last executing test programs: 774.84795ms ago: executing program 0 (id=1): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dummy.img\x00', 0x42, 0x1ff) ftruncate(r0, 0x1000000) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='md0\x00', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='7:0\x00', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0)='raid1\x00', 0x6) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r5, &(0x7f0000000340)='1\x00', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/block/md0/md/dev-loop0/slot\x00', 0x1, 0x0) write(r6, &(0x7f00000003c0)='0\x00', 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r7, &(0x7f0000000440)='read-auto\x00', 0xa) r8 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/block/md0/md/bitmap/location\x00', 0x1, 0x0) write(r8, &(0x7f00000004c0)='+8\x00', 0x3) 657.721115ms ago: executing program 1 (id=2): r0 = syz_usb_connect$hid(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004086800000000000000001090222000101008032090400000103000000092111010001224e000705810308000a"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005200973a10185010a19031500250575089501b1020a16031500250575089501b10285020a5304150025057508950181020a5404150025057508950181020a550415002505750895018102c0"], 0x0}, &(0x7f0000000300)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x3, "010101"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) nanosleep(&(0x7f0000000500)={0x2}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/iio/devices/iio:device0/scan_elements/in_timestamp_en\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='1\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/iio/devices/iio:device0/buffer/enable\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='1\x00', 0x2) 243.296866ms ago: executing program 3 (id=4): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='loop\x00', 0x4) symlinkat(&(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/subsystems/testnqn\x00') r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) write(r2, &(0x7f0000000340)='transport=loop,nqn=testnqn\x00', 0x1a) nanosleep(&(0x7f0000000380)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys\x00', 0x1ff) mount(&(0x7f0000000400)=@filename='sysfs\x00', &(0x7f00000003c0)='./sys\x00', &(0x7f0000000440)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/nvme/nvme0/reset_controller\x00', 0x1, 0x0) write(r3, &(0x7f00000004c0)='1\x00', 0x1) nanosleep(&(0x7f0000000380)={0x1}, 0x0) 196.366556ms ago: executing program 0 (id=7): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind(r0, &(0x7f0000000000)=@hci={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000010)="4b00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) 0s ago: executing program 0 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='md0\n', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='raid1\n', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='2\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='1:0\n', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='1:1\n', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/block/md0/md/array_size\x00', 0x1, 0x0) write(r5, &(0x7f00000003c0)='1024\n', 0x5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r6, &(0x7f0000000440)='readonly\n', 0x9) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.227' (ED25519) to the list of known hosts. [ 72.171388][ T5607] cgroup: Unknown subsys name 'net' [ 72.287347][ T5607] cgroup: Unknown subsys name 'cpuset' [ 72.295664][ T5607] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.806975][ T5607] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.781082][ T5623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.798592][ T5625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.799453][ T5625] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.800127][ T5625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.803117][ T5625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.803783][ T5625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.815811][ T5625] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.821323][ T5625] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.830476][ T5625] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.838091][ T5625] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.883863][ T5631] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.889175][ T5628] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.892431][ T5628] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.893013][ T5628] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.896605][ T5628] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.897250][ T5628] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.924761][ T4935] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.925625][ T4935] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.937932][ T4935] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.942198][ T4935] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.988987][ T5628] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.994690][ T5628] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 78.995699][ T5628] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 78.996250][ T5628] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 78.999592][ T5628] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 79.002653][ T5628] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 79.019903][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.020719][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.021694][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.023361][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.853456][ T4935] Bluetooth: hci0: command tx timeout [ 80.932621][ T4935] Bluetooth: hci1: command tx timeout [ 80.932642][ T52] Bluetooth: hci3: command tx timeout [ 80.967675][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.968664][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.969144][ T5618] bridge_slave_0: entered allmulticast mode [ 80.971369][ T5618] bridge_slave_0: entered promiscuous mode [ 81.013154][ T4935] Bluetooth: hci5: command tx timeout [ 81.013273][ T4935] Bluetooth: hci2: command tx timeout [ 81.102878][ T52] Bluetooth: hci4: command tx timeout [ 81.105571][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.106630][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.107084][ T5618] bridge_slave_1: entered allmulticast mode [ 81.109588][ T5618] bridge_slave_1: entered promiscuous mode [ 81.445783][ T5624] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.445933][ T5624] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.446073][ T5624] bridge_slave_0: entered allmulticast mode [ 81.448461][ T5624] bridge_slave_0: entered promiscuous mode [ 81.476548][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.501754][ T5624] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.502391][ T5624] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.502914][ T5624] bridge_slave_1: entered allmulticast mode [ 81.505133][ T5624] bridge_slave_1: entered promiscuous mode [ 81.534241][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.697957][ T5624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.710535][ T5618] team0: Port device team_slave_0 added [ 81.714545][ T5618] team0: Port device team_slave_1 added [ 81.767257][ T5624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.859369][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.859418][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.859469][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.904434][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.904635][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.904781][ T5620] bridge_slave_0: entered allmulticast mode [ 81.907276][ T5620] bridge_slave_0: entered promiscuous mode [ 81.913438][ T5624] team0: Port device team_slave_0 added [ 81.914591][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.914606][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.914637][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.927861][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.927974][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.928107][ T5619] bridge_slave_0: entered allmulticast mode [ 81.930736][ T5619] bridge_slave_0: entered promiscuous mode [ 81.971940][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.972251][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.972398][ T5620] bridge_slave_1: entered allmulticast mode [ 81.975338][ T5620] bridge_slave_1: entered promiscuous mode [ 81.980157][ T5624] team0: Port device team_slave_1 added [ 81.983453][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.983568][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.983703][ T5619] bridge_slave_1: entered allmulticast mode [ 81.986158][ T5619] bridge_slave_1: entered promiscuous mode [ 81.989143][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.989257][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.989677][ T5634] bridge_slave_0: entered allmulticast mode [ 81.993537][ T5634] bridge_slave_0: entered promiscuous mode [ 82.115537][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.115744][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.116181][ T5634] bridge_slave_1: entered allmulticast mode [ 82.118156][ T5634] bridge_slave_1: entered promiscuous mode [ 82.150146][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.150459][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.150491][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.190684][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.195494][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.252935][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.256522][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.273433][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.273464][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.273496][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.283324][ T5618] hsr_slave_0: entered promiscuous mode [ 82.285315][ T5618] hsr_slave_1: entered promiscuous mode [ 82.290299][ T5619] team0: Port device team_slave_0 added [ 82.325064][ T5635] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.325181][ T5635] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.325324][ T5635] bridge_slave_0: entered allmulticast mode [ 82.331315][ T5635] bridge_slave_0: entered promiscuous mode [ 82.366426][ T5619] team0: Port device team_slave_1 added [ 82.369829][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.370067][ T5635] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.370178][ T5635] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.370608][ T5635] bridge_slave_1: entered allmulticast mode [ 82.375031][ T5635] bridge_slave_1: entered promiscuous mode [ 82.379693][ T5620] team0: Port device team_slave_0 added [ 82.419328][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.435924][ T5620] team0: Port device team_slave_1 added [ 82.539313][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.539363][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.539393][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.564951][ T5635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.600210][ T5624] hsr_slave_0: entered promiscuous mode [ 82.601480][ T5624] hsr_slave_1: entered promiscuous mode [ 82.602904][ T5624] debugfs: 'hsr0' already exists in 'hsr' [ 82.602990][ T5624] Cannot create hsr debugfs directory [ 82.605926][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.605948][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.605979][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.620533][ T5634] team0: Port device team_slave_0 added [ 82.625261][ T5635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.641433][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.641448][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.641479][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.756269][ T5634] team0: Port device team_slave_1 added [ 82.784690][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.784768][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.784803][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.794799][ T5619] hsr_slave_0: entered promiscuous mode [ 82.796410][ T5619] hsr_slave_1: entered promiscuous mode [ 82.797199][ T5619] debugfs: 'hsr0' already exists in 'hsr' [ 82.797219][ T5619] Cannot create hsr debugfs directory [ 82.873802][ T5635] team0: Port device team_slave_0 added [ 82.924304][ T5635] team0: Port device team_slave_1 added [ 82.933331][ T52] Bluetooth: hci0: command tx timeout [ 82.974574][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.974619][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.974650][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.012575][ T52] Bluetooth: hci3: command tx timeout [ 83.018367][ T52] Bluetooth: hci1: command tx timeout [ 83.031292][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.031380][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.031411][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.043466][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.043482][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.043512][ T5635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.094476][ T52] Bluetooth: hci2: command tx timeout [ 83.094516][ T52] Bluetooth: hci5: command tx timeout [ 83.141791][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.141853][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.141885][ T5635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.152887][ T5620] hsr_slave_0: entered promiscuous mode [ 83.154109][ T5620] hsr_slave_1: entered promiscuous mode [ 83.155139][ T5620] debugfs: 'hsr0' already exists in 'hsr' [ 83.155161][ T5620] Cannot create hsr debugfs directory [ 83.172248][ T4935] Bluetooth: hci4: command tx timeout [ 83.432455][ T5634] hsr_slave_0: entered promiscuous mode [ 83.439943][ T5634] hsr_slave_1: entered promiscuous mode [ 83.443618][ T5634] debugfs: 'hsr0' already exists in 'hsr' [ 83.443641][ T5634] Cannot create hsr debugfs directory [ 83.507482][ T5635] hsr_slave_0: entered promiscuous mode [ 83.508583][ T5635] hsr_slave_1: entered promiscuous mode [ 83.509336][ T5635] debugfs: 'hsr0' already exists in 'hsr' [ 83.509380][ T5635] Cannot create hsr debugfs directory [ 83.809163][ T5618] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.821080][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.823921][ T5618] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.834949][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.855557][ T5618] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.866123][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.867916][ T5618] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.877850][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.995191][ T5624] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.005817][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.006880][ T5624] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.021560][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.033473][ T5624] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.043584][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.044648][ T5624] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.058276][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.131901][ T5620] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.146649][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.154946][ T5620] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.165166][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.181095][ T5620] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.192384][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.194204][ T5620] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.204639][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.304403][ T5619] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 84.317606][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.334712][ T5619] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 84.345147][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.346061][ T5619] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 84.357615][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.370997][ T5619] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 84.381109][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.485461][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.492737][ T5634] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.505077][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.515977][ T5634] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.525539][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.536771][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.556007][ T5634] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.565712][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.589201][ T5634] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.598862][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.647774][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.671383][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.677181][ T5635] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.690525][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.708902][ T5635] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.718771][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.721158][ T5635] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.729735][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.743773][ T1005] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.744088][ T1005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.747128][ T1005] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.747333][ T1005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.773674][ T5635] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.783448][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.800123][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.800256][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.825154][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.834194][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.834317][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.928266][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.966327][ T438] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.966444][ T438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.988128][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.998084][ T5618] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.013916][ T4935] Bluetooth: hci0: command tx timeout [ 85.020555][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.020662][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.103667][ T52] Bluetooth: hci3: command tx timeout [ 85.103717][ T4935] Bluetooth: hci1: command tx timeout [ 85.124177][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.170717][ T3274] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.170849][ T3274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.178491][ T4935] Bluetooth: hci5: command tx timeout [ 85.178524][ T4935] Bluetooth: hci2: command tx timeout [ 85.249109][ T3274] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.249256][ T3274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.257306][ T52] Bluetooth: hci4: command tx timeout [ 85.376335][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.431251][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.471361][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.471496][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.537843][ T5635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.568232][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.568378][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.657672][ T5635] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.710017][ T1005] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.710161][ T1005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.779856][ T1005] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.779988][ T1005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.064735][ T25] cfg80211: failed to load regulatory.db [ 86.290573][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.381751][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.523400][ T5618] veth0_vlan: entered promiscuous mode [ 86.590379][ T5618] veth1_vlan: entered promiscuous mode [ 86.678095][ T5624] veth0_vlan: entered promiscuous mode [ 86.750750][ T5624] veth1_vlan: entered promiscuous mode [ 86.810543][ T5618] veth0_macvtap: entered promiscuous mode [ 86.834762][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.861710][ T5618] veth1_macvtap: entered promiscuous mode [ 86.987454][ T5624] veth0_macvtap: entered promiscuous mode [ 87.019175][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.051677][ T5624] veth1_macvtap: entered promiscuous mode [ 87.067333][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.093151][ T52] Bluetooth: hci0: command tx timeout [ 87.119108][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.149878][ T5620] veth0_vlan: entered promiscuous mode [ 87.153052][ T3340] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.155714][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.155762][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.155805][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.175728][ T52] Bluetooth: hci3: command tx timeout [ 87.183186][ T52] Bluetooth: hci1: command tx timeout [ 87.216753][ T5620] veth1_vlan: entered promiscuous mode [ 87.257278][ T4935] Bluetooth: hci5: command tx timeout [ 87.257362][ T52] Bluetooth: hci2: command tx timeout [ 87.261944][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.298116][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.319041][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.336450][ T52] Bluetooth: hci4: command tx timeout [ 87.442572][ T438] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.442654][ T438] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.442722][ T438] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.442772][ T438] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.524123][ T5620] veth0_macvtap: entered promiscuous mode [ 87.569652][ T5620] veth1_macvtap: entered promiscuous mode [ 87.709071][ T3325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.720687][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.730005][ T3325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.777414][ T5635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.804608][ T1005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.804661][ T1005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.811570][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.887104][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.887155][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.936161][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.936217][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.050439][ T5618] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 88.180803][ T5856] loop0: detected capacity change from 0 to 32768 [ 88.220550][ T5856] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 88.269437][ T5619] veth0_vlan: entered promiscuous mode [ 88.295812][ T5635] veth0_vlan: entered promiscuous mode [ 88.306134][ T43] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.309898][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.309917][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.392521][ T43] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.392720][ T43] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.392765][ T43] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.394641][ T5619] veth1_vlan: entered promiscuous mode [ 88.399956][ T5635] veth1_vlan: entered promiscuous mode [ 88.435966][ T5634] veth0_vlan: entered promiscuous mode [ 88.462003][ T438] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.474114][ T438] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.490077][ T5634] veth1_vlan: entered promiscuous mode [ 88.582684][ T5856] md/raid1:md0: active with 1 out of 1 mirrors [ 88.592827][ T5862] md_update_sb: can't update sb for read-only array md0 [ 88.622593][ T25] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 88.650265][ T5619] veth0_macvtap: entered promiscuous mode [ 88.657773][ T5635] veth0_macvtap: entered promiscuous mode [ 88.681560][ T5634] veth0_macvtap: entered promiscuous mode [ 88.705138][ T5619] veth1_macvtap: entered promiscuous mode [ 88.725019][ T5635] veth1_macvtap: entered promiscuous mode [ 88.741559][ T5634] veth1_macvtap: entered promiscuous mode [ 88.783945][ T25] usb 2-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00 [ 88.795780][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.868088][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.898123][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.933149][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.953122][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.981580][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.017508][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.095699][ T12] Oops: general protection fault, probably for non-canonical address 0xdffffc000000001c: 0000 [#1] SMP KASAN NOPTI [ 89.107797][ T12] KASAN: null-ptr-deref in range [0x00000000000000e0-0x00000000000000e7] [ 89.109550][ T3325] nvmet: Created nvm controller 1 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:deca557c-d633-46a3-82a3-aee3beb9cba5. [ 89.114138][ T5866] nvme nvme0: creating 2 I/O queues. [ 89.135144][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 89.144426][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 89.154481][ T12] Workqueue: nvme-reset-wq nvme_loop_reset_ctrl_work [ 89.161178][ T12] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 89.167091][ T12] Code: 79 ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 7b d1 d8 fe cc 66 66 66 66 66 66 2e [ 89.186802][ T12] RSP: 0018:ffffc90000117978 EFLAGS: 00010012 [ 89.192878][ T12] RAX: dffffc0000000000 RBX: ffffffff8be69c30 RCX: 8000000000000002 [ 89.198465][ T5870] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 89.210281][ T12] RDX: 0000000000000000 RSI: ffffffff8be69c30 RDI: 000000000000001c [ 89.218259][ T12] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 [ 89.226220][ T12] R10: dffffc0000000000 R11: fffffbfff20f4270 R12: 00000000000000e0 [ 89.234187][ T12] R13: 0000000000000000 R14: 00000000000000e0 R15: 0000000000000001 [ 89.242157][ T12] FS: 0000000000000000(0000) GS:ffff888124cda000(0000) knlGS:0000000000000000 [ 89.251086][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 89.257655][ T12] CR2: 0000001b33e22ff8 CR3: 0000000076759000 CR4: 0000000000350ef0 [ 89.265627][ T12] Call Trace: [ 89.268895][ T12] [ 89.271809][ T12] __kasan_check_byte+0x12/0x40 [ 89.276664][ T12] lock_acquire+0x7d/0x350 [ 89.281074][ T12] ? enable_work+0x17f/0x230 [ 89.285667][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 89.291304][ T12] ? rcu_is_watching+0x16/0xb0 [ 89.296087][ T12] _raw_spin_lock_irqsave+0x40/0x60 [ 89.297867][ T25] hid-sensor-hub 0003:8086:0000.0001: unknown main item tag 0x0 [ 89.297930][ T25] hid-sensor-hub 0003:8086:0000.0001: unknown main item tag 0x0 [ 89.307790][ T25] hid-sensor-hub 0003:8086:0000.0001: hiddev0,hidraw0: USB HID v1.11 Device [HID 8086:0000] on usb-dummy_hcd.1-1/input0 [ 89.328965][ T12] ? blk_mq_quiesce_queue+0x2f/0x190 [ 89.334259][ T12] blk_mq_quiesce_queue+0x2f/0x190 [ 89.339380][ T12] nvme_loop_reset_ctrl_work+0x1cf/0x810 [ 89.345013][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 89.350662][ T12] ? process_scheduled_works+0x97a/0x1630 [ 89.356387][ T12] process_scheduled_works+0xc3d/0x1630 [ 89.361939][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 89.367587][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 89.373584][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 89.379230][ T12] ? assign_work+0x3cf/0x5d0 [ 89.383838][ T12] worker_thread+0xa47/0xfb0 [ 89.388448][ T12] kthread+0x38b/0x480 [ 89.392520][ T12] ? __pfx_worker_thread+0x10/0x10 [ 89.397749][ T12] ? __pfx_kthread+0x10/0x10 [ 89.402344][ T12] ret_from_fork+0x514/0xb70 [ 89.407022][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 89.412149][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 89.417794][ T12] ? __switch_to+0xc89/0x1420 [ 89.422485][ T12] ? __pfx_kthread+0x10/0x10 [ 89.427078][ T12] ret_from_fork_asm+0x1a/0x30 [ 89.431864][ T12] [ 89.434875][ T12] Modules linked in: [ 89.438770][ T12] ---[ end trace 0000000000000000 ]--- [ 89.444220][ T12] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 89.444256][ T12] Code: 79 ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 7b d1 d8 fe cc 66 66 66 66 66 66 2e [ 89.444275][ T12] RSP: 0018:ffffc90000117978 EFLAGS: 00010012 [ 89.444296][ T12] RAX: dffffc0000000000 RBX: ffffffff8be69c30 RCX: 8000000000000002 [ 89.444314][ T12] RDX: 0000000000000000 RSI: ffffffff8be69c30 RDI: 000000000000001c [ 89.444330][ T12] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 [ 89.444347][ T12] R10: dffffc0000000000 R11: fffffbfff20f4270 R12: 00000000000000e0 [ 89.444365][ T12] R13: 0000000000000000 R14: 00000000000000e0 R15: 0000000000000001 [ 89.444383][ T12] FS: 0000000000000000(0000) GS:ffff888124cda000(0000) knlGS:0000000000000000 [ 89.444404][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 89.444422][ T12] CR2: 0000001b33e22ff8 CR3: 0000000076759000 CR4: 0000000000350ef0 [ 89.444444][ T12] Kernel panic - not syncing: Fatal exception [ 89.545222][ T12] Kernel Offset: disabled [ 89.549558][ T12] Rebooting in 86400 seconds..