last executing test programs: 12.467174851s ago: executing program 3 (id=215): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) creat(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000340)='io\x00') preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) 11.777200466s ago: executing program 1 (id=216): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) kcmp(r1, r1, 0x2, r3, r2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f00000008c0)={0xc0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r5, 0x0, 0x0, 0x1) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f000000fec0)=ANY=[@ANYBLOB="04000000000010"]) 11.722692311s ago: executing program 4 (id=217): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_tcp(0x2, 0x1, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1e8640, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f00000000c0)={0x1, 0x2, 0x0, 0x8}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) sendto$inet(r1, 0x0, 0x0, 0x20000010, &(0x7f0000000540)={0x2, 0x400, @empty}, 0x10) 9.694179693s ago: executing program 4 (id=221): socketpair$unix(0x1, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) ioctl$COMEDI_INSN(r3, 0x8028640c, &(0x7f0000000080)={0xc000003, 0x3, &(0x7f0000000580)=[0x21, 0x8004, 0x1, 0x4, 0x9, 0x1ed, 0x2, 0x2, 0xbb, 0xc58f, 0x2060, 0xfed, 0xfffffffa, 0x1ac, 0xfffffff8], 0x0, 0x2}) 8.498641599s ago: executing program 4 (id=223): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='contention_begin\x00', r0, 0x0, 0x2}, 0x15) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000ec03"], 0x28}, 0x1, 0x0, 0x0, 0x200000e5}, 0x10) 8.494537589s ago: executing program 3 (id=224): open(0x0, 0x145142, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_emit_ethernet(0x4a, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r2, 0x2) 8.463902132s ago: executing program 0 (id=225): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x3}) syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRES32, @ANYRESOCT], 0x1, 0x86, &(0x7f0000000180)="$eJzs0qENAjEABdDPrYFgA3a4UQgSHAqCun1YhRHYAIHFQJoWQT0hubyX/Ca/31T0+rwsMyWrKXl1DsfTbrOvZ5ilIcnYUv5A6fexbou23x7n7Sf/fi8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MKQdd+/Lt4BAAD//9+0I9A=") 8.402456366s ago: executing program 4 (id=226): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x703, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb4}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000600)={[{@data_err_abort}, {@dax_inode}, {@sysvgroups}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8001}}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@resuid}, {@quota}], [{@pcr={'pcr', 0x3d, 0x1d}}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f0000001600)={{r1}, "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"}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) syz_mount_image$cramfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0xfd, 0x142, &(0x7f00000002c0)="$eJzskE9LMlEUh595/fe+b4oGBhYUQYvEMMcR22skCdlA4KZVoBMFmqIQLq11iz7ALIqglfgZylaWQtjncBe0LK53LII27e+zufc85/CDc7b+ASFwIdmsVesNq9m0yst7ZiGnoUnvA/5OftV6QwyXpb/LwJF43TA+k/oh8AeoWOulWkXU4wxEgewMHB570JGz/4ULC1exko6LrkBvTjrjB5dy3IIbskHpRN77NayKvNmvvFegZXuczeKx20VXhrZT2mvdzuPuoJ+Px5asCyM3f+OPuChaXhA7t+yXRD/+nOh2RsNBYccsmMOUYWyk9KSup0fm0yCfbl/i3vafwr7mHAmZ5xUZRTjXwNagM8kb32sBoHf1ZlaDvrC4+0kItO+daZLslA4inqnh86NQKBQKhUKhUCgUCsVv+QgAAP//tQVW5w==") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={0xd4, 0x30, 0x107, 0x70bd2a, 0x25dfdbfd, {0x3, 0x7c}, [@nested={0xbd, 0x136, 0x0, 0x1, [@generic="f3a830d6f6018390d28caad5a500fa272eccfdbc07fda8af7bd71e3980223dcadceacc2e52a844eb1b016ae40b90581b9ac8464bd6fda6a8efdfc2a84afc89f2d341c421570a4be93a6ff598910b0fd30685db50aa62722032a0f9b5ad3f2d179d185db74c751256852903a9f5bd3bd9f702950830d363686525ae305850de3cf5709f65ea5a7397b8393455ccf08f8ebfff70ffe6ebce43c134bd768b255f635a55368922e9ce943288a2cbdd6e72344c0dc79b10d0bc1f1b"]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000440)="9f000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7811e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d00020039000140010000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff55e461247604821d35c86ee54bbab3eaf8956e2ca426", 0x9f}], 0x1}, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r6, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r6, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x2}, 0xe0) sendmsg$inet6(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='h', 0x34000}], 0x1}, 0x0) writev(r6, &(0x7f0000000100)=[{&(0x7f0000000240)=',', 0x1}], 0x1) 7.379139039s ago: executing program 0 (id=227): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x20) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0x80044dfe, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x200000010, 0x0, 0x0) sendto$unix(r3, &(0x7f0000000080)="008e", 0x2, 0xd1, 0x0, 0x0) recvfrom$unix(r4, 0x0, 0x0, 0x10102, 0x0, 0x0) 7.335434492s ago: executing program 3 (id=228): socket$unix(0x1, 0x5, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000004100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/xfrm_stat\x00') r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9ecda75e2a7d49d5cbcb370c4d789390a328ba42c9c60cf2154d1b659aa709e8980a522cfb72f23ad87fb7019706ccae98cfe7c4fd23e8297b8cabc46ede1ac3da78f1b488c6357e7edfcd417df6660af20a54ecdcb02f689ae15ee655d4b7b1ea733e88ee9f53669388dff487c1c49953f3bc142112bd4b582b29b35d43962ed245c2cd5d5df40a3e0ed6beaf3b641e84b0f0dfa121a9efe05269f9f4a0e9bcbf43c7a90a711f453668c730c3badedca687b71a9c27bab9e724cc4a4918713031596ea6fd01124f973f257ccd9665aee7df4a9d64f079d176abc00000000d7af3e2dd4396f72373fb0a787a6129ca41181f5087fb843212550b58e3707d5a0399de36c2503836cbe2133de4f574e9e05c96788b0de1bd13e390445433d96737b964fa8af2ac4b2f0f9390ca93d8d3d810044d024359e067c4553230ab748947d33f8fc115ce9a49e6571c45a05d786cbd49342c236537dbbeec666b07baab917252113a5b9a77283189b518f356debe42d80cf2d0687b9c64d0253a6a09286fded6e4f8557b8fb4f25ca4fb138af8945c74bbc98748eaaa030be5317646f195e6e085ac6ddb29542e3581961259987241f7e7061526a7afec8962e74215f", 0x1f0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a41, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYRES16=r0], 0x0) 7.258713008s ago: executing program 1 (id=229): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000140), 0x0}, 0x20) 7.065978954s ago: executing program 1 (id=231): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00'}, 0x18) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)={0x14, r1, 0x72b}, 0x14}}, 0x0) 6.870611589s ago: executing program 1 (id=232): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_clone3(&(0x7f0000000380)={0x0, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000180), {0x9}, 0x0, 0x0, &(0x7f0000000240)=""/12, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x7}, 0x58) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000009c0)={'\x00', 0x0, 0xfffffff7, 0x1, 0x8, 0x8, r0}) sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x20440, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000004880), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, &(0x7f00000048c0)) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="7c000000010405000000000000000000000000000600064000000000080005400000000005000100010000000a0002000000000000000000080003400000c018060006400000000008000440000000000a000200"], 0x7c}}, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x24) syz_io_uring_setup(0x8dd, 0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, 0x0, 0x0, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 5.781934057s ago: executing program 1 (id=234): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) creat(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000340)='io\x00') preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) 4.215605432s ago: executing program 3 (id=237): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_PEC(r1, 0x708, 0x2) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000100)={0x0, 0x4, 0x5, &(0x7f0000000080)={0x6, "14a6c63d876ff44271f1aca6e4482718dab7299602aed83463604d70b41d4008e3"}}) userfaultfd(0x181c00) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x804) socket$inet6(0xa, 0x3, 0x88) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, r4, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000600)={r5, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r6, 0x0, 0x0, r7], [0x2b8]}) syz_io_uring_setup(0xed1, &(0x7f0000000400)={0x0, 0x586d, 0x10300, 0x3, 0x7a}, 0x0, 0x0) 4.106827711s ago: executing program 2 (id=238): open(0x0, 0x145142, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_emit_ethernet(0x4a, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r2, 0x2) 3.974428912s ago: executing program 4 (id=239): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) kcmp(r1, r1, 0x2, r3, r2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f00000008c0)={0xc0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r5, 0x0, 0x0, 0x1) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f000000fec0)=ANY=[@ANYBLOB="04000000000010"]) 2.960413543s ago: executing program 3 (id=240): r0 = socket(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) recvfrom$netrom(r0, &(0x7f00000001c0)=""/162, 0xa2, 0x0, &(0x7f0000000280)={{0x3, @default, 0x2}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) bind$netrom(r0, &(0x7f0000000300)={{0x3, @default, 0x5}, [@null, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000400000008000000010000008000000041ed94bdd5d81bafc2791ca8621604907191f4ac757238c222e5d598"], 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000400)=r2, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000140)=0x7fc, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @empty, 0x5}, 0x1c) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x26, &(0x7f00000002c0)=0x20000001, 0x4) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000040)="0d000000010001", 0x7) sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000440)={0xa, 0x4e20, 0x2, @empty, 0x6}, 0x1c, &(0x7f0000000c40)=[{&(0x7f0000000300)="d5", 0x1}], 0x1}}], 0x1, 0x20080058) close(0x3) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NHA_BLACKHOLE={0x4}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) 2.931594805s ago: executing program 2 (id=241): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/bus/input/devices\x00', 0x0, 0x0) syz_io_uring_setup(0x7585, &(0x7f0000000140)={0x0, 0xafed, 0x2, 0x2, 0x261, 0x0, r0}, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2.579789084s ago: executing program 0 (id=242): socket$alg(0x26, 0x5, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) chmod(0x0, 0xc) dup3(r2, r3, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x410781, 0x0) setfsgid(0xffffffffffffffff) 2.484999581s ago: executing program 0 (id=243): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) futex(&(0x7f000000cffc)=0x100000000000004, 0x0, 0x4, &(0x7f0000edfff0)={0x0, 0x989680}, 0x0, 0x0) futex(&(0x7f000000cffc), 0x1, 0x0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$peek(0xffffffffffffffff, r0, &(0x7f0000000040)) read$FUSE(0xffffffffffffffff, &(0x7f00000030c0)={0x2020}, 0x2020) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) listen(r3, 0x0) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000d00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, &(0x7f0000000e00)=ANY=[], 0x2, 0xc36, &(0x7f0000002480)="$eJzs3U9sHNd9B/DfG+2KK6WtmNhRnDQuNm2Ryorl6l9MxSrcVU2zDSDLQijmFoArkVIXpkiCpBrZSAumlx56CFAUPeREoDUKpGhgNEXQI9O6QHLxocipJ6KFjaDogS0CBCgQsJjZt+KKIm1GFClK+nxs6rs7+97sezPrGVnQb18AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABG/9+qFk6fSwx4FALCXLo1+5eRp938AeKJc8f//AAAAAAAAAAAAAACw36Uo4qlIMXtpNY1Xz7saFzv1W7fHhkc273YoVT0PVO3Ln8ap02fOfvHFoXO9vNiZ/pD+D9pn4vXRKxear8zcnJ2bnJ+fnGiOTXeuzUxMbnsPO+2/0fHqADRvvnFr4vr1+ebpF87c9fLtwQ8GPnZ08PzQcyee7bUdGx4ZGV1v0uhvX7vvgXRtVeFxMIo4ESme/+5PUjsiitj5sWjs7bnf6FA1iePVJMaGR6qJTHXa0wvli5d7B6KIaPZ1avWO0ebnImr1PZ3D1loRi+XwywEfL6c3Otuea1+dmmxebs8tdBY6M9OXU3e05XyaUcS5FLEUESsD9+6uHkXUIsW3j6ymqxFxoHccvlAVBm89jmIX57gN5Tib9Yil4hE4Z/vYQBTxWqT46bvH4lq+zlTXms9HvFbm9yPeLvPliFR+MM5GvL/J54hHUy2K+PPy/J9fTRPV9aB3Xbn41eaXp6/P9LXtXVd+wfvDPVeKh3R/OLQh98Y+vzY1ooh2dcVfTff/mx0AAAAAAAAAAAAAAAAAHrRDUcSnI8Wr//ZHVV1xVHXpR84P/f7gL/fXjD/zEfsp274QEYvF9mpyD+bCwMvpckoPuZb4SdaIIv441/9982EPBgAAAAAAAAAAAAAAAAAA4IlWxI8jxUvvHUtL0b+meGf6RvNK++pUd1XY3tq/vTXT19bW1pqpm62c4zkXcy7lXM65kjOK3D9nK+d4zsWcSzmXc67kjAO5f85WzvGcizmXci7nXMkZtdw/ZyvneM7FnEs5l3Ou5Ix9snYvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDjpIgifh4pvvX11RQpIloR49HN5YGHPToAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDSQivhepGj+QevOtlpEpOrfrmPlL2ejdbDMT0RrqMyXo3UhZ7vKWuubD2H87Ew9FfGjSDHQeOfOCc/nv959dudjEG9/Y/3ZZ2rdPNB7cfCDgY8dPXJ+aOTXntnqcdpsAMcvdqZv3W6ODY+MjPZtruV3/0TftsH8vsWDmToRMf/mW2+0p6Ym5+7/QfkR2EH3R+hBqj3OM60/uI/E4/IgavtiGA9n7jwByvv/+5Hit9/7994Nv3v/b8QvdZ/ducPHz/5k/f7/0sYdbfP+X9vYL9//y3v6Zvf/p/q2vZR/N1KvRTQWbs7Wj0Y05t9860TnZvvG5I3J6bMnT35paOhLZ07WD0Y0rnemJvsePZDDBQAAAAAAAAAAAAAAALB3UhG/GynaP1pNzYi4XdVrDZ4feu7EswfiQFVvdVfd9uujVy40X5m5OTs3OT8/OdEcm+5cm5mY3O7bNapyr7HhkV2ZzEc6tMvjP9R4ZWb2zbnOjT9c2PT1w40LV+cX5trXNn85DkUR0erfcrwa8NjwSDXoqU57uup6edNi+l9cPRXxH5Hi2tlm+lzeluv/N1b431X/v7hxR7tU///xvm3le6ZUxM8ixW/9xTPxuWqch+OeY5bb/U2kOH7us7ldHCzb9cbQ/V6BbmVg2fZ/IsU//Pzutr16yKfW257a9oF9RJTn/0ik+N6ffSd+PW+7+/sfNj//hzfuaJfO/9N92w7fVZy+46mTz/+JSPHyU+/Eb+RtH/b9H73v3jiWG9/5fo5dOv+f7Ns2mN/3Nx/M1AEAAAAAAAAAAB5p9VTE30aKH4zU0ot523b+/t/Exh3t0t//+lTftok9WpxmxwcVAAAAAPaJeirix5HixsI7d2qo767/7qv//J31+s/htOHV6s/5fqX63oAH+ed//Qbz+47vfNoAAAAAAAAAAAAAAAAAAACwr6RUxIt5PfXxqp5/Ysv11Jcjxav/9Xxul46W7XrrwA9WvzYuzUyfuDA1NXOtvdC+OjXZHJ1tX5ss+z4dKVb/+rO5b1Gtr95bb767xvv6WuxzkWLk73ptu2ux99Ymf3q97amy7ccjxX/+/d1te+tYf3K97emy7V9Fiq/90+Ztj663PVO2/U6k+OHXmr22h8u2ve9H/dR62xeuzRS7cFYAAAAAAAAAAAAAAAAAAAB40tRTEX8aKf775tKdWv68/n+972nl7W/0rfe/we1qnf/Bav3/rR7fz/r/1fcKLG71rgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8HhKUcRbkWL20mpaHiifdzUudqZv3R4bHtm826FU9TxQtS9/GqdOnzn7xReHzvXyw/s/aJ+O10evXGi+MnNzdm5yfn5yojk23bk2MzG57T3stP9Gx6sD0Lz5xq2J69fnm6dfOHPXy7cHPxj42NHB80PPnXi213ZseGRktK9NrX7f736PtMX2g1HEX0aK57/7k/SDgYgidn4sPuKzs9sOVZM4Xk1ibHikmshUpz29UL54uXcgiohmX6dW7xjtwbnYkVbEYjn8csDHy+mNzrbn2lenJpuX23MLnYXOzPTl1B1tOZ9mFHEuRSxFxMrAvburRxFvRIpvH1lN/zwQcaB3HL5wafQrJ09vPY5iF+e4DeU4m/WIpeIROGf72EAU8Y+R4qfvHot/GYioRfcnPh/xWpnfj3g7uuc7lR+MsxHvb/I54tFUiyL+tzz/51fTuwPl9aB3Xbn41eaXp6/P9LXtXVce+fvDXtrn16ZGFPHD6oq/mv7Vf9cAAAAAAAAAAAAAAAAA+0gRvxopXnrvWKrqg+/UFHembzSvtK9Odcv6erV/vZrptbW1tWbqZivneM7FnEs5l3Ou5Iwi98/ZKrOxtjaeny/mXMq5nHMlZxzI/XO2co7nXMy5lHM550rOqOX+OVs5x3Mu5lzKuZxzJWfsk9o9AAAAAAAAAAAAAAAAAADg8VJU/6T41tdX09pAd33p8ejm8oeuB/p/ezZGds//BwAA//+fEPY8") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) connect$bt_sco(r3, &(0x7f0000000100)={0x1f, @none}, 0x8) 2.082612343s ago: executing program 0 (id=244): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000280)='./bus\x00', 0x2000898, &(0x7f00000002c0), 0x1, 0x55ae, &(0x7f0000005600)="$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") syz_mount_image$fuse(0x0, 0x0, 0x322020, 0x0, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x18) r5 = creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) pwritev2(r5, &(0x7f00000006c0)=[{&(0x7f0000000280)='mpE', 0x3}], 0x1, 0x9, 0x0, 0x21) mount$bind(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x3002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0xb9cbbe05c791f09e) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0xa, 0x2}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r6, 0xffffffffffffffff, 0x0) 2.00234451s ago: executing program 3 (id=245): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000e909040000010300000009210500000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x18, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000340)={&(0x7f00000001c0)=[{0x9b, 0x200, 0x0, 0x0}], 0x1}) 1.860754171s ago: executing program 2 (id=246): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000000301010300000000000000000a0000020c00198008000180"], 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x4000) 1.713185133s ago: executing program 4 (id=247): socket$unix(0x1, 0x5, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000004100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/xfrm_stat\x00') r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f00000000c0)="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", 0x1f0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a41, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYRES16=r0], 0x0) 1.102568902s ago: executing program 2 (id=248): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0x25, 0x148, 0x0, 0x60, 0x270, 0x2a8, 0x2a8, 0x270, 0x2a8, 0x8000000, 0x0, {[{{@ip={@rand_addr=0x64010100, @multicast1, 0xffffff00, 0x0, 'syzkaller1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x6a, 0x1, 0x21}, 0x0, 0x70, 0xd0, 0x0, {0x200003ae, 0x7f00}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x2, 0x1, 0x1, 0x4], 0x4, 0x1}, {0xffffffffffffffff, [0x5, 0x6, 0x4, 0x4, 0x1, 0x3], 0xfe, 0x3}}}}, {{@ip={@rand_addr=0x64010100, @broadcast, 0x0, 0x0, 'veth1_to_bond\x00', 'wlan1\x00', {0xff}, {0xff}}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x280) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000000)=0x7, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000100)=""/92, &(0x7f00000001c0)=0x5c) 1.063022095s ago: executing program 0 (id=249): fanotify_init(0x200, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000140)=0x10004) shmget(0x3, 0x3000, 0x200, &(0x7f0000ffd000/0x3000)=nil) listen(0xffffffffffffffff, 0x3) socket$nl_sock_diag(0x10, 0x3, 0x4) set_mempolicy(0x2, 0x0, 0x3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1.010611859s ago: executing program 2 (id=250): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000640)=[0x0, 0x0], 0x42af}) 895.090488ms ago: executing program 1 (id=251): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_PEC(r1, 0x708, 0x2) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000100)={0x0, 0x4, 0x5, &(0x7f0000000080)={0x6, "14a6c63d876ff44271f1aca6e4482718dab7299602aed83463604d70b41d4008e3"}}) userfaultfd(0x181c00) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x804) socket$inet6(0xa, 0x3, 0x88) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, r4, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000600)={r5, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r6, 0x0, 0x0, r7], [0x2b8]}) syz_io_uring_setup(0xed1, &(0x7f0000000400)={0x0, 0x586d, 0x10300, 0x3, 0x7a}, 0x0, 0x0) 0s ago: executing program 2 (id=252): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x20) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0x80044dfe, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x200000010, 0x0, 0x0) sendto$unix(r3, &(0x7f0000000080)="008e", 0x2, 0xd1, 0x0, 0x0) recvfrom$unix(r4, 0x0, 0x0, 0x10102, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.117' (ED25519) to the list of known hosts. [ 45.186291][ T4171] cgroup: Unknown subsys name 'net' [ 45.313764][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 46.486115][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 48.111621][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 48.185836][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 48.239662][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 48.287374][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.294797][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.303354][ T4185] device bridge_slave_0 entered promiscuous mode [ 48.314625][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.321760][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.330193][ T4185] device bridge_slave_1 entered promiscuous mode [ 48.351727][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 48.387995][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 48.410917][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.422315][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.470062][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.477237][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.485665][ T4190] device bridge_slave_0 entered promiscuous mode [ 48.509720][ T4185] team0: Port device team_slave_0 added [ 48.515790][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.523024][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.533393][ T4190] device bridge_slave_1 entered promiscuous mode [ 48.540495][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.547564][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.555405][ T4194] device bridge_slave_0 entered promiscuous mode [ 48.576096][ T4185] team0: Port device team_slave_1 added [ 48.587370][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.594571][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.603011][ T4194] device bridge_slave_1 entered promiscuous mode [ 48.658768][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.683009][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.690511][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.698613][ T4183] device bridge_slave_0 entered promiscuous mode [ 48.706608][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.713722][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.739813][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.752937][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.764032][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.773835][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.781305][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.789289][ T4184] device bridge_slave_0 entered promiscuous mode [ 48.797277][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.804629][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.812415][ T4183] device bridge_slave_1 entered promiscuous mode [ 48.819937][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.826887][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.853027][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.871345][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.880993][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.888042][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.896706][ T4184] device bridge_slave_1 entered promiscuous mode [ 48.948972][ T4190] team0: Port device team_slave_0 added [ 48.957275][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.977418][ T4194] team0: Port device team_slave_0 added [ 48.985197][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.002856][ T4190] team0: Port device team_slave_1 added [ 49.010460][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.021095][ T4194] team0: Port device team_slave_1 added [ 49.028694][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.080029][ T4185] device hsr_slave_0 entered promiscuous mode [ 49.087013][ T4185] device hsr_slave_1 entered promiscuous mode [ 49.109183][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.116159][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.142629][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.161404][ T4184] team0: Port device team_slave_0 added [ 49.175300][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.182456][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.209185][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.227800][ T4183] team0: Port device team_slave_0 added [ 49.234411][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.241647][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.268118][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.280553][ T4184] team0: Port device team_slave_1 added [ 49.293256][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.300340][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.326998][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.339378][ T4183] team0: Port device team_slave_1 added [ 49.398191][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.405473][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.431914][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.457200][ T4190] device hsr_slave_0 entered promiscuous mode [ 49.464185][ T4190] device hsr_slave_1 entered promiscuous mode [ 49.471011][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 49.478951][ T4190] Cannot create hsr debugfs directory [ 49.490414][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.497417][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.524607][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.539026][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.546079][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.572526][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.584673][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.592188][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.618388][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.631527][ T4194] device hsr_slave_0 entered promiscuous mode [ 49.638166][ T4194] device hsr_slave_1 entered promiscuous mode [ 49.645298][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 49.652888][ T4194] Cannot create hsr debugfs directory [ 49.745893][ T4184] device hsr_slave_0 entered promiscuous mode [ 49.752943][ T4184] device hsr_slave_1 entered promiscuous mode [ 49.760213][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 49.767786][ T4184] Cannot create hsr debugfs directory [ 49.785813][ T4183] device hsr_slave_0 entered promiscuous mode [ 49.793077][ T4183] device hsr_slave_1 entered promiscuous mode [ 49.800037][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 49.807786][ T4183] Cannot create hsr debugfs directory [ 49.898989][ T4195] Bluetooth: hci3: command 0x0409 tx timeout [ 49.908911][ T1108] Bluetooth: hci2: command 0x0409 tx timeout [ 49.915269][ T1108] Bluetooth: hci4: command 0x0409 tx timeout [ 49.931158][ T1108] Bluetooth: hci1: command 0x0409 tx timeout [ 49.937263][ T1108] Bluetooth: hci0: command 0x0409 tx timeout [ 50.050391][ T4185] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 50.065544][ T4185] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 50.074658][ T4185] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 50.087232][ T4185] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 50.123750][ T4190] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 50.134978][ T4190] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 50.144272][ T4190] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 50.156926][ T4190] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 50.232430][ T4194] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 50.246560][ T4194] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 50.255963][ T4194] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 50.293824][ T4194] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 50.322826][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.347598][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.357213][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.365846][ T4183] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 50.376601][ T4183] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 50.390341][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.405610][ T4183] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 50.415573][ T4183] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 50.433502][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.443094][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.452483][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.459785][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.480866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.495778][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.525119][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.534393][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.543657][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.550741][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.560764][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.570211][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.600802][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.610417][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.620252][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.628191][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.639326][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.648106][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.656204][ T4184] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 50.667790][ T4184] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 50.676381][ T4184] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 50.697469][ T4184] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 50.717005][ T4185] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 50.729051][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.768103][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.777258][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.786737][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.795810][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.804792][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.814390][ T3094] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.821556][ T3094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.830327][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.839529][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.848528][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.857069][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.865784][ T3094] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.873166][ T3094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.881896][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.890607][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.900190][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.914813][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.924345][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.932787][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.943904][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.953163][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.969155][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.982847][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.995425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.014657][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.039828][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.050184][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.063560][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.074205][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.085240][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.106859][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.121660][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.133653][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.141830][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.150097][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.157924][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.166926][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.188899][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.197672][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.206971][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.214090][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.222542][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.232393][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.241578][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.248667][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.257300][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.266248][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.275015][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.282209][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.292970][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.301368][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.344381][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.362130][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 51.373671][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 51.382081][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.391123][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.399889][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.408678][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.417572][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.427145][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.435842][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.443092][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.452743][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.461590][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.471030][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.485175][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.494561][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.503416][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.512166][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.546755][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.560669][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.571217][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.586705][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.595437][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.604669][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.613618][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.622461][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.631056][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.639869][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.669002][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.681730][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.693150][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.702226][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.711260][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.719905][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.728983][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.737407][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.746503][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.755320][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.777337][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.786375][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.799359][ T4185] device veth0_vlan entered promiscuous mode [ 51.815125][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.826490][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.838806][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.846686][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 51.855354][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 51.866424][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.875882][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.884529][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.891718][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.908659][ T4185] device veth1_vlan entered promiscuous mode [ 51.931735][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 51.940619][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.960649][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.977317][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.986189][ T4241] Bluetooth: hci3: command 0x041b tx timeout [ 51.988555][ T4234] Bluetooth: hci0: command 0x041b tx timeout [ 52.024162][ T4234] Bluetooth: hci1: command 0x041b tx timeout [ 52.031083][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 52.031432][ T4234] Bluetooth: hci4: command 0x041b tx timeout [ 52.045173][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.053743][ T4234] Bluetooth: hci2: command 0x041b tx timeout [ 52.062375][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.071979][ T3094] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.079091][ T3094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.087430][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.097231][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.107007][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.116165][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.127225][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.136953][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.147593][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.157456][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.167769][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.201793][ T4190] device veth0_vlan entered promiscuous mode [ 52.216351][ T4185] device veth0_macvtap entered promiscuous mode [ 52.226603][ T4185] device veth1_macvtap entered promiscuous mode [ 52.240296][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.250630][ T4184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 52.261267][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.274761][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.282788][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.291609][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.300559][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.309630][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.318007][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.326875][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.334613][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.343356][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.352489][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.361203][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.370060][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.384272][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.393313][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.402891][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 52.427646][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.437139][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.450375][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.473554][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.513445][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.527026][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.544931][ T4190] device veth1_vlan entered promiscuous mode [ 52.562886][ T4183] device veth0_vlan entered promiscuous mode [ 52.574786][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.585365][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.596176][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.609498][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.631076][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.645298][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.654617][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.673099][ T4190] device veth0_macvtap entered promiscuous mode [ 52.684596][ T4190] device veth1_macvtap entered promiscuous mode [ 52.698716][ T4183] device veth1_vlan entered promiscuous mode [ 52.708036][ T4185] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.718952][ T4185] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.727793][ T4185] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.737068][ T4185] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.751936][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 52.760649][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.770668][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.781779][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.798163][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.809157][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.822325][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.848622][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 52.857070][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 52.867617][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.876761][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.887168][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.895273][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.904661][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.914225][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.925504][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.936569][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.953909][ T4183] device veth0_macvtap entered promiscuous mode [ 52.968162][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.977587][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.989171][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.997639][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.007000][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.040415][ T4190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.049847][ T4190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.059879][ T4190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.069039][ T4190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.088966][ T4183] device veth1_macvtap entered promiscuous mode [ 53.097027][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.106515][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.115641][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.125783][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.134634][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.197985][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.209312][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.217754][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.226965][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.246120][ T4184] device veth0_vlan entered promiscuous mode [ 53.269232][ T4194] device veth0_vlan entered promiscuous mode [ 53.276480][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.284755][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.294763][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.305715][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.315897][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.326835][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.340098][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.364054][ T4194] device veth1_vlan entered promiscuous mode [ 53.374148][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.382192][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.390688][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.398868][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.407630][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.418067][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.428849][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.439938][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.450819][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.463008][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.484239][ T4184] device veth1_vlan entered promiscuous mode [ 53.494892][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.504882][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.517268][ T4183] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.526733][ T4183] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.535743][ T4183] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.544746][ T4183] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.566239][ T502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.581838][ T502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.621053][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 53.629869][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.638921][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.652104][ T3094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.653013][ T4194] device veth0_macvtap entered promiscuous mode [ 53.666152][ T3094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.681209][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.695158][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 53.711518][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.720949][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.732953][ T4194] device veth1_macvtap entered promiscuous mode [ 53.760708][ T4184] device veth0_macvtap entered promiscuous mode [ 53.776874][ T3094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.792689][ T4184] device veth1_macvtap entered promiscuous mode [ 53.800458][ T3094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.816668][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.829596][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.839966][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.850800][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.861369][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.872473][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.884705][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.896038][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.904972][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.915816][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.924231][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 53.932921][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.942086][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.956570][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.967182][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.977846][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.988878][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.000013][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.012261][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.022581][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.033334][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.044527][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.064631][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.073617][ T502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.076170][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 54.089257][ T21] Bluetooth: hci4: command 0x040f tx timeout [ 54.093428][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.095314][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 54.105757][ T502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.112040][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 54.125162][ T21] Bluetooth: hci3: command 0x040f tx timeout [ 54.125453][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.143851][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.153884][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.164844][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.181206][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.192052][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.204087][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.216596][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 54.226378][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.235063][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.245382][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.258564][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.269428][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.280362][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.290653][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.302026][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.312159][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.323385][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.334428][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.348164][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.357064][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.365785][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.374930][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.391844][ T4194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.400987][ T4194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.410389][ T4194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.420236][ T4194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.433107][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.443058][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.460474][ T502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.488818][ T502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.550840][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 54.642825][ T502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.666410][ T502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.885008][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 54.961226][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.001465][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.082514][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.148379][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.475410][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.484555][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.633886][ T3094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.657140][ T3094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.673601][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.789818][ T3094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.901038][ T3094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.028536][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.149251][ T4234] Bluetooth: hci3: command 0x0419 tx timeout [ 56.157608][ T4234] Bluetooth: hci0: command 0x0419 tx timeout [ 56.177908][ T4234] Bluetooth: hci1: command 0x0419 tx timeout [ 56.203835][ T4234] Bluetooth: hci4: command 0x0419 tx timeout [ 56.206958][ T4303] loop1: detected capacity change from 0 to 4096 [ 56.212888][ T4307] loop3: detected capacity change from 0 to 1024 [ 56.226841][ T4234] Bluetooth: hci2: command 0x0419 tx timeout [ 56.260722][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 56.313082][ T4307] hfsplus: gid requires an argument [ 56.344579][ T4303] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 56.360898][ T4307] hfsplus: unable to parse mount options [ 56.386360][ T4314] loop0: detected capacity change from 0 to 256 [ 56.421189][ T4303] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 56.538512][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 56.538732][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 56.547420][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 56.556387][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 56.570421][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 56.574325][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 56.583276][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 56.592424][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 56.601252][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 56.610235][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 57.177750][ T4323] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 57.204369][ T4323] CIFS mount error: No usable UNC path provided in device string! [ 57.204369][ T4323] [ 57.215220][ T4323] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 57.676110][ T4328] device hsr0 entered promiscuous mode [ 57.703854][ T4331] syz.0.10 uses obsolete (PF_INET,SOCK_PACKET) [ 57.874675][ T4339] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 58.198085][ T4347] loop0: detected capacity change from 0 to 128 [ 59.664192][ T4299] attempt to access beyond end of device [ 59.664192][ T4299] loop0: rw=1, want=1041, limit=128 [ 59.701056][ T4359] loop2: detected capacity change from 0 to 2048 [ 59.708834][ T4363] loop4: detected capacity change from 0 to 256 [ 60.323166][ T4359] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 60.404907][ T4359] EXT4-fs error (device loop2): ext4_find_extent:929: inode #2: comm syz.2.20: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 60.578714][ T4371] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 61.206044][ T4387] netlink: 32 bytes leftover after parsing attributes in process `syz.4.25'. [ 62.026165][ T4388] ax25_connect(): syz.1.28 uses autobind, please contact jreuter@yaina.de [ 62.821369][ T4405] loop2: detected capacity change from 0 to 1024 [ 62.846703][ T4405] ======================================================= [ 62.846703][ T4405] WARNING: The mand mount option has been deprecated and [ 62.846703][ T4405] and is ignored by this kernel. Remove the mand [ 62.846703][ T4405] option from the mount to silence this warning. [ 62.846703][ T4405] ======================================================= [ 63.003148][ T4405] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,,errors=continue. Quota mode: none. [ 63.096565][ T4405] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.134913][ T4413] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 63.183537][ T4416] loop1: detected capacity change from 0 to 256 [ 65.700049][ T4428] netlink: 32 bytes leftover after parsing attributes in process `syz.3.39'. [ 66.672112][ T4438] fuse: Bad value for 'fd' [ 68.217905][ T4453] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 68.224879][ T4453] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 68.269966][ T4453] vhci_hcd vhci_hcd.0: Device attached [ 68.478871][ T4195] vhci_hcd: vhci_device speed not set [ 68.558437][ T4195] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 68.647025][ T4227] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 69.468487][ T4227] usb 4-1: config 0 has no interfaces? [ 69.474836][ T4227] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 69.503689][ T4227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.670720][ T4227] usb 4-1: config 0 descriptor?? [ 69.953806][ T4455] usb 39-1: recv xbuf, 0 [ 69.956322][ T4292] usb 4-1: USB disconnect, device number 2 [ 70.039220][ T4195] vhci_hcd: vhci_device speed not set [ 70.118781][ T9] vhci_hcd: stop threads [ 70.129481][ T4195] usb 39-1: device descriptor read/64, error -71 [ 70.154532][ T9] vhci_hcd: release socket [ 70.244709][ T9] vhci_hcd: disconnect device [ 70.399447][ T4195] vhci_hcd: vhci_device speed not set [ 70.791208][ T4465] loop1: detected capacity change from 0 to 32768 [ 70.945981][ T4480] loop0: detected capacity change from 0 to 65 [ 73.171970][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 73.178599][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.257509][ T4480] BFS-fs: bfs_fill_super(): NOTE: filesystem loop0 was created with 512 inodes, the real maximum is 511, mounting anyway [ 73.631534][ T4488] loop3: detected capacity change from 0 to 2048 [ 73.643568][ T4465] JBD2: recovery failed [ 73.658597][ T4465] (syz.1.50,4465,0):ocfs2_journal_load:1105 ERROR: Failed to load journal! [ 73.698613][ T4465] (syz.1.50,4465,1):ocfs2_check_volume:2437 ERROR: ocfs2 journal load failed! -5 [ 73.724136][ T4465] (syz.1.50,4465,1):ocfs2_check_volume:2493 ERROR: status = -5 [ 73.755424][ T4465] (syz.1.50,4465,0):ocfs2_mount_volume:1824 ERROR: status = -5 [ 73.879340][ T4465] (syz.1.50,4465,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 73.925944][ T4499] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 74.143581][ T4505] loop1: detected capacity change from 0 to 1024 [ 74.152045][ T4507] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 76.481946][ T1325] cfg80211: failed to load regulatory.db [ 76.704657][ T4528] loop0: detected capacity change from 0 to 32768 [ 77.446898][ T4528] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.68 (4528) [ 77.493474][ T26] audit: type=1326 audit(1756267496.060:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4542 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59aeea9be9 code=0x7ffc0000 [ 77.807537][ T26] audit: type=1326 audit(1756267496.210:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4542 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f59aeea9be9 code=0x7ffc0000 [ 78.191815][ T26] audit: type=1326 audit(1756267496.220:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4542 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59aeea9be9 code=0x7ffc0000 [ 78.331770][ T4528] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 78.340959][ T4528] BTRFS info (device loop0): using free space tree [ 78.347482][ T4528] BTRFS info (device loop0): has skinny extents [ 78.594176][ T4557] process 'syz.4.74' launched '/dev/fd/-1' with NULL argv: empty string added [ 79.207730][ T4561] loop1: detected capacity change from 0 to 1024 [ 79.274643][ T26] audit: type=1326 audit(1756267496.230:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4542 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59aeea9be9 code=0x7ffc0000 [ 79.311234][ T4561] hfsplus: gid requires an argument [ 79.316550][ T4561] hfsplus: unable to parse mount options [ 79.368737][ T26] audit: type=1326 audit(1756267496.240:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4542 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f59aeea9be9 code=0x7ffc0000 [ 79.383623][ T4528] BTRFS error (device loop0): open_ctree failed: -12 [ 79.551718][ T4590] CIFS mount error: No usable UNC path provided in device string! [ 79.551718][ T4590] [ 79.744139][ T4590] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 80.646851][ T4501] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by udevd (4501) [ 82.648357][ T13] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 82.938433][ T13] usb 2-1: Using ep0 maxpacket: 16 [ 83.081469][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 83.268594][ T13] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 83.277747][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.307002][ T13] usb 2-1: Product: syz [ 83.311479][ T13] usb 2-1: Manufacturer: syz [ 83.316082][ T13] usb 2-1: SerialNumber: syz [ 83.348008][ T13] usb 2-1: config 0 descriptor?? [ 83.390024][ T13] hub 2-1:0.0: bad descriptor, ignoring hub [ 83.408344][ T13] hub: probe of 2-1:0.0 failed with error -5 [ 84.802600][ T4633] loop0: detected capacity change from 0 to 32768 [ 84.962956][ T4633] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 84.971979][ T4633] BTRFS info (device loop0): using free space tree [ 84.978576][ T4633] BTRFS info (device loop0): has skinny extents [ 85.063653][ T4650] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 85.151308][ T4633] BTRFS info (device loop0): enabling ssd optimizations [ 85.968389][ T26] audit: type=1800 audit(1756267504.140:7): pid=4668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.90" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 86.061020][ T23] usb 2-1: USB disconnect, device number 2 [ 86.348322][ T4501] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop0 scanned by udevd (4501) [ 86.400506][ T4657] udevd[4657]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 86.650782][ T4687] loop3: detected capacity change from 0 to 65 [ 86.839010][ T4687] BFS-fs: bfs_fill_super(): NOTE: filesystem loop3 was created with 512 inodes, the real maximum is 511, mounting anyway [ 91.165973][ T4720] loop3: detected capacity change from 0 to 32768 [ 93.685373][ T4743] loop2: detected capacity change from 0 to 65 [ 93.839189][ T4743] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway [ 95.075912][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 95.354514][ T4757] bridge0: port 3(batadv1) entered blocking state [ 95.378495][ T4757] bridge0: port 3(batadv1) entered disabled state [ 95.398344][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 95.407655][ T4757] device batadv1 entered promiscuous mode [ 95.518440][ T23] usb 5-1: config 0 has an invalid interface number: 230 but max is 0 [ 95.532698][ T23] usb 5-1: config 0 has no interface number 0 [ 95.633759][ T23] usb 5-1: config 0 interface 230 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 8 [ 95.644929][ T23] usb 5-1: config 0 interface 230 altsetting 2 endpoint 0x1 has invalid maxpacket 447, setting to 64 [ 95.659443][ T23] usb 5-1: config 0 interface 230 has no altsetting 0 [ 95.908910][ T23] usb 5-1: New USB device found, idVendor=157e, idProduct=3007, bcdDevice=65.eb [ 96.235282][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.247926][ T23] usb 5-1: Product: syz [ 96.338480][ T23] usb 5-1: Manufacturer: syz [ 96.350917][ T9] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 96.360654][ T9] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 96.371284][ T23] usb 5-1: SerialNumber: syz [ 96.382620][ T23] usb 5-1: config 0 descriptor?? [ 96.448617][ T4745] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 96.508947][ T23] usb 5-1: Could not find all expected endpoints [ 96.797365][ T4773] loop1: detected capacity change from 0 to 2048 [ 97.414176][ T4773] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 99.602284][ T4321] usb 5-1: USB disconnect, device number 2 [ 101.013855][ T4797] loop0: detected capacity change from 0 to 65 [ 101.234652][ T4797] BFS-fs: bfs_fill_super(): NOTE: filesystem loop0 was created with 512 inodes, the real maximum is 511, mounting anyway [ 101.434648][ T4800] loop3: detected capacity change from 0 to 4096 [ 106.191662][ T4819] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 106.259697][ T4817] loop3: detected capacity change from 0 to 2048 [ 106.318715][ T4817] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 106.349082][ T4817] NILFS (loop3): mounting unchecked fs [ 106.531661][ T4817] NILFS (loop3): recovery complete [ 107.402009][ T4833] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 107.923507][ T4842] loop1: detected capacity change from 0 to 2048 [ 108.104185][ T4842] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 108.622969][ T4847] netlink: 32 bytes leftover after parsing attributes in process `syz.3.141'. [ 109.482255][ T4855] loop1: detected capacity change from 0 to 1024 [ 109.858318][ T4321] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 110.168425][ T4321] usb 5-1: Using ep0 maxpacket: 32 [ 110.288616][ T4321] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 110.297163][ T4321] usb 5-1: config 0 has no interface number 0 [ 110.451743][ T4867] netlink: 32 bytes leftover after parsing attributes in process `syz.0.150'. [ 111.278599][ T4321] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 111.319852][ T1273] hfsplus: b-tree write err: -5, ino 4 [ 111.333763][ T4321] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.509692][ T4321] usb 5-1: Product: syz [ 111.586333][ T4321] usb 5-1: Manufacturer: syz [ 111.603551][ T4870] netlink: 'syz.0.154': attribute type 10 has an invalid length. [ 111.688531][ T4321] usb 5-1: SerialNumber: syz [ 111.715874][ T4321] usb 5-1: config 0 descriptor?? [ 111.728346][ T4870] team0: Port device dummy0 added [ 111.890006][ T4321] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 111.903269][ T4321] usb 5-1: selecting invalid altsetting 1 [ 111.909495][ T4321] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 111.922281][ T4321] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 111.933909][ T4321] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 111.943734][ T4321] usb 5-1: media controller created [ 111.983513][ T4321] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 112.296943][ T4890] netlink: 32 bytes leftover after parsing attributes in process `syz.2.156'. [ 112.548276][ T4892] loop0: detected capacity change from 0 to 47 [ 113.067247][ T4897] loop2: detected capacity change from 0 to 1024 [ 113.250591][ T4321] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 113.259417][ T4321] zl10353_read_register: readreg error (reg=127, ret==-110) [ 114.446526][ T4859] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 114.825855][ T4241] usb 5-1: USB disconnect, device number 3 [ 114.953845][ T4914] netlink: 32 bytes leftover after parsing attributes in process `syz.1.164'. [ 115.605631][ T4921] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 115.713699][ T4924] Zero length message leads to an empty skb [ 115.848305][ T4321] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 116.438720][ T4321] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 116.448034][ T4321] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.613499][ T4321] usb 3-1: Product: syz [ 116.617878][ T4321] usb 3-1: Manufacturer: syz [ 116.623193][ T4321] usb 3-1: SerialNumber: syz [ 116.629635][ T4321] usb 3-1: config 0 descriptor?? [ 116.906413][ T4932] netlink: 32 bytes leftover after parsing attributes in process `syz.3.169'. [ 118.028135][ T4935] loop3: detected capacity change from 0 to 65536 [ 118.051495][ T1108] usb 3-1: USB disconnect, device number 2 [ 118.112872][ T4917] loop4: detected capacity change from 0 to 40427 [ 118.198651][ T4917] F2FS-fs (loop4): Unrecognized mount option "age_extent_cache" or missing value [ 118.216707][ T4942] loop0: detected capacity change from 0 to 1024 [ 118.243670][ T4935] XFS (loop3): Mounting V5 Filesystem [ 118.442232][ T4935] XFS (loop3): Ending clean mount [ 120.314353][ T1108] XFS (loop3): Metadata CRC error detected at xfs_agf_read_verify+0x18d/0x250, xfs_agf block 0x1 [ 120.432160][ T1108] XFS (loop3): Unmount and run xfs_repair [ 120.438525][ T1108] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 120.446867][ T1108] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 120.455993][ T1108] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 120.465840][ T1108] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 120.478907][ T1108] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 120.487945][ T1108] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 120.496995][ T1108] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 120.506773][ T1108] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 120.515840][ T1108] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 120.525350][ T4950] XFS (loop3): metadata I/O error in "xfs_read_agf+0x23c/0x500" at daddr 0x1 len 1 error 74 [ 120.579617][ T4972] netlink: 32 bytes leftover after parsing attributes in process `syz.1.178'. [ 121.107706][ T4950] XFS (loop3): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1556/0x1b60 (fs/xfs/libxfs/xfs_defer.c:504). Shutting down filesystem. [ 121.126080][ T4950] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 121.207072][ T4185] XFS (loop3): Unmounting Filesystem [ 121.395648][ T4979] loop4: detected capacity change from 0 to 1024 [ 121.456977][ T4980] netlink: 20 bytes leftover after parsing attributes in process `syz.2.181'. [ 122.724056][ T4983] loop2: detected capacity change from 0 to 32768 [ 123.567694][ T4990] loop0: detected capacity change from 0 to 1024 [ 124.802228][ T144] hfsplus: b-tree write err: -5, ino 4 [ 127.203816][ T5010] loop4: detected capacity change from 0 to 2048 [ 127.262421][ T5010] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 128.623528][ T5013] sched: RT throttling activated [ 128.825848][ T5024] netlink: 32 bytes leftover after parsing attributes in process `syz.3.193'. [ 128.995642][ T5018] loop1: detected capacity change from 0 to 4096 [ 129.069092][ T5018] ntfs3: Unknown parameter 'windows_names' [ 129.737395][ T5034] tmpfs: Unknown parameter 'quota' [ 131.712748][ T5039] loop4: detected capacity change from 0 to 2048 [ 131.750911][ T5041] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 132.508271][ T26] audit: type=1800 audit(1756267551.070:8): pid=5039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.199" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 132.767792][ T5039] NILFS error (device loop4): nilfs_sufile_mark_dirty: active segment 3 is erroneous [ 132.782364][ T5039] Remounting filesystem read-only [ 133.440856][ T4194] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 134.452185][ T5057] device bond_slave_0 entered promiscuous mode [ 134.458841][ T5057] device bond_slave_1 entered promiscuous mode [ 134.465659][ T5057] device macsec1 entered promiscuous mode [ 134.471676][ T5057] device bond0 entered promiscuous mode [ 135.492680][ T5066] netlink: 32 bytes leftover after parsing attributes in process `syz.3.206'. [ 135.895600][ T5078] loop2: detected capacity change from 0 to 65 [ 136.200601][ T4583] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 136.342615][ T5078] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway [ 136.420731][ T5083] loop0: detected capacity change from 0 to 4096 [ 136.538390][ T4583] usb 5-1: Using ep0 maxpacket: 16 [ 136.569954][ T5083] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 136.738377][ T4583] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 137.578600][ T4583] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 137.618317][ T4583] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.392033][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.414594][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.919166][ T4583] usb 5-1: config 0 descriptor?? [ 138.938437][ T4583] usb 5-1: can't set config #0, error -71 [ 138.949802][ T4583] usb 5-1: USB disconnect, device number 4 [ 139.477529][ T5104] overlayfs: conflicting lowerdir path [ 139.839658][ T5107] netlink: 32 bytes leftover after parsing attributes in process `syz.0.220'. [ 141.827265][ T5103] loop2: detected capacity change from 0 to 4096 [ 141.846756][ T5124] loop4: detected capacity change from 0 to 1024 [ 141.897217][ T5124] EXT4-fs (loop4): Unrecognized mount option "pcr=00000000000000000029" or missing value [ 141.968887][ T5103] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 141.989577][ T5103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.219'. [ 141.998645][ T5103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.219'. [ 142.218319][ T1108] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 142.369373][ T5143] loop2: detected capacity change from 0 to 32768 [ 142.476269][ T1108] usb 4-1: Using ep0 maxpacket: 16 [ 142.581968][ T5124] loop4: detected capacity change from 0 to 8 [ 142.614317][ T5145] netlink: 32 bytes leftover after parsing attributes in process `syz.1.232'. [ 142.865526][ T5124] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 143.169575][ T1108] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.180021][ T1108] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 143.192600][ T5124] cramfs: wrong magic [ 143.397997][ T1108] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 144.818518][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.829904][ T1108] usb 4-1: Product: syz [ 144.834111][ T1108] usb 4-1: Manufacturer: syz [ 144.839469][ T1108] usb 4-1: SerialNumber: syz [ 145.018684][ T1108] usb 4-1: 0:2 : does not exist [ 145.214389][ T1108] usb 4-1: USB disconnect, device number 3 [ 147.453625][ T5190] netlink: 48 bytes leftover after parsing attributes in process `syz.2.246'. [ 147.488488][ T4174] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 147.788560][ T4174] usb 4-1: Using ep0 maxpacket: 16 [ 148.018578][ T4174] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.058265][ T4174] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.124826][ T4174] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 148.154539][ T4174] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.207290][ T4174] usb 4-1: config 0 descriptor?? [ 149.079435][ T4583] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 149.143261][ T4174] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 149.254238][ T4174] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 149.270886][ T4174] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 149.283130][ T4174] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 149.315492][ T4174] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 149.323977][ T4174] mcp2221 0003:04D8:00DD.0001: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 149.357940][ T5187] udc-core: couldn't find an available UDC or it's busy [ 149.378375][ T5187] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 149.403352][ T5187] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 149.415399][ T5187] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 149.418414][ T4583] usb 5-1: Using ep0 maxpacket: 16 [ 149.423917][ T5187] CPU: 1 PID: 5187 Comm: syz.3.245 Not tainted 5.15.189-syzkaller #0 [ 149.423938][ T5187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 149.423952][ T5187] RIP: 0010:mcp_i2c_xfer+0x58/0x420 [ 149.452526][ T5187] Code: 01 00 00 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 08 48 89 df e8 99 72 67 fa 48 8b 1b 48 89 d8 48 c1 e8 03 4d 89 f4 48 89 04 24 <42> 80 3c 30 00 74 08 48 89 df e8 79 72 67 fa 4c 8b 33 4d 8d ae 70 [ 149.472292][ T5187] RSP: 0018:ffffc9000372fb30 EFLAGS: 00010246 [ 149.478355][ T5187] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 149.486667][ T5187] RDX: ffffc9000cae1000 RSI: 0000000000000426 RDI: 0000000000000427 [ 149.494820][ T5187] RBP: 0000000000000001 R08: dffffc0000000000 R09: ffffed100efa90d3 [ 149.502885][ T5187] R10: ffffed100efa90d3 R11: 1ffff1100efa90d2 R12: dffffc0000000000 [ 149.511012][ T5187] R13: 1ffff1100efa902b R14: dffffc0000000000 R15: ffff888024b30460 [ 149.519062][ T5187] FS: 00007fb55d5356c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 149.527969][ T5187] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 149.534546][ T5187] CR2: 0000001b3271cff8 CR3: 000000002b602000 CR4: 00000000003506e0 [ 149.542840][ T5187] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 149.551020][ T5187] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 149.559115][ T5187] Call Trace: [ 149.562376][ T5187] [ 149.565370][ T5187] ? mcp_gpio_get+0x260/0x260 [ 149.570072][ T5187] __i2c_transfer+0x864/0x2060 [ 149.574832][ T5187] ? rwsem_down_read_slowpath+0x990/0x990 [ 149.580919][ T5187] ? i2c_cmd+0x110/0x110 [ 149.585172][ T5187] ? __might_fault+0xb7/0x110 [ 149.590175][ T5187] i2c_transfer+0x24c/0x390 [ 149.594705][ T5187] ? __i2c_transfer+0x2060/0x2060 [ 149.599824][ T5187] ? __might_fault+0xb3/0x110 [ 149.605021][ T5187] ? _copy_from_user+0x111/0x170 [ 149.609952][ T5187] i2cdev_ioctl_rdwr+0x3da/0x6c0 [ 149.614878][ T5187] i2cdev_ioctl+0x5ba/0x750 [ 149.619515][ T5187] ? i2cdev_write+0x120/0x120 [ 149.624202][ T5187] ? bpf_lsm_file_ioctl+0x5/0x10 [ 149.631481][ T5187] ? security_file_ioctl+0x7c/0xa0 [ 149.639005][ T5187] ? i2cdev_write+0x120/0x120 [ 149.644364][ T5187] __se_sys_ioctl+0xfa/0x170 [ 149.649084][ T5187] do_syscall_64+0x4c/0xa0 [ 149.653500][ T5187] ? clear_bhb_loop+0x30/0x80 [ 149.658273][ T5187] ? clear_bhb_loop+0x30/0x80 [ 149.663037][ T5187] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 149.668933][ T5187] RIP: 0033:0x7fb55f2cdbe9 [ 149.673328][ T5187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.693256][ T5187] RSP: 002b:00007fb55d535038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 149.701656][ T5187] RAX: ffffffffffffffda RBX: 00007fb55f4f4fa0 RCX: 00007fb55f2cdbe9 [ 149.710301][ T5187] RDX: 0000200000000340 RSI: 0000000000000707 RDI: 0000000000000005 [ 149.718438][ T5187] RBP: 00007fb55f350e19 R08: 0000000000000000 R09: 0000000000000000 [ 149.726419][ T5187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.734400][ T5187] R13: 00007fb55f4f5038 R14: 00007fb55f4f4fa0 R15: 00007ffc371cb9c8 [ 149.742376][ T5187] [ 149.745388][ T5187] Modules linked in: [ 149.888876][ T5187] ---[ end trace 38fa5220a64ccc90 ]--- [ 149.894565][ T5187] RIP: 0010:mcp_i2c_xfer+0x58/0x420 [ 149.908915][ T4583] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.919203][ T5187] Code: 01 00 00 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 08 48 89 df e8 99 72 67 fa 48 8b 1b 48 89 d8 48 c1 e8 03 4d 89 f4 48 89 04 24 <42> 80 3c 30 00 74 08 48 89 df e8 79 72 67 fa 4c 8b 33 4d 8d ae 70 [ 149.938998][ C0] vkms_vblank_simulate: vblank timer overrun [ 149.947186][ T4583] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 149.975615][ T5187] RSP: 0018:ffffc9000372fb30 EFLAGS: 00010246 [ 149.991952][ T5187] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 150.013731][ T5187] RDX: ffffc9000cae1000 RSI: 0000000000000426 RDI: 0000000000000427 [ 150.036501][ T5187] RBP: 0000000000000001 R08: dffffc0000000000 R09: ffffed100efa90d3 [ 150.062723][ T5187] R10: ffffed100efa90d3 R11: 1ffff1100efa90d2 R12: dffffc0000000000 [ 150.087291][ T5187] R13: 1ffff1100efa902b R14: dffffc0000000000 R15: ffff888024b30460 [ 150.110767][ T5187] FS: 00007fb55d5356c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 150.138514][ T4583] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 150.147585][ T4583] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.166978][ T5187] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 150.173846][ T5187] CR2: 00007fbe88b96f17 CR3: 000000002b602000 CR4: 00000000003506f0 [ 150.174016][ T4583] usb 5-1: Product: syz [ 150.182299][ T5187] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 150.186159][ T4583] usb 5-1: Manufacturer: syz [ 150.195147][ T5187] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 150.200657][ T4583] usb 5-1: SerialNumber: syz [ 150.208619][ T5187] Kernel panic - not syncing: Fatal exception [ 150.218239][ T5187] Kernel Offset: disabled [ 150.222552][ T5187] Rebooting in 86400 seconds..