last executing test programs:
419.691881ms ago: executing program 1 (id=2):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0)
read$auto(r0, 0x0, 0x1f42)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f00000000c0)={0x0, 0x7}, 0x3)
bpf$auto_BPF_MAP_FREEZE(0x16, 0x0, 0xffffff80)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/kexec_crash_size\x00', 0x102, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000100)="b4", 0x1)
lseek$auto(0x3, 0x7ffffffffffffffd, 0x2)
mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000)
mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa)
execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0x20)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC0\x00', 0x80100, 0x0)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3)
r5 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
rename$auto(&(0x7f00000000c0)=':,\x00', &(0x7f0000000100)=':,\x00')
prctl$auto(0x1bc, 0x1, 0x0, 0xb3e7, 0x4)
ioctl$auto(r5, 0x4004556e, 0x1f)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_DP_CMD_NEW(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x100}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x80)
prctl$auto(0x4e, 0x1, 0x0, 0x1, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x2df, 0x500, 0x81, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x8000000000000000}})
getsockopt$auto_SO_RCVPRIORITY(r2, 0xdf, 0x52, &(0x7f0000000080)='^\x00', &(0x7f0000000240)=0x7)
process_madvise$auto_MADV_GUARD_INSTALL(r1, &(0x7f0000000040)={&(0x7f0000000140)="6902b80dbf737fbf9a7eac9c409fe7d428f9cb20536c1b5897e79051a7c1393496533897b4fe4300b485a335d229577110a90640d116541d58dd85d7d2b7ac541bc6e7f5549a711d73b64dff960d06f6cf2e2d52124a10b1ea10f2a5524b67b3ca45e3855cc702a30df74f35b7f9f32dbfac270310af7691daf9f39031a7d8eadf74c8e9e38fac43758514521ed8aee96ae1540fd69017b0af92653408d8e5ab86328d81dcde915a899ecce57d00731abeb69cc3e4149cc1ef16ba989955a26eb0619b7c2a521a1bc089aa192baf2c671ff67e94487adef6405648b7c3701a92b1", 0x3}, 0x6, 0x66, 0x3)
0s ago: executing program 0 (id=1):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = open(0x0, 0xd02, 0xc3)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000)
mbind$auto(0x0, 0x800605, 0x8003, &(0x7f0000000100)=0xffff, 0x3, 0x3)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_START_AP(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48010}, 0x20000800)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0xa, 0x5, 0x0)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
socket(0x1e, 0x1, 0x0)
openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/ip6_vti0/stable_secret\x00', 0x2, 0x0)
pwrite64$auto(r1, &(0x7f0000000040)='.\'*&\x04!\x00', 0x1, 0x8)
madvise$auto(0x0, 0x8000000000000000, 0x15)
mmap$auto(0x0, 0x40008, 0xb3, 0x9b72, 0xffffffffffffffff, 0x28000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
clone$auto(0x20003b46, 0x9, 0x0, 0x0, 0x1)
kernel console output (not intermixed with test programs):
Warning: Permanently added '10.128.1.146' (ED25519) to the list of known hosts.
[ 98.194898][ T5824] cgroup: Unknown subsys name 'net'
[ 98.306225][ T5824] cgroup: Unknown subsys name 'cpuset'
[ 98.315776][ T5824] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 100.200501][ T5824] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 102.413581][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 102.422585][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 102.430330][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 102.438664][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 102.446589][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 102.523272][ T24] cfg80211: failed to load regulatory.db
[ 102.536941][ T5157] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 102.562776][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 102.571115][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 102.579603][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 102.588711][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 102.596103][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 102.603825][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 102.611651][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 102.619118][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 102.627102][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 102.634681][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 102.644153][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 102.662820][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 102.716333][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 102.732999][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 102.949054][ T5834] chnl_net:caif_netlink_parms(): no params data found
[ 103.145544][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[ 103.153949][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[ 103.161299][ T5834] bridge_slave_0: entered allmulticast mode
[ 103.168999][ T5834] bridge_slave_0: entered promiscuous mode
[ 103.179287][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[ 103.186828][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[ 103.194149][ T5834] bridge_slave_1: entered allmulticast mode
[ 103.201740][ T5834] bridge_slave_1: entered promiscuous mode
[ 103.324149][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 103.344757][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 103.359758][ T5839] chnl_net:caif_netlink_parms(): no params data found
[ 103.449433][ T5834] team0: Port device team_slave_0 added
[ 103.498902][ T5834] team0: Port device team_slave_1 added
[ 103.595157][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 103.603684][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 103.632295][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 103.646579][ T5841] chnl_net:caif_netlink_parms(): no params data found
[ 103.669279][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 103.678061][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 103.706288][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 103.773653][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state
[ 103.781531][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[ 103.791449][ T5839] bridge_slave_0: entered allmulticast mode
[ 103.799979][ T5839] bridge_slave_0: entered promiscuous mode
[ 103.808199][ T5840] chnl_net:caif_netlink_parms(): no params data found
[ 103.864499][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state
[ 103.871685][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[ 103.879458][ T5839] bridge_slave_1: entered allmulticast mode
[ 103.887065][ T5839] bridge_slave_1: entered promiscuous mode
[ 103.918361][ T5834] hsr_slave_0: entered promiscuous mode
[ 103.925396][ T5834] hsr_slave_1: entered promiscuous mode
[ 104.018001][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 104.072874][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 104.153979][ T5839] team0: Port device team_slave_0 added
[ 104.160247][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[ 104.168458][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[ 104.178355][ T5841] bridge_slave_0: entered allmulticast mode
[ 104.186659][ T5841] bridge_slave_0: entered promiscuous mode
[ 104.209271][ T5839] team0: Port device team_slave_1 added
[ 104.215734][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[ 104.223602][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[ 104.230791][ T5841] bridge_slave_1: entered allmulticast mode
[ 104.238422][ T5841] bridge_slave_1: entered promiscuous mode
[ 104.325381][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state
[ 104.332859][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state
[ 104.340077][ T5840] bridge_slave_0: entered allmulticast mode
[ 104.347671][ T5840] bridge_slave_0: entered promiscuous mode
[ 104.406113][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state
[ 104.414295][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state
[ 104.421508][ T5840] bridge_slave_1: entered allmulticast mode
[ 104.429921][ T5840] bridge_slave_1: entered promiscuous mode
[ 104.437521][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 104.444857][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 104.470882][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 104.482751][ T5837] Bluetooth: hci0: command tx timeout
[ 104.491632][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 104.522885][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 104.529898][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 104.556174][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 104.569750][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 104.641521][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 104.670476][ T5841] team0: Port device team_slave_0 added
[ 104.688463][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 104.722979][ T5837] Bluetooth: hci1: command tx timeout
[ 104.739212][ T5839] hsr_slave_0: entered promiscuous mode
[ 104.746610][ T5839] hsr_slave_1: entered promiscuous mode
[ 104.756007][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 104.764612][ T5839] Cannot create hsr debugfs directory
[ 104.775275][ T5841] team0: Port device team_slave_1 added
[ 104.802963][ T5837] Bluetooth: hci2: command tx timeout
[ 104.803455][ T5848] Bluetooth: hci3: command tx timeout
[ 104.829858][ T5840] team0: Port device team_slave_0 added
[ 104.878708][ T5840] team0: Port device team_slave_1 added
[ 104.886001][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 104.893409][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 104.919561][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 104.960556][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 104.967863][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 104.994731][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 105.072649][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 105.079653][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 105.106061][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 105.169226][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 105.178692][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 105.205041][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 105.223617][ T5834] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 105.255856][ T5841] hsr_slave_0: entered promiscuous mode
[ 105.262457][ T5841] hsr_slave_1: entered promiscuous mode
[ 105.268583][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 105.276455][ T5841] Cannot create hsr debugfs directory
[ 105.307152][ T5834] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 105.338732][ T5834] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 105.382721][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 105.431091][ T5840] hsr_slave_0: entered promiscuous mode
[ 105.438339][ T5840] hsr_slave_1: entered promiscuous mode
[ 105.444946][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 105.452577][ T5840] Cannot create hsr debugfs directory
[ 105.704619][ T5839] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 105.720700][ T5839] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 105.769482][ T5839] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 105.780287][ T5839] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 105.927655][ T5841] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 105.948331][ T5841] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 105.980285][ T5841] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 106.005338][ T5841] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 106.066858][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[ 106.074892][ T5840] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 106.088531][ T5840] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 106.110225][ T5840] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 106.120877][ T5840] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 106.183405][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[ 106.211557][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 106.218931][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 106.257183][ T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 106.264400][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 106.417837][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0
[ 106.455858][ T5839] 8021q: adding VLAN 0 to HW filter on device team0
[ 106.480175][ T59] bridge0: port 1(bridge_slave_0) entered blocking state
[ 106.487465][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 106.514354][ T49] bridge0: port 2(bridge_slave_1) entered blocking state
[ 106.521611][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 106.535854][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[ 106.562230][ T5848] Bluetooth: hci0: command tx timeout
[ 106.589530][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[ 106.616496][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[ 106.658023][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state
[ 106.665206][ T4188] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 106.717420][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state
[ 106.724641][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 106.777588][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[ 106.807821][ T5848] Bluetooth: hci1: command tx timeout
[ 106.851906][ T59] bridge0: port 1(bridge_slave_0) entered blocking state
[ 106.859138][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 106.883458][ T5848] Bluetooth: hci2: command tx timeout
[ 106.893176][ T5848] Bluetooth: hci3: command tx timeout
[ 106.974543][ T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 106.981737][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 107.071187][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 107.307889][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 107.320240][ T5834] veth0_vlan: entered promiscuous mode
[ 107.365141][ T5834] veth1_vlan: entered promiscuous mode
[ 107.450313][ T5839] veth0_vlan: entered promiscuous mode
[ 107.505039][ T5839] veth1_vlan: entered promiscuous mode
[ 107.575899][ T5834] veth0_macvtap: entered promiscuous mode
[ 107.611677][ T5834] veth1_macvtap: entered promiscuous mode
[ 107.659365][ T5839] veth0_macvtap: entered promiscuous mode
[ 107.678798][ T5839] veth1_macvtap: entered promiscuous mode
[ 107.699681][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 107.712781][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 107.726522][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 107.751501][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 107.781296][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 107.791026][ T5834] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 107.800526][ T5834] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 107.811075][ T5834] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 107.820500][ T5834] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 107.865246][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 107.905051][ T5839] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 107.915436][ T5839] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 107.925369][ T5839] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 107.934571][ T5839] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 108.001087][ T5841] veth0_vlan: entered promiscuous mode
[ 108.045378][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 108.049857][ T5840] veth0_vlan: entered promiscuous mode
[ 108.068129][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 108.111163][ T5841] veth1_vlan: entered promiscuous mode
[ 108.147046][ T5840] veth1_vlan: entered promiscuous mode
[ 108.165149][ T1336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 108.178748][ T1336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 108.229014][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 108.256855][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 108.306746][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 108.356051][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 108.357520][ T5841] veth0_macvtap: entered promiscuous mode
[ 108.380013][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 108.384173][ T5841] veth1_macvtap: entered promiscuous mode
[ 108.411405][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 108.458028][ T5840] veth0_macvtap: entered promiscuous mode
[ 108.470175][ T5840] veth1_macvtap: entered promiscuous mode
[ 108.500863][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 108.524961][ T5922] FAULT_INJECTION: forcing a failure.
[ 108.524961][ T5922] name failslab, interval 1, probability 0, space 0, times 1
[ 108.540464][ T5922] CPU: 0 UID: 0 PID: 5922 Comm: syz.1.2 Not tainted 6.16.0-rc2-syzkaller-00045-g4663747812d1 #0 PREEMPT(full)
[ 108.540506][ T5922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 108.540529][ T5922] Call Trace:
[ 108.540539][ T5922]
[ 108.540555][ T5922] dump_stack_lvl+0x16c/0x1f0
[ 108.540614][ T5922] should_fail_ex+0x512/0x640
[ 108.540659][ T5922] ? fs_reclaim_acquire+0xae/0x150
[ 108.540700][ T5922] should_failslab+0xc2/0x120
[ 108.540731][ T5922] kmem_cache_alloc_noprof+0x6d/0x3b0
[ 108.540781][ T5922] ? security_inode_alloc+0x3b/0x2b0
[ 108.540822][ T5922] security_inode_alloc+0x3b/0x2b0
[ 108.540859][ T5922] inode_init_always_gfp+0xce4/0x1030
[ 108.540911][ T5922] alloc_inode+0x86/0x240
[ 108.540952][ T5922] iget_locked+0x2e4/0x830
[ 108.540990][ T5922] ? __pfx_iget_locked+0x10/0x10
[ 108.541028][ T5922] ? find_held_lock+0x2b/0x80
[ 108.541058][ T5922] ? kernfs_root+0xee/0x2a0
[ 108.541105][ T5922] kernfs_get_inode+0x48/0x460
[ 108.541146][ T5922] kernfs_iop_lookup+0x1a7/0x2d0
[ 108.541193][ T5922] ? __pfx_kernfs_iop_lookup+0x10/0x10
[ 108.541235][ T5922] lookup_open.isra.0+0x4d7/0x1580
[ 108.541285][ T5922] ? __pfx_lookup_open.isra.0+0x10/0x10
[ 108.541349][ T5922] ? mnt_get_write_access+0x20c/0x300
[ 108.541390][ T5922] path_openat+0x893/0x2cb0
[ 108.541449][ T5922] ? __pfx_path_openat+0x10/0x10
[ 108.541494][ T5922] ? __lock_acquire+0xb8a/0x1c90
[ 108.541540][ T5922] do_filp_open+0x20b/0x470
[ 108.541586][ T5922] ? __pfx_do_filp_open+0x10/0x10
[ 108.541663][ T5922] ? alloc_fd+0x471/0x7d0
[ 108.541718][ T5922] do_sys_openat2+0x11b/0x1d0
[ 108.541752][ T5922] ? __pfx_do_sys_openat2+0x10/0x10
[ 108.541805][ T5922] __x64_sys_openat+0x174/0x210
[ 108.541849][ T5922] ? __pfx___x64_sys_openat+0x10/0x10
[ 108.541902][ T5922] do_syscall_64+0xcd/0x490
[ 108.541944][ T5922] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 108.541976][ T5922] RIP: 0033:0x7fa14878e929
[ 108.542008][ T5922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 108.542037][ T5922] RSP: 002b:00007fa14967e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 108.542066][ T5922] RAX: ffffffffffffffda RBX: 00007fa1489b5fa0 RCX: 00007fa14878e929
[ 108.542085][ T5922] RDX: 0000000000000102 RSI: 00002000000003c0 RDI: ffffffffffffff9c
[ 108.542104][ T5922] RBP: 00007fa148810b39 R08: 0000000000000000 R09: 0000000000000000
[ 108.542121][ T5922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 108.542138][ T5922] R13: 0000000000000000 R14: 00007fa1489b5fa0 R15: 00007fffa7871ef8
[ 108.542178][ T5922]
[ 108.544156][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 108.600782][ T5923] process 'syz.1.2' launched ':,' with NULL argv: empty string added
[ 108.620313][ T5841] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 108.672066][ T5848] Bluetooth: hci0: command tx timeout
[ 108.675248][ T5841] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 108.877212][ T5841] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 108.886261][ T5848] Bluetooth: hci1: command tx timeout
[ 108.892081][ T5841] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 108.910958][ T5922] FAULT_INJECTION: forcing a failure.
[ 108.910958][ T5922] name failslab, interval 1, probability 0, space 0, times 0
[ 108.924536][ T5922] CPU: 0 UID: 0 PID: 5922 Comm: syz.1.2 Not tainted 6.16.0-rc2-syzkaller-00045-g4663747812d1 #0 PREEMPT(full)
[ 108.924578][ T5922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 108.924595][ T5922] Call Trace:
[ 108.924605][ T5922]
[ 108.924617][ T5922] dump_stack_lvl+0x16c/0x1f0
[ 108.924673][ T5922] should_fail_ex+0x512/0x640
[ 108.924719][ T5922] ? __kmalloc_cache_noprof+0x57/0x3e0
[ 108.924766][ T5922] should_failslab+0xc2/0x120
[ 108.924795][ T5922] __kmalloc_cache_noprof+0x6a/0x3e0
[ 108.924839][ T5922] ? io_uring_alloc_task_context+0x96/0x650
[ 108.924879][ T5922] io_uring_alloc_task_context+0x96/0x650
[ 108.924942][ T5922] ? __pfx_io_uring_alloc_task_context+0x10/0x10
[ 108.924978][ T5922] ? lockdep_hardirqs_on+0x7c/0x110
[ 108.925038][ T5922] io_sq_offload_create+0xd9e/0x1330
[ 108.925094][ T5922] ? __pfx_io_sq_offload_create+0x10/0x10
[ 108.925148][ T5922] ? bpf_lsm_capable+0x9/0x10
[ 108.925187][ T5922] ? security_capable+0x7e/0x260
[ 108.925224][ T5922] io_uring_setup+0x1493/0x2080
[ 108.925270][ T5922] ? __pfx_io_uring_setup+0x10/0x10
[ 108.925344][ T5922] ? xfd_validate_state+0x61/0x180
[ 108.925384][ T5922] ? __pfx___do_sys_prctl+0x10/0x10
[ 108.925442][ T5922] __x64_sys_io_uring_setup+0xc2/0x170
[ 108.925486][ T5922] do_syscall_64+0xcd/0x490
[ 108.925517][ T5922] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 108.925550][ T5922] RIP: 0033:0x7fa14878e929
[ 108.925575][ T5922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 108.925607][ T5922] RSP: 002b:00007fa14967e038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9
[ 108.925638][ T5922] RAX: ffffffffffffffda RBX: 00007fa1489b5fa0 RCX: 00007fa14878e929
[ 108.925658][ T5922] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000059
[ 108.925678][ T5922] RBP: 00007fa148810b39 R08: 0000000000000000 R09: 0000000000000000
[ 108.925697][ T5922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 108.925715][ T5922] R13: 0000000000000000 R14: 00007fa1489b5fa0 R15: 00007fffa7871ef8
[ 108.925757][ T5922]
[ 108.927836][ T5922] ------------[ cut here ]------------
[ 108.930299][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 108.939880][ T5922] WARNING: CPU: 0 PID: 5922 at kernel/fork.c:731 __put_task_struct+0x340/0x530
[ 108.939949][ T5922] Modules linked in:
[ 108.939983][ T5922] CPU: 0 UID: 0 PID: 5922 Comm: syz.1.2 Not tainted 6.16.0-rc2-syzkaller-00045-g4663747812d1 #0 PREEMPT(full)
[ 108.940023][ T5922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 108.940042][ T5922] RIP: 0010:__put_task_struct+0x340/0x530
[ 108.940081][ T5922] Code: f6 ac 41 00 be 03 00 00 00 4c 89 e7 e8 f9 c2 5e 03 e9 ed fe ff ff e8 df ac 41 00 90 0f 0b 90 e9 6d fd ff ff e8 d1 ac 41 00 90 <0f> 0b 90 e9 0b fd ff ff e8 c3 ac 41 00 90 0f 0b 90 e9 67 fd ff ff
[ 108.940112][ T5922] RSP: 0018:ffffc9000430fc50 EFLAGS: 00010283
[ 108.940139][ T5922] RAX: 00000000000186fd RBX: ffff88802f11da00 RCX: ffffc9000c129000
[ 108.940162][ T5922] RDX: 0000000000080000 RSI: ffffffff8179db7f RDI: 0000000000000005
[ 108.940183][ T5922] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000
[ 108.940203][ T5922] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88802f11da00
[ 108.940224][ T5922] R13: 1ffff92000861f96 R14: ffff88802f11da28 R15: 0000000000000000
[ 108.940247][ T5922] FS: 00007fa14967e6c0(0000) GS:ffff888124761000(0000) knlGS:0000000000000000
[ 108.940279][ T5922] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 108.940303][ T5922] CR2: 0000001b308f3ff8 CR3: 000000007bb7e000 CR4: 00000000003526f0
[ 108.976583][ T5840] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 108.979128][ T5922] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 108.989838][ T5840] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 108.990425][ T5922] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 108.997360][ T5848] Bluetooth: hci3: command tx timeout
[ 109.002601][ T5922] Call Trace:
[ 109.013146][ T5848] Bluetooth: hci2: command tx timeout
[ 109.044732][ T5840] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 109.049619][ T5922]
[ 109.049635][ T5922] ? io_sq_offload_create+0xe24/0x1330
[ 109.073237][ T5840] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 109.091401][ T5922] io_sq_offload_create+0xe4b/0x1330
[ 109.091459][ T5922] ? io_sq_offload_create+0xe24/0x1330
[ 109.091517][ T5922] ? __pfx_io_sq_offload_create+0x10/0x10
[ 109.091570][ T5922] ? bpf_lsm_capable+0x9/0x10
[ 109.091608][ T5922] ? security_capable+0x7e/0x260
[ 109.091646][ T5922] io_uring_setup+0x1493/0x2080
[ 109.397947][ T5922] ? __pfx_io_uring_setup+0x10/0x10
[ 109.403325][ T5922] ? xfd_validate_state+0x61/0x180
[ 109.408521][ T5922] ? __pfx___do_sys_prctl+0x10/0x10
[ 109.413885][ T5922] __x64_sys_io_uring_setup+0xc2/0x170
[ 109.419428][ T5922] do_syscall_64+0xcd/0x490
[ 109.424079][ T5922] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 109.430047][ T5922] RIP: 0033:0x7fa14878e929
[ 109.434580][ T5922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 109.454425][ T5922] RSP: 002b:00007fa14967e038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9
[ 109.462983][ T5922] RAX: ffffffffffffffda RBX: 00007fa1489b5fa0 RCX: 00007fa14878e929
[ 109.471698][ T5922] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000059
[ 109.480391][ T5922] RBP: 00007fa148810b39 R08: 0000000000000000 R09: 0000000000000000
[ 109.488484][ T5922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 109.496576][ T5922] R13: 0000000000000000 R14: 00007fa1489b5fa0 R15: 00007fffa7871ef8
[ 109.504710][ T5922]
[ 109.507799][ T5922] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 109.515137][ T5922] CPU: 0 UID: 0 PID: 5922 Comm: syz.1.2 Not tainted 6.16.0-rc2-syzkaller-00045-g4663747812d1 #0 PREEMPT(full)
[ 109.527010][ T5922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 109.537125][ T5922] Call Trace:
[ 109.540453][ T5922]
[ 109.543431][ T5922] dump_stack_lvl+0x3d/0x1f0
[ 109.548096][ T5922] panic+0x71c/0x800
[ 109.552069][ T5922] ? __pfx_panic+0x10/0x10
[ 109.556568][ T5922] ? show_trace_log_lvl+0x29b/0x3e0
[ 109.561863][ T5922] ? __put_task_struct+0x340/0x530
[ 109.567037][ T5922] check_panic_on_warn+0xab/0xb0
[ 109.572035][ T5922] __warn+0xf6/0x3c0
[ 109.576074][ T5922] ? __put_task_struct+0x340/0x530
[ 109.581234][ T5922] report_bug+0x3c3/0x580
[ 109.585618][ T5922] ? __put_task_struct+0x340/0x530
[ 109.590849][ T5922] handle_bug+0x184/0x210
[ 109.595217][ T5922] exc_invalid_op+0x17/0x50
[ 109.599928][ T5922] asm_exc_invalid_op+0x1a/0x20
[ 109.604900][ T5922] RIP: 0010:__put_task_struct+0x340/0x530
[ 109.610659][ T5922] Code: f6 ac 41 00 be 03 00 00 00 4c 89 e7 e8 f9 c2 5e 03 e9 ed fe ff ff e8 df ac 41 00 90 0f 0b 90 e9 6d fd ff ff e8 d1 ac 41 00 90 <0f> 0b 90 e9 0b fd ff ff e8 c3 ac 41 00 90 0f 0b 90 e9 67 fd ff ff
[ 109.630480][ T5922] RSP: 0018:ffffc9000430fc50 EFLAGS: 00010283
[ 109.636583][ T5922] RAX: 00000000000186fd RBX: ffff88802f11da00 RCX: ffffc9000c129000
[ 109.644583][ T5922] RDX: 0000000000080000 RSI: ffffffff8179db7f RDI: 0000000000000005
[ 109.652589][ T5922] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000
[ 109.660590][ T5922] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88802f11da00
[ 109.668590][ T5922] R13: 1ffff92000861f96 R14: ffff88802f11da28 R15: 0000000000000000
[ 109.676609][ T5922] ? __put_task_struct+0x33f/0x530
[ 109.681776][ T5922] ? io_sq_offload_create+0xe24/0x1330
[ 109.687293][ T5922] io_sq_offload_create+0xe4b/0x1330
[ 109.692629][ T5922] ? io_sq_offload_create+0xe24/0x1330
[ 109.698141][ T5922] ? __pfx_io_sq_offload_create+0x10/0x10
[ 109.703910][ T5922] ? bpf_lsm_capable+0x9/0x10
[ 109.708627][ T5922] ? security_capable+0x7e/0x260
[ 109.713709][ T5922] io_uring_setup+0x1493/0x2080
[ 109.718614][ T5922] ? __pfx_io_uring_setup+0x10/0x10
[ 109.723876][ T5922] ? xfd_validate_state+0x61/0x180
[ 109.729027][ T5922] ? __pfx___do_sys_prctl+0x10/0x10
[ 109.734293][ T5922] __x64_sys_io_uring_setup+0xc2/0x170
[ 109.739801][ T5922] do_syscall_64+0xcd/0x490
[ 109.744342][ T5922] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 109.750267][ T5922] RIP: 0033:0x7fa14878e929
[ 109.754810][ T5922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 109.774465][ T5922] RSP: 002b:00007fa14967e038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9
[ 109.782923][ T5922] RAX: ffffffffffffffda RBX: 00007fa1489b5fa0 RCX: 00007fa14878e929
[ 109.790919][ T5922] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000059
[ 109.798915][ T5922] RBP: 00007fa148810b39 R08: 0000000000000000 R09: 0000000000000000
[ 109.806911][ T5922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 109.814909][ T5922] R13: 0000000000000000 R14: 00007fa1489b5fa0 R15: 00007fffa7871ef8
[ 109.822923][ T5922]
[ 109.826314][ T5922] Kernel Offset: disabled
[ 109.830686][ T5922] Rebooting in 86400 seconds..