last executing test programs: 13.361142568s ago: executing program 1 (id=2): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$dsp(0xffffffffffffff9c, 0x0, 0x8041, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0xf3a, 0x0) splice(r3, 0x0, r7, 0x0, 0x80, 0x4) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r6, &(0x7f0000000980)={0x2020}, 0x2020) 11.884684995s ago: executing program 2 (id=3): r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x1}, &(0x7f00000009c0)="3e12d23d346cfdeb1716f738374bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e38b8beb84ef6d549eed5aaa86dbe646fc95b4b88e17fb55ae6f1221bcf13ecff7a597f452bed6b6fb4c812df9be8e35d8d15086609c033a5d2a42d5dcb0d103098fa302c5b1d48f913f8b22a30a47d9ae02000000e2b855845f39806305f56d918cc5b4023fdbe9cae4147c84583ec9dd110f31ba5ae65e31f00e641832d29ed658b91f349b801b8b0d2de59d006ce210a0351b6bbd06c77c9aa67b5d7287fc1bfa1d0bf035ccdd4b20d7f95b5c77afde046b146ce8b395126fceb6cca68972ac02bc7d9b0aa6453cbca85e30a02db8f48b9eb10526d00f4e90971d6c844fb8b2fb70ec826465726fb78cc47db98cf04ba351e13fcd9ab1c4c2a18f2fb931951347", 0x181, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) 11.313365972s ago: executing program 1 (id=6): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socket(0x2c, 0x4, 0x102) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002500)={{}, &(0x7f0000002480), &(0x7f00000024c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000640), &(0x7f0000000040)=@udp6}, 0x20) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000080)={[{@acl}, {@nodatacow}, {@flushoncommit}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@nodatasum}, {@compress_algo={'compress', 0x3d, 'no'}}, {@rescue={'rescue', 0x3d, 'usebackuproot'}}, {@max_inline={'max_inline', 0x3d, [0x45, 0x38, 0x67, 0x74, 0x65, 0x65]}}]}, 0x3, 0x512d, &(0x7f000000f380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) truncate(0x0, 0x2fffffd) pwritev2(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0xe7b, 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000080), 0x10000000) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xe) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10.509663095s ago: executing program 2 (id=7): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x14444, &(0x7f00000144c0)=ANY=[@ANYBLOB="696f636861727365743d6b6f69382d72752c766f6c756d653d3030303030303030303030300000000063686f723d30303030303030303030303030303030303030342c6e6f6164696e6963622c6769643d69676e6f72652c7569643d6967ee6f7200006769643dc7865530221d5cf1ffa33f314577d414dd0f02989f344aa1daf1517b816480770a92f1eaeab3d78957fc83df545faf189820845d1a3ae48728ee6ed8684b4f3acff28b7d51848813c91e8e6278a3cfa72eec120ebbc7baaaf78c062300000000000000", @ANYRESHEX, @ANYRESDEC], 0xfe, 0xc17, &(0x7f0000001180)="$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") socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32], 0xa0}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) ftruncate(r2, 0x4a8e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mq_open(0x0, 0x6e93ebbbcc0884f2, 0x0, 0x0) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x142e, 0x80, 0xa, 0x20402f7}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) 9.2403732s ago: executing program 3 (id=4): epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_aout(r3, &(0x7f0000000940)=ANY=[], 0x120) fcntl$lock(r3, 0x24, &(0x7f0000000080)={0x1, 0x1, 0x1, 0x400000006}) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f00000000c0)={0xf, 0x3, 0x7, 0x200}, 0x10) r4 = syz_io_uring_setup(0x2e06, &(0x7f00000002c0)={0x0, 0x2667, 0x40, 0x3, 0x217}, &(0x7f0000000240), &(0x7f0000000080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r4, 0xb, &(0x7f0000000040), 0x3e) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r5 = syz_open_dev$sg(&(0x7f00000000c0), 0x6f5e, 0x2) ioctl$FIBMAP(r5, 0x5381, 0x0) r6 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x42242, 0x73) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4) openat$cgroup_devices(r6, &(0x7f0000000380)='devices.deny\x00', 0x2, 0x0) pwritev(r6, &(0x7f0000000400)=[{&(0x7f0000000040)='9G', 0x2}, {0x0}], 0x2, 0xffffff01, 0xa) 4.874162018s ago: executing program 2 (id=8): epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_aout(r3, &(0x7f0000000940)=ANY=[], 0x120) fcntl$lock(r3, 0x24, &(0x7f0000000080)={0x1, 0x1, 0x1, 0x400000006}) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f00000000c0)={0xf, 0x3, 0x7, 0x200}, 0x10) r4 = syz_io_uring_setup(0x2e06, &(0x7f00000002c0)={0x0, 0x2667, 0x40, 0x3, 0x217}, &(0x7f0000000240), &(0x7f0000000080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r4, 0xb, &(0x7f0000000040), 0x3e) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r5 = syz_open_dev$sg(&(0x7f00000000c0), 0x6f5e, 0x2) ioctl$FIBMAP(r5, 0x5381, 0x0) r6 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x42242, 0x73) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4) openat$cgroup_devices(r6, &(0x7f0000000380)='devices.deny\x00', 0x2, 0x0) pwritev(r6, &(0x7f0000000400)=[{&(0x7f0000000040)='9G', 0x2}, {0x0}], 0x2, 0xffffff01, 0xa) 2.570437297s ago: executing program 1 (id=9): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x5, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x2, 0xfffffffd, 0x8, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x100000, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x24000, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x7, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x407, 0x7, 0x10103, 0x0, 0x5, 0x3c, 0x91, 0x2, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x4, 0x80, 0x0, 0x5, 0x2, 0x8, 0x4, 0xfffffffd, 0x514], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x7, 0x0, 0x10007, 0x5, 0x2f, 0xb99, 0x312, 0x78, 0xea4, 0xa, 0x6, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0x8, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0xe, 0x80004, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x800004, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x6, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x85, 0x6, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x7, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x0, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb2f, 0x3, 0x8, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x4, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0x100c8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10003, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x100005, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101c42, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xfffffee2) r2 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000480)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x80}], 0x1, 0x0, 0x0, 0x0) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) 1.503585819s ago: executing program 3 (id=10): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 1.151128074s ago: executing program 0 (id=1): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4002, 0x9, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa000000000400"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 0s ago: executing program 2 (id=11): madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) write$sysctl(r0, &(0x7f0000000580)='1\x00', 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$sysctl(r0, &(0x7f00000000c0)='2\x00', 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.231' (ED25519) to the list of known hosts. [ 190.456642][ T5556] cgroup: Unknown subsys name 'net' [ 190.583172][ T5556] cgroup: Unknown subsys name 'cpuset' [ 190.599010][ T5556] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 196.949006][ T5556] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 201.643655][ T5577] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 201.667424][ T5577] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 201.677286][ T5577] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 201.694615][ T5577] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 201.707355][ T5577] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 201.798815][ T4876] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 201.810188][ T4876] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 201.821380][ T4876] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 201.829470][ T4876] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 201.845791][ T5582] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 201.861451][ T5582] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 201.905948][ T5583] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 201.917907][ T5582] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 201.918190][ T5583] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 201.931426][ T5582] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 201.941784][ T5583] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 201.957563][ T5583] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 201.966191][ T5583] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 201.979537][ T5583] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 201.995843][ T5582] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 202.045634][ T4876] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 202.055386][ T4876] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 202.066513][ T4876] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 202.086576][ T4876] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 202.100069][ T4876] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 203.814224][ T4876] Bluetooth: hci0: command tx timeout [ 203.893308][ T4876] Bluetooth: hci1: command tx timeout [ 204.054490][ T4876] Bluetooth: hci3: command tx timeout [ 204.060253][ T5583] Bluetooth: hci2: command tx timeout [ 204.132491][ T5583] Bluetooth: hci4: command tx timeout [ 204.148559][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.155326][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 205.893297][ T5583] Bluetooth: hci0: command tx timeout [ 205.972752][ T5583] Bluetooth: hci1: command tx timeout [ 206.135136][ T5583] Bluetooth: hci2: command tx timeout [ 206.137118][ T4876] Bluetooth: hci3: command tx timeout [ 206.213144][ T4876] Bluetooth: hci4: command tx timeout [ 206.820472][ T5586] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.829581][ T5586] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.839016][ T5586] bridge_slave_0: entered allmulticast mode [ 206.850828][ T5586] bridge_slave_0: entered promiscuous mode [ 207.001174][ T5586] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.009127][ T5586] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.019826][ T5586] bridge_slave_1: entered allmulticast mode [ 207.035979][ T5586] bridge_slave_1: entered promiscuous mode [ 207.082453][ T5574] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.090351][ T5574] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.099017][ T5574] bridge_slave_0: entered allmulticast mode [ 207.108654][ T5574] bridge_slave_0: entered promiscuous mode [ 207.125033][ T5574] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.132671][ T5574] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.140261][ T5574] bridge_slave_1: entered allmulticast mode [ 207.150814][ T5574] bridge_slave_1: entered promiscuous mode [ 207.350892][ T5580] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.359403][ T5580] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.368739][ T5580] bridge_slave_0: entered allmulticast mode [ 207.379824][ T5580] bridge_slave_0: entered promiscuous mode [ 207.453918][ T5586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.480821][ T5574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.491549][ T5580] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.533286][ T5580] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.559238][ T5580] bridge_slave_1: entered allmulticast mode [ 207.594449][ T5580] bridge_slave_1: entered promiscuous mode [ 207.678595][ T5586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.706073][ T5574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.759314][ T5579] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.767832][ T5579] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.777743][ T5579] bridge_slave_0: entered allmulticast mode [ 207.788531][ T5579] bridge_slave_0: entered promiscuous mode [ 207.950687][ T5579] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.958869][ T5579] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.966878][ T5579] bridge_slave_1: entered allmulticast mode [ 207.973578][ T4876] Bluetooth: hci0: command tx timeout [ 207.980028][ T5579] bridge_slave_1: entered promiscuous mode [ 208.053788][ T4876] Bluetooth: hci1: command tx timeout [ 208.087763][ T5580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.125538][ T5578] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.133864][ T5578] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.141354][ T5578] bridge_slave_0: entered allmulticast mode [ 208.150638][ T5578] bridge_slave_0: entered promiscuous mode [ 208.170826][ T5586] team0: Port device team_slave_0 added [ 208.186247][ T5574] team0: Port device team_slave_0 added [ 208.201258][ T5580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.212848][ T4876] Bluetooth: hci2: command tx timeout [ 208.218571][ T5583] Bluetooth: hci3: command tx timeout [ 208.247424][ T5578] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.255619][ T5578] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.263639][ T5578] bridge_slave_1: entered allmulticast mode [ 208.272605][ T5578] bridge_slave_1: entered promiscuous mode [ 208.291554][ T5586] team0: Port device team_slave_1 added [ 208.302391][ T4876] Bluetooth: hci4: command tx timeout [ 208.310353][ T5574] team0: Port device team_slave_1 added [ 208.385099][ T5579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.493883][ T5580] team0: Port device team_slave_0 added [ 208.508041][ T5579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.605880][ T5580] team0: Port device team_slave_1 added [ 208.614524][ T5574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.621685][ T5574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.648124][ T5574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.696805][ T5578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.708499][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.716109][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.742924][ T5586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.785138][ T5574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.792764][ T5574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.819243][ T5574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.864345][ T5578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.876042][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.883811][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.910287][ T5586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.973443][ T5579] team0: Port device team_slave_0 added [ 209.026364][ T5580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.033902][ T5580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.060145][ T5580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.085502][ T5579] team0: Port device team_slave_1 added [ 209.129712][ T5578] team0: Port device team_slave_0 added [ 209.141341][ T5580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.148907][ T5580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.175419][ T5580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.251177][ T5578] team0: Port device team_slave_1 added [ 209.333829][ T5579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.340974][ T5579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.367334][ T5579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.464857][ T5579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.472817][ T5579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.500914][ T5579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.557504][ T5574] hsr_slave_0: entered promiscuous mode [ 209.566732][ T5574] hsr_slave_1: entered promiscuous mode [ 209.593374][ T5586] hsr_slave_0: entered promiscuous mode [ 209.602770][ T5586] hsr_slave_1: entered promiscuous mode [ 209.610702][ T5586] debugfs: 'hsr0' already exists in 'hsr' [ 209.616909][ T5586] Cannot create hsr debugfs directory [ 209.653511][ T5578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.660906][ T5578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.687544][ T5578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.704233][ T5578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.711350][ T5578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.737977][ T5578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.849636][ T5580] hsr_slave_0: entered promiscuous mode [ 209.858523][ T5580] hsr_slave_1: entered promiscuous mode [ 209.867146][ T5580] debugfs: 'hsr0' already exists in 'hsr' [ 209.873117][ T5580] Cannot create hsr debugfs directory [ 210.052544][ T4876] Bluetooth: hci0: command tx timeout [ 210.081784][ T5579] hsr_slave_0: entered promiscuous mode [ 210.090795][ T5579] hsr_slave_1: entered promiscuous mode [ 210.099300][ T5579] debugfs: 'hsr0' already exists in 'hsr' [ 210.105270][ T5579] Cannot create hsr debugfs directory [ 210.143734][ T4876] Bluetooth: hci1: command tx timeout [ 210.292384][ T4876] Bluetooth: hci2: command tx timeout [ 210.293918][ T5583] Bluetooth: hci3: command tx timeout [ 210.353943][ T5578] hsr_slave_0: entered promiscuous mode [ 210.363440][ T5578] hsr_slave_1: entered promiscuous mode [ 210.371326][ T5578] debugfs: 'hsr0' already exists in 'hsr' [ 210.377384][ T5578] Cannot create hsr debugfs directory [ 210.382558][ T5583] Bluetooth: hci4: command tx timeout [ 211.555881][ T5574] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 211.596769][ T5574] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 211.609386][ T5574] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 211.632939][ T5574] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 211.648973][ T5574] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 211.667525][ T5574] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 211.678040][ T5574] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 211.700422][ T5574] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 211.826522][ T5586] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 211.858727][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 211.869605][ T5586] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 211.889646][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 211.910105][ T5586] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 211.936323][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 211.965811][ T5586] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 211.987255][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 212.140743][ T5579] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 212.184207][ T5579] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 212.219878][ T5579] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 212.243972][ T5579] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 212.254856][ T5579] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 212.278125][ T5579] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 212.322827][ T5579] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 212.344261][ T5579] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 212.543300][ T5578] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 212.564067][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 212.578773][ T5578] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 212.601495][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 212.643648][ T5578] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 212.675487][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 212.730190][ T5578] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 212.760727][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 213.043721][ T5580] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 213.067314][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 213.078899][ T5580] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 213.113914][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 213.128768][ T5580] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 213.156668][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 213.168547][ T5580] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 213.190607][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 213.497687][ T5574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.695577][ T5574] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.714785][ T5586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.797403][ T5579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.878739][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.886474][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.969049][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.976978][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.091765][ T5586] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.161272][ T5579] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.261015][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.268787][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.334308][ T5578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.378418][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.386170][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.414946][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.422710][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.474766][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.482546][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.618062][ T5578] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.667694][ T5580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.759573][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.767064][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.847622][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.855179][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.998337][ T5580] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.170779][ T170] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.178229][ T170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.317611][ T170] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.325258][ T170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.343815][ T5574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.824156][ T5579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.183796][ T5574] veth0_vlan: entered promiscuous mode [ 219.296602][ T5586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.397319][ T5574] veth1_vlan: entered promiscuous mode [ 219.688954][ T5578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.807885][ T5579] veth0_vlan: entered promiscuous mode [ 219.868325][ T5580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.019975][ T5574] veth0_macvtap: entered promiscuous mode [ 220.048003][ T5579] veth1_vlan: entered promiscuous mode [ 220.131598][ T5574] veth1_macvtap: entered promiscuous mode [ 220.427869][ T5578] veth0_vlan: entered promiscuous mode [ 220.484660][ T5574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.601889][ T5578] veth1_vlan: entered promiscuous mode [ 220.632858][ T5574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.715399][ T5579] veth0_macvtap: entered promiscuous mode [ 220.753533][ T5580] veth0_vlan: entered promiscuous mode [ 220.771884][ T55] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.787152][ T55] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.822890][ T55] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.836722][ T55] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.865966][ T5579] veth1_macvtap: entered promiscuous mode [ 220.917584][ T5580] veth1_vlan: entered promiscuous mode [ 221.145682][ T5586] veth0_vlan: entered promiscuous mode [ 221.224659][ T5579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.308754][ T5578] veth0_macvtap: entered promiscuous mode [ 221.348096][ T5579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.411856][ T5586] veth1_vlan: entered promiscuous mode [ 221.464441][ T5578] veth1_macvtap: entered promiscuous mode [ 221.519482][ T55] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.530955][ T55] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.590437][ T55] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.600770][ T55] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.722666][ T5580] veth0_macvtap: entered promiscuous mode [ 221.831142][ T5580] veth1_macvtap: entered promiscuous mode [ 221.936405][ T5578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.155992][ T5578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.216008][ T5586] veth0_macvtap: entered promiscuous mode [ 222.351103][ T5580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.386823][ T56] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.420590][ T56] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.459082][ T5586] veth1_macvtap: entered promiscuous mode [ 222.488516][ T56] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.513670][ T56] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.550331][ T5580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.730512][ T14] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.762619][ T14] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.817122][ T14] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.845805][ T14] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.025310][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.150586][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.369549][ T163] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.397799][ T163] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.437087][ T163] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.459283][ T163] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.071897][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.124755][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.386430][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.398665][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.890299][ T5574] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 228.010241][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.046402][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.317749][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.356196][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.411159][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.420864][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.829906][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.898173][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.461517][ T5842] loop1: detected capacity change from 0 to 32768 [ 231.477012][ T5842] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.6 (5842) [ 231.506661][ T5842] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 231.518178][ T5842] BTRFS info (device loop1): using crc32c checksum algorithm [ 231.641618][ T170] BTRFS warning (device loop1): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0 [ 231.744663][ T5842] BTRFS warning (device loop1): couldn't read tree root [ 231.751927][ T5842] BTRFS warning (device loop1): try to load backup roots slot 1 [ 231.765688][ T170] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0 [ 231.779760][ T5842] BTRFS warning (device loop1): couldn't read tree root [ 231.787110][ T5842] BTRFS warning (device loop1): try to load backup roots slot 2 [ 231.805465][ T55] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 231.866172][ T5842] BTRFS warning (device loop1): couldn't read tree root [ 231.873674][ T5842] BTRFS warning (device loop1): try to load backup roots slot 3 [ 231.888539][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.932415][ T5842] BTRFS info (device loop1): checking UUID tree [ 231.940306][ T5842] BTRFS info (device loop1): setting nodatasum [ 231.946687][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.954656][ T5842] BTRFS info (device loop1): enabling ssd optimizations [ 231.961804][ T5842] BTRFS info (device loop1): turning on flush-on-commit [ 231.969069][ T5842] BTRFS info (device loop1): turning on async discard [ 231.976222][ T5842] BTRFS info (device loop1): enabling free space tree [ 231.983301][ T5842] BTRFS info (device loop1): trying to use backup root at mount time [ 231.991617][ T5842] BTRFS info (device loop1): max_inline set to 0 [ 232.073332][ T5860] loop2: detected capacity change from 0 to 2048 [ 232.083028][ T5860] ======================================================= [ 232.083028][ T5860] WARNING: The mand mount option has been deprecated and [ 232.083028][ T5860] and is ignored by this kernel. Remove the mand [ 232.083028][ T5860] option from the mount to silence this warning. [ 232.083028][ T5860] ======================================================= [ 232.141427][ T29] audit: type=1800 audit(1781624156.696:2): pid=5842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6" name="file1" dev="loop1" ino=257 res=0 errno=0 [ 232.192155][ T5860] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 232.227156][ T5860] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 232.316733][ T5860] Zero length message leads to an empty skb [ 236.003460][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.291559][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.678363][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.739426][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.966841][ T5874] kernel profiling enabled (shift: 9) [ 240.092573][ T5574] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 240.107847][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.151169][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.121385][ T5887] ===================================================== [ 242.128694][ T5887] BUG: KMSAN: uninit-value in irqentry_exit_to_kernel_mode_preempt+0xb0/0xc0 [ 242.137695][ T5887] irqentry_exit_to_kernel_mode_preempt+0xb0/0xc0 [ 242.144348][ T5887] irqentry_exit+0x82/0xa00 [ 242.149092][ T5887] sysvec_reschedule_ipi+0x74/0x80 [ 242.154444][ T5887] asm_sysvec_reschedule_ipi+0x1f/0x30 [ 242.160110][ T5887] pfkey_send_policy_notify+0xbcf/0x12b0 [ 242.165998][ T5887] km_policy_notify+0xc9/0x1a0 [ 242.170955][ T5887] xfrm_add_policy+0x6c7/0xd30 [ 242.175905][ T5887] xfrm_user_rcv_msg+0x106f/0x1290 [ 242.181210][ T5887] netlink_rcv_skb+0x54d/0x680 [ 242.186258][ T5887] xfrm_netlink_rcv+0x77/0xc0 [ 242.191125][ T5887] netlink_unicast+0xee2/0x1290 [ 242.196151][ T5887] netlink_sendmsg+0x10b2/0x1250 [ 242.201273][ T5887] ____sys_sendmsg+0xf37/0xfd0 [ 242.206261][ T5887] ___sys_sendmsg+0x271/0x3b0 [ 242.211164][ T5887] __x64_sys_sendmsg+0x211/0x3e0 [ 242.216339][ T5887] x64_sys_call+0x1e20/0x3ea0 [ 242.221228][ T5887] do_syscall_64+0x15d/0x3c0 [ 242.225992][ T5887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.232076][ T5887] [ 242.234497][ T5887] Local variable c created at: [ 242.239365][ T5887] xfrm_add_policy+0x88/0xd30 [ 242.244238][ T5887] xfrm_user_rcv_msg+0x106f/0x1290 [ 242.249620][ T5887] [ 242.252095][ T5887] CPU: 1 UID: 0 PID: 5887 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT(lazy) [ 242.261311][ T5887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 242.271508][ T5887] ===================================================== [ 242.278562][ T5887] Disabling lock debugging due to kernel taint [ 242.284848][ T5887] Kernel panic - not syncing: kmsan.panic set ... [ 242.291422][ T5887] CPU: 1 UID: 0 PID: 5887 Comm: syz.0.1 Tainted: G B syzkaller #0 PREEMPT(lazy) [ 242.302232][ T5887] Tainted: [B]=BAD_PAGE [ 242.306510][ T5887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 242.316752][ T5887] Call Trace: [ 242.320161][ T5887] [ 242.323208][ T5887] __dump_stack+0x26/0x30 [ 242.327765][ T5887] dump_stack_lvl+0x50/0x1c0 [ 242.332568][ T5887] ? dump_stack+0x12/0x25 [ 242.337101][ T5887] dump_stack+0x1e/0x25 [ 242.341451][ T5887] vpanic+0x7b4/0x1430 [ 242.345763][ T5887] panic+0x15d/0x160 [ 242.349936][ T5887] kmsan_report+0x31a/0x320 [ 242.354697][ T5887] ? __msan_warning+0x1b/0x30 [ 242.359603][ T5887] ? irqentry_exit_to_kernel_mode_preempt+0xb0/0xc0 [ 242.366425][ T5887] ? irqentry_exit+0x82/0xa00 [ 242.371354][ T5887] ? sysvec_reschedule_ipi+0x74/0x80 [ 242.376887][ T5887] ? asm_sysvec_reschedule_ipi+0x1f/0x30 [ 242.382736][ T5887] ? pfkey_send_policy_notify+0xbcf/0x12b0 [ 242.388795][ T5887] ? km_policy_notify+0xc9/0x1a0 [ 242.393935][ T5887] ? xfrm_add_policy+0x6c7/0xd30 [ 242.399071][ T5887] ? xfrm_user_rcv_msg+0x106f/0x1290 [ 242.404550][ T5887] ? netlink_rcv_skb+0x54d/0x680 [ 242.409700][ T5887] ? xfrm_netlink_rcv+0x77/0xc0 [ 242.414786][ T5887] ? netlink_unicast+0xee2/0x1290 [ 242.420266][ T5887] ? netlink_sendmsg+0x10b2/0x1250 [ 242.425592][ T5887] ? ____sys_sendmsg+0xf37/0xfd0 [ 242.430788][ T5887] ? ___sys_sendmsg+0x271/0x3b0 [ 242.435886][ T5887] ? __x64_sys_sendmsg+0x211/0x3e0 [ 242.441285][ T5887] ? x64_sys_call+0x1e20/0x3ea0 [ 242.446385][ T5887] ? do_syscall_64+0x15d/0x3c0 [ 242.451443][ T5887] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.457720][ T5887] ? ___sys_sendmsg+0x271/0x3b0 [ 242.462847][ T5887] ? __x64_sys_sendmsg+0x211/0x3e0 [ 242.468206][ T5887] ? x64_sys_call+0x1e20/0x3ea0 [ 242.473282][ T5887] ? do_syscall_64+0x15d/0x3c0 [ 242.478226][ T5887] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.484502][ T5887] ? kmsan_get_metadata+0xf1/0x160 [ 242.489878][ T5887] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 242.495979][ T5887] ? kmsan_get_metadata+0xf1/0x160 [ 242.501351][ T5887] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 242.507447][ T5887] ? should_fail_ex+0x45/0x8c0 [ 242.512415][ T5887] ? kmsan_get_metadata+0xf1/0x160 [ 242.517777][ T5887] ? kmsan_get_metadata+0xf1/0x160 [ 242.523142][ T5887] ? kmsan_get_metadata+0xf1/0x160 [ 242.528528][ T5887] __msan_warning+0x1b/0x30 [ 242.533258][ T5887] irqentry_exit_to_kernel_mode_preempt+0xb0/0xc0 [ 242.539937][ T5887] irqentry_exit+0x82/0xa00 [ 242.544699][ T5887] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 242.551289][ T5887] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 242.557678][ T5887] ? trace_reschedule_exit+0x22/0x1a0 [ 242.563295][ T5887] sysvec_reschedule_ipi+0x74/0x80 [ 242.568688][ T5887] asm_sysvec_reschedule_ipi+0x1f/0x30 [ 242.574377][ T5887] RIP: 0010:pfkey_send_policy_notify+0xbcf/0x12b0 [ 242.581044][ T5887] Code: 94 c3 20 c3 44 89 75 84 45 85 f6 0f 95 45 d4 45 8b 75 0c 49 83 fe 14 0f 94 45 a0 48 8b bd 08 ff ff ff e8 24 05 81 f3 44 8b 28 <4d> 85 ed 0f 95 85 70 ff ff ff 8b 02 41 c7 04 24 00 00 00 00 45 89 [ 242.600852][ T5887] RSP: 0018:ffff888056c173b8 EFLAGS: 00010286 [ 242.607132][ T5887] RAX: ffff88805641752c RBX: 0000000000000001 RCX: 00000000001b0873 [ 242.615257][ T5887] RDX: ffff88805681752c RSI: 0000000000000001 RDI: ffff888056c1752c [ 242.623389][ T5887] RBP: ffff888056c174b0 R08: ffffea000000000f R09: 0000000000000003 [ 242.631521][ T5887] R10: 0000000000000004 R11: 0000000000000002 R12: ffff888055422d58 [ 242.639678][ T5887] R13: 0000000000000000 R14: 0000000000000019 R15: 0000000000000000 [ 242.647934][ T5887] ? pfkey_send_policy_notify+0xbcc/0x12b0 [ 242.654070][ T5887] ? __pfx_pfkey_send_policy_notify+0x10/0x10 [ 242.660400][ T5887] km_policy_notify+0xc9/0x1a0 [ 242.665404][ T5887] xfrm_add_policy+0x6c7/0xd30 [ 242.670410][ T5887] ? __pfx_xfrm_add_policy+0x10/0x10 [ 242.675909][ T5887] xfrm_user_rcv_msg+0x106f/0x1290 [ 242.681291][ T5887] ? kmsan_get_metadata+0xf1/0x160 [ 242.686732][ T5887] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 242.692816][ T5887] netlink_rcv_skb+0x54d/0x680 [ 242.697815][ T5887] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 242.703520][ T5887] xfrm_netlink_rcv+0x77/0xc0 [ 242.708398][ T5887] ? __pfx_xfrm_netlink_rcv+0x10/0x10 [ 242.713980][ T5887] netlink_unicast+0xee2/0x1290 [ 242.719051][ T5887] netlink_sendmsg+0x10b2/0x1250 [ 242.724310][ T5887] ? __pfx_netlink_sendmsg+0x10/0x10 [ 242.729800][ T5887] ____sys_sendmsg+0xf37/0xfd0 [ 242.734864][ T5887] ___sys_sendmsg+0x271/0x3b0 [ 242.739786][ T5887] ? kmsan_get_metadata+0xf1/0x160 [ 242.745175][ T5887] ? __rcu_read_unlock+0x6c/0xd0 [ 242.750291][ T5887] ? __fget_files+0x3b4/0x4a0 [ 242.755237][ T5887] ? __fget_files+0x3b9/0x4a0 [ 242.760130][ T5887] ? kmsan_get_metadata+0xf1/0x160 [ 242.765580][ T5887] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 242.771676][ T5887] __x64_sys_sendmsg+0x211/0x3e0 [ 242.776891][ T5887] ? kmsan_get_metadata+0xf1/0x160 [ 242.782284][ T5887] x64_sys_call+0x1e20/0x3ea0 [ 242.787228][ T5887] do_syscall_64+0x15d/0x3c0 [ 242.792013][ T5887] ? clear_bhb_loop+0x50/0xa0 [ 242.796891][ T5887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.802989][ T5887] RIP: 0033:0x7fdf3879ce59 [ 242.807573][ T5887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.827382][ T5887] RSP: 002b:00007fdf39692028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 242.836001][ T5887] RAX: ffffffffffffffda RBX: 00007fdf38a16180 RCX: 00007fdf3879ce59 [ 242.844135][ T5887] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000007 [ 242.852254][ T5887] RBP: 00007fdf38832d6f R08: 0000000000000000 R09: 0000000000000000 [ 242.860389][ T5887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.868531][ T5887] R13: 00007fdf38a16218 R14: 00007fdf38a16180 R15: 00007fffa0613c78 [ 242.876714][ T5887] [ 242.880500][ T5887] Kernel Offset: disabled [ 242.884898][ T5887] Rebooting in 86400 seconds..