last executing test programs: 2.194550864s ago: executing program 0 (id=1): openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./tracing\x00', 0x1c9) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/uprobe_events\x00', 0x1, 0x0) syz_open_dev$media(&(0x7f0000000280), 0xc, 0x20200) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000840)={'bond0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000000)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000040)={0x0}, 0x2, 0x0, 0x0, 0x20000094}, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x2) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000000)) read$dsp(r3, &(0x7f0000000180)=""/71, 0x47) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000040)={@void, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val, {0x8100, 0x0, 0x0, 0x20}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x4000, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x3a}}, {0x0, 0x17c1, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x4, 0x100, @void}}}}}}}}, 0x36) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r6, &(0x7f0000000200)='p:my_rrobe ./file0:0', 0x14) write(r0, &(0x7f0000000200)='p:my_rrobe ./file0:0', 0x14) 1.791467286s ago: executing program 4 (id=5): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) bind$inet6(r1, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, 0x0, 0x0) bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2000002, 0xfffffffe}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2000002}}}, 0x10, 0x0}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r5, 0x1, 0x31, 0x0, 0x0) bind$inet6(r5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES8=0x0, @ANYRES16], 0x1, 0x84, &(0x7f0000000480)="$eJzs0rEJQjEUBdDLX8PCDdwho4ildlaKVfZxFUdwAwtbGyWoRdKL8DkHbuCGV7ziXR7nRWqyrMlzsD8ct+vd+w2zNCUpn7QbaP1W+pnr/bT55l97AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAvTVmNvft4BQAA//9foSPN") r6 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r6, 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x20040804) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x2, &(0x7f0000000200)=[{0x9, 0xaa, 0x0, 0x1}, {0x2, 0x3, 0x9, 0xffffffff}]}) 1.65302101s ago: executing program 2 (id=3): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000240)={0xa20000, 0x0, 0x7, 0xffffffffffffffff, 0x0, 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = socket(0x28, 0x5, 0x400000) setsockopt$sock_linger(r2, 0x1, 0x3c, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x2400c806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r5, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 1.294711789s ago: executing program 4 (id=6): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) listns(&(0x7f0000000000)={0x20, 0x0, 0xffffffffffffffff, 0x4000000}, 0x0, 0xf4240, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x70bd2d, 0x25dfdbff, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in=@remote, 0x4e20, 0xb, 0xf7ff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x1000}, {0x1, 0x6, 0x80}, 0xfffffffc, 0x0, 0x0, 0x0, 0x5}, [@tmpl={0x144, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x5, 0x3c}, 0x0, @in6=@empty, 0x3502, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7ffc}, {{@in6=@rand_addr=' \x01\x00', 0x0, 0x3c}, 0xa, @in6=@loopback, 0xfffffffd, 0x4, 0x3, 0x0, 0x800, 0x800}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in6=@empty, 0x3503, 0x1, 0x0, 0x4, 0x8}, {{@in=@multicast2, 0x10000, 0x33}, 0x0, @in6=@mcast2, 0x3504, 0x0, 0x2, 0x4, 0x0, 0xabb}, {{@in=@dev={0xac, 0x14, 0x14, 0x1c}, 0x0, 0x3c}, 0xa, @in6=@local, 0x0, 0x4, 0x2, 0x0, 0x10000}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x6854}, 0x800) 1.03748s ago: executing program 4 (id=7): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x84, &(0x7f0000000000)=ANY=[], 0x8b, 0x2e3, &(0x7f0000000800)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/vm/nr_overcommit_hugepages\x00', 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendfile(r0, r0, 0x0, 0x7a01) syz_mount_image$exfat(0x0, &(0x7f0000000540)='./bus\x00', 0x38c180a, 0x0, 0x0, 0x0, &(0x7f0000000240)) chdir(&(0x7f00000003c0)='./bus\x00') syz_mount_image$vfat(&(0x7f0000000600), &(0x7f0000000680)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x620442, 0x0, 0x1, 0x0, &(0x7f0000000d40)) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x104800, 0x0, 0x81, 0x0, &(0x7f0000000040)) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 710.622882ms ago: executing program 0 (id=8): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xb8}}, 0x0) (fail_nth: 2) 605.953941ms ago: executing program 4 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='md0\n\x00', 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/md0\x00', 0x2, 0x0) ioctl(r0, 0x40480923, 0x0) ioctl(r0, 0x928, &(0x7f0000000400)="00000000010000000000") 456.146187ms ago: executing program 3 (id=4): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = syz_io_uring_setup(0x38, &(0x7f00000000c0)={0x0, 0x1d2d, 0x13500}, 0x0, &(0x7f0000000040), &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x21, &(0x7f0000000440), 0x1) 185.539481ms ago: executing program 0 (id=10): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x84, &(0x7f0000000000)=ANY=[], 0x8b, 0x2e3, &(0x7f0000000800)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000540)='./bus\x00', 0x38c180a, 0x0, 0x0, 0x0, &(0x7f0000000240)) chdir(&(0x7f00000003c0)='./bus\x00') syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x104800, 0x0, 0x81, 0x0, &(0x7f0000000040)) rename(0x0, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 0s ago: executing program 3 (id=11): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000000240)=ANY=[], 0x3, 0xd99, &(0x7f0000006900)="$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") truncate(&(0x7f0000000080)='./file2\x00', 0x2) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000001000000380001800600010002000000080005000000feff0b000700000000000000000008000900000000000800080000000000080006"], 0x4c}}, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x2020c1b, 0x0, 0x1, 0x0, &(0x7f00000000c0)) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x7002}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000600)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) pread64(r3, &(0x7f0000002200)=""/87, 0x57, 0xfffd) ioctl$IOMMU_GET_HW_INFO(0xffffffffffffffff, 0x3b8a, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'geneve0\x00'}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.63' (ED25519) to the list of known hosts. [ 70.694018][ T5604] cgroup: Unknown subsys name 'net' [ 70.829353][ T5604] cgroup: Unknown subsys name 'cpuset' [ 70.838031][ T5604] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.528389][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.528502][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.466407][ T5604] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.378308][ T5632] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.379745][ T5633] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.381102][ T5632] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.381510][ T5632] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.382038][ T5632] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.387718][ T5632] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.388381][ T5632] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.388431][ T5636] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.389919][ T5632] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.390371][ T5636] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.390663][ T5632] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.391046][ T5634] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.391768][ T5632] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.392877][ T5632] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.394377][ T5632] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.412397][ T5634] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.421449][ T5634] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.423198][ T5637] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.426738][ T5637] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.427058][ T5637] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.428152][ T5637] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.428466][ T5637] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.429724][ T5637] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.430009][ T5633] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.432975][ T5620] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.487128][ T5627] Bluetooth: hci1: command tx timeout [ 78.487141][ T5629] Bluetooth: hci0: command tx timeout [ 78.498790][ T5620] Bluetooth: hci3: command tx timeout [ 78.528886][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.529098][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.529527][ T5616] bridge_slave_0: entered allmulticast mode [ 78.531527][ T5616] bridge_slave_0: entered promiscuous mode [ 78.535973][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.536079][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.536203][ T5616] bridge_slave_1: entered allmulticast mode [ 78.538052][ T5616] bridge_slave_1: entered promiscuous mode [ 78.571522][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.571628][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.571754][ T5618] bridge_slave_0: entered allmulticast mode [ 78.573939][ T5618] bridge_slave_0: entered promiscuous mode [ 78.579156][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.579264][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.581309][ T5620] Bluetooth: hci2: command tx timeout [ 78.581758][ T5620] Bluetooth: hci4: command tx timeout [ 78.582256][ T5618] bridge_slave_1: entered allmulticast mode [ 78.585568][ T5618] bridge_slave_1: entered promiscuous mode [ 78.670851][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.674451][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.760035][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.760220][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.760366][ T5615] bridge_slave_0: entered allmulticast mode [ 78.762277][ T5615] bridge_slave_0: entered promiscuous mode [ 78.766436][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.766538][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.766657][ T5615] bridge_slave_1: entered allmulticast mode [ 78.768450][ T5615] bridge_slave_1: entered promiscuous mode [ 78.807478][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.811188][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.848894][ T5616] team0: Port device team_slave_0 added [ 78.852649][ T5616] team0: Port device team_slave_1 added [ 78.868007][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.872165][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.888726][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.888853][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.888982][ T5617] bridge_slave_0: entered allmulticast mode [ 78.890858][ T5617] bridge_slave_0: entered promiscuous mode [ 78.897998][ T5615] team0: Port device team_slave_0 added [ 78.901608][ T5615] team0: Port device team_slave_1 added [ 78.944318][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.945255][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.946218][ T5617] bridge_slave_1: entered allmulticast mode [ 78.948468][ T5617] bridge_slave_1: entered promiscuous mode [ 78.993307][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.993361][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.994706][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.998655][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.998669][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.998692][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.001469][ T5618] team0: Port device team_slave_0 added [ 79.120699][ T5618] team0: Port device team_slave_1 added [ 79.124411][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.125199][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.125211][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.125235][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.127837][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.127950][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.128370][ T5628] bridge_slave_0: entered allmulticast mode [ 79.131235][ T5628] bridge_slave_0: entered promiscuous mode [ 79.135378][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.135501][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.135624][ T5628] bridge_slave_1: entered allmulticast mode [ 79.138319][ T5628] bridge_slave_1: entered promiscuous mode [ 79.160472][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.176682][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.176700][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.176723][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.292281][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.292370][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.292395][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.296613][ T5617] team0: Port device team_slave_0 added [ 79.310375][ T5616] hsr_slave_0: entered promiscuous mode [ 79.312169][ T5616] hsr_slave_1: entered promiscuous mode [ 79.319679][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.321337][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.321358][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.321382][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.380664][ T5617] team0: Port device team_slave_1 added [ 79.418263][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.444094][ T5615] hsr_slave_0: entered promiscuous mode [ 79.445096][ T5615] hsr_slave_1: entered promiscuous mode [ 79.448486][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 79.448556][ T5615] Cannot create hsr debugfs directory [ 79.491876][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.491922][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.492435][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.539571][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.539617][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.540075][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.552588][ T5628] team0: Port device team_slave_0 added [ 79.598030][ T5628] team0: Port device team_slave_1 added [ 79.615644][ T5618] hsr_slave_0: entered promiscuous mode [ 79.617617][ T5618] hsr_slave_1: entered promiscuous mode [ 79.618326][ T5618] debugfs: 'hsr0' already exists in 'hsr' [ 79.618344][ T5618] Cannot create hsr debugfs directory [ 79.662268][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.662485][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.662510][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.732979][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.733024][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.733068][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.759574][ T5617] hsr_slave_0: entered promiscuous mode [ 79.760647][ T5617] hsr_slave_1: entered promiscuous mode [ 79.761373][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 79.761392][ T5617] Cannot create hsr debugfs directory [ 79.889616][ T5628] hsr_slave_0: entered promiscuous mode [ 79.890712][ T5628] hsr_slave_1: entered promiscuous mode [ 79.891411][ T5628] debugfs: 'hsr0' already exists in 'hsr' [ 79.891429][ T5628] Cannot create hsr debugfs directory [ 80.219526][ T5616] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.231298][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.233100][ T5616] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.243979][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.266038][ T5616] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.275513][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.276855][ T5616] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.287919][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.419628][ T5615] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.429168][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.438837][ T5615] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.449605][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.452002][ T5615] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.461117][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.480798][ T5615] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.490966][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.565899][ T5627] Bluetooth: hci3: command tx timeout [ 80.565953][ T5627] Bluetooth: hci1: command tx timeout [ 80.565993][ T5627] Bluetooth: hci0: command tx timeout [ 80.571724][ T5618] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.584250][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.586999][ T5618] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.594103][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.599628][ T5618] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.610651][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.633220][ T5618] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.642826][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.646284][ T5620] Bluetooth: hci4: command tx timeout [ 80.646319][ T5620] Bluetooth: hci2: command tx timeout [ 80.748778][ T5617] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.760676][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.778541][ T5617] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.789548][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.793616][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.810061][ T5617] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.820884][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.821769][ T5617] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.833521][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.901813][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.951117][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.954850][ T3375] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.954999][ T3375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.988904][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.989035][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.017189][ T5628] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.027626][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.031548][ T5628] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.041367][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.060656][ T5628] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.071156][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.084355][ T5628] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.095401][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.124261][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.157584][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.157705][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.198145][ T5616] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.214795][ T3375] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.214968][ T3375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.278106][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.384914][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.414315][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.420500][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.420606][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.460418][ T330] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.460556][ T330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.549039][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.581237][ T330] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.581377][ T330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.602294][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.649245][ T330] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.649383][ T330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.760056][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.862343][ T330] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.862511][ T330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.912619][ T27] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.912766][ T27] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.595567][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.646505][ T5627] Bluetooth: hci0: command tx timeout [ 82.646608][ T5627] Bluetooth: hci1: command tx timeout [ 82.646648][ T5627] Bluetooth: hci3: command tx timeout [ 82.726192][ T5620] Bluetooth: hci2: command tx timeout [ 82.726205][ T5627] Bluetooth: hci4: command tx timeout [ 82.950557][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.184746][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.252338][ T5615] veth0_vlan: entered promiscuous mode [ 83.315174][ T5615] veth1_vlan: entered promiscuous mode [ 83.505205][ T5618] veth0_vlan: entered promiscuous mode [ 83.561979][ T5615] veth0_macvtap: entered promiscuous mode [ 83.601609][ T5618] veth1_vlan: entered promiscuous mode [ 83.607502][ T5615] veth1_macvtap: entered promiscuous mode [ 83.692860][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.707889][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.711617][ T5616] veth0_vlan: entered promiscuous mode [ 83.724821][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.741761][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.758205][ T5616] veth1_vlan: entered promiscuous mode [ 83.803093][ T5618] veth0_macvtap: entered promiscuous mode [ 83.817513][ T294] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.871387][ T5618] veth1_macvtap: entered promiscuous mode [ 83.927927][ T294] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.928012][ T294] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.928047][ T294] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.964396][ T5616] veth0_macvtap: entered promiscuous mode [ 83.974524][ T5628] veth0_vlan: entered promiscuous mode [ 83.975614][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.975633][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.017159][ T5616] veth1_macvtap: entered promiscuous mode [ 84.038728][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.074593][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.083941][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.090316][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.111523][ T5617] veth0_vlan: entered promiscuous mode [ 84.120541][ T5628] veth1_vlan: entered promiscuous mode [ 84.148527][ T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.148578][ T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.177557][ T65] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.178468][ T65] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.178506][ T65] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.178539][ T65] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.194098][ T5617] veth1_vlan: entered promiscuous mode [ 84.284860][ T5615] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.287958][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.288866][ T294] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.289037][ T294] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.289182][ T294] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.436766][ T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.436815][ T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.458907][ T5628] veth0_macvtap: entered promiscuous mode [ 84.525432][ T5628] veth1_macvtap: entered promiscuous mode [ 84.552024][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.552065][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.593646][ T5617] veth0_macvtap: entered promiscuous mode [ 84.614146][ T5818] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 84.626591][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.626627][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.655612][ T5617] veth1_macvtap: entered promiscuous mode [ 84.674237][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.708201][ T294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.717499][ T294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.720151][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.727381][ T5620] Bluetooth: hci1: command tx timeout [ 84.727415][ T5620] Bluetooth: hci0: command tx timeout [ 84.727459][ T5627] Bluetooth: hci3: command tx timeout [ 84.758210][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.806536][ T5629] Bluetooth: hci4: command tx timeout [ 84.806600][ T5629] Bluetooth: hci2: command tx timeout [ 84.813636][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.858561][ T65] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.858669][ T65] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.858724][ T65] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.858764][ T65] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.955023][ T5820] loop4: detected capacity change from 0 to 65 [ 84.958540][ T294] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.958586][ T294] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.958619][ T294] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.958651][ T294] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.048718][ T5820] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway [ 85.293955][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.293999][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.591451][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.591500][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.610023][ T5829] loop4: detected capacity change from 0 to 64 [ 85.735827][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.744590][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.875786][ T5829] hfs: hfs: Invalid key length: 94 [ 86.038978][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.039044][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.102193][ T5831] FAULT_INJECTION: forcing a failure. [ 86.102193][ T5831] name failslab, interval 1, probability 0, space 0, times 1 [ 86.102256][ T5831] CPU: 0 UID: 0 PID: 5831 Comm: syz.0.8 Not tainted syzkaller #0 PREEMPT(full) [ 86.102280][ T5831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 86.102291][ T5831] Call Trace: [ 86.102298][ T5831] [ 86.102305][ T5831] dump_stack_lvl+0xe8/0x150 [ 86.102335][ T5831] should_fail_ex+0x410/0x560 [ 86.102363][ T5831] ? __alloc_skb+0x1db/0x7a0 [ 86.102387][ T5831] should_failslab+0xa8/0x100 [ 86.102408][ T5831] ? __alloc_skb+0x1db/0x7a0 [ 86.102431][ T5831] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 86.102458][ T5831] ? __alloc_skb+0x18d/0x7a0 [ 86.102481][ T5831] ? __alloc_skb+0x1db/0x7a0 [ 86.102511][ T5831] __alloc_skb+0x1db/0x7a0 [ 86.102541][ T5831] netlink_sendmsg+0x5d4/0xb40 [ 86.102571][ T5831] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.102599][ T5831] ? apparmor_socket_sendmsg+0x98/0x360 [ 86.102627][ T5831] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.102647][ T5831] sock_sendmsg_nosec+0x13a/0x180 [ 86.102673][ T5831] ____sys_sendmsg+0x54e/0x850 [ 86.102697][ T5831] ? __pfx_____sys_sendmsg+0x10/0x10 [ 86.102725][ T5831] ? import_iovec+0x73/0xa0 [ 86.102746][ T5831] ___sys_sendmsg+0x2a5/0x360 [ 86.102764][ T5831] ? __lock_acquire+0x6df/0x2e50 [ 86.102787][ T5831] ? __pfx____sys_sendmsg+0x10/0x10 [ 86.102838][ T5831] ? __fget_files+0x2a/0x420 [ 86.102870][ T5831] ? __fget_files+0x3a2/0x420 [ 86.102902][ T5831] __x64_sys_sendmsg+0x1b1/0x290 [ 86.102924][ T5831] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 86.102962][ T5831] do_syscall_64+0x166/0x520 [ 86.102985][ T5831] ? trace_irq_disable+0x3b/0x140 [ 86.103002][ T5831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.103021][ T5831] ? clear_bhb_loop+0x70/0xc0 [ 86.103043][ T5831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.103060][ T5831] RIP: 0033:0x7f1c16b9e0d9 [ 86.103078][ T5831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.103093][ T5831] RSP: 002b:00007f1c17aae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 86.103114][ T5831] RAX: ffffffffffffffda RBX: 00007f1c16e25fa0 RCX: 00007f1c16b9e0d9 [ 86.103127][ T5831] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 86.103139][ T5831] RBP: 00007f1c17aae090 R08: 0000000000000000 R09: 0000000000000000 [ 86.103150][ T5831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.103161][ T5831] R13: 00007f1c16e26038 R14: 00007f1c16e25fa0 R15: 00007fffbe0dcad8 [ 86.103195][ T5831] [ 86.408927][ T31] audit: type=1326 audit(1787077179.405:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5832 comm="syz.3.4" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94a5d9e0d9 code=0x7ffc0000 [ 86.409022][ T31] audit: type=1326 audit(1787077179.405:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5832 comm="syz.3.4" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94a5d9e0d9 code=0x7ffc0000 [ 86.409061][ T31] audit: type=1326 audit(1787077179.405:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5832 comm="syz.3.4" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94a5d9e0d9 code=0x7ffc0000 [ 86.409097][ T31] audit: type=1326 audit(1787077179.405:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5832 comm="syz.3.4" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94a5d9e0d9 code=0x7ffc0000 [ 86.409134][ T31] audit: type=1326 audit(1787077179.405:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5832 comm="syz.3.4" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f94a5d9e0d9 code=0x7ffc0000 [ 86.409171][ T31] audit: type=1326 audit(1787077179.405:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5832 comm="syz.3.4" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94a5d9e0d9 code=0x7ffc0000 [ 86.409211][ T31] audit: type=1326 audit(1787077179.415:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5832 comm="syz.3.4" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94a5d9e0d9 code=0x7ffc0000 [ 86.413415][ T31] audit: type=1326 audit(1787077179.425:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5832 comm="syz.3.4" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f94a5d9e0d9 code=0x7ffc0000 [ 86.413463][ T31] audit: type=1326 audit(1787077179.425:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5832 comm="syz.3.4" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f94a5d9e0d9 code=0x7ffc0000 [ 86.624949][ T5835] loop0: detected capacity change from 0 to 64 ** replaying previous printk message ** [ 86.675309][ T49] ------------[ cut here ]------------ [ 86.675361][ T49] kernel BUG at fs/hfs/inode.c:476! [ 86.675403][ T49] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 86.696168][ T49] CPU: 0 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 86.705744][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 86.715815][ T49] Workqueue: writeback wb_workfn (flush-7:4) [ 86.721914][ T49] RIP: 0010:hfs_write_inode+0x9c7/0xa00 [ 86.727581][ T49] Code: 40 31 ff e8 3b d8 0c ff 81 e3 00 00 00 40 75 1c e8 2e d3 0c ff 49 bc f8 f8 f8 f8 f8 f8 f8 f8 e9 48 f7 ff ff e8 1a d3 0c ff 90 <0f> 0b e8 12 d3 0c ff e8 1d d3 77 fe eb dd 44 89 f1 80 e1 07 80 c1 [ 86.750107][ T49] RSP: 0018:ffffc90000ba7160 EFLAGS: 00010293 [ 86.756287][ T49] RAX: ffffffff82baec06 RBX: ffff888027470100 RCX: ffff88801b151f40 [ 86.764789][ T49] RDX: 0000000000000000 RSI: ffffffff8efdc1f0 RDI: 0000000000000000 [ 86.772761][ T49] RBP: ffffc90000ba72f8 R08: ffff88801b151f40 R09: 0000000000000003 [ 86.780821][ T49] R10: 0000000000000004 R11: 0000000000000000 R12: f8f8f8f8f8f8f8f8 [ 86.788885][ T49] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff92000174e30 [ 86.796862][ T49] FS: 0000000000000000(0000) GS:ffff888124cdc000(0000) knlGS:0000000000000000 [ 86.806046][ T49] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.813244][ T49] CR2: 00007f94a6b556c8 CR3: 000000005d0ce000 CR4: 00000000003526f0 [ 86.821226][ T49] Call Trace: [ 86.824609][ T49] [ 86.827556][ T49] ? __pfx_hfs_write_inode+0x10/0x10 [ 86.832858][ T49] ? do_raw_spin_unlock+0xf5/0x200 [ 86.837987][ T49] __writeback_single_inode+0x69d/0x1220 [ 86.843697][ T49] writeback_sb_inodes+0x9de/0x1b00 [ 86.849038][ T49] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 86.854736][ T49] ? rcu_is_watching+0x16/0xb0 [ 86.859551][ T49] ? queue_io+0x2d3/0x470 [ 86.863930][ T49] wb_writeback+0x41c/0xad0 [ 86.868502][ T49] ? queue_io+0x271/0x470 [ 86.873047][ T49] ? __pfx_wb_writeback+0x10/0x10 [ 86.878114][ T49] ? do_raw_spin_lock+0x12b/0x2f0 [ 86.883188][ T49] wb_workfn+0x431/0x10f0 [ 86.887643][ T49] ? __pfx_wb_workfn+0x10/0x10 [ 86.892449][ T49] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 86.898283][ T49] ? lock_acquire+0x115/0x350 [ 86.902973][ T49] ? rcu_is_watching+0x16/0xb0 [ 86.907884][ T49] ? process_scheduled_works+0x97a/0x1630 [ 86.913618][ T49] process_scheduled_works+0xc3d/0x1630 [ 86.919180][ T49] ? __pfx_process_scheduled_works+0x10/0x10 [ 86.925265][ T49] ? assign_work+0x3cf/0x5d0 [ 86.929859][ T49] worker_thread+0xa47/0xfb0 [ 86.934819][ T49] kthread+0x38b/0x480 [ 86.938918][ T49] ? __pfx_worker_thread+0x10/0x10 [ 86.944055][ T49] ? __pfx_kthread+0x10/0x10 [ 86.948651][ T49] ret_from_fork+0x514/0xb70 [ 86.953254][ T49] ? __pfx_ret_from_fork+0x10/0x10 [ 86.958365][ T49] ? __switch_to+0xc89/0x1420 [ 86.963045][ T49] ? __pfx_kthread+0x10/0x10 [ 86.968082][ T49] ret_from_fork_asm+0x1a/0x30 [ 86.972874][ T49] [ 86.975893][ T49] Modules linked in: [ 86.983747][ T49] ---[ end trace 0000000000000000 ]--- [ 87.006952][ T10] cfg80211: failed to load regulatory.db [ 87.034453][ T49] RIP: 0010:hfs_write_inode+0x9c7/0xa00 [ 87.050456][ T5835] hfs: hfs: Invalid key length: 94 [ 87.058244][ T49] Code: 40 31 ff e8 3b d8 0c ff 81 e3 00 00 00 40 75 1c e8 2e d3 0c ff 49 bc f8 f8 f8 f8 f8 f8 f8 f8 e9 48 f7 ff ff e8 1a d3 0c ff 90 <0f> 0b e8 12 d3 0c ff e8 1d d3 77 fe eb dd 44 89 f1 80 e1 07 80 c1 [ 87.058791][ T65] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.092884][ T49] RSP: 0018:ffffc90000ba7160 EFLAGS: 00010293 [ 87.100574][ T49] RAX: ffffffff82baec06 RBX: ffff888027470100 RCX: ffff88801b151f40 [ 87.108880][ T49] RDX: 0000000000000000 RSI: ffffffff8efdc1f0 RDI: 0000000000000000 [ 87.117348][ T49] RBP: ffffc90000ba72f8 R08: ffff88801b151f40 R09: 0000000000000003 [ 87.146816][ T49] R10: 0000000000000004 R11: 0000000000000000 R12: f8f8f8f8f8f8f8f8 [ 87.146857][ T49] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff92000174e30 [ 87.146876][ T49] FS: 0000000000000000(0000) GS:ffff888124cdc000(0000) knlGS:0000000000000000 [ 87.155178][ T49] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.155205][ T49] CR2: 00007f86385ef2f8 CR3: 000000000eb48000 CR4: 00000000003526f0 [ 87.155227][ T49] Kernel panic - not syncing: Fatal exception [ 87.193252][ T49] Kernel Offset: disabled [ 87.197767][ T49] Rebooting in 86400 seconds..