last executing test programs: 357.7384ms ago: executing program 0 (id=1): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r1, 0x0, 0x2400c000) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r3], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40054) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x12, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000c900000095"], &(0x7f0000000400)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 331.855112ms ago: executing program 3 (id=4): r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$fscrypt_provisioning(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x3}, &(0x7f0000000700)={0x2, 0x0, @d}, 0x18, r0) 261.670533ms ago: executing program 3 (id=6): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f00000000c0)={0x18, r1, 0x1, 0x0, &(0x7f0000000100)=[{0xffffffffffffedc7, 0xfffffffffffffff9}]}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r1, 0x2000000, &(0x7f00004bc000/0x3000)=nil, 0x3000, 0x7}) 202.950434ms ago: executing program 0 (id=7): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000140)='./file0\x00', 0x200008, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYRESHEX=r0, @ANYRESOCT, @ANYRESOCT=0x0], 0x1, 0x392, &(0x7f0000001000)="$eJzs3T1vW2UUAOATt/mExBkQEiDEq24sVhL+QCPUSohIoFCj0gFxS5xixY0j2wpyhaADEiv/gL1iZENC/IEMsLOxZWHsUNXIX6mdul+kyaXq80jRPfZ7jvO+tnx1FuscXv3x5s52s7SdtaJwMUUhIgp3I5Z7Ud/U4FroxTMx6na8W7z619uffHbtw/WNjUubKV1ev/LeWkpp6Z3fvv7m5wu/t1759JelX2fjYPnzw3/W/j54/eCNw/tXvqo2U7WZduutlKXr9Xoru16rpK1qc6eU0se1StaspOpus9IYW9+u1ff22inb3Vpc2GtUms2U7bbTTqWdWvXUarRTdiOr7qZSqZQWF4InKd/Z3MzW+/HcY/IuntWGOAWNxnrW/Q7PPrRSvpPLhgCAXJ20/595qv7/WmGk/5+LR/b/06H/fy6mny5ttP//zy/C/1y3/58ZfH/H6f8BAAAAAAAAAAAAAOBFcLfTKXY6neLw2hn+SHjwOOftccoe+vyP/eW9P07XyA/35iJqP+yX98v9a399fTuqUYtKrEQx7nVvC0P9+PIHG5dWUs9yLN78rld/4Y+I8rnx+tUoxvLk+tV+fTqqj+51OhZG69fii3htcv3axPqZWPlppL4Uxfjzy6hHLbZ6t7cH9d+upvT+RxvH6md7eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8HEpp6K3oz73fL0fMx/5gfn/pQcLy+Hz8fv3RfP2VKMa9yfP5VybO5z8fb57P9+wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMNRs39rJarVK46yC4cz/3jMzw+DRVVP99NvHluZjPHn2Sa9zwqDwTFXzg0NOWLrf6XR6wY3vn/tW5872ozxJMB0Rj8npDN7Ak/+vVyNi9Jlz4zmzEXGqJ13qBoX83/BnDvK4GwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEC+joZ+dx9M5b0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8tJs39rJarVK4xSDvM8IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwIvk3AAD//8s8Cyw=") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x11, 0x4, 0x4, 0x7, 0x808, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x20}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010000d0429bd70000000000000010000", @ANYRES32=r3, @ANYBLOB="9b060000000000001c00128009000100626f6e64000000000c00028005000100040000"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) fchmod(0xffffffffffffffff, 0x8) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) r10 = socket(0x1, 0x803, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x1, 0x9) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700ff01000000000000000000000000000108000a00", @ANYRES32=r12], 0x54}}, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 202.777875ms ago: executing program 1 (id=2): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000980)={'syzkaller0\x00', 0x5032}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000009c0)={'syzkaller0\x00', 0x1}) writev(r0, &(0x7f0000000a00)=[{&(0x7f0000000a40)="010000000000260010000900000000010000000000020800450000740001400040063c817f0000017f00000104d204d2", 0x30}, {&(0x7f0000000a80)="00000f0000dba7478481709a41e0a9478b2d592773875532f6fddc40b86c99641599408f8078bcb71fce378fe20b536e4143ff2b433edfb4e7f17ef38de56359f002d65b0261770d66141d2b6e1ce763f4e69a88317c2efe9d44e71f", 0x5c}], 0x2) 201.739686ms ago: executing program 3 (id=8): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x4, &(0x7f00000001c0)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x4e}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x9, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x1, &(0x7f0000000040)={0xa, 0x4e20, 0xffffffff, @loopback, 0xbf}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000080)=0x81, 0x4) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}, 0xadd}], 0x1, 0x40002000, 0x0) 201.146347ms ago: executing program 3 (id=9): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setaffinity(r2, 0x8, &(0x7f0000000300)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) kexec_load(0xffffffffffffff00, 0x3, &(0x7f0000001780)=[{&(0x7f00000006c0)="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", 0x1000, 0x2b30b942, 0xffff}, {&(0x7f00000016c0)="a662401ead998dc17152dff760998adfc0dd021a22bce3608ca12d454659c930e8fd2728601c65db5992811bcba4effe79b430d94249b15bfaa114fa2c0c1c7e7c90fbca9db8", 0x46, 0x9, 0x4}, {&(0x7f0000001740)="d1e61d10755e975098af6c9e87bf61001fa2ada61ce60e68a7db58f0ca0b321403c9e4e4f802ebfacee8ce6312b4", 0x2e, 0x9, 0x3}], 0x7f0000) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000340), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/54, 0x7ffff000}, {&(0x7f0000000400)=""/152, 0x98}], 0x2, &(0x7f00000004c0)=[{&(0x7f0000000500)=""/95, 0x7ffff000}], 0x286, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000580)=""/21, 0xfffffe0d) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0xe, 0x0, &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1}, 0x94) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="6400000041000100fcff07000400000001000000040048804c0001804800108044003c8040006a800500d000000000001400850000000000000000000000ffffac1414bb0400e9800800ee00", @ANYRES32=0x0, @ANYBLOB="040039800800c800", @ANYRES32, @ANYBLOB='\b\x00K\x00', @ANYRES32=0x0, @ANYBLOB="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"], 0x64}, 0x1, 0x0, 0x0, 0x4084085}, 0x4008094) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f080100000000ff0000005b1957034b596f21d3816491ee54bec6fe", 0x1d) sendmmsg$inet(r0, &(0x7f0000003300)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @remote}, 0x10, 0x0}}], 0x1, 0x24008000) 110.392398ms ago: executing program 1 (id=10): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) munmap(&(0x7f0000002000/0x3000)=nil, 0x3000) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x205, 0x8401) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fb7d0000000000000000000018150000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000028b00008500000015000000850000005000000095"], &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 3 (id=11): timer_create(0x0, 0x0, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write(r0, &(0x7f00000000c0)='nqn=testnqn,transport=rdma,traddr=172.20.20.24,trsvcid=4', 0x38) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0xc, 0x2, [@TCA_RED_MAX_P={0x8, 0x3, 0xfffffffb}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48810}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04000000040000000400000001"], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r4, 0x58, &(0x7f0000000480)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500)={r5, 0x6}, 0xb) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) r6 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$DM_DEV_CREATE(r6, 0xc138fd03, &(0x7f00000002c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r6, 0xc138fd09, &(0x7f0000000880)={0x4, 0x0, 0x0, 0x1b0, 0x138, 0x1, 0x0, 0x4001, 0x0, 0x0, @by_dev={r7}, [@snapshot={0x0, 0x800, 0x0, 0x78, 'snapshot-merge\x00', {@ram_num={'1:', 0x0}, 0x20, @ram_num={'1:', 0x0}, 0x20, 'N', 0x20, '128', ' 1 discard_zeroes_cow'}}]}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_mount_image$fuse(0x0, &(0x7f0000000700)='./file0\x00', 0x2000000, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0xc3020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000780)='./bus\x00', &(0x7f00000007c0), 0x4004, &(0x7f0000000800)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000840)='./bus\x00') syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.194' (ED25519) to the list of known hosts. [ 29.348344][ T4724] cgroup: Unknown subsys name 'net' [ 29.498786][ T4724] cgroup: Unknown subsys name 'cpuset' [ 29.500064][ T4724] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.633459][ T4724] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 31.078923][ T4744] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 31.079300][ T4744] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 31.079602][ T4744] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 31.080498][ T4744] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 31.080685][ T4744] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 31.081172][ T4744] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 31.081282][ T4744] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 31.081373][ T4744] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 31.081599][ T4744] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 31.081643][ T4744] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 31.081876][ T4744] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 31.081990][ T4744] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 31.090899][ T4750] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 31.091138][ T4750] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 31.091475][ T4750] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 31.091638][ T4748] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 31.092345][ T4750] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 31.093187][ T4750] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 31.098679][ T4753] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 31.109468][ T4753] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 31.109616][ T4753] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 31.117483][ T4753] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 31.125670][ T4753] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 31.128852][ T4753] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 31.132197][ T4753] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 31.285924][ T4742] rxe_eth0 speed is unknown, defaulting to 1000 [ 31.286205][ T4742] rxe_eth0 speed is unknown, defaulting to 1000 [ 31.286566][ T4742] rxe_eth0 speed is unknown, defaulting to 1000 [ 31.292661][ T4736] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 31.305716][ T4737] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 31.325214][ T4749] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 31.327502][ T4735] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 31.373698][ T4742] infiniband rxe0: set active [ 31.374410][ T1167] rxe_eth0 speed is unknown, defaulting to 1000 [ 31.374476][ T4742] infiniband rxe0: added rxe_eth0 [ 31.377427][ T4749] rxe_eth0 speed is unknown, defaulting to 1000 [ 31.392796][ T4742] RDS/IB: rxe0: added [ 31.392867][ T4742] smc: adding ib device rxe0 with port count 1 [ 31.392889][ T4742] smc: ib device rxe0 port 1 has no pnetid [ 31.395147][ T1167] rxe_eth0 speed is unknown, defaulting to 1000 [ 31.446303][ T4735] rxe_eth0 speed is unknown, defaulting to 1000 [ 31.498278][ T4742] rxe_eth0 speed is unknown, defaulting to 1000 [ 31.514032][ T4737] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.514335][ T4737] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.514411][ T4737] bridge_slave_0: entered allmulticast mode [ 31.515083][ T4737] bridge_slave_0: entered promiscuous mode [ 31.532967][ T4737] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.533000][ T4737] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.533099][ T4737] bridge_slave_1: entered allmulticast mode [ 31.533531][ T4737] bridge_slave_1: entered promiscuous mode [ 31.539497][ T4736] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.539580][ T4736] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.539636][ T4736] bridge_slave_0: entered allmulticast mode [ 31.540224][ T4736] bridge_slave_0: entered promiscuous mode [ 31.546676][ T4736] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.546699][ T4736] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.546747][ T4736] bridge_slave_1: entered allmulticast mode [ 31.549048][ T4736] bridge_slave_1: entered promiscuous mode [ 31.565126][ T4737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.565171][ T4742] rxe_eth0 speed is unknown, defaulting to 1000 [ 31.566040][ T4737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.570710][ T4736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.571674][ T4736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.588111][ T4737] team0: Port device team_slave_0 added [ 31.588844][ T4737] team0: Port device team_slave_1 added [ 31.596314][ T4737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.596323][ T4737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.596337][ T4737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.605065][ T4736] team0: Port device team_slave_0 added [ 31.605841][ T4736] team0: Port device team_slave_1 added [ 31.626681][ T4737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.626698][ T4737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.626714][ T4737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.629941][ T4736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.629951][ T4736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.629967][ T4736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.630513][ T4736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.630520][ T4736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.630536][ T4736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.654849][ T4742] rxe_eth0 speed is unknown, defaulting to 1000 [ 31.660786][ T4736] hsr_slave_0: entered promiscuous mode [ 31.661129][ T4736] hsr_slave_1: entered promiscuous mode [ 31.690231][ T4737] hsr_slave_0: entered promiscuous mode [ 31.690549][ T4737] hsr_slave_1: entered promiscuous mode [ 31.690745][ T4737] debugfs: 'hsr0' already exists in 'hsr' [ 31.690782][ T4737] Cannot create hsr debugfs directory [ 31.768919][ T4749] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.768988][ T4749] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.769085][ T4749] bridge_slave_0: entered allmulticast mode [ 31.769495][ T4749] bridge_slave_0: entered promiscuous mode [ 31.781645][ T4749] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.781674][ T4749] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.781767][ T4749] bridge_slave_1: entered allmulticast mode [ 31.782198][ T4749] bridge_slave_1: entered promiscuous mode [ 31.825186][ T4749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.834914][ T4749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.835026][ T4735] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.835050][ T4735] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.835113][ T4735] bridge_slave_0: entered allmulticast mode [ 31.835560][ T4735] bridge_slave_0: entered promiscuous mode [ 31.836668][ T4735] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.836738][ T4735] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.836824][ T4735] bridge_slave_1: entered allmulticast mode [ 31.837783][ T4735] bridge_slave_1: entered promiscuous mode [ 31.857538][ T4749] team0: Port device team_slave_0 added [ 31.860001][ T4749] team0: Port device team_slave_1 added [ 31.875561][ T4749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.875572][ T4749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.875584][ T4749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.876105][ T4749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.876111][ T4749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.876123][ T4749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.886097][ T4735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.887325][ T4735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.899036][ T4735] team0: Port device team_slave_0 added [ 31.899793][ T4735] team0: Port device team_slave_1 added [ 31.922485][ T4735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.922499][ T4735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.922516][ T4735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.924098][ T4749] hsr_slave_0: entered promiscuous mode [ 31.924407][ T4749] hsr_slave_1: entered promiscuous mode [ 31.924584][ T4749] debugfs: 'hsr0' already exists in 'hsr' [ 31.924594][ T4749] Cannot create hsr debugfs directory [ 31.924701][ T4736] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.927164][ T4736] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.927511][ T4736] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.929688][ T4736] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.937705][ T4735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.937715][ T4735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.937728][ T4735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.948187][ T4736] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.950260][ T4736] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.950554][ T4736] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.955129][ T4736] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.969689][ T4735] hsr_slave_0: entered promiscuous mode [ 31.970099][ T4735] hsr_slave_1: entered promiscuous mode [ 31.970332][ T4735] debugfs: 'hsr0' already exists in 'hsr' [ 31.970343][ T4735] Cannot create hsr debugfs directory [ 31.999199][ T4737] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.000570][ T4737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.000857][ T4737] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.001888][ T4737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.007862][ T4742] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.008147][ T4742] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.008207][ T4742] bridge_slave_0: entered allmulticast mode [ 32.008605][ T4742] bridge_slave_0: entered promiscuous mode [ 32.009767][ T4742] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.009787][ T4742] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.009836][ T4742] bridge_slave_1: entered allmulticast mode [ 32.010237][ T4742] bridge_slave_1: entered promiscuous mode [ 32.016738][ T4742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.017701][ T4742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.023833][ T4742] team0: Port device team_slave_0 added [ 32.025012][ T4742] team0: Port device team_slave_1 added [ 32.030573][ T4742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.030581][ T4742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.030594][ T4742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.031106][ T4742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.031112][ T4742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.031123][ T4742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.040514][ T4742] hsr_slave_0: entered promiscuous mode [ 32.040789][ T4742] hsr_slave_1: entered promiscuous mode [ 32.040959][ T4742] debugfs: 'hsr0' already exists in 'hsr' [ 32.040969][ T4742] Cannot create hsr debugfs directory [ 32.068298][ T4737] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.069369][ T4737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.074114][ T4737] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.075082][ T4737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.094141][ T4736] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.094182][ T4736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.094322][ T4736] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.094351][ T4736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.113852][ T4737] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.113881][ T4737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.113947][ T4737] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.113979][ T4737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.134957][ T4742] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.135963][ T4742] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.136276][ T4742] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.138269][ T4742] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.152722][ T4742] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.154536][ T4742] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.154864][ T4742] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.156259][ T4742] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.184610][ T4742] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.184641][ T4742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.184727][ T4742] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.184755][ T4742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.191530][ T4736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.195048][ T4736] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.202973][ T54] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.203428][ T54] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.204095][ T54] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.214557][ T54] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.214819][ T54] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.224531][ T4737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.229106][ T4735] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.231821][ T4735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.232211][ T4735] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.233108][ T4735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.234767][ T4737] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.249150][ T175] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.249202][ T175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.249587][ T175] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.249605][ T175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.249918][ T175] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.249940][ T175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.251909][ T4735] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.252920][ T4735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.254204][ T4735] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.255282][ T4735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.269896][ T4742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.273383][ T4742] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.278800][ T175] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.278829][ T175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.279233][ T175] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.279251][ T175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.323880][ T4749] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.325581][ T4749] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.325925][ T4749] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.330278][ T4749] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.335681][ T4749] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.339594][ T4749] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.344936][ T4736] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.346575][ T4749] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.348820][ T4749] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.414541][ T4735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.420458][ T4735] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.431385][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.431412][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.431787][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.431805][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.462863][ T4737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.466750][ T4735] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.466767][ T4735] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.484186][ T4737] veth0_vlan: entered promiscuous mode [ 32.518634][ T4737] veth1_vlan: entered promiscuous mode [ 32.524349][ T4737] veth0_macvtap: entered promiscuous mode [ 32.526583][ T4737] veth1_macvtap: entered promiscuous mode [ 32.533926][ T4749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.544431][ T4737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.545536][ T4737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.569903][ T4749] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.578549][ T4742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.585090][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.585118][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.593741][ T4736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.596721][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.596746][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.607925][ T1192] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.618246][ T4736] veth0_vlan: entered promiscuous mode [ 32.620511][ T4736] veth1_vlan: entered promiscuous mode [ 32.631134][ T4736] veth0_macvtap: entered promiscuous mode [ 32.647737][ T4749] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.647947][ T1192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.647959][ T1192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.649258][ T4736] veth1_macvtap: entered promiscuous mode [ 32.651548][ T4742] veth0_vlan: entered promiscuous mode [ 32.653238][ T4742] veth1_vlan: entered promiscuous mode [ 32.687849][ T175] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.687898][ T175] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.687927][ T175] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.690021][ T4736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.691114][ T4736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.711537][ T58] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.711568][ T58] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.711586][ T58] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.711602][ T58] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.715108][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.715121][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.732342][ T4742] veth0_macvtap: entered promiscuous mode [ 32.750813][ T4742] veth1_macvtap: entered promiscuous mode [ 32.768578][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.768591][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.773321][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.773334][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.789249][ T4737] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.790782][ T4742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.805437][ T4742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.826553][ T4735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.858864][ T175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.858878][ T175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.880278][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.880339][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.880364][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.880372][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.880467][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.907699][ T58] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.941646][ T4749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.971313][ T4930] loop0: detected capacity change from 0 to 512 [ 32.980722][ T4749] veth0_vlan: entered promiscuous mode [ 32.986620][ T4749] veth1_vlan: entered promiscuous mode [ 33.041458][ T4930] bond1: entered allmulticast mode [ 33.041696][ T4930] 8021q: adding VLAN 0 to HW filter on device bond1 [ 33.061729][ T4749] veth0_macvtap: entered promiscuous mode [ 33.065832][ T4941] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 33.073389][ T4941] macvlan2: entered allmulticast mode [ 33.073406][ T4941] bond0: entered allmulticast mode [ 33.073418][ T4941] bond_slave_0: entered allmulticast mode [ 33.073429][ T4941] bond_slave_1: entered allmulticast mode [ 33.073484][ T4941] bond_slave_0: entered promiscuous mode [ 33.073496][ T4941] bond_slave_1: entered promiscuous mode [ 33.073935][ T4941] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 33.080508][ T4735] veth0_vlan: entered promiscuous mode [ 33.088784][ T4735] veth1_vlan: entered promiscuous mode [ 33.095981][ T4749] veth1_macvtap: entered promiscuous mode [ 33.100520][ T4749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.106770][ T4749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.108269][ T4937] netlink: zone id is out of range [ 33.108279][ T4937] netlink: zone id is out of range [ 33.108324][ T4937] netlink: zone id is out of range [ 33.148256][ T4740] Bluetooth: hci0: command tx timeout [ 33.148360][ T4740] Bluetooth: hci1: command tx timeout [ 33.148424][ T4740] Bluetooth: hci2: command tx timeout [ 33.148578][ T4753] Bluetooth: hci3: command tx timeout [ 33.150302][ T4744] Bluetooth: hci4: command tx timeout [ 33.184573][ T4735] veth0_macvtap: entered promiscuous mode [ 33.189349][ T54] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.192338][ T1192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.192519][ T1192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.192587][ T1192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.492952][ T4735] veth1_macvtap: entered promiscuous mode [ 33.504408][ T4941] ip6gretap1: entered allmulticast mode [ 33.504652][ T4941] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 33.508082][ T4930] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7'. [ 33.513862][ T4952] ================================================================== [ 33.513871][ T4952] BUG: KASAN: slab-use-after-free in snapshot_ctr+0x4ec/0x1030 [ 33.513886][ T4952] Read of size 8 at addr ffff0000cec4e598 by task syz.3.11/4952 [ 33.513893][ T4952] [ 33.513897][ T4952] CPU: 1 UID: 0 PID: 4952 Comm: syz.3.11 Not tainted syzkaller #0 PREEMPT [ 33.513907][ T4952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 33.513912][ T4952] Call trace: [ 33.513915][ T4952] show_stack+0x2c/0x3c (C) [ 33.513926][ T4952] __dump_stack+0x30/0x40 [ 33.513934][ T4952] dump_stack_lvl+0xd8/0x12c [ 33.513942][ T4952] print_address_description+0xb0/0x238 [ 33.513952][ T4952] print_report+0x68/0x84 [ 33.513961][ T4952] kasan_report+0x8c/0xc4 [ 33.513973][ T4952] __asan_report_load8_noabort+0x20/0x2c [ 33.513996][ T4952] snapshot_ctr+0x4ec/0x1030 [ 33.514004][ T4952] dm_table_add_target+0x44c/0xb18 [ 33.514013][ T4952] table_load+0x27c/0x764 [ 33.514023][ T4952] dm_ctl_ioctl+0x884/0xbbc [ 33.514033][ T4952] __arm64_sys_ioctl+0x154/0x1cc [ 33.514043][ T4952] invoke_syscall+0x98/0x244 [ 33.514051][ T4952] el0_svc_common+0xec/0x23c [ 33.514060][ T4952] do_el0_svc+0x4c/0x5c [ 33.514067][ T4952] el0_svc+0x60/0x1d8 [ 33.514076][ T4952] el0t_64_sync_handler+0x44/0x104 [ 33.514087][ T4952] el0t_64_sync+0x198/0x19c [ 33.514096][ T4952] [ 33.514098][ T4952] Allocated by task 4952: [ 33.514101][ T4952] kasan_save_track+0x40/0x78 [ 33.514111][ T4952] kasan_save_alloc_info+0x40/0x50 [ 33.514122][ T4952] __kasan_kmalloc+0x9c/0xb4 [ 33.514130][ T4952] __kmalloc_cache_node_noprof+0x39c/0x618 [ 33.514140][ T4952] dm_get_table_device+0x1f0/0x62c [ 33.514149][ T4952] dm_get_device+0x2b0/0x634 [ 33.514155][ T4952] snapshot_ctr+0x258/0x1030 [ 33.514161][ T4952] dm_table_add_target+0x44c/0xb18 [ 33.514167][ T4952] table_load+0x27c/0x764 [ 33.514175][ T4952] dm_ctl_ioctl+0x884/0xbbc [ 33.514183][ T4952] __arm64_sys_ioctl+0x154/0x1cc [ 33.514191][ T4952] invoke_syscall+0x98/0x244 [ 33.514197][ T4952] el0_svc_common+0xec/0x23c [ 33.514203][ T4952] do_el0_svc+0x4c/0x5c [ 33.514209][ T4952] el0_svc+0x60/0x1d8 [ 33.514215][ T4952] el0t_64_sync_handler+0x44/0x104 [ 33.514221][ T4952] el0t_64_sync+0x198/0x19c [ 33.514227][ T4952] [ 33.514229][ T4952] Freed by task 4952: [ 33.514232][ T4952] kasan_save_track+0x40/0x78 [ 33.514240][ T4952] kasan_save_free_info+0x54/0x6c [ 33.514251][ T4952] __kasan_slab_free+0x74/0xa4 [ 33.514259][ T4952] kfree+0x188/0x658 [ 33.514267][ T4952] dm_put_table_device+0x238/0x2a0 [ 33.514276][ T4952] dm_get_device+0x468/0x634 [ 33.514281][ T4952] snapshot_ctr+0x3d0/0x1030 [ 33.514287][ T4952] dm_table_add_target+0x44c/0xb18 [ 33.514293][ T4952] table_load+0x27c/0x764 [ 33.514302][ T4952] dm_ctl_ioctl+0x884/0xbbc [ 33.514310][ T4952] __arm64_sys_ioctl+0x154/0x1cc [ 33.514317][ T4952] invoke_syscall+0x98/0x244 [ 33.514323][ T4952] el0_svc_common+0xec/0x23c [ 33.514330][ T4952] do_el0_svc+0x4c/0x5c [ 33.514336][ T4952] el0_svc+0x60/0x1d8 [ 33.514341][ T4952] el0t_64_sync_handler+0x44/0x104 [ 33.514347][ T4952] el0t_64_sync+0x198/0x19c [ 33.514353][ T4952] [ 33.514355][ T4952] The buggy address belongs to the object at ffff0000cec4e580 [ 33.514355][ T4952] which belongs to the cache kmalloc-96 of size 96 [ 33.514361][ T4952] The buggy address is located 24 bytes inside of [ 33.514361][ T4952] freed 96-byte region [ffff0000cec4e580, ffff0000cec4e5e0) [ 33.514369][ T4952] [ 33.514371][ T4952] The buggy address belongs to the physical page: [ 33.514375][ T4952] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10ec4e [ 33.514382][ T4952] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 33.514389][ T4952] page_type: f5(slab) [ 33.514397][ T4952] raw: 05ffc00000000000 ffff0000c0001280 dead000000000100 dead000000000122 [ 33.514404][ T4952] raw: 0000000000000000 0000000000200020 00000000f5000000 0000000000000000 [ 33.514408][ T4952] page dumped because: kasan: bad access detected [ 33.514411][ T4952] [ 33.514413][ T4952] Memory state around the buggy address: [ 33.514417][ T4952] ffff0000cec4e480: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc [ 33.514422][ T4952] ffff0000cec4e500: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 33.514427][ T4952] >ffff0000cec4e580: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 33.514431][ T4952] ^ [ 33.514435][ T4952] ffff0000cec4e600: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc [ 33.514440][ T4952] ffff0000cec4e680: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 33.514444][ T4952] ================================================================== [ 33.515496][ T4952] Disabling lock debugging due to kernel taint [ 33.515547][ T4952] device-mapper: table: 248:0: device 1:6 not in table devices list [ 33.515567][ T4952] device-mapper: table: 248:0: snapshot-merge: COW device cannot be the same as origin device (-EINVAL) [ 33.515578][ T4952] device-mapper: ioctl: error adding target to table [ 33.515587][ T4952] device-mapper: table: 248:0: dm_table_destroy: dm_put_device call missing for 1:6 [ 33.519553][ T4735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.524348][ T4735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.534365][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.534378][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.546809][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.546824][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.549704][ T4930] bond_slave_0: left promiscuous mode [ 33.549747][ T4930] bond_slave_1: left promiscuous mode [ 33.552371][ T4930] bond0 (unregistering): left allmulticast mode [ 33.552383][ T4930] bond_slave_0: left allmulticast mode [ 33.552395][ T4930] bond_slave_1: left allmulticast mode [ 33.556245][ T4930] bond1: (slave macvlan2): Removing an active aggregator [ 33.556438][ T4930] bond1: (slave macvlan2): Releasing backup interface [ 33.556447][ T4930] bond1: (slave macvlan2): the permanent HWaddr of slave - 3a:51:86:93:69:a0 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 33.588918][ T4930] macvlan2 (unregistering): left allmulticast mode [ 33.596083][ T4930] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 33.597497][ T58] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 33.632090][ T4930] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 33.667853][ T4930] bond0 (unregistering): Released all slaves [ 33.696217][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.696244][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.708214][ T175] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.708342][ T13] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 33.708495][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.708518][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.713998][ T175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.714011][ T175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.730054][ T1192] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.014521][ T4948] nvme nvme1: rdma connection establishment failed (-512) [ 35.226929][ T4744] Bluetooth: hci3: command tx timeout [ 35.226951][ T4744] Bluetooth: hci1: command tx timeout [ 35.226962][ T4744] Bluetooth: hci0: command tx timeout [ 35.226977][ T4744] Bluetooth: hci4: command tx timeout [ 35.226989][ T4744] Bluetooth: hci2: command tx timeout [ 37.316905][ T4740] Bluetooth: hci2: command tx timeout [ 37.316931][ T4740] Bluetooth: hci3: command tx timeout [ 37.316937][ T4754] Bluetooth: hci1: command tx timeout [ 37.317003][ T4753] Bluetooth: hci0: command tx timeout [ 37.317048][ T4744] Bluetooth: hci4: command tx timeout [ 39.387005][ T4740] Bluetooth: hci4: command tx timeout [ 39.387031][ T4740] Bluetooth: hci0: command tx timeout [ 39.387044][ T4740] Bluetooth: hci1: command tx timeout [ 39.387055][ T4740] Bluetooth: hci3: command tx timeout [ 39.387065][ T4740] Bluetooth: hci2: command tx timeout [ 42.497115][ T4845] rxe_eth0 speed is unknown, defaulting to 1000