last executing test programs: 551.258315ms ago: executing program 3 (id=4): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000001300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) 466.546398ms ago: executing program 3 (id=5): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) unshare(0x2020400) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x55, 0x0}, 0x4000044) 248.982497ms ago: executing program 2 (id=3): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LK(r0, &(0x7f00000000c0)={0x28, 0x0, r1, {{0x7, 0x8000000000000000, 0x1, 0xffffffffffffffff}}}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 127.985083ms ago: executing program 1 (id=2): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMONITOR\nCD \'CD Capture\' 8'], 0x86) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 70.275577ms ago: executing program 0 (id=1): sched_setscheduler(0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x4, 0x2}, {0x3ff}}}}, 0xf) 38.925994ms ago: executing program 1 (id=6): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x2) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 0s ago: executing program 0 (id=7): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) r3 = dup(r1) write$FUSE_NOTIFY_RETRIEVE(r3, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) vmsplice(r2, &(0x7f0000000900)=[{&(0x7f0000000580)="4d06", 0x2}], 0x1, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.117' (ED25519) to the list of known hosts. [ 67.745223][ T5849] cgroup: Unknown subsys name 'net' [ 67.936550][ T5849] cgroup: Unknown subsys name 'cpuset' [ 67.944232][ T5849] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.185276][ T5849] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.254630][ T5862] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.262042][ T5862] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.269601][ T5862] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.277079][ T5862] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.284709][ T5862] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.289750][ T5871] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.292864][ T5862] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.299171][ T5871] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.306326][ T5862] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.312967][ T5871] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.320655][ T5875] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.327852][ T5871] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.365561][ T5862] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.372079][ T5876] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.373392][ T5862] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.382158][ T5876] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.387283][ T5862] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.394765][ T5876] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.408220][ T5876] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.415894][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.713419][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 71.759584][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 71.810654][ T5858] chnl_net:caif_netlink_parms(): no params data found [ 71.833722][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 71.881674][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.888959][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.896303][ T5861] bridge_slave_0: entered allmulticast mode [ 71.903072][ T5861] bridge_slave_0: entered promiscuous mode [ 71.920941][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.928184][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.935444][ T5861] bridge_slave_1: entered allmulticast mode [ 71.942098][ T5861] bridge_slave_1: entered promiscuous mode [ 72.008865][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.018098][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.025382][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.032540][ T5865] bridge_slave_0: entered allmulticast mode [ 72.039323][ T5865] bridge_slave_0: entered promiscuous mode [ 72.049525][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.056817][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.063959][ T5858] bridge_slave_0: entered allmulticast mode [ 72.070700][ T5858] bridge_slave_0: entered promiscuous mode [ 72.078969][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.103561][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.110769][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.117960][ T5865] bridge_slave_1: entered allmulticast mode [ 72.124933][ T5865] bridge_slave_1: entered promiscuous mode [ 72.134925][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.142020][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.149598][ T5858] bridge_slave_1: entered allmulticast mode [ 72.156313][ T5858] bridge_slave_1: entered promiscuous mode [ 72.163972][ T5861] team0: Port device team_slave_0 added [ 72.200600][ T5861] team0: Port device team_slave_1 added [ 72.220980][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.228272][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.235817][ T5863] bridge_slave_0: entered allmulticast mode [ 72.242497][ T5863] bridge_slave_0: entered promiscuous mode [ 72.265521][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.274889][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.282028][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.289512][ T5863] bridge_slave_1: entered allmulticast mode [ 72.296316][ T5863] bridge_slave_1: entered promiscuous mode [ 72.304685][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.314477][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.321812][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.348362][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.361193][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.387299][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.397036][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.403995][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.430416][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.468658][ T5865] team0: Port device team_slave_0 added [ 72.476561][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.495056][ T5858] team0: Port device team_slave_0 added [ 72.501972][ T5865] team0: Port device team_slave_1 added [ 72.509762][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.520355][ T5858] team0: Port device team_slave_1 added [ 72.568844][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.576112][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.602572][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.621065][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.628294][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.654941][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.673306][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.680583][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.706789][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.723442][ T5863] team0: Port device team_slave_0 added [ 72.729864][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.737114][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.763112][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.780767][ T5861] hsr_slave_0: entered promiscuous mode [ 72.787023][ T5861] hsr_slave_1: entered promiscuous mode [ 72.801457][ T5863] team0: Port device team_slave_1 added [ 72.824073][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.831206][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.859623][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.872337][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.879743][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.907391][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.955166][ T5865] hsr_slave_0: entered promiscuous mode [ 72.961340][ T5865] hsr_slave_1: entered promiscuous mode [ 72.967561][ T5865] debugfs: 'hsr0' already exists in 'hsr' [ 72.973312][ T5865] Cannot create hsr debugfs directory [ 73.002716][ T5858] hsr_slave_0: entered promiscuous mode [ 73.008942][ T5858] hsr_slave_1: entered promiscuous mode [ 73.015323][ T5858] debugfs: 'hsr0' already exists in 'hsr' [ 73.021065][ T5858] Cannot create hsr debugfs directory [ 73.072552][ T5863] hsr_slave_0: entered promiscuous mode [ 73.079265][ T5863] hsr_slave_1: entered promiscuous mode [ 73.086008][ T5863] debugfs: 'hsr0' already exists in 'hsr' [ 73.091742][ T5863] Cannot create hsr debugfs directory [ 73.310386][ T5861] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.319765][ T5861] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.333194][ T5861] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.347359][ T5861] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.373306][ T5865] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.383483][ T5865] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.403874][ T5865] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.410674][ T5876] Bluetooth: hci0: command tx timeout [ 73.418923][ T5865] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.450091][ T5863] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.479315][ T5863] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.485109][ T5876] Bluetooth: hci1: command tx timeout [ 73.492242][ T5862] Bluetooth: hci3: command tx timeout [ 73.492287][ T51] Bluetooth: hci2: command tx timeout [ 73.505492][ T5863] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.515297][ T5863] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.549056][ T5858] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.560590][ T5858] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.572164][ T5858] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.581885][ T5858] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.678811][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.707886][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.722950][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.749543][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.756675][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.771883][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.783591][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.793402][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.809634][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.817808][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.824931][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.834869][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.841938][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.860861][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.867983][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.878441][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.885572][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.898522][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.912050][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.919181][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.939038][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.946148][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.976283][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.983377][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.032261][ T5858] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.102752][ T5863] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.286808][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.381172][ T5861] veth0_vlan: entered promiscuous mode [ 74.400692][ T5861] veth1_vlan: entered promiscuous mode [ 74.408640][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.418435][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.440712][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.470193][ T5861] veth0_macvtap: entered promiscuous mode [ 74.486852][ T5861] veth1_macvtap: entered promiscuous mode [ 74.518131][ T5865] veth0_vlan: entered promiscuous mode [ 74.527679][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.546938][ T5865] veth1_vlan: entered promiscuous mode [ 74.556650][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.573056][ T5858] veth0_vlan: entered promiscuous mode [ 74.582210][ T65] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.600272][ T5863] veth0_vlan: entered promiscuous mode [ 74.607723][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.624040][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.633242][ T65] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.647482][ T5863] veth1_vlan: entered promiscuous mode [ 74.656184][ T5858] veth1_vlan: entered promiscuous mode [ 74.689290][ T5865] veth0_macvtap: entered promiscuous mode [ 74.703032][ T5865] veth1_macvtap: entered promiscuous mode [ 74.742530][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.742570][ T5858] veth0_macvtap: entered promiscuous mode [ 74.760816][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.771477][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.790954][ T5858] veth1_macvtap: entered promiscuous mode [ 74.799763][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.811383][ T5863] veth0_macvtap: entered promiscuous mode [ 74.827535][ T1011] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.837888][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.838171][ T5863] veth1_macvtap: entered promiscuous mode [ 74.855119][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.863079][ T1011] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.874426][ T1011] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.883278][ T1011] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.900244][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.926232][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.927722][ T5861] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 74.936761][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.001617][ T65] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.022685][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.041897][ T65] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.088753][ T65] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.098461][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.108616][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.122540][ T65] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.131661][ T65] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.141257][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.165257][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.176881][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.188055][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.197421][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.230340][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.243754][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.301503][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.320728][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.332944][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.341933][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.381256][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.392760][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.484753][ T51] Bluetooth: hci0: command tx timeout [ 75.551953][ T5962] ------------[ cut here ]------------ [ 75.558317][ T5962] UBSAN: shift-out-of-bounds in fs/9p/vfs_super.c:57:22 [ 75.566512][ T51] Bluetooth: hci2: command tx timeout [ 75.567072][ T5962] shift exponent 32 is too large for 32-bit type 'int' [ 75.572203][ T51] Bluetooth: hci1: command tx timeout [ 75.584815][ T5876] Bluetooth: hci3: command tx timeout [ 75.585545][ T5962] CPU: 0 UID: 0 PID: 5962 Comm: syz.0.7 Not tainted syzkaller #0 PREEMPT(full) [ 75.585574][ T5962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 75.585588][ T5962] Call Trace: [ 75.585596][ T5962] [ 75.585606][ T5962] dump_stack_lvl+0x189/0x250 [ 75.585651][ T5962] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.585687][ T5962] ? __pfx__printk+0x10/0x10 [ 75.585726][ T5962] ubsan_epilogue+0xa/0x40 [ 75.585753][ T5962] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 75.585787][ T5962] ? __pfx_v9fs_set_super+0x10/0x10 [ 75.585816][ T5962] v9fs_get_tree+0x957/0xa90 [ 75.585844][ T5962] ? __pfx_v9fs_get_tree+0x10/0x10 [ 75.585877][ T5962] vfs_get_tree+0x8f/0x2b0 [ 75.585901][ T5962] do_new_mount+0x2a2/0xa30 [ 75.585929][ T5962] ? ns_capable+0x8a/0xf0 [ 75.585953][ T5962] ? __pfx_do_new_mount+0x10/0x10 [ 75.585978][ T5962] ? path_mount+0x61c/0xfe0 [ 75.586002][ T5962] ? user_path_at+0x44/0x60 [ 75.586039][ T5962] __se_sys_mount+0x317/0x410 [ 75.586068][ T5962] ? __pfx___se_sys_mount+0x10/0x10 [ 75.586096][ T5962] ? rcu_is_watching+0x15/0xb0 [ 75.586121][ T5962] ? __x64_sys_mount+0x20/0xc0 [ 75.586148][ T5962] do_syscall_64+0xfa/0xfa0 [ 75.586180][ T5962] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.586229][ T5962] ? clear_bhb_loop+0x60/0xb0 [ 75.586255][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.586278][ T5962] RIP: 0033:0x7f0f6fd8ebe9 [ 75.586312][ T5962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.586332][ T5962] RSP: 002b:00007f0f70cb7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 75.586360][ T5962] RAX: ffffffffffffffda RBX: 00007f0f6ffb5fa0 RCX: 00007f0f6fd8ebe9 [ 75.586378][ T5962] RDX: 0000200000000b80 RSI: 0000200000000040 RDI: 0000000000000000 [ 75.586394][ T5962] RBP: 00007f0f6fe11e19 R08: 0000200000000340 R09: 0000000000000000 [ 75.586414][ T5962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.586429][ T5962] R13: 00007f0f6ffb6038 R14: 00007f0f6ffb5fa0 R15: 00007ffd61d1f198 [ 75.586454][ T5962] [ 75.586544][ T5962] ---[ end trace ]--- [ 75.811055][ T5962] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 75.818303][ T5962] CPU: 1 UID: 0 PID: 5962 Comm: syz.0.7 Not tainted syzkaller #0 PREEMPT(full) [ 75.827340][ T5962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 75.837401][ T5962] Call Trace: [ 75.840687][ T5962] [ 75.843625][ T5962] dump_stack_lvl+0x99/0x250 [ 75.848235][ T5962] ? __asan_memcpy+0x40/0x70 [ 75.852833][ T5962] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.858055][ T5962] ? __pfx__printk+0x10/0x10 [ 75.862677][ T5962] vpanic+0x281/0x750 [ 75.866679][ T5962] ? __pfx_vpanic+0x10/0x10 [ 75.871206][ T5962] panic+0xb9/0xc0 [ 75.874939][ T5962] ? __pfx_panic+0x10/0x10 [ 75.879369][ T5962] ? __pfx__printk+0x10/0x10 [ 75.883982][ T5962] check_panic_on_warn+0x89/0xb0 [ 75.888940][ T5962] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 75.895393][ T5962] ? __pfx_v9fs_set_super+0x10/0x10 [ 75.900603][ T5962] v9fs_get_tree+0x957/0xa90 [ 75.905293][ T5962] ? __pfx_v9fs_get_tree+0x10/0x10 [ 75.910434][ T5962] vfs_get_tree+0x8f/0x2b0 [ 75.914875][ T5962] do_new_mount+0x2a2/0xa30 [ 75.919386][ T5962] ? ns_capable+0x8a/0xf0 [ 75.923725][ T5962] ? __pfx_do_new_mount+0x10/0x10 [ 75.928757][ T5962] ? path_mount+0x61c/0xfe0 [ 75.933269][ T5962] ? user_path_at+0x44/0x60 [ 75.937790][ T5962] __se_sys_mount+0x317/0x410 [ 75.942504][ T5962] ? __pfx___se_sys_mount+0x10/0x10 [ 75.947714][ T5962] ? rcu_is_watching+0x15/0xb0 [ 75.952484][ T5962] ? __x64_sys_mount+0x20/0xc0 [ 75.957254][ T5962] do_syscall_64+0xfa/0xfa0 [ 75.961773][ T5962] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.967843][ T5962] ? clear_bhb_loop+0x60/0xb0 [ 75.972530][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.978423][ T5962] RIP: 0033:0x7f0f6fd8ebe9 [ 75.982844][ T5962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.002458][ T5962] RSP: 002b:00007f0f70cb7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 76.010890][ T5962] RAX: ffffffffffffffda RBX: 00007f0f6ffb5fa0 RCX: 00007f0f6fd8ebe9 [ 76.018875][ T5962] RDX: 0000200000000b80 RSI: 0000200000000040 RDI: 0000000000000000 [ 76.026870][ T5962] RBP: 00007f0f6fe11e19 R08: 0000200000000340 R09: 0000000000000000 [ 76.034848][ T5962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.042836][ T5962] R13: 00007f0f6ffb6038 R14: 00007f0f6ffb5fa0 R15: 00007ffd61d1f198 [ 76.050817][ T5962] [ 76.054156][ T5962] Kernel Offset: disabled [ 76.058481][ T5962] Rebooting in 86400 seconds..