last executing test programs: 596.812929ms ago: executing program 0 (id=1): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000ec0)="2c000000110005000100000094b88263b62ea2720000000000000000000000000c0003006261746164763000", 0x2c) 123.665661ms ago: executing program 3 (id=4): r0 = syz_open_dev$vim2m(&(0x7f0000000300), 0x40005, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000340)={0xf0f044}) poll(&(0x7f0000000580)=[{r0, 0x1d06b1002b1f496f}], 0x1, 0xffff) 92.911167ms ago: executing program 0 (id=5): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000580)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$DM_DEV_SET_GEOMETRY(r1, 0xc138fd0f, &(0x7f0000000240)={0x4, 0x0, 0x0, 0x190, 0x138, 0x0, 0x0, 0xa1c10, 0x0, 0x0, @by_uuid={0x0, '\x00', {'LVM-syz', 0x0, '2\x00'}}, {0x378, 0x20, 0x86, 0x20, 0x30, 0x20, 0x1aee}}) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x1b8, 0x138, 0x1, 0x0, 0x80000, 0x0, 0x0, @by_dev={r2}, [@snapshot={0x0, 0xd8, 0x0, 0x80, 'snapshot\x00', {@ram_num={'1:', 0x1}, 0x20, @ram={'/dev/ram', 0x0}, 0x20, 'n', 0x20, '8', ' 2 discard_zeroes_cow discard_passdown_origin'}}]}) 0s ago: executing program 3 (id=6): mkdirat(0xffffffffffffff9c, 0x0, 0x1cd) openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.191' (ED25519) to the list of known hosts. [ 72.354650][ T5626] cgroup: Unknown subsys name 'net' [ 72.443943][ T5626] cgroup: Unknown subsys name 'cpuset' [ 72.452600][ T5626] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.793365][ T5626] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.075309][ T5643] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.076780][ T5643] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.077305][ T5643] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.078827][ T5643] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.079735][ T5643] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.080821][ T5651] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.088230][ T5651] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.098981][ T5643] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.100205][ T5643] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.110790][ T5643] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.110788][ T5651] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.112935][ T5643] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.115863][ T5643] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.116440][ T5643] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.125359][ T5643] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.125465][ T5651] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.127457][ T5641] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.129742][ T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.133193][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.137477][ T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.802170][ T5639] rxe_eth0 speed is unknown, defaulting to 1000 [ 76.807360][ T5639] rxe_eth0 speed is unknown, defaulting to 1000 [ 76.821038][ T5639] rxe_eth0 speed is unknown, defaulting to 1000 [ 76.871851][ T5636] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 77.063837][ T5637] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 77.068920][ T5638] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 77.240204][ T5639] infiniband rxe0: set active [ 77.241539][ T5639] infiniband rxe0: added rxe_eth0 [ 77.262189][ T5640] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.282648][ T5639] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 77.282679][ T5639] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 77.282715][ T5639] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 77.353639][ T5639] RDS/IB: rxe0: added [ 77.354527][ T5639] smc: adding ib device rxe0 with port count 1 [ 77.354626][ T5639] smc: ib device rxe0 port 1 has no pnetid [ 77.381380][ T5640] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.397406][ T5639] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.755872][ T5639] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.756779][ T5636] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.759202][ T5636] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.759362][ T5636] bridge_slave_0: entered allmulticast mode [ 77.788248][ T5636] bridge_slave_0: entered promiscuous mode [ 77.800223][ T5636] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.800433][ T5636] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.800564][ T5636] bridge_slave_1: entered allmulticast mode [ 77.804372][ T5636] bridge_slave_1: entered promiscuous mode [ 77.917762][ T5636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.975047][ T5636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.975256][ T5638] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.975428][ T5638] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.975814][ T5638] bridge_slave_0: entered allmulticast mode [ 77.977617][ T5638] bridge_slave_0: entered promiscuous mode [ 78.032291][ T5638] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.032441][ T5638] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.033229][ T5638] bridge_slave_1: entered allmulticast mode [ 78.034990][ T5638] bridge_slave_1: entered promiscuous mode [ 78.049490][ T5639] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.142434][ T5636] team0: Port device team_slave_0 added [ 78.147037][ T5638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.147240][ T5637] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.148670][ T5637] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.148822][ T5637] bridge_slave_0: entered allmulticast mode [ 78.150592][ T5637] bridge_slave_0: entered promiscuous mode [ 78.192034][ T5648] Bluetooth: hci1: command tx timeout [ 78.192183][ T5648] Bluetooth: hci0: command tx timeout [ 78.192274][ T5648] Bluetooth: hci3: command tx timeout [ 78.192538][ T55] Bluetooth: hci2: command tx timeout [ 78.219821][ T5636] team0: Port device team_slave_1 added [ 78.228970][ T5638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.229183][ T5637] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.229393][ T5637] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.229512][ T5637] bridge_slave_1: entered allmulticast mode [ 78.233435][ T5637] bridge_slave_1: entered promiscuous mode [ 78.329143][ T5638] team0: Port device team_slave_0 added [ 78.341858][ T5637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.345142][ T5637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.346033][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.346047][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.346060][ T5636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.348737][ T5638] team0: Port device team_slave_1 added [ 78.414618][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.414633][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.414657][ T5636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.466008][ T5637] team0: Port device team_slave_0 added [ 78.468501][ T5637] team0: Port device team_slave_1 added [ 78.488791][ T5639] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.491846][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.491859][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.491882][ T5638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.552393][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.552410][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.552434][ T5638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.578520][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.578537][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.578560][ T5637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.622654][ T5636] hsr_slave_0: entered promiscuous mode [ 78.625462][ T5636] hsr_slave_1: entered promiscuous mode [ 78.632246][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.632267][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.632291][ T5637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.734028][ T5638] hsr_slave_0: entered promiscuous mode [ 78.735095][ T5638] hsr_slave_1: entered promiscuous mode [ 78.735848][ T5638] debugfs: 'hsr0' already exists in 'hsr' [ 78.735950][ T5638] Cannot create hsr debugfs directory [ 78.833137][ T5637] hsr_slave_0: entered promiscuous mode [ 78.833724][ T5637] hsr_slave_1: entered promiscuous mode [ 78.834219][ T5637] debugfs: 'hsr0' already exists in 'hsr' [ 78.834231][ T5637] Cannot create hsr debugfs directory [ 79.211405][ T5636] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.218008][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.219137][ T5636] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.234522][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.247996][ T5636] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.257232][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.258107][ T5636] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.266323][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.388070][ T5638] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.395025][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.395820][ T5638] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.406591][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.436107][ T5638] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.443774][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.459275][ T5639] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.459336][ T5639] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.459570][ T5639] bridge_slave_0: entered allmulticast mode [ 79.460559][ T5639] bridge_slave_0: entered promiscuous mode [ 79.479670][ T5638] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.485230][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.503072][ T5639] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.503208][ T5639] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.503319][ T5639] bridge_slave_1: entered allmulticast mode [ 79.504259][ T5639] bridge_slave_1: entered promiscuous mode [ 79.560174][ T5639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.574955][ T5639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.615564][ T5639] team0: Port device team_slave_0 added [ 79.631745][ T5639] team0: Port device team_slave_1 added [ 79.665617][ T5637] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.669072][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.669837][ T5637] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.675374][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.684117][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.684133][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.684156][ T5639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.690309][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.690324][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.690347][ T5639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.691783][ T5637] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.703242][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.704132][ T5637] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.709924][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.832542][ T5639] hsr_slave_0: entered promiscuous mode [ 79.833148][ T5639] hsr_slave_1: entered promiscuous mode [ 79.833569][ T5639] debugfs: 'hsr0' already exists in 'hsr' [ 79.833588][ T5639] Cannot create hsr debugfs directory [ 79.870412][ T5636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.975320][ T5636] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.010098][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.010223][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.023393][ T5638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.060010][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.060076][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.093069][ T5638] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.120502][ T5639] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.125395][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.127469][ T5639] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.134241][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.136293][ T5639] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.142370][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.166098][ T5639] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.177095][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.185283][ T158] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.185386][ T158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.235660][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.235816][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.271520][ T4954] Bluetooth: hci3: command tx timeout [ 80.271555][ T4954] Bluetooth: hci0: command tx timeout [ 80.271576][ T4954] Bluetooth: hci1: command tx timeout [ 80.271724][ T55] Bluetooth: hci2: command tx timeout [ 80.329753][ T5637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.389262][ T5637] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.418175][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.418280][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.456515][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.456647][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.590535][ T5639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.654207][ T5639] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.669011][ T158] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.669109][ T158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.696542][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.696646][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.014928][ T5636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.140201][ T5636] veth0_vlan: entered promiscuous mode [ 81.176736][ T5636] veth1_vlan: entered promiscuous mode [ 81.224168][ T5636] veth0_macvtap: entered promiscuous mode [ 81.249558][ T5636] veth1_macvtap: entered promiscuous mode [ 81.307625][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.350571][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.405197][ T5638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.556835][ T14] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.589710][ T5638] veth0_vlan: entered promiscuous mode [ 81.625038][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.625064][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.649399][ T5638] veth1_vlan: entered promiscuous mode [ 81.689591][ T5637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.732756][ T84] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.732778][ T84] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.762766][ T163] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.762813][ T163] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.762847][ T163] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.870255][ T5639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.913044][ T5638] veth0_macvtap: entered promiscuous mode [ 81.939890][ T5638] veth1_macvtap: entered promiscuous mode [ 81.967860][ T5636] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.003330][ T5637] veth0_vlan: entered promiscuous mode [ 82.065897][ T5637] veth1_vlan: entered promiscuous mode [ 82.072423][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.114196][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.158408][ T5639] veth0_vlan: entered promiscuous mode [ 82.165268][ T5795] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.165293][ T5795] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.174508][ T5795] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.174530][ T5795] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.223867][ T53] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.237178][ T5639] veth1_vlan: entered promiscuous mode [ 82.260216][ T5637] veth0_macvtap: entered promiscuous mode [ 82.281152][ T5637] veth1_macvtap: entered promiscuous mode [ 82.323297][ T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.323318][ T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.337114][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.355834][ T5648] Bluetooth: hci1: command tx timeout [ 82.355864][ T5648] Bluetooth: hci0: command tx timeout [ 82.355885][ T5648] Bluetooth: hci3: command tx timeout [ 82.356036][ T55] Bluetooth: hci2: command tx timeout [ 82.384308][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.406280][ T84] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.406300][ T84] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.413255][ T5639] veth0_macvtap: entered promiscuous mode [ 82.425571][ T5639] veth1_macvtap: entered promiscuous mode [ 82.470947][ T163] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.479735][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.529900][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.613184][ T3682] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.645123][ T3682] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.645145][ T3682] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.747489][ T5801] Oops: divide error: 0000 [#1] SMP KASAN PTI [ 82.748730][ T5639] ieee80211 phy9: Selected rate control algorithm 'minstrel_ht' [ 82.759135][ T163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.759153][ T163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.776317][ T5801] CPU: 0 UID: 0 PID: 5801 Comm: syz.0.5 Not tainted syzkaller #0 PREEMPT(full) [ 82.781951][ T163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.781968][ T163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.786457][ T5639] ieee80211 phy10: Selected rate control algorithm 'minstrel_ht' [ 82.808131][ T5801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 82.818196][ T5801] RIP: 0010:blk_stack_limits+0x1105/0x2d00 [ 82.824047][ T5801] Code: 68 48 4c 89 e8 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 7c 18 00 00 45 8b 65 00 c7 44 24 10 00 00 00 00 eb 5f 48 8b 44 24 48 31 d2 <41> f7 f5 44 01 e9 29 d1 89 c8 31 d2 41 f7 f5 48 8b 44 24 08 4c 8d [ 82.843673][ T5801] RSP: 0018:ffffc900049c74f8 EFLAGS: 00010246 [ 82.849754][ T5801] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 [ 82.857753][ T5801] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 82.865739][ T5801] RBP: ffffc900049c7850 R08: ffffc900049c77e0 R09: 1ffffffff385ca34 [ 82.872957][ T163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.872978][ T163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.888920][ T5801] R10: dffffc0000000000 R11: ffffffff88be1410 R12: 00000000ffffffff [ 82.896908][ T5801] R13: 0000000000000000 R14: 1ffff92000938f0a R15: ffffc900049c7854 [ 82.904894][ T5801] FS: 00007f620c2516c0(0000) GS:ffff888123376000(0000) knlGS:0000000000000000 [ 82.913956][ T5801] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 82.920539][ T5801] CR2: 0000001b2dd21000 CR3: 000000007a39c000 CR4: 00000000003526f0 [ 82.928506][ T5801] Call Trace: [ 82.931806][ T5801] [ 82.934747][ T5801] dm_calculate_queue_limits+0x70c/0x1510 [ 82.940485][ T5801] ? __pfx_dm_calculate_queue_limits+0x10/0x10 [ 82.946656][ T5801] ? kmem_cache_alloc_noprof+0x151/0x600 [ 82.952318][ T5801] ? kasan_save_free_info+0x40/0x50 [ 82.957535][ T5801] ? __kasan_mempool_poison_object+0x16e/0x1d0 [ 82.963704][ T5801] ? mempool_init_node+0x474/0x510 [ 82.968842][ T5801] ? __pfx_bioset_init+0x10/0x10 [ 82.973793][ T5801] dm_setup_md_queue+0x199/0x4f0 [ 82.978731][ T5801] ? dm_table_complete+0x1d84/0x22d0 [ 82.984015][ T5801] ? __pfx_dm_setup_md_queue+0x10/0x10 [ 82.989513][ T5801] ? __pfx_dm_table_complete+0x10/0x10 [ 82.994970][ T5801] table_load+0x4fd/0x8a0 [ 82.999297][ T5801] ? __pfx_table_load+0x10/0x10 [ 83.004140][ T5801] ? __might_fault+0xaf/0x130 [ 83.008819][ T5801] dm_ctl_ioctl+0x9ec/0xe10 [ 83.013324][ T5801] ? __pfx_table_load+0x10/0x10 [ 83.018162][ T5801] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 83.023241][ T5801] ? __fget_files+0x2a/0x420 [ 83.027836][ T5801] ? bpf_lsm_file_ioctl+0x9/0x20 [ 83.032774][ T5801] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 83.037802][ T5801] __se_sys_ioctl+0xfc/0x170 [ 83.042393][ T5801] do_syscall_64+0x166/0x520 [ 83.046981][ T5801] ? trace_irq_disable+0x3b/0x140 [ 83.052004][ T5801] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.058066][ T5801] ? clear_bhb_loop+0x70/0xc0 [ 83.062731][ T5801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.068614][ T5801] RIP: 0033:0x7f620b39f559 [ 83.073040][ T5801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.092656][ T5801] RSP: 002b:00007f620c251028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 83.101078][ T5801] RAX: ffffffffffffffda RBX: 00007f620b625fa0 RCX: 00007f620b39f559 [ 83.109047][ T5801] RDX: 00002000000006c0 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 83.117012][ T5801] RBP: 00007f620b436b20 R08: 0000000000000000 R09: 0000000000000000 [ 83.124976][ T5801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.132936][ T5801] R13: 00007f620b626038 R14: 00007f620b625fa0 R15: 00007ffd3dc52f98 [ 83.140919][ T5801] [ 83.143940][ T5801] Modules linked in: [ 83.150230][ T5801] ---[ end trace 0000000000000000 ]--- [ 83.150389][ T84] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.152092][ T84] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.153590][ T84] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.153873][ T84] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.154455][ T84] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.154859][ T84] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.157347][ T84] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.157870][ T84] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.158799][ T84] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.244144][ T5801] RIP: 0010:blk_stack_limits+0x1105/0x2d00 [ 83.244185][ T5801] Code: 68 48 4c 89 e8 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 7c 18 00 00 45 8b 65 00 c7 44 24 10 00 00 00 00 eb 5f 48 8b 44 24 48 31 d2 <41> f7 f5 44 01 e9 29 d1 89 c8 31 d2 41 f7 f5 48 8b 44 24 08 4c 8d [ 83.244199][ T5801] RSP: 0018:ffffc900049c74f8 EFLAGS: 00010246 [ 83.244217][ T5801] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 [ 83.244229][ T5801] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 83.244241][ T5801] RBP: ffffc900049c7850 R08: ffffc900049c77e0 R09: 1ffffffff385ca34 [ 83.244255][ T5801] R10: dffffc0000000000 R11: ffffffff88be1410 R12: 00000000ffffffff [ 83.244268][ T5801] R13: 0000000000000000 R14: 1ffff92000938f0a R15: ffffc900049c7854 [ 83.244282][ T5801] FS: 00007f620c2516c0(0000) GS:ffff888123376000(0000) knlGS:0000000000000000 [ 83.244298][ T5801] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 83.244311][ T5801] CR2: 0000001b2dd21000 CR3: 000000007a39c000 CR4: 00000000003526f0 [ 83.244330][ T5801] Kernel panic - not syncing: Fatal exception [ 83.345357][ T5801] Kernel Offset: disabled [ 83.349688][ T5801] Rebooting in 86400 seconds..