last executing test programs: 8.994631083s ago: executing program 3 (id=40): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000480)={0x8, 0x80, 0x7, 0x2}) 8.211344826s ago: executing program 3 (id=46): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20, @void, @value}, 0x94) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62881) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) 8.20678826s ago: executing program 4 (id=47): r0 = open(&(0x7f00000003c0)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x21) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000, 0x0) openat(r0, &(0x7f0000004400)='./bus\x00', 0x6b942, 0x0) pselect6(0x40, &(0x7f0000000040)={0x80000000000005, 0x200000001, 0x2, 0x8000000000000001, 0x10000, 0x2, 0x2, 0x2}, 0x0, 0x0, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)={&(0x7f00000002c0)={[0xb]}, 0x8}) 7.453317931s ago: executing program 3 (id=50): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x5e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 7.178676998s ago: executing program 0 (id=51): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup(r2, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000007c0)={r0, r3, 0x3, 0x0, @val=@perf_event={0x1}}, 0x18) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 7.128336795s ago: executing program 1 (id=52): mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r0) close_range(r2, 0xffffffffffffffff, 0x0) r3 = io_uring_setup(0x7c41, &(0x7f0000000300)={0x0, 0x0, 0x40}) io_uring_register$IORING_REGISTER_RING_FDS(r3, 0x14, &(0x7f0000001780)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) 6.698437176s ago: executing program 3 (id=53): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@dioread_nolock}]}, 0x3, 0x4de, &(0x7f0000000c40)="$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") r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f00000004c0)='./bus\x00', 0x4100, 0xa8c3da3a21fd266d) dup3(r1, r0, 0x0) io_setup(0x6, &(0x7f0000000240)=0x0) io_submit(r2, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x8, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a07, 0x3000, 0x0, 0xd00}]) 6.689967481s ago: executing program 0 (id=54): r0 = socket(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x5452, &(0x7f0000000380)={'gre0\x00', 0x0}) r1 = epoll_create(0x712) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x1}) recvmsg(r0, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(r0, &(0x7f0000001040)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) 6.311580246s ago: executing program 4 (id=56): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9da, 0x22b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000000), &(0x7f0000000080)='%pi6 \x00'}, 0x20) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, &(0x7f0000000240)={0x0, 0x0, 0x7, {0x7, 0x0, "c2817842c4"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 6.225988813s ago: executing program 1 (id=57): r0 = socket(0x200000000000011, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x32, &(0x7f00000003c0)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000300)=ANY=[@ANYBLOB="e90c630faca20180c20000000800450000240000e0000011"], 0x0) 6.026931301s ago: executing program 0 (id=58): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sys_enter\x00', r0}, 0x10) fsmount(0xffffffffffffffff, 0x0, 0x0) fspick(0xffffffffffffff9c, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fremovexattr(r1, &(0x7f0000000000)=@known='system.posix_acl_access\x00') 5.70575031s ago: executing program 2 (id=59): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$afs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={[{@dyn}]}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@verity_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000040)='./file0\x00', 0x2000000) 5.566505329s ago: executing program 1 (id=60): r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000500)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000200)="c75582abf2ef0e4c0b130817b5786bf907ea9c6f3dfafb756c96961a9faf30eee7ac0ab183d750e6e70b07eb4c750a89db44db506e62b9994d929024f734a79e9a5085807c795b8f", 0x0, 0x48) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000000)="45ff44bbab51dba8a27114154f1632f969758e23f47722217d7271a4e3d5222019d31291128a0e08b5a4b24bff4e3c928980d590ba53765e5048fe87ecbb70dee0f9e05e94883017", 0x0, 0x48) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000140)={&(0x7f0000ff1000/0xf000)=nil, 0xf000}) 5.409856573s ago: executing program 0 (id=61): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 5.121059806s ago: executing program 2 (id=62): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r1, 0x29, 0x4d, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x8) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/19, 0x13}, 0x20) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) 4.795852527s ago: executing program 3 (id=63): r0 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r2 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={r0, 0x0, 0x0, 0x2000}) r3 = fcntl$dupfd(r2, 0x0, r2) lseek(r3, 0x0, 0x1) 4.765559365s ago: executing program 1 (id=64): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000400)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) pipe(0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)={0x48, 0x3, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xf}]}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2d}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x801}, 0x8004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 4.28383357s ago: executing program 2 (id=65): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) 4.106037982s ago: executing program 0 (id=66): creat(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x6a1c2, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x1, 0x7) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8041, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c6465627567000000000100000065743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x0, 0x2aa, &(0x7f00000002c0)="$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") process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000055bed40020000000000000003010902380002000000060904c700010e0101000300c409050a000000000000090400000101be2600090500000000000000080b"], 0x0) 3.88103713s ago: executing program 3 (id=67): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) truncate(&(0x7f0000000140)='./file0\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.678690193s ago: executing program 32 (id=67): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) truncate(&(0x7f0000000140)='./file0\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.518685922s ago: executing program 1 (id=69): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000600)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@init_itable}, {@lazytime}, {@usrquota}, {@errors_continue}, {@data_err_abort}]}, 0x1, 0x5e1, &(0x7f0000000a40)="$eJzs3c9vFdUeAPDv3P6gpbzXQl6e4kKaGAOJ0tIChhgXsDWkwR9x48ZKCyIFGlqjRRNKghsT48YYE1cuxP9CiWxZ6cqFG1eGhKhhaeI1c+9M6W3ntvTSdpD5fJJLZ865wznT22/PmdNzZgKorOH0n1rE3oiYTSIGk8WlvO7IMoeb77v350en01cS9fprvyeRZGn5+5Ps60B2cF9E/PhDEnu6Vpc7t3Dl/OTMzPTlbH90/sLs6NzClYPnLkyenT47fXH8hfFjR48cPTZ2qKPzulqQdvL6u+8PfjLx5jdf/ZWMffvLRBLH4+XsjcvPY7MMx3Dje5Kszho4ttmFlaQr+zlZ/hEn3SVWiA3JP7+eiHgiBqMr7n94g/HxK6VWDthS9SSiDlRUIv6hovJ+QH5tv/I6uFZKrwTYDndPNAcAVsd/d3NsMPoaYwM77yWxfFgniYjORuZa7YqI27cmrp+5NXE9tmgcDii2eC0iniyK/6QR/0PRF0ON+K+1xH/aLziVfU3TX+2w/JVDxeIftk8z/vvWjP9oE/9vLYv/tzssf/j+5jv9LfHf3+kpAQAAAAAAQGXdPBERzxf9/b+2NP8nCub/DETE8U0of3jF/uq//9fubEIxQIG7JyJeKpz/W8tn/w51ZVv/acwH6EnOnJuZPhQR/42IA9GzI90fW6OMg5/u+bJd3nA2/y9/peXfzuYCZvW4072j9ZipyfnJhz1vIOLutYinCuf/Jkvtf1LQ/qe/D2YfsIw9z9441S5v/fgHtkr964j9he3//btWJGvfn2O00R8YzXsFqz394WfftSu/0/h3iwl4eGn7v3Pt+B9Klt+vZ27jZRxe6K63y+u0/9+bvN645UxvlvbB5Pz85bGI3uRkV5rakj6+8TrD4yiPhzxe0vg/8Mza439F/f/+iFhc8X8nf7SuKc79/++BX9vVR/8fypPG/9SG2v+Nb4zfGPq+XfkP1v4fabT1B7IU43/Q9EUepr2t6QXh2F2Utd31BQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDHQS0idkVSG1nartVGRiIGIuJ/sbM2c2lu/rkzl967OJXmNZ7/X8uf9DvY3E/y5/8PLdsfX7F/OCJ2R8TnXf2N/ZHTl2amyj55AAAAAAAAAAAAAAAAAAAAeEQMtFn/n/qtq+zaAVuuu+wKAKUpiP+fyqgHsP20/1Bd4h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/gHAAAAAIDHyu59N39OImLxxf7GK9Wb5fWUWjNgq9XKrgBQGrf4gepqTv3pLbsaQAlc4wPJOvl9bQ9a78i1zJ5+iIMBAAAAAAAAAAAAoHL277X+H6rK+n+oLuv/obryR3/sK7kewPZzjQ/EOiv5C9f/r3sUAAAAAAAAAAAAALCZ5haunJ+cmZm+bOONR6Ma27lRr9evpj8Fj0p9/uUb+VT4Nu/pK/n7nK/1e7CjyvudBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtPonAAD//6euJAc=") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, 0x9d}) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x8e) mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000100)='./file0\x00', 0x2) lchown(&(0x7f0000000340)='./file0\x00', 0x0, 0xee00) 2.467775441s ago: executing program 4 (id=70): socket$rds(0x15, 0x5, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040)) 2.420524308s ago: executing program 2 (id=71): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000029"], 0x280) 1.805285967s ago: executing program 4 (id=72): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r0, 0x400, 0x1) open(&(0x7f0000000300)='./file0\x00', 0x41, 0x20) r1 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x5) fcntl$getflags(r0, 0x401) 744.872698ms ago: executing program 2 (id=73): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001040)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df283b3ca3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25cb51279b18c8e5bfbc52152be37f5e2b783e2149be25180430ac63ee1bb8c00bb6125e65839ae5b02d542a97d1bfb1ca420b5405baaaf5ec6ad96af2814dbbea5a064f2ab6fc0904c07f02cbfadfb96866d962e6e21d3a0a0276a36e0", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000f00)="63c3b174ab06077f6ee67ac1310d86586b13d2c9e203a9da866b81e20e9fe5c432193989489c1459ce9cd14fa3b43a0b9b6004118a35444790d70af5c873561ac1ad55af7f9f8551103f694e2a22346ca675898ce02a665ecc07e153e3949b954c1d74b105c14411925a8ae24778d4", 0x6f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="755ca9bd3fd87456466cd4ab09930a7972d7df968a6a6114f3db5548c265a1c0eadf9dc81f4de7a659bf2fd963b62ab6a3291b994ce3e68d29974cbd144ef4803bb11e49afd9e9f6c69e23d94b880d424a56af70b7b3f69ca07b85cd6fa37d39078bf235b355d36147cab8073e1818c615ae34fb38d8c92049fbd2d371eb493d8162d8836b8f9295d17e445e49134b4f94932984566c6d1d7b479a1d292cd39caf50ba08e39a6ac5b4d565b0f4eea211688dfcffad93d9c534ad1c8b2517dcf778797a45b32b88b7880c5122eff57a20ac7211b96753987c85f18d86103e0eb0d2266bd6e51695e6", 0xe8}, {&(0x7f0000000a40)="a874f71022111112ec5e2602f419e493ea5b4acf974d9283ee3375a461bb9065c90429ee1e99af0ae05a2cdf6095f3c3bcaf502fe5bc586d74a09a829064afeb21d6a37184cba31f9a404f96368db3439c616b32ca53867d1287a26ea498e4f743acd6252d1590999bc24f950e04e6a96c8637d150e4dca23239ce0412d084932196a057d6486b668c61dd5a01bb22529c0ae2eb008dea68a0770dc99559a527dd152975cbe3751d76d934cafa51e2d9c8cdea4d85e9d6f230d18ad14fdbd9b91a23af1d5d1342d6", 0xc8}, {&(0x7f0000001340)="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", 0x31c}], 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="800000000000000007000000070b450a010101ac1e000183073cac1e0101071b7dac1414bb64010101ac1414aaac1414bb00000000ac1414bb860916ba75d2956527442c2833ac1414bb00000003e000000100000004e0000002ffffff5dac1414bb0000cf107f000001000001ff8310bbded4a7067d627ba07946ab21900000100000000000000001000000000100000d0000000000000001000000000000000d"], 0xb0}}], 0x3, 0x4004880) 441.527736ms ago: executing program 0 (id=74): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x3, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @remote}, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f00000022c0)={@dev={0xac, 0x14, 0x14, 0x10}, @empty, 0x0, "8a147ab429a268100a54c80e1e7a328017293a1441396d46117beb5ab1394be4", 0x200, 0x1, 0xb, 0x81}, 0x3c) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000005000000000800040001000000", 0x24) 234.359083ms ago: executing program 1 (id=75): r0 = openat$cuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000004bc0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = syz_io_uring_setup(0x119, &(0x7f0000000140)={0x0, 0xfad6, 0x400}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) write$FUSE_ATTR(r0, &(0x7f0000000080)={0x78, 0x0, r1, {0x18, 0xc099, 0x0, {0x3, 0x100, 0x91d, 0x7f, 0x8, 0x9, 0xd, 0x4, 0xfffffffe, 0x8000, 0x3, r2, r3, 0x5, 0x2}}}, 0x78) 229.902615ms ago: executing program 4 (id=76): syz_open_procfs(0x0, &(0x7f0000000180)='attr\x00') mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x0, 0x0, @empty}, 0x1c) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 33.221925ms ago: executing program 2 (id=77): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r2, &(0x7f0000001640)=ANY=[], 0x1a3) write$P9_RSTATu(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="650000007d010000004b000300ef48000000010000000300000000000000000000020900000006000000d4000000000000007e0faedd67655bec0f1595980c006367726f75702e737461740000000100000b002f6465"], 0x65) write$binfmt_misc(r2, &(0x7f0000000000), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6]}}) 0s ago: executing program 4 (id=78): ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000200)={0x0, 'pimreg0\x00', {0x3}, 0x46}) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.127' (ED25519) to the list of known hosts. [ 170.438750][ T5770] cgroup: Unknown subsys name 'net' [ 170.584276][ T5770] cgroup: Unknown subsys name 'cpuset' [ 170.598746][ T5770] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 215.172970][ T5770] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 219.475271][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.486545][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 220.075942][ T5787] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 220.105626][ T5787] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 220.136383][ T5787] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 220.226972][ T5791] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 220.238161][ T5791] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 220.247646][ T5791] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 220.260924][ T5795] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 220.274098][ T5795] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 220.282195][ T5795] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 220.292134][ T5795] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 220.300769][ T5795] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 220.321607][ T5796] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 220.335886][ T5796] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 220.345852][ T5796] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 220.358325][ T5796] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 220.370453][ T5796] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 220.374448][ T5083] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 220.381871][ T5803] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 220.390502][ T5083] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 220.397513][ T5803] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 220.402217][ T5083] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 220.415481][ T5083] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 220.425672][ T5083] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 220.446248][ T5083] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 220.449510][ T5803] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 220.457219][ T5083] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 220.464940][ T5803] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 220.470828][ T5083] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 220.487692][ T5795] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 220.499844][ T5795] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 221.671766][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 221.908118][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 222.068736][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 222.431212][ T5795] Bluetooth: hci2: command tx timeout [ 222.437365][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 222.514563][ T5795] Bluetooth: hci0: command tx timeout [ 222.558917][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 222.583911][ T5795] Bluetooth: hci1: command tx timeout [ 222.589560][ T5795] Bluetooth: hci3: command tx timeout [ 222.664242][ T5787] Bluetooth: hci4: command tx timeout [ 223.012259][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.022244][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.030111][ T5786] bridge_slave_0: entered allmulticast mode [ 223.039308][ T5786] bridge_slave_0: entered promiscuous mode [ 223.051820][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.059704][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.067592][ T5797] bridge_slave_0: entered allmulticast mode [ 223.080187][ T5797] bridge_slave_0: entered promiscuous mode [ 223.092705][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.100752][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.108582][ T5786] bridge_slave_1: entered allmulticast mode [ 223.117489][ T5786] bridge_slave_1: entered promiscuous mode [ 223.241642][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.249769][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.260063][ T5797] bridge_slave_1: entered allmulticast mode [ 223.272110][ T5797] bridge_slave_1: entered promiscuous mode [ 223.460220][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.600598][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.654481][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.664566][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.671986][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.679872][ T5800] bridge_slave_0: entered allmulticast mode [ 223.688878][ T5800] bridge_slave_0: entered promiscuous mode [ 223.708031][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.715931][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.723705][ T5800] bridge_slave_1: entered allmulticast mode [ 223.732506][ T5800] bridge_slave_1: entered promiscuous mode [ 223.742663][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.750489][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.758600][ T5793] bridge_slave_0: entered allmulticast mode [ 223.766814][ T5793] bridge_slave_0: entered promiscuous mode [ 223.846987][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.861951][ T5786] team0: Port device team_slave_0 added [ 223.880188][ T5786] team0: Port device team_slave_1 added [ 224.013815][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.021672][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.029611][ T5793] bridge_slave_1: entered allmulticast mode [ 224.038588][ T5793] bridge_slave_1: entered promiscuous mode [ 224.084091][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.091801][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.099635][ T5790] bridge_slave_0: entered allmulticast mode [ 224.108903][ T5790] bridge_slave_0: entered promiscuous mode [ 224.228564][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.274238][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.281938][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.292147][ T5790] bridge_slave_1: entered allmulticast mode [ 224.301256][ T5790] bridge_slave_1: entered promiscuous mode [ 224.319316][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.365445][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.372612][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.399153][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.419246][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.436554][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.478642][ T5797] team0: Port device team_slave_0 added [ 224.487636][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.496241][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.523564][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.524073][ T5787] Bluetooth: hci2: command tx timeout [ 224.583886][ T5787] Bluetooth: hci0: command tx timeout [ 224.631445][ T5797] team0: Port device team_slave_1 added [ 224.673828][ T5787] Bluetooth: hci3: command tx timeout [ 224.679650][ T5787] Bluetooth: hci1: command tx timeout [ 224.726698][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.742733][ T5793] team0: Port device team_slave_0 added [ 224.778524][ T5787] Bluetooth: hci4: command tx timeout [ 224.799762][ T5800] team0: Port device team_slave_0 added [ 224.815487][ T5793] team0: Port device team_slave_1 added [ 224.849246][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.889277][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.896580][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.924486][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.941207][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.948683][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.975719][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.994007][ T5800] team0: Port device team_slave_1 added [ 225.209012][ T5790] team0: Port device team_slave_0 added [ 225.218387][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.225720][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.252045][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.308439][ T5786] hsr_slave_0: entered promiscuous mode [ 225.317480][ T5786] hsr_slave_1: entered promiscuous mode [ 225.363263][ T5790] team0: Port device team_slave_1 added [ 225.372759][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.380013][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.406353][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.423693][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.430816][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.457175][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.522236][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.529643][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.556021][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.786212][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.793501][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.819915][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.844368][ T5797] hsr_slave_0: entered promiscuous mode [ 225.853271][ T5797] hsr_slave_1: entered promiscuous mode [ 225.861841][ T5797] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.870609][ T5797] Cannot create hsr debugfs directory [ 225.923059][ T5793] hsr_slave_0: entered promiscuous mode [ 225.932590][ T5793] hsr_slave_1: entered promiscuous mode [ 225.941301][ T5793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.949742][ T5793] Cannot create hsr debugfs directory [ 225.965812][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.973006][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.999438][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.360801][ T5800] hsr_slave_0: entered promiscuous mode [ 226.371208][ T5800] hsr_slave_1: entered promiscuous mode [ 226.379990][ T5800] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.388274][ T5800] Cannot create hsr debugfs directory [ 226.467802][ T5790] hsr_slave_0: entered promiscuous mode [ 226.478050][ T5790] hsr_slave_1: entered promiscuous mode [ 226.487065][ T5790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.494877][ T5790] Cannot create hsr debugfs directory [ 226.588679][ T5787] Bluetooth: hci2: command tx timeout [ 226.663605][ T5787] Bluetooth: hci0: command tx timeout [ 226.746235][ T5787] Bluetooth: hci1: command tx timeout [ 226.751922][ T5795] Bluetooth: hci3: command tx timeout [ 226.823595][ T5787] Bluetooth: hci4: command tx timeout [ 227.365818][ T5786] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 227.387042][ T5786] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 227.498977][ T5786] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 227.517555][ T5786] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 227.707293][ T5793] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 227.752613][ T5793] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 227.774588][ T5793] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 227.830211][ T5793] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 227.864595][ T5797] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 227.951642][ T5797] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 228.028975][ T5797] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 228.089227][ T5797] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 228.166503][ T5790] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 228.230901][ T5790] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 228.289404][ T5800] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 228.337321][ T5790] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 228.358853][ T5800] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 228.425129][ T5790] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 228.468153][ T5800] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 228.542474][ T5800] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 228.666139][ T5787] Bluetooth: hci2: command tx timeout [ 228.743744][ T5787] Bluetooth: hci0: command tx timeout [ 228.824476][ T5787] Bluetooth: hci1: command tx timeout [ 228.830124][ T5787] Bluetooth: hci3: command tx timeout [ 228.904484][ T5787] Bluetooth: hci4: command tx timeout [ 229.206082][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.396606][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.425845][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.499032][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.572992][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.601149][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.608883][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.674417][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.753441][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.760918][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.825101][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.832743][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.865783][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.891411][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.933326][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.941065][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.001758][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.009495][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.108442][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.153471][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.161115][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.196924][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.204791][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.220509][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.228068][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.531679][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.634865][ T3740] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.642514][ T3740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.737127][ T3740] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.744862][ T3740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.512906][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.555556][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.588798][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.779432][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.110563][ T5793] veth0_vlan: entered promiscuous mode [ 233.201104][ T5786] veth0_vlan: entered promiscuous mode [ 233.227226][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.282798][ T5793] veth1_vlan: entered promiscuous mode [ 233.409520][ T5786] veth1_vlan: entered promiscuous mode [ 233.432369][ T5790] veth0_vlan: entered promiscuous mode [ 233.596358][ T5790] veth1_vlan: entered promiscuous mode [ 233.726298][ T5793] veth0_macvtap: entered promiscuous mode [ 233.800058][ T5800] veth0_vlan: entered promiscuous mode [ 233.845102][ T5793] veth1_macvtap: entered promiscuous mode [ 233.859545][ T5786] veth0_macvtap: entered promiscuous mode [ 233.978567][ T5786] veth1_macvtap: entered promiscuous mode [ 233.993172][ T5800] veth1_vlan: entered promiscuous mode [ 234.052983][ T5790] veth0_macvtap: entered promiscuous mode [ 234.072764][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.150950][ T5790] veth1_macvtap: entered promiscuous mode [ 234.173322][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.234838][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.247021][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.261465][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.290094][ T5793] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.299320][ T5793] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.308486][ T5793] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.317591][ T5793] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.383811][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.394669][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.408859][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.440434][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.451394][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.461552][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.472278][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.486971][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.597097][ T5786] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.606458][ T5786] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.615625][ T5786] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.625690][ T5786] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.660715][ T5800] veth0_macvtap: entered promiscuous mode [ 234.697102][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.709344][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.719528][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.730302][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.744640][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.778938][ T5800] veth1_macvtap: entered promiscuous mode [ 234.974108][ T5790] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.983177][ T5790] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.994679][ T5790] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.003820][ T5790] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.082099][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.093719][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.103944][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.114769][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.124976][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.135696][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.150716][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.382057][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.395751][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.406236][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.416979][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.427177][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.439228][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.455068][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.486900][ T5797] veth0_vlan: entered promiscuous mode [ 235.529355][ T5797] veth1_vlan: entered promiscuous mode [ 235.687442][ T5800] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.696738][ T5800] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.708308][ T5800] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.719026][ T5800] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.805440][ T5797] veth0_macvtap: entered promiscuous mode [ 235.932316][ T5797] veth1_macvtap: entered promiscuous mode [ 236.149456][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.160370][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.170660][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.181446][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.193037][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.206937][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.217234][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.228050][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.242652][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.302204][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.313147][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.324479][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.335363][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.348665][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.360757][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.371021][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.381800][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.396285][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.551722][ T5797] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.561028][ T5797] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.570291][ T5797] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.579544][ T5797] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.097078][ T3710] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.105295][ T3710] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.362419][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.371309][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.423728][ T3571] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.431817][ T3571] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.640798][ T3848] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.649885][ T3848] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.756172][ T5793] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 241.985707][ T3740] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.994421][ T3740] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.007634][ T4910] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.017464][ T4910] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.256186][ T3571] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.264942][ T3571] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.434730][ T3946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.443320][ T3946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.180261][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.189375][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.281370][ T5975] capability: warning: `syz.3.4' uses deprecated v2 capabilities in a way that may be insecure [ 243.519464][ T5972] syz.0.1 (5972) used greatest stack depth: 3816 bytes left [ 243.539755][ T3848] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.551003][ T3848] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.788779][ T5981] : renamed from ipvlan1 [ 244.022454][ T5983] dvmrp0: entered allmulticast mode [ 244.077311][ T5983] pimreg: entered allmulticast mode [ 244.461712][ T5988] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 244.753290][ T5995] loop2: detected capacity change from 0 to 128 [ 244.788073][ T5417] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 245.005105][ T5417] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.016531][ T5417] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.026739][ T5417] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 245.036160][ T5417] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.164425][ T5417] usb 2-1: config 0 descriptor?? [ 245.819153][ T6010] loop0: detected capacity change from 0 to 16 [ 245.839113][ T6010] erofs (device loop0): mounted with root inode @ nid 36. [ 245.968249][ T6010] evm: overlay not supported [ 246.034176][ T5417] hid-led 0003:0FC5:B080.0001: probe with driver hid-led failed with error -71 [ 246.045950][ T5848] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 246.154126][ T5417] usb 2-1: USB disconnect, device number 2 [ 246.272605][ T6012] loop3: detected capacity change from 0 to 128 [ 246.315214][ T5848] usb 5-1: Using ep0 maxpacket: 32 [ 246.347402][ T5848] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 246.359524][ T5848] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 246.370930][ T5848] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 246.382919][ T5848] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 246.392461][ T5848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.499575][ T5848] usb 5-1: config 0 descriptor?? [ 246.508192][ T6009] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 246.528516][ T5848] hub 5-1:0.0: USB hub found [ 246.781120][ T5848] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 247.109829][ T6019] syz.3.17: attempt to access beyond end of device [ 247.109829][ T6019] loop3: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 247.255234][ T5848] hid-generic 0003:046D:C314.0002: unknown main item tag 0x0 [ 247.277504][ T5848] hid-generic 0003:046D:C314.0002: hidraw0: USB HID v8.00 Device [HID 046d:c314] on usb-dummy_hcd.4-1/input0 [ 247.771364][ T5873] usb 5-1: reset high-speed USB device number 2 using dummy_hcd [ 247.992869][ T6009] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 248.245754][ T6032] VFS: could not find a valid V7 on nullb0. [ 248.309250][ T5873] usbhid 5-1:0.0: reset_resume error -1 [ 248.486585][ T6031] loop1: detected capacity change from 0 to 2048 [ 248.625523][ T5848] usb 5-1: USB disconnect, device number 2 [ 248.686138][ T6031] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.415575][ T6047] loop3: detected capacity change from 0 to 1024 [ 249.437394][ T5800] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.489053][ T6047] EXT4-fs: Ignoring removed orlov option [ 249.497139][ T6047] EXT4-fs: Ignoring removed nomblk_io_submit option [ 249.780485][ T6047] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.064511][ T6055] Process accounting resumed [ 250.512996][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.794860][ T6065] loop1: detected capacity change from 0 to 256 [ 251.145792][ T6067] loop0: detected capacity change from 0 to 4096 [ 251.163810][ T6067] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 251.770947][ T6073] vivid-007: disconnect [ 251.795598][ T6072] vivid-007: reconnect [ 252.275156][ T6067] syz.0.36 (6067) used greatest stack depth: 3584 bytes left [ 252.578204][ T5848] kernel read not supported for file inotify (pid: 5848 comm: kworker/1:6) [ 253.680479][ T6098] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 253.692217][ T6098] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 253.761842][ T6098] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 253.806795][ T6098] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 253.813164][ T6098] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 253.867687][ T6098] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 253.916822][ T6098] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 253.923201][ T6098] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 253.950420][ T6098] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 253.967391][ T6098] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 253.974537][ T6098] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 254.042996][ T6105] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:24098. Sending cookies. [ 254.145149][ T6098] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 254.163947][ T6098] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 254.170393][ T6098] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 254.182441][ T6098] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 254.680691][ T6113] loop3: detected capacity change from 0 to 512 [ 254.712515][ T6113] ======================================================= [ 254.712515][ T6113] WARNING: The mand mount option has been deprecated and [ 254.712515][ T6113] and is ignored by this kernel. Remove the mand [ 254.712515][ T6113] option from the mount to silence this warning. [ 254.712515][ T6113] ======================================================= [ 254.992901][ T6113] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.53: invalid indirect mapped block 4294967295 (level 1) [ 255.095375][ T6113] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.53: invalid indirect mapped block 4294967295 (level 1) [ 255.181812][ T6113] EXT4-fs (loop3): 2 truncates cleaned up [ 255.215647][ T6113] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.284066][ T5873] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 255.614740][ T5787] Bluetooth: hci0: command 0x0c1a tx timeout [ 255.621599][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 255.637118][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.648812][ T5873] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 255.653339][ T6128] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 255.662019][ T5873] usb 5-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 255.682608][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.708703][ T5873] usb 5-1: config 0 descriptor?? [ 255.864970][ T5787] Bluetooth: hci1: command 0x0c1a tx timeout [ 255.943808][ T5787] Bluetooth: hci2: command 0x0c1a tx timeout [ 256.023752][ T5787] Bluetooth: hci3: command 0x0c1a tx timeout [ 256.182431][ T5790] EXT4-fs error (device loop3): ext4_lookup:1813: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 256.192700][ T5787] Bluetooth: hci4: command 0x0c1a tx timeout [ 256.212511][ T5790] EXT4-fs error (device loop3): ext4_lookup:1813: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 256.364437][ T5873] a4tech 0003:09DA:022B.0003: item fetching failed at offset 5/7 [ 256.377408][ T5873] a4tech 0003:09DA:022B.0003: parse failed [ 256.384075][ T5873] a4tech 0003:09DA:022B.0003: probe with driver a4tech failed with error -22 [ 256.635792][ T5848] usb 5-1: USB disconnect, device number 3 [ 256.807046][ T3571] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.844877][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.752237][ T6147] loop0: detected capacity change from 0 to 128 [ 257.819047][ T5787] Bluetooth: hci0: command 0x0c1a tx timeout [ 258.032334][ T5787] Bluetooth: hci2: command 0x0c1a tx timeout [ 258.165390][ T5787] Bluetooth: hci3: command 0x0c1a tx timeout [ 258.264295][ T5787] Bluetooth: hci4: command 0x0c1a tx timeout [ 258.276875][ T3571] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.431864][ T5873] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 258.634836][ T5873] usb 1-1: config 0 has an invalid interface number: 199 but max is 1 [ 258.637923][ T3571] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.643199][ T5873] usb 1-1: config 0 has no interface number 1 [ 258.660335][ T5873] usb 1-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 258.670682][ T5873] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 258.903761][ T5873] usb 1-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 258.919254][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 258.927873][ T5873] usb 1-1: SerialNumber: syz [ 258.952793][ T3571] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.046768][ T5873] usb 1-1: config 0 descriptor?? [ 259.106892][ T5873] usb 1-1: Found UVC 0.00 device (0002:0000) [ 259.119980][ T5873] usb 1-1: No valid video chain found. [ 259.184010][ T6156] loop1: detected capacity change from 0 to 1024 [ 259.283308][ T5873] usb 1-1: USB disconnect, device number 2 [ 259.353799][ T6156] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.421651][ T5795] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 259.431115][ T5795] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 259.455730][ T5795] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 259.548351][ T5795] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 259.560210][ T5795] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 259.571164][ T5795] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 259.894714][ T5787] Bluetooth: hci0: command 0x0c1a tx timeout [ 260.105557][ T5787] Bluetooth: hci2: command 0x0c1a tx timeout [ 260.129391][ T3571] bridge_slave_1: left allmulticast mode [ 260.140865][ T3571] bridge_slave_1: left promiscuous mode [ 260.147681][ T3571] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.185520][ T5787] Bluetooth: hci3: command 0x0c1a tx timeout [ 260.242910][ T3571] bridge_slave_0: left allmulticast mode [ 260.259276][ T3571] bridge_slave_0: left promiscuous mode [ 260.268292][ T3571] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.344154][ T5787] Bluetooth: hci4: command 0x0c1a tx timeout [ 260.714961][ T3571] dvmrp0 (unregistering): left allmulticast mode [ 261.188621][ T5800] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.201507][ T3571] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.302248][ T3571] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.356847][ T6180] loop9: detected capacity change from 0 to 7 [ 261.370675][ T3571] bond0 (unregistering): Released all slaves [ 261.405780][ T6180] Dev loop9: unable to read RDB block 7 [ 261.411749][ T6180] loop9: unable to read partition table [ 261.485359][ T6180] loop9: partition table beyond EOD, truncated [ 261.491854][ T6180] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 261.491854][ T6180] ) failed (rc=-5) [ 261.513237][ T6173] syz_tun: entered allmulticast mode [ 261.534920][ T6181] ===================================================== [ 261.542297][ T6181] BUG: KMSAN: uninit-value in io_nop+0x549/0x8a0 [ 261.549866][ T6181] io_nop+0x549/0x8a0 [ 261.554284][ T6181] io_issue_sqe+0x420/0x2130 [ 261.559055][ T6181] io_submit_sqes+0x11bc/0x2f80 [ 261.564206][ T6181] __se_sys_io_uring_enter+0x423/0x4aa0 [ 261.574470][ T6181] __ia32_sys_io_uring_enter+0x11d/0x1a0 [ 261.580832][ T6181] ia32_sys_call+0xd59/0x4180 [ 261.587147][ T6181] __do_fast_syscall_32+0xb0/0x110 [ 261.592902][ T6181] do_fast_syscall_32+0x38/0x80 [ 261.598123][ T6181] do_SYSENTER_32+0x1f/0x30 [ 261.602871][ T6181] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 261.609715][ T6181] [ 261.612138][ T6181] Uninit was created at: [ 261.618062][ T6181] __alloc_pages_noprof+0x9a7/0xe00 [ 261.623578][ T6181] alloc_pages_mpol_noprof+0x299/0x990 [ 261.629215][ T6181] alloc_pages_noprof+0x1bf/0x1e0 [ 261.635989][ T6181] allocate_slab+0x320/0x12e0 [ 261.640833][ T6181] ___slab_alloc+0x12ef/0x35e0 [ 261.646119][ T6181] kmem_cache_alloc_bulk_noprof+0x486/0x1330 [ 261.652312][ T6181] __io_alloc_req_refill+0x84/0x5b0 [ 261.658002][ T6181] io_submit_sqes+0x9a2/0x2f80 [ 261.662954][ T6181] __se_sys_io_uring_enter+0x423/0x4aa0 [ 261.673322][ T6181] __ia32_sys_io_uring_enter+0x11d/0x1a0 [ 261.680482][ T6181] ia32_sys_call+0xd59/0x4180 [ 261.685583][ T6181] __do_fast_syscall_32+0xb0/0x110 [ 261.690930][ T6181] do_fast_syscall_32+0x38/0x80 [ 261.697513][ T6181] do_SYSENTER_32+0x1f/0x30 [ 261.702245][ T6181] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 261.709681][ T6181] [ 261.712141][ T6181] CPU: 0 UID: 0 PID: 6181 Comm: syz.4.78 Not tainted 6.12.0-syzkaller-11677-g2ba9f676d0a2 #0 [ 261.722718][ T6181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 261.733083][ T6181] ===================================================== [ 261.741158][ T5787] Bluetooth: hci1: command tx timeout [ 261.747413][ T6181] Disabling lock debugging due to kernel taint [ 261.753824][ T6181] Kernel panic - not syncing: kmsan.panic set ... [ 261.760396][ T6181] CPU: 0 UID: 0 PID: 6181 Comm: syz.4.78 Tainted: G B 6.12.0-syzkaller-11677-g2ba9f676d0a2 #0 [ 261.772249][ T6181] Tainted: [B]=BAD_PAGE [ 261.776521][ T6181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 261.786734][ T6181] Call Trace: [ 261.790141][ T6181] [ 261.793190][ T6181] dump_stack_lvl+0x216/0x2d0 [ 261.798100][ T6181] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 261.804164][ T6181] dump_stack+0x1e/0x30 [ 261.808546][ T6181] panic+0x4e2/0xcf0 [ 261.812659][ T6181] ? kmsan_get_metadata+0xc1/0x1c0 [ 261.818031][ T6181] kmsan_report+0x2c7/0x2d0 [ 261.822772][ T6181] ? kmsan_get_metadata+0x13e/0x1c0 [ 261.828237][ T6181] ? kmsan_get_metadata+0x13e/0x1c0 [ 261.833677][ T6181] ? __msan_warning+0x95/0x120 [ 261.838685][ T6181] ? io_nop+0x549/0x8a0 [ 261.843018][ T6181] ? io_issue_sqe+0x420/0x2130 [ 261.847979][ T6181] ? io_submit_sqes+0x11bc/0x2f80 [ 261.853198][ T6181] ? __se_sys_io_uring_enter+0x423/0x4aa0 [ 261.859218][ T6181] ? __ia32_sys_io_uring_enter+0x11d/0x1a0 [ 261.865240][ T6181] ? ia32_sys_call+0xd59/0x4180 [ 261.870325][ T6181] ? __do_fast_syscall_32+0xb0/0x110 [ 261.875847][ T6181] ? do_fast_syscall_32+0x38/0x80 [ 261.881108][ T6181] ? do_SYSENTER_32+0x1f/0x30 [ 261.886014][ T6181] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 261.892767][ T6181] ? mod_objcg_state+0x6ee/0xe00 [ 261.897921][ T6181] ? kmsan_get_metadata+0x13e/0x1c0 [ 261.903355][ T6181] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 261.909408][ T6181] ? __memcg_slab_post_alloc_hook+0xbdd/0x1540 [ 261.915790][ T6181] ? kmsan_get_metadata+0x13e/0x1c0 [ 261.921225][ T6181] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 261.927283][ T6181] __msan_warning+0x95/0x120 [ 261.932092][ T6181] io_nop+0x549/0x8a0 [ 261.936266][ T6181] ? __pfx_io_nop+0x10/0x10 [ 261.940938][ T6181] io_issue_sqe+0x420/0x2130 [ 261.945709][ T6181] ? kmsan_get_metadata+0x13e/0x1c0 [ 261.951137][ T6181] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 261.957223][ T6181] io_submit_sqes+0x11bc/0x2f80 [ 261.962307][ T6181] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 261.968889][ T6181] __se_sys_io_uring_enter+0x423/0x4aa0 [ 261.974679][ T6181] ? futex_wait+0x2bf/0x360 [ 261.979377][ T6181] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 261.985933][ T6181] ? kmsan_get_metadata+0x13e/0x1c0 [ 261.991371][ T6181] ? do_futex+0x341/0x4a0 [ 261.995873][ T6181] ? kmsan_get_metadata+0x13e/0x1c0 [ 262.001298][ T6181] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 262.007358][ T6181] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 262.013409][ T6181] __ia32_sys_io_uring_enter+0x11d/0x1a0 [ 262.019269][ T6181] ia32_sys_call+0xd59/0x4180 [ 262.024198][ T6181] __do_fast_syscall_32+0xb0/0x110 [ 262.029545][ T6181] ? irqentry_exit+0x16/0x60 [ 262.034340][ T6181] do_fast_syscall_32+0x38/0x80 [ 262.039402][ T6181] do_SYSENTER_32+0x1f/0x30 [ 262.044131][ T6181] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 262.050720][ T6181] RIP: 0023:0xf7f63579 [ 262.054967][ T6181] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 262.074892][ T6181] RSP: 002b:00000000f50e657c EFLAGS: 00000206 ORIG_RAX: 00000000000001aa [ 262.083516][ T6181] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000002d3e [ 262.091669][ T6181] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 262.099818][ T6181] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 262.107960][ T6181] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 262.116112][ T6181] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 262.124252][ T6181] [ 262.127660][ T6181] Kernel Offset: disabled [ 262.132049][ T6181] Rebooting in 86400 seconds..