last executing test programs: 3m22.9140099s ago: executing program 2 (id=6): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000002c0)={0x1, 0x0, 0x7, &(0x7f0000000240)={0x1b, "4e983e00c6d08804404b0aaa5ceb7a0903b7fffffffc00"}}) 3m20.447093842s ago: executing program 2 (id=9): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, 0x0, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(0xffffffffffffffff, 0xc0285840, 0x0) socket$kcm(0x10, 0x2, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) eventfd(0xfffffc00) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x0) 3m17.91028828s ago: executing program 2 (id=10): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$binfmt_format(0xffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x405}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x74}}, 0x44000) syz_emit_ethernet(0x42, &(0x7f00000007c0)={@random="793a446f0204", @empty, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x1, @random="b23c0edb4698", @private2, @local, @remote}}}}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) syz_clone3(&(0x7f0000000440)={0x10000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)=0x0, {0x41}, 0x0, 0x0, &(0x7f0000000240)=""/77, &(0x7f0000000340)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x6}, 0x58) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f00000004c0)={{0x9, 0x5, 0x0, 0x9, '\x00', 0x5}, 0x2, 0x1, 0x5f, r4, 0x6, 0x9, 'syz1\x00', &(0x7f0000000380)=['&\'@@%\x00', '/dev/adsp1\x00', '$$^!{\x9f.*\'', '\x00', '/dev/nvram\x00', '/dev/L\x12?\xf3m\b'], 0x31}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socket$nl_route(0x10, 0x3, 0x0) r5 = io_uring_setup(0x3454, &(0x7f00000003c0)={0x0, 0x0, 0x40, 0x0, 0xa7}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) ioctl$TUNSETOFFLOAD(r6, 0x400454d0, 0x6627993fc9cad4e5) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={0x0}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4a701, 0x0) 3m8.466501692s ago: executing program 0 (id=13): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x11}, 0x60) listen(r1, 0xf5f) accept(r1, 0x0, 0x0) 3m8.333060458s ago: executing program 2 (id=14): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e29, 0x6, @dev={0xfe, 0x80, '\x00', 0x2d}, 0xf}, 0x1c) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x28}, 0x50) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) prlimit64(r1, 0x7, &(0x7f00000000c0)={0x80, 0x8000000000000001}, &(0x7f00000001c0)) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x1) openat$ptp0(0xffffffffffffff9c, 0x0, 0x40001, 0x0) 3m3.851969225s ago: executing program 0 (id=16): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000002c0)={0x1, 0x0, 0x7, &(0x7f0000000240)={0x1b, "4e983e00c6d08804404b0aaa5ceb7a0903b7fffffffc00"}}) 3m3.722694437s ago: executing program 3 (id=4): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000340)={{0x80, 0xfc}, 'port0\x00', 0x0, 0x60000, 0x0, 0xfffffffb, 0x6, 0xfffffffc, 0x10000000, 0x0, 0x1}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x0, 0x4c, 0x1a, 0x160, 0x73, 0x2b0, 0x258, 0x258, 0x2b0, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'dvmrp1\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0x120, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@multiport={{0x50}, {0x1, 0x4, [0x4e22, 0x4e20, 0x4e24, 0x8, 0x4e21, 0x4e22, 0x4e23, 0x4e21, 0x4e21, 0x4e23, 0x4e22, 0x4e20, 0x4e23, 0x4e21, 0x4e24], [0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1], 0x1}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x3e0) r7 = dup(r5) inotify_init() mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000e40), 0x0, &(0x7f0000000e80)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r7}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000180)=@mgmt_frame=@probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x1}, @broadcast, @broadcast, @from_mac, {0x1, 0x9}, @value=@ver_80211n={0x0, 0x3, 0x1, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}}, 0x1, @random=0x7, 0x1444, @val={0x0, 0x1a, @random="7a1ab81c3d562291c9020b7d2cd94797aaa0dcc1efd6421c0035"}, @val={0x1, 0x0, [{0xc, 0x1}, {0x1, 0x1}, {0x6c, 0x1}, {0x60, 0x1}, {0x30}, {0x3, 0x1}]}, @val={0x3, 0x0, 0xb8}, @void, @void, @void, @val={0x72, 0x6}, @void, [{0xdd, 0xc, "c3aa49838bf8de3789290622"}]}, 0x5a) 3m3.456384934s ago: executing program 4 (id=5): prlimit64(0x0, 0x6, &(0x7f0000000000)={0x5, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r1 = socket(0x2, 0x2, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x20000000) r3 = fsopen(&(0x7f0000000100)='bdev\x00', 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x3}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) unshare(0x28000600) r6 = fsopen(&(0x7f00000001c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) unshare(0x8000280) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x189042, 0x1a0) 3m2.486533671s ago: executing program 2 (id=18): r0 = socket$inet6(0xa, 0x3, 0x26) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 2m58.256208603s ago: executing program 3 (id=19): open$dir(&(0x7f00000001c0)='./file0\x00', 0x145c00, 0x12) r0 = syz_io_uring_setup(0x187, &(0x7f0000000000)={0x0, 0x1, 0x400, 0x3, 0x2ec}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x81}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 2m57.973552486s ago: executing program 0 (id=21): sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3c}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x4, 0x10cba, 0x1, {0x6, @sliced={0x7072, [0x5, 0x2, 0x5, 0xe93, 0xa5ee, 0x4cd, 0x6, 0x7, 0x8, 0x3, 0xc, 0x57, 0x42d1, 0x6, 0x5, 0x101, 0x2d, 0xfffd, 0x5, 0x3e7, 0x7, 0xffff, 0x6, 0x0, 0x1, 0x5, 0x7, 0x2, 0x32, 0xffff, 0x9a, 0xff, 0x3, 0xff5a, 0x9, 0x9, 0x4, 0x1c, 0x5, 0x5, 0xf, 0x8, 0xfa3e, 0xebf4, 0x7, 0x0, 0xce, 0xfff], 0xa}}, 0x40004}) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000480)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) ioctl$HCIINQUIRY(r4, 0x400448ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendto(0xffffffffffffffff, &(0x7f0000000000)="6f6e0239b1b2d920cc6edcd1498d4c7d21d2ad1bfbb070d9ca9412650ed8d94124ef", 0x22, 0x2000c841, &(0x7f0000000040)=@in6={0xa, 0x4e21, 0x80000001, @private1, 0x8000}, 0x80) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf108}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4004) 2m57.363055096s ago: executing program 4 (id=22): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x7fffffff) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x1000000201005) 2m56.044097488s ago: executing program 3 (id=23): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)={0x6c, r2, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x7, 0x8000, 0x81]}, @NL80211_ATTR_FRAME={0x44, 0x33, @assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @initial, {0x3, 0x9}, @value=@ver_80211n={0x0, 0x9c1, 0x1, 0x1, 0x0, 0x2}}, 0x4402, 0x45, @default, @val, @val={0x2d, 0x1a, {0x800, 0x2, 0x3, 0x0, {0xffffffff, 0x5e, 0x0, 0x9, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x1, 0x1000, 0x3}}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24000064}, 0xc000) 2m53.881003821s ago: executing program 0 (id=24): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x11}, 0x60) listen(r1, 0xf5f) accept(r1, 0x0, 0x0) 2m53.53802371s ago: executing program 3 (id=26): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000280)={0x28, 0x5, r1, 0x0, &(0x7f000000d000/0x1000)=nil, 0x1000, 0x57}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000240)={0x18, r1, 0xd, 0x280000000}) 2m53.518469199s ago: executing program 4 (id=27): bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sched_rr_get_interval(r0, &(0x7f00000001c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080), 0x0) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r5, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x7f}, &(0x7f0000000100)=0x8) 2m53.296826969s ago: executing program 2 (id=28): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e29, 0x6, @dev={0xfe, 0x80, '\x00', 0x2d}, 0xf}, 0x1c) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x28}, 0x50) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) prlimit64(r1, 0x7, &(0x7f00000000c0)={0x80, 0x8000000000000001}, &(0x7f00000001c0)) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x1) openat$ptp0(0xffffffffffffff9c, 0x0, 0x40001, 0x0) 2m46.561021552s ago: executing program 4 (id=29): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000011c0)={&(0x7f0000001180)=[0x0], 0x1, r2, r3, 0x3, 0x0, 0x2, 0x802, {0xac7c, 0x1, 0x7, 0x69, 0xf4b, 0x6, 0x2, 0x45, 0x412f, 0xe154, 0x1000, 0x7, 0xb2bf, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) 2m38.968692939s ago: executing program 3 (id=31): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000800)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44e}}, 0x0, 0x0}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000002c0)={0x1, 0x0, 0x7, &(0x7f0000000240)={0x1b, "4e983e00c6d08804404b0aaa5ceb7a0903b7fffffffc00"}}) 2m38.907945791s ago: executing program 0 (id=32): prlimit64(0x0, 0x6, &(0x7f0000000000)={0x5, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r1 = socket(0x2, 0x2, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x20000000) r3 = fsopen(&(0x7f0000000100)='bdev\x00', 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x3}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) unshare(0x28000600) r6 = fsopen(&(0x7f00000001c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) unshare(0x8000280) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x189042, 0x1a0) 2m33.905948133s ago: executing program 32 (id=28): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e29, 0x6, @dev={0xfe, 0x80, '\x00', 0x2d}, 0xf}, 0x1c) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x28}, 0x50) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) prlimit64(r1, 0x7, &(0x7f00000000c0)={0x80, 0x8000000000000001}, &(0x7f00000001c0)) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x1) openat$ptp0(0xffffffffffffff9c, 0x0, 0x40001, 0x0) 2m33.385917834s ago: executing program 4 (id=34): sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3c}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x4, 0x10cba, 0x1, {0x6, @sliced={0x7072, [0x5, 0x2, 0x5, 0xe93, 0xa5ee, 0x4cd, 0x6, 0x7, 0x8, 0x3, 0xc, 0x57, 0x42d1, 0x6, 0x5, 0x101, 0x2d, 0xfffd, 0x5, 0x3e7, 0x7, 0xffff, 0x6, 0x0, 0x1, 0x5, 0x7, 0x2, 0x32, 0xffff, 0x9a, 0xff, 0x3, 0xff5a, 0x9, 0x9, 0x4, 0x1c, 0x5, 0x5, 0xf, 0x8, 0xfa3e, 0xebf4, 0x7, 0x0, 0xce, 0xfff], 0xa}}, 0x40004}) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000480)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) ioctl$HCIINQUIRY(r4, 0x400448ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendto(0xffffffffffffffff, &(0x7f0000000000)="6f6e0239b1b2d920cc6edcd1498d4c7d21d2ad1bfbb070d9ca9412650ed8d94124ef", 0x22, 0x2000c841, &(0x7f0000000040)=@in6={0xa, 0x4e21, 0x80000001, @private1, 0x8000}, 0x80) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf108}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4004) 2m32.918100505s ago: executing program 3 (id=36): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r2 = fanotify_init(0xf00, 0x1) fanotify_mark(r2, 0x105, 0x40009975, r1, 0x0) fallocate(r0, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, 0x0, 0x0) 2m32.611226007s ago: executing program 0 (id=37): openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x10, 0xfff3}, {}, {0xa, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x3c}}, 0x40040) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r9 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000600), 0x8002, 0x0) ioctl$TCSETSW(r9, 0x5403, &(0x7f00000027c0)={0xab6, 0x3, 0xffffffc0, 0x80, 0x1, "e625b7fcf9fe176d572f93d8e16b493ad3f282"}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f00000001c0)={0x0, 0xffffffffffffffa4, &(0x7f00000000c0)={&(0x7f0000000300)={0x34, r8, 0x309, 0x70bd2b, 0x0, {0x1d}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x40000) add_key$keyring(&(0x7f0000000380), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x331002, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000100)={0x60, 0xf0, 0x60, 0x600, 0x0, 0xffff, 0x10, 0x0, {0x5, 0x10040}, {0x0, 0x200002, 0xffffffff}, {0x8000}, {0x3, 0x0, 0x1}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffc00, 0x0, 0x3fe, 0x0, 0x0, 0x21, 0x0, 0x3, 0x7}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r10, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x1) 2m29.878632769s ago: executing program 4 (id=38): r0 = socket$inet6(0xa, 0x3, 0x26) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 2m15.406493155s ago: executing program 33 (id=37): openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x10, 0xfff3}, {}, {0xa, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x3c}}, 0x40040) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r9 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000600), 0x8002, 0x0) ioctl$TCSETSW(r9, 0x5403, &(0x7f00000027c0)={0xab6, 0x3, 0xffffffc0, 0x80, 0x1, "e625b7fcf9fe176d572f93d8e16b493ad3f282"}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f00000001c0)={0x0, 0xffffffffffffffa4, &(0x7f00000000c0)={&(0x7f0000000300)={0x34, r8, 0x309, 0x70bd2b, 0x0, {0x1d}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x40000) add_key$keyring(&(0x7f0000000380), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x331002, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000100)={0x60, 0xf0, 0x60, 0x600, 0x0, 0xffff, 0x10, 0x0, {0x5, 0x10040}, {0x0, 0x200002, 0xffffffff}, {0x8000}, {0x3, 0x0, 0x1}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffc00, 0x0, 0x3fe, 0x0, 0x0, 0x21, 0x0, 0x3, 0x7}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r10, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x1) 2m14.784299425s ago: executing program 34 (id=36): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r2 = fanotify_init(0xf00, 0x1) fanotify_mark(r2, 0x105, 0x40009975, r1, 0x0) fallocate(r0, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, 0x0, 0x0) 2m14.160572649s ago: executing program 35 (id=38): r0 = socket$inet6(0xa, 0x3, 0x26) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 11.574089104s ago: executing program 1 (id=89): socket(0xa, 0x5, 0x0) socket(0x2a, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf01b}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r0, 0x0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)}], 0x1}, 0x0, 0x4, 0x1}) r2 = syz_io_uring_setup(0x487, &(0x7f0000000240)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}) io_uring_enter(r2, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 9.706372833s ago: executing program 1 (id=90): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet_udp(0x2d, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40f02, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000040)) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f00000000c0)=0x40) 6.203773165s ago: executing program 1 (id=91): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x201, 0x1, 0x1}, 0x1c) ppoll(&(0x7f0000000540)=[{r0, 0xe620}], 0x1, 0x0, 0x0, 0x0) sendmmsg(r0, 0x0, 0x0, 0x9200000000000000) 4.98983245s ago: executing program 1 (id=92): bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sched_rr_get_interval(r0, &(0x7f00000001c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080), 0x0) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000080)={r6, 0x7f}, &(0x7f0000000100)=0x8) 1.218404395s ago: executing program 1 (id=93): fsopen(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = landlock_create_ruleset(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000009b80)=""/102392, 0x18ff8) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) landlock_restrict_self(r2, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)) 0s ago: executing program 1 (id=94): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x42001) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000140)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c7) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000380)={[{@uuid_on}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@workdir={'workdir', 0x3d, './file0/file0'}}, {@default_permissions}, {@default_permissions}], [], 0x2c}) open(&(0x7f0000000000)='./file0\x00', 0x452202, 0x140) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r2, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.63' (ED25519) to the list of known hosts. [ 188.698445][ T5751] cgroup: Unknown subsys name 'net' [ 188.867442][ T5751] cgroup: Unknown subsys name 'cpuset' [ 188.889881][ T5751] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 195.801956][ T5751] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 200.807062][ T5777] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 200.816788][ T5779] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 200.828442][ T5779] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 200.837321][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 200.847600][ T5780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 200.856809][ T5780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 200.865802][ T5780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 200.876902][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 200.892801][ T5780] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 200.906005][ T5780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 200.911689][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 200.922896][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 200.927732][ T5780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 200.933520][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 200.943264][ T5780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 200.946792][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 200.955346][ T5780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 200.968664][ T5782] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 200.976031][ T5780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 200.984790][ T5782] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 200.993481][ T5071] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 201.005592][ T49] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 201.008670][ T5071] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 201.016581][ T5782] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 201.033556][ T5782] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 202.719190][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 202.884888][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 203.042828][ T5779] Bluetooth: hci1: command tx timeout [ 203.116726][ T5777] Bluetooth: hci2: command tx timeout [ 203.122588][ T5777] Bluetooth: hci3: command tx timeout [ 203.128943][ T5071] Bluetooth: hci4: command tx timeout [ 203.136760][ T5779] Bluetooth: hci0: command tx timeout [ 203.207199][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 203.279133][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 203.424787][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 204.106580][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.109935][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.115089][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.126447][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.149980][ T5773] bridge_slave_0: entered allmulticast mode [ 204.191079][ T5773] bridge_slave_0: entered promiscuous mode [ 204.277422][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.296855][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.305106][ T5773] bridge_slave_1: entered allmulticast mode [ 204.344637][ T5773] bridge_slave_1: entered promiscuous mode [ 204.733889][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.805965][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.814560][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.822887][ T5769] bridge_slave_0: entered allmulticast mode [ 204.831957][ T5769] bridge_slave_0: entered promiscuous mode [ 204.853807][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.921929][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.929820][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.938224][ T5770] bridge_slave_0: entered allmulticast mode [ 204.947463][ T5770] bridge_slave_0: entered promiscuous mode [ 204.962113][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.970125][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.978126][ T5769] bridge_slave_1: entered allmulticast mode [ 204.987080][ T5769] bridge_slave_1: entered promiscuous mode [ 205.117217][ T5779] Bluetooth: hci1: command tx timeout [ 205.117295][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.132485][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.140825][ T5770] bridge_slave_1: entered allmulticast mode [ 205.149380][ T5770] bridge_slave_1: entered promiscuous mode [ 205.196761][ T5777] Bluetooth: hci3: command tx timeout [ 205.202631][ T5777] Bluetooth: hci4: command tx timeout [ 205.208657][ T5774] Bluetooth: hci2: command tx timeout [ 205.215242][ T5779] Bluetooth: hci0: command tx timeout [ 205.225402][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.234277][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.242520][ T5781] bridge_slave_0: entered allmulticast mode [ 205.251709][ T5781] bridge_slave_0: entered promiscuous mode [ 205.267340][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.275187][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.293032][ T5776] bridge_slave_0: entered allmulticast mode [ 205.305140][ T5776] bridge_slave_0: entered promiscuous mode [ 205.362272][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.384053][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.402593][ T5773] team0: Port device team_slave_0 added [ 205.411064][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.419853][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.428320][ T5781] bridge_slave_1: entered allmulticast mode [ 205.438897][ T5781] bridge_slave_1: entered promiscuous mode [ 205.488405][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.496872][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.504808][ T5776] bridge_slave_1: entered allmulticast mode [ 205.514435][ T5776] bridge_slave_1: entered promiscuous mode [ 205.593481][ T5773] team0: Port device team_slave_1 added [ 205.698234][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.774376][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.828850][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.845400][ T5769] team0: Port device team_slave_0 added [ 205.854959][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.863201][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 205.892355][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.917138][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.935043][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.980878][ T5769] team0: Port device team_slave_1 added [ 205.990457][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.999116][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.026673][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.073582][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.226660][ T5770] team0: Port device team_slave_0 added [ 206.272325][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.279960][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.309393][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.333987][ T5781] team0: Port device team_slave_0 added [ 206.352489][ T5781] team0: Port device team_slave_1 added [ 206.398054][ T5770] team0: Port device team_slave_1 added [ 206.411799][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.419950][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.447774][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.499834][ T5776] team0: Port device team_slave_0 added [ 206.636603][ T5776] team0: Port device team_slave_1 added [ 206.720661][ T5773] hsr_slave_0: entered promiscuous mode [ 206.731263][ T5773] hsr_slave_1: entered promiscuous mode [ 206.743816][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.751278][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.780631][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.824937][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.832690][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.860344][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.906459][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.914013][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.942043][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.003231][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.011011][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.039050][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.099357][ T5769] hsr_slave_0: entered promiscuous mode [ 207.109757][ T5769] hsr_slave_1: entered promiscuous mode [ 207.119939][ T5769] debugfs: 'hsr0' already exists in 'hsr' [ 207.126576][ T5769] Cannot create hsr debugfs directory [ 207.155620][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.164386][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.193101][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.204876][ T5779] Bluetooth: hci1: command tx timeout [ 207.211458][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.211540][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.247664][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.276599][ T5779] Bluetooth: hci0: command tx timeout [ 207.277047][ T5071] Bluetooth: hci2: command tx timeout [ 207.282657][ T5779] Bluetooth: hci3: command tx timeout [ 207.289959][ T5777] Bluetooth: hci4: command tx timeout [ 207.771974][ T5781] hsr_slave_0: entered promiscuous mode [ 207.781879][ T5781] hsr_slave_1: entered promiscuous mode [ 207.791011][ T5781] debugfs: 'hsr0' already exists in 'hsr' [ 207.798103][ T5781] Cannot create hsr debugfs directory [ 207.822007][ T5770] hsr_slave_0: entered promiscuous mode [ 207.831400][ T5770] hsr_slave_1: entered promiscuous mode [ 207.841521][ T5770] debugfs: 'hsr0' already exists in 'hsr' [ 207.847765][ T5770] Cannot create hsr debugfs directory [ 207.955654][ T5776] hsr_slave_0: entered promiscuous mode [ 207.965872][ T5776] hsr_slave_1: entered promiscuous mode [ 207.975935][ T5776] debugfs: 'hsr0' already exists in 'hsr' [ 207.982241][ T5776] Cannot create hsr debugfs directory [ 209.255063][ T5773] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 209.276745][ T5777] Bluetooth: hci1: command tx timeout [ 209.281382][ T5773] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 209.324037][ T5773] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 209.356648][ T5777] Bluetooth: hci3: command tx timeout [ 209.361144][ T5773] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 209.370264][ T5777] Bluetooth: hci4: command tx timeout [ 209.370384][ T5777] Bluetooth: hci2: command tx timeout [ 209.370486][ T5777] Bluetooth: hci0: command tx timeout [ 209.504286][ T5769] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 209.552882][ T5769] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 209.609714][ T5769] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 209.638432][ T5769] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 209.901217][ T5781] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 209.933497][ T5781] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 209.954148][ T5781] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 210.000259][ T5781] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 210.407993][ T5770] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 210.472236][ T5770] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 210.515807][ T5770] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 210.539206][ T5770] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 210.814958][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.832655][ T5776] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 210.882926][ T5776] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 210.911636][ T5776] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 210.984024][ T5776] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 211.189050][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.277177][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.388206][ T233] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.396446][ T233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.500343][ T233] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.507813][ T233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.541982][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.664324][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.672178][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.763213][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.770698][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.820763][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.155081][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.362828][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.400126][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.408112][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.520165][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.528500][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.771683][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.824875][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.978242][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.985917][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.104746][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.113299][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.190012][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.330222][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.338257][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.439594][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.447443][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.742011][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.816975][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.843256][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.873613][ T5769] veth0_vlan: entered promiscuous mode [ 214.962980][ T5773] veth0_vlan: entered promiscuous mode [ 215.085095][ T5769] veth1_vlan: entered promiscuous mode [ 215.224938][ T5773] veth1_vlan: entered promiscuous mode [ 215.548642][ T5769] veth0_macvtap: entered promiscuous mode [ 215.658379][ T5769] veth1_macvtap: entered promiscuous mode [ 215.891574][ T5773] veth0_macvtap: entered promiscuous mode [ 215.933126][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.995585][ T5773] veth1_macvtap: entered promiscuous mode [ 216.044969][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.139624][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.240541][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.377286][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.398628][ T233] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.412579][ T233] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.497126][ T233] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.525524][ T233] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.560803][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.725169][ T1040] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.743609][ T1040] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.787483][ T1040] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.804131][ T1040] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.945139][ T5770] veth0_vlan: entered promiscuous mode [ 217.191258][ T5770] veth1_vlan: entered promiscuous mode [ 217.369962][ T5776] veth0_vlan: entered promiscuous mode [ 217.401590][ T5781] veth0_vlan: entered promiscuous mode [ 217.525281][ T5776] veth1_vlan: entered promiscuous mode [ 217.727092][ T5781] veth1_vlan: entered promiscuous mode [ 218.053752][ T5770] veth0_macvtap: entered promiscuous mode [ 218.084085][ T5776] veth0_macvtap: entered promiscuous mode [ 218.203736][ T5776] veth1_macvtap: entered promiscuous mode [ 218.234042][ T5770] veth1_macvtap: entered promiscuous mode [ 218.525681][ T5781] veth0_macvtap: entered promiscuous mode [ 218.603067][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.685432][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.745920][ T5781] veth1_macvtap: entered promiscuous mode [ 218.787386][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.874135][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.994695][ T1040] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.016507][ T1040] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.052530][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.092862][ T1040] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.111848][ T1040] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.271436][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.320977][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.344994][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.435919][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.466906][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.551903][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.586717][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.595991][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.636689][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.712591][ T2964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.738443][ T2964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.097623][ T2964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.105786][ T2964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.663308][ T5769] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 222.701936][ T107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.747911][ T107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.112566][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.168236][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.212996][ T40] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 228.416985][ T40] usb 3-1: Using ep0 maxpacket: 16 [ 228.469798][ T40] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 228.517396][ T40] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.525868][ T40] usb 3-1: Product: syz [ 228.555132][ T40] usb 3-1: Manufacturer: syz [ 228.579523][ T40] usb 3-1: SerialNumber: syz [ 228.909232][ T40] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 228.991332][ T40] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 229.041198][ T40] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 229.091823][ T40] usb 3-1: media controller created [ 229.418953][ T40] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 229.785333][ T40] zl10353_read_register: readreg error (reg=127, ret==-71) [ 230.841980][ T40] dvb_usb_gl861 3-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 231.261773][ T40] usb 3-1: USB disconnect, device number 2 [ 231.587923][ T5956] udevd[5956]: setting mode of /dev/bus/usb/003/002 to 020664 failed: No such file or directory [ 231.632540][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.722963][ T5956] udevd[5956]: setting owner of /dev/bus/usb/003/002 to uid=0, gid=0 failed: No such file or directory [ 231.751095][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.485898][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.494583][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.809191][ T158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.987386][ T158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.204561][ T5990] Zero length message leads to an empty skb [ 237.578644][ T2964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.666722][ T2964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.942424][ T5997] ======================================================= [ 239.942424][ T5997] WARNING: The mand mount option has been deprecated and [ 239.942424][ T5997] and is ignored by this kernel. Remove the mand [ 239.942424][ T5997] option from the mount to silence this warning. [ 239.942424][ T5997] ======================================================= [ 240.529835][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 240.572041][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 241.997311][ T5993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.005476][ T5993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.075311][ T233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.102908][ T233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.496650][ T795] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 247.787195][ T795] usb 1-1: Using ep0 maxpacket: 16 [ 247.889767][ T795] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 248.012843][ T795] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.085575][ T795] usb 1-1: Product: syz [ 248.116652][ T795] usb 1-1: Manufacturer: syz [ 248.121614][ T795] usb 1-1: SerialNumber: syz [ 249.812316][ T6034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.361301][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 250.567348][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 250.667813][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 250.770203][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 250.977031][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 251.077673][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 251.183043][ T795] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 251.407585][ T795] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 251.422324][ T795] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 251.422489][ T795] usb 1-1: media controller created [ 252.172527][ T795] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 252.492132][ T795] zl10353_read_register: readreg error (reg=127, ret==-71) [ 252.778628][ T6041] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 254.764635][ T795] dvb_usb_gl861 1-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 254.932086][ T29] audit: type=1804 audit(1774339241.415:2): pid=6050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.22" name="bus" dev="ramfs" ino=7900 res=1 errno=0 [ 255.322498][ T29] audit: type=1804 audit(1774339241.525:3): pid=6051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.22" name="bus" dev="ramfs" ino=7900 res=1 errno=0 [ 255.736755][ T795] usb 1-1: USB disconnect, device number 2 [ 257.528350][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 257.631701][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 262.564118][ T6062] nfs: Unknown parameter 'ac˙˙˙˙' [ 265.769565][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.779109][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 280.517478][ T6098] evm: overlay not supported [ 281.208367][ T6111] netlink: 36 bytes leftover after parsing attributes in process `syz.0.37'. [ 282.254149][ T5779] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 282.298917][ T5779] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 282.319893][ T5779] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 282.379603][ T5779] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 282.430180][ T5779] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 284.546695][ T5777] Bluetooth: hci5: command tx timeout [ 286.609184][ T6120] nfs: Unknown parameter 'ac˙˙˙˙' [ 288.076695][ T5777] Bluetooth: hci5: command tx timeout [ 291.036370][ T5777] Bluetooth: hci5: command tx timeout [ 294.097747][ T5777] Bluetooth: hci5: command tx timeout [ 297.908218][ T6112] chnl_net:caif_netlink_parms(): no params data found [ 298.006895][ T5779] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 298.018110][ T5779] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 298.027894][ T5779] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 298.045842][ T5779] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 298.058392][ T5779] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 298.351444][ T5777] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 298.366924][ T5777] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 298.376817][ T5777] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 298.406822][ T5777] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 298.422149][ T5777] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 298.741821][ T5777] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 298.778019][ T5777] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 298.800255][ T5777] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 298.815673][ T5777] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 298.828706][ T5777] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 298.983722][ T6015] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.554809][ T6015] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.456582][ T5777] Bluetooth: hci6: command tx timeout [ 300.476677][ T5777] Bluetooth: hci2: command tx timeout [ 300.632770][ T6015] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.956640][ T5777] Bluetooth: hci7: command tx timeout [ 301.607593][ T6015] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.676889][ T5777] Bluetooth: hci6: command tx timeout [ 302.687796][ T5777] Bluetooth: hci2: command tx timeout [ 303.036847][ T5777] Bluetooth: hci7: command tx timeout [ 304.716609][ T5777] Bluetooth: hci2: command tx timeout [ 304.723354][ T5777] Bluetooth: hci6: command tx timeout [ 305.116867][ T5777] Bluetooth: hci7: command tx timeout [ 306.796501][ T5777] Bluetooth: hci2: command tx timeout [ 307.116743][ T5777] Bluetooth: hci6: command tx timeout [ 307.196682][ T5777] Bluetooth: hci7: command tx timeout [ 309.341682][ T6160] nfs: Unknown parameter 'ac˙˙˙˙' [ 316.867136][ T6112] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.874623][ T6112] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.907405][ T6112] bridge_slave_0: entered allmulticast mode [ 316.953300][ T6112] bridge_slave_0: entered promiscuous mode [ 317.079949][ T6112] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.100838][ T6112] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.114967][ T6112] bridge_slave_1: entered allmulticast mode [ 317.158865][ T6112] bridge_slave_1: entered promiscuous mode [ 317.959172][ T6112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.239270][ T6112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.505216][ T6015] bridge_slave_1: left allmulticast mode [ 318.511799][ T6015] bridge_slave_1: left promiscuous mode [ 318.519886][ T6015] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.547903][ T6015] bridge_slave_0: left allmulticast mode [ 318.563881][ T6015] bridge_slave_0: left promiscuous mode [ 318.587517][ T6015] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.716832][ T5071] Bluetooth: hci1: command 0x0406 tx timeout [ 326.374297][ T6015] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.431165][ T6015] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.459595][ T6015] bond0 (unregistering): Released all slaves [ 326.978963][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.986287][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.601663][ T6112] team0: Port device team_slave_0 added [ 327.632620][ T6112] team0: Port device team_slave_1 added [ 328.092696][ T6133] chnl_net:caif_netlink_parms(): no params data found [ 329.789012][ T6112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.829917][ T6112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 329.899751][ T6112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.105133][ T6136] chnl_net:caif_netlink_parms(): no params data found [ 330.302858][ T6112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.346406][ T6112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 330.466676][ T6112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.526778][ T6139] chnl_net:caif_netlink_parms(): no params data found [ 330.711895][ T6015] hsr_slave_0: left promiscuous mode [ 330.747830][ T6015] hsr_slave_1: left promiscuous mode [ 330.762562][ T6015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.771124][ T6015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.789559][ T6015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.798076][ T6015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.859822][ T6015] veth1_macvtap: left promiscuous mode [ 330.866068][ T6015] veth0_macvtap: left promiscuous mode [ 330.878451][ T6015] veth1_vlan: left promiscuous mode [ 330.884426][ T6015] veth0_vlan: left promiscuous mode [ 332.774881][ T6015] team0 (unregistering): Port device team_slave_1 removed [ 332.951744][ T6015] team0 (unregistering): Port device team_slave_0 removed [ 333.360173][ T6221] overlayfs: missing 'lowerdir' [ 334.809002][ T6233] syz.1.59 uses obsolete (PF_INET,SOCK_PACKET) [ 334.930963][ T6112] hsr_slave_0: entered promiscuous mode [ 334.957049][ T6112] hsr_slave_1: entered promiscuous mode [ 335.994059][ T6015] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.062391][ T6133] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.095590][ T6133] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.139768][ T6133] bridge_slave_0: entered allmulticast mode [ 336.176272][ T6133] bridge_slave_0: entered promiscuous mode [ 336.330073][ T6015] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.509261][ T6133] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.536793][ T6133] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.544553][ T6133] bridge_slave_1: entered allmulticast mode [ 336.606693][ T6133] bridge_slave_1: entered promiscuous mode [ 336.850154][ T6015] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.312107][ T6015] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.371957][ T6139] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.391913][ T6139] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.464070][ T6139] bridge_slave_0: entered allmulticast mode [ 337.493792][ T6139] bridge_slave_0: entered promiscuous mode [ 337.667512][ T6133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.755653][ T6133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.881692][ T6139] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.927093][ T6139] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.935285][ T6139] bridge_slave_1: entered allmulticast mode [ 338.034813][ T6139] bridge_slave_1: entered promiscuous mode [ 338.094239][ T6136] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.146835][ T6136] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.154749][ T6136] bridge_slave_0: entered allmulticast mode [ 338.240555][ T6136] bridge_slave_0: entered promiscuous mode [ 338.289876][ T6136] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.331970][ T6136] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.367026][ T6136] bridge_slave_1: entered allmulticast mode [ 338.408181][ T6136] bridge_slave_1: entered promiscuous mode [ 339.058078][ T5071] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 339.102044][ T5071] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 339.122300][ T5071] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 339.160409][ T5071] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 339.172390][ T5071] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 339.678151][ T6133] team0: Port device team_slave_0 added [ 339.712214][ T6139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.817145][ T6139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.881166][ T6136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.978566][ T6136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.034364][ T6133] team0: Port device team_slave_1 added [ 341.051635][ T6136] team0: Port device team_slave_0 added [ 341.121932][ T6136] team0: Port device team_slave_1 added [ 341.196870][ T5071] Bluetooth: hci1: command tx timeout [ 341.217383][ T6133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.237368][ T6133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.266659][ T6133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.313108][ T6133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.342465][ T6133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.380289][ T6133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.442099][ T6139] team0: Port device team_slave_0 added [ 341.614190][ T6015] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.722892][ T6139] team0: Port device team_slave_1 added [ 341.977131][ T6015] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.074862][ T6263] overlayfs: missing 'lowerdir' [ 342.131318][ T6136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.138914][ T6136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.243898][ T6136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.542947][ T6139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.551095][ T6139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.584094][ T6139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.640277][ T6136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.654070][ T6136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.683384][ T6136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.841855][ T6015] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.948412][ T6139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.962109][ T6139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 343.001570][ T6139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.161953][ T6133] hsr_slave_0: entered promiscuous mode [ 343.185866][ T6133] hsr_slave_1: entered promiscuous mode [ 343.205448][ T6133] debugfs: 'hsr0' already exists in 'hsr' [ 343.211732][ T6133] Cannot create hsr debugfs directory [ 343.270458][ T6015] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.281411][ T5071] Bluetooth: hci1: command tx timeout [ 343.928692][ T6136] hsr_slave_0: entered promiscuous mode [ 343.955739][ T6136] hsr_slave_1: entered promiscuous mode [ 343.987111][ T6136] debugfs: 'hsr0' already exists in 'hsr' [ 343.993173][ T6136] Cannot create hsr debugfs directory [ 344.688318][ T6139] hsr_slave_0: entered promiscuous mode [ 344.741108][ T6139] hsr_slave_1: entered promiscuous mode [ 344.771924][ T6139] debugfs: 'hsr0' already exists in 'hsr' [ 344.778537][ T6139] Cannot create hsr debugfs directory [ 345.359389][ T5071] Bluetooth: hci1: command tx timeout [ 346.970082][ T6251] chnl_net:caif_netlink_parms(): no params data found [ 347.210769][ T6015] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.458629][ T5071] Bluetooth: hci1: command tx timeout [ 347.548529][ T6015] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.026622][ T6015] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.259506][ T6015] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.802929][ T6133] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 348.879653][ T6133] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 349.043299][ T6133] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 349.322388][ T6133] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 349.470703][ T6251] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.511207][ T6251] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.549121][ T6251] bridge_slave_0: entered allmulticast mode [ 349.569393][ T6251] bridge_slave_0: entered promiscuous mode [ 349.669882][ T6015] bridge_slave_1: left allmulticast mode [ 349.675701][ T6015] bridge_slave_1: left promiscuous mode [ 349.687649][ T6015] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.736008][ T6015] bridge_slave_0: left allmulticast mode [ 349.742503][ T6015] bridge_slave_0: left promiscuous mode [ 349.755162][ T6015] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.793366][ T6015] bridge_slave_1: left allmulticast mode [ 349.799639][ T6015] bridge_slave_1: left promiscuous mode [ 349.814586][ T6015] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.844692][ T6015] bridge_slave_0: left allmulticast mode [ 349.851295][ T6015] bridge_slave_0: left promiscuous mode [ 349.862177][ T6015] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.906031][ T6015] bridge_slave_1: left allmulticast mode [ 349.913291][ T6015] bridge_slave_1: left promiscuous mode [ 349.935078][ T6015] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.957591][ T6015] bridge_slave_0: left allmulticast mode [ 349.963569][ T6015] bridge_slave_0: left promiscuous mode [ 349.973617][ T6015] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.297385][ T6015] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 351.333477][ T6015] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 351.365188][ T6015] bond0 (unregistering): Released all slaves [ 351.809472][ T6015] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 351.853079][ T6015] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 351.878694][ T6015] bond0 (unregistering): Released all slaves [ 352.361121][ T6015] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.408603][ T6015] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.429050][ T6015] bond0 (unregistering): Released all slaves [ 352.497099][ T6251] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.504965][ T6251] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.537771][ T6251] bridge_slave_1: entered allmulticast mode [ 352.548972][ T6251] bridge_slave_1: entered promiscuous mode [ 353.892055][ T6251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.992672][ T6251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.063829][ T6136] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 354.360954][ T6136] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 354.393003][ T6136] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 354.482154][ T6251] team0: Port device team_slave_0 added [ 354.506580][ T5834] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 354.544890][ T6136] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 354.592699][ T6251] team0: Port device team_slave_1 added [ 354.672149][ T5834] usb 2-1: Using ep0 maxpacket: 32 [ 354.692073][ T5834] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 354.708518][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.750430][ T5834] usb 2-1: config 0 descriptor?? [ 354.812651][ T5834] gspca_main: sunplus-2.14.0 probing 041e:400b [ 355.019287][ T6251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.036987][ T6251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.064966][ T6251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.323917][ T6251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.338684][ T5834] gspca_sunplus: reg_w_riv err -110 [ 355.362405][ T5834] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 355.382855][ T6251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.496613][ T6251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.815987][ T6139] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 357.833184][ T6139] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 358.223986][ T5777] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 358.243871][ T5777] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 358.260363][ T5777] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 358.276560][ T5777] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 358.291130][ T5777] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 358.838328][ T24] usb 2-1: USB disconnect, device number 2 [ 359.623033][ T6309] netlink: 'syz.1.63': attribute type 39 has an invalid length. [ 359.739277][ T5777] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 359.781007][ T6251] hsr_slave_0: entered promiscuous mode [ 359.792344][ T5777] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 359.815780][ T6251] hsr_slave_1: entered promiscuous mode [ 359.822915][ T5777] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 359.837431][ T6251] debugfs: 'hsr0' already exists in 'hsr' [ 359.846042][ T6251] Cannot create hsr debugfs directory [ 359.855971][ T5777] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 359.875827][ T5777] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 360.178207][ T5777] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 360.189854][ T5777] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 360.207381][ T5777] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 360.230292][ T5777] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 360.257819][ T5777] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 360.478241][ T5071] Bluetooth: hci3: command tx timeout [ 361.965754][ T5071] Bluetooth: hci4: command tx timeout [ 362.396564][ T5071] Bluetooth: hci5: command tx timeout [ 362.556395][ T5071] Bluetooth: hci3: command tx timeout [ 362.755037][ T6015] hsr_slave_0: left promiscuous mode [ 362.821885][ T6015] hsr_slave_1: left promiscuous mode [ 362.848035][ T6015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.882601][ T6015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.919008][ T6015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.966686][ T6015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.074705][ T6015] hsr_slave_0: left promiscuous mode [ 363.117522][ T6015] hsr_slave_1: left promiscuous mode [ 363.152012][ T6015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.186354][ T6015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.242672][ T6015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.285867][ T6015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.394295][ T6015] hsr_slave_0: left promiscuous mode [ 363.434648][ T6015] hsr_slave_1: left promiscuous mode [ 363.468295][ T6015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.502283][ T6015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.552633][ T6015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.576899][ T6015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.820707][ T6015] veth1_macvtap: left promiscuous mode [ 363.859340][ T6015] veth0_macvtap: left promiscuous mode [ 363.881126][ T6015] veth1_vlan: left promiscuous mode [ 363.923330][ T6015] veth0_vlan: left promiscuous mode [ 363.958126][ T6015] veth1_macvtap: left promiscuous mode [ 363.997619][ T5071] Bluetooth: hci4: command tx timeout [ 364.015595][ T6015] veth0_macvtap: left promiscuous mode [ 364.065912][ T6015] veth1_vlan: left promiscuous mode [ 364.102794][ T6015] veth0_vlan: left promiscuous mode [ 364.140809][ T6015] veth1_macvtap: left promiscuous mode [ 364.171466][ T6015] veth0_macvtap: left promiscuous mode [ 364.199013][ T6015] veth1_vlan: left promiscuous mode [ 364.204678][ T6015] veth0_vlan: left promiscuous mode [ 364.476925][ T5071] Bluetooth: hci5: command tx timeout [ 364.636347][ T5071] Bluetooth: hci3: command tx timeout [ 364.891319][ T6329] overlayfs: missing 'lowerdir' [ 366.076608][ T5071] Bluetooth: hci4: command tx timeout [ 366.556717][ T5071] Bluetooth: hci5: command tx timeout [ 366.714751][ T6349] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 366.727922][ T5071] Bluetooth: hci3: command tx timeout [ 366.808827][ T6349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.66'. [ 366.866681][ T6015] team0 (unregistering): Port device team_slave_1 removed [ 366.968443][ T6015] team0 (unregistering): Port device team_slave_0 removed [ 368.156689][ T5071] Bluetooth: hci4: command tx timeout [ 368.186833][ T6015] team0 (unregistering): Port device team_slave_1 removed [ 368.229906][ T6015] team0 (unregistering): Port device team_slave_0 removed [ 368.636625][ T5071] Bluetooth: hci5: command tx timeout [ 369.259573][ T6015] team0 (unregistering): Port device team_slave_1 removed [ 369.326434][ T6015] team0 (unregistering): Port device team_slave_0 removed [ 370.408252][ T6349] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 370.570179][ T6349] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.537443][ T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 373.563774][ T6305] chnl_net:caif_netlink_parms(): no params data found [ 373.672439][ T6251] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 373.716580][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 373.729980][ T24] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 373.740578][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.799776][ T24] usb 2-1: config 0 descriptor?? [ 373.846675][ T24] gspca_main: sunplus-2.14.0 probing 041e:400b [ 373.874441][ T6251] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 373.965638][ T6310] chnl_net:caif_netlink_parms(): no params data found [ 374.382457][ T24] gspca_sunplus: reg_w_riv err -110 [ 374.397379][ T24] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 374.997219][ T6251] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 375.188484][ T6251] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 375.783150][ T6310] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.801766][ T6310] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.841015][ T6310] bridge_slave_0: entered allmulticast mode [ 375.889845][ T6310] bridge_slave_0: entered promiscuous mode [ 375.914872][ T6313] chnl_net:caif_netlink_parms(): no params data found [ 375.960648][ T6310] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.980003][ T6310] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.998531][ T6310] bridge_slave_1: entered allmulticast mode [ 376.041001][ T6310] bridge_slave_1: entered promiscuous mode [ 376.779119][ T10] usb 2-1: USB disconnect, device number 3 [ 377.493957][ T6310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.518868][ T6305] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.541253][ T6305] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.575448][ T6305] bridge_slave_0: entered allmulticast mode [ 377.617256][ T6305] bridge_slave_0: entered promiscuous mode [ 377.861325][ T6310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.230921][ T6305] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.268634][ T6305] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.325480][ T6305] bridge_slave_1: entered allmulticast mode [ 378.389191][ T6305] bridge_slave_1: entered promiscuous mode [ 378.761158][ T6310] team0: Port device team_slave_0 added [ 379.029856][ T6305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.220803][ T6310] team0: Port device team_slave_1 added [ 379.426524][ T6305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.868158][ T6305] team0: Port device team_slave_0 added [ 380.007338][ T6310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.015661][ T6310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.058513][ T6310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.136893][ T6305] team0: Port device team_slave_1 added [ 380.143510][ T6313] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.155366][ T6313] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.178897][ T6313] bridge_slave_0: entered allmulticast mode [ 380.197389][ T6313] bridge_slave_0: entered promiscuous mode [ 380.311068][ T6310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.341187][ T6310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.370279][ T6310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.555965][ T6313] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.564460][ T6313] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.572975][ T6313] bridge_slave_1: entered allmulticast mode [ 380.584006][ T6313] bridge_slave_1: entered promiscuous mode [ 380.734006][ T6305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.742894][ T6305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.788976][ T6305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.069581][ T6310] hsr_slave_0: entered promiscuous mode [ 381.082589][ T6310] hsr_slave_1: entered promiscuous mode [ 381.093241][ T6310] debugfs: 'hsr0' already exists in 'hsr' [ 381.101914][ T6310] Cannot create hsr debugfs directory [ 381.144566][ T6305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.158676][ T6305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.193381][ T6305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.905441][ T6313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.936866][ T6313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.419899][ T6313] team0: Port device team_slave_0 added [ 382.650192][ T6313] team0: Port device team_slave_1 added [ 382.987892][ T6305] hsr_slave_0: entered promiscuous mode [ 383.001104][ T6305] hsr_slave_1: entered promiscuous mode [ 383.011839][ T6305] debugfs: 'hsr0' already exists in 'hsr' [ 383.025056][ T6305] Cannot create hsr debugfs directory [ 383.101429][ T6313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.109394][ T6313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.148850][ T6313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.180249][ T6313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.188076][ T6313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.230484][ T6313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.720782][ T6251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.222069][ T6413] overlayfs: missing 'lowerdir' [ 384.347892][ T6313] hsr_slave_0: entered promiscuous mode [ 384.388157][ T6313] hsr_slave_1: entered promiscuous mode [ 384.428089][ T6313] debugfs: 'hsr0' already exists in 'hsr' [ 384.437555][ T6313] Cannot create hsr debugfs directory [ 385.559631][ T6015] bridge_slave_1: left allmulticast mode [ 385.565807][ T6015] bridge_slave_1: left promiscuous mode [ 385.573812][ T6015] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.585919][ T6015] bridge_slave_0: left allmulticast mode [ 385.592721][ T6015] bridge_slave_0: left promiscuous mode [ 385.623454][ T6015] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.739187][ T6015] bridge_slave_1: left allmulticast mode [ 385.747814][ T6015] bridge_slave_1: left promiscuous mode [ 385.760228][ T6015] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.134866][ T6015] bridge_slave_0: left allmulticast mode [ 386.142104][ T6015] bridge_slave_0: left promiscuous mode [ 386.152450][ T6015] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.179267][ T6015] bridge_slave_1: left allmulticast mode [ 386.185611][ T6015] bridge_slave_1: left promiscuous mode [ 386.195294][ T6015] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.213872][ T6015] bridge_slave_0: left allmulticast mode [ 386.244614][ T6015] bridge_slave_0: left promiscuous mode [ 386.263416][ T6015] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.282178][ T6015] bridge_slave_1: left allmulticast mode [ 386.288799][ T6015] bridge_slave_1: left promiscuous mode [ 386.295988][ T6015] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.311614][ T6015] bridge_slave_0: left allmulticast mode [ 386.321928][ T6015] bridge_slave_0: left promiscuous mode [ 386.360656][ T6015] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.797105][ T6015] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 386.831041][ T6015] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 386.856008][ T6015] bond0 (unregistering): Released all slaves [ 387.207094][ T6015] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.238178][ T6015] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.273507][ T6015] bond0 (unregistering): Released all slaves [ 387.628296][ T6015] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.671047][ T6015] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.702166][ T6015] bond0 (unregistering): Released all slaves [ 388.125861][ T6015] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.162184][ T6015] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.199577][ T6015] bond0 (unregistering): Released all slaves [ 388.429277][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.435990][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.509821][ T6251] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.002007][ T6017] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.009968][ T6017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.574796][ T6015] hsr_slave_0: left promiscuous mode [ 389.592141][ T6015] hsr_slave_1: left promiscuous mode [ 389.618111][ T6015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.647946][ T6015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.703113][ T6015] hsr_slave_0: left promiscuous mode [ 389.713967][ T6015] hsr_slave_1: left promiscuous mode [ 389.725095][ T6015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.738639][ T6015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.782645][ T6015] hsr_slave_0: left promiscuous mode [ 389.790892][ T6015] hsr_slave_1: left promiscuous mode [ 389.799220][ T6015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.813925][ T6015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.840526][ T6015] hsr_slave_0: left promiscuous mode [ 389.848919][ T6015] hsr_slave_1: left promiscuous mode [ 389.859645][ T6015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.868999][ T6015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.036836][ T6410] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 390.174773][ T6015] team0 (unregistering): Port device team_slave_1 removed [ 390.204406][ T6015] team0 (unregistering): Port device team_slave_0 removed [ 390.226481][ T6410] usb 2-1: Using ep0 maxpacket: 32 [ 390.251661][ T6410] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 390.264009][ T6410] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.295461][ T6410] usb 2-1: config 0 descriptor?? [ 390.353840][ T6410] gspca_main: sunplus-2.14.0 probing 041e:400b [ 391.110339][ T6015] team0 (unregistering): Port device team_slave_1 removed [ 391.192683][ T6015] team0 (unregistering): Port device team_slave_0 removed [ 391.440664][ T6410] gspca_sunplus: reg_w_riv err -110 [ 391.446794][ T6410] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 392.004722][ T6410] usb 2-1: USB disconnect, device number 4 [ 392.129265][ T6015] team0 (unregistering): Port device team_slave_1 removed [ 392.173468][ T6015] team0 (unregistering): Port device team_slave_0 removed [ 392.594143][ T6015] team0 (unregistering): Port device team_slave_1 removed [ 392.739276][ T6015] team0 (unregistering): Port device team_slave_0 removed [ 393.936354][ T6016] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.944342][ T6016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.984387][ T6310] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 394.193046][ T6310] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 394.284580][ T6310] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 395.193241][ T6310] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 397.212839][ T6305] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 397.329154][ T6305] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 397.421705][ T6305] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 397.459923][ T6305] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 397.613139][ T6445] overlayfs: missing 'lowerdir' [ 399.084271][ T6313] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 399.212481][ T6313] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 399.310643][ T6313] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 399.449221][ T6313] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 399.639317][ T6310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.816354][ T5777] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 399.840156][ T5777] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 399.856701][ T5777] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 399.884754][ T5777] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 399.902286][ T5777] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 400.055332][ T6310] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.293615][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.301580][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.725656][ T6015] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.733477][ T6015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.654418][ T6305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.006883][ T5071] Bluetooth: hci2: command tx timeout [ 402.439215][ T5828] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 402.535864][ T6305] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.596854][ T5828] usb 2-1: Using ep0 maxpacket: 32 [ 402.612381][ T5828] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 402.629622][ T5828] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.667136][ T5828] usb 2-1: config 0 descriptor?? [ 402.722438][ T5828] gspca_main: sunplus-2.14.0 probing 041e:400b [ 402.779510][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.787305][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.022713][ T1040] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.030451][ T1040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.259932][ T5828] gspca_sunplus: reg_w_riv err -110 [ 403.277350][ T5828] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 403.907834][ T10] usb 2-1: USB disconnect, device number 5 [ 404.077126][ T5071] Bluetooth: hci2: command tx timeout [ 404.299619][ T6465] chnl_net:caif_netlink_parms(): no params data found [ 404.984343][ T6313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.045070][ T6016] bridge_slave_1: left allmulticast mode [ 405.066353][ T6016] bridge_slave_1: left promiscuous mode [ 405.082637][ T6016] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.123190][ T6016] bridge_slave_0: left allmulticast mode [ 405.136344][ T6016] bridge_slave_0: left promiscuous mode [ 405.143139][ T6016] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.563529][ T6016] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 405.581892][ T6016] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 405.608384][ T6016] bond0 (unregistering): Released all slaves [ 405.887281][ T6016] hsr_slave_0: left promiscuous mode [ 405.895906][ T6016] hsr_slave_1: left promiscuous mode [ 405.924132][ T6016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 405.943908][ T6016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.162056][ T5071] Bluetooth: hci2: command tx timeout [ 407.427791][ T6016] team0 (unregistering): Port device team_slave_1 removed [ 407.471199][ T6016] team0 (unregistering): Port device team_slave_0 removed [ 408.190147][ T6313] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.299703][ T5071] Bluetooth: hci2: command tx timeout [ 408.629083][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.637053][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.701576][ T6465] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.714897][ T6465] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.733409][ T6465] bridge_slave_0: entered allmulticast mode [ 408.746842][ T6465] bridge_slave_0: entered promiscuous mode [ 408.846622][ T6465] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.854317][ T6465] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.874005][ T6465] bridge_slave_1: entered allmulticast mode [ 408.893574][ T6465] bridge_slave_1: entered promiscuous mode [ 408.997960][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.005719][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.626393][ T6465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.720799][ T6310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.838361][ T6465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.946005][ T6506] overlayfs: missing 'lowerdir' [ 410.542737][ T6465] team0: Port device team_slave_0 added [ 410.673904][ T6465] team0: Port device team_slave_1 added [ 411.053534][ T6465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.080286][ T6465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.160156][ T6465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.250130][ T6465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.270682][ T6465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.302183][ T6465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.986828][ T6518] No control pipe specified [ 412.155696][ T6305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.635950][ T6465] hsr_slave_0: entered promiscuous mode [ 412.800488][ T6465] hsr_slave_1: entered promiscuous mode [ 417.915384][ T5777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 417.931262][ T5777] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 417.942248][ T5777] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 417.978431][ T5777] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 417.994503][ T5777] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 418.157575][ T6310] veth0_vlan: entered promiscuous mode [ 420.107099][ T5777] Bluetooth: hci1: command tx timeout [ 420.988660][ T5071] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 421.001942][ T5071] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 421.019416][ T5071] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 421.075468][ T5071] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 421.105168][ T5071] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 421.446499][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 421.482422][ T6465] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 421.572533][ T6465] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 421.631508][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 421.661596][ T24] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 421.720098][ T5071] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 421.740465][ T5071] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 421.754075][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.764704][ T5071] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 421.797598][ T5071] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 421.819025][ T5071] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 421.849779][ T24] usb 2-1: config 0 descriptor?? [ 421.891754][ T24] gspca_main: sunplus-2.14.0 probing 041e:400b [ 422.177199][ T5777] Bluetooth: hci1: command tx timeout [ 422.427080][ T24] gspca_sunplus: reg_w_riv err -110 [ 422.467052][ T24] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 423.138045][ T6410] usb 2-1: USB disconnect, device number 6 [ 423.178219][ T6465] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 423.196639][ T5777] Bluetooth: hci6: command tx timeout [ 423.556334][ T6465] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 423.983852][ T5777] Bluetooth: hci3: command tx timeout [ 424.239287][ T5777] Bluetooth: hci1: command tx timeout [ 424.795475][ T6541] chnl_net:caif_netlink_parms(): no params data found [ 425.276522][ T5777] Bluetooth: hci6: command tx timeout [ 425.996890][ T5777] Bluetooth: hci3: command tx timeout [ 426.207471][ T6559] chnl_net:caif_netlink_parms(): no params data found [ 426.316688][ T5777] Bluetooth: hci1: command tx timeout [ 427.362650][ T5777] Bluetooth: hci6: command tx timeout [ 428.159292][ T5777] Bluetooth: hci3: command tx timeout [ 428.709653][ T56] bridge_slave_1: left allmulticast mode [ 428.715551][ T56] bridge_slave_1: left promiscuous mode [ 428.759492][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.819294][ T56] bridge_slave_0: left allmulticast mode [ 428.825294][ T56] bridge_slave_0: left promiscuous mode [ 428.842721][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.436559][ T5777] Bluetooth: hci6: command tx timeout [ 429.459971][ T6606] overlayfs: missing 'lowerdir' [ 429.626917][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 429.661893][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 429.679506][ T56] bond0 (unregistering): Released all slaves [ 429.835322][ T6541] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.867123][ T6541] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.875217][ T6541] bridge_slave_0: entered allmulticast mode [ 429.890404][ T6541] bridge_slave_0: entered promiscuous mode [ 429.993015][ T6541] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.012471][ T6541] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.029140][ T6541] bridge_slave_1: entered allmulticast mode [ 430.045720][ T6541] bridge_slave_1: entered promiscuous mode [ 430.238908][ T5777] Bluetooth: hci3: command tx timeout [ 430.314399][ T56] hsr_slave_0: left promiscuous mode [ 430.342823][ T56] hsr_slave_1: left promiscuous mode [ 430.358646][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.386773][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 431.104386][ T56] team0 (unregistering): Port device team_slave_1 removed [ 431.157789][ T56] team0 (unregistering): Port device team_slave_0 removed [ 431.301797][ T6411] ===================================================== [ 431.316482][ T6411] BUG: KMSAN: uninit-value in vidtv_ts_null_write_into+0x424/0x5c0 [ 431.324781][ T6411] vidtv_ts_null_write_into+0x424/0x5c0 [ 431.332015][ T6411] vidtv_mux_tick+0x3480/0x3e30 [ 431.338233][ T6411] process_scheduled_works+0xb82/0x1e80 [ 431.344009][ T6411] worker_thread+0xee4/0x1590 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 431.349980][ T6411] kthread+0x53f/0x600 [ 431.354278][ T6411] ret_from_fork+0x20f/0x910 [ 431.360518][ T6411] ret_from_fork_asm+0x1a/0x30 [ 431.365541][ T6411] [ 431.370212][ T6411] Uninit was stored to memory at: [ 431.375658][ T6411] vidtv_ts_null_write_into+0x41d/0x5c0 [ 431.383472][ T6411] vidtv_mux_tick+0x3480/0x3e30 [ 431.390030][ T6411] process_scheduled_works+0xb82/0x1e80 [ 431.395875][ T6411] worker_thread+0xee4/0x1590 [ 431.402520][ T6411] kthread+0x53f/0x600 [ 431.406912][ T6411] ret_from_fork+0x20f/0x910 [ 431.411700][ T6411] ret_from_fork_asm+0x1a/0x30 [ 431.417334][ T6411] [ 431.419879][ T6411] Local variable args.i132 created at: [ 431.425525][ T6411] vidtv_mux_tick+0x3119/0x3e30 [ 431.430740][ T6411] process_scheduled_works+0xb82/0x1e80 [ 431.438763][ T6411] [ 431.441202][ T6411] CPU: 0 UID: 0 PID: 6411 Comm: kworker/0:7 Not tainted syzkaller #0 PREEMPT(full) [ 431.451373][ T6411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 431.461701][ T6411] Workqueue: events vidtv_mux_tick [ 431.467146][ T6411] ===================================================== [ 431.474182][ T6411] Disabling lock debugging due to kernel taint [ 431.481210][ T6411] Kernel panic - not syncing: kmsan.panic set ... [ 431.487942][ T6411] CPU: 0 UID: 0 PID: 6411 Comm: kworker/0:7 Tainted: G B syzkaller #0 PREEMPT(full) [ 431.499120][ T6411] Tainted: [B]=BAD_PAGE [ 431.503391][ T6411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 431.513623][ T6411] Workqueue: events vidtv_mux_tick [ 431.518973][ T6411] Call Trace: [ 431.522363][ T6411] [ 431.525417][ T6411] __dump_stack+0x26/0x30 [ 431.529965][ T6411] dump_stack_lvl+0x50/0x1c0 [ 431.534815][ T6411] ? dump_stack+0x12/0x25 [ 431.539362][ T6411] dump_stack+0x1e/0x25 [ 431.543739][ T6411] vpanic+0x7b4/0x1430 [ 431.548066][ T6411] panic+0x15d/0x160 [ 431.552249][ T6411] kmsan_report+0x31a/0x320 [ 431.557044][ T6411] ? __msan_warning+0x1b/0x30 [ 431.562055][ T6411] ? vidtv_ts_null_write_into+0x424/0x5c0 [ 431.568038][ T6411] ? vidtv_mux_tick+0x3480/0x3e30 [ 431.573368][ T6411] ? process_scheduled_works+0xb82/0x1e80 [ 431.579304][ T6411] ? worker_thread+0xee4/0x1590 [ 431.584370][ T6411] ? kthread+0x53f/0x600 [ 431.588837][ T6411] ? ret_from_fork+0x20f/0x910 [ 431.593811][ T6411] ? ret_from_fork_asm+0x1a/0x30 [ 431.598991][ T6411] ? ret_from_fork_asm+0x1a/0x30 [ 431.604198][ T6411] ? kmsan_get_metadata+0xf1/0x160 [ 431.609578][ T6411] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 431.615676][ T6411] ? vidtv_ts_inc_cc+0xb1/0xf0 [ 431.620691][ T6411] ? filter_irq_stacks+0x49/0x190 [ 431.626154][ T6411] ? stack_depot_save_flags+0x35/0x790 [ 431.631983][ T6411] ? kmsan_get_metadata+0xf1/0x160 [ 431.637539][ T6411] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 431.644158][ T6411] ? kmsan_get_metadata+0xf1/0x160 [ 431.649555][ T6411] __msan_warning+0x1b/0x30 [ 431.654319][ T6411] vidtv_ts_null_write_into+0x424/0x5c0 [ 431.660402][ T6411] vidtv_mux_tick+0x3480/0x3e30 [ 431.665723][ T6411] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 431.671221][ T6411] process_scheduled_works+0xb82/0x1e80 [ 431.677078][ T6411] worker_thread+0xee4/0x1590 [ 431.682143][ T6411] kthread+0x53f/0x600 [ 431.686465][ T6411] ? __pfx_worker_thread+0x10/0x10 [ 431.691889][ T6411] ? __pfx_kthread+0x10/0x10 [ 431.696817][ T6411] ret_from_fork+0x20f/0x910 [ 431.701707][ T6411] ? __switch_to+0x51c/0x750 [ 431.706544][ T6411] ? __pfx_kthread+0x10/0x10 [ 431.711378][ T6411] ret_from_fork_asm+0x1a/0x30 [ 431.716409][ T6411] [ 431.720017][ T6411] Kernel Offset: disabled [ 431.724412][ T6411] Rebooting in 86400 seconds..