last executing test programs: 6.105275283s ago: executing program 0 (id=1): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000001f80)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000200)=""/161, 0xa1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000940)=""/229, 0xe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000d80)=""/180, 0xb4}], 0x1}}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001540)=""/252, 0xfc}], 0x1}}], 0x4, 0x400122a0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 5.841944665s ago: executing program 1 (id=2): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0xc0086c43, &(0x7f0000000080)=0x700) 5.646485035s ago: executing program 2 (id=3): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000001f40)="3751f02b82f73ccfc7c431617753f5732f765c975ebce8947e5388c4ff26fa3893119fd147a1576d9456136ab5f15493d175754e4b666e989869d01d418adc376ca22d8077c1b54bea92b5977a41d70ebcc4735ce6c012a5fe5ab7fef98e864216699a235d615ded3292397894b34a794bc14a2edfdc6978c0c97bcb02de69264d", 0x81}, {&(0x7f0000002000)="fd2f14a51e0494f9b8f2b935fb1a9cff89ae10e2a0738294cf07d83e8eb4c7dfc42c7a6eda68364b6f652fd54f6a895c3e3277ffa913ef1cfc8f4bdd227400", 0x3f}], 0x2) close(r0) 4.748319732s ago: executing program 2 (id=6): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(0x3) socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r0, 0x8b1b, &(0x7f0000000000)={'wlan1\x00'}) 4.144737105s ago: executing program 3 (id=7): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x3, 0x3, 0x0, 0x4}, 0x8) sendto$inet(r0, &(0x7f0000000340)="ab", 0x1, 0x40048c4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) 4.044335287s ago: executing program 1 (id=8): openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r0 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x0, 0x100002cc}, &(0x7f00000002c0)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 3.683773923s ago: executing program 2 (id=9): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) sendmmsg$inet6(r0, &(0x7f0000000a40)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x7, @private0, 0x400}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000008c0)='G\\', 0x2}], 0x1}}], 0x1, 0x20044000) 3.380262405s ago: executing program 3 (id=10): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) sendmmsg$inet6(r0, &(0x7f0000004880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000080) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) 2.966855894s ago: executing program 4 (id=5): syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x28000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=1']) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.710124255s ago: executing program 3 (id=11): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f0000000100)="ab", 0xffe0, 0x40048c4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x9, 0x2, 0xe, 0x8, 0x9, 0x8, 0x3, 0x6, 0x1, 0x3, 0x2, 0x8, 0x1, 0x7}, 0xe) 2.630704483s ago: executing program 0 (id=12): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000007600000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x4}, [@migrate={0x50, 0x11, [{@in=@local, @in=@broadcast, @in=@multicast2, @in6=@local, 0x3c, 0x4, 0x0, 0x2, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.417334443s ago: executing program 4 (id=13): syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000000)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0x1, 0x2b2, &(0x7f00000006c0)="$eJzs3U9rY1UUAPDz0jR9OosUcaMIPtCFqzJ166ZRRhC7UiKoCw3ODEgSBqYQmArGruYTuPR7+BHcuPEbDLgV3E0XlSfvX/7ga402VXR+v9Xh3nfuPXm3TbLJeZ+/Mh3ffZDE2dMnkaZJdI7iKM6T2I9ONL6JbgAA/x/neR6/5mWY5JUNM7udGy0MALgx1ef/X/rgBwD+4z78+JP3B8fHdz7IsjRe6j+eDZOImD6eDav5wf34MiZxL25HPy4i8oUqfve94zvRzQr78fp0PhsWmdPPfqzXH/wSUeYfRj/22/MPs8pK/nw23I3nI4vB/d2m1H682J7/Zkt+DHvxxmsr9R9EP376Ih7EJO5GkbvM//owy97Jv3361afFNkV+0onhXnldKfcFCQAAAAAAAAAAAAAAAAAAAACA7TrIsqRq31P27ymG6v47Oxfl/EHW2F/vz1PlJ81CVX+gvOmWM8/ju6a/zu0sy/L6wmV+N17uerAAAAAAAAAAAAAAAAAAAAAAFE4ePbk1mkzuPTx5dDq+dtB0A2h+1v931zlaGXk1TsejncsX3Nt8r9VuA0WtV14c3W5s6ba0B2eLkeeKera+xV4sRj6KKmgOZqt7vfB2tejpeJTVU81NHo+SP9srbQ7u+9WpXly3sLz8k7jI1880XZS6ntXb0t3o3Wqd+i3P883Weevn6ozqkaRssbHZ7rt10PoCiyAtziJd/OMXUz9cvuClbxk7137TAQAAAAAAAAAAAAAAAAAAWi1/9NsyeXZlaufGigIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf9jy+f9NkEbE+sgfgnmdfNU1ddCLhyf/8ksEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgGfB7AAAA//8rlFqg") capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x400000}) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dc4a) chown(&(0x7f0000000140)='./file0\x00', 0xee01, 0x0) 2.205324454s ago: executing program 2 (id=14): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0xc8200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x7d) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000004c0)=0x7) 1.974577144s ago: executing program 3 (id=15): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r0}) bind$xdp(r1, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) bind$xdp(r1, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) 1.724367274s ago: executing program 0 (id=16): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x80, 0x7ffffeb9}]}) r0 = getpid() sched_getscheduler(r0) syz_open_dev$video4linux(0x0, 0x0, 0x0) 1.265140701s ago: executing program 3 (id=17): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000010000d0400"/20, @ANYRES32, @ANYBLOB="01000000000002004c0012800b0001"], 0x6c}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f", 0x1f) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) 1.190347794s ago: executing program 2 (id=18): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000011c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f00000000c0)={0x18, r1, 0x2, 0x0, &(0x7f0000000280)=[{0x7fff, 0xffffffffffffffff}, {0x0, 0x1542}]}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x2, r1, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1}) 1.052891175s ago: executing program 4 (id=19): r0 = socket$tipc(0x1e, 0x5, 0x0) listen(r0, 0xfffffffa) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0xfffffffffffffffa) accept4$tipc(r0, 0x0, 0x0, 0x0) 834.573339ms ago: executing program 0 (id=20): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x0, 0x0, 0x4}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x2, 0x9, 0x0, 0x0, 0xf}) 468.386413ms ago: executing program 2 (id=21): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x30, r1, 0x5, 0x70bd2a, 0x2040000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}]}, 0x30}}, 0x4000010) 377.011028ms ago: executing program 3 (id=22): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r0, 0x0) listen(r0, 0x0) 280.474153ms ago: executing program 4 (id=23): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x20, r0, 0x7d243a6ea807936d, 0x12, 0x25dfdbf8, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x404c881}, 0x4000080) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) 171.162049ms ago: executing program 0 (id=24): syz_mount_image$ext4(&(0x7f0000000a40)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x8004587d, &(0x7f0000000140)={0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000080)={0x0, 0x8, 0x4, 0x0, 0x1, 0x0, 0xfffffffffffffffe, 0x80000001, 0x3f}) 0s ago: executing program 1 (id=25): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x24) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000380), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x9) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.181' (ED25519) to the list of known hosts. [ 202.382285][ T5777] cgroup: Unknown subsys name 'net' [ 202.515381][ T5777] cgroup: Unknown subsys name 'cpuset' [ 202.531080][ T5777] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 229.627939][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.634857][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.039583][ T5777] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 261.318570][ T5803] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 261.327165][ T5803] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 261.343558][ T5803] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 261.351832][ T5803] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 261.360142][ T5803] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 261.369431][ T5803] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 261.378987][ T5803] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 261.391683][ T5803] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 261.409695][ T5809] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 261.418927][ T5809] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 261.428119][ T5809] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 261.438705][ T5809] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 261.446864][ T5811] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 261.461474][ T5809] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 261.469366][ T5095] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 261.480009][ T5809] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 261.488399][ T5816] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 261.501449][ T5816] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 261.529244][ T49] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 261.541284][ T5816] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 261.596867][ T5804] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 261.620696][ T5804] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 261.630779][ T5804] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 261.653077][ T5804] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 261.685113][ T5804] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 263.168000][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 263.541727][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 263.604827][ T5803] Bluetooth: hci1: command tx timeout [ 263.610558][ T5803] Bluetooth: hci3: command tx timeout [ 263.618610][ T5804] Bluetooth: hci2: command tx timeout [ 263.619049][ T5807] Bluetooth: hci0: command tx timeout [ 263.680515][ T5805] chnl_net:caif_netlink_parms(): no params data found [ 263.875279][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 263.925352][ T5807] Bluetooth: hci4: command tx timeout [ 264.044827][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 264.415993][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.423786][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.434005][ T5799] bridge_slave_0: entered allmulticast mode [ 264.447476][ T5799] bridge_slave_0: entered promiscuous mode [ 264.526950][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.535354][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.543131][ T5799] bridge_slave_1: entered allmulticast mode [ 264.553346][ T5799] bridge_slave_1: entered promiscuous mode [ 264.843671][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.868945][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.876778][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.884728][ T5810] bridge_slave_0: entered allmulticast mode [ 264.894773][ T5810] bridge_slave_0: entered promiscuous mode [ 264.938892][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.956993][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.968135][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.976060][ T5810] bridge_slave_1: entered allmulticast mode [ 264.985962][ T5810] bridge_slave_1: entered promiscuous mode [ 265.475775][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.498654][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.517137][ T5799] team0: Port device team_slave_0 added [ 265.564841][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.572574][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.580486][ T5805] bridge_slave_0: entered allmulticast mode [ 265.590444][ T5805] bridge_slave_0: entered promiscuous mode [ 265.643515][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.653706][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.661728][ T5812] bridge_slave_0: entered allmulticast mode [ 265.671350][ T5812] bridge_slave_0: entered promiscuous mode [ 265.718521][ T5807] Bluetooth: hci3: command tx timeout [ 265.723234][ T5803] Bluetooth: hci0: command tx timeout [ 265.725060][ T5807] Bluetooth: hci2: command tx timeout [ 265.730022][ T5816] Bluetooth: hci1: command tx timeout [ 265.754572][ T5799] team0: Port device team_slave_1 added [ 265.799709][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.807636][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.815620][ T5805] bridge_slave_1: entered allmulticast mode [ 265.825398][ T5805] bridge_slave_1: entered promiscuous mode [ 265.839091][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.848185][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.856039][ T5812] bridge_slave_1: entered allmulticast mode [ 265.865755][ T5812] bridge_slave_1: entered promiscuous mode [ 265.876548][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.884512][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.892256][ T5800] bridge_slave_0: entered allmulticast mode [ 265.902802][ T5800] bridge_slave_0: entered promiscuous mode [ 265.960398][ T5810] team0: Port device team_slave_0 added [ 266.004598][ T5816] Bluetooth: hci4: command tx timeout [ 266.090278][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.098235][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.108647][ T5800] bridge_slave_1: entered allmulticast mode [ 266.117885][ T5800] bridge_slave_1: entered promiscuous mode [ 266.137404][ T5810] team0: Port device team_slave_1 added [ 266.147634][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.155021][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.181602][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.350644][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.358108][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.384824][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.427006][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.453131][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.593389][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.653095][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.680771][ T5799] hsr_slave_0: entered promiscuous mode [ 266.691280][ T5799] hsr_slave_1: entered promiscuous mode [ 266.712793][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.727786][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.735148][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.761539][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.906301][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.924349][ T5812] team0: Port device team_slave_0 added [ 266.975176][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.982444][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.009090][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.101649][ T5812] team0: Port device team_slave_1 added [ 267.190025][ T5800] team0: Port device team_slave_0 added [ 267.206367][ T5805] team0: Port device team_slave_0 added [ 267.295634][ T5800] team0: Port device team_slave_1 added [ 267.336649][ T5805] team0: Port device team_slave_1 added [ 267.505398][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.512542][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.539193][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.570378][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.577757][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.604493][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.780080][ T5816] Bluetooth: hci1: command tx timeout [ 267.786003][ T5816] Bluetooth: hci0: command tx timeout [ 267.786475][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.791557][ T5816] Bluetooth: hci2: command tx timeout [ 267.798667][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.804504][ T5803] Bluetooth: hci3: command tx timeout [ 267.830778][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.865349][ T5810] hsr_slave_0: entered promiscuous mode [ 267.874708][ T5810] hsr_slave_1: entered promiscuous mode [ 267.882952][ T5810] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 267.890959][ T5810] Cannot create hsr debugfs directory [ 267.903623][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.911478][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.938161][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.957568][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.964983][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.991563][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.024595][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.031776][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.058330][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.084497][ T5807] Bluetooth: hci4: command tx timeout [ 268.367194][ T5812] hsr_slave_0: entered promiscuous mode [ 268.377262][ T5812] hsr_slave_1: entered promiscuous mode [ 268.385868][ T5812] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 268.393691][ T5812] Cannot create hsr debugfs directory [ 268.612916][ T5805] hsr_slave_0: entered promiscuous mode [ 268.623343][ T5805] hsr_slave_1: entered promiscuous mode [ 268.632774][ T5805] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 268.640824][ T5805] Cannot create hsr debugfs directory [ 268.662445][ T5800] hsr_slave_0: entered promiscuous mode [ 268.672146][ T5800] hsr_slave_1: entered promiscuous mode [ 268.681244][ T5800] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 268.689118][ T5800] Cannot create hsr debugfs directory [ 269.838425][ T5799] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 269.925163][ T5807] Bluetooth: hci3: command tx timeout [ 269.930921][ T5807] Bluetooth: hci2: command tx timeout [ 269.936997][ T5816] Bluetooth: hci0: command tx timeout [ 269.942666][ T5816] Bluetooth: hci1: command tx timeout [ 269.959795][ T5799] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 270.082568][ T5799] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 270.121106][ T5799] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 270.164615][ T5803] Bluetooth: hci4: command tx timeout [ 270.178130][ T5810] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 270.286437][ T5810] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 270.424679][ T5810] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 270.448527][ T5812] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 270.473954][ T5812] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 270.522606][ T5810] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 270.547755][ T5812] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 270.573589][ T5812] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 270.683963][ T5800] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 270.741719][ T5800] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 270.852012][ T5800] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 270.966116][ T5800] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 271.059304][ T5805] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 271.140948][ T5805] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 271.259555][ T5805] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 271.350792][ T5805] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 271.603144][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.855045][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.917984][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.979528][ T1844] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.987534][ T1844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.078974][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.162684][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.223604][ T1844] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.231409][ T1844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.294914][ T1844] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.302564][ T1844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.413667][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.470978][ T1844] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.478745][ T1844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.595510][ T1844] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.603181][ T1844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.712176][ T5799] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 272.772702][ T1844] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.780252][ T1844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.871782][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.133744][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.201519][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.312393][ T3938] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.320244][ T3938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.401547][ T5810] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 273.432390][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.470832][ T3938] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.478705][ T3938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.675937][ T3938] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.683607][ T3938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.709658][ T3938] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.717545][ T3938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.970356][ T5800] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 273.981368][ T5800] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 275.312199][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.376023][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.783511][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.973881][ T5799] veth0_vlan: entered promiscuous mode [ 276.080694][ T5812] veth0_vlan: entered promiscuous mode [ 276.155768][ T5799] veth1_vlan: entered promiscuous mode [ 276.221704][ T5812] veth1_vlan: entered promiscuous mode [ 276.390417][ T5810] veth0_vlan: entered promiscuous mode [ 276.439733][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.466672][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.601154][ T5810] veth1_vlan: entered promiscuous mode [ 276.670645][ T5812] veth0_macvtap: entered promiscuous mode [ 276.759215][ T5812] veth1_macvtap: entered promiscuous mode [ 276.778844][ T5799] veth0_macvtap: entered promiscuous mode [ 276.876194][ T5799] veth1_macvtap: entered promiscuous mode [ 277.054324][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.140543][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.166021][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.199111][ T5810] veth0_macvtap: entered promiscuous mode [ 277.304501][ T5810] veth1_macvtap: entered promiscuous mode [ 277.320528][ T5812] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.329808][ T5812] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.339124][ T5812] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.348561][ T5812] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.385868][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.398697][ T5800] veth0_vlan: entered promiscuous mode [ 277.522211][ T5799] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.532644][ T5799] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.542096][ T5799] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.551419][ T5799] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.606669][ T5800] veth1_vlan: entered promiscuous mode [ 277.656695][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.815001][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.915496][ T5810] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.924901][ T5810] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.934004][ T5810] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.943421][ T5810] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.003740][ T5800] veth0_macvtap: entered promiscuous mode [ 278.087230][ T5800] veth1_macvtap: entered promiscuous mode [ 278.330965][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.415078][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.497718][ T5800] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.507090][ T5800] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.516373][ T5800] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.525553][ T5800] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.610274][ T5805] veth0_vlan: entered promiscuous mode [ 279.753099][ T5805] veth1_vlan: entered promiscuous mode [ 280.128346][ T5805] veth0_macvtap: entered promiscuous mode [ 280.202273][ T5805] veth1_macvtap: entered promiscuous mode [ 280.462657][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.529788][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.680504][ T5805] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.690027][ T5805] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.701680][ T5805] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.710960][ T5805] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.073292][ T3938] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.083151][ T3938] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.416853][ T3543] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.425840][ T3543] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.438154][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.447240][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.776567][ T3573] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.785830][ T3573] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.878279][ T3543] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.887286][ T3543] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.907318][ T5812] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 286.150033][ T3543] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.159815][ T3543] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.468231][ T4204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.476499][ T4204] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.884645][ T4204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.892877][ T4204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.466990][ T5987] loop1: detected capacity change from 0 to 2048 [ 287.480922][ T5987] ======================================================= [ 287.480922][ T5987] WARNING: The mand mount option has been deprecated and [ 287.480922][ T5987] and is ignored by this kernel. Remove the mand [ 287.480922][ T5987] option from the mount to silence this warning. [ 287.480922][ T5987] ======================================================= [ 287.729858][ T5987] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 288.231273][ T6001] warning: `syz.2.6' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 288.896121][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.904461][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.200864][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.209233][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.589881][ T6020] loop4: detected capacity change from 0 to 256 [ 290.788123][ T6020] capability: warning: `syz.4.13' uses deprecated v2 capabilities in a way that may be insecure [ 291.118867][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 291.126486][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 291.756726][ T6032] netlink: 'syz.3.17': attribute type 1 has an invalid length. [ 291.765342][ T6032] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.17'. [ 292.484722][ T1844] ===================================================== [ 292.492178][ T1844] BUG: KMSAN: uninit-value in xas_load+0xd20/0xd70 [ 292.499566][ T1844] xas_load+0xd20/0xd70 [ 292.503978][ T1844] xas_find+0x2c8/0xd40 [ 292.511565][ T1844] xa_find+0x15a/0x2a0 [ 292.517219][ T1844] io_unregister_zcrx_ifqs+0x75/0x1d0 [ 292.522872][ T1844] io_ring_ctx_free+0x61/0x740 [ 292.528253][ T1844] io_ring_exit_work+0xdec/0xe20 [ 292.533462][ T1844] process_scheduled_works+0xb8e/0x1d80 [ 292.539469][ T1844] worker_thread+0xedf/0x1590 [ 292.544640][ T1844] kthread+0xd5c/0xf00 [ 292.548947][ T1844] ret_from_fork+0x1e3/0x310 [ 292.553779][ T1844] ret_from_fork_asm+0x1a/0x30 [ 292.559084][ T1844] [ 292.561550][ T1844] Uninit was stored to memory at: [ 292.567650][ T1844] xa_find+0x26c/0x2a0 [ 292.572020][ T1844] io_unregister_zcrx_ifqs+0x75/0x1d0 [ 292.577886][ T1844] io_ring_ctx_free+0x61/0x740 [ 292.583116][ T1844] io_ring_exit_work+0xdec/0xe20 [ 292.589017][ T1844] process_scheduled_works+0xb8e/0x1d80 [ 292.595021][ T1844] worker_thread+0xedf/0x1590 [ 292.599984][ T1844] kthread+0xd5c/0xf00 [ 292.607383][ T1844] ret_from_fork+0x1e3/0x310 [ 292.612220][ T1844] ret_from_fork_asm+0x1a/0x30 [ 292.618399][ T1844] [ 292.620875][ T1844] Local variable id created at: [ 292.626094][ T1844] io_unregister_zcrx_ifqs+0x3d/0x1d0 [ 292.631726][ T1844] io_ring_ctx_free+0x61/0x740 [ 292.636891][ T1844] [ 292.639403][ T1844] CPU: 1 UID: 0 PID: 1844 Comm: kworker/u8:7 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(undef) [ 292.651938][ T1844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 292.662400][ T1844] Workqueue: iou_exit io_ring_exit_work [ 292.668362][ T1844] ===================================================== [ 292.675613][ T1844] Disabling lock debugging due to kernel taint [ 292.681948][ T1844] Kernel panic - not syncing: kmsan.panic set ... [ 292.688581][ T1844] CPU: 1 UID: 0 PID: 1844 Comm: kworker/u8:7 Tainted: G B 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(undef) [ 292.702353][ T1844] Tainted: [B]=BAD_PAGE [ 292.706674][ T1844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 292.716962][ T1844] Workqueue: iou_exit io_ring_exit_work [ 292.722835][ T1844] Call Trace: [ 292.726281][ T1844] [ 292.729386][ T1844] __dump_stack+0x26/0x30 [ 292.733987][ T1844] dump_stack_lvl+0x53/0x270 [ 292.738866][ T1844] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 292.745058][ T1844] dump_stack+0x1e/0x25 [ 292.749482][ T1844] panic+0x4bd/0xd50 [ 292.753710][ T1844] kmsan_report+0x31c/0x320 [ 292.758525][ T1844] ? __msan_warning+0x1b/0x30 [ 292.763480][ T1844] ? xas_load+0xd20/0xd70 [ 292.768069][ T1844] ? xas_find+0x2c8/0xd40 [ 292.772662][ T1844] ? xa_find+0x15a/0x2a0 [ 292.777207][ T1844] ? io_unregister_zcrx_ifqs+0x75/0x1d0 [ 292.783027][ T1844] ? io_ring_ctx_free+0x61/0x740 [ 292.788237][ T1844] ? io_ring_exit_work+0xdec/0xe20 [ 292.793612][ T1844] ? process_scheduled_works+0xb8e/0x1d80 [ 292.799801][ T1844] ? worker_thread+0xedf/0x1590 [ 292.804952][ T1844] ? kthread+0xd5c/0xf00 [ 292.809440][ T1844] ? ret_from_fork+0x1e3/0x310 [ 292.814450][ T1844] ? ret_from_fork_asm+0x1a/0x30 [ 292.819694][ T1844] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 292.825766][ T1844] ? stack_depot_save_flags+0x60f/0x7b0 [ 292.831609][ T1844] ? stack_depot_save+0x12/0x20 [ 292.836708][ T1844] ? kmsan_internal_chain_origin+0xb6/0xd0 [ 292.842789][ T1844] ? kmsan_internal_chain_origin+0x5d/0xd0 [ 292.848891][ T1844] ? __msan_chain_origin+0xc3/0x140 [ 292.854373][ T1844] ? xa_find+0x26c/0x2a0 [ 292.858859][ T1844] ? io_unregister_zcrx_ifqs+0x75/0x1d0 [ 292.864823][ T1844] ? io_ring_ctx_free+0x61/0x740 [ 292.869997][ T1844] ? io_ring_exit_work+0xdec/0xe20 [ 292.875335][ T1844] ? process_scheduled_works+0xb8e/0x1d80 [ 292.881302][ T1844] ? worker_thread+0xedf/0x1590 [ 292.886400][ T1844] ? kthread+0xd5c/0xf00 [ 292.890842][ T1844] ? ret_from_fork+0x1e3/0x310 [ 292.895853][ T1844] ? ret_from_fork_asm+0x1a/0x30 [ 292.901047][ T1844] ? kmsan_get_metadata+0xfb/0x160 [ 292.906422][ T1844] ? io_sqe_files_unregister+0xea/0x120 [ 292.912227][ T1844] __msan_warning+0x1b/0x30 [ 292.917009][ T1844] xas_load+0xd20/0xd70 [ 292.921394][ T1844] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 292.927733][ T1844] ? kmsan_get_metadata+0xfb/0x160 [ 292.933110][ T1844] ? io_sqe_files_unregister+0xea/0x120 [ 292.938895][ T1844] ? io_sqe_files_unregister+0xea/0x120 [ 292.944689][ T1844] xas_find+0x2c8/0xd40 [ 292.949083][ T1844] ? kmsan_get_metadata+0xfb/0x160 [ 292.954451][ T1844] ? kmsan_get_metadata+0xfb/0x160 [ 292.959825][ T1844] ? io_sqe_files_unregister+0xea/0x120 [ 292.965621][ T1844] ? io_sqe_files_unregister+0xea/0x120 [ 292.971404][ T1844] xa_find+0x15a/0x2a0 [ 292.975708][ T1844] ? io_sqe_files_unregister+0xea/0x120 [ 292.981513][ T1844] io_unregister_zcrx_ifqs+0x75/0x1d0 [ 292.987131][ T1844] ? io_sqe_files_unregister+0xea/0x120 [ 292.992952][ T1844] io_ring_ctx_free+0x61/0x740 [ 292.997987][ T1844] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 293.004116][ T1844] io_ring_exit_work+0xdec/0xe20 [ 293.009307][ T1844] ? __pfx_io_tctx_exit_cb+0x10/0x10 [ 293.014875][ T1844] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 293.021507][ T1844] ? __pfx_io_ring_exit_work+0x10/0x10 [ 293.027210][ T1844] process_scheduled_works+0xb8e/0x1d80 [ 293.033081][ T1844] worker_thread+0xedf/0x1590 [ 293.038061][ T1844] kthread+0xd5c/0xf00 [ 293.042331][ T1844] ? __pfx_worker_thread+0x10/0x10 [ 293.047716][ T1844] ? __pfx_kthread+0x10/0x10 [ 293.052525][ T1844] ret_from_fork+0x1e3/0x310 [ 293.057315][ T1844] ? __pfx_kthread+0x10/0x10 [ 293.062114][ T1844] ret_from_fork_asm+0x1a/0x30 [ 293.067177][ T1844] [ 293.070658][ T1844] Kernel Offset: disabled [ 293.075096][ T1844] Rebooting in 86400 seconds..