last executing test programs: 10.15868846s ago: executing program 1 (id=33): prlimit64(0x0, 0xd, &(0x7f0000000140)={0x1, 0x100000008e}, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x0, 0x1000000, 0x0, 0x1, 0xa00, &(0x7f00000005c0)="c6"}) 9.806182352s ago: executing program 1 (id=37): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$BTRFS_IOC_RESIZE(r2, 0x50009403, 0x0) r3 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000040)=0x3) 9.482308242s ago: executing program 2 (id=38): socket(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x20004056) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x84) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r3, r5, 0x16, 0x0, @void}, 0x10) socket$inet6(0xa, 0x2, 0x0) pipe2$watch_queue(&(0x7f0000002300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r6, 0x6f) socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) 7.973950881s ago: executing program 0 (id=42): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x1000000, 0x3900, 0xfffffffe, 0x1e5}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r1, 0x0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0, 0x40002102, 0x1, {0x3}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001cc0)={'ipvlan1\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x6, r6}, 0x14) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, 0x0, 0x0, 0x8000000}) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000680)) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='statm\x00') dup3(r0, r8, 0x0) ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f00000000c0)={0x0, r8}) 7.931664202s ago: executing program 1 (id=43): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x48008, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa041, 0xd) fcntl$setlease(r0, 0x400, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 7.849454194s ago: executing program 2 (id=44): r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40046f41, &(0x7f0000000440)=0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRES8=r1], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0xaa}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) connect$llc(0xffffffffffffffff, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x0, @random='\x00\x00\x00\x00\x00\a'}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0x200000fff, 0x5) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="d2ff03076003008cb89e08f088a8", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) 7.551674554s ago: executing program 1 (id=45): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, 0xffffffffffffffff}, 0x4) r2 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000240)='GPL\x00', 0x8, 0x1009, &(0x7f0000002500)=""/4105, 0x41100, 0x40}, 0x94) 7.494196137s ago: executing program 0 (id=47): prlimit64(0x0, 0xd, &(0x7f0000000140)={0x1, 0x100000008e}, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x0, 0x1000000, 0x0, 0x1, 0xa00, &(0x7f00000005c0)="c6"}) 6.583545736s ago: executing program 1 (id=49): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x2b0, 0xffffffff, 0x0, 0x180, 0x180, 0xffffffff, 0xffffffff, 0x218, 0x218, 0x218, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'ipvlan0\x00', 'nr0\x00', {}, {}, 0x2f, 0x2}, 0x74000002, 0x70, 0xd0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x7, 0x11, 0x0, 0x5], 0x1, 0x5}, {0xffffffffffffffff, [0x1, 0x1, 0x4, 0x6, 0x20], 0x3, 0x6}}}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00', {0xff}, {}, 0x16}, 0x287, 0x70, 0xb0, 0x2000000}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x3, {0x100008}}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) 6.541483117s ago: executing program 4 (id=50): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = syz_io_uring_setup(0x31bc, 0x0, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x5c26, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r0, 0x8, 0x0, 0x91a, 0x2}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 6.422457741s ago: executing program 0 (id=51): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x6}, 0x4) 6.087765202s ago: executing program 4 (id=53): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$BTRFS_IOC_RESIZE(r2, 0x50009403, 0x0) r3 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000040)=0x3) 6.033710824s ago: executing program 0 (id=54): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc"], 0x48) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x4e8, r2, 0x0, 0x100000000000000}, 0x38) 5.467419822s ago: executing program 2 (id=55): socket(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x20004056) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x84) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r3, r5, 0x16, 0x0, @void}, 0x10) socket$inet6(0xa, 0x2, 0x0) pipe2$watch_queue(&(0x7f0000002300), 0x80) add_key$fscrypt_provisioning(&(0x7f0000002a40), &(0x7f0000002a80)={'syz', 0x2}, &(0x7f0000002ac0)={0x2, 0x0, @b}, 0x48, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) 5.22043007s ago: executing program 3 (id=57): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x1000000, 0x3900, 0xfffffffe, 0x1e5}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r1, 0x0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0, 0x40002102, 0x1, {0x3}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001cc0)={'ipvlan1\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x6, r6}, 0x14) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/29, 0x0, 0x8000000}) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='statm\x00') dup3(r0, r8, 0x0) ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f00000000c0)={0x0, r8}) 3.716379459s ago: executing program 0 (id=58): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1, &(0x7f00000003c0)=[@sndinfo={0x20, 0x84, 0x2, {0xe0, 0x41}}], 0x20}, 0x0) 3.578667163s ago: executing program 2 (id=59): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) r1 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000080)=0x5, 0x4) sendto$inet6(r1, &(0x7f0000000480)='\b', 0x1, 0x20040012, &(0x7f00000000c0)={0xa, 0x4e22, 0x27b6a97, @local, 0x9}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x6d, &(0x7f00000006c0)=""/4097, &(0x7f0000000040)=0x1001) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0xb) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}, {0x4}}}, 0x4) 3.578372523s ago: executing program 4 (id=60): ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_DEFAULT_PHY={{0x4}, 0xff}}}, 0x7) 3.462846827s ago: executing program 3 (id=61): prlimit64(0x0, 0xd, &(0x7f0000000140)={0x1, 0x100000008e}, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x0, 0x1000000, 0x0, 0x1, 0xa00, &(0x7f00000005c0)="c6"}) 3.37969795s ago: executing program 0 (id=62): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0xb56cea99d7d0f667]}}, 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001c40)=[{{&(0x7f0000000180)=@tipc, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/81, 0x51}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000000740)=""/11, 0xb}, 0x3}, {{&(0x7f0000000780)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000d80)=[{0x0}, {0x0}, {&(0x7f0000000bc0)=""/221, 0xdd}], 0x3}, 0x400}, {{&(0x7f0000000ec0)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000001140)=[{&(0x7f0000000f40)=""/234, 0xea}], 0x1}, 0x2}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000011c0)=""/161, 0xa1}, {&(0x7f0000001280)=""/96, 0x60}], 0x2, &(0x7f0000001340)=""/136, 0x88}, 0x1}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001940)=""/135, 0x87}, 0x7}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001a80)=""/126, 0x7e}], 0x1, &(0x7f0000001b40)=""/240, 0xf0}, 0x4}], 0x6, 0x141, &(0x7f0000001e40)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r3, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000540)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff4b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.272355343s ago: executing program 4 (id=63): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = syz_io_uring_setup(0x31bc, 0x0, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x5c26, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r0, 0x8, 0x0, 0x91a, 0x2}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 3.174832386s ago: executing program 3 (id=64): r0 = syz_open_dev$video4linux(0x0, 0x6, 0x60200) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000001800)={0x1, 0x0, 0x0, 0x6, {0x1294, 0x1, 0x5, 0xf6f}}) 3.06021567s ago: executing program 4 (id=65): r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40046f41, &(0x7f0000000440)=0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRES8=r1], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0xaa}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) connect$llc(0xffffffffffffffff, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x0, @random='\x00\x00\x00\x00\x00\a'}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0x200000fff, 0x5) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="d2ff03076003008cb89e08f088a8", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) 2.899846135s ago: executing program 3 (id=66): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000), 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) 1.994648285s ago: executing program 2 (id=67): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x48008, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa041, 0xd) fcntl$setlease(r0, 0x400, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 1.994302865s ago: executing program 3 (id=68): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc"], 0x48) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x4e8, r3, 0x0, 0x100000000000000}, 0x38) 771.260375ms ago: executing program 4 (id=69): socket(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x20004056) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x84) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r3, r5, 0x16, 0x0, @void}, 0x10) socket$inet6(0xa, 0x2, 0x0) pipe2$watch_queue(&(0x7f0000002300), 0x80) add_key$fscrypt_provisioning(&(0x7f0000002a40), &(0x7f0000002a80)={'syz', 0x2}, &(0x7f0000002ac0)={0x2, 0x0, @b}, 0x48, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) 501.203503ms ago: executing program 1 (id=70): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000801004800000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x6}, 0x0, 0x0) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x40000300) listen(r0, 0xec) 9.182819ms ago: executing program 2 (id=71): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x1000000, 0x3900, 0xfffffffe, 0x1e5}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r1, 0x0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0, 0x40002102, 0x1, {0x3}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001cc0)={'ipvlan1\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x6, r6}, 0x14) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/29, 0x0, 0x8000000}) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='statm\x00') dup3(r0, r8, 0x0) ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f00000000c0)={0x0, r8}) 0s ago: executing program 3 (id=72): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, 0x0, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1, &(0x7f00000003c0)=[@sndinfo={0x20, 0x84, 0x2, {0xe0, 0x41}}], 0x20}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.107' (ED25519) to the list of known hosts. [ 76.012087][ T4262] cgroup: Unknown subsys name 'net' [ 76.117761][ T4262] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.624982][ T4262] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 79.200656][ T4286] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.209551][ T4287] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.217743][ T4287] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.227852][ T4287] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.235816][ T4287] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.243879][ T4287] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.251604][ T4287] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.259953][ T4287] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.267769][ T4287] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.275563][ T4287] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.277489][ T4289] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.283634][ T4287] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.294822][ T4290] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.299427][ T4287] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.307907][ T4290] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.314511][ T4287] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.320715][ T4290] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.332369][ T4287] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.334939][ T4290] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 79.341172][ T4287] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.348332][ T4290] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.356004][ T4287] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.361397][ T4290] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 79.368716][ T4287] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 79.383036][ T4287] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.384962][ T4289] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.421047][ T4290] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 79.428858][ T4290] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.448681][ T4285] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 79.461119][ T4285] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.915131][ T4277] chnl_net:caif_netlink_parms(): no params data found [ 79.981554][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 80.025070][ T4284] chnl_net:caif_netlink_parms(): no params data found [ 80.107543][ T4276] chnl_net:caif_netlink_parms(): no params data found [ 80.136244][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.144310][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.154213][ T4277] device bridge_slave_0 entered promiscuous mode [ 80.170432][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.177746][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.185978][ T4277] device bridge_slave_1 entered promiscuous mode [ 80.198759][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 80.214006][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.221287][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.230751][ T4274] device bridge_slave_0 entered promiscuous mode [ 80.273858][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.281310][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.289202][ T4274] device bridge_slave_1 entered promiscuous mode [ 80.299476][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.318021][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.407378][ T4277] team0: Port device team_slave_0 added [ 80.416811][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.430108][ T4284] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.437656][ T4284] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.445967][ T4284] device bridge_slave_0 entered promiscuous mode [ 80.469187][ T4277] team0: Port device team_slave_1 added [ 80.476959][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.494204][ T4284] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.501522][ T4284] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.509429][ T4284] device bridge_slave_1 entered promiscuous mode [ 80.516834][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.524313][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.533174][ T4276] device bridge_slave_0 entered promiscuous mode [ 80.548678][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.556048][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.564727][ T4276] device bridge_slave_1 entered promiscuous mode [ 80.594097][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.601467][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.609544][ T4275] device bridge_slave_0 entered promiscuous mode [ 80.638640][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.645981][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.654537][ T4275] device bridge_slave_1 entered promiscuous mode [ 80.668560][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.676082][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.702378][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.723276][ T4274] team0: Port device team_slave_0 added [ 80.732944][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.750944][ T4284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.760600][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.767872][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.794318][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.807525][ T4274] team0: Port device team_slave_1 added [ 80.815491][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.834130][ T4284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.884766][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.903104][ T4284] team0: Port device team_slave_0 added [ 80.910046][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.917485][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.943522][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.965942][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.976717][ T4284] team0: Port device team_slave_1 added [ 80.990770][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.997946][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.023909][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.038088][ T4276] team0: Port device team_slave_0 added [ 81.080313][ T4276] team0: Port device team_slave_1 added [ 81.104282][ T4284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.111728][ T4284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.137973][ T4284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.150306][ T4284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.157423][ T4284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.184156][ T4284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.205435][ T4275] team0: Port device team_slave_0 added [ 81.218278][ T4277] device hsr_slave_0 entered promiscuous mode [ 81.225318][ T4277] device hsr_slave_1 entered promiscuous mode [ 81.258637][ T4275] team0: Port device team_slave_1 added [ 81.284817][ T4274] device hsr_slave_0 entered promiscuous mode [ 81.295713][ T4274] device hsr_slave_1 entered promiscuous mode [ 81.303222][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.311869][ T4274] Cannot create hsr debugfs directory [ 81.326665][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.333932][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.360300][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.408047][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.417549][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.444019][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.471744][ T4291] Bluetooth: hci0: command 0x0409 tx timeout [ 81.474063][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.485731][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.512901][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.529358][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.536575][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.541787][ T4291] Bluetooth: hci1: command 0x0409 tx timeout [ 81.565780][ T4292] Bluetooth: hci2: command 0x0409 tx timeout [ 81.568911][ T4282] Bluetooth: hci4: command 0x0409 tx timeout [ 81.575189][ T4290] Bluetooth: hci3: command 0x0409 tx timeout [ 81.583883][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.609410][ T4284] device hsr_slave_0 entered promiscuous mode [ 81.616357][ T4284] device hsr_slave_1 entered promiscuous mode [ 81.624265][ T4284] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.632331][ T4284] Cannot create hsr debugfs directory [ 81.670268][ T4276] device hsr_slave_0 entered promiscuous mode [ 81.677261][ T4276] device hsr_slave_1 entered promiscuous mode [ 81.684155][ T4276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.691967][ T4276] Cannot create hsr debugfs directory [ 81.783643][ T4275] device hsr_slave_0 entered promiscuous mode [ 81.790407][ T4275] device hsr_slave_1 entered promiscuous mode [ 81.800823][ T4275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.808605][ T4275] Cannot create hsr debugfs directory [ 82.084474][ T4277] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.124025][ T4277] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.136269][ T4277] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.149924][ T4277] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.219039][ T4274] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.244384][ T4274] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.254227][ T4274] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.279401][ T4284] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.288722][ T4274] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.304846][ T4284] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.334876][ T4284] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.365262][ T4284] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.452219][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.469833][ T4276] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.480329][ T4276] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.498042][ T4276] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.526928][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.538962][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.548090][ T4276] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.568922][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.590831][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.630288][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.644307][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.654551][ T29] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.661911][ T29] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.675819][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.684636][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.693431][ T29] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.700614][ T29] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.709009][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.736548][ T4284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.755460][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.769329][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.779110][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.787429][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.813263][ T4275] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.828547][ T4275] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.840671][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.849851][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.860832][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.870623][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.880726][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.890343][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.900212][ T4284] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.909008][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.918308][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.927731][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.934904][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.945249][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.957059][ T4275] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.972080][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.986300][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.996296][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.008650][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.017382][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.024570][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.040693][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.049685][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.059165][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.068900][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.078971][ T4275] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.107549][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.119549][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.128774][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.138014][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.145198][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.154718][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.164638][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.173345][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.180491][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.189536][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.199970][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.253288][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.268687][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.278438][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.294649][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.308052][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.317718][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.340183][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.354324][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.369358][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.382867][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.398347][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.432019][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.446207][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.458210][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.471633][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.480113][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.490206][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.499015][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.520378][ T4284] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.532444][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.541205][ T4292] Bluetooth: hci0: command 0x041b tx timeout [ 83.551560][ T4274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.569322][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.588101][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.602584][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.621530][ T4292] Bluetooth: hci3: command 0x041b tx timeout [ 83.627612][ T4292] Bluetooth: hci2: command 0x041b tx timeout [ 83.633819][ T4290] Bluetooth: hci1: command 0x041b tx timeout [ 83.639867][ T4290] Bluetooth: hci4: command 0x041b tx timeout [ 83.648352][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.661781][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.718892][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.732332][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.751786][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.804284][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.844395][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.868794][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.876006][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.901696][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.956430][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.974054][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.991733][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.000442][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.007643][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.026656][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.055294][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.088368][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.129430][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.147581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.156900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.165718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.175152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.185675][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.195150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.204257][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.234880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.244194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.260402][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.291924][ T4276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.309020][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.320626][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.338818][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.359922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.399721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.409398][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.456853][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.470103][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.483142][ T4337] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.490301][ T4337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.505486][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.515469][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.546062][ T4284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.562524][ T4277] device veth0_vlan entered promiscuous mode [ 84.572867][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.582808][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.593117][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.608796][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.618845][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.633692][ T4337] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.640920][ T4337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.655900][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.694161][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.708209][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.717248][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.726405][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.736309][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.745910][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.755273][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.764721][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.773755][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.809866][ T4275] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.826089][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.837646][ T4277] device veth1_vlan entered promiscuous mode [ 84.849859][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.860357][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.878255][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.889445][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.905344][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.918226][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.935902][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.961917][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.970139][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.995129][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.057731][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.097498][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.153733][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.172144][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.181617][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.201832][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.212298][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.220366][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.239958][ T4277] device veth0_macvtap entered promiscuous mode [ 85.252395][ T4277] device veth1_macvtap entered promiscuous mode [ 85.263162][ T4284] device veth0_vlan entered promiscuous mode [ 85.280785][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.290590][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.299664][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.307641][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.343823][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.366265][ T4274] device veth0_vlan entered promiscuous mode [ 85.374078][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.390688][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.400047][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.409506][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.423832][ T4284] device veth1_vlan entered promiscuous mode [ 85.433723][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.449445][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.460364][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.481852][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.489986][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.499374][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.512460][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.525223][ T4274] device veth1_vlan entered promiscuous mode [ 85.544364][ T4277] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.556620][ T4277] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.573281][ T4277] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.587452][ T4277] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.621292][ T4292] Bluetooth: hci0: command 0x040f tx timeout [ 85.701382][ T4292] Bluetooth: hci4: command 0x040f tx timeout [ 85.707480][ T4292] Bluetooth: hci2: command 0x040f tx timeout [ 85.714132][ T4290] Bluetooth: hci3: command 0x040f tx timeout [ 85.720177][ T4290] Bluetooth: hci1: command 0x040f tx timeout [ 85.737262][ T4274] device veth0_macvtap entered promiscuous mode [ 85.753343][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.798318][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.809311][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.820400][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.835978][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.848508][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.861573][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.869184][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.880391][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.904101][ T4274] device veth1_macvtap entered promiscuous mode [ 85.926692][ T4284] device veth0_macvtap entered promiscuous mode [ 85.938559][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.948413][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.958021][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.992282][ T4284] device veth1_macvtap entered promiscuous mode [ 86.012085][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.029595][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.042834][ T4337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.055965][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.062798][ T4337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.076386][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.095531][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.106463][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.115646][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.124884][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.157616][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.171276][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.185886][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.194192][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.205134][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.227906][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.241025][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.251209][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.262491][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.283655][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.305495][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.324504][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.339735][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.360175][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.387926][ T4274] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.397110][ T4274] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.410027][ T4274] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.419264][ T4274] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.439164][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.454633][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.465240][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.475982][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.487691][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.506588][ T4342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.520246][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.532568][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.547774][ T4342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.562744][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.582082][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.596199][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.626231][ T4275] device veth0_vlan entered promiscuous mode [ 86.644043][ T4284] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.665994][ T4284] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.677496][ T4284] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.692449][ T4284] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.712681][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.723817][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.803230][ T4275] device veth1_vlan entered promiscuous mode [ 86.868021][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.877366][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 86.892180][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.907123][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.923402][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.942331][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.964941][ T4275] device veth0_macvtap entered promiscuous mode [ 86.985531][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.001922][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.017494][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.066470][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.087251][ T4275] device veth1_macvtap entered promiscuous mode [ 87.116430][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.130712][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.140082][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.158714][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.168809][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.254352][ T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.268523][ T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.285273][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.355839][ T4276] device veth0_vlan entered promiscuous mode [ 87.568680][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.670173][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.733298][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.744761][ T4290] Bluetooth: hci0: command 0x0419 tx timeout [ 87.781197][ T4290] Bluetooth: hci1: command 0x0419 tx timeout [ 87.788029][ T4286] Bluetooth: hci4: command 0x0419 tx timeout [ 87.794504][ T4291] Bluetooth: hci3: command 0x0419 tx timeout [ 87.794822][ T4292] Bluetooth: hci2: command 0x0419 tx timeout [ 87.853148][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.911914][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.981809][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.998661][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.008860][ T4276] device veth1_vlan entered promiscuous mode [ 88.037515][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.057798][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.069978][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.089084][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.099948][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.118232][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.128548][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.146122][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.167007][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.192383][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.201925][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.276149][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.285881][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.301691][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.334059][ T4275] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.408042][ T4275] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.489233][ T4275] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.519287][ T4275] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.599456][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.608907][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.621368][ T4331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.636934][ T4276] device veth0_macvtap entered promiscuous mode [ 88.646505][ T4331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.671250][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.692423][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.740465][ T4276] device veth1_macvtap entered promiscuous mode [ 88.809318][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.827664][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.836335][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.871036][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.889496][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.917263][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.949778][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.976708][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.987844][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.998881][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.014725][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.032148][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.043192][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.056539][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.066382][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.083081][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.097925][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.109340][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.120359][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.131581][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.143925][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.165454][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.177775][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.192761][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.275150][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.337318][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.370459][ T4276] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.390637][ T4276] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.411238][ T4276] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.420212][ T4276] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.439355][ T4337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.451607][ T4337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.470526][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.578152][ T4342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.682771][ T4342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.747817][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.894608][ T4331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.915137][ T4331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.971861][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.257172][ T4392] loop4: detected capacity change from 0 to 512 [ 90.287495][ T4392] EXT4-fs: Ignoring removed bh option [ 90.308780][ T4392] EXT4-fs: Mount option(s) incompatible with ext2 [ 91.548311][ T4401] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 91.949527][ T126] cfg80211: failed to load regulatory.db [ 95.140900][ C0] sched: RT throttling activated [ 95.691178][ T4322] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 95.720738][ T4463] loop0: detected capacity change from 0 to 512 [ 95.821995][ T4463] EXT4-fs (loop0): Test dummy encryption mode enabled [ 95.915700][ T4463] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.31: inode #1: comm syz.0.31: iget: illegal inode # [ 95.935466][ T4322] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 95.985660][ T4322] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.000349][ T4463] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.31: error while reading EA inode 1 err=-117 [ 96.012689][ T4322] usb 5-1: Product: syz [ 96.027116][ T4322] usb 5-1: Manufacturer: syz [ 96.032598][ T4463] EXT4-fs (loop0): 1 orphan inode deleted [ 96.038579][ T4463] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 96.047339][ T4322] usb 5-1: SerialNumber: syz [ 96.218656][ T4284] EXT4-fs (loop0): unmounting filesystem. [ 96.368967][ T4322] rtl8150 5-1:1.0: couldn't reset the device [ 96.391579][ T4322] rtl8150: probe of 5-1:1.0 failed with error -5 [ 96.622125][ T4322] usb 5-1: USB disconnect, device number 2 [ 98.364709][ T4490] loop4: detected capacity change from 0 to 2048 [ 98.379211][ T4496] overlayfs: missing 'lowerdir' [ 98.492855][ T4490] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 98.618926][ T4490] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 99.177316][ T4490] UDF-fs: error (device loop4): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned lenght of impUse field [ 100.847359][ T4529] overlayfs: missing 'lowerdir' [ 102.459306][ T4533] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 102.725686][ T4543] Zero length message leads to an empty skb [ 102.752445][ T4286] Bluetooth: hci0: hardware error 0x04 [ 102.787021][ T4545] binder_alloc: 4544: binder_alloc_buf, no vma [ 105.147025][ T4286] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 105.428169][ T4563] overlayfs: missing 'lowerdir' [ 106.183810][ T4571] ================================================================== [ 106.191954][ T4571] BUG: KASAN: use-after-free in dvb_device_open+0xc5/0x360 [ 106.199189][ T4571] Read of size 8 at addr ffff8880293c9e18 by task syz.4.69/4571 [ 106.206851][ T4571] [ 106.209234][ T4571] CPU: 1 PID: 4571 Comm: syz.4.69 Not tainted syzkaller #0 [ 106.216471][ T4571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 106.226579][ T4571] Call Trace: [ 106.229908][ T4571] [ 106.232884][ T4571] dump_stack_lvl+0x188/0x24e [ 106.237620][ T4571] ? read_lock_is_recursive+0x10/0x10 [ 106.243055][ T4571] ? show_regs_print_info+0x12/0x12 [ 106.248304][ T4571] ? load_image+0x410/0x410 [ 106.252879][ T4571] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 106.258398][ T4571] ? __virt_addr_valid+0x188/0x540 [ 106.263569][ T4571] ? __virt_addr_valid+0x467/0x540 [ 106.268730][ T4571] ? dvb_device_open+0xc5/0x360 [ 106.273621][ T4571] print_report+0xa8/0x210 [ 106.278114][ T4571] kasan_report+0x10b/0x140 [ 106.282722][ T4571] ? dvb_device_open+0xc5/0x360 [ 106.287642][ T4571] dvb_device_open+0xc5/0x360 [ 106.292406][ T4571] chrdev_open+0x585/0x5f0 [ 106.296891][ T4571] ? cd_forget+0x160/0x160 [ 106.301362][ T4571] ? fsnotify_perm+0x39b/0x550 [ 106.306175][ T4571] ? cd_forget+0x160/0x160 [ 106.310646][ T4571] do_dentry_open+0x7dd/0x10b0 [ 106.315461][ T4571] path_openat+0x2674/0x2f10 [ 106.320100][ T4571] ? verify_lock_unused+0x140/0x140 [ 106.325357][ T4571] ? do_sys_openat2+0xdd/0x4f0 [ 106.330171][ T4571] ? do_filp_open+0x420/0x420 [ 106.334908][ T4571] do_filp_open+0x1ee/0x420 [ 106.339474][ T4571] ? vfs_tmpfile+0x470/0x470 [ 106.344121][ T4571] ? _raw_spin_unlock+0x24/0x40 [ 106.349062][ T4571] ? alloc_fd+0x590/0x640 [ 106.353439][ T4571] do_sys_openat2+0x14b/0x4f0 [ 106.358166][ T4571] ? do_sys_open+0xe0/0xe0 [ 106.362653][ T4571] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 106.368691][ T4571] ? lock_chain_count+0x20/0x20 [ 106.373591][ T4571] __x64_sys_openat+0x135/0x160 [ 106.378473][ T4571] do_syscall_64+0x4c/0xa0 [ 106.382924][ T4571] ? clear_bhb_loop+0x60/0xb0 [ 106.387652][ T4571] ? clear_bhb_loop+0x60/0xb0 [ 106.392377][ T4571] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 106.398361][ T4571] RIP: 0033:0x7f526f15d68e [ 106.402825][ T4571] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 106.422477][ T4571] RSP: 002b:00007f526ff97b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 106.430935][ T4571] RAX: ffffffffffffffda RBX: 00007f526ff986c0 RCX: 00007f526f15d68e [ 106.438958][ T4571] RDX: 0000000000000002 RSI: 00007f526ff97c00 RDI: ffffffffffffff9c [ 106.446994][ T4571] RBP: 00007f526ff97c00 R08: 0000000000000000 R09: 0000000000000000 [ 106.455023][ T4571] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 106.463042][ T4571] R13: 00007f526f416308 R14: 00007f526f416270 R15: 00007ffe39c73008 [ 106.471060][ T4571] [ 106.474116][ T4571] [ 106.476466][ T4571] Allocated by task 1: [ 106.480554][ T4571] kasan_set_track+0x4b/0x70 [ 106.485202][ T4571] __kasan_kmalloc+0x8e/0xa0 [ 106.489845][ T4571] dvb_register_device+0x305/0x1dc0 [ 106.495094][ T4571] dvb_register_frontend+0x629/0x900 [ 106.500442][ T4571] vidtv_bridge_probe+0x9cf/0xf50 [ 106.505519][ T4571] platform_probe+0x137/0x1c0 [ 106.510241][ T4571] really_probe+0x24a/0xb40 [ 106.514795][ T4571] __driver_probe_device+0x1f5/0x390 [ 106.520144][ T4571] driver_probe_device+0x4f/0x420 [ 106.525220][ T4571] __driver_attach+0x43d/0x6c0 [ 106.530032][ T4571] bus_for_each_dev+0x182/0x1f0 [ 106.534940][ T4571] bus_add_driver+0x324/0x5d0 [ 106.539662][ T4571] driver_register+0x32d/0x430 [ 106.544486][ T4571] vidtv_bridge_init+0x39/0x67 [ 106.549285][ T4571] do_one_initcall+0x257/0x800 [ 106.554091][ T4571] do_initcall_level+0x13d/0x1ed [ 106.559070][ T4571] do_initcalls+0x4b/0x8a [ 106.563443][ T4571] kernel_init_freeable+0x401/0x5ab [ 106.568693][ T4571] kernel_init+0x19/0x1b0 [ 106.573079][ T4571] ret_from_fork+0x1f/0x30 [ 106.577536][ T4571] [ 106.579894][ T4571] Freed by task 4533: [ 106.583909][ T4571] kasan_set_track+0x4b/0x70 [ 106.588549][ T4571] kasan_save_free_info+0x27/0x40 [ 106.593613][ T4571] ____kasan_slab_free+0x126/0x1f0 [ 106.598777][ T4571] slab_free_freelist_hook+0x133/0x1b0 [ 106.604282][ T4571] __kmem_cache_free+0xb6/0x200 [ 106.609167][ T4571] dvb_device_open+0x2d2/0x360 [ 106.613976][ T4571] chrdev_open+0x585/0x5f0 [ 106.618434][ T4571] do_dentry_open+0x7dd/0x10b0 [ 106.623259][ T4571] path_openat+0x2674/0x2f10 [ 106.627902][ T4571] do_filp_open+0x1ee/0x420 [ 106.632450][ T4571] do_sys_openat2+0x14b/0x4f0 [ 106.637174][ T4571] __x64_sys_openat+0x135/0x160 [ 106.642070][ T4571] do_syscall_64+0x4c/0xa0 [ 106.646525][ T4571] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 106.652493][ T4571] [ 106.654843][ T4571] The buggy address belongs to the object at ffff8880293c9e00 [ 106.654843][ T4571] which belongs to the cache kmalloc-256 of size 256 [ 106.669003][ T4571] The buggy address is located 24 bytes inside of [ 106.669003][ T4571] 256-byte region [ffff8880293c9e00, ffff8880293c9f00) [ 106.682239][ T4571] [ 106.684593][ T4571] The buggy address belongs to the physical page: [ 106.691044][ T4571] page:ffffea0000a4f200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x293c8 [ 106.701245][ T4571] head:ffffea0000a4f200 order:1 compound_mapcount:0 compound_pincount:0 [ 106.709615][ T4571] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 106.717666][ T4571] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888017441b40 [ 106.726301][ T4571] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 106.734939][ T4571] page dumped because: kasan: bad access detected [ 106.741411][ T4571] page_owner tracks the page as allocated [ 106.747150][ T4571] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 19014294236, free_ts 0 [ 106.766912][ T4571] post_alloc_hook+0x173/0x1a0 [ 106.771733][ T4571] get_page_from_freelist+0x206b/0x2180 [ 106.777333][ T4571] __alloc_pages+0x1ec/0x4f0 [ 106.781971][ T4571] alloc_page_interleave+0x24/0x1e0 [ 106.787219][ T4571] alloc_slab_page+0x5d/0x180 [ 106.791941][ T4571] new_slab+0x87/0x2d0 [ 106.796048][ T4571] ___slab_alloc+0xbc5/0x1240 [ 106.800771][ T4571] __kmem_cache_alloc_node+0x126/0x270 [ 106.806270][ T4571] kmalloc_trace+0x26/0xe0 [ 106.810743][ T4571] bus_add_driver+0xdc/0x5d0 [ 106.815371][ T4571] driver_register+0x32d/0x430 [ 106.820178][ T4571] usb_register_driver+0x201/0x3c0 [ 106.825332][ T4571] do_one_initcall+0x257/0x800 [ 106.830149][ T4571] do_initcall_level+0x13d/0x1ed [ 106.835122][ T4571] do_initcalls+0x4b/0x8a [ 106.839487][ T4571] kernel_init_freeable+0x401/0x5ab [ 106.844736][ T4571] page_owner free stack trace missing [ 106.850136][ T4571] [ 106.852485][ T4571] Memory state around the buggy address: [ 106.858146][ T4571] ffff8880293c9d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 106.866244][ T4571] ffff8880293c9d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 106.874347][ T4571] >ffff8880293c9e00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 106.882443][ T4571] ^ [ 106.887320][ T4571] ffff8880293c9e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 106.895416][ T4571] ffff8880293c9f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 106.903506][ T4571] ================================================================== [ 106.913174][ T4571] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 106.920433][ T4571] CPU: 1 PID: 4571 Comm: syz.4.69 Not tainted syzkaller #0 [ 106.927676][ T4571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 106.937781][ T4571] Call Trace: [ 106.941094][ T4571] [ 106.944059][ T4571] dump_stack_lvl+0x188/0x24e [ 106.948780][ T4571] ? memcpy+0x3c/0x60 [ 106.952809][ T4571] ? show_regs_print_info+0x12/0x12 [ 106.958065][ T4571] ? load_image+0x410/0x410 [ 106.962625][ T4571] panic+0x2d3/0x710 [ 106.966594][ T4571] ? bpf_jit_dump+0xd0/0xd0 [ 106.971144][ T4571] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 106.977169][ T4571] ? _raw_spin_unlock+0x40/0x40 [ 106.982065][ T4571] check_panic_on_warn+0x80/0xa0 [ 106.987031][ T4571] ? dvb_device_open+0xc5/0x360 [ 106.991904][ T4571] end_report+0x66/0x110 [ 106.996177][ T4571] kasan_report+0x118/0x140 [ 107.000741][ T4571] ? dvb_device_open+0xc5/0x360 [ 107.005617][ T4571] dvb_device_open+0xc5/0x360 [ 107.010316][ T4571] chrdev_open+0x585/0x5f0 [ 107.014755][ T4571] ? cd_forget+0x160/0x160 [ 107.019288][ T4571] ? fsnotify_perm+0x39b/0x550 [ 107.024075][ T4571] ? cd_forget+0x160/0x160 [ 107.028521][ T4571] do_dentry_open+0x7dd/0x10b0 [ 107.033320][ T4571] path_openat+0x2674/0x2f10 [ 107.037940][ T4571] ? verify_lock_unused+0x140/0x140 [ 107.043168][ T4571] ? do_sys_openat2+0xdd/0x4f0 [ 107.047971][ T4571] ? do_filp_open+0x420/0x420 [ 107.052676][ T4571] do_filp_open+0x1ee/0x420 [ 107.057295][ T4571] ? vfs_tmpfile+0x470/0x470 [ 107.061914][ T4571] ? _raw_spin_unlock+0x24/0x40 [ 107.066787][ T4571] ? alloc_fd+0x590/0x640 [ 107.071144][ T4571] do_sys_openat2+0x14b/0x4f0 [ 107.075872][ T4571] ? do_sys_open+0xe0/0xe0 [ 107.080433][ T4571] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 107.086439][ T4571] ? lock_chain_count+0x20/0x20 [ 107.091313][ T4571] __x64_sys_openat+0x135/0x160 [ 107.096192][ T4571] do_syscall_64+0x4c/0xa0 [ 107.100636][ T4571] ? clear_bhb_loop+0x60/0xb0 [ 107.105335][ T4571] ? clear_bhb_loop+0x60/0xb0 [ 107.110051][ T4571] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 107.115967][ T4571] RIP: 0033:0x7f526f15d68e [ 107.120396][ T4571] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 107.140012][ T4571] RSP: 002b:00007f526ff97b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 107.148444][ T4571] RAX: ffffffffffffffda RBX: 00007f526ff986c0 RCX: 00007f526f15d68e [ 107.156433][ T4571] RDX: 0000000000000002 RSI: 00007f526ff97c00 RDI: ffffffffffffff9c [ 107.164431][ T4571] RBP: 00007f526ff97c00 R08: 0000000000000000 R09: 0000000000000000 [ 107.172427][ T4571] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 107.180502][ T4571] R13: 00007f526f416308 R14: 00007f526f416270 R15: 00007ffe39c73008 [ 107.188494][ T4571] [ 107.192120][ T4571] Kernel Offset: disabled [ 107.196475][ T4571] Rebooting in 86400 seconds..