last executing test programs:

4.456820066s ago: executing program 2 (id=6):
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./bus\x00', 0x100c404, &(0x7f0000000380)={[{@nodots}, {@dots}, {@fat=@nfs_stale_rw}, {@fat=@debug}, {@nodots}, {@nodots}, {@fat=@nfs_stale_rw}, {@nodots}, {@dots}, {@nodots}, {@fat=@dmask={'dmask', 0x3d, 0x8}}, {@fat=@discard}, {@nodots}, {@fat=@gid={'gid', 0x3d, 0xee00}}, {@fat=@quiet}, {@dots}, {@nodots}, {@nodots}, {@dots}, {@fat=@codepage={'codepage', 0x3d, '775'}}, {@nodots}, {@dots}, {@fat=@nfs}, {@nodots}]}, 0x1, 0x1f5, &(0x7f0000000600)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x60000, 0x3)
getdents64(r0, &(0x7f0000001f80)=""/4096, 0x1000)

3.651340544s ago: executing program 3 (id=4):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x8001, 0xa, 0x1, 0x0, 0x2, 0xcc7, 0x8, 0x7, 0x654, 0x100, 0x2, 0x1, 0x6, 0x4, 0x6, 0xffffffff, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0x3, 0xf23, 0x6, 0xb, 0x8, 0x3, 0x8, 0x4, 0x10000, 0xfffffff8]})

3.483968505s ago: executing program 2 (id=7):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339ee4a60fa38ceb788b2be2516f2f30455afb9fdd672bad09dfb78c7699c74"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)

2.749355228s ago: executing program 3 (id=8):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000003"], 0x6)

2.700182059s ago: executing program 4 (id=5):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
io_submit(r1, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}])

2.521951499s ago: executing program 2 (id=9):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a)
write(r0, &(0x7f0000000100)="240000001a005f0400f9f4070009040180202000000000faffffffff07001e0040000000", 0x24)

2.074784803s ago: executing program 3 (id=10):
unshare(0x400)
r0 = fsopen(&(0x7f0000000380)='gfs2meta\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000d00)='sou *\xb9/\x95\xf89\x84W\x83\xa0\x13\xc8\x1b\xb7S\x93H\x9d\x96\xee8\xde\x88R\xb4\xbam\xc0\xe8\x87\xff\x90{G\xdbkw~\xd4\xf9O\xe41\xfc\xffW\xac\xbc\xb6K\xbaR\xbf\x01\x80}F\x85\xc90\x7f\xd1w\xc8L%\xcd\xde\xce\x9c\x1f\x94!\xf3\xba\xee\x12\xe2k@\xe2D\xca\x93\xd8\xb7\b\xc1\x91\xa9g\x84\xad*\xb3\xef\xa7\xbd\xf9\xb9\xee\x7f\xf1\x8b\xb4~\xc8f\x96\xe4\x167\xc6r%\xf2\xdckF\x18\xca\xe1.\x8d\xd5\xae\xd6^\x04\x92\xfd\xf5\x0fg\x9f2T\x80\a\xb5}\x91\xdd\xafe\x98\xc9\xd0E\x94\xef\tJ{\xbe{`\x93\xf8\x16\x1c\xb4\x80\xc1w\xe1\xc7\x8d2\x96l\xddS\x9eb\x14Mn\xef\x80z\xcf\x0eve\xf64\xd5\xea\x85O\xa4\x0eT\xfb\x97O\xf8\x94\xfb9\x14\x9c\x93\x95\xa54\x81\x03\xd0\xbc\xd7\x97u\xb8\xd6\x0f\xb0\x86\xeeR\x155_3T\xc8\x06\x14{\x9b\x9a\xe7J_\xf2\xd7\xdc\xfb\x88R\xe9\xd3\xfd\x18m \xfd\xe1;\xbd\f\xee\x82n\xaf\xd4\xed7\xb1\x03@\xd8\xdf\xb5S\xd8hk\xeb\x0e{d\xc2O`\xde\x17\x13\xecz^O\x06=\xd8\x8eE\x95\r\x0e\x00W~\x1f\\\x84\x03\x02\x14L:\xaf\xaf\xfci6a\x96S@\xa1\xa1\x8al\xd0\x16\xe1#\x8d\x02(\xac\xf6d\xbc\xe8\xd5;-\x93T\x821\xf6tq\xbb\xc3\xec\x01\xe6j\xa6\x94\xd84t\rl\xe7\x10h\x922F\x97e\xf7\xa2\xa1w\xdc\x89\xbc\"\xfc%\xd0=\xc2\xee[j\xe6gn\xc7\"Q(1I[#d\t\xc5\xfd\xbb\xf0\xf6Y}*S\xf3\xee7c\xc5\xf7\xcf4/\xaf\x94\x8e\xff\x11\x9c\x10\x1d\xcf\xbd4\x14\xf9\xd9\x11\x1an\xe9K\x87\xe9yrQ\xbd\x9fZ\xd1\x1cy\xce\x0fd\xf3\xa5(v\x99\xf9\xb1\xabn\xba\x1a\xbe\xfe\xa2\x05\x93E\x18\xd8\x7f^\xd4\xf9\x85>\x06\xd2\xb3\xdf,\x8cMT8\b\x85_\xfeO\x8c7\x80\xee\x13\x12\xc7\xeb\x12\x8f\x91\x8f\xf5}\x1b\xce\xd2l\x84\x9b\x00\x00\x00\x00\x00\x00\x00\x03e\xf5lx\xc5\x169\xdd\xe467\xcf\xa0O\xf3\xc7D\xe4\n\x80AH\xf5G\xb8D\xe0\x90!3\x83\\\xaa\x19X\xa5\fJJHC,:GjNb*\xfe\x7f\x8c\x8a8\x88\x97\xf6\t\\\x95\x00\xfd\x15\xb7~\xf9tx\xdb\a~\xecC\x9f`\x88f\xc8<B?\x88\xe9\x03HK\xa7\x15z\x94\v_\xf3\xa2u\xd3\x9b%\x13\x90\xb4\xdb\xd4\x9dw45xt\xbc\xf5\xd6\xba\tt$\x9b\x8b\x19\x9d\xb6\xd3b\a\xd7\f\xd8\xe4\xd6\x88\xbf\xa1VWz\a\xa7\xddB\x9b\xab1\x1c\xb4w\xc0\xc0\xe3-]\xf4\x95\xf5\xb2G\xe4B\xe3\'\xf0e\x1f)\xe5O\x1a\x1c\x82\x85V\xfei\xa5w\xcb\xd14\xe5N\xb8\x0f\xcefA7\xe7\xc5 \x8e\xfc\xef\xb2\xa8\xea\xd6\xd0\xa3\xf9s\x1c\x95\x98\xcf\xf7\x83\xe6\xf3\xf7f\xa9\xec\x01\xaf\x8a\xf3\x8exE%\xfemH\x1c}\xe3 \xdbs\x1b\x86\x1a\x0f\t\x1a\xd3j3t4.\xcb\xcb\xd9d\x8fZ\xd9\x8a?\x01E\x19\xb2\x1eP\xba\x98f0\xe4\tJ\xfc.\x8e\x05?\x9e\x12OX\xa8\xd5\xe2R\x98\xc2\x1c\xd6\\\x87\x12\x8bqj\xf4\"\xc9\xb6\xfe\xdePu\x8a\xe8\xf6\xe6\x8b\xdbl#\xf5\xa2\x93zu\t\x14!\xf4\xdc\xc2l\xb46\xb5\x91\xdfWZ\xbf\xd2\xba\x88\xc0\x15\x83c[\xfe\x95\x02\xe3|<\xfa\xd4a7O\xec9\xdf\xd6\xb1<\x17!\xe6q&,7Q]\xb5\xc5=\x15\x86m\xcd\xb3\xd18\xca{g\x9d\xc1D\xa7w\x91\xaf<\xe2\x14<m\x88`\xb7\xe0\xff\x87u\xd0\xfe\x0f\xdf\xdcQO\a\x93B', &(0x7f0000000800)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xb2\xc3\xab\xc7`\xc3\v\xf3L\x9dKQ\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x14<L\x19K\xbf\xf7\x9c\xe7 \x12+4.\xa9\xa7\xdc[\xd2\xec\xbe\x1a\xa1\x04\xd3\x9e\x92\x8a\xf7\x9b\xe7f\xdeo\xc1\xa5\xb6T\r)\x1c\xbe\x12\xd1\xef\xc2S\xcci\xc8\x0e\x00]\xe6|\xccK\xc7\r\xfa \x02\xe8\x1b\xc1\x93\xce\x02%\x86\xcb\x94K\v\xe7x\xe3\x06[/\xf9\xa8\x82\x9b\xeeF\x88\xc0f\x82\xb7T\r\x04\xbb\x10\x1d3\xa6\xf9\xd4\xd9\x10\xfdw\x02!\xbb\xbfJ\xc1\xd7\x97\xf3\xf7\xa7\xaa\x1d)\xf6\xf6q\xfbH\"w\x03zF9\xac\xa7*7`\x89C\xa7\x88\b\xf6\xfe\x85\xcbl]\xe4pl\x05U,i\xe0\x8a\\\xaa\xc9{\xcd\xd2\xd2\xa4\xe3\xb3\x90\x13\x9a\xb05\xc6\x1b\xb9\xfe\as\xec\x19k\xd4e\xc1\xd5\xcb!1-ABJ\xe1\xf0\xdd\xea\f\xb0\xce\x9f\xd8(#\xb1$\x97\xe1\x93\x93\x02\xc3\xb5\x9b\xbd\xe6\xda\xc1\xa5aw\xc4\xcc\x0fw\xdf\x99\xd9\x1d=\xf1\xf7\xed\xea\x96\x7f\x03\xaeB\xc6\xeaX\x02\')\xd7\xee)2\x169\xc2\x10\xe3\xb2\xe3\xed/\xd2\x0f}\b\x18\xcd\x91K\xdc\b\xed\x9f9jiIL\xbb\xc6\x85-\xb2%\x16D\xbads\xe1\x8e?8\xa4.\xf4\x96&}\xb5\xf5\xb5}\x10\xa8h\xb6j\xf6a\xbb\xfc\xc3\xb8QY-q4\xcah\xd0Y\x01\x00\\\x04\xb5\xaa~n\xd6\xbf\xe8|\xf3U\x172\xd9n)o\xa6I\xddE\x0f\xb7\x84\t\xdc\xaf:\xb5\xf1\x8e\xeb\xba\xf7p\x98R\xe20\xd9\x03\x840`\x94\xf7\x88\x89*\xb6', 0x0)

2.021847395s ago: executing program 2 (id=11):
r0 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x7080000, @mcast1, 0x0, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000940)=[{0x10, 0x29, 0xb, '\x00'}, {0xc, 0x0, 0xfffffffc}], 0x1c}}], 0x1, 0x200008c0)

1.70112503s ago: executing program 0 (id=1):
syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[], 0x2, 0x5d3, &(0x7f0000000f80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x101000, 0x0)
getdents64(r0, &(0x7f0000000440)=""/192, 0xc0)

1.3916436s ago: executing program 3 (id=12):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f00000002c0)={@multicast1, @dev={0xac, 0x14, 0x14, 0x1f}, @multicast2}, 0xc)
setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000040)={@multicast1, @broadcast}, 0xc)

1.178604999s ago: executing program 2 (id=13):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0xc048)
sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200000038000480340001800b00010074617267657400002400028010000100434f4e4e5345434d41524b0005000300ef00000008000240000000000900010073797a30000000000900020073797a320000000014000580080002400000000008"], 0xa0}, 0x1, 0x0, 0x0, 0x40090}, 0x4044194)

1.112443622s ago: executing program 1 (id=2):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8b2d, &(0x7f0000000040))

794.652639ms ago: executing program 3 (id=14):
unshare(0x400)
socket$inet(0x2, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1830000012800000000000000300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x9, 0x99, &(0x7f0000000240)=""/153, 0x0, 0x42}, 0x94)

513.571256ms ago: executing program 0 (id=15):
r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x5, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x4, 0x1})
preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd)

444.862836ms ago: executing program 4 (id=16):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xe}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

241.042655ms ago: executing program 2 (id=17):
syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000100)={[{}, {@uid}, {@uid}, {}, {@part={'part', 0x3d, 0x88b}}]}, 0x21, 0x314, &(0x7f00000009c0)="$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")
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
lseek(r0, 0xfffd, 0x0)

89.708262ms ago: executing program 1 (id=18):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4005, &(0x7f0000000c00)=0xb, 0x6, 0x2)
mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000c00)=0xc, 0x6, 0x2)

0s ago: executing program 3 (id=19):
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000580)={'veth0_to_team\x00', 0x0})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.90' (ED25519) to the list of known hosts.
[  164.629542][ T5753] cgroup: Unknown subsys name 'net'
[  164.757974][ T5753] cgroup: Unknown subsys name 'cpuset'
[  164.772498][ T5753] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[  170.428963][ T5753] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  175.598357][ T5071] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  175.611648][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  175.622480][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  175.639275][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  175.649501][ T5778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  175.658476][ T5781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  175.659779][ T5778] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  175.675971][ T5778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  175.684877][ T5781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  175.690575][ T5778] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  175.702940][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  175.702975][ T5778] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  175.750088][ T5071] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  175.767213][ T5781] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  175.777880][ T5781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  175.855977][   T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  175.866177][ T5071] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  175.871400][   T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  175.883972][   T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  175.908051][   T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  175.908539][ T5071] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  175.928670][   T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  175.939421][ T5071] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  175.939986][   T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  175.963610][   T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  177.060402][ T5776] chnl_net:caif_netlink_parms(): no params data found
[  177.320767][ T5774] chnl_net:caif_netlink_parms(): no params data found
[  177.545502][ T5771] chnl_net:caif_netlink_parms(): no params data found
[  177.741859][ T5784] chnl_net:caif_netlink_parms(): no params data found
[  177.788332][ T5778] Bluetooth: hci0: command tx timeout
[  177.869114][ T5778] Bluetooth: hci2: command tx timeout
[  177.869439][ T5071] Bluetooth: hci1: command tx timeout
[  177.934309][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.949103][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state
[  177.956656][ T5776] bridge_slave_0: entered allmulticast mode
[  178.014381][ T5776] bridge_slave_0: entered promiscuous mode
[  178.030288][ T5071] Bluetooth: hci4: command tx timeout
[  178.033514][ T5778] Bluetooth: hci3: command tx timeout
[  178.107085][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state
[  178.115751][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.124802][ T5776] bridge_slave_1: entered allmulticast mode
[  178.134956][ T5776] bridge_slave_1: entered promiscuous mode
[  178.277912][ T5775] chnl_net:caif_netlink_parms(): no params data found
[  178.303182][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state
[  178.311259][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state
[  178.320536][ T5774] bridge_slave_0: entered allmulticast mode
[  178.331204][ T5774] bridge_slave_0: entered promiscuous mode
[  178.356659][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  178.408953][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  178.449981][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state
[  178.457563][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.465305][ T5774] bridge_slave_1: entered allmulticast mode
[  178.473448][ T5774] bridge_slave_1: entered promiscuous mode
[  178.684407][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  178.706040][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  178.756121][ T5776] team0: Port device team_slave_0 added
[  178.820275][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state
[  178.827888][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state
[  178.835442][ T5771] bridge_slave_0: entered allmulticast mode
[  178.843570][ T5771] bridge_slave_0: entered promiscuous mode
[  178.861180][ T5776] team0: Port device team_slave_1 added
[  178.931407][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state
[  178.939354][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.946856][ T5771] bridge_slave_1: entered allmulticast mode
[  178.957467][ T5771] bridge_slave_1: entered promiscuous mode
[  178.994903][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state
[  179.002432][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state
[  179.010262][ T5784] bridge_slave_0: entered allmulticast mode
[  179.018928][ T5784] bridge_slave_0: entered promiscuous mode
[  179.038325][ T5774] team0: Port device team_slave_0 added
[  179.127522][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state
[  179.135469][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state
[  179.144196][ T5784] bridge_slave_1: entered allmulticast mode
[  179.153022][ T5784] bridge_slave_1: entered promiscuous mode
[  179.172067][ T5774] team0: Port device team_slave_1 added
[  179.204580][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0
[  179.213186][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  179.239837][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  179.256628][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1
[  179.263932][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  179.290219][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  179.379052][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  179.494631][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  179.564651][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  179.614652][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  179.626471][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0
[  179.633739][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  179.660147][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  179.672299][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state
[  179.680350][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state
[  179.687804][ T5775] bridge_slave_0: entered allmulticast mode
[  179.697062][ T5775] bridge_slave_0: entered promiscuous mode
[  179.710839][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state
[  179.718732][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state
[  179.726216][ T5775] bridge_slave_1: entered allmulticast mode
[  179.737673][ T5775] bridge_slave_1: entered promiscuous mode
[  179.797402][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1
[  179.804668][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  179.830912][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  179.868335][ T5778] Bluetooth: hci0: command tx timeout
[  179.902607][ T5771] team0: Port device team_slave_0 added
[  179.915897][ T5771] team0: Port device team_slave_1 added
[  179.948433][ T5778] Bluetooth: hci1: command tx timeout
[  179.948633][ T5071] Bluetooth: hci2: command tx timeout
[  180.046051][ T5784] team0: Port device team_slave_0 added
[  180.061323][ T5784] team0: Port device team_slave_1 added
[  180.083265][ T5776] hsr_slave_0: entered promiscuous mode
[  180.091912][ T5776] hsr_slave_1: entered promiscuous mode
[  180.108907][ T5071] Bluetooth: hci3: command tx timeout
[  180.108949][ T5778] Bluetooth: hci4: command tx timeout
[  180.114232][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  180.223134][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  180.234612][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0
[  180.242050][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  180.269643][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  180.306937][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0
[  180.314191][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  180.340635][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  180.398768][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1
[  180.405927][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  180.432367][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  180.468793][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1
[  180.475814][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  180.502047][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  180.578969][ T5774] hsr_slave_0: entered promiscuous mode
[  180.587173][ T5774] hsr_slave_1: entered promiscuous mode
[  180.595396][ T5774] debugfs: 'hsr0' already exists in 'hsr'
[  180.601410][ T5774] Cannot create hsr debugfs directory
[  180.651861][ T5775] team0: Port device team_slave_0 added
[  180.669100][ T5775] team0: Port device team_slave_1 added
[  180.818654][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0
[  180.825697][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  180.852015][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  180.941832][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1
[  180.949045][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  180.975372][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  181.001280][ T5771] hsr_slave_0: entered promiscuous mode
[  181.010002][ T5771] hsr_slave_1: entered promiscuous mode
[  181.017530][ T5771] debugfs: 'hsr0' already exists in 'hsr'
[  181.023565][ T5771] Cannot create hsr debugfs directory
[  181.122773][ T5784] hsr_slave_0: entered promiscuous mode
[  181.131440][ T5784] hsr_slave_1: entered promiscuous mode
[  181.139597][ T5784] debugfs: 'hsr0' already exists in 'hsr'
[  181.145463][ T5784] Cannot create hsr debugfs directory
[  181.484909][ T5775] hsr_slave_0: entered promiscuous mode
[  181.493869][ T5775] hsr_slave_1: entered promiscuous mode
[  181.502071][ T5775] debugfs: 'hsr0' already exists in 'hsr'
[  181.507985][ T5775] Cannot create hsr debugfs directory
[  181.948476][ T5071] Bluetooth: hci0: command tx timeout
[  182.028492][ T5778] Bluetooth: hci1: command tx timeout
[  182.034385][ T5071] Bluetooth: hci2: command tx timeout
[  182.188385][ T5071] Bluetooth: hci3: command tx timeout
[  182.198419][ T5778] Bluetooth: hci4: command tx timeout
[  182.282609][ T5776] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  182.326772][ T5776] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  182.367760][ T5776] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  182.387026][ T5776] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  182.545356][ T5774] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  182.580356][ T5774] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  182.602460][ T5774] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  182.633102][ T5774] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  182.811222][ T5784] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  182.842914][ T5784] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  182.864014][ T5784] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  182.923604][ T5784] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  183.125781][ T5771] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  183.154555][ T5771] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  183.180839][ T5771] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  183.209648][ T5771] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  183.441398][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0
[  183.571291][ T5775] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  183.597915][ T5776] 8021q: adding VLAN 0 to HW filter on device team0
[  183.624367][ T5775] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  183.670735][ T5775] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  183.707235][ T3487] bridge0: port 1(bridge_slave_0) entered blocking state
[  183.714595][ T3487] bridge0: port 1(bridge_slave_0) entered forwarding state
[  183.737127][ T5775] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  183.779508][ T3487] bridge0: port 2(bridge_slave_1) entered blocking state
[  183.787000][ T3487] bridge0: port 2(bridge_slave_1) entered forwarding state
[  184.028719][ T5071] Bluetooth: hci0: command tx timeout
[  184.060866][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0
[  184.109880][ T5071] Bluetooth: hci2: command tx timeout
[  184.115468][ T5071] Bluetooth: hci1: command tx timeout
[  184.210904][ T5774] 8021q: adding VLAN 0 to HW filter on device team0
[  184.270148][ T5778] Bluetooth: hci4: command tx timeout
[  184.275850][ T5071] Bluetooth: hci3: command tx timeout
[  184.356242][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0
[  184.387758][  T146] bridge0: port 1(bridge_slave_0) entered blocking state
[  184.395393][  T146] bridge0: port 1(bridge_slave_0) entered forwarding state
[  184.451383][  T146] bridge0: port 2(bridge_slave_1) entered blocking state
[  184.458927][  T146] bridge0: port 2(bridge_slave_1) entered forwarding state
[  184.578038][ T5784] 8021q: adding VLAN 0 to HW filter on device team0
[  184.675845][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[  184.683242][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[  184.732159][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0
[  184.752972][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[  184.760557][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[  184.881002][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0
[  185.157438][ T5775] 8021q: adding VLAN 0 to HW filter on device team0
[  185.171524][ T5771] 8021q: adding VLAN 0 to HW filter on device team0
[  185.310409][   T79] bridge0: port 1(bridge_slave_0) entered blocking state
[  185.317891][   T79] bridge0: port 1(bridge_slave_0) entered forwarding state
[  185.336706][   T79] bridge0: port 1(bridge_slave_0) entered blocking state
[  185.344238][   T79] bridge0: port 1(bridge_slave_0) entered forwarding state
[  185.377562][   T79] bridge0: port 2(bridge_slave_1) entered blocking state
[  185.385091][   T79] bridge0: port 2(bridge_slave_1) entered forwarding state
[  185.436910][   T79] bridge0: port 2(bridge_slave_1) entered blocking state
[  185.444531][   T79] bridge0: port 2(bridge_slave_1) entered forwarding state
[  185.597560][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0
[  186.245405][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0
[  187.051537][ T5774] veth0_vlan: entered promiscuous mode
[  187.165652][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0
[  187.256190][ T5774] veth1_vlan: entered promiscuous mode
[  187.385837][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0
[  187.633513][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0
[  187.647014][ T5774] veth0_macvtap: entered promiscuous mode
[  187.663600][ T5784] veth0_vlan: entered promiscuous mode
[  187.703754][ T5774] veth1_macvtap: entered promiscuous mode
[  187.736665][ T5776] veth0_vlan: entered promiscuous mode
[  187.811446][ T5784] veth1_vlan: entered promiscuous mode
[  187.853129][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0
[  187.864715][ T5776] veth1_vlan: entered promiscuous mode
[  187.923248][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1
[  188.055215][   T34] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  188.069127][   T34] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  188.084069][ T5771] veth0_vlan: entered promiscuous mode
[  188.105752][   T34] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  188.119239][   T34] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  188.207518][ T5771] veth1_vlan: entered promiscuous mode
[  188.377987][ T5784] veth0_macvtap: entered promiscuous mode
[  188.397514][ T5775] veth0_vlan: entered promiscuous mode
[  188.434488][ T5784] veth1_macvtap: entered promiscuous mode
[  188.471887][ T5776] veth0_macvtap: entered promiscuous mode
[  188.533227][ T5775] veth1_vlan: entered promiscuous mode
[  188.577918][ T5776] veth1_macvtap: entered promiscuous mode
[  188.683754][ T5771] veth0_macvtap: entered promiscuous mode
[  188.703787][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0
[  188.768369][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1
[  188.777062][ T5771] veth1_macvtap: entered promiscuous mode
[  188.865113][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0
[  188.916510][  T146] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  188.991997][  T146] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  189.015995][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1
[  189.066072][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0
[  189.125540][  T146] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  189.138358][  T146] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  189.235802][   T34] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  189.261265][   T34] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  189.303061][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1
[  189.323562][ T5775] veth0_macvtap: entered promiscuous mode
[  189.349537][   T34] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  189.369264][   T34] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  189.494353][ T5775] veth1_macvtap: entered promiscuous mode
[  189.529901][   T79] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  189.568373][   T79] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  189.653600][   T79] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  189.692958][   T79] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  189.837268][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0
[  189.930925][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1
[  190.105725][  T146] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  190.142557][  T146] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  190.206663][   T48] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  190.256515][   T48] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  192.817613][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  192.868368][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  193.133217][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  193.178660][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  193.668027][ T5774] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  194.525388][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  194.567479][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  194.901724][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  194.948750][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  195.118971][ T5955] loop2: detected capacity change from 0 to 256
[  195.363627][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.416236][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  195.688420][   T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.696428][   T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  195.999334][ T5961] genirq: Flags mismatch irq 10. 00200000 (pcl812) vs. 00200080 (virtio2)
[  196.063911][   T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  196.115290][   T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  196.466341][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  196.513234][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  196.810033][   T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  196.871617][   T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  197.365592][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  197.425774][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  197.901080][ T5977] loop0: detected capacity change from 0 to 164
[  198.710008][ T5983] warning: `syz.1.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  199.110702][ T5988] =====================================================
[  199.117925][ T5988] BUG: KMSAN: uninit-value in dvb_demux_read+0x580/0xa40
[  199.125467][ T5988]  dvb_demux_read+0x580/0xa40
[  199.130649][ T5988]  vfs_readv+0x931/0xf30
[  199.135124][ T5988]  __ia32_compat_sys_preadv+0x2da/0x540
[  199.141103][ T5988]  ia32_sys_call+0x3e87/0x4360
[  199.146057][ T5988]  __do_fast_syscall_32+0x17f/0x3f0
[  199.152224][ T5988]  do_fast_syscall_32+0x37/0x80
[  199.157214][ T5988]  do_SYSENTER_32+0x1f/0x30
[  199.162401][ T5988]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  199.169412][ T5988] 
[  199.171809][ T5988] Uninit was created at:
[  199.176259][ T5988]  __alloc_frozen_pages_noprof+0x6f7/0x1020
[  199.185393][ T5988]  alloc_pages_mpol+0x328/0x860
[  199.192024][ T5988]  alloc_pages_noprof+0x101/0x280
[  199.197230][ T5988]  __vmalloc_node_range_noprof+0xa97/0x2d80
[  199.203407][ T5988]  __vmalloc_noprof+0x128/0x1f0
[  199.208503][ T5988]  vmalloc_array_noprof+0x48/0x80
[  199.213702][ T5988]  dvb_dmxdev_init+0xd8/0x680
[  199.219825][ T5988]  vidtv_bridge_probe+0x1bfd/0x2690
[  199.225457][ T5988]  platform_probe+0x213/0x370
[  199.230557][ T5988]  really_probe+0x4d5/0xe40
[  199.235277][ T5988]  __driver_probe_device+0x25e/0x370
[  199.240908][ T5988]  driver_probe_device+0x70/0x8f0
[  199.246165][ T5988]  __driver_attach+0x859/0xad0
[  199.251301][ T5988]  bus_for_each_dev+0x33b/0x580
[  199.256298][ T5988]  driver_attach+0x51/0x70
[  199.261068][ T5988]  bus_add_driver+0x54f/0xdb0
[  199.265920][ T5988]  driver_register+0x42e/0x6a0
[  199.271048][ T5988]  __platform_driver_register+0x65/0x80
[  199.276784][ T5988]  vidtv_bridge_init+0x73/0x100
[  199.281939][ T5988]  do_one_initcall+0x237/0xbb0
[  199.290594][ T5988]  do_initcall_level+0x157/0x350
[  199.295764][ T5988]  do_initcalls+0x176/0x310
[  199.301875][ T5988]  do_basic_setup+0x1d/0x30
[  199.306569][ T5988]  kernel_init_freeable+0x213/0x460
[  199.313806][ T5988]  kernel_init+0x2f/0x5e0
[  199.318754][ T5988]  ret_from_fork+0x20f/0x910
[  199.323512][ T5988]  ret_from_fork_asm+0x1a/0x30
[  199.328671][ T5988] 
[  199.331121][ T5988] CPU: 1 UID: 0 PID: 5988 Comm: syz.0.15 Not tainted syzkaller #0 PREEMPT(full) 
[  199.340573][ T5988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  199.350997][ T5988] =====================================================
[  199.358043][ T5988] Disabling lock debugging due to kernel taint
[  199.449130][ T5988] Kernel panic - not syncing: kmsan.panic set ...
[  199.455713][ T5988] CPU: 0 UID: 0 PID: 5988 Comm: syz.0.15 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  199.466564][ T5988] Tainted: [B]=BAD_PAGE
[  199.470804][ T5988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  199.480997][ T5988] Call Trace:
[  199.484406][ T5988]  <TASK>
[  199.487412][ T5988]  __dump_stack+0x26/0x30
[  199.491932][ T5988]  dump_stack_lvl+0x50/0x1c0
[  199.496705][ T5988]  ? dump_stack+0x12/0x25
[  199.501188][ T5988]  dump_stack+0x1e/0x25
[  199.505508][ T5988]  vpanic+0x7b4/0x1430
[  199.509748][ T5988]  panic+0x15d/0x160
[  199.513867][ T5988]  kmsan_report+0x31a/0x320
[  199.518539][ T5988]  ? __msan_warning+0x1b/0x30
[  199.523352][ T5988]  ? dvb_demux_read+0x580/0xa40
[  199.528362][ T5988]  ? vfs_readv+0x931/0xf30
[  199.532953][ T5988]  ? __ia32_compat_sys_preadv+0x2da/0x540
[  199.538855][ T5988]  ? ia32_sys_call+0x3e87/0x4360
[  199.543912][ T5988]  ? __do_fast_syscall_32+0x17f/0x3f0
[  199.549420][ T5988]  ? do_fast_syscall_32+0x37/0x80
[  199.554570][ T5988]  ? do_SYSENTER_32+0x1f/0x30
[  199.559367][ T5988]  ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  199.566065][ T5988]  ? __rcu_read_unlock+0x6c/0xd0
[  199.571161][ T5988]  ? aa_file_perm+0x417/0x27c0
[  199.576098][ T5988]  ? aa_file_perm+0x532/0x27c0
[  199.581001][ T5988]  ? stack_depot_save_flags+0x35/0x790
[  199.586625][ T5988]  ? kmsan_get_metadata+0xf1/0x160
[  199.591902][ T5988]  ? kmsan_get_metadata+0xf1/0x160
[  199.597209][ T5988]  ? kmsan_get_metadata+0xf1/0x160
[  199.602505][ T5988]  ? kmsan_get_metadata+0x146/0x160
[  199.607865][ T5988]  ? kmsan_internal_set_shadow_origin+0x7a/0x110
[  199.614352][ T5988]  ? __pfx_dvb_demux_read+0x10/0x10
[  199.619721][ T5988]  ? kmsan_get_metadata+0x146/0x160
[  199.625134][ T5988]  __msan_warning+0x1b/0x30
[  199.629785][ T5988]  dvb_demux_read+0x580/0xa40
[  199.634679][ T5988]  ? __pfx_dvb_demux_read+0x10/0x10
[  199.640044][ T5988]  vfs_readv+0x931/0xf30
[  199.644537][ T5988]  ? kmsan_get_metadata+0xf1/0x160
[  199.649823][ T5988]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  199.655843][ T5988]  __ia32_compat_sys_preadv+0x2da/0x540
[  199.661586][ T5988]  ia32_sys_call+0x3e87/0x4360
[  199.666508][ T5988]  __do_fast_syscall_32+0x17f/0x3f0
[  199.671845][ T5988]  do_fast_syscall_32+0x37/0x80
[  199.676822][ T5988]  do_SYSENTER_32+0x1f/0x30
[  199.681445][ T5988]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  199.687950][ T5988] RIP: 0023:0xf7f32f6c
[  199.692120][ T5988] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad
[  199.711879][ T5988] RSP: 002b:00000000f53f650c EFLAGS: 00000206 ORIG_RAX: 000000000000014d
[  199.720442][ T5988] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000480
[  199.728545][ T5988] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 000000000000000d
[  199.736606][ T5988] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  199.744666][ T5988] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  199.752733][ T5988] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  199.760842][ T5988]  </TASK>
[  199.764557][ T5988] Kernel Offset: disabled
[  199.768939][ T5988] Rebooting in 86400 seconds..