last executing test programs: 31.367369402s ago: executing program 3 (id=8): r0 = timerfd_create(0x0, 0x800) r1 = syz_io_uring_setup(0xbdc, &(0x7f00000000c0)={0x0, 0x5ed9, 0x1000, 0x1001, 0x40000333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000880)=[{&(0x7f00000032c0)=""/245, 0xf5}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 30.860136411s ago: executing program 0 (id=1): close(0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) semget(0x0, 0x2, 0x120) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180200002603000000000000000000008500000087000000850000007d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) syz_io_uring_setup(0x5c4, &(0x7f00000000c0)={0x0, 0x8832, 0x10000, 0x4, 0x21b}, &(0x7f0000000180)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(0xffffffffffffffff, 0xae44, 0x3) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0xfce1) r3 = openat$comedi(0xffffffffffffff9c, 0x0, 0x20400, 0x0) preadv(r3, &(0x7f00000008c0)=[{&(0x7f00000006c0)=""/177, 0xb1}], 0x1, 0x6, 0x7) ioctl$TCFLSH(r0, 0x540b, 0x1) semget(0x2, 0x4, 0x258) 29.549657706s ago: executing program 0 (id=9): ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0xfffc, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0xffff, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000004c0)={0x100000011, @multicast2, 0x0, 0x0, 'ovf\x00', 0x13, 0x84, 0x46}, 0x2c) 29.54936715s ago: executing program 1 (id=2): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', &(0x7f0000000440), 0x0) ptrace$setregset(0x4205, r0, 0x200, &(0x7f0000000080)={0x0}) r3 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000380)={0x0, 0x200, 0x3, [0x6, 0x0, 0x7]}, &(0x7f00000003c0)=0xe) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000004c0)={r4, @in={{0x2, 0x4e23, @broadcast}}}, 0x84) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_getlink={0x20, 0x12, 0x70d, 0x70bd2a, 0x25dfdbde, {0x7, 0x0, 0x0, 0x0, 0x40020, 0x5d000}}, 0x20}}, 0x20008080) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x7}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 29.403509951s ago: executing program 2 (id=10): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f00000028c0)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000400)="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", 0x310}], 0x2}}, {{&(0x7f0000001400)={0x2, 0x4e21, @broadcast}, 0x10, 0x0}}], 0x2, 0x40) close(r2) 29.234332372s ago: executing program 3 (id=11): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000002540), r0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002580)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x24004004) 28.942731966s ago: executing program 4 (id=5): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) io_setup(0x2, &(0x7f0000000000)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x1) syz_clone3(&(0x7f0000000300)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) 28.219632028s ago: executing program 0 (id=12): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, 0x0, 0x20000084) preadv(r0, &(0x7f0000003540)=[{&(0x7f00000003c0)=""/73, 0x49}], 0x342, 0xfffffffe, 0x80) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(0xffffffffffffffff, 0xc0186445, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2) 28.219386588s ago: executing program 2 (id=13): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x28, r2, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x59}, @void, @val={0xc, 0x99, {0x892e, 0xf}}}}}, 0x28}}, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 27.407272883s ago: executing program 3 (id=14): r0 = syz_open_dev$loop(&(0x7f00000001c0), 0xffffffffffffffff, 0x20002) ioctl$BLKGETZONESZ(r0, 0x80041284, &(0x7f0000000200)=0x5) 24.892853204s ago: executing program 1 (id=15): socket(0x2, 0xa, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000140), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000200), &(0x7f0000001500)=@tcp}, 0x20) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'team_slave_0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}) write$tun(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="70000000ffffffffffff0180c200000e0800450000780000000000177c2275e687350016c82f9078ac1e0001e000000164006558006490780200000004000000020000002915a94a11e4"], 0x8a) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c40)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x410cd}, 0x400c084) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000", @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000037f8000000000000000000000000f2645f89cf"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000540)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="ef16", 0x0}, 0x50) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 24.422674398s ago: executing program 3 (id=16): syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23.783339878s ago: executing program 4 (id=17): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) socket(0xa, 0x3, 0x3a) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) creat(0x0, 0x2) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x6, [@decl_tag={0x5, 0x0, 0x0, 0x11, 0x2, 0xffffffff}, @typedef={0x7}]}, {0x0, [0x0, 0x30, 0x61, 0x30]}}, 0x0, 0x3a, 0x0, 0x1}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 23.48595424s ago: executing program 2 (id=18): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x2090) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c61"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x84) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 22.80768116s ago: executing program 0 (id=19): syz_open_dev$vim2m(0x0, 0x0, 0x2) sched_setscheduler(0x0, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102384, 0x18ff0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x30, 0x0, 0x4d, 0xffffefff}, {0x6, 0x0, 0xff}]}, 0x10) sendmmsg(r1, &(0x7f0000001c00), 0x400000000000159, 0x40840) 22.791889735s ago: executing program 3 (id=20): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000002e00090027bdaf00000000000400000004001d"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x4000000) 22.653253018s ago: executing program 1 (id=21): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1fe) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$9p_unix(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x892031, 0x0) 20.804552339s ago: executing program 2 (id=22): memfd_secret(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x17, 0x0, 0x0, 0x8000}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/user\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000529000/0x2000)=nil, 0x2000, 0x16) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) 19.662205891s ago: executing program 4 (id=23): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000200)=0x60) 19.452834119s ago: executing program 3 (id=24): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setresuid(0xee01, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800020850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x6, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_rr_get_interval(r1, &(0x7f0000000200)) kexec_load(0x0, 0x0, &(0x7f0000000180), 0x0) sync() ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000007c0)) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 14.379470413s ago: executing program 1 (id=25): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe94, 0x30, 0x25, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd}, {0x0, 0x0, 0x0, 0x20}, {0x0, 0x1}, {}, {0x0, 0x0, 0x6}, {}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x10}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0xfffffffe}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xa2}, {}, {0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}], [{0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe94}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$loop(0x0, 0x10, 0x202a80) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f00000001c0)=r0) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_fscache}]}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r7) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20049854) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840) syz_emit_ethernet(0x56, 0x0, 0x0) 13.431184189s ago: executing program 2 (id=26): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x400040c0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x5, 0xc, 0x40, 0x3, 0x41}, 0x50) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x6}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x6}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x4}}, [@snprintf={{0x7, 0x0, 0x8, 0x6}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x6}, {}, {}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x4}, {0x85, 0x0, 0x0, 0xa0}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.026646843s ago: executing program 32 (id=19): syz_open_dev$vim2m(0x0, 0x0, 0x2) sched_setscheduler(0x0, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102384, 0x18ff0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x30, 0x0, 0x4d, 0xffffefff}, {0x6, 0x0, 0xff}]}, 0x10) sendmmsg(r1, &(0x7f0000001c00), 0x400000000000159, 0x40840) 706.278069ms ago: executing program 2 (id=28): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x867d7000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4f22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000007c0)}}, {{0x0, 0x0, &(0x7f00000009c0)}}], 0x4000000000001b6, 0x8800) 405.630943ms ago: executing program 33 (id=24): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setresuid(0xee01, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800020850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x6, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_rr_get_interval(r1, &(0x7f0000000200)) kexec_load(0x0, 0x0, &(0x7f0000000180), 0x0) sync() ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000007c0)) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 104.213792ms ago: executing program 34 (id=23): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000200)=0x60) 0s ago: executing program 1 (id=31): r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x1}) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 146.026677][ T5428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.045758][ T5428] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.153' (ED25519) to the list of known hosts. syzkaller login: [ 194.106407][ T5753] cgroup: Unknown subsys name 'net' [ 194.241677][ T5753] cgroup: Unknown subsys name 'cpuset' [ 194.263056][ T5753] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 201.072035][ T5753] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 206.311210][ T5781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 206.340839][ T5786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 206.349522][ T5786] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 206.361087][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 206.363878][ T5786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 206.378717][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 206.382706][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 206.395256][ T5784] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 206.397697][ T5786] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 206.406051][ T5784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 206.419088][ T5784] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 206.423356][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 206.446489][ T5786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 206.467446][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 206.476240][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 206.491547][ T5787] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 206.508829][ T5786] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 206.512717][ T5787] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 206.524341][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 206.535036][ T5786] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 206.544229][ T5787] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 206.554987][ T5786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 206.568694][ T5787] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 206.586444][ T5786] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 206.615024][ T5786] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 208.236023][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 208.589836][ T5781] Bluetooth: hci1: command tx timeout [ 208.610041][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 208.660016][ T5781] Bluetooth: hci0: command tx timeout [ 208.665956][ T5781] Bluetooth: hci4: command tx timeout [ 208.672341][ T49] Bluetooth: hci3: command tx timeout [ 208.678247][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 208.742619][ T5781] Bluetooth: hci2: command tx timeout [ 208.878392][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 209.118700][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 209.502490][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.522151][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.562672][ T5773] bridge_slave_0: entered allmulticast mode [ 209.576502][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 209.584708][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 209.600001][ T5773] bridge_slave_0: entered promiscuous mode [ 209.679800][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.689044][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.720373][ T5773] bridge_slave_1: entered allmulticast mode [ 209.741630][ T5773] bridge_slave_1: entered promiscuous mode [ 210.026798][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.145984][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.156613][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.167722][ T5777] bridge_slave_0: entered allmulticast mode [ 210.178149][ T5777] bridge_slave_0: entered promiscuous mode [ 210.238751][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.328849][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.338248][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.347088][ T5777] bridge_slave_1: entered allmulticast mode [ 210.356104][ T5777] bridge_slave_1: entered promiscuous mode [ 210.366821][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.374903][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.383178][ T5782] bridge_slave_0: entered allmulticast mode [ 210.392150][ T5782] bridge_slave_0: entered promiscuous mode [ 210.433328][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.441600][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.449106][ T5772] bridge_slave_0: entered allmulticast mode [ 210.460096][ T5772] bridge_slave_0: entered promiscuous mode [ 210.501980][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.510173][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.517731][ T5782] bridge_slave_1: entered allmulticast mode [ 210.528083][ T5782] bridge_slave_1: entered promiscuous mode [ 210.548284][ T5773] team0: Port device team_slave_0 added [ 210.584832][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.594035][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.603691][ T5772] bridge_slave_1: entered allmulticast mode [ 210.612908][ T5772] bridge_slave_1: entered promiscuous mode [ 210.659804][ T5781] Bluetooth: hci1: command tx timeout [ 210.705322][ T5773] team0: Port device team_slave_1 added [ 210.741544][ T5781] Bluetooth: hci4: command tx timeout [ 210.741694][ T49] Bluetooth: hci3: command tx timeout [ 210.747613][ T5781] Bluetooth: hci0: command tx timeout [ 210.819750][ T5781] Bluetooth: hci2: command tx timeout [ 210.886133][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.992526][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.001682][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.013055][ T5771] bridge_slave_0: entered allmulticast mode [ 211.023598][ T5771] bridge_slave_0: entered promiscuous mode [ 211.075140][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.095531][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.109371][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.117761][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.148071][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.162834][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.172157][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.180882][ T5771] bridge_slave_1: entered allmulticast mode [ 211.189934][ T5771] bridge_slave_1: entered promiscuous mode [ 211.212899][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.263149][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.278652][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.287117][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.316777][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.372266][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.542034][ T5777] team0: Port device team_slave_0 added [ 211.595575][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.645197][ T5777] team0: Port device team_slave_1 added [ 211.660250][ T5782] team0: Port device team_slave_0 added [ 211.678631][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.702873][ T5772] team0: Port device team_slave_0 added [ 211.755612][ T5782] team0: Port device team_slave_1 added [ 211.846289][ T5772] team0: Port device team_slave_1 added [ 212.016737][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.024229][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.052262][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.116874][ T5773] hsr_slave_0: entered promiscuous mode [ 212.127463][ T5773] hsr_slave_1: entered promiscuous mode [ 212.148686][ T5771] team0: Port device team_slave_0 added [ 212.192950][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.202677][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.235465][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.253685][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.262754][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.295602][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.314462][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.322282][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.351811][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.372332][ T5771] team0: Port device team_slave_1 added [ 212.381536][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.389148][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.417988][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.515155][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.522591][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.550783][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.740007][ T5781] Bluetooth: hci1: command tx timeout [ 212.779647][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.793866][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.822501][ T49] Bluetooth: hci4: command tx timeout [ 212.833986][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.838231][ T5786] Bluetooth: hci0: command tx timeout [ 212.857851][ T5781] Bluetooth: hci3: command tx timeout [ 212.869937][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.879979][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.910554][ T5781] Bluetooth: hci2: command tx timeout [ 212.911218][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.066186][ T5777] hsr_slave_0: entered promiscuous mode [ 213.075840][ T5777] hsr_slave_1: entered promiscuous mode [ 213.084624][ T5777] debugfs: 'hsr0' already exists in 'hsr' [ 213.090860][ T5777] Cannot create hsr debugfs directory [ 213.219816][ T5782] hsr_slave_0: entered promiscuous mode [ 213.229840][ T5782] hsr_slave_1: entered promiscuous mode [ 213.239347][ T5782] debugfs: 'hsr0' already exists in 'hsr' [ 213.247673][ T5782] Cannot create hsr debugfs directory [ 213.357649][ T5772] hsr_slave_0: entered promiscuous mode [ 213.368087][ T5772] hsr_slave_1: entered promiscuous mode [ 213.378580][ T5772] debugfs: 'hsr0' already exists in 'hsr' [ 213.385948][ T5772] Cannot create hsr debugfs directory [ 213.559012][ T5771] hsr_slave_0: entered promiscuous mode [ 213.569072][ T5771] hsr_slave_1: entered promiscuous mode [ 213.580982][ T5771] debugfs: 'hsr0' already exists in 'hsr' [ 213.587162][ T5771] Cannot create hsr debugfs directory [ 214.819893][ T5781] Bluetooth: hci1: command tx timeout [ 214.900343][ T5781] Bluetooth: hci3: command tx timeout [ 214.900535][ T49] Bluetooth: hci4: command tx timeout [ 214.914481][ T5786] Bluetooth: hci0: command tx timeout [ 214.979933][ T5786] Bluetooth: hci2: command tx timeout [ 215.005301][ T5773] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 215.067184][ T5773] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 215.108716][ T5773] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 215.150839][ T5773] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 215.244714][ T5777] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 215.321432][ T5777] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 215.348463][ T5777] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 215.393180][ T5777] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 215.580018][ T5772] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 215.625191][ T5772] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 215.683800][ T5772] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 215.711656][ T5772] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 215.978610][ T5771] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 216.034301][ T5771] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 216.061333][ T5771] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 216.084021][ T5771] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 216.412042][ T5782] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 216.488512][ T5782] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 216.516593][ T5782] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 216.540514][ T5782] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 216.758770][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.957395][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.016212][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.147977][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.157481][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.235102][ T1013] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.244028][ T1013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.295491][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.388499][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.495006][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.508852][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.551098][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.558506][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.667703][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.675406][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.715690][ T1013] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.724548][ T1013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.846630][ T1013] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.855732][ T1013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.027213][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.158439][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.166601][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.289397][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.297297][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.713679][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.058341][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.185946][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.195742][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.286224][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.335649][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.343666][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.286820][ T5773] veth0_vlan: entered promiscuous mode [ 220.468981][ T5773] veth1_vlan: entered promiscuous mode [ 220.528942][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.607896][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.891768][ T5773] veth0_macvtap: entered promiscuous mode [ 220.968840][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.008626][ T5773] veth1_macvtap: entered promiscuous mode [ 221.353324][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.487644][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.516070][ T5772] veth0_vlan: entered promiscuous mode [ 221.595425][ T5777] veth0_vlan: entered promiscuous mode [ 221.671259][ T257] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.702873][ T56] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.738168][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.792305][ T56] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.822026][ T56] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.889298][ T5772] veth1_vlan: entered promiscuous mode [ 221.965835][ T5777] veth1_vlan: entered promiscuous mode [ 222.457547][ T5782] veth0_vlan: entered promiscuous mode [ 222.534089][ T5772] veth0_macvtap: entered promiscuous mode [ 222.591561][ T5782] veth1_vlan: entered promiscuous mode [ 222.612562][ T5777] veth0_macvtap: entered promiscuous mode [ 222.687292][ T5772] veth1_macvtap: entered promiscuous mode [ 222.752380][ T5777] veth1_macvtap: entered promiscuous mode [ 222.959240][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.055902][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.145623][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.163530][ T5782] veth0_macvtap: entered promiscuous mode [ 223.182632][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.307291][ T34] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.335138][ T5782] veth1_macvtap: entered promiscuous mode [ 223.399238][ T34] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.412754][ T1152] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.453614][ T5771] veth0_vlan: entered promiscuous mode [ 223.466341][ T1152] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.500002][ T1152] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.532851][ T1152] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.586376][ T1152] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.622462][ T1152] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.816078][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.934523][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.971818][ T5771] veth1_vlan: entered promiscuous mode [ 224.197032][ T56] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.216767][ T56] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.301717][ T56] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.341279][ T56] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.636851][ T5771] veth0_macvtap: entered promiscuous mode [ 224.778396][ T5771] veth1_macvtap: entered promiscuous mode [ 225.132623][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.258237][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.436547][ T1013] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.460187][ T1013] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.485601][ T1013] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.525205][ T1013] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.067722][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.137927][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.474885][ T257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.509772][ T257] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.131931][ T5773] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 231.195906][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.290894][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.565629][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.610227][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.770004][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.800631][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.078061][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.118196][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.379991][ T1013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.388077][ T1013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.941785][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.999966][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.370314][ T257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.437289][ T257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.644268][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.677646][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.455586][ T5979] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 235.229846][ T40] IPVS: starting estimator thread 0... [ 235.571623][ T5985] IPVS: using max 192 ests per chain, 9600 per kthread [ 236.205672][ T5995] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 239.046342][ T6006] syz.1.15 uses obsolete (PF_INET,SOCK_PACKET) [ 239.635638][ T6010] Zero length message leads to an empty skb [ 242.443159][ T6026] ======================================================= [ 242.443159][ T6026] WARNING: The mand mount option has been deprecated and [ 242.443159][ T6026] and is ignored by this kernel. Remove the mand [ 242.443159][ T6026] option from the mount to silence this warning. [ 242.443159][ T6026] ======================================================= [ 242.780214][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 242.883059][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 242.984737][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 243.189661][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 243.292364][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 243.501186][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 244.110102][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 244.210791][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 244.621024][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 246.773570][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 264.536463][ T6055] ===================================================== [ 264.545727][ T6055] BUG: KMSAN: uninit-value in dvb_demux_read+0x580/0xa40 [ 264.553549][ T6055] dvb_demux_read+0x580/0xa40 [ 264.558901][ T6055] vfs_readv+0x931/0xf30 [ 264.564987][ T6055] __x64_sys_preadv+0x2a3/0x510 [ 264.570772][ T6055] x64_sys_call+0x3220/0x3ea0 [ 264.575973][ T6055] do_syscall_64+0x134/0xf80 [ 264.581211][ T6055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.594475][ T6055] [ 264.597137][ T6055] Uninit was created at: [ 264.607882][ T6055] __alloc_frozen_pages_noprof+0x6f7/0x1020 [ 264.614456][ T6055] alloc_pages_mpol+0x328/0x860 [ 264.619961][ T6055] alloc_pages_noprof+0x101/0x280 [ 264.625781][ T6055] __vmalloc_node_range_noprof+0xa97/0x2d80 [ 264.634684][ T6055] __vmalloc_noprof+0x128/0x1f0 [ 264.642456][ T6055] vmalloc_array_noprof+0x48/0x80 [ 264.648344][ T6055] dvb_dmxdev_init+0xd8/0x680 [ 264.658111][ T6055] vidtv_bridge_probe+0x1bfd/0x2690 [ 264.666604][ T6055] platform_probe+0x213/0x370 [ 264.672425][ T6055] really_probe+0x4d5/0xe40 [ 264.678580][ T6055] __driver_probe_device+0x25e/0x370 [ 264.686764][ T6055] driver_probe_device+0x70/0x8f0 [ 264.702787][ T6055] __driver_attach+0x541/0xaa0 [ 264.709192][ T6055] bus_for_each_dev+0x33b/0x580 [ 264.717778][ T6055] driver_attach+0x51/0x70 [ 264.724433][ T6055] bus_add_driver+0x54f/0xdb0 [ 264.730413][ T6055] driver_register+0x42e/0x6a0 [ 264.736264][ T6055] __platform_driver_register+0x65/0x80 [ 264.744246][ T6055] vidtv_bridge_init+0x73/0x100 [ 264.750225][ T6055] do_one_initcall+0x237/0xbb0 [ 264.756364][ T6055] do_initcall_level+0x157/0x350 [ 264.761922][ T6055] do_initcalls+0x176/0x310 [ 264.766656][ T6055] do_basic_setup+0x1d/0x30 [ 264.771562][ T6055] kernel_init_freeable+0x213/0x460 [ 264.777532][ T6055] kernel_init+0x2f/0x5e0 [ 264.782711][ T6055] ret_from_fork+0x20f/0x910 [ 264.787632][ T6055] ret_from_fork_asm+0x1a/0x30 [ 264.798232][ T6055] [ 264.803355][ T6055] CPU: 0 UID: 0 PID: 6055 Comm: syz.1.31 Not tainted syzkaller #0 PREEMPT(full) [ 264.813012][ T6055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 264.826389][ T6055] ===================================================== [ 264.836481][ T6055] Disabling lock debugging due to kernel taint SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 265.530409][ T6055] Kernel panic - not syncing: kmsan.panic set ... [ 265.537912][ T6055] CPU: 0 UID: 0 PID: 6055 Comm: syz.1.31 Tainted: G B syzkaller #0 PREEMPT(full) [ 265.550507][ T6055] Tainted: [B]=BAD_PAGE [ 265.556139][ T6055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 265.567844][ T6055] Call Trace: [ 265.571364][ T6055] [ 265.574738][ T6055] __dump_stack+0x26/0x30 [ 265.579583][ T6055] dump_stack_lvl+0x50/0x1c0 [ 265.584663][ T6055] ? dump_stack+0x12/0x25 [ 265.589538][ T6055] dump_stack+0x1e/0x25 [ 265.594018][ T6055] vpanic+0x7b4/0x1430 [ 265.598612][ T6055] panic+0x15d/0x160 [ 265.603240][ T6055] kmsan_report+0x31a/0x320 [ 265.608618][ T6055] ? __msan_warning+0x1b/0x30 [ 265.613615][ T6055] ? dvb_demux_read+0x580/0xa40 [ 265.618958][ T6055] ? vfs_readv+0x931/0xf30 [ 265.624624][ T6055] ? __x64_sys_preadv+0x2a3/0x510 [ 265.630764][ T6055] ? x64_sys_call+0x3220/0x3ea0 [ 265.636147][ T6055] ? do_syscall_64+0x134/0xf80 [ 265.641467][ T6055] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.648478][ T6055] ? __rcu_read_unlock+0x6c/0xd0 [ 265.654402][ T6055] ? aa_file_perm+0x4b9/0x2870 [ 265.659490][ T6055] ? aa_file_perm+0x4f0/0x2870 [ 265.664724][ T6055] ? stack_depot_save_flags+0x35/0x790 [ 265.671332][ T6055] ? kmsan_get_metadata+0xf1/0x160 [ 265.679428][ T6055] ? kmsan_get_metadata+0xf1/0x160 [ 265.684881][ T6055] ? kmsan_get_metadata+0xf1/0x160 [ 265.691514][ T6055] ? kmsan_get_metadata+0xf1/0x160 [ 265.697288][ T6055] ? kmsan_get_metadata+0x146/0x160 [ 265.703302][ T6055] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 265.710758][ T6055] ? __pfx_dvb_demux_read+0x10/0x10 [ 265.716364][ T6055] ? kmsan_get_metadata+0x146/0x160 [ 265.722849][ T6055] __msan_warning+0x1b/0x30 [ 265.728309][ T6055] dvb_demux_read+0x580/0xa40 [ 265.733431][ T6055] ? __pfx_dvb_demux_read+0x10/0x10 [ 265.739191][ T6055] vfs_readv+0x931/0xf30 [ 265.743997][ T6055] ? kmsan_get_metadata+0xf1/0x160 [ 265.752309][ T6055] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 265.759501][ T6055] __x64_sys_preadv+0x2a3/0x510 [ 265.766512][ T6055] x64_sys_call+0x3220/0x3ea0 [ 265.773269][ T6055] do_syscall_64+0x134/0xf80 [ 265.781783][ T6055] ? clear_bhb_loop+0x50/0xa0 [ 265.787925][ T6055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.795549][ T6055] RIP: 0033:0x7f644df9c799 [ 265.800617][ T6055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.824669][ T6055] RSP: 002b:00007f644ed92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 265.836826][ T6055] RAX: ffffffffffffffda RBX: 00007f644e215fa0 RCX: 00007f644df9c799 [ 265.846145][ T6055] RDX: 0000000000000001 RSI: 0000200000000480 RDI: 0000000000000003 [ 265.856677][ T6055] RBP: 00007f644e032c99 R08: 000000000000000d R09: 0000000000000000 [ 265.867553][ T6055] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 265.877383][ T6055] R13: 00007f644e216038 R14: 00007f644e215fa0 R15: 00007ffd32dd2928 [ 265.886638][ T6055] [ 265.891593][ T6055] Kernel Offset: disabled [ 265.897172][ T6055] Rebooting in 86400 seconds..