last executing test programs: 55.171588631s ago: executing program 2 (id=132): munlock(&(0x7f0000001000/0x3000)=nil, 0x3000) 53.874005395s ago: executing program 1 (id=134): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00'}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x6) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x81, 0x800001000891}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) eventfd(0x6) r5 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r5, 0xc4c85513, &(0x7f0000000040)={0x1}) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac00000000010505000000faff0000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff02000000000000009d0000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1e00010800074000000001180006"], 0xac}}, 0x0) 52.614396077s ago: executing program 2 (id=141): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x81, 0x800001000891}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) r3 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r3, 0x80dc5521, 0x0) 51.681207451s ago: executing program 2 (id=143): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) fallocate(r2, 0x0, 0x2000006, 0x10003) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, 0x0, 0x1000) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x2, 0x5, 0x93, 0x1, 0x0, 0x5f, 0x3, 0x20, 0xa6, 0x2, 0x5, 0x9, 0x3}, {0xfffffff9, 0xc, 0x0, 0x4, 0x0, 0xf6, 0xce, 0x8, 0x4, 0x1, 0x4, 0xa6, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x84, 0x1, 0xb, 0xfe, 0x7, 0x8, 0xfe, 0x4, 0x1000000000000004}], 0xcc78}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 50.610476079s ago: executing program 1 (id=144): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x129942, 0x18) fcntl$setlease(r0, 0x400, 0x1) 50.511563602s ago: executing program 3 (id=145): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x89Z7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\x06\x00\x00\x00\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0xfffd) fcntl$addseals(r1, 0x409, 0x3) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x80, 0x5, 0x4, 0x0, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x8, 0x34, 0x7}}) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r2, &(0x7f0000000040), 0x0) r3 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000f, 0x11, r3, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x9}]}) fsopen(0x0, 0x1) close_range(r4, 0xffffffffffffffff, 0x0) syz_clone(0x2000, 0x0, 0xffdd, 0x0, 0x0, 0x0) 49.43844317s ago: executing program 3 (id=147): syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e04"], 0x6a) 49.41528131s ago: executing program 0 (id=148): bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1c41, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r3}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{r3}, &(0x7f00000006c0), &(0x7f0000000780)='%+9llu \x00'}, 0x20) 49.195781336s ago: executing program 3 (id=149): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x2, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@uuid_on}]}) 49.117595928s ago: executing program 0 (id=150): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x3c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa8}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230, 0x0, r3}}], 0x1, 0x0, 0x0) 48.874449354s ago: executing program 3 (id=151): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r0, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001d40)=""/61, 0x46}, {0x0, 0x20}], 0x2}, 0x10009}], 0x1, 0x10000, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmmsg$inet6(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20e8086) sendto$inet6(r0, &(0x7f0000000180)="e4eba9c15d1ee9eb1913bcf106c6b1bb86172d891122171bc44f929c668058cce40ea87402e90200518ed4516e2d4fbc906d645a81939dfb0000959ce7e19237140c51c44c", 0x45, 0x800, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) 48.736422248s ago: executing program 1 (id=152): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00'}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x6) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x81, 0x800001000891}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) eventfd(0x6) r5 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r5, 0xc4c85513, &(0x7f0000000040)={0x1}) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac00000000010505000000faff0000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff02000000000000009d0000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1e00010800074000000001180006"], 0xac}}, 0x0) 48.591332211s ago: executing program 2 (id=153): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f00000004c0)={0x0, 0xfef0, 0x10, 0x0, 0x87b}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x247d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 48.506386294s ago: executing program 0 (id=154): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000080)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) recvfrom(r0, &(0x7f0000000100)=""/10, 0xa, 0x63, 0x0, 0x0) 47.616662787s ago: executing program 1 (id=155): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x2014) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001}, 0x0) ioctl(r0, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e01") 47.171031568s ago: executing program 0 (id=156): mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000002c0)={0x0, 0x0, @pic={0x2e, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x67, 0x58, 0xa0, 0x2, 0x6, 0x7e}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0xffff1000, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r6, 0x0) 47.11814064s ago: executing program 1 (id=157): syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e047f29"], 0x6a) 47.028110782s ago: executing program 3 (id=158): bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1c41, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r3}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{r3}, &(0x7f00000006c0), &(0x7f0000000780)='%+9llu \x00'}, 0x20) 46.850376967s ago: executing program 1 (id=159): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="c4000000190001000000000010000000ff0100000000000000000000000000016401010200000000000000000000000000000000000200000a000080060000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000a7c9043d000000000000000000000000000000000000000008000000000000000000000000000000fbffffffffffffff000000000000000002000000000000000000000000000000030000000000000000000000b86b6e0000010001000000000c0015005b07e177ed"], 0xc4}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001200192340834b80040d8c560a067f0200ff000000000000000058000b4824ca946e64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd0000000c0001000d0c10000000000000000000", 0x58}], 0x1) r2 = creat(&(0x7f0000000100)='./tracing/events/enable\x00', 0x19) write(r2, &(0x7f0000000140)='1', 0x1) 46.797796298s ago: executing program 3 (id=160): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) 46.743474059s ago: executing program 2 (id=161): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x98}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 46.378194499s ago: executing program 0 (id=162): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000100)) 41.29449682s ago: executing program 0 (id=163): syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000140)='./file1\x00', 0x1004000, &(0x7f00000005c0)=ANY=[@ANYBLOB="00000000cf57179d7a6d860933e6a354b8141bc7ea799bbca98432cfd5af89d81727b2e04b402831c7f4", @ANYRESDEC=0x0, @ANYBLOB=',mode=00000000000000000000004,anchor=00000000000000000007,longad,utf8,unhide,undelete,iocharset=utf8,uid=forget,rootdir=00000000000000000006,gid=forget,nostrict,session=00000000000000000000,gid=forget,\x00'], 0x1, 0xc34, &(0x7f0000001bc0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc042, 0x0) r0 = syz_create_resource$binfmt(0x0) openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) truncate(0x0, 0x8fff5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) 40.16727885s ago: executing program 2 (id=164): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10162, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000400), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000000)={0x2, 0x0, @pic={0x1, 0x3, 0x1, 0xff, 0x6, 0x9, 0xa, 0x4, 0x5, 0x9, 0x2, 0x6, 0xff, 0x7, 0x7, 0x7}}) 25.670630735s ago: executing program 32 (id=159): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="c4000000190001000000000010000000ff0100000000000000000000000000016401010200000000000000000000000000000000000200000a000080060000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000a7c9043d000000000000000000000000000000000000000008000000000000000000000000000000fbffffffffffffff000000000000000002000000000000000000000000000000030000000000000000000000b86b6e0000010001000000000c0015005b07e177ed"], 0xc4}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001200192340834b80040d8c560a067f0200ff000000000000000058000b4824ca946e64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd0000000c0001000d0c10000000000000000000", 0x58}], 0x1) r2 = creat(&(0x7f0000000100)='./tracing/events/enable\x00', 0x19) write(r2, &(0x7f0000000140)='1', 0x1) 17.004076469s ago: executing program 33 (id=160): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) 9.558613743s ago: executing program 34 (id=163): syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000140)='./file1\x00', 0x1004000, &(0x7f00000005c0)=ANY=[@ANYBLOB="00000000cf57179d7a6d860933e6a354b8141bc7ea799bbca98432cfd5af89d81727b2e04b402831c7f4", @ANYRESDEC=0x0, @ANYBLOB=',mode=00000000000000000000004,anchor=00000000000000000007,longad,utf8,unhide,undelete,iocharset=utf8,uid=forget,rootdir=00000000000000000006,gid=forget,nostrict,session=00000000000000000000,gid=forget,\x00'], 0x1, 0xc34, &(0x7f0000001bc0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc042, 0x0) r0 = syz_create_resource$binfmt(0x0) openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) truncate(0x0, 0x8fff5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) 0s ago: executing program 35 (id=164): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10162, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000400), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000000)={0x2, 0x0, @pic={0x1, 0x3, 0x1, 0xff, 0x6, 0x9, 0xa, 0x4, 0x5, 0x9, 0x2, 0x6, 0xff, 0x7, 0x7, 0x7}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.40' (ED25519) to the list of known hosts. [ 67.793144][ T5758] cgroup: Unknown subsys name 'net' [ 67.924029][ T5758] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.319077][ T5758] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.810397][ T5777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.819422][ T5777] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.827695][ T5777] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.837155][ T5783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.856118][ T5783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.867673][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.876767][ T5784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.876817][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.884867][ T5784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.899256][ T5784] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 70.899299][ T5777] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.907175][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.922965][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.923212][ T5777] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.934870][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.938218][ T5777] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.945810][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 70.966845][ T5777] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.966913][ T5784] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.982013][ T5777] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 70.982200][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.989455][ T5786] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 71.004563][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.006304][ T5777] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.370501][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 71.488921][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 71.575714][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.583713][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.591332][ T5772] bridge_slave_0: entered allmulticast mode [ 71.598465][ T5772] bridge_slave_0: entered promiscuous mode [ 71.607614][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.614859][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.622181][ T5772] bridge_slave_1: entered allmulticast mode [ 71.629191][ T5772] bridge_slave_1: entered promiscuous mode [ 71.685375][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 71.714707][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.752195][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.761637][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 71.793022][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.799590][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.824917][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.832700][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.840099][ T5771] bridge_slave_0: entered allmulticast mode [ 71.846924][ T5771] bridge_slave_0: entered promiscuous mode [ 71.855206][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.862896][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.870480][ T5771] bridge_slave_1: entered allmulticast mode [ 71.877459][ T5771] bridge_slave_1: entered promiscuous mode [ 71.890362][ T5772] team0: Port device team_slave_0 added [ 71.906849][ T5772] team0: Port device team_slave_1 added [ 71.955798][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.988497][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.010150][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.017535][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.024803][ T5773] bridge_slave_0: entered allmulticast mode [ 72.034431][ T5773] bridge_slave_0: entered promiscuous mode [ 72.042240][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.052020][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.059528][ T5773] bridge_slave_1: entered allmulticast mode [ 72.066527][ T5773] bridge_slave_1: entered promiscuous mode [ 72.098821][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.105827][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.135021][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.164530][ T5771] team0: Port device team_slave_0 added [ 72.172434][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.179759][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.206987][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.242885][ T5771] team0: Port device team_slave_1 added [ 72.268127][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.280485][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.299682][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.307199][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.314671][ T5774] bridge_slave_0: entered allmulticast mode [ 72.321750][ T5774] bridge_slave_0: entered promiscuous mode [ 72.356700][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.363885][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.372465][ T5774] bridge_slave_1: entered allmulticast mode [ 72.379473][ T5774] bridge_slave_1: entered promiscuous mode [ 72.398258][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.405840][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.432963][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.454790][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.461852][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.490252][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.531255][ T5773] team0: Port device team_slave_0 added [ 72.540253][ T5773] team0: Port device team_slave_1 added [ 72.563158][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.606369][ T5772] hsr_slave_0: entered promiscuous mode [ 72.612852][ T5772] hsr_slave_1: entered promiscuous mode [ 72.622717][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.632950][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.640303][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.666412][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.679278][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.686398][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.712528][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.729245][ T5771] hsr_slave_0: entered promiscuous mode [ 72.735796][ T5771] hsr_slave_1: entered promiscuous mode [ 72.742158][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.749940][ T5771] Cannot create hsr debugfs directory [ 72.807583][ T5774] team0: Port device team_slave_0 added [ 72.851427][ T5773] hsr_slave_0: entered promiscuous mode [ 72.858085][ T5773] hsr_slave_1: entered promiscuous mode [ 72.864270][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.872131][ T5773] Cannot create hsr debugfs directory [ 72.880666][ T5774] team0: Port device team_slave_1 added [ 72.959725][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.966811][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.986982][ T5782] Bluetooth: hci1: command tx timeout [ 72.993549][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.016263][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.023244][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.049598][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.066364][ T5782] Bluetooth: hci2: command tx timeout [ 73.066381][ T5781] Bluetooth: hci0: command tx timeout [ 73.066599][ T5781] Bluetooth: hci3: command tx timeout [ 73.221703][ T5774] hsr_slave_0: entered promiscuous mode [ 73.231638][ T5774] hsr_slave_1: entered promiscuous mode [ 73.238879][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.246859][ T5774] Cannot create hsr debugfs directory [ 73.393411][ T5772] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.430823][ T5772] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.441010][ T5772] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.465157][ T5772] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.539093][ T5771] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.560835][ T5771] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.573580][ T5771] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.585345][ T5771] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.665144][ T5773] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.677988][ T5773] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.699304][ T5773] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.711327][ T5773] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.793482][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.800947][ T5774] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.813064][ T5774] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.835647][ T5774] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.856684][ T5774] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.874695][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.895800][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.904208][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.925165][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.932504][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.040112][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.092641][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.139746][ T1299] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.146996][ T1299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.173682][ T1299] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.180995][ T1299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.213769][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.259303][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.307117][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.332171][ T1299] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.339419][ T1299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.360909][ T5771] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.392873][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.400370][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.434959][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.468397][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.498419][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.505577][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.519189][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.526491][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.623841][ T5772] veth0_vlan: entered promiscuous mode [ 74.664929][ T5772] veth1_vlan: entered promiscuous mode [ 74.750688][ T5772] veth0_macvtap: entered promiscuous mode [ 74.765631][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.791007][ T5772] veth1_macvtap: entered promiscuous mode [ 74.878183][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.905716][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.940076][ T5772] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.950428][ T5772] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.959947][ T5772] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.972574][ T5772] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.022137][ T5771] veth0_vlan: entered promiscuous mode [ 75.067464][ T5781] Bluetooth: hci1: command tx timeout [ 75.070833][ T5771] veth1_vlan: entered promiscuous mode [ 75.146484][ T5786] Bluetooth: hci0: command tx timeout [ 75.152118][ T5781] Bluetooth: hci2: command tx timeout [ 75.159102][ T5786] Bluetooth: hci3: command tx timeout [ 75.192599][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.204017][ T5771] veth0_macvtap: entered promiscuous mode [ 75.225822][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.234909][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.238632][ T5771] veth1_macvtap: entered promiscuous mode [ 75.299285][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.322694][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.340910][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.355231][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.390548][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.392725][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.402395][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.417075][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.433057][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.457163][ T5771] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.474018][ T5771] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.484102][ T5771] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.494804][ T5771] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.569176][ T5773] veth0_vlan: entered promiscuous mode [ 75.625852][ T5774] veth0_vlan: entered promiscuous mode [ 75.641004][ T5773] veth1_vlan: entered promiscuous mode [ 75.703636][ T5774] veth1_vlan: entered promiscuous mode [ 75.734077][ T1299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.762573][ T1299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.801930][ T5774] veth0_macvtap: entered promiscuous mode [ 75.830497][ T1299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.840958][ T5774] veth1_macvtap: entered promiscuous mode [ 75.847152][ T1299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.893218][ T5773] veth0_macvtap: entered promiscuous mode [ 75.941247][ T5773] veth1_macvtap: entered promiscuous mode [ 75.964580][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.980437][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.992344][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.013417][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.029114][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.077083][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.102727][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.121721][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.095934][ C0] sched: RT throttling activated [ 77.104201][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.756505][ T5786] Bluetooth: hci2: command tx timeout [ 77.761043][ T5782] Bluetooth: hci3: command tx timeout [ 78.319206][ T5777] Bluetooth: hci0: command tx timeout [ 78.335406][ T5781] Bluetooth: hci1: command tx timeout [ 78.337719][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.546834][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.561671][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.572266][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.583131][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.619615][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.722944][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.866350][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.903559][ T5774] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.925991][ T5774] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.950195][ T5774] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.976217][ T5774] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.017766][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.046488][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.067560][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.085990][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.100971][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.146317][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.167556][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.252508][ T5773] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.276631][ T5773] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.285528][ T5773] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.315559][ T5773] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.509220][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.530744][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.638001][ T3465] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.645851][ T3465] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.699844][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.717554][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.760450][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.801920][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.810808][ T5848] syz.2.6[5848]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 79.906716][ T5848] loop2: detected capacity change from 0 to 1024 [ 79.964184][ T5850] loop0: detected capacity change from 0 to 2048 [ 79.999906][ T5846] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 81.245266][ T5781] Bluetooth: hci2: command tx timeout [ 81.246144][ T5782] Bluetooth: hci0: command tx timeout [ 81.251859][ T5781] Bluetooth: hci3: command tx timeout [ 81.256741][ T5782] Bluetooth: hci1: command tx timeout [ 81.355249][ T5850] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 81.491086][ T5850] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 81.502791][ T5858] loop3: detected capacity change from 0 to 1024 [ 81.530557][ T5858] EXT4-fs: inline encryption not supported [ 81.585668][ T28] audit: type=1800 audit(1785980495.269:2): pid=5850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7" name="file1" dev="loop0" ino=1346 res=0 errno=0 [ 81.713224][ T5858] EXT4-fs (loop3): Invalid log cluster size: 32 [ 82.447526][ T5871] loop3: detected capacity change from 0 to 128 [ 82.546937][ T5871] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 82.611385][ T5871] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 84.426050][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 84.842341][ T5811] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 84.893406][ T5773] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 85.876757][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 86.280823][ T5811] usb 2-1: Using ep0 maxpacket: 8 [ 86.291116][ T5811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 86.337303][ T5811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 86.355637][ T5811] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 86.369053][ T5811] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 173 [ 86.386150][ T5811] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 86.395638][ T5811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.424776][ T5811] usb 2-1: config 0 descriptor?? [ 86.440286][ T5812] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 86.452592][ T5811] usb 2-1: can't set config #0, error -71 [ 86.463908][ T5811] usb 2-1: USB disconnect, device number 2 [ 86.560751][ T5898] input: syz0 as /devices/virtual/input/input5 [ 86.619535][ T5900] IPv6: NLM_F_REPLACE set, but no existing node found! [ 86.656695][ T5812] usb 4-1: Using ep0 maxpacket: 16 [ 86.664737][ T5812] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 86.696125][ T5812] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.716476][ T5812] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 86.725690][ T5812] usb 4-1: config 1 has no interface number 1 [ 86.766388][ T5812] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 86.797366][ T5812] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 86.986077][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 87.417996][ T5905] loop0: detected capacity change from 0 to 128 [ 87.460332][ T5905] ======================================================= [ 87.460332][ T5905] WARNING: The mand mount option has been deprecated and [ 87.460332][ T5905] and is ignored by this kernel. Remove the mand [ 87.460332][ T5905] option from the mount to silence this warning. [ 87.460332][ T5905] ======================================================= [ 88.048428][ T9] cfg80211: failed to load regulatory.db [ 88.176294][ T5812] usb 4-1: string descriptor 0 read error: -71 [ 88.183165][ T5812] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 88.207516][ T5812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.280393][ T5812] usb 4-1: can't set config #1, error -71 [ 88.322447][ T5812] usb 4-1: USB disconnect, device number 2 [ 89.546136][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 91.026604][ T5922] netlink: 24 bytes leftover after parsing attributes in process `syz.1.27'. [ 91.035565][ T5922] netlink: 24 bytes leftover after parsing attributes in process `syz.1.27'. [ 91.136473][ T5922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.27'. [ 91.151462][ T5924] loop2: detected capacity change from 0 to 512 [ 91.228169][ T5924] EXT4-fs: Ignoring removed nomblk_io_submit option [ 91.316009][ T5924] EXT4-fs: Mount option(s) incompatible with ext2 [ 91.532695][ T5908] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 94.188808][ T5842] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 94.315717][ T5940] loop1: detected capacity change from 0 to 512 [ 95.634506][ T5842] usb 1-1: device descriptor read/all, error -71 [ 95.731654][ T5940] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.775755][ T5940] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.840828][ T5940] EXT4-fs error (device loop1): ext4_get_inode_usage:888: inode #12: comm syz.1.31: corrupted xattr block 6: invalid header [ 95.965145][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.164488][ T5951] loop1: detected capacity change from 0 to 256 [ 96.230825][ T5951] exFAT-fs (loop1): error, The cluster chain has a loop [ 96.256090][ T5951] exFAT-fs (loop1): Filesystem has been set read-only [ 96.263017][ T5951] exFAT-fs (loop1): failed to count the number of clusters in root [ 96.326243][ T5951] exFAT-fs (loop1): failed to recognize exfat type [ 97.936839][ T5957] loop0: detected capacity change from 0 to 512 [ 97.991446][ T5957] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.017483][ T5957] ext4 filesystem being mounted at /10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 98.182077][ T5957] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 3: comm syz.0.36: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 98.225607][ T5961] loop3: detected capacity change from 0 to 512 [ 98.299324][ T5961] EXT4-fs (loop3): 1 truncate cleaned up [ 98.349691][ T5961] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.459526][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.517429][ T5961] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.32: bg 0: block 465: padding at end of block bitmap is not set [ 98.568150][ T5961] EXT4-fs (loop3): Remounting filesystem read-only [ 98.587318][ T5961] EXT4-fs (loop3): error restoring inline_data for inode -- potential data loss! (inode 12, error -5) [ 98.669423][ T5968] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 98.723048][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.168072][ T5976] futex_wake_op: syz.2.35 tries to shift op by 144; fix this program [ 99.810987][ T5981] loop2: detected capacity change from 0 to 512 [ 99.885020][ T5981] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 100.065091][ T5981] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.126193][ T5981] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.407844][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.936253][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 102.473211][ T5995] loop2: detected capacity change from 0 to 512 [ 102.599718][ T5995] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.43: bg 0: block 127: padding at end of block bitmap is not set [ 102.619881][ T5995] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 102.636458][ T5995] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.43: iget: bad extra_isize 58 (inode size 256) [ 102.712574][ T5995] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.43: error while reading EA inode 11 err=-117 [ 102.783042][ T5995] EXT4-fs (loop2): 1 orphan inode deleted [ 102.809645][ T5995] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.541639][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.466054][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 108.286463][ T6019] netlink: 20 bytes leftover after parsing attributes in process `syz.2.53'. [ 111.815511][ T6043] loop3: detected capacity change from 0 to 1024 [ 114.040304][ T3465] hfsplus: b-tree write err: -5, ino 25 [ 114.064301][ T3465] hfsplus: b-tree write err: -5, ino 4 [ 114.096436][ T3465] hfsplus: b-tree write err: -5, ino 2 [ 114.300135][ T6057] loop3: detected capacity change from 0 to 1024 [ 114.423882][ T6057] hfsplus: unable to load nls mapping "cp37" [ 114.456841][ T6057] hfsplus: unable to parse mount options [ 114.497854][ T6062] kvm: emulating exchange as write [ 116.476247][ T27] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 116.690438][ T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.718354][ T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.743527][ T27] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 116.755964][ T27] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 116.797520][ T27] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 116.832423][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.870105][ T27] usb 2-1: Product: syz [ 116.874710][ T27] usb 2-1: Manufacturer: syz [ 116.881429][ T27] usb 2-1: SerialNumber: syz [ 116.907801][ T27] usbserial_generic 2-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 116.941825][ T27] usbserial_generic 2-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 116.966746][ T27] usbserial_generic 2-1:1.0: generic converter detected [ 117.017909][ T27] usb 2-1: generic converter now attached to ttyUSB0 [ 117.159213][ T5775] usb 2-1: USB disconnect, device number 3 [ 117.191360][ T5775] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 117.219426][ T5775] usbserial_generic 2-1:1.0: device disconnected [ 117.462199][ T6096] loop0: detected capacity change from 0 to 1024 [ 117.503524][ T6096] EXT4-fs: Ignoring removed orlov option [ 117.545148][ T6096] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.872032][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.266087][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 121.490523][ T6170] loop0: detected capacity change from 0 to 128 [ 122.466008][ T6176] input: syz0 as /devices/virtual/input/input8 [ 124.346838][ T5842] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 124.548523][ T5842] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 124.562714][ T5842] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.575634][ T5842] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.592842][ T5842] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 124.622356][ T5842] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 124.638444][ T5842] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.660986][ T5842] usb 1-1: config 0 descriptor?? [ 124.766147][ T5811] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 124.986020][ T5811] usb 2-1: Using ep0 maxpacket: 16 [ 124.993449][ T5811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 125.005101][ T5811] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 125.018659][ T5811] usb 2-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.00 [ 125.044413][ T5811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.080378][ T5811] usb 2-1: config 0 descriptor?? [ 125.123575][ T5842] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 125.160636][ T5842] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 126.209420][ T5842] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 126.259489][ T5842] usb 1-1: USB disconnect, device number 4 [ 126.347188][ T6214] input: syz0 as /devices/virtual/input/input11 [ 126.375476][ T5811] lg-g15 0003:046D:C22D.0002: unknown main item tag 0x7 [ 126.393942][ T5811] lg-g15 0003:046D:C22D.0002: unknown main item tag 0x0 [ 126.402878][ T5811] lg-g15 0003:046D:C22D.0002: unknown main item tag 0x1 [ 126.415727][ T6212] fido_id[6212]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 126.417210][ T5811] lg-g15 0003:046D:C22D.0002: unknown main item tag 0xd [ 126.507591][ T5811] lg-g15 0003:046D:C22D.0002: hidraw0: USB HID vc3.3b Device [HID 046d:c22d] on usb-dummy_hcd.1-1/input0 [ 126.584306][ T27] usb 2-1: USB disconnect, device number 4 [ 126.671585][ T6217] fido_id[6217]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 126.738187][ T6219] netlink: 20 bytes leftover after parsing attributes in process `syz.2.115'. [ 127.946119][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 130.506040][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 133.720331][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.727512][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.767119][ T6267] process 'syz.0.133' launched './file0' with NULL argv: empty string added [ 135.625980][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 135.882616][ T5782] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 135.891367][ T5782] Bluetooth: hci3: Injecting HCI hardware error event [ 135.917655][ T5782] Bluetooth: hci3: hardware error 0x00 [ 137.255017][ T6312] Zero length message leads to an empty skb [ 137.295311][ T28] audit: type=1326 audit(1785980550.979:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6311 comm="syz.3.145" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdc5519e0d9 code=0x0 [ 138.034893][ T5782] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 138.746098][ T5782] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 138.759821][ T5782] Bluetooth: hci1: Injecting HCI hardware error event [ 138.768414][ T5782] Bluetooth: hci1: hardware error 0x00 [ 140.378941][ T6348] device-mapper: ioctl: only supply one of name or uuid, cmd(9) [ 140.869431][ T6359] netlink: 12 bytes leftover after parsing attributes in process `syz.1.159'. [ 140.909085][ T5782] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 141.284268][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 142.348423][ T5782] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 142.359310][ T5782] Bluetooth: hci0: Injecting HCI hardware error event [ 142.385844][ T5777] Bluetooth: hci0: hardware error 0x00 [ 144.920369][ T5777] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 194.795303][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.824189][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.916444][ T5781] Bluetooth: hci2: command 0x0406 tx timeout [ 253.847274][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.135174][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.158003][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.445613][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.231392][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 258.327029][ T5781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 258.350035][ T5781] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 258.523084][ T5781] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 258.718273][ T5781] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 258.734696][ T5781] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 261.419152][ T5781] Bluetooth: hci3: command tx timeout [ 262.221417][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.486433][ T5781] Bluetooth: hci3: command tx timeout [ 265.222340][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.559246][ T5781] Bluetooth: hci3: command tx timeout [ 267.688243][ T5777] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 267.697331][ T5782] Bluetooth: hci3: command tx timeout [ 267.829031][ T5777] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 267.962181][ T5777] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 268.325479][ T5777] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 268.379937][ T5777] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 268.399692][ T5777] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 270.727659][ T5777] Bluetooth: hci4: command tx timeout [ 272.247970][ T5781] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 272.397813][ T5781] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 272.453304][ T5781] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 272.633485][ T5781] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 272.770404][ T5782] Bluetooth: hci4: command tx timeout [ 272.835775][ T5781] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 272.891290][ T5781] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 274.881434][ T5777] Bluetooth: hci4: command tx timeout [ 275.229485][ T5777] Bluetooth: hci5: command tx timeout [ 276.996880][ T5777] Bluetooth: hci4: command tx timeout [ 277.367269][ T5777] Bluetooth: hci5: command tx timeout [ 279.443761][ T5777] Bluetooth: hci5: command tx timeout [ 281.506394][ T5777] Bluetooth: hci5: command tx timeout [ 317.625268][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.670792][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 349.076546][ T11] hsr_slave_0: left promiscuous mode [ 349.769084][ T11] hsr_slave_1: left promiscuous mode [ 350.219084][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.316601][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.690119][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.798789][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.055027][ T11] bridge_slave_1: left allmulticast mode [ 351.190919][ T11] bridge_slave_1: left promiscuous mode [ 351.212952][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.923309][ T11] bridge_slave_0: left allmulticast mode [ 352.004007][ T11] bridge_slave_0: left promiscuous mode [ 352.088069][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.228964][ T5781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 356.323881][ T11] veth1_macvtap: left promiscuous mode [ 356.339450][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 356.391546][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 356.540127][ T11] veth0_macvtap: left promiscuous mode [ 356.592941][ T5781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 356.681343][ T5781] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 356.717465][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 356.778428][ T11] veth1_vlan: left promiscuous mode [ 356.920292][ T11] veth0_vlan: left promiscuous mode [ 359.080538][ T5781] Bluetooth: hci0: command tx timeout [ 361.150865][ T5781] Bluetooth: hci0: command tx timeout [ 363.257673][ T5781] Bluetooth: hci0: command tx timeout [ 363.986512][ T5777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 364.052006][ T5777] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 364.101338][ T5777] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 364.359637][ T5777] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 364.460036][ T5777] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 364.510785][ T5777] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 365.338195][ T5781] Bluetooth: hci0: command tx timeout [ 367.004580][ T5781] Bluetooth: hci1: command tx timeout [ 369.082395][ T5781] Bluetooth: hci1: command tx timeout [ 370.322840][ T5777] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 370.500191][ T5777] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 370.536764][ T5777] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 370.644023][ T5777] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 370.732117][ T5777] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 371.137682][ T5777] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 371.152788][ T5782] Bluetooth: hci1: command tx timeout [ 373.249244][ T5777] Bluetooth: hci1: command tx timeout [ 373.411421][ T5777] Bluetooth: hci3: command tx timeout [ 375.476628][ T5777] Bluetooth: hci3: command tx timeout [ 377.557466][ T5777] Bluetooth: hci3: command tx timeout [ 379.063070][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.096716][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.641813][ T5777] Bluetooth: hci3: command tx timeout [ 413.794161][ T11] team0 (unregistering): Port device team_slave_1 removed [ 416.578998][ T11] team0 (unregistering): Port device team_slave_0 removed [ 418.882917][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 422.024955][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 428.304104][ T5781] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 428.400671][ T5781] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 428.487450][ T5781] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 428.612424][ T5781] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 428.818744][ T5781] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 428.967281][ T5781] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 431.407207][ T5781] Bluetooth: hci4: command tx timeout [ 433.467401][ T5777] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 433.478835][ T5777] Bluetooth: hci4: command tx timeout [ 433.652844][ T6459] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 433.699813][ T6459] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 433.855081][ T6459] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 433.944563][ T6459] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 434.010784][ T6459] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 435.570240][ T6459] Bluetooth: hci4: command tx timeout [ 436.440725][ T6459] Bluetooth: hci5: command tx timeout [ 437.626403][ T6459] Bluetooth: hci4: command tx timeout [ 438.515878][ T6459] Bluetooth: hci5: command tx timeout [ 439.688400][ T5781] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 439.801175][ T5781] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 439.830111][ T5781] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 439.971337][ T5781] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 440.070138][ T5781] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 440.151018][ T5781] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 440.539272][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.548127][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.592019][ T5781] Bluetooth: hci5: command tx timeout [ 442.698132][ T6459] Bluetooth: hci5: command tx timeout [ 443.176904][ T6459] Bluetooth: hci6: command tx timeout [ 445.118809][ T5781] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 445.230322][ T5781] Bluetooth: hci6: command tx timeout [ 445.327328][ T5781] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 445.409784][ T5781] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 445.570697][ T5781] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 445.731808][ T5781] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 445.850160][ T5781] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 447.199643][ T11] bond0 (unregistering): Released all slaves [ 447.317296][ T6459] Bluetooth: hci6: command tx timeout [ 448.200576][ T6459] Bluetooth: hci7: command tx timeout [ 449.390077][ T6459] Bluetooth: hci6: command tx timeout [ 450.274952][ T6459] Bluetooth: hci7: command tx timeout [ 452.386381][ T6459] Bluetooth: hci7: command tx timeout [ 454.461270][ T6459] Bluetooth: hci7: command tx timeout