][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  132.877715][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  133.942390][ T4297] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  135.336147][ T4259] Bluetooth: hci5: Entering manufacturer mode failed (-110)
[  135.352281][ T4252] Bluetooth: hci5: command 0xfc11 tx timeout
[  135.916420][ T4250] EXT4-fs (loop1): unmounting filesystem.
[  139.035845][ T4485] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[  139.171385][ T4814] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  141.715388][ T4424] Bluetooth: hci5: Frame reassembly failed (-84)
[  141.774693][ T4424] Bluetooth: hci5: Frame reassembly failed (-84)
[  142.215383][ T4832] loop3: detected capacity change from 0 to 2048
[  142.799801][ T4828] syz.4.118 (4828): drop_caches: 2
[  142.829440][ T4832] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  143.040883][ T4298] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  143.551182][ T4298] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  143.664190][ T4298] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  143.692040][ T4259] Bluetooth: hci5: Entering manufacturer mode failed (-110)
[  144.134813][ T4298] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  144.144471][ T4298] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.160594][ T4836] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  144.367552][ T4853] loop2: detected capacity change from 0 to 2048
[  144.427635][ T4853] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  144.496864][ T4836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  144.507560][ T4836] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  145.261712][ T4485] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  146.095806][ T4864] loop0: detected capacity change from 0 to 8
[  149.123894][ T4841] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  149.400445][ T4435] usb 2-1: USB disconnect, device number 6
[  149.503181][ T4261] EXT4-fs (loop2): unmounting filesystem.
[  149.523862][ T4262] EXT4-fs (loop3): unmounting filesystem.
[  149.565428][ T4485] usb 5-1: device descriptor read/all, error -71
[  149.974286][ T4348] udevd[4348]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  150.072444][ T4883] loop4: detected capacity change from 0 to 64
[  153.601403][ T4881] syz.1.132 (4881): drop_caches: 2
[  154.240415][ T4252] Bluetooth: hci5: command 0xfc11 tx timeout
[  154.300447][ T4259] Bluetooth: hci5: Entering manufacturer mode failed (-110)
[  154.852988][ T4488] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  155.154128][ T4488] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  155.228501][ T4913] loop0: detected capacity change from 0 to 8
[  155.281021][ T4910] loop1: detected capacity change from 0 to 2048
[  155.308102][ T4488] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  155.330133][ T4488] usb 5-1: config 1 has no interface number 1
[  155.336336][ T4488] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0
[  155.376522][ T4488] usb 5-1: string descriptor 0 read error: -71
[  155.403422][ T4914] loop2: detected capacity change from 0 to 2048
[  155.406445][ T4488] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  155.419878][ T4910] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  155.451651][ T4488] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.459385][ T4914] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  155.638797][ T4485] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  155.670391][ T4488] usb 5-1: can't set config #1, error -71
[  155.681386][ T4488] usb 5-1: USB disconnect, device number 4
[  156.331383][ T4250] EXT4-fs (loop1): unmounting filesystem.
[  157.028897][ T4485] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  157.120859][ T4485] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  157.203334][ T4485] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  157.234040][ T4485] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.290440][ T4908] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  157.377063][   T75] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.513771][ T4908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  157.523451][ T4908] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  157.853892][   T75] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.147821][   T75] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.313299][   T75] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.160844][ T4295] usb 4-1: USB disconnect, device number 3
[  161.230114][ T2184] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  161.415624][ T4268] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  161.429592][ T4268] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  161.438993][ T4268] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  161.449075][ T2184] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  161.459434][ T4268] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  161.468925][ T2184] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  161.478235][ T2184] usb 5-1: config 1 has no interface number 1
[  161.484625][ T2184] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0
[  161.494492][ T4268] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  161.502271][ T4268] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  161.521277][ T2184] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  161.531878][ T2184] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.539980][ T2184] usb 5-1: Product: syz
[  161.544372][ T2184] usb 5-1: Manufacturer: syz
[  161.549069][ T2184] usb 5-1: SerialNumber: syz
[  162.258744][ T4965] loop1: detected capacity change from 0 to 2048
[  162.323293][ T4965] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  163.089371][ T2184] usb 5-1: USB disconnect, device number 5
[  163.200962][ T4331] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  163.263168][ T4250] EXT4-fs (loop1): unmounting filesystem.
[  163.368301][ T4261] EXT4-fs (loop2): unmounting filesystem.
[  163.391721][ T4925] udevd[4925]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  163.396593][ T4980] loop4: detected capacity change from 0 to 8
[  163.421778][ T4331] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  163.446426][ T4331] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  163.488374][ T4331] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  163.530658][ T4259] Bluetooth: hci2: command 0x0409 tx timeout
[  163.560191][ T4331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  163.568786][ T4331] usb 4-1: SerialNumber: syz
[  163.685781][ T4331] usb 4-1: 0:2 : does not exist
[  163.702136][ T4984] loop1: detected capacity change from 0 to 64
[  164.461329][ T4331] usb 4-1: USB disconnect, device number 4
[  164.691066][ T4348] udevd[4348]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  164.932467][ T4959] chnl_net:caif_netlink_parms(): no params data found
[  165.600237][ T4259] Bluetooth: hci2: command 0x041b tx timeout
[  165.770697][ T4487] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  166.066298][ T4487] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  166.121160][ T4487] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  166.203606][ T4487] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  166.212866][ T4487] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.657685][ T4997] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  166.934366][ T4997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  166.943493][ T4997] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  166.953645][ T4959] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.984896][ T4959] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.054225][ T4959] device bridge_slave_0 entered promiscuous mode
[  168.164987][ T4259] Bluetooth: hci2: command 0x040f tx timeout
[  168.460366][ T4331] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[  168.638046][ T4959] bridge0: port 2(bridge_slave_1) entered blocking state
[  168.685759][ T4331] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  168.769474][ T4959] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.780542][ T4331] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  168.807997][ T4331] usb 2-1: config 1 has no interface number 1
[  168.819574][ T4485] usb 3-1: USB disconnect, device number 5
[  168.823768][ T4331] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0
[  168.983114][ T4331] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  168.993337][ T4331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.002187][ T4331] usb 2-1: Product: syz
[  169.010334][ T4331] usb 2-1: Manufacturer: syz
[  169.014953][ T4331] usb 2-1: SerialNumber: syz
[  169.020914][ T4959] device bridge_slave_1 entered promiscuous mode
[  170.089210][ T4959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  170.127729][ T4331] usb 2-1: USB disconnect, device number 7
[  170.190995][ T5029] loop2: detected capacity change from 0 to 8
[  170.240341][ T4259] Bluetooth: hci2: command 0x0419 tx timeout
[  170.260384][   T75] device hsr_slave_0 left promiscuous mode
[  170.297967][ T5032] loop3: detected capacity change from 0 to 2048
[  170.349565][   T75] device hsr_slave_1 left promiscuous mode
[  170.357501][ T5032] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  170.363465][ T4925] udevd[4925]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  170.473392][   T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  170.526563][   T75] batman_adv: batadv0: Removing interface: batadv_slave_0
[  170.602969][   T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  170.617540][   T75] batman_adv: batadv0: Removing interface: batadv_slave_1
[  170.668790][   T75] device bridge_slave_1 left promiscuous mode
[  170.690562][   T75] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.701650][ T4268] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  170.762861][ T4268] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  170.772395][ T4268] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  170.781888][ T4268] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  170.790618][ T4268] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  170.799075][ T4268] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  170.893522][   T75] device bridge_slave_0 left promiscuous mode
[  170.913198][   T75] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.318765][   T75] device veth1_macvtap left promiscuous mode
[  171.408200][   T75] device veth0_macvtap left promiscuous mode
[  171.549259][   T75] device veth1_vlan left promiscuous mode
[  171.560830][   T75] device veth0_vlan left promiscuous mode
[  172.885241][ T4268] Bluetooth: hci0: command 0x0409 tx timeout
[  173.757777][ T4262] EXT4-fs (loop3): unmounting filesystem.
[  174.385662][   T75] team0 (unregistering): Port device team_slave_1 removed
[  174.410724][ T4300] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  174.651488][ T4300] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  174.681628][ T4300] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  174.696165][ T4300] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  174.709891][ T4300] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.749877][ T5070] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  174.758011][   T75] team0 (unregistering): Port device team_slave_0 removed
[  174.892874][   T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  174.942631][   T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  174.960299][ T4268] Bluetooth: hci0: command 0x041b tx timeout
[  175.082862][ T5070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  175.092624][ T5070] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  175.610485][ T4331] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[  175.822757][ T4331] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  175.857766][ T4331] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  175.879264][ T4331] usb 2-1: config 1 has no interface number 1
[  175.892858][ T4331] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0
[  175.912496][ T4331] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  175.987013][ T4331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.010387][ T4331] usb 2-1: Product: syz
[  176.014695][ T4331] usb 2-1: Manufacturer: syz
[  176.019394][ T4331] usb 2-1: SerialNumber: syz
[  176.144101][ T2184] usb 4-1: USB disconnect, device number 5
[  176.304459][   T75] bond0 (unregistering): Released all slaves
[  176.388480][ T4959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  176.550603][ T4959] team0: Port device team_slave_0 added
[  176.562495][ T4959] team0: Port device team_slave_1 added
[  176.681746][ T4959] batman_adv: batadv0: Adding interface: batadv_slave_0
[  176.708731][ T4959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  176.766010][ T4959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  176.804182][ T4959] batman_adv: batadv0: Adding interface: batadv_slave_1
[  176.822980][ T4959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  176.848968][    C0] vkms_vblank_simulate: vblank timer overrun
[  176.857629][ T4959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  176.945711][ T4959] device hsr_slave_0 entered promiscuous mode
[  176.966603][ T4959] device hsr_slave_1 entered promiscuous mode
[  177.040726][ T4268] Bluetooth: hci0: command 0x040f tx timeout
[  178.420475][ T4331] usb 2-1: USB disconnect, device number 8
[  178.620374][ T5043] chnl_net:caif_netlink_parms(): no params data found
[  178.718077][ T4925] udevd[4925]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  178.939103][ T5101] loop3: detected capacity change from 0 to 2048
[  179.120249][ T4268] Bluetooth: hci0: command 0x0419 tx timeout
[  179.310986][ T5101] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  179.514344][ T4252] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  179.523331][ T4259] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  179.543082][ T4252] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  179.553042][ T4252] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  179.562332][ T4259] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  179.570104][ T4259] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  179.656025][   T75] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.894380][   T75] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.646991][   T75] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.711629][ T4959] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  180.796208][   T75] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.819197][ T4959] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  180.837144][ T5043] bridge0: port 1(bridge_slave_0) entered blocking state
[  180.845821][ T5043] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.857049][ T5043] device bridge_slave_0 entered promiscuous mode
[  180.879345][ T4959] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  180.901481][ T5043] bridge0: port 2(bridge_slave_1) entered blocking state
[  180.908968][ T5043] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.923512][ T5043] device bridge_slave_1 entered promiscuous mode
[  180.938746][ T4959] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  181.118691][ T5043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  181.168419][ T5043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  181.324464][   T75] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.439976][ T5043] team0: Port device team_slave_0 added
[  181.474261][   T75] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.537793][ T4959] 8021q: adding VLAN 0 to HW filter on device bond0
[  181.547928][ T5043] team0: Port device team_slave_1 added
[  181.559047][ T5109] chnl_net:caif_netlink_parms(): no params data found
[  181.599600][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  181.623375][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  181.673935][   T75] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.684711][ T4252] Bluetooth: hci3: command 0x0409 tx timeout
[  181.705131][ T4959] 8021q: adding VLAN 0 to HW filter on device team0
[  181.752128][ T5043] batman_adv: batadv0: Adding interface: batadv_slave_0
[  181.759169][ T5043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  181.820388][ T5043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  181.892443][   T75] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.928144][ T5043] batman_adv: batadv0: Adding interface: batadv_slave_1
[  181.939323][ T5043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  181.945145][ T4262] EXT4-fs (loop3): unmounting filesystem.
[  181.966695][ T5043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  182.006594][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  182.036404][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  182.064959][ T4351] bridge0: port 1(bridge_slave_0) entered blocking state
[  182.072332][ T4351] bridge0: port 1(bridge_slave_0) entered forwarding state
[  182.080330][ T4259] Bluetooth: hci5: command 0xfc11 tx timeout
[  182.088825][ T4268] Bluetooth: hci5: Entering manufacturer mode failed (-110)
[  182.100424][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  182.109937][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  182.194966][ T5141] loop3: detected capacity change from 0 to 64
[  182.211104][ T5141] hfs: unable to parse mount options
[  182.230078][ T4351] bridge0: port 2(bridge_slave_1) entered blocking state
[  182.237471][ T4351] bridge0: port 2(bridge_slave_1) entered forwarding state
[  182.264839][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  182.372844][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  182.442158][ T5146] loop1: detected capacity change from 0 to 64
[  182.962677][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  182.976372][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  182.986828][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  183.111704][ T5043] device hsr_slave_0 entered promiscuous mode
[  183.120860][ T5043] device hsr_slave_1 entered promiscuous mode
[  183.145386][ T5043] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  183.153540][ T5043] Cannot create hsr debugfs directory
[  183.889352][ T4268] Bluetooth: hci3: command 0x041b tx timeout
[  183.912755][ T5109] bridge0: port 1(bridge_slave_0) entered blocking state
[  183.938354][ T5109] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.264758][ T5109] device bridge_slave_0 entered promiscuous mode
[  184.536042][ T5109] bridge0: port 2(bridge_slave_1) entered blocking state
[  184.590397][ T5109] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.638756][ T5109] device bridge_slave_1 entered promiscuous mode
[  184.708836][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  184.729091][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  184.747208][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  184.767632][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  184.787747][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  184.799103][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  184.815698][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  184.843283][ T4959] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  184.926407][ T5109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  185.118261][ T5109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  185.546750][ T5109] team0: Port device team_slave_0 added
[  185.558169][ T5109] team0: Port device team_slave_1 added
[  185.780537][ T5109] batman_adv: batadv0: Adding interface: batadv_slave_0
[  185.787803][ T5109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  185.814239][ T5109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  185.827510][ T5109] batman_adv: batadv0: Adding interface: batadv_slave_1
[  185.834792][ T5109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  185.860906][    C0] vkms_vblank_simulate: vblank timer overrun
[  185.868416][ T5109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  185.887831][ T5169] loop3: detected capacity change from 0 to 2048
[  185.925944][ T4259] Bluetooth: hci3: command 0x040f tx timeout
[  186.003841][ T5169] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  186.030195][ T4297] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[  186.141912][ T5109] device hsr_slave_0 entered promiscuous mode
[  186.178406][ T5109] device hsr_slave_1 entered promiscuous mode
[  186.200587][ T5109] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  186.208227][ T5109] Cannot create hsr debugfs directory
[  186.231921][ T4297] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  186.245088][ T4297] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  186.271709][ T4297] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  186.291590][ T4297] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  186.299651][ T4297] usb 2-1: SerialNumber: syz
[  186.339259][ T4297] usb 2-1: 0:2 : does not exist
[  187.203667][ T4297] usb 2-1: USB disconnect, device number 9
[  187.231059][ T4925] udevd[4925]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  187.466080][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  187.497192][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  187.542533][ T4959] 8021q: adding VLAN 0 to HW filter on device batadv0
[  187.705852][ T5043] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  188.010212][ T4259] Bluetooth: hci3: command 0x0419 tx timeout
[  188.097926][ T5043] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  188.138959][ T5043] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  188.789569][ T4262] EXT4-fs (loop3): unmounting filesystem.
[  188.834095][ T5043] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  189.026440][ T5204] loop1: detected capacity change from 0 to 64
[  189.070848][ T5204] hfs: unable to parse mount options
[  189.096281][ T5205] loop3: detected capacity change from 0 to 2048
[  189.129150][ T4925] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  189.198778][ T5205] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  189.327441][ T5109] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  189.384303][ T5109] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  189.478632][ T5109] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  189.508320][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  189.699611][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  190.141694][ T4262] EXT4-fs (loop3): unmounting filesystem.
[  190.592174][ T5217] loop1: detected capacity change from 0 to 64
[  190.664145][ T5043] 8021q: adding VLAN 0 to HW filter on device bond0
[  190.751511][ T5109] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  190.989128][ T5043] 8021q: adding VLAN 0 to HW filter on device team0
[  191.025521][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  191.223691][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  191.243600][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  191.255104][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  191.267614][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  191.279335][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  193.064145][ T4959] device veth0_vlan entered promiscuous mode
[  193.086990][ T4959] device veth1_vlan entered promiscuous mode
[  193.226676][ T4959] device veth0_macvtap entered promiscuous mode
[  193.236762][ T4959] device veth1_macvtap entered promiscuous mode
[  193.273691][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  193.283735][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  193.292128][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  193.302290][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  193.312534][ T4405] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.319617][ T4405] bridge0: port 1(bridge_slave_0) entered forwarding state
[  193.329092][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  193.350888][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  193.380842][ T4405] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.388343][ T4405] bridge0: port 2(bridge_slave_1) entered forwarding state
[  193.449647][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  193.468451][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  193.479264][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  193.496704][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  193.507719][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  193.734912][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  193.850464][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  194.058950][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  194.263291][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  194.270056][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  194.355373][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  194.400851][ T4959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  194.432632][ T4959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.522128][ T4959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  194.571779][ T5248] loop1: detected capacity change from 0 to 2048
[  194.588440][ T4959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.643136][ T4959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  194.663722][ T4959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.675366][ T5248] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  194.696078][ T4959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  194.708264][ T4959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.736197][ T4959] batman_adv: batadv0: Interface activated: batadv_slave_0
[  194.820349][ T4346] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[  194.854349][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  194.872062][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  194.889644][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  194.905061][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  194.924477][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  194.954861][ T4959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  194.967565][ T4959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.978554][ T4959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  194.991066][ T4959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.001945][ T4959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  195.011979][ T4346] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  195.021348][ T4959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.033805][ T4346] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  195.040080][ T4959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  195.059001][ T4346] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  195.060522][ T4959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.075299][ T4346] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  195.087991][ T4959] batman_adv: batadv0: Interface activated: batadv_slave_1
[  195.095188][ T4346] usb 4-1: SerialNumber: syz
[  195.120733][ T5043] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  195.138172][ T4346] usb 4-1: 0:2 : does not exist
[  195.155601][ T5043] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  195.168981][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  195.178985][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  195.189040][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  195.200273][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  195.209523][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  195.218477][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  195.242201][ T4959] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  195.262796][ T4959] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  195.279733][ T4959] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  195.290146][ T4959] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  195.945068][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  196.033757][ T2184] usb 4-1: USB disconnect, device number 6
[  196.065354][   T75] device hsr_slave_0 left promiscuous mode
[  196.094640][   T75] device hsr_slave_1 left promiscuous mode
[  196.121621][   T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  196.129074][   T75] batman_adv: batadv0: Removing interface: batadv_slave_0
[  196.151356][   T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  196.159495][   T75] batman_adv: batadv0: Removing interface: batadv_slave_1
[  196.171649][   T75] device bridge_slave_1 left promiscuous mode
[  196.177949][   T75] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.187339][   T75] device bridge_slave_0 left promiscuous mode
[  196.196788][   T75] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.225199][   T75] device hsr_slave_0 left promiscuous mode
[  196.241072][   T75] device hsr_slave_1 left promiscuous mode
[  196.248260][   T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  196.258681][   T75] batman_adv: batadv0: Removing interface: batadv_slave_0
[  196.276220][   T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  196.286684][   T75] batman_adv: batadv0: Removing interface: batadv_slave_1
[  196.305898][   T75] device bridge_slave_1 left promiscuous mode
[  196.312375][   T75] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.322922][   T75] device bridge_slave_0 left promiscuous mode
[  196.329131][   T75] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.330151][ T4259] Bluetooth: hci1: command 0x0406 tx timeout
[  196.344263][ T4268] Bluetooth: hci4: command 0x0406 tx timeout
[  196.421632][   T75] device veth1_macvtap left promiscuous mode
[  196.428293][   T75] device veth0_macvtap left promiscuous mode
[  196.442758][   T75] device veth1_vlan left promiscuous mode
[  196.448748][   T75] device veth0_vlan left promiscuous mode
[  196.463262][   T75] device veth1_macvtap left promiscuous mode
[  196.469522][   T75] device veth0_macvtap left promiscuous mode
[  196.476073][   T75] device veth1_vlan left promiscuous mode
[  196.482287][   T75] device veth0_vlan left promiscuous mode
[  196.737358][ T4250] EXT4-fs (loop1): unmounting filesystem.
[  197.937545][ T5270] loop3: detected capacity change from 0 to 2048
[  198.030410][ T5270] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  198.990872][ T4262] EXT4-fs (loop3): unmounting filesystem.
[  199.369876][   T75] team0 (unregistering): Port device team_slave_1 removed
[  200.917357][   T75] team0 (unregistering): Port device team_slave_0 removed
[  202.071006][   T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  202.674680][   T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  203.487142][ T5296] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  203.934352][ T5298] loop1: detected capacity change from 0 to 8
[  204.620121][ T4297] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[  204.831108][ T4297] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  204.858972][ T4297] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  204.900734][ T4297] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  204.911341][ T4297] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  204.919361][ T4297] usb 4-1: SerialNumber: syz
[  204.966540][ T4297] usb 4-1: 0:2 : does not exist
[  206.091510][ T2184] usb 4-1: USB disconnect, device number 7
[  206.277980][ T5304] loop1: detected capacity change from 0 to 64
[  208.773414][   T75] bond0 (unregistering): Released all slaves
[  209.080238][ T4297] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  209.266696][   T75] team0 (unregistering): Port device team_slave_1 removed
[  209.296478][ T4297] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  209.307576][ T4297] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  209.317753][ T4297] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  209.327470][ T4297] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.340449][   T75] team0 (unregistering): Port device team_slave_0 removed
[  209.349238][ T5314] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  209.405086][   T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  209.493397][   T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  209.587402][ T5314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  209.596337][ T5314] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  210.242287][ T4259] Bluetooth: hci5: Entering manufacturer mode failed (-110)
[  212.233746][ T4346] usb 4-1: USB disconnect, device number 8
[  212.788630][ T5327] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  214.352662][ T5329] loop3: detected capacity change from 0 to 2048
[  214.435584][ T5329] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  214.463291][   T75] bond0 (unregistering): Released all slaves
[  214.900958][ T5109] 8021q: adding VLAN 0 to HW filter on device bond0
[  215.079351][ T5109] 8021q: adding VLAN 0 to HW filter on device team0
[  215.165089][ T5109] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  215.184348][ T5109] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  215.365623][ T4262] EXT4-fs (loop3): unmounting filesystem.
[  215.409410][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  215.435442][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  215.528736][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  215.557455][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  215.616734][ T4402] bridge0: port 1(bridge_slave_0) entered blocking state
[  215.623921][ T4402] bridge0: port 1(bridge_slave_0) entered forwarding state
[  215.641165][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  215.671115][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  215.711324][ T4402] bridge0: port 2(bridge_slave_1) entered blocking state
[  215.718466][ T4402] bridge0: port 2(bridge_slave_1) entered forwarding state
[  215.767833][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  215.778022][ T5347] loop3: detected capacity change from 0 to 2048
[  215.778089][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  215.795756][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  215.806149][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  215.815029][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  215.824103][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  215.836937][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  215.929804][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  216.042059][ T5347] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  216.109140][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  216.706647][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  216.745098][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  216.809398][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  217.042165][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  217.181386][ T4262] EXT4-fs (loop3): unmounting filesystem.
[  218.020153][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  218.027633][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  218.139320][ T5364] loop3: detected capacity change from 0 to 8
[  219.081968][ T4925] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  219.311957][ T5043] 8021q: adding VLAN 0 to HW filter on device batadv0
[  219.370083][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  219.379026][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  220.058285][ T5109] 8021q: adding VLAN 0 to HW filter on device batadv0
[  220.616802][ T4268] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  220.635693][ T4268] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  220.645560][ T4268] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  220.653692][ T4268] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  220.662471][ T4268] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  220.669972][ T4268] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  221.446805][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  221.464542][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  221.615791][ T5043] device veth0_vlan entered promiscuous mode
[  221.642346][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  221.671224][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  221.692244][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  221.720799][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  221.913665][ T5043] device veth1_vlan entered promiscuous mode
[  222.064541][ T5404] loop3: detected capacity change from 0 to 8
[  222.721101][ T4268] Bluetooth: hci5: command 0x0409 tx timeout
[  222.729435][ T5109] device veth0_vlan entered promiscuous mode
[  222.805504][ T5109] device veth1_vlan entered promiscuous mode
[  222.891796][ T5109] device veth0_macvtap entered promiscuous mode
[  222.928318][ T5109] device veth1_macvtap entered promiscuous mode
[  222.979386][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  223.010025][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.040045][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  223.071499][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.081492][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  223.092032][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.195975][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_0
[  223.989023][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  224.005523][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  224.050851][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  224.077895][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  224.100838][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  224.199101][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  224.279000][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  224.303842][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  224.380510][ T5410] loop3: detected capacity change from 0 to 64
[  224.430183][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  224.501021][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  224.698828][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  224.737688][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  224.754974][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  224.779761][ T5385] chnl_net:caif_netlink_parms(): no params data found
[  224.800261][ T4268] Bluetooth: hci5: command 0x041b tx timeout
[  224.824742][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  224.833077][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  224.841274][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  224.851844][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  224.866850][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.878154][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  224.900529][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.920047][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  224.950169][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.994237][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_1
[  225.077233][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  225.087453][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  225.108866][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  225.136817][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  225.163633][ T5109] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  225.174894][ T5109] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  225.186079][ T5417] loop3: detected capacity change from 0 to 2048
[  225.196306][ T5109] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  225.207280][ T5109] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  225.228594][ T5043] device veth0_macvtap entered promiscuous mode
[  225.237520][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  225.265389][ T5043] device veth1_macvtap entered promiscuous mode
[  225.297564][ T5417] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  225.519400][ T5043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  225.635970][ T5043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.768202][ T5043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  225.903809][ T5043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.978519][ T5043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  226.017025][ T5043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.060129][ T5043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  226.109067][ T5043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.159248][ T5043] batman_adv: batadv0: Interface activated: batadv_slave_0
[  226.194096][ T5043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  226.204629][ T5043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.215801][ T5043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  226.217829][ T4262] EXT4-fs (loop3): unmounting filesystem.
[  226.226689][ T5043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.244137][ T5043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  226.254744][ T5043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.264666][ T5043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  226.275171][ T5043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.286765][ T5043] batman_adv: batadv0: Interface activated: batadv_slave_1
[  226.325274][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  226.376032][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  226.391314][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  226.411247][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  226.429457][ T5043] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  226.470195][ T5043] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  226.478986][ T5043] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  226.510058][ T5043] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  226.528081][ T5385] bridge0: port 1(bridge_slave_0) entered blocking state
[  226.536525][ T5385] bridge0: port 1(bridge_slave_0) entered disabled state
[  226.559551][ T5385] device bridge_slave_0 entered promiscuous mode
[  226.639452][ T5385] bridge0: port 2(bridge_slave_1) entered blocking state
[  226.650466][ T5385] bridge0: port 2(bridge_slave_1) entered disabled state
[  226.685779][ T5385] device bridge_slave_1 entered promiscuous mode
[  226.731820][ T4591] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  226.760047][ T4591] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  226.825428][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  226.841480][ T5385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  226.880620][ T4268] Bluetooth: hci5: command 0x040f tx timeout
[  226.891558][ T5385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  226.913600][ T4424] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  226.939221][ T4424] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  227.097673][   T75] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.141104][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  227.195276][ T4424] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  227.279199][   T75] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.289647][ T4424] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  227.322114][ T5385] team0: Port device team_slave_0 added
[  227.442332][   T75] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.501311][ T5434] loop3: detected capacity change from 0 to 32768
[  227.634256][ T5434] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  227.677390][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  227.693151][ T5385] team0: Port device team_slave_1 added
[  227.750812][   T26] audit: type=1800 audit(1738500859.840:7): pid=5434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.231" name="bus" dev="loop3" ino=17058 res=0 errno=0
[  228.156800][   T75] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.391960][   T26] audit: type=1800 audit(1738500860.000:8): pid=5434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.231" name="bus" dev="loop3" ino=17058 res=0 errno=0
[  228.412244][    C1] vkms_vblank_simulate: vblank timer overrun
[  228.486342][   T26] audit: type=1800 audit(1738500860.200:9): pid=5434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.231" name="bus" dev="loop3" ino=17058 res=0 errno=0
[  228.527179][ T5434] 
[  228.529617][ T5434] ======================================================
[  228.536704][ T5434] WARNING: possible circular locking dependency detected
[  228.543973][ T5434] 6.1.128-syzkaller #0 Not tainted
[  228.548840][ T5455] loop1: detected capacity change from 0 to 2048
[  228.549085][ T5434] ------------------------------------------------------
[  228.549094][ T5434] syz.3.231/5434 is trying to acquire lock:
[  228.568642][ T5434] ffff8880753062d8 (&mm->mmap_lock){++++}-{3:3}, at: __might_fault+0xa1/0x110
[  228.577554][ T5434] 
[  228.577554][ T5434] but task is already holding lock:
[  228.584932][ T5434] ffff8880550e8660 (&oi->ip_alloc_sem){++++}-{3:3}, at: ocfs2_fiemap+0x36f/0xf80
[  228.594123][ T5434] 
[  228.594123][ T5434] which lock already depends on the new lock.
[  228.594123][ T5434] 
[  228.604525][ T5434] 
[  228.604525][ T5434] the existing dependency chain (in reverse order) is:
[  228.613526][ T5434] 
[  228.613526][ T5434] -> #2 (&oi->ip_alloc_sem){++++}-{3:3}:
[  228.621338][ T5434]        lock_acquire+0x1f8/0x5a0
[  228.626383][ T5434]        down_write+0x36/0x60
[  228.631067][ T5434]        ocfs2_page_mkwrite+0x340/0xea0
[  228.636627][ T5434]        do_page_mkwrite+0x1a1/0x5f0
[  228.641959][ T5434]        handle_mm_fault+0x22eb/0x5340
[  228.647431][ T5434]        exc_page_fault+0x26f/0x620
[  228.652640][ T5434]        asm_exc_page_fault+0x22/0x30
[  228.658028][ T5434]        __put_user_nocheck_4+0x3/0x11
[  228.663520][ T5434]        __se_sys_getgroups+0x1d4/0x280
[  228.669948][ T5434]        do_syscall_64+0x3b/0xb0
[  228.674892][ T5434]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  228.681337][ T5434] 
[  228.681337][ T5434] -> #1 (sb_pagefaults#2){.+.+}-{0:0}:
[  228.689213][ T5434]        lock_acquire+0x1f8/0x5a0
[  228.694281][ T5434]        ocfs2_page_mkwrite+0x21e/0xea0
[  228.699852][ T5434]        do_page_mkwrite+0x1a1/0x5f0
[  228.705159][ T5434]        handle_mm_fault+0x22eb/0x5340
[  228.710805][ T5434]        exc_page_fault+0x26f/0x620
[  228.716008][ T5434]        asm_exc_page_fault+0x22/0x30
[  228.721390][ T5434]        __put_user_nocheck_4+0x3/0x11
[  228.726842][ T5434]        __se_sys_getgroups+0x1d4/0x280
[  228.732397][ T5434]        do_syscall_64+0x3b/0xb0
[  228.737526][ T5434]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  228.744834][ T5434] 
[  228.744834][ T5434] -> #0 (&mm->mmap_lock){++++}-{3:3}:
[  228.752407][ T5434]        validate_chain+0x1661/0x5950
[  228.757790][ T5434]        __lock_acquire+0x125b/0x1f80
[  228.763374][ T5434]        lock_acquire+0x1f8/0x5a0
[  228.768429][ T5434]        __might_fault+0xbd/0x110
[  228.773482][ T5434]        _copy_to_user+0x26/0x130
[  228.778540][ T5434]        fiemap_fill_next_extent+0x231/0x410
[  228.784539][ T5434]        ocfs2_fiemap+0x9e9/0xf80
[  228.789577][ T5434]        do_vfs_ioctl+0x18e9/0x2a90
[  228.794784][ T5434]        __se_sys_ioctl+0x81/0x160
[  228.799892][ T5434]        do_syscall_64+0x3b/0xb0
[  228.804821][ T5434]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  228.811233][ T5434] 
[  228.811233][ T5434] other info that might help us debug this:
[  228.811233][ T5434] 
[  228.821446][ T5434] Chain exists of:
[  228.821446][ T5434]   &mm->mmap_lock --> sb_pagefaults#2 --> &oi->ip_alloc_sem
[  228.821446][ T5434] 
[  228.834572][ T5434]  Possible unsafe locking scenario:
[  228.834572][ T5434] 
[  228.842026][ T5434]        CPU0                    CPU1
[  228.847395][ T5434]        ----                    ----
[  228.852763][ T5434]   lock(&oi->ip_alloc_sem);
[  228.857451][ T5434]                                lock(sb_pagefaults#2);
[  228.864562][ T5434]                                lock(&oi->ip_alloc_sem);
[  228.871725][ T5434]   lock(&mm->mmap_lock);
[  228.876075][ T5434] 
[  228.876075][ T5434]  *** DEADLOCK ***
[  228.876075][ T5434] 
[  228.884229][ T5434] 1 lock held by syz.3.231/5434:
[  228.889260][ T5434]  #0: ffff8880550e8660 (&oi->ip_alloc_sem){++++}-{3:3}, at: ocfs2_fiemap+0x36f/0xf80
[  228.898850][ T5434] 
[  228.898850][ T5434] stack backtrace:
[  228.904746][ T5434] CPU: 1 PID: 5434 Comm: syz.3.231 Not tainted 6.1.128-syzkaller #0
[  228.912712][ T5434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  228.922758][ T5434] Call Trace:
[  228.926030][ T5434]  <TASK>
[  228.928957][ T5434]  dump_stack_lvl+0x1e3/0x2cb
[  228.933638][ T5434]  ? nf_tcp_handle_invalid+0x642/0x642
[  228.939109][ T5434]  ? print_circular_bug+0x12b/0x1a0
[  228.944505][ T5434]  check_noncircular+0x2fa/0x3b0
[  228.949466][ T5434]  ? ocfs2_buffer_cached+0x3db/0x8c0
[  228.954794][ T5434]  ? add_chain_block+0x850/0x850
[  228.959753][ T5434]  ? lockdep_lock+0x11f/0x2a0
[  228.964988][ T5434]  ? lockdep_unlock+0x165/0x300
[  228.972716][ T5434]  ? lockdep_lock+0x2a0/0x2a0
[  228.977452][ T5434]  ? _find_first_zero_bit+0xd0/0x100
[  228.983373][ T5434]  validate_chain+0x1661/0x5950
[  228.988245][ T5434]  ? reacquire_held_locks+0x660/0x660
[  228.993732][ T5434]  ? __getblk_gfp+0x50/0xa20
[  228.998334][ T5434]  ? reacquire_held_locks+0x660/0x660
[  229.003707][ T5434]  ? rcu_is_watching+0x11/0xb0
[  229.008462][ T5434]  ? ocfs2_read_blocks+0x126a/0x16c0
[  229.013747][ T5434]  ? mark_lock+0x9a/0x340
[  229.018075][ T5434]  __lock_acquire+0x125b/0x1f80
[  229.022931][ T5434]  lock_acquire+0x1f8/0x5a0
[  229.027434][ T5434]  ? __might_fault+0xa1/0x110
[  229.032113][ T5434]  ? read_lock_is_recursive+0x10/0x10
[  229.037877][ T5434]  ? __might_sleep+0xb0/0xb0
[  229.042492][ T5434]  ? __might_sleep+0xb0/0xb0
[  229.047279][ T5434]  ? is_bpf_text_address+0x22/0x2a0
[  229.052491][ T5434]  ? __might_fault+0xa1/0x110
[  229.057196][ T5434]  __might_fault+0xbd/0x110
[  229.061730][ T5434]  ? __might_fault+0xa1/0x110
[  229.066435][ T5434]  _copy_to_user+0x26/0x130
[  229.070977][ T5434]  fiemap_fill_next_extent+0x231/0x410
[  229.076568][ T5434]  ? vfs_ioctl+0xc0/0xc0
[  229.080864][ T5434]  ? __lock_acquire+0x125b/0x1f80
[  229.087928][ T5434]  ? fiemap_prep+0x19a/0x240
[  229.092540][ T5434]  ocfs2_fiemap+0x9e9/0xf80
[  229.097322][ T5434]  ? ocfs2_extent_map_get_blocks+0x7d0/0x7d0
[  229.103305][ T5434]  ? __might_fault+0xa1/0x110
[  229.107983][ T5434]  ? __might_fault+0xbd/0x110
[  229.112654][ T5434]  ? ocfs2_extent_map_get_blocks+0x7d0/0x7d0
[  229.118627][ T5434]  do_vfs_ioctl+0x18e9/0x2a90
[  229.123296][ T5434]  ? __x64_compat_sys_ioctl+0x80/0x80
[  229.128659][ T5434]  ? __lock_acquire+0x1f80/0x1f80
[  229.133862][ T5434]  ? lockdep_hardirqs_on+0x94/0x130
[  229.139084][ T5434]  ? __kmem_cache_free+0x25c/0x3c0
[  229.144426][ T5434]  ? tomoyo_path_number_perm+0x61b/0x7f0
[  229.150218][ T5434]  ? tomoyo_path_number_perm+0x68a/0x7f0
[  229.156295][ T5434]  ? tomoyo_path_number_perm+0x1f2/0x7f0
[  229.162312][ T5434]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  229.168423][ T5434]  ? __fget_files+0x28/0x4a0
[  229.173211][ T5434]  ? __fget_files+0x28/0x4a0
[  229.177983][ T5434]  ? __fget_files+0x28/0x4a0
[  229.182592][ T5434]  ? bpf_lsm_file_ioctl+0x5/0x10
[  229.187973][ T5434]  ? security_file_ioctl+0x7d/0xa0
[  229.193701][ T5434]  __se_sys_ioctl+0x81/0x160
[  229.198298][ T5434]  do_syscall_64+0x3b/0xb0
[  229.202710][ T5434]  ? clear_bhb_loop+0x45/0xa0
[  229.207393][ T5434]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  229.213285][ T5434] RIP: 0033:0x7facadf8cda9
[  229.217701][ T5434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  229.239595][ T5434] RSP: 002b:00007facaed63038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  229.248125][ T5434] RAX: ffffffffffffffda RBX: 00007facae1a5fa0 RCX: 00007facadf8cda9
[  229.256296][ T5434] RDX: 0000000020000280 RSI: 00000000c020660b RDI: 0000000000000004
[  229.264290][ T5434] RBP: 00007facae00e2a0 R08: 0000000000000000 R09: 0000000000000000
[  229.272296][ T5434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  229.280299][ T5434] R13: 0000000000000000 R14: 00007facae1a5fa0 R15: 00007ffe6f2307b8
[  229.288381][ T5434]  </TASK>
[  229.291428][    C1] vkms_vblank_simulate: vblank timer overrun
[  229.301554][ T4268] Bluetooth: hci5: command 0x0419 tx timeout
[  229.338036][ T5385] batman_adv: batadv0: Adding interface: batadv_slave_0
[  229.430066][ T5385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  229.517884][ T5385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  229.661594][ T5455] EXT4-fs: error -4 creating inode table initialization thread
[  229.669418][ T5455] EXT4-fs (loop1): mount failed
[  230.599850][   T75] device hsr_slave_0 left promiscuous mode
[  230.606240][   T75] device hsr_slave_1 left promiscuous mode
[  230.612800][   T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  230.621051][   T75] batman_adv: batadv0: Removing interface: batadv_slave_0
[  230.628807][   T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  230.637689][   T75] batman_adv: batadv0: Removing interface: batadv_slave_1
[  230.646029][   T75] device bridge_slave_1 left promiscuous mode
[  230.652560][   T75] bridge0: port 2(bridge_slave_1) entered disabled state
[  230.661353][   T75] device bridge_slave_0 left promiscuous mode
[  230.667609][   T75] bridge0: port 1(bridge_slave_0) entered disabled state
[  230.679030][   T75] device veth1_macvtap left promiscuous mode
[  230.685212][   T75] device veth0_macvtap left promiscuous mode
[  230.691676][   T75] device veth1_vlan left promiscuous mode
[  230.697507][   T75] device veth0_vlan left promiscuous mode
[  230.901671][   T75] team0 (unregistering): Port device team_slave_1 removed
[  230.922418][   T75] team0 (unregistering): Port device team_slave_0 removed
[  230.946349][   T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  230.958868][   T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  231.024497][   T75] bond0 (unregistering): Released all slaves
[  231.478230][   T75] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.537902][   T75] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.586021][   T75] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.665642][   T75] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.755226][   T75] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.795694][   T75] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.835519][   T75] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.886237][   T75] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.978011][   T75] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.035598][   T75] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.085733][   T75] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.124136][   T75] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.302483][   T75] device hsr_slave_0 left promiscuous mode
[  233.308715][   T75] device hsr_slave_1 left promiscuous mode
[  233.315236][   T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  233.323673][   T75] batman_adv: batadv0: Removing interface: batadv_slave_0
[  233.331621][   T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  233.339058][   T75] batman_adv: batadv0: Removing interface: batadv_slave_1
[  233.347133][   T75] device bridge_slave_1 left promiscuous mode
[  233.353652][   T75] bridge0: port 2(bridge_slave_1) entered disabled state
[  233.371305][   T75] device bridge_slave_0 left promiscuous mode
[  233.377547][   T75] bridge0: port 1(bridge_slave_0) entered disabled state
[  233.388692][   T75] device hsr_slave_0 left promiscuous mode
[  233.395414][   T75] device hsr_slave_1 left promiscuous mode
[  233.403112][   T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  233.411680][   T75] batman_adv: batadv0: Removing interface: batadv_slave_0
[  233.419289][   T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  233.427571][   T75] batman_adv: batadv0: Removing interface: batadv_slave_1
[  233.436931][   T75] device bridge_slave_1 left promiscuous mode
[  233.445134][   T75] bridge0: port 2(bridge_slave_1) entered disabled state
[  233.455542][   T75] device bridge_slave_0 left promiscuous mode
[  233.463571][   T75] bridge0: port 1(bridge_slave_0) entered disabled state
[  233.475252][   T75] batman_adv: batadv0: Removing interface: batadv_slave_0
[  233.484063][   T75] device bridge_slave_1 left promiscuous mode
[  233.492267][   T75] bridge0: port 2(bridge_slave_1) entered disabled state
[  233.501559][   T75] device bridge_slave_0 left promiscuous mode
[  233.507737][   T75] bridge0: port 1(bridge_slave_0) entered disabled state
[  233.524089][   T75] device hsr_slave_0 left promiscuous mode
[  233.531792][   T75] device hsr_slave_1 left promiscuous mode
[  233.538299][   T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  233.547456][   T75] batman_adv: batadv0: Removing interface: batadv_slave_0
[  233.556859][   T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  233.565434][   T75] batman_adv: batadv0: Removing interface: batadv_slave_1
[  233.574517][   T75] device bridge_slave_1 left promiscuous mode
[  233.582381][   T75] bridge0: port 2(bridge_slave_1) entered disabled state
[  233.592861][   T75] device bridge_slave_0 left promiscuous mode
[  233.599409][   T75] bridge0: port 1(bridge_slave_0) entered disabled state
[  233.616080][   T75] device veth1_macvtap left promiscuous mode
[  233.623695][   T75] device veth0_macvtap left promiscuous mode
[  233.629953][   T75] device veth1_vlan left promiscuous mode
[  233.636004][   T75] device veth0_vlan left promiscuous mode
[  233.642696][   T75] device veth1_macvtap left promiscuous mode
[  233.648814][   T75] device veth0_macvtap left promiscuous mode
[  233.655284][   T75] device veth1_vlan left promiscuous mode
[  233.661133][   T75] device veth0_vlan left promiscuous mode
[  233.667647][   T75] device veth1_macvtap left promiscuous mode
[  233.674249][   T75] device veth0_macvtap left promiscuous mode
[  233.680785][   T75] device veth1_vlan left promiscuous mode
[  233.686766][   T75] device veth0_vlan left promiscuous mode
[  233.972625][   T75] team0 (unregistering): Port device team_slave_1 removed
[  233.999128][   T75] team0 (unregistering): Port device team_slave_0 removed
[  234.021024][   T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  234.048098][   T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  234.097389][   T75] bond0 (unregistering): Released all slaves
[  234.217603][   T75] team0 (unregistering): Port device team_slave_1 removed
[  234.242991][   T75] team0 (unregistering): Port device team_slave_0 removed
[  234.267697][   T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  234.295636][   T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  234.339610][   T75] bond0 (unregistering): Released all slaves
[  234.397988][   T75] team0 (unregistering): Port device team_slave_1 removed
[  234.422296][   T75] team0 (unregistering): Port device team_slave_0 removed
[  234.445155][   T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  234.471298][   T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  234.512464][   T75] bond0 (unregistering): Released all slaves
[  234.628769][   T75] team0 (unregistering): Port device team_slave_1 removed
[  234.654603][   T75] team0 (unregistering): Port device team_slave_0 removed
[  234.681898][   T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  234.707930][   T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  234.758253][   T75] bond0 (unregistering): Released all slaves