last executing test programs: 349.088404ms ago: executing program 0 (id=1): r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) syz_open_dev$sndctrl(0x0, 0x3, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r1, 0x40480923, &(0x7f0000000140)={0x0, 0x5a, 0x0, 0x0, 0x1, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f00000001c0)={0x0, {0x1, 0x0}, 0x0, 0x2}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000200)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r1, 0x400c0930, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1e, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x2, 0x300) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) pwrite64(r1, &(0x7f0000000300)="aa", 0x1, 0x1000) ioctl$STOP_ARRAY(r1, 0x932, 0x0) 38.497376ms ago: executing program 2 (id=3): r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) syz_open_dev$sndctrl(0x0, 0x3, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r1, 0x40480923, &(0x7f0000000140)={0x0, 0x5a, 0x0, 0x0, 0x1, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f00000001c0)={0x0, {0x1, 0x0}, 0x0, 0x2}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000200)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r1, 0x400c0930, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1e, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x2, 0x300) syz_mount_image$hfs(&(0x7f0000001540), &(0x7f0000001580)='./file0\x00', 0x3, &(0x7f00000015c0)={[{@creator={'creator', 0x3d, "c5690fed"}}, {}, {@gid}, {@creator={'creator', 0x3d, "8083097f"}}, {@type={'type', 0x3d, "ab002e00"}}]}, 0x41, 0x26a, &(0x7f0000001640)="$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") ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) pwrite64(r1, &(0x7f0000000300)="aa", 0x1, 0x1000) 0s ago: executing program 1 (id=2): r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) syz_open_dev$sndctrl(0x0, 0x3, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r1, 0x40480923, &(0x7f0000000140)={0x0, 0x5a, 0x0, 0x0, 0x1, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f00000001c0)={0x0, {0x1, 0x0}, 0x0, 0x2}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000200)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r1, 0x400c0930, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1e, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x2, 0x300) ioctl$STOP_ARRAY(r1, 0x932, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.124' (ED25519) to the list of known hosts. [ 67.055210][ T5771] cgroup: Unknown subsys name 'net' [ 67.184791][ T5771] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.556461][ T5771] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.227552][ T5794] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.235478][ T5794] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.245202][ T5794] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.253019][ T5794] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.261082][ T5794] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.261471][ T5795] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.268485][ T5794] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.284314][ T5794] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.292036][ T5794] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 70.299847][ T5794] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.301540][ T5796] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.309123][ T5794] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.314776][ T5796] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.323787][ T5794] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 70.328770][ T5798] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.336051][ T5794] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.349629][ T5794] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.357461][ T5794] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.359315][ T5797] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.366770][ T5100] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.379317][ T5100] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 70.386639][ T5100] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.395796][ T5100] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 70.405438][ T5797] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.438101][ T5786] (null): rxe_set_mtu: Set mtu to 1024 [ 70.453999][ T5784] (null): rxe_set_mtu: Set mtu to 1024 [ 70.459722][ T5786] rxe_eth0 speed is unknown, defaulting to 1000 [ 70.469097][ T5784] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 70.519876][ T5783] (null): rxe_set_mtu: Set mtu to 1024 [ 70.525539][ T5783] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 70.527977][ T5786] rxe_eth0 speed is unknown, defaulting to 1000 [ 70.573150][ T5786] rxe_eth0 speed is unknown, defaulting to 1000 [ 70.589001][ T5785] (null): rxe_set_mtu: Set mtu to 1024 [ 70.594740][ T5785] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 70.847212][ T5786] infiniband rxe0: set active [ 70.861941][ T5789] rxe_eth0 speed is unknown, defaulting to 1000 [ 70.881410][ T5786] infiniband rxe0: added rxe_eth0 [ 71.014941][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 71.026307][ T5786] RDS/IB: rxe0: added [ 71.038557][ T5786] smc: adding ib device rxe0 with port count 1 [ 71.044905][ T5786] smc: ib device rxe0 port 1 has pnetid [ 71.063457][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 71.094299][ T5786] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.141366][ T5789] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.209067][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 71.379796][ T5786] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.386572][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.394610][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.402038][ T5783] bridge_slave_0: entered allmulticast mode [ 71.409469][ T5783] bridge_slave_0: entered promiscuous mode [ 71.436802][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.444200][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.455003][ T5784] bridge_slave_0: entered allmulticast mode [ 71.469009][ T5784] bridge_slave_0: entered promiscuous mode [ 71.478820][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.481486][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.485289][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.492407][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.505826][ T5784] bridge_slave_1: entered allmulticast mode [ 71.513171][ T5784] bridge_slave_1: entered promiscuous mode [ 71.520999][ T5449] infiniband rxe0: set active [ 71.526107][ T5789] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.532602][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.543905][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.551486][ T5783] bridge_slave_1: entered allmulticast mode [ 71.569303][ T5783] bridge_slave_1: entered promiscuous mode [ 71.657465][ T5786] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.691033][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.701072][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.709555][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.716861][ T5785] bridge_slave_0: entered allmulticast mode [ 71.724472][ T5785] bridge_slave_0: entered promiscuous mode [ 71.734968][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.748761][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.763674][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.773588][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.788272][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.795417][ T5785] bridge_slave_1: entered allmulticast mode [ 71.803203][ T5785] bridge_slave_1: entered promiscuous mode [ 71.849308][ T5789] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.859744][ T5784] team0: Port device team_slave_0 added [ 71.898452][ T5784] team0: Port device team_slave_1 added [ 71.928768][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.950210][ T5783] team0: Port device team_slave_0 added [ 71.956154][ T5786] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.969720][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.994502][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.001558][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.028232][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.041917][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.049243][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.075492][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.089599][ T5783] team0: Port device team_slave_1 added [ 72.131252][ T5785] team0: Port device team_slave_0 added [ 72.147331][ T5785] team0: Port device team_slave_1 added [ 72.175975][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.183358][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.209630][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.232069][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.239200][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.265358][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.276993][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.284446][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.310637][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.352706][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.359773][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.385802][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.418899][ T52] Bluetooth: hci1: command tx timeout [ 72.421586][ T5797] Bluetooth: hci0: command tx timeout [ 72.446423][ T5784] hsr_slave_0: entered promiscuous mode [ 72.452896][ T5784] hsr_slave_1: entered promiscuous mode [ 72.486728][ T5783] hsr_slave_0: entered promiscuous mode [ 72.497187][ T5783] hsr_slave_1: entered promiscuous mode [ 72.498253][ T5797] Bluetooth: hci3: command tx timeout [ 72.508608][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.508668][ T52] Bluetooth: hci2: command tx timeout [ 72.516408][ T5783] Cannot create hsr debugfs directory [ 72.579066][ T5785] hsr_slave_0: entered promiscuous mode [ 72.585875][ T5785] hsr_slave_1: entered promiscuous mode [ 72.593083][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.600727][ T5785] Cannot create hsr debugfs directory [ 72.933742][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 72.979332][ T5784] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.991552][ T5784] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.001135][ T5784] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.021474][ T5784] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.088467][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.095600][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.103216][ T5786] bridge_slave_0: entered allmulticast mode [ 73.110031][ T5786] bridge_slave_0: entered promiscuous mode [ 73.117810][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.125041][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.132425][ T5786] bridge_slave_1: entered allmulticast mode [ 73.140056][ T5786] bridge_slave_1: entered promiscuous mode [ 73.200572][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.210175][ T5783] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.220122][ T5783] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.232371][ T5783] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.242220][ T5783] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.253940][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.301334][ T5786] team0: Port device team_slave_0 added [ 73.330087][ T5786] team0: Port device team_slave_1 added [ 73.375623][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.382829][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.409368][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.431238][ T5785] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.444763][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.451995][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.478746][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.495935][ T5785] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.505324][ T5785] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.519568][ T5785] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.572861][ T5786] hsr_slave_0: entered promiscuous mode [ 73.579668][ T5786] hsr_slave_1: entered promiscuous mode [ 73.586700][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.595648][ T5786] Cannot create hsr debugfs directory [ 73.783554][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.804476][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.855993][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.887491][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.903160][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.910369][ T5786] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.920378][ T5786] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.932550][ T5786] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.945777][ T2939] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.953050][ T2939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.965927][ T5786] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.982108][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.989267][ T4710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.019457][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.026587][ T4710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.051186][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.069404][ T2939] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.076534][ T2939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.094042][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.101184][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.126858][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.134034][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.230453][ T5783] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.345232][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.396329][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.450180][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.457309][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.487473][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.494671][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.503164][ T5797] Bluetooth: hci1: command tx timeout [ 74.510117][ T5797] Bluetooth: hci0: command tx timeout [ 74.578580][ T5797] Bluetooth: hci3: command tx timeout [ 74.584014][ T5797] Bluetooth: hci2: command tx timeout [ 74.676050][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.734283][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.757309][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.854270][ T5785] veth0_vlan: entered promiscuous mode [ 74.872366][ T5784] veth0_vlan: entered promiscuous mode [ 74.897238][ T5785] veth1_vlan: entered promiscuous mode [ 74.932102][ T5784] veth1_vlan: entered promiscuous mode [ 74.987308][ T5783] veth0_vlan: entered promiscuous mode [ 75.008870][ T5783] veth1_vlan: entered promiscuous mode [ 75.056412][ T5784] veth0_macvtap: entered promiscuous mode [ 75.069398][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.092336][ T5784] veth1_macvtap: entered promiscuous mode [ 75.101667][ T5785] veth0_macvtap: entered promiscuous mode [ 75.115765][ T5785] veth1_macvtap: entered promiscuous mode [ 75.124437][ T5783] veth0_macvtap: entered promiscuous mode [ 75.137145][ T5783] veth1_macvtap: entered promiscuous mode [ 75.164507][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.179578][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.207226][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.225429][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.239683][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.251401][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.262774][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.275822][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.295495][ T5785] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.305464][ T5785] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.315263][ T5785] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.324181][ T5785] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.337358][ T5784] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.347417][ T5784] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.356241][ T5784] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.365246][ T5784] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.391000][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.402227][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.412313][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.422879][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.433807][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.462332][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.472927][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.483544][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.495001][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.506620][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.515923][ T5786] veth0_vlan: entered promiscuous mode [ 75.541913][ T5783] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.551573][ T5783] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.560878][ T5783] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.570094][ T5783] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.623420][ T5786] veth1_vlan: entered promiscuous mode [ 75.752636][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.754111][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.765538][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.789314][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.798489][ T5786] veth0_macvtap: entered promiscuous mode [ 75.814339][ T5786] veth1_macvtap: entered promiscuous mode [ 75.852775][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.863567][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.886041][ T2939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.898203][ T2939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.924732][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.947134][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.959302][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.969801][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.979721][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.995338][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.009880][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.037191][ T5785] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.073736][ T2939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.090562][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.092381][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.115286][ T2939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.122682][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.141478][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.152169][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.163850][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.173855][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.186421][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.202397][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.260945][ T5786] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.276779][ T5786] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.286185][ T5786] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.296352][ T5786] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.296986][ T5868] md/raid1:md0: active with 1 out of 2 mirrors [ 76.324444][ T5868] md0: detected capacity change from 0 to 4096 [ 76.348465][ T5872] md: recovery of RAID array md0 [ 76.447055][ T5872] md: md0: recovery done. [ 76.579198][ T5797] Bluetooth: hci0: command tx timeout [ 76.584772][ T5797] Bluetooth: hci1: command tx timeout [ 76.592416][ T5868] md0: detected capacity change from 4096 to 0 [ 76.601575][ T4710] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.610589][ T4710] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.626288][ T5868] md: md0 stopped. [ 76.658313][ T5797] Bluetooth: hci2: command tx timeout [ 76.663821][ T52] Bluetooth: hci3: command tx timeout [ 76.690205][ T5877] ------------[ cut here ]------------ [ 76.690870][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.695814][ T5877] kobject: '(null)' (ffff8880250f40f0): is not initialized, yet kobject_get() is being called. [ 76.696528][ T5877] WARNING: CPU: 1 PID: 5877 at lib/kobject.c:642 kobject_add_internal+0x115/0xc90 [ 76.725123][ T5877] Modules linked in: [ 76.729377][ T5877] CPU: 1 PID: 5877 Comm: syz.1.2 Not tainted syzkaller #0 [ 76.736754][ T5877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 76.742068][ T5879] syz.2.3[5879]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 76.748373][ T5877] RIP: 0010:kobject_add_internal+0x115/0xc90 [ 76.762236][ T5877] Code: b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 e7 e8 5e 4e 5d f7 49 8b 34 24 48 c7 c7 00 4f 0b 8c 4c 89 e2 e8 4b ea cd f6 <0f> 0b e9 e5 00 00 00 e8 8f 45 04 f7 b8 fe ff ff ff e9 f0 06 00 00 [ 76.782462][ T5877] RSP: 0018:ffffc90004c278c8 EFLAGS: 00010246 [ 76.786246][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.788866][ T5877] RAX: 010bb07c1f81d500 RBX: ffff88807b8aa878 RCX: 0000000000080000 [ 76.804351][ T5877] RDX: ffffc9000e1d7000 RSI: 0000000000002e50 RDI: 0000000000002e51 [ 76.813028][ T5877] RBP: 0000000000000000 R08: ffff8880b8d28c53 R09: 1ffff110171a518a [ 76.822153][ T5877] R10: dffffc0000000000 R11: ffffed10171a518b R12: ffff8880250f40f0 [ 76.830197][ T5877] R13: dffffc0000000000 R14: ffff8880250f412c R15: dffffc0000000000 [ 76.838347][ T5877] FS: 00007f310364e6c0(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 76.847304][ T5877] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.853985][ T5877] CR2: 0000001b2e620ff8 CR3: 000000005cde8000 CR4: 00000000003506e0 [ 76.862087][ T5877] Call Trace: [ 76.865391][ T5877] [ 76.868503][ T5877] ? kfree+0x31/0x1a0 [ 76.872526][ T5877] kobject_add+0x164/0x240 [ 76.876970][ T5877] ? kobject_init+0x1d0/0x1d0 [ 76.881737][ T5877] ? mddev_create_serial_pool+0x1f3/0x4d0 [ 76.887487][ T5877] bind_rdev_to_array+0xb51/0x1270 [ 76.892747][ T5877] ? bind_rdev_to_array+0x5fb/0x1270 [ 76.898690][ T5877] ? md_import_device+0x7b0/0x7b0 [ 76.903760][ T5877] md_add_new_disk+0xe31/0x17b0 [ 76.909461][ T5877] md_ioctl+0x2152/0x24e0 [ 76.913836][ T5877] ? blkdev_common_ioctl+0x10ee/0x2580 [ 76.918777][ T5876] md/raid1:md2: active with 1 out of 2 mirrors [ 76.919570][ T5877] ? md_release+0x1e0/0x1e0 [ 76.930017][ T5877] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 76.935132][ T5876] md2: detected capacity change from 0 to 4096 [ 76.935659][ T5877] ? blkdev_bszset+0x1f0/0x1f0 [ 76.935684][ T5877] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 76.945939][ T5881] md: recovery of RAID array md2 [ 76.946648][ T5877] ? md_release+0x1e0/0x1e0 [ 76.961698][ T5877] blkdev_ioctl+0x5b2/0x730 [ 76.966249][ T5877] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 76.971817][ T5877] ? bpf_lsm_file_ioctl+0x9/0x10 [ 76.976785][ T5877] ? security_file_ioctl+0x80/0xa0 [ 76.982120][ T5877] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 76.987607][ T5877] __se_sys_ioctl+0xfd/0x170 [ 76.992420][ T5877] do_syscall_64+0x55/0xb0 [ 76.996870][ T5877] ? clear_bhb_loop+0x40/0x90 [ 77.001644][ T5877] ? clear_bhb_loop+0x40/0x90 [ 77.006357][ T5877] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 77.013036][ T5877] RIP: 0033:0x7f310279fb19 [ 77.017500][ T5877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.037348][ T5877] RSP: 002b:00007f310364e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 77.045843][ T5877] RAX: ffffffffffffffda RBX: 00007f3102a26090 RCX: 00007f310279fb19 [ 77.049714][ T5879] loop2: detected capacity change from 0 to 64 [ 77.053903][ T5877] RDX: 00002000000001c0 RSI: 0000000040140921 RDI: 0000000000000004 [ 77.068765][ T5877] RBP: 00007f3102837b70 R08: 0000000000000000 R09: 0000000000000000 [ 77.074388][ T5879] hfs: type requires a 4 character value [ 77.076770][ T5877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.076787][ T5877] R13: 00007f3102a26128 R14: 00007f3102a26090 R15: 00007ffc708907b8 [ 77.076815][ T5877] [ 77.076824][ T5877] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 77.076834][ T5877] CPU: 1 PID: 5877 Comm: syz.1.2 Not tainted syzkaller #0 [ 77.076849][ T5877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 77.076858][ T5877] Call Trace: [ 77.076865][ T5877] [ 77.076871][ T5877] dump_stack_lvl+0x18c/0x250 [ 77.076901][ T5877] ? show_regs_print_info+0x20/0x20 [ 77.076924][ T5877] ? load_image+0x420/0x420 [ 77.076955][ T5877] panic+0x2ca/0x720 [ 77.076975][ T5877] ? bpf_jit_dump+0xd0/0xd0 [ 77.077008][ T5877] __warn+0x2e0/0x470 [ 77.077024][ T5877] ? kobject_add_internal+0x115/0xc90 [ 77.077044][ T5877] ? kobject_add_internal+0x115/0xc90 [ 77.077061][ T5877] report_bug+0x2be/0x4f0 [ 77.077084][ T5877] ? kobject_add_internal+0x115/0xc90 [ 77.077102][ T5877] ? kobject_add_internal+0x115/0xc90 [ 77.077119][ T5877] ? kobject_add_internal+0x117/0xc90 [ 77.077137][ T5877] handle_bug+0xcf/0x120 [ 77.077159][ T5877] exc_invalid_op+0x1a/0x50 [ 77.077180][ T5877] asm_exc_invalid_op+0x1a/0x20 [ 77.077202][ T5877] RIP: 0010:kobject_add_internal+0x115/0xc90 [ 77.077222][ T5877] Code: b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 e7 e8 5e 4e 5d f7 49 8b 34 24 48 c7 c7 00 4f 0b 8c 4c 89 e2 e8 4b ea cd f6 <0f> 0b e9 e5 00 00 00 e8 8f 45 04 f7 b8 fe ff ff ff e9 f0 06 00 00 [ 77.077242][ T5877] RSP: 0018:ffffc90004c278c8 EFLAGS: 00010246 [ 77.077258][ T5877] RAX: 010bb07c1f81d500 RBX: ffff88807b8aa878 RCX: 0000000000080000 [ 77.077271][ T5877] RDX: ffffc9000e1d7000 RSI: 0000000000002e50 RDI: 0000000000002e51 [ 77.077282][ T5877] RBP: 0000000000000000 R08: ffff8880b8d28c53 R09: 1ffff110171a518a [ 77.077293][ T5877] R10: dffffc0000000000 R11: ffffed10171a518b R12: ffff8880250f40f0 [ 77.077306][ T5877] R13: dffffc0000000000 R14: ffff8880250f412c R15: dffffc0000000000 [ 77.077333][ T5877] ? kobject_add_internal+0x115/0xc90 [ 77.077350][ T5877] ? kfree+0x31/0x1a0 [ 77.077377][ T5877] kobject_add+0x164/0x240 [ 77.077399][ T5877] ? kobject_init+0x1d0/0x1d0 [ 77.077422][ T5877] ? mddev_create_serial_pool+0x1f3/0x4d0 [ 77.077448][ T5877] bind_rdev_to_array+0xb51/0x1270 [ 77.077474][ T5877] ? bind_rdev_to_array+0x5fb/0x1270 [ 77.077499][ T5877] ? md_import_device+0x7b0/0x7b0 [ 77.077533][ T5877] md_add_new_disk+0xe31/0x17b0 [ 77.077562][ T5877] md_ioctl+0x2152/0x24e0 [ 77.077587][ T5877] ? blkdev_common_ioctl+0x10ee/0x2580 [ 77.077609][ T5877] ? md_release+0x1e0/0x1e0 [ 77.077629][ T5877] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 77.077651][ T5877] ? blkdev_bszset+0x1f0/0x1f0 [ 77.077669][ T5877] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 77.077720][ T5877] ? md_release+0x1e0/0x1e0 [ 77.077744][ T5877] blkdev_ioctl+0x5b2/0x730 [ 77.077764][ T5877] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 77.077787][ T5877] ? bpf_lsm_file_ioctl+0x9/0x10 [ 77.077805][ T5877] ? security_file_ioctl+0x80/0xa0 [ 77.077825][ T5877] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 77.077847][ T5877] __se_sys_ioctl+0xfd/0x170 [ 77.077872][ T5877] do_syscall_64+0x55/0xb0 [ 77.077892][ T5877] ? clear_bhb_loop+0x40/0x90 [ 77.077913][ T5877] ? clear_bhb_loop+0x40/0x90 [ 77.077937][ T5877] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 77.077958][ T5877] RIP: 0033:0x7f310279fb19 [ 77.077973][ T5877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.077986][ T5877] RSP: 002b:00007f310364e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 77.078003][ T5877] RAX: ffffffffffffffda RBX: 00007f3102a26090 RCX: 00007f310279fb19 [ 77.078016][ T5877] RDX: 00002000000001c0 RSI: 0000000040140921 RDI: 0000000000000004 [ 77.078027][ T5877] RBP: 00007f3102837b70 R08: 0000000000000000 R09: 0000000000000000 [ 77.078038][ T5877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.078053][ T5877] R13: 00007f3102a26128 R14: 00007f3102a26090 R15: 00007ffc708907b8 [ 77.078079][ T5877] [ 77.082662][ T5877] Kernel Offset: disabled