last executing test programs: 26.847767952s ago: executing program 3 (id=4): syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000"], 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000380), 0x3, 0xbc01) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000180)=""/135) 25.407544999s ago: executing program 1 (id=2): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r5 = dup3(r3, r4, 0x0) ioctl$MON_IOCG_STATS(r5, 0xc0109207, &(0x7f00000001c0)) socket(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb3c5ca683a4b6fc89398f2b9000f224891060017c4700de60beac671e8e8fdecb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d18a93ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4a801efdf008499d7aca1afac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@map=r8, r7, 0x26}, 0x10) 25.240836531s ago: executing program 2 (id=6): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r5 = dup3(r3, r4, 0x0) ioctl$MON_IOCG_STATS(r5, 0xc0109207, &(0x7f00000001c0)) socket(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb3c5ca683a4b6fc89398f2b9000f224891060017c4700de60beac671e8e8fdecb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d18a93ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4a801efdf008499d7aca1afac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@map=r8, r7, 0x26}, 0x10) 24.572900028s ago: executing program 0 (id=1): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) fsopen(0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) unshare(0x6a040000) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x844) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000600)={r0, r0, 0x2008, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) 24.246592052s ago: executing program 3 (id=7): syz_usb_connect(0x2, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100008020f010402038b1ff0104000001090238000100000000090400000544fb2f000905"], 0x0) 21.209128575s ago: executing program 1 (id=8): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007882b740422c0917b7ca010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x40, 0x1, 0x1, 'q'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000380)={0x20, 0x3, 0x1, 'Z'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 20.546614385s ago: executing program 2 (id=9): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) fsopen(0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) unshare(0x6a040000) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x844) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000600)={r1, r1, 0x2008, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0xf3021be2a65b013}, 0x0) 19.248819533s ago: executing program 3 (id=10): ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x2, [], [0x2], [0x0, 0x6c], [0xfffffffffffffffc]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180), 0x4) r0 = syz_open_procfs(0x0, 0x0) read$char_usb(r0, &(0x7f0000000040)=""/4109, 0x100d) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0xd, 0x3, &(0x7f0000000280)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xb8}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) getpeername$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x1d, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000880)='GPL\x00', 0x8, 0x19, &(0x7f00000008c0)=""/25, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000940)={0x0, 0x3, 0x8, 0xc7}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000980)=[0x1, 0xffffffffffffffff], &(0x7f00000009c0)=[{0x0, 0x4, 0xa, 0x4}, {0x1, 0x3, 0x7, 0x1}], 0x10, 0x10000}, 0x94) signalfd4(0xffffffffffffffff, &(0x7f0000000ac0)={[0x1]}, 0x8, 0x80000) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x82, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0xa0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='highspeed', 0x9) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r3, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @time={0x0, 0x5}, {0x5, 0x1}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick=0x2, {}, {}, @queue={0x2, {0x2, 0x4}}}, {0x0, 0x0, 0x0, 0x0, @tick, {0x0, 0x4}, {0x0, 0x10}, @queue={0x0, {0x4, 0x8001}}}], 0x54) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) 17.442042491s ago: executing program 0 (id=11): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 12.66673982s ago: executing program 4 (id=5): syz_clone3(&(0x7f0000000000)={0x82040480, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3}, 0x58) 12.013504975s ago: executing program 2 (id=12): syz_usb_connect(0x2, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100008020f010402038b1ff0104000001090238000100000000090400000544fb2f000905"], 0x0) 11.790856656s ago: executing program 0 (id=13): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0x341102, 0x0) memfd_secret(0x80000) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x95) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000340)={0x2000, r4}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x115883, 0x0) close(0xffffffffffffffff) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) landlock_restrict_self(r3, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) 11.757675647s ago: executing program 1 (id=14): unshare(0x80) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/time_for_children\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r5, 0x890c, &(0x7f0000000300)={0x1, @null, @bpq0, 0xe, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffeff, 0x0, [@bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) sendmsg$rds(r3, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x9}]}) close_range(r6, 0xffffffffffffffff, 0x0) 9.536330906s ago: executing program 3 (id=15): socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b2100000095f5758483"], 0x0}, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) r2 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCSREPORT(r2, 0x81044804, 0x0) 7.288697603s ago: executing program 0 (id=16): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x6, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0xfffffffa, 0xffff2d33, 0x1dd2, 0x6, 0x7, 0x0, 0x80000000, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x3, 0x3, 0x107fff, 0x4c74, 0xfbf5, 0x0, 0xb, 0xa, 0x0, 0x71, 0x7, 0x2000007, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0x6, 0x3, 0x4, 0x4, 0x8, 0x0, 0x7f, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0x8, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0xfffff000, 0xfffffffe, 0x8, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x0, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x801, 0x8, 0x4, 0x0, 0x106, 0x2, 0x8, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x83, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xd, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x387d, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x80002, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x20005, 0x6, 0x54fe12d2, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x2000008, 0x2], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce5, 0x1fd, 0x6, 0x5, 0x5, 0x40000003, 0x100, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x5, 0xffffffff, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffb, 0x5, 0x8, 0xc8, 0x3, 0x3, 0x80ffff, 0x200003, 0x5, 0x80000000, 0x9602, 0xa, 0x2, 0x4, 0x10, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x3, 0x8, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x1004) 5.837542967s ago: executing program 2 (id=17): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000009c0)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x4804) 5.728284106s ago: executing program 4 (id=18): r0 = socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) r2 = msgget$private(0x0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x2c9883) readv(r3, &(0x7f0000000240)=[{&(0x7f0000002580)=""/4096, 0x1000}], 0x1) msgsnd(r2, &(0x7f0000000340)=ANY=[@ANYRES16=r0], 0x2000, 0x800) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000001740)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xd9000}, 0x1, 0x2}) 5.331485291s ago: executing program 1 (id=19): syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x28002) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000240)) r4 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r4, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x43, 0x0) r5 = pidfd_getfd(r3, r3, 0x0) setns(r5, 0x66020000) open_tree(0xffffffffffffffff, 0x0, 0x89901) umount2(&(0x7f0000000040)='.\x00', 0x2) syz_open_procfs(0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000100)={'wpan4\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 4.285383398s ago: executing program 2 (id=20): unshare(0x80) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/time_for_children\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r5, 0x890c, &(0x7f0000000300)={0x1, @null, @bpq0, 0xe, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffeff, 0x0, [@bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) sendmsg$rds(r3, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x9}]}) close_range(r6, 0xffffffffffffffff, 0x0) 3.925326849s ago: executing program 4 (id=21): syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f2, 0x1421, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0xfe, 0xfd, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x8, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4, 0x2, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$sierra_net(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0x31, 0x9, {0x9, 0x10, "a02022d4532b04"}}, &(0x7f00000000c0)={0x0, 0x3, 0x8f, @string={0x8f, 0x3, "1f2d5a1c72b8799b25799e760445cfb64e83079df790760cb3317a4fc8083b422b4c63e2e9f0e713c43d5b58ec83a106021f4f181f6666ae4bab56222fe4b54481ce25e95b81058823c2da44b5ed8bbac46ead6bedd9d312d60f5bc7d1b3f90aa0052742a28409b97c78e13a995bcd7b5e30c1ccfce97eda5d0d3feed759a7f6158b84b8e5fc088ee840b2f041"}}}, &(0x7f0000000300)={0x1c, &(0x7f00000001c0)={0x20, 0xb, 0xea, "2536e4cb3134fc7e08de9957cd423a6ffee35429cba56bf7a65589334c46a99def47b69eee4ae9c485be2c63cfdb75cc1f6903b4328ff6df48d8b6f35194d2a33ac920efa061ffc77d35bf53be03bfea5fcf5b55d506fbe761f2e8c6c6557167711647c7e74ec333b3de735f821781c8a074c51462848acf443dacb22bf38812bfbc8bd1b1afc4fb68b1c4ae530e5dad53a952d0b960e2e648142eac9a6490f5a51a18e7767c73f5798445626cd2cd5b5e1d1a9c64796fe9591b16935756731c2edec17e42664f68053c558b44cc242c28e09aab9c9e009087bf682257b5cdcb5e80dcbc9a324d36774c"}, &(0x7f0000000440)={0xa1, 0x1, 0x400, "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"}, &(0x7f00000002c0)={0x21, 0x0, 0x3, "efcfb5"}}) r1 = socket(0x29, 0x805, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000040)=0x7fffffff, 0x4) read(r0, &(0x7f0000000380)=""/144, 0x90) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 776.541594ms ago: executing program 3 (id=22): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x6f5e, 0xa940) ioctl$FIBMAP(r0, 0x227f, &(0x7f0000000040)=0x85) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r1 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000000)={0xefb8, 0x1, 0x2, 0x3, 0x4}) 0s ago: executing program 2 (id=23): socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00007c2000/0x4000)=nil, &(0x7f00009dc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000726000/0x13000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) socket$rds(0x15, 0x5, 0x0) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.219' (ED25519) to the list of known hosts. [ 193.869335][ T5760] cgroup: Unknown subsys name 'net' [ 194.000217][ T5760] cgroup: Unknown subsys name 'cpuset' [ 194.015834][ T5760] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 200.844130][ T5760] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 205.628118][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 205.652947][ T5785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 205.662242][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 205.670859][ T5785] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 205.681133][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 205.690213][ T5789] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 205.707119][ T5785] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 205.707291][ T5790] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 205.717654][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 205.735873][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 205.746459][ T5785] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 205.755039][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 205.761826][ T5792] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 205.772431][ T5792] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 205.796258][ T5789] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 205.802227][ T5792] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 205.806321][ T5789] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 205.812798][ T5792] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 205.819758][ T5789] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 205.826311][ T5792] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 205.839249][ T5789] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 205.843462][ T5789] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 205.876666][ T5792] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 205.922958][ T5078] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 205.955464][ T5078] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 207.751534][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 207.845840][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 207.935133][ T5786] Bluetooth: hci2: command tx timeout [ 207.940958][ T5786] Bluetooth: hci1: command tx timeout [ 207.947773][ T5078] Bluetooth: hci4: command tx timeout [ 207.953364][ T5078] Bluetooth: hci0: command tx timeout [ 208.062454][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 208.094776][ T5078] Bluetooth: hci3: command tx timeout [ 208.097700][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 208.534758][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 209.112851][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.120803][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.128834][ T5778] bridge_slave_0: entered allmulticast mode [ 209.137667][ T5778] bridge_slave_0: entered promiscuous mode [ 209.223534][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.231916][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.255210][ T5779] bridge_slave_0: entered allmulticast mode [ 209.275387][ T5779] bridge_slave_0: entered promiscuous mode [ 209.354852][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.362447][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.437171][ T5778] bridge_slave_1: entered allmulticast mode [ 209.461531][ T5778] bridge_slave_1: entered promiscuous mode [ 209.549956][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.557741][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.568616][ T5779] bridge_slave_1: entered allmulticast mode [ 209.579325][ T5779] bridge_slave_1: entered promiscuous mode [ 209.659304][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.667007][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.676843][ T5787] bridge_slave_0: entered allmulticast mode [ 209.686096][ T5787] bridge_slave_0: entered promiscuous mode [ 209.708713][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.786323][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.796768][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.804620][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.812299][ T5787] bridge_slave_1: entered allmulticast mode [ 209.821474][ T5787] bridge_slave_1: entered promiscuous mode [ 209.839116][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.913253][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.978051][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.985987][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.993936][ T5780] bridge_slave_0: entered allmulticast mode [ 210.003238][ T5780] bridge_slave_0: entered promiscuous mode [ 210.014965][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.022533][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.030255][ T5078] Bluetooth: hci0: command tx timeout [ 210.036309][ T5786] Bluetooth: hci1: command tx timeout [ 210.037362][ T5793] bridge_slave_0: entered allmulticast mode [ 210.041965][ T5782] Bluetooth: hci4: command tx timeout [ 210.053115][ T5793] bridge_slave_0: entered promiscuous mode [ 210.053568][ T5792] Bluetooth: hci2: command tx timeout [ 210.153376][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.161286][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.169465][ T5780] bridge_slave_1: entered allmulticast mode [ 210.175746][ T5782] Bluetooth: hci3: command tx timeout [ 210.183833][ T5780] bridge_slave_1: entered promiscuous mode [ 210.195475][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.203108][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.211760][ T5793] bridge_slave_1: entered allmulticast mode [ 210.220569][ T5793] bridge_slave_1: entered promiscuous mode [ 210.271192][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.290208][ T5778] team0: Port device team_slave_0 added [ 210.360138][ T5779] team0: Port device team_slave_0 added [ 210.377490][ T5779] team0: Port device team_slave_1 added [ 210.391270][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.408854][ T5778] team0: Port device team_slave_1 added [ 210.566842][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.586302][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.686408][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.703426][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.740638][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.747898][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.774239][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.795228][ T5787] team0: Port device team_slave_0 added [ 210.824740][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.831959][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.858204][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.929314][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.936555][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.962995][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.997068][ T5787] team0: Port device team_slave_1 added [ 211.006782][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.013923][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.040473][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.086563][ T5793] team0: Port device team_slave_0 added [ 211.152801][ T5780] team0: Port device team_slave_0 added [ 211.167611][ T5793] team0: Port device team_slave_1 added [ 211.217951][ T5780] team0: Port device team_slave_1 added [ 211.323554][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.330863][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.357233][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.470642][ T5779] hsr_slave_0: entered promiscuous mode [ 211.479671][ T5779] hsr_slave_1: entered promiscuous mode [ 211.492044][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.499199][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.525498][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.567007][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.574160][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.600618][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.660881][ T5778] hsr_slave_0: entered promiscuous mode [ 211.669771][ T5778] hsr_slave_1: entered promiscuous mode [ 211.680009][ T5778] debugfs: 'hsr0' already exists in 'hsr' [ 211.686200][ T5778] Cannot create hsr debugfs directory [ 211.713672][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.720983][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.747642][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.762097][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.769525][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.795916][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.818748][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.826100][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.852587][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.094889][ T5782] Bluetooth: hci2: command tx timeout [ 212.095014][ T5786] Bluetooth: hci4: command tx timeout [ 212.100615][ T5792] Bluetooth: hci0: command tx timeout [ 212.106351][ T5786] Bluetooth: hci1: command tx timeout [ 212.254851][ T5786] Bluetooth: hci3: command tx timeout [ 212.261957][ T5787] hsr_slave_0: entered promiscuous mode [ 212.270989][ T5787] hsr_slave_1: entered promiscuous mode [ 212.279328][ T5787] debugfs: 'hsr0' already exists in 'hsr' [ 212.285263][ T5787] Cannot create hsr debugfs directory [ 212.395294][ T5780] hsr_slave_0: entered promiscuous mode [ 212.404150][ T5780] hsr_slave_1: entered promiscuous mode [ 212.412574][ T5780] debugfs: 'hsr0' already exists in 'hsr' [ 212.418654][ T5780] Cannot create hsr debugfs directory [ 212.440587][ T5793] hsr_slave_0: entered promiscuous mode [ 212.449666][ T5793] hsr_slave_1: entered promiscuous mode [ 212.458237][ T5793] debugfs: 'hsr0' already exists in 'hsr' [ 212.464125][ T5793] Cannot create hsr debugfs directory [ 213.750125][ T5779] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 213.788721][ T5779] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 213.811988][ T5779] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 213.847104][ T5779] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 213.980395][ T5778] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 214.055191][ T5778] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 214.079351][ T5778] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 214.101056][ T5778] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 214.175157][ T5786] Bluetooth: hci0: command tx timeout [ 214.177089][ T5792] Bluetooth: hci1: command tx timeout [ 214.180759][ T5786] Bluetooth: hci2: command tx timeout [ 214.187444][ T5792] Bluetooth: hci4: command tx timeout [ 214.339937][ T5792] Bluetooth: hci3: command tx timeout [ 214.357225][ T5787] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 214.398605][ T5787] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 214.439360][ T5787] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 214.498927][ T5787] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 214.796096][ T5780] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 214.852668][ T5780] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 214.912010][ T5780] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 214.956486][ T5780] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 215.018528][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.212967][ T5793] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 215.294353][ T5793] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 215.350448][ T5793] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 215.404111][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.417368][ T5793] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 215.622436][ T1025] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.630085][ T1025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.660849][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.731353][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.739083][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.913896][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.962082][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.065267][ T1025] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.072935][ T1025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.089125][ T1025] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.096669][ T1025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.360956][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.480881][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.488539][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.632229][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.683682][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.691401][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.792618][ T5778] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 216.965431][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.183422][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.191106][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.285445][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.292983][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.346324][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.763269][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.885113][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.892786][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.028558][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.036269][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.110490][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.374938][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.922365][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.037445][ T5779] veth0_vlan: entered promiscuous mode [ 219.207300][ T5778] veth0_vlan: entered promiscuous mode [ 219.267743][ T5779] veth1_vlan: entered promiscuous mode [ 219.412828][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.435361][ T5778] veth1_vlan: entered promiscuous mode [ 219.806538][ T5779] veth0_macvtap: entered promiscuous mode [ 219.858737][ T5787] veth0_vlan: entered promiscuous mode [ 219.900077][ T5779] veth1_macvtap: entered promiscuous mode [ 220.014181][ T5787] veth1_vlan: entered promiscuous mode [ 220.111324][ T5778] veth0_macvtap: entered promiscuous mode [ 220.139379][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.149257][ T5780] veth0_vlan: entered promiscuous mode [ 220.218046][ T5778] veth1_macvtap: entered promiscuous mode [ 220.248071][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.313029][ T5780] veth1_vlan: entered promiscuous mode [ 220.401203][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.597463][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.642093][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.676536][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.747531][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.855540][ T5787] veth0_macvtap: entered promiscuous mode [ 220.883736][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.940867][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.053398][ T5787] veth1_macvtap: entered promiscuous mode [ 221.157044][ T1025] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.209595][ T1025] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.278519][ T1025] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.293874][ T5780] veth0_macvtap: entered promiscuous mode [ 221.376028][ T1025] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.420811][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.501736][ T5780] veth1_macvtap: entered promiscuous mode [ 221.621520][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.798455][ T35] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.851565][ T35] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.923845][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.026837][ T35] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.102863][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.149689][ T1025] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.263281][ T1025] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.377514][ T1025] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.450682][ T1025] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.490478][ T1025] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.767998][ T5793] veth0_vlan: entered promiscuous mode [ 222.912773][ T5793] veth1_vlan: entered promiscuous mode [ 223.477539][ T5793] veth0_macvtap: entered promiscuous mode [ 223.585307][ T5793] veth1_macvtap: entered promiscuous mode [ 223.841102][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.922700][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.070093][ T2961] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.122020][ T2961] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.189507][ T2961] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.228853][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.954912][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.962987][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.241572][ T1025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.250424][ T1025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.673460][ T1133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.681722][ T1133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.857551][ T5779] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 228.997664][ T5905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.005911][ T5905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.410205][ T5905] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.418464][ T5905] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.743169][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.750394][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 229.843054][ T5835] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 229.891830][ T1025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.900007][ T1025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.072296][ T5835] usb 4-1: Using ep0 maxpacket: 16 [ 230.107179][ T5835] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.122303][ T5835] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 230.199897][ T5835] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 230.209643][ T5835] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 230.218220][ T5835] usb 4-1: Product: syz [ 230.227494][ T5835] usb 4-1: Manufacturer: syz [ 230.232334][ T5835] usb 4-1: SerialNumber: syz [ 230.386347][ T5835] usb 4-1: config 0 descriptor?? [ 230.390819][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.401170][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.739508][ T5835] usb 4-1: USB disconnect, device number 2 [ 230.784139][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.792618][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.823367][ T5989] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 234.354842][ T24] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 234.753516][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.805069][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 234.828371][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 234.927822][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.ff [ 234.942106][ T24] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 234.953077][ T24] usb 4-1: Manufacturer: syz [ 235.080132][ T24] usb 4-1: config 0 descriptor?? [ 235.384962][ T2140] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 235.395812][ T24] usb 4-1: USB disconnect, device number 3 [ 235.656536][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.661544][ T2140] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 235.664682][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.682218][ T2140] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.690851][ T2140] usb 2-1: Product: syz [ 235.696891][ T2140] usb 2-1: Manufacturer: syz [ 235.701716][ T2140] usb 2-1: SerialNumber: syz [ 235.900112][ T2140] usb 2-1: config 0 descriptor?? [ 236.036472][ T5905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.044982][ T5905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.733415][ T2140] usb 2-1: f81604_read: reg: 100f failed: -EPROTO [ 239.747400][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 240.730279][ T2140] usb 2-1: f81604_read: reg: 200f failed: -EPROTO [ 240.761012][ T2140] usb 2-1: USB disconnect, device number 2 [ 241.730465][ T2140] usb 2-1: f81604_read: reg: 100f failed: -ENODEV [ 243.435921][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 243.536145][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 243.700019][ T2140] usb 2-1: f81604_read: reg: 200f failed: -ENODEV [ 243.927692][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 244.046381][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 244.048369][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 244.059320][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 244.072392][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 244.253016][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 244.495837][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 244.582787][ T24] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 244.835216][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.401515][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 245.416630][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 246.463609][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.ff [ 246.473367][ T24] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 246.481801][ T24] usb 3-1: Manufacturer: syz [ 248.097756][ T30] audit: type=1326 audit(1770657576.690:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6014 comm="syz.1.14" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f32ae59af79 code=0x0 [ 248.307751][ T24] usb 3-1: config 0 descriptor?? [ 250.034656][ T24] usb 3-1: can't set config #0, error -71 [ 250.096984][ T5835] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 250.217097][ T24] usb 3-1: USB disconnect, device number 2 [ 250.471040][ T5835] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.482594][ T5835] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.492787][ T5835] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 250.509895][ T5835] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 250.521106][ T5835] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.812106][ T5835] usb 4-1: config 0 descriptor?? [ 251.563131][ T5835] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 252.958105][ T2140] usb 4-1: reset high-speed USB device number 4 using dummy_hcd [ 253.080192][ T30] audit: type=1326 audit(1770657581.640:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6043 comm="syz.2.20" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f936139af79 code=0x0 [ 254.405259][ T5839] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 254.779934][ T5839] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 254.791338][ T5839] usb 5-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 255.045254][ T5839] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 255.056499][ T5839] usb 5-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 255.293200][ T5839] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 255.316535][ T5839] usb 5-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 255.570451][ T5839] usb 5-1: string descriptor 0 read error: -22 [ 255.626278][ T5839] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 255.635959][ T5839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.722560][ T5839] usb 5-1: rejected 3 configurations due to insufficient available bus power [ 255.732486][ T5839] usb 5-1: no configuration chosen from 3 choices [ 255.932160][ T10] usb 4-1: USB disconnect, device number 4 [ 256.079615][ T6050] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 256.090352][ T6050] ===================================================== [ 256.099237][ T6050] BUG: KMSAN: uninit-value in dvbdmx_release_ts_feed+0x198/0x290 [ 256.115089][ T6050] dvbdmx_release_ts_feed+0x198/0x290 [ 256.122285][ T6050] dvb_dmxdev_filter_start+0x1187/0x1af0 [ 256.131204][ T6050] dvb_dmxdev_pes_filter_set+0x810/0x860 [ 256.138077][ T6050] dvb_demux_do_ioctl+0x9a3/0xc80 [ 256.143331][ T6050] dvb_usercopy+0x263/0x500 [ 256.148106][ T6050] dvb_demux_ioctl+0x46/0x70 [ 256.152887][ T6050] __se_sys_ioctl+0x23c/0x400 [ 256.157957][ T6050] __x64_sys_ioctl+0x97/0xe0 [ 256.162652][ T6050] x64_sys_call+0x18a7/0x3e70 [ 256.167631][ T6050] do_syscall_64+0xc9/0xf80 [ 256.172286][ T6050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.178414][ T6050] [ 256.180791][ T6050] Uninit was created at: [ 256.185517][ T6050] __alloc_frozen_pages_noprof+0x6df/0xf50 [ 256.191558][ T6050] alloc_pages_mpol+0x328/0x860 [ 256.196942][ T6050] alloc_pages_noprof+0x101/0x280 [ 256.202157][ T6050] __vmalloc_node_range_noprof+0xa97/0x2d80 [ 256.208370][ T6050] __vmalloc_noprof+0x128/0x1f0 [ 256.213357][ T6050] vmalloc_array_noprof+0x48/0x80 [ 256.218669][ T6050] dvb_dmx_init+0x121/0x930 [ 256.223678][ T6050] vidtv_bridge_probe+0x1b1f/0x2690 [ 256.232677][ T6050] platform_probe+0x213/0x370 [ 256.238623][ T6050] really_probe+0x4d5/0xe40 [ 256.243384][ T6050] __driver_probe_device+0x25e/0x370 [ 256.248992][ T6050] driver_probe_device+0x70/0x8f0 [ 256.254172][ T6050] __driver_attach+0x53e/0xaa0 [ 256.259388][ T6050] bus_for_each_dev+0x33b/0x580 [ 256.264649][ T6050] driver_attach+0x51/0x70 [ 256.269378][ T6050] bus_add_driver+0x54f/0xdb0 [ 256.274176][ T6050] driver_register+0x42e/0x6a0 [ 256.279269][ T6050] __platform_driver_register+0x65/0x80 [ 256.285543][ T6050] vidtv_bridge_init+0x73/0x100 [ 256.290513][ T6050] do_one_initcall+0x22b/0xad0 [ 256.295625][ T6050] do_initcall_level+0x157/0x2e0 [ 256.300694][ T6050] do_initcalls+0x176/0x310 [ 256.305469][ T6050] do_basic_setup+0x1d/0x30 [ 256.310264][ T6050] kernel_init_freeable+0x213/0x430 [ 256.315773][ T6050] kernel_init+0x2f/0x5e0 [ 256.320238][ T6050] ret_from_fork+0x207/0x6f0 [ 256.325158][ T6050] ret_from_fork_asm+0x1a/0x30 [ 256.330085][ T6050] [ 256.335875][ T6050] CPU: 0 UID: 0 PID: 6050 Comm: syz.3.22 Not tainted syzkaller #0 PREEMPT(voluntary) [ 256.349157][ T6050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 256.360296][ T6050] ===================================================== [ 256.367474][ T6050] Disabling lock debugging due to kernel taint [ 256.373690][ T6050] Kernel panic - not syncing: kmsan.panic set ... [ 256.380200][ T6050] CPU: 0 UID: 0 PID: 6050 Comm: syz.3.22 Tainted: G B syzkaller #0 PREEMPT(voluntary) [ 256.391439][ T6050] Tainted: [B]=BAD_PAGE [ 256.395650][ T6050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 256.405885][ T6050] Call Trace: [ 256.409350][ T6050] [ 256.412349][ T6050] __dump_stack+0x26/0x30 [ 256.416954][ T6050] dump_stack_lvl+0x50/0x1c0 [ 256.421682][ T6050] ? dump_stack+0x12/0x25 [ 256.426142][ T6050] dump_stack+0x1e/0x25 [ 256.430507][ T6050] vpanic+0x435/0xd40 [ 256.434649][ T6050] panic+0x15d/0x160 [ 256.438813][ T6050] kmsan_report+0x31a/0x320 [ 256.443500][ T6050] ? __msan_warning+0x1b/0x30 [ 256.448405][ T6050] ? dvbdmx_release_ts_feed+0x198/0x290 [ 256.454088][ T6050] ? dvb_dmxdev_filter_start+0x1187/0x1af0 [ 256.460014][ T6050] ? dvb_dmxdev_pes_filter_set+0x810/0x860 [ 256.465950][ T6050] ? dvb_demux_do_ioctl+0x9a3/0xc80 [ 256.471266][ T6050] ? dvb_usercopy+0x263/0x500 [ 256.476048][ T6050] ? dvb_demux_ioctl+0x46/0x70 [ 256.480921][ T6050] ? __se_sys_ioctl+0x23c/0x400 [ 256.485908][ T6050] ? __x64_sys_ioctl+0x97/0xe0 [ 256.490782][ T6050] ? x64_sys_call+0x18a7/0x3e70 [ 256.495856][ T6050] ? do_syscall_64+0xc9/0xf80 [ 256.500659][ T6050] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.506862][ T6050] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 256.513354][ T6050] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 256.519687][ T6050] ? sysvec_apic_timer_interrupt+0x52/0x90 [ 256.525751][ T6050] ? kmsan_get_metadata+0xf1/0x160 [ 256.531036][ T6050] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 256.537551][ T6050] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 256.543920][ T6050] ? _raw_spin_unlock_irq+0x31/0x50 [ 256.549263][ T6050] ? kmsan_get_metadata+0x146/0x160 [ 256.554628][ T6050] __msan_warning+0x1b/0x30 [ 256.559285][ T6050] dvbdmx_release_ts_feed+0x198/0x290 [ 256.564814][ T6050] dvb_dmxdev_filter_start+0x1187/0x1af0 [ 256.570692][ T6050] ? __pfx_dvbdmx_release_ts_feed+0x10/0x10 [ 256.576756][ T6050] dvb_dmxdev_pes_filter_set+0x810/0x860 [ 256.582626][ T6050] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 256.588891][ T6050] dvb_demux_do_ioctl+0x9a3/0xc80 [ 256.594043][ T6050] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 256.599712][ T6050] dvb_usercopy+0x263/0x500 [ 256.604325][ T6050] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 256.610050][ T6050] ? kmsan_get_metadata+0xf1/0x160 [ 256.615321][ T6050] dvb_demux_ioctl+0x46/0x70 [ 256.620135][ T6050] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 256.625834][ T6050] __se_sys_ioctl+0x23c/0x400 [ 256.630671][ T6050] __x64_sys_ioctl+0x97/0xe0 [ 256.635399][ T6050] x64_sys_call+0x18a7/0x3e70 [ 256.640325][ T6050] do_syscall_64+0xc9/0xf80 [ 256.645045][ T6050] ? clear_bhb_loop+0x40/0x90 [ 256.649860][ T6050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.656001][ T6050] RIP: 0033:0x7fec6f79af79 [ 256.660638][ T6050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.680551][ T6050] RSP: 002b:00007fec705f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 256.689208][ T6050] RAX: ffffffffffffffda RBX: 00007fec6fa15fa0 RCX: 00007fec6f79af79 [ 256.697297][ T6050] RDX: 0000200000000000 RSI: 0000000040146f2c RDI: 0000000000000004 [ 256.705388][ T6050] RBP: 00007fec6f8316e0 R08: 0000000000000000 R09: 0000000000000000 [ 256.713480][ T6050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.721557][ T6050] R13: 00007fec6fa16038 R14: 00007fec6fa15fa0 R15: 00007fff1516ad48 [ 256.729843][ T6050] [ 256.733456][ T6050] Kernel Offset: disabled [ 256.737846][ T6050] Rebooting in 86400 seconds..