last executing test programs: 17.609159378s ago: executing program 3 (id=340): socket$inet6(0xa, 0x80002, 0x88) syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f00000000c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x4, [@null, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40) connect$rose(0xffffffffffffffff, &(0x7f00000001c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @bcast}, 0x1c) sendto$rose(0xffffffffffffffff, 0x0, 0x0, 0xc0, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x5, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast]}, 0x40) socket$inet6_udp(0xa, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x2, 0x80805, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000180)={0x0, 0x1, &(0x7f0000000340)=[r0], &(0x7f0000000280), &(0x7f0000000200), &(0x7f00000002c0), 0x0, 0x7f}) 16.592334181s ago: executing program 3 (id=343): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x5e5, 0x1, 0x80000001}) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8004}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket(0x2a, 0x800000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYRESOCT], &(0x7f0000000200)='GPL\x00', 0x1ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r6) sendmsg$NLBL_MGMT_C_LISTALL(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, r7, 0xb03, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20040880) r8 = fsmount(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r9) syz_io_uring_setup(0x9ee, &(0x7f00000003c0)={0x0, 0xc95c, 0x100, 0x3, 0xfffffffe, 0x0, r1}, &(0x7f0000000100), &(0x7f0000000280)) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) 13.906573489s ago: executing program 3 (id=347): sendmsg$inet(0xffffffffffffffff, 0x0, 0x2008084) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = open(0x0, 0x60840, 0x1d2) fcntl$setlease(r3, 0x400, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r4 = syz_open_dev$vbi(&(0x7f00000028c0), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x640, 0x1, 0x1, 0xd59f83, 0x7, 0x42, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xba3, 0x9, 0x0, {0x8, 0xffffffff}, 0xd0, 0x9}}) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, 0x0) r6 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r6, 0xc034564b, 0x0) 10.70033631s ago: executing program 3 (id=355): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x34, 0x4, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c0d4}, 0xc40) 10.651891844s ago: executing program 4 (id=357): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000600), 0xfec8) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, 0x0, 0x0, &(0x7f0000000740)=""/135, 0x87, 0x2000000}}], 0x1, 0xcb, 0x0) 8.949765762s ago: executing program 4 (id=360): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$dsp(0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, 0x0) 8.655934946s ago: executing program 1 (id=364): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) gettid() signalfd4(0xffffffffffffffff, &(0x7f0000000300)={[0xffffffffffffffff]}, 0x8, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r1, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) sendfile(r1, r2, 0x0, 0xffffffff000) 7.719957212s ago: executing program 0 (id=365): getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@local}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[], [{@fsname={'fsname', 0x3d, '-'}}, {@smackfsroot={'smackfsroot', 0x3d, ',\x1d#\x85'}}, {@hash}, {@euid_lt={'euid<', r0}}]}, 0x3, 0x453, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x23, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x22041, 0x0) sendmsg$nl_generic(r4, 0x0, 0x20008010) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2012024, 0x0) rename(&(0x7f0000001800)='./file0\x00', &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 7.50520533s ago: executing program 1 (id=366): sendmsg$inet(0xffffffffffffffff, 0x0, 0x2008084) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = open(0x0, 0x60840, 0x1d2) fcntl$setlease(r3, 0x400, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r4 = syz_open_dev$vbi(&(0x7f00000028c0), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x640, 0x1, 0x1, 0xd59f83, 0x7, 0x42, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xba3, 0x9, 0x0, {0x8, 0xffffffff}, 0xd0, 0x9}}) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, 0x0) r6 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r6, 0xc034564b, 0x0) 7.434985025s ago: executing program 2 (id=367): socket$inet6(0xa, 0x80002, 0x88) syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f00000000c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x4, [@null, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40) connect$rose(0xffffffffffffffff, &(0x7f00000001c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @bcast}, 0x1c) sendto$rose(0xffffffffffffffff, 0x0, 0x0, 0xc0, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x5, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast]}, 0x40) socket$inet6_udp(0xa, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x2, 0x80805, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x0, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000280), &(0x7f0000000200), &(0x7f00000002c0), 0x0, 0x7f}) 7.224715252s ago: executing program 2 (id=368): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) syz_clone3(&(0x7f0000000680)={0x9000000, 0x0, 0x0, 0x0, {0x2e}, &(0x7f0000000400)=""/234, 0xea, &(0x7f00000005c0)=""/104, &(0x7f0000000300)=[0x0, 0x0], 0x2, {r0}}, 0x58) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) mknod$loop(0x0, 0x2, 0x1) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000180)='source', &(0x7f0000000500)='c::=/\x10\xcd\xb7@\x88\xedP9\xf5,\xc1\t\xb7b\x12A\x1d`\x16\xac!\xa7\x9c\x8f\xc98\xcb-\t\xcf-\xdd\xc4\xafK\x8d\xb1R8m\xc1[A\x99g\x9d\x8a\":\xc1I;\x03\xe2<\xdf;\xce\x93\xd3\xd2\x19\x964\xeb\x03\xbc\x7fo\xe8\x89\x01:\x8b-\xab[X\x10\x18\x8d\xbf\xe1H\x9a_\xe3*\xc6\xca\xae\xe0\xb9\x1e\xe1\xf4\x90\xe2\x12]\x01v\xbd\x0e\x0f J\x1d\xcb\xd9:\xa6U\f|\xce*\xa4\x8aJ$\xa5&\x1fu\x1b\x15v\xd0\xd8\x9fH54\xaa\xf2t.I\x96\x1c\t\xe42\x02\x85\xa0\xc2T\x02\x99\xfe\x1e\xb6\xf47u\xa7\x1c\xf5\"K\f\x03i\xba', 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), r5) sendmsg$IEEE802154_LIST_IFACE(r5, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x14, r6, 0x50be6fea6f3bdfbb, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) 7.149514108s ago: executing program 4 (id=369): syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0x3, 0x4, 0x3}, 'syz0\x00', 0x4b}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x641, 0x40) mkdir(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r3, 0x25, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x109301) flock(r2, 0x2) fcntl$lock(r2, 0x25, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80082, 0x0) 6.200283966s ago: executing program 1 (id=370): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) 6.199412376s ago: executing program 2 (id=371): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) 6.161323579s ago: executing program 0 (id=372): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1100, 0x208000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000600)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 6.087748515s ago: executing program 2 (id=373): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) ioctl$KDFONTOP_GET(r1, 0x4b72, 0x0) r2 = syz_clone3(&(0x7f0000000340)={0x200103000, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) write$uinput_user_dev(r1, 0x0, 0x0) get_robust_list(r2, &(0x7f0000000680)=&(0x7f0000000580)={&(0x7f00000004c0), 0x0, &(0x7f0000000540)={&(0x7f0000000500)}}, &(0x7f00000006c0)=0x18) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) io_uring_setup(0x4f04, &(0x7f00000002c0)={0x0, 0x48c7, 0x400, 0x0, 0xffffffff, 0x0, r1}) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x80000, 0x0, 0x0, 0x40f00}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a03000000000000000000010000000900030073797a32000000000900010073797a300000000054000000060a01040000000000000000010000002c00048028000180080001006e6174001c000280080005400000000408000140000000010800024000004f0208000b40000000000900010073797a30"], 0xc8}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) symlink(0x0, &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mknodat$loop(r4, &(0x7f0000000440)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) 5.835879506s ago: executing program 4 (id=374): connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') socket$inet6_sctp(0xa, 0x1, 0x84) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) 5.701824516s ago: executing program 0 (id=375): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x5e5, 0x1, 0x80000001}) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8004}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket(0x2a, 0x800000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYRESOCT], &(0x7f0000000200)='GPL\x00', 0x1ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r6) sendmsg$NLBL_MGMT_C_LISTALL(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, r7, 0xb03, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20040880) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r8) syz_io_uring_setup(0x9ee, &(0x7f00000003c0)={0x0, 0xc95c, 0x100, 0x3, 0xfffffffe, 0x0, r1}, &(0x7f0000000100), &(0x7f0000000280)) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) 5.700911667s ago: executing program 1 (id=376): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1100, 0x208000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) 3.850037077s ago: executing program 1 (id=377): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x4b, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000002200)={0x2020}, 0xffffffac) 3.681509181s ago: executing program 0 (id=378): socket$inet6(0xa, 0x80002, 0x88) syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f00000000c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x4, [@null, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40) connect$rose(0xffffffffffffffff, &(0x7f00000001c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @bcast}, 0x1c) sendto$rose(0xffffffffffffffff, 0x0, 0x0, 0xc0, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x5, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast]}, 0x40) socket$inet6_udp(0xa, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x2, 0x80805, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x0, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000280), &(0x7f0000000200), &(0x7f00000002c0), 0x0, 0x7f}) 2.313471262s ago: executing program 3 (id=379): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) gettid() signalfd4(0xffffffffffffffff, &(0x7f0000000300)={[0xffffffffffffffff]}, 0x8, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r1, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) sendfile(r1, 0xffffffffffffffff, 0x0, 0xffffffff000) 2.312793812s ago: executing program 1 (id=380): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000019008111e0020f060d8107040a60000000000000001455a12a00090008000699e3ffffff14000500fe80817806000567b8b7b94002000009080016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b61602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x0) syz_usb_connect(0x0, 0x256, &(0x7f0000000440)=ANY=[], 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0x7, 0x0, 0x0) shutdown(r2, 0x0) 2.269416056s ago: executing program 4 (id=381): sendmsg$inet(0xffffffffffffffff, 0x0, 0x2008084) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = open(0x0, 0x60840, 0x1d2) fcntl$setlease(r3, 0x400, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r4 = syz_open_dev$vbi(&(0x7f00000028c0), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x640, 0x1, 0x1, 0xd59f83, 0x7, 0x42, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xba3, 0x9, 0x0, {0x8, 0xffffffff}, 0xd0, 0x9}}) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, 0x0) r6 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r6, 0xc034564b, 0x0) 2.08599281s ago: executing program 2 (id=382): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) syz_clone3(&(0x7f0000000680)={0x9000000, 0x0, 0x0, 0x0, {0x2e}, &(0x7f0000000400)=""/234, 0xea, &(0x7f00000005c0)=""/104, &(0x7f0000000300)=[0x0, 0x0], 0x2, {r0}}, 0x58) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) mknod$loop(0x0, 0x2, 0x1) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000180)='source', &(0x7f0000000500)='c::=/\x10\xcd\xb7@\x88\xedP9\xf5,\xc1\t\xb7b\x12A\x1d`\x16\xac!\xa7\x9c\x8f\xc98\xcb-\t\xcf-\xdd\xc4\xafK\x8d\xb1R8m\xc1[A\x99g\x9d\x8a\":\xc1I;\x03\xe2<\xdf;\xce\x93\xd3\xd2\x19\x964\xeb\x03\xbc\x7fo\xe8\x89\x01:\x8b-\xab[X\x10\x18\x8d\xbf\xe1H\x9a_\xe3*\xc6\xca\xae\xe0\xb9\x1e\xe1\xf4\x90\xe2\x12]\x01v\xbd\x0e\x0f J\x1d\xcb\xd9:\xa6U\f|\xce*\xa4\x8aJ$\xa5&\x1fu\x1b\x15v\xd0\xd8\x9fH54\xaa\xf2t.I\x96\x1c\t\xe42\x02\x85\xa0\xc2T\x02\x99\xfe\x1e\xb6\xf47u\xa7\x1c\xf5\"K\f\x03i\xba', 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), r5) sendmsg$IEEE802154_LIST_IFACE(r5, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x14, r6, 0x50be6fea6f3bdfbb, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) 2.08516848s ago: executing program 0 (id=383): getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@local}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[], [{@fsname={'fsname', 0x3d, '-'}}, {@smackfsroot={'smackfsroot', 0x3d, ',\x1d#\x85'}}, {@hash}, {@euid_lt={'euid<', r0}}]}, 0x3, 0x453, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x23, &(0x7f0000000080)=0x501b09fe, 0x4) openat$adsp1(0xffffffffffffff9c, 0x0, 0x22041, 0x0) sendmsg$nl_generic(r4, 0x0, 0x20008010) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) mount(0x0, 0x0, 0x0, 0x2012024, 0x0) rename(&(0x7f0000001800)='./file0\x00', &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.175746164s ago: executing program 4 (id=384): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000002c0), 0x111}}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0xacd2}], 0x1, 0x12040, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$unix(r1, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f00000018c0), 0x0, 0x0, 0x0, 0x4040080}}], 0x1, 0x40000) socket$inet6_sctp(0xa, 0x1, 0x84) 128.385389ms ago: executing program 2 (id=385): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1100, 0x208000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000600)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 50.293516ms ago: executing program 0 (id=386): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1100, 0x208000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) 0s ago: executing program 3 (id=387): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000280)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x6, 0x1, 0x9, 0x1, 0x1, 0xfff, "5f10c59bbc30"}}, 0x11e) write$UHID_INPUT2(r0, &(0x7f0000000400), 0x6) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.33' (ED25519) to the list of known hosts. [ 57.508750][ T4173] cgroup: Unknown subsys name 'net' [ 57.646855][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.084725][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 60.593643][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 60.635072][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 60.721344][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 60.739247][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 60.812717][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 60.822146][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.829289][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.838800][ T4191] device bridge_slave_0 entered promiscuous mode [ 60.876080][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.883403][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.891521][ T4191] device bridge_slave_1 entered promiscuous mode [ 60.899328][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.906512][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.914674][ T4197] device bridge_slave_0 entered promiscuous mode [ 60.942167][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.949268][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.957564][ T4184] device bridge_slave_0 entered promiscuous mode [ 60.972319][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.979380][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.988041][ T4197] device bridge_slave_1 entered promiscuous mode [ 61.006998][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.014457][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.022807][ T4184] device bridge_slave_1 entered promiscuous mode [ 61.066785][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.104926][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.115516][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.126742][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.144609][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.152002][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.159872][ T4189] device bridge_slave_0 entered promiscuous mode [ 61.169073][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.187490][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.213148][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.220258][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.228772][ T4189] device bridge_slave_1 entered promiscuous mode [ 61.258909][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.266220][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.274602][ T4183] device bridge_slave_0 entered promiscuous mode [ 61.300508][ T4191] team0: Port device team_slave_0 added [ 61.308806][ T4197] team0: Port device team_slave_0 added [ 61.315089][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.322478][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.330246][ T4183] device bridge_slave_1 entered promiscuous mode [ 61.347715][ T4184] team0: Port device team_slave_0 added [ 61.355223][ T4191] team0: Port device team_slave_1 added [ 61.370058][ T4197] team0: Port device team_slave_1 added [ 61.390968][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.401185][ T4184] team0: Port device team_slave_1 added [ 61.408366][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.454087][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.461324][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.488066][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.500760][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.507728][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.534151][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.547216][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.578444][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.585481][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.611437][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.623204][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.630177][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.656398][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.669467][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.679366][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.686415][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.713260][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.726860][ T4189] team0: Port device team_slave_0 added [ 61.747636][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.759643][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.785778][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.799056][ T4189] team0: Port device team_slave_1 added [ 61.849217][ T4183] team0: Port device team_slave_0 added [ 61.874514][ T4191] device hsr_slave_0 entered promiscuous mode [ 61.881672][ T4191] device hsr_slave_1 entered promiscuous mode [ 61.897170][ T4183] team0: Port device team_slave_1 added [ 61.916674][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.924095][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.950211][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.962619][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.969580][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.995584][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.018949][ T4197] device hsr_slave_0 entered promiscuous mode [ 62.026243][ T4197] device hsr_slave_1 entered promiscuous mode [ 62.033094][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.041410][ T4197] Cannot create hsr debugfs directory [ 62.056998][ T4184] device hsr_slave_0 entered promiscuous mode [ 62.064159][ T4184] device hsr_slave_1 entered promiscuous mode [ 62.070752][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.078321][ T4184] Cannot create hsr debugfs directory [ 62.099927][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.107110][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.133199][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.167547][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.174856][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.201173][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.231296][ T1325] Bluetooth: hci1: command 0x0409 tx timeout [ 62.237915][ T1325] Bluetooth: hci2: command 0x0409 tx timeout [ 62.305456][ T4189] device hsr_slave_0 entered promiscuous mode [ 62.311590][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 62.311649][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 62.323723][ T1325] Bluetooth: hci3: command 0x0409 tx timeout [ 62.330525][ T4189] device hsr_slave_1 entered promiscuous mode [ 62.337828][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.345554][ T4189] Cannot create hsr debugfs directory [ 62.353995][ T4183] device hsr_slave_0 entered promiscuous mode [ 62.361715][ T4183] device hsr_slave_1 entered promiscuous mode [ 62.368221][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.376017][ T4183] Cannot create hsr debugfs directory [ 62.622634][ T4191] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.635329][ T4191] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.650194][ T4191] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.662508][ T4191] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.721932][ T4197] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.743560][ T4197] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.753264][ T4197] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.766533][ T4197] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.846424][ T4189] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.862980][ T4189] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.876720][ T4189] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.896389][ T4189] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.911279][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.936974][ T4184] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.960912][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.970285][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.981975][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.988852][ T4184] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.998697][ T4184] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.008181][ T4184] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.035301][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.044921][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.054290][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.061544][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.070334][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.149301][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.166624][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.176157][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.185059][ T437] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.192186][ T437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.201196][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.209874][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.233200][ T4183] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.242938][ T4183] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.258986][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.269120][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.278756][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.288890][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.298276][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.307367][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.315760][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.332678][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.341902][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.351422][ T4183] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.361895][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.378508][ T4183] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.388187][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.396348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.408707][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.434456][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.468820][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.477560][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.488140][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.500201][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.511862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.520904][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.529383][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.536488][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.557898][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.566251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.581861][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.590650][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.597735][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.614226][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.624643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.633169][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.640224][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.648394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.665322][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.684799][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.692745][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.700508][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.714289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.723666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.732645][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.741527][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.750104][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.759529][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.774581][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.784117][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.792857][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.799920][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.818805][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.828585][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.838242][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.847952][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.856900][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.864030][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.892326][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.900367][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.909485][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.919683][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.926816][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.935289][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.942993][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.950433][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.959324][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.968284][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.976806][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.985217][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.002779][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.016581][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.063741][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.080030][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.091360][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.105482][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.116605][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.125725][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.134816][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.143685][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.153422][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.162481][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.170946][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.179229][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.188078][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.197067][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.205519][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.217640][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.225684][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.235349][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.244677][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.263828][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.286653][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.299353][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.311322][ T4265] Bluetooth: hci2: command 0x041b tx timeout [ 64.320383][ T4265] Bluetooth: hci1: command 0x041b tx timeout [ 64.345112][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.357031][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.370511][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.380141][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.390889][ T4235] Bluetooth: hci3: command 0x041b tx timeout [ 64.397404][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.405237][ T4235] Bluetooth: hci0: command 0x041b tx timeout [ 64.411670][ T4235] Bluetooth: hci4: command 0x041b tx timeout [ 64.413302][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.430026][ T4191] device veth0_vlan entered promiscuous mode [ 64.460428][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.489132][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.498126][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.515807][ T4191] device veth1_vlan entered promiscuous mode [ 64.534306][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.558918][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.594423][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.605638][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.614096][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.622416][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.641995][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.659701][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.696879][ T4191] device veth0_macvtap entered promiscuous mode [ 64.708559][ T4191] device veth1_macvtap entered promiscuous mode [ 64.717682][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.727310][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.736362][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.745085][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.752178][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.760416][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.769649][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.778367][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.785497][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.794082][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.802339][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.809807][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.819026][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.831595][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.840304][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.849607][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.859774][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.899442][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.911199][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.922175][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.930923][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.938423][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.946814][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.956396][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.965533][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.987675][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.007643][ T4197] device veth0_vlan entered promiscuous mode [ 65.015892][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.024531][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.035379][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.044439][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.053543][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.062270][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.070690][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.078996][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.087537][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.096635][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.105613][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.125054][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.133341][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.142762][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.151726][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.165868][ T4197] device veth1_vlan entered promiscuous mode [ 65.175214][ T4191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.184642][ T4191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.194750][ T4191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.204157][ T4191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.220550][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.233732][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.243147][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.252459][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.261399][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.303450][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.315633][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.324894][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.333108][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.342693][ T4189] device veth0_vlan entered promiscuous mode [ 65.398290][ T4189] device veth1_vlan entered promiscuous mode [ 65.417048][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.425811][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.437767][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.447405][ T4184] device veth0_vlan entered promiscuous mode [ 65.465470][ T4197] device veth0_macvtap entered promiscuous mode [ 65.481790][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.490525][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.499278][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.507413][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.517882][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.526778][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.553063][ T4197] device veth1_macvtap entered promiscuous mode [ 65.570426][ T4184] device veth1_vlan entered promiscuous mode [ 65.625396][ T4189] device veth0_macvtap entered promiscuous mode [ 65.644214][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.653022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.663831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.666413][ T4272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.680168][ T4272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.689592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.699929][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.711244][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.719124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.731077][ T4189] device veth1_macvtap entered promiscuous mode [ 65.757901][ T4184] device veth0_macvtap entered promiscuous mode [ 65.768731][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.779867][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.792953][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.808448][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.819125][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.828581][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.839760][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.847544][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.857175][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.866162][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.877945][ T4184] device veth1_macvtap entered promiscuous mode [ 65.888500][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.899770][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.912867][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.928327][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.949112][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.965331][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.976355][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.992821][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.009387][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.019929][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.029660][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.039970][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.049289][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.058167][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.071289][ T4197] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.080138][ T4197] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.089653][ T4197] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.089954][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.098733][ T4197] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.113047][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.127509][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.138214][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.148815][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.161959][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.174923][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.188637][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.199418][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.215162][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.227082][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.243111][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.254476][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.266062][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.278013][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.289903][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.300200][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.310929][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.322210][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.332700][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.344028][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.351815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.359766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.369289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.378606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.389365][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.391717][ T4265] Bluetooth: hci1: command 0x040f tx timeout [ 66.399457][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.410380][ T4265] Bluetooth: hci2: command 0x040f tx timeout [ 66.412697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.430038][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.439067][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.448731][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.457598][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.472451][ T4228] Bluetooth: hci4: command 0x040f tx timeout [ 66.478924][ T4228] Bluetooth: hci0: command 0x040f tx timeout [ 66.495711][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.505241][ T4228] Bluetooth: hci3: command 0x040f tx timeout [ 66.516570][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.527057][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.540521][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.626304][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.641631][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.728745][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.744915][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.756799][ T4183] device veth0_vlan entered promiscuous mode [ 66.789428][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.839447][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.004829][ T4183] device veth1_vlan entered promiscuous mode [ 67.047952][ T4272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.058524][ T4272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.073939][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.091021][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 67.102512][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 67.111530][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 67.120430][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 67.129379][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 67.138312][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 67.147267][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 67.156226][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 67.165491][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 67.174520][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 67.236547][ T4297] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 67.824422][ T4272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.838882][ T4272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.859810][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.032956][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.062495][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.109069][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.118280][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.130365][ T4183] device veth0_macvtap entered promiscuous mode [ 68.164365][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.172821][ T4183] device veth1_macvtap entered promiscuous mode [ 68.179275][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.192224][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.200323][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.223578][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.232460][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.284830][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.307712][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.320487][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.334105][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.349847][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.366237][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.445422][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.477934][ T4248] Bluetooth: hci2: command 0x0419 tx timeout [ 68.484069][ T4248] Bluetooth: hci1: command 0x0419 tx timeout [ 68.549848][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.560241][ T4248] Bluetooth: hci3: command 0x0419 tx timeout [ 68.566520][ T4248] Bluetooth: hci0: command 0x0419 tx timeout [ 68.641876][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.171916][ T4248] Bluetooth: hci4: command 0x0419 tx timeout [ 69.273099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.292140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.309202][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.324901][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.351217][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.380657][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.401044][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.422143][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.448808][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.515801][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.538084][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.587867][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.603297][ T437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.628896][ T437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.648302][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.692999][ T4183] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.782000][ T4317] sched: RT throttling activated [ 70.832304][ T4183] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.112729][ T4183] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.284948][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.292096][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.445980][ T4183] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.487783][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.510328][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.531349][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.539695][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.158838][ T4332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.288571][ T4332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.462145][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.830012][ T4302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.838675][ T4302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.852151][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.712554][ T4370] binder_alloc: 4369: binder_alloc_buf, no vma [ 76.734657][ T4370] binder: 4369:4370 ioctl c0306201 200000000240 returned -11 [ 78.662731][ T4384] overlayfs: failed to resolve './file1': -2 [ 79.936864][ T4392] loop2: detected capacity change from 0 to 65536 [ 80.535673][ T4395] binder_alloc: 4394: binder_alloc_buf, no vma [ 80.551551][ T4395] binder: 4394:4395 ioctl c0306201 200000000240 returned -11 [ 80.559781][ T4392] XFS (loop2): Mounting V5 Filesystem [ 80.797731][ T4392] XFS (loop2): Ending clean mount [ 80.984058][ T4191] XFS (loop2): Unmounting Filesystem [ 82.354274][ T4423] netlink: 'syz.4.31': attribute type 10 has an invalid length. [ 82.905740][ T4426] loop0: detected capacity change from 0 to 128 [ 82.916826][ T4423] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 83.017379][ T4426] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 83.053161][ T4426] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 83.536193][ T4432] binder_alloc: 4431: binder_alloc_buf, no vma [ 83.579666][ T4432] binder: 4431:4432 ioctl c0306201 200000000240 returned -11 [ 84.559323][ T4442] loop3: detected capacity change from 0 to 65536 [ 85.451097][ T4433] delete_channel: no stack [ 85.475003][ T4440] Zero length message leads to an empty skb [ 85.494885][ T4442] XFS (loop3): Mounting V5 Filesystem [ 85.597554][ T4442] XFS (loop3): Ending clean mount [ 85.684148][ T4197] XFS (loop3): Unmounting Filesystem [ 86.138707][ T4474] capability: warning: `syz.1.44' uses deprecated v2 capabilities in a way that may be insecure [ 87.455305][ T1108] cfg80211: failed to load regulatory.db [ 88.186836][ T4488] overlayfs: missing 'lowerdir' [ 88.721779][ T4497] comedi comedi0: pcl711: I/O port conflict (0x2,16) [ 89.060335][ T4494] loop4: detected capacity change from 0 to 65536 [ 89.348777][ T4494] XFS (loop4): Mounting V5 Filesystem [ 90.084924][ T4494] XFS (loop4): Ending clean mount [ 92.680416][ T1108] XFS (loop4): Metadata CRC error detected at xfs_agf_read_verify+0x18d/0x250, xfs_agf block 0x1 [ 92.763532][ T1108] XFS (loop4): Unmount and run xfs_repair [ 92.793367][ T1108] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 92.821540][ T1108] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 92.858267][ T1108] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 93.035611][ T1108] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 93.045018][ T1108] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 93.054028][ T1108] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 93.063429][ T1108] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 93.073082][ T1108] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 93.091061][ T1108] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 93.148987][ T4524] XFS (loop4): metadata I/O error in "xfs_read_agf+0x23c/0x500" at daddr 0x1 len 1 error 74 [ 93.218558][ T4524] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x514/0x8a0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 93.233598][ T4524] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 93.874638][ T4183] XFS (loop4): Unmounting Filesystem [ 96.219598][ T4544] ISOFS: Unable to identify CD-ROM format. [ 97.892772][ T4561] tmpfs: Unknown parameter 'usrquota' [ 98.381537][ T4564] loop3: detected capacity change from 0 to 65536 [ 99.072941][ T4564] XFS (loop3): Mounting V5 Filesystem [ 99.149630][ T4564] XFS (loop3): Ending clean mount [ 99.402663][ T4227] XFS (loop3): Metadata CRC error detected at xfs_agf_read_verify+0x18d/0x250, xfs_agf block 0x1 [ 99.491088][ T4227] XFS (loop3): Unmount and run xfs_repair [ 99.518346][ T4227] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 99.653819][ T4227] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 99.663341][ T4227] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 99.672608][ T4227] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 99.681988][ T4227] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 99.691405][ T4227] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 99.700573][ T4227] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 99.782681][ T4227] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 99.810696][ T4227] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 99.819752][ T4593] XFS (loop3): metadata I/O error in "xfs_read_agf+0x23c/0x500" at daddr 0x1 len 1 error 74 [ 99.837557][ T4593] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x514/0x8a0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 99.852308][ T4593] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 100.801382][ T4197] XFS (loop3): Unmounting Filesystem [ 102.736488][ T4624] overlayfs: missing 'lowerdir' [ 103.745470][ T4635] binder: BINDER_SET_CONTEXT_MGR already set [ 103.754719][ T4638] loop1: detected capacity change from 0 to 512 [ 103.770891][ T4635] binder: 4630:4635 ioctl 4018620d 2000000002c0 returned -16 [ 103.800220][ T4635] binder: 4630:4635 ioctl c0306201 200000000240 returned -11 [ 103.846508][ T4640] capability: warning: `syz.3.86' uses 32-bit capabilities (legacy support in use) [ 104.691081][ T4638] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 104.954505][ T4644] loop4: detected capacity change from 0 to 65536 [ 105.855852][ T4638] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 105.907189][ T4638] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 105.937000][ T4644] XFS (loop4): Mounting V5 Filesystem [ 105.952759][ T4638] System zones: 1-12 [ 105.959259][ T4227] hid (null): invalid report_size -1358781365 [ 105.973448][ T4661] loop3: detected capacity change from 0 to 128 [ 106.015727][ T4638] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2228: inode #15: comm syz.1.85: corrupted in-inode xattr [ 106.030118][ T4661] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 106.041602][ T4227] hid-generic 0001:0009:0001.0001: unknown main item tag 0x3 [ 106.051191][ T4227] hid-generic 0001:0009:0001.0001: unknown main item tag 0x6 [ 106.053336][ T4661] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 106.058641][ T4227] hid-generic 0001:0009:0001.0001: invalid report_size -1358781365 [ 106.090870][ T4638] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.85: couldn't read orphan inode 15 (err -117) [ 106.144269][ T4638] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x000000000000faca,nolazytime,debug,noload,mblk_io_submit,commit=0x0000000000000005,lazytime,acl,,errors=continue. Quota mode: none. [ 106.249819][ T4227] hid-generic 0001:0009:0001.0001: item 0 4 1 7 parsing failed [ 106.360782][ T4227] hid-generic: probe of 0001:0009:0001.0001 failed with error -22 [ 106.534764][ T4644] XFS (loop4): Ending clean mount [ 107.075125][ T4618] XFS (loop4): Metadata CRC error detected at xfs_agf_read_verify+0x18d/0x250, xfs_agf block 0x1 [ 107.846756][ T4618] XFS (loop4): Unmount and run xfs_repair [ 107.998808][ T4678] overlayfs: missing 'lowerdir' [ 108.160716][ T4618] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 108.220747][ T4618] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 108.313032][ T4618] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 108.415945][ T4618] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 108.438764][ T4618] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 108.464438][ T4618] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 108.485514][ T4618] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 108.506504][ T4618] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 108.527220][ T4618] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 108.624908][ T4668] XFS (loop4): metadata I/O error in "xfs_read_agf+0x23c/0x500" at daddr 0x1 len 1 error 74 [ 108.773546][ T150] block nbd0: Attempted send on invalid socket [ 108.774203][ T150] blk_update_request: I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 108.775069][ T4686] EXT4-fs (nbd0): unable to read superblock [ 109.107590][ T4668] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x514/0x8a0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 109.107653][ T4668] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 109.417752][ T4183] XFS (loop4): Unmounting Filesystem [ 109.530929][ T4692] binder: BINDER_SET_CONTEXT_MGR already set [ 109.536965][ T4692] binder: 4689:4692 ioctl 4018620d 2000000002c0 returned -16 [ 109.571709][ T4692] binder: 4689:4692 ioctl c0306201 200000000240 returned -11 [ 110.101977][ T4698] loop3: detected capacity change from 0 to 32768 [ 110.201169][ T4698] XFS: ikeep mount option is deprecated. [ 110.618469][ T4698] XFS (loop3): Mounting V5 Filesystem [ 110.651613][ T4712] loop1: detected capacity change from 0 to 8 [ 110.720130][ T4698] XFS (loop3): Ending clean mount [ 110.731000][ T4698] XFS (loop3): Quotacheck needed: Please wait. [ 112.285450][ T4698] XFS (loop3): Quotacheck: Done. [ 113.020349][ T4727] loop2: detected capacity change from 0 to 65536 [ 113.127785][ T4734] binder: BINDER_SET_CONTEXT_MGR already set [ 113.140245][ T4197] XFS (loop3): Unmounting Filesystem [ 113.217193][ T4734] binder: 4733:4734 ioctl 4018620d 2000000002c0 returned -16 [ 113.237373][ T4727] XFS (loop2): Mounting V5 Filesystem [ 113.317652][ T4734] binder: 4733:4734 ioctl c0306201 200000000240 returned -11 [ 113.516434][ T4727] XFS (loop2): Ending clean mount [ 113.896788][ T4571] XFS (loop2): Metadata CRC error detected at xfs_agf_read_verify+0x18d/0x250, xfs_agf block 0x1 [ 113.946015][ T4571] XFS (loop2): Unmount and run xfs_repair [ 113.992802][ T4571] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 114.000238][ T4571] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 114.227196][ T4571] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 114.236902][ T4571] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 114.246633][ T4571] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 114.255872][ T4571] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 114.265068][ T4571] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 114.274643][ T4571] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 115.034904][ T4571] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 115.045212][ T4751] XFS (loop2): metadata I/O error in "xfs_read_agf+0x23c/0x500" at daddr 0x1 len 1 error 74 [ 115.061434][ T4751] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x514/0x8a0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 115.076128][ T4751] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 115.306028][ T4191] XFS (loop2): Unmounting Filesystem [ 116.444632][ T4777] loop3: detected capacity change from 0 to 512 [ 116.497487][ T4777] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 116.515936][ T4777] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 116.568939][ T4777] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 116.585106][ T4777] System zones: 1-12 [ 116.810444][ T4777] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2228: inode #15: comm syz.3.113: corrupted in-inode xattr [ 117.074683][ T4777] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.113: couldn't read orphan inode 15 (err -117) [ 117.396435][ T4777] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x000000000000faca,nolazytime,debug,noload,mblk_io_submit,commit=0x0000000000000005,lazytime,acl,,errors=continue. Quota mode: none. [ 120.503652][ T4809] syz.4.128 uses obsolete (PF_INET,SOCK_PACKET) [ 120.646316][ T4811] loop0: detected capacity change from 0 to 256 [ 120.698472][ T4796] delete_channel: no stack [ 120.759463][ T4811] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 125.863900][ T4844] loop3: detected capacity change from 0 to 16 [ 125.926886][ T4846] mmap: syz.2.140 (4846) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 125.942184][ T4844] erofs: (device loop3): mounted with root inode @ nid 36. [ 126.024946][ T4848] binder: BINDER_SET_CONTEXT_MGR already set [ 126.031339][ T4848] binder: 4847:4848 ioctl 4018620d 2000000002c0 returned -16 [ 126.072188][ T4848] binder: 4847:4848 ioctl c0306201 200000000240 returned -11 [ 126.229706][ T4844] erofs: (device loop3): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 126.240907][ T4844] attempt to access beyond end of device [ 126.240907][ T4844] loop3: rw=524288, want=34359740336, limit=16 [ 126.279577][ T4846] netlink: 'syz.2.140': attribute type 10 has an invalid length. [ 126.287690][ T4846] netlink: 40 bytes leftover after parsing attributes in process `syz.2.140'. [ 126.357881][ T4846] team0: Port device geneve0 added [ 128.454617][ T4876] loop4: detected capacity change from 0 to 512 [ 128.624828][ T4876] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 128.637865][ T4876] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 128.699611][ T4876] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 128.736450][ T4876] System zones: 1-12 [ 128.761678][ T4876] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2228: inode #15: comm syz.4.149: corrupted in-inode xattr [ 128.875650][ T4876] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.149: couldn't read orphan inode 15 (err -117) [ 128.949440][ T4876] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x000000000000faca,nolazytime,debug,noload,mblk_io_submit,commit=0x0000000000000005,lazytime,acl,,errors=continue. Quota mode: none. [ 128.979380][ T4892] loop1: detected capacity change from 0 to 8 [ 130.668018][ T4906] netlink: 20 bytes leftover after parsing attributes in process `syz.3.157'. [ 131.984589][ T4916] loop3: detected capacity change from 0 to 256 [ 132.895493][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.902034][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.948858][ T4916] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 134.616549][ T4933] sp0: Synchronizing with TNC [ 136.700193][ T4943] loop2: detected capacity change from 0 to 8 [ 139.245605][ T4970] binder: BINDER_SET_CONTEXT_MGR already set [ 139.270248][ T4970] binder: 4969:4970 ioctl 4018620d 2000000002c0 returned -16 [ 139.284082][ T4970] binder: 4969:4970 ioctl c0306201 200000000240 returned -11 [ 139.420960][ T4971] netlink: 40 bytes leftover after parsing attributes in process `syz.1.177'. [ 140.163738][ T4979] sp0: Synchronizing with TNC [ 143.470697][ T4989] loop1: detected capacity change from 0 to 65536 [ 143.596652][ T4998] loop2: detected capacity change from 0 to 256 [ 144.126135][ T4989] XFS (loop1): Mounting V5 Filesystem [ 144.196007][ T4998] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 144.302787][ T4989] XFS (loop1): Ending clean mount [ 144.673352][ T5017] loop4: detected capacity change from 0 to 512 [ 144.843452][ T5017] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 144.883108][ T5023] dccp_invalid_packet: P.Data Offset(0) too small [ 144.900173][ T5017] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 145.210633][ T4386] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x18d/0x250, xfs_agf block 0x1 [ 145.251750][ T5017] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 145.360179][ T5017] System zones: 1-12 [ 145.377872][ T4386] XFS (loop1): Unmount and run xfs_repair [ 145.424709][ T5017] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2228: inode #15: comm syz.4.189: corrupted in-inode xattr [ 145.436705][ T4386] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 145.478106][ T5023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.190'. [ 145.500620][ T4386] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 145.557396][ T5017] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.189: couldn't read orphan inode 15 (err -117) [ 145.570533][ T4386] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 145.621442][ T5017] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x000000000000faca,nolazytime,debug,noload,mblk_io_submit,commit=0x0000000000000005,lazytime,acl,,errors=continue. Quota mode: none. [ 145.750735][ T4386] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 145.760108][ T4386] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 145.770157][ T4386] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 145.779201][ T4386] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 145.806310][ T4386] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 146.076463][ T4386] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 146.579908][ T5019] XFS (loop1): metadata I/O error in "xfs_read_agf+0x23c/0x500" at daddr 0x1 len 1 error 74 [ 146.606950][ T5019] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x514/0x8a0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 146.621963][ T5019] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 147.708124][ T5050] loop3: detected capacity change from 0 to 512 [ 147.769559][ T5050] EXT4-fs (loop3): Unrecognized mount option "fsname=-" or missing value [ 148.074407][ T13] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 148.415201][ T4184] XFS (loop1): Unmounting Filesystem [ 148.780995][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.731491][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.860781][ T13] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 149.945005][ T13] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 149.988128][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.733512][ T13] usb 3-1: config 0 descriptor?? [ 150.923001][ T13] usb 3-1: can't set config #0, error -71 [ 151.030885][ T13] usb 3-1: USB disconnect, device number 2 [ 151.873471][ T5114] binder: 5113:5114 ioctl c0306201 200000000240 returned -11 [ 152.586612][ T5119] loop2: detected capacity change from 0 to 512 [ 152.913425][ T5116] loop1: detected capacity change from 0 to 65536 [ 152.989750][ T5119] EXT4-fs (loop2): Unrecognized mount option "fsname=-" or missing value [ 153.169174][ T5116] XFS (loop1): Mounting V5 Filesystem [ 153.434225][ T5116] XFS (loop1): Ending clean mount [ 154.203110][ T4253] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x18d/0x250, xfs_agf block 0x1 [ 154.265600][ T4253] XFS (loop1): Unmount and run xfs_repair [ 154.289528][ T4253] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 154.517647][ T4253] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 154.637064][ T4253] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 154.648188][ T4253] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 154.690704][ T4253] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 154.747739][ T4253] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 154.770739][ T4253] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 154.882788][ T4253] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 154.933392][ T4253] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 154.942517][ T5132] XFS (loop1): metadata I/O error in "xfs_read_agf+0x23c/0x500" at daddr 0x1 len 1 error 74 [ 154.963150][ T5142] netlink: 10 bytes leftover after parsing attributes in process `syz.4.212'. [ 154.975699][ T5132] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x514/0x8a0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 154.990518][ T5132] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 155.138898][ T5147] sp0: Synchronizing with TNC [ 155.620013][ T4184] XFS (loop1): Unmounting Filesystem [ 158.054009][ T5167] loop3: detected capacity change from 0 to 512 [ 158.866759][ T5167] EXT4-fs (loop3): Unrecognized mount option "fsname=-" or missing value [ 160.763145][ T5182] loop3: detected capacity change from 0 to 65536 [ 162.022898][ T5190] netlink: 348 bytes leftover after parsing attributes in process `syz.1.226'. [ 162.328739][ T5182] XFS (loop3): Mounting V5 Filesystem [ 162.445570][ T5182] XFS (loop3): Ending clean mount [ 162.547006][ T4197] XFS (loop3): Unmounting Filesystem [ 162.799393][ T5195] loop0: detected capacity change from 0 to 65536 [ 163.085205][ T5195] XFS (loop0): Mounting V5 Filesystem [ 163.213080][ T5195] XFS (loop0): Ending clean mount [ 164.139365][ T4265] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x18d/0x250, xfs_agf block 0x1 [ 164.159540][ T4265] XFS (loop0): Unmount and run xfs_repair [ 164.166444][ T4265] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 164.221087][ T4265] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 164.308789][ T4265] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 164.388952][ T5221] binder: 5220:5221 ioctl c0306201 200000000240 returned -11 [ 164.394645][ T4265] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 164.433857][ T4265] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 164.463900][ T4265] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 164.500639][ T4265] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 164.530645][ T4265] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 164.539617][ T4265] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 164.559449][ T5217] XFS (loop0): metadata I/O error in "xfs_read_agf+0x23c/0x500" at daddr 0x1 len 1 error 74 [ 164.571233][ T5226] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 164.583106][ T5217] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x514/0x8a0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 164.597958][ T5217] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 164.854166][ T4189] XFS (loop0): Unmounting Filesystem [ 165.859309][ T5244] bridge0: port 3(team0) entered blocking state [ 165.865697][ T5244] bridge0: port 3(team0) entered disabled state [ 166.913269][ T5242] loop3: detected capacity change from 0 to 65536 [ 166.921308][ T5244] device team0 entered promiscuous mode [ 166.926931][ T5244] device team_slave_0 entered promiscuous mode [ 166.933317][ T5244] device team_slave_1 entered promiscuous mode [ 166.939739][ T5244] device geneve0 entered promiscuous mode [ 166.946362][ T5244] bridge0: port 3(team0) entered blocking state [ 166.952938][ T5244] bridge0: port 3(team0) entered forwarding state [ 167.575946][ T5242] XFS (loop3): Mounting V5 Filesystem [ 167.676186][ T5242] XFS (loop3): Ending clean mount [ 167.685208][ T5262] loop0: detected capacity change from 0 to 512 [ 167.707491][ T4197] XFS (loop3): Unmounting Filesystem [ 168.011221][ T5262] EXT4-fs (loop0): Unrecognized mount option "fsname=-" or missing value [ 168.630873][ T2305] Bluetooth: hci4: command 0x0405 tx timeout [ 175.387995][ T5325] loop4: detected capacity change from 0 to 512 [ 175.499959][ T5325] EXT4-fs (loop4): Unrecognized mount option "fsname=-" or missing value [ 175.702732][ T5328] binder: 5327:5328 ioctl c0306201 200000000240 returned -11 [ 175.874119][ T5333] loop1: detected capacity change from 0 to 512 [ 175.900539][ T5334] loop3: detected capacity change from 0 to 256 [ 175.929499][ T5333] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 175.954248][ T5333] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 175.998609][ T5333] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 176.024868][ T5333] System zones: 1-12 [ 176.042053][ T5333] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2228: inode #15: comm syz.1.260: corrupted in-inode xattr [ 176.089578][ T5333] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.260: couldn't read orphan inode 15 (err -117) [ 176.095193][ T5334] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 176.110665][ T5333] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x000000000000faca,nolazytime,debug,noload,mblk_io_submit,commit=0x0000000000000005,lazytime,acl,,errors=continue. Quota mode: none. [ 178.755408][ T5351] loop0: detected capacity change from 0 to 65536 [ 178.832072][ T5354] loop4: detected capacity change from 0 to 128 [ 178.902022][ T5354] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 178.918175][ T5354] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 179.500966][ T5351] XFS (loop0): Mounting V5 Filesystem [ 179.709015][ T5351] XFS (loop0): Ending clean mount [ 180.629372][ T4189] XFS (loop0): Unmounting Filesystem [ 182.371044][ T5383] loop1: detected capacity change from 0 to 512 [ 182.546121][ T5383] EXT4-fs (loop1): Unrecognized mount option "fsname=-" or missing value [ 183.481705][ T5389] loop2: detected capacity change from 0 to 256 [ 183.753561][ T5389] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 185.665019][ T5405] loop1: detected capacity change from 0 to 512 [ 185.710289][ T5405] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 185.727187][ T5405] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 185.797076][ T5407] loop4: detected capacity change from 0 to 64 [ 186.034071][ T5405] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 186.044675][ T21] Bluetooth: hci3: command 0x0406 tx timeout [ 186.064095][ T5405] System zones: 1-12 [ 186.143951][ T21] Bluetooth: hci2: command 0x0406 tx timeout [ 186.208561][ T21] Bluetooth: hci0: command 0x0406 tx timeout [ 186.222079][ T21] Bluetooth: hci1: command 0x0406 tx timeout [ 186.540234][ T5412] loop2: detected capacity change from 0 to 65536 [ 186.581035][ T21] Bluetooth: hci4: command 0x0406 tx timeout [ 186.644820][ T5405] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2228: inode #15: comm syz.1.279: corrupted in-inode xattr [ 186.994061][ T5412] XFS (loop2): Mounting V5 Filesystem [ 187.001051][ T5405] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.279: couldn't read orphan inode 15 (err -117) [ 187.072676][ T5412] XFS (loop2): Ending clean mount [ 187.106397][ T5405] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x000000000000faca,nolazytime,debug,noload,mblk_io_submit,commit=0x0000000000000005,lazytime,acl,,errors=continue. Quota mode: none. [ 188.026858][ T4191] XFS (loop2): Unmounting Filesystem [ 189.521935][ T5441] loop0: detected capacity change from 0 to 512 [ 189.644340][ T5441] EXT4-fs (loop0): Unrecognized mount option "fsname=-" or missing value [ 190.752153][ T5452] loop2: detected capacity change from 0 to 16 [ 190.774417][ T5453] loop3: detected capacity change from 0 to 256 [ 190.981119][ T5452] erofs: (device loop2): mounted with root inode @ nid 36. [ 191.025645][ T5453] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 191.267091][ T5456] loop0: detected capacity change from 0 to 64 [ 192.683385][ T5462] erofs: (device loop2): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 192.694158][ T5462] attempt to access beyond end of device [ 192.694158][ T5462] loop2: rw=524288, want=34359740336, limit=16 [ 194.061699][ T5473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.295'. [ 194.159176][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.172263][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.196639][ T5485] loop4: detected capacity change from 0 to 128 [ 195.333120][ T5485] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 195.378853][ T5485] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 196.030027][ T5493] loop2: detected capacity change from 0 to 512 [ 196.424348][ T5493] EXT4-fs (loop2): Unrecognized mount option "fsname=-" or missing value [ 196.822884][ T5501] loop3: detected capacity change from 0 to 64 [ 196.865665][ T5503] loop4: detected capacity change from 0 to 256 [ 197.112217][ T5503] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 199.068086][ T5522] loop2: detected capacity change from 0 to 512 [ 199.379236][ T5522] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 199.432970][ T5522] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 199.542943][ T5522] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 199.580825][ T5522] System zones: 1-12 [ 199.592243][ T5522] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2228: inode #15: comm syz.2.307: corrupted in-inode xattr [ 199.794385][ T5522] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.307: couldn't read orphan inode 15 (err -117) [ 200.234929][ T5522] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x000000000000faca,nolazytime,debug,noload,mblk_io_submit,commit=0x0000000000000005,lazytime,acl,,errors=continue. Quota mode: none. [ 202.236911][ T5546] loop0: detected capacity change from 0 to 512 [ 202.565575][ T5546] EXT4-fs (loop0): Unrecognized mount option "fsname=-" or missing value [ 204.383300][ T5563] loop3: detected capacity change from 0 to 256 [ 204.622960][ T5563] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 207.203681][ T5587] loop0: detected capacity change from 0 to 128 [ 207.248321][ T5592] binder: 5591:5592 ioctl 4018620d 0 returned -22 [ 207.258249][ T5587] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 207.302225][ T5587] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 207.343280][ T5592] binder: 5591:5592 ioctl c0306201 200000000240 returned -11 [ 207.964728][ T5598] netlink: 104 bytes leftover after parsing attributes in process `syz.4.330'. [ 208.460137][ T5605] loop1: detected capacity change from 0 to 512 [ 208.977765][ T5605] EXT4-fs (loop1): Unrecognized mount option "fsname=-" or missing value [ 211.278751][ T5642] binder: 5641:5642 ioctl 4018620d 0 returned -22 [ 211.448836][ T5642] binder: 5641:5642 ioctl c0306201 200000000240 returned -11 [ 214.007921][ T5662] loop1: detected capacity change from 0 to 512 [ 214.212251][ T5663] loop4: detected capacity change from 0 to 2048 [ 215.804755][ T5662] EXT4-fs (loop1): Unrecognized mount option "fsname=-" or missing value [ 218.070656][ T5695] binder: BINDER_SET_CONTEXT_MGR already set [ 218.078118][ T5695] binder: 5694:5695 ioctl 4018620d 2000000002c0 returned -16 [ 218.088486][ T5695] binder: 5694:5695 ioctl c0306201 200000000240 returned -11 [ 218.111509][ T5691] sp0: Synchronizing with TNC [ 218.946088][ T5702] loop0: detected capacity change from 0 to 8 [ 220.386297][ T5719] loop0: detected capacity change from 0 to 512 [ 220.486042][ T5719] EXT4-fs (loop0): Unrecognized mount option "fsname=-" or missing value [ 221.664556][ T5733] binder: 5728:5733 ioctl c0306201 200000000240 returned -11 [ 221.780221][ T5740] binder: 5734:5740 ioctl c0306201 200000000240 returned -11 [ 222.979876][ T5748] binder: 5746:5748 ioctl c0306201 0 returned -14 [ 223.016744][ T5732] overlayfs: missing 'workdir' [ 223.421724][ T5748] binder: 5746:5748 ioctl c0306201 200000000240 returned -11 [ 225.376223][ T5758] netlink: 144 bytes leftover after parsing attributes in process `syz.1.380'. [ 225.602042][ T5765] loop0: detected capacity change from 0 to 512 [ 225.680992][ T4571] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 225.703568][ T5765] EXT4-fs (loop0): Unrecognized mount option "fsname=-" or missing value [ 225.920867][ T4571] usb 2-1: device descriptor read/64, error -71 [ 226.683563][ T4571] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 227.663598][ T5776] binder: BINDER_SET_CONTEXT_MGR already set [ 227.744828][ T5779] INFO: trying to register non-static key. [ 227.751350][ T5779] The code is fine but needs lockdep annotation, or maybe [ 227.758862][ T5779] you didn't initialize this object before use? [ 227.765467][ T5779] turning off the locking correctness validator. [ 227.772169][ T5779] CPU: 0 PID: 5779 Comm: syz.4.384 Not tainted 5.15.189-syzkaller #0 [ 227.780771][ T5779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 227.790945][ T5779] Call Trace: [ 227.794234][ T5779] [ 227.797175][ T5779] dump_stack_lvl+0x168/0x230 [ 227.801965][ T5779] ? show_regs_print_info+0x20/0x20 [ 227.807470][ T5779] ? load_image+0x3b0/0x3b0 [ 227.812081][ T5779] ? cpumask_next+0xb3/0xd0 [ 227.816593][ T5779] ? __is_module_percpu_address+0x2a7/0x410 [ 227.822486][ T5779] ? is_kernel_percpu_address+0x143/0x160 [ 227.828238][ T5779] assign_lock_key+0x1e0/0x1f0 [ 227.833009][ T5779] ? SOFTIRQ_verbose+0x10/0x10 [ 227.837780][ T5779] ? hlock_conflict+0x59/0x1f0 [ 227.842560][ T5779] register_lock_class+0x20e/0x880 [ 227.848751][ T5779] ? check_path+0x40/0x40 [ 227.853395][ T5779] ? is_dynamic_key+0x1f0/0x1f0 [ 227.858565][ T5779] ? check_noncircular+0x16f/0x310 [ 227.863987][ T5779] ? add_chain_block+0x940/0x940 [ 227.869419][ T5779] ? lockdep_lock+0xdc/0x1e0 [ 227.874441][ T5779] __lock_acquire+0x160/0x7c60 [ 227.879776][ T5779] ? __lock_acquire+0x12d9/0x7c60 [ 227.885030][ T5779] ? __lock_acquire+0x289d/0x7c60 [ 227.890885][ T5779] ? verify_lock_unused+0x140/0x140 [ 227.896180][ T5779] ? verify_lock_unused+0x140/0x140 [ 227.901504][ T5779] ? verify_lock_unused+0x140/0x140 [ 227.907189][ T5779] lock_acquire+0x197/0x3f0 [ 227.912036][ T5779] ? gsmld_write_wakeup+0x6b/0x2b0 [ 227.917569][ T5779] ? read_lock_is_recursive+0x10/0x10 [ 227.923446][ T5779] ? mark_lock+0x94/0x320 [ 227.928613][ T5779] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 227.934594][ T5779] ? lockdep_hardirqs_off+0x70/0x100 [ 227.940363][ T5779] _raw_spin_lock_irqsave+0xa4/0xf0 [ 227.946879][ T5779] ? gsmld_write_wakeup+0x6b/0x2b0 [ 227.952524][ T5779] ? _raw_spin_lock+0x40/0x40 [ 227.957964][ T5779] ? ldsem_down_read_trylock+0x134/0x190 [ 227.964173][ T5779] ? tty_ldisc_ref+0x18/0x80 [ 227.969457][ T5779] ? __init_ldsem+0x150/0x150 [ 227.974626][ T5779] gsmld_write_wakeup+0x6b/0x2b0 [ 227.980254][ T5779] ? gsmld_receive_buf+0x340/0x340 [ 227.986869][ T5779] tty_wakeup+0xb4/0xf0 [ 227.991519][ T5779] tty_port_default_wakeup+0xa5/0xf0 [ 227.997250][ T5779] ? gsmld_close+0x110/0x110 [ 228.002147][ T5779] tty_ldisc_hangup+0xd6/0x4a0 [ 228.008098][ T5779] __tty_hangup+0x45c/0x680 [ 228.012975][ T5779] tty_ioctl+0x489/0xc20 [ 228.018670][ T5779] ? security_file_ioctl+0x7c/0xa0 [ 228.025549][ T5779] ? tty_get_icount+0xa0/0xa0 [ 228.030858][ T5779] __se_sys_ioctl+0xfa/0x170 [ 228.036020][ T5779] do_syscall_64+0x4c/0xa0 [ 228.040818][ T5779] ? clear_bhb_loop+0x30/0x80 [ 228.045811][ T5779] ? clear_bhb_loop+0x30/0x80 [ 228.051205][ T5779] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 228.057455][ T5779] RIP: 0033:0x7f4834930b69 [ 228.061996][ T5779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.082228][ T5779] RSP: 002b:00007f4832756038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 228.091018][ T5779] RAX: ffffffffffffffda RBX: 00007f4834b58160 RCX: 00007f4834930b69 [ 228.099020][ T5779] RDX: 0000000000000000 RSI: 0000000000005437 RDI: 0000000000000006 [ 228.108989][ T5779] RBP: 00007f48349b3df1 R08: 0000000000000000 R09: 0000000000000000 [ 228.117314][ T5779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.126170][ T5779] R13: 0000000000000000 R14: 00007f4834b58160 R15: 00007ffce4745da8 [ 228.134285][ T5779] [ 228.137779][ C0] vkms_vblank_simulate: vblank timer overrun [ 228.156696][ T5776] binder: 5775:5776 ioctl 4018620d 2000000002c0 returned -16 [ 228.167951][ T4571] usb 2-1: device descriptor read/64, error -71 [ 228.259026][ T4935] hid-generic 0001:0009:0001.0002: unknown main item tag 0x3 [ 228.290738][ T4571] usb usb2-port1: attempt power cycle [ 228.301230][ T4935] hid-generic 0001:0009:0001.0002: hidraw0: HID v0.01 Device [syz0] on syz0 [ 228.429460][ T5787] binder: BINDER_SET_CONTEXT_MGR already set [ 228.441897][ T5787] binder: 5778:5787 ioctl 4018620d 2000000002c0 returned -16 [ 228.460000][ T5787] binder: 5778:5787 ioctl c0306201 200000000240 returned -11 [ 228.461281][ T5786] fido_id[5786]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory