last executing test programs: 499.636672ms ago: executing program 1 (id=2): openat$auto_null_fops_mem(0xffffffffffffff9c, 0x0, 0x80000, 0x0) mmap$auto(0x0, 0x3, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x82000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0x1000df, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x1010001, 0x100000003) 156.671879ms ago: executing program 0 (id=1): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x4000000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r1 = socket(0x1e, 0x6, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804', 0x100000a3d9) sendmsg$auto_HSR_C_GET_NODE_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@HSR_A_IF2_AGE={0x8, 0x4, 0xb2c7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) mmap$auto(0x0, 0x2020009, 0x8000000007, 0x11, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/bus/pci/drivers/amd5536udc-pci/remove_id\x00', 0x18b941, 0x0) syz_genetlink_get_family_id$auto_ila(&(0x7f00000000c0), r1) write$auto(r4, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\xd6\x84\xef\xf5\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xed\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\x05\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd?\x13\xe2\xad\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH', 0x8) getdents$auto(r3, 0x0, 0xfff) msync$auto(0x7f, 0x6, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop15/queue/discard_granularity\x00', 0x8000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r6 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) write$auto(r6, &(0x7f0000000000)='-\x00', 0x2fb) mmap$auto(0x0, 0x10, 0x4000000000df, 0xeb1, 0x401, 0x7) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfbfff000) socket(0x23, 0x800, 0x8) mmap$auto(0x200000000, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8003) io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x405, 0x8, 0x10001, 0x6fb3, 0x8a, 0xfffffff8, 0xffffffffffffffff, [0x100, 0x9, 0x80], {0x2, 0x80006, 0x3034, 0xf, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b7}, {0x4000, 0xff, 0x9, 0x0, 0x0, 0xb89, 0xd5, 0x837, 0x8}}) 0s ago: executing program 3 (id=4): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/config/target/dbroot\x00', 0x2001, 0x0) msgctl$auto_IPC_INFO(0xfffffff7, 0x3, &(0x7f0000000600)={{0x81, 0x0, 0x0, 0x8215, 0xae5, 0x3ff, 0x16}, 0x0, &(0x7f00000005c0)=0xd9, 0x2, 0x3, 0x9, 0x7, 0x101, 0x3, 0xe, 0x8, @raw=0x2, @raw=0x2}) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(0xffffffffffffffff, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000", @ANYRES16=r1, @ANYBLOB="010028bd7000ffdadf2506e18f3a1ceafc1919ca613552f90f87000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r2 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) r3 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000180), 0xffffffffffffffff) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r4 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0xa, 0x3, 0xb, 0x5, 0x1ffde, 0x3, 0x6, 0x2, 0x6c8, 0x5, 0x20000000003, 0x5, 0xb0, 0x7, 0x10000002, 0x3, 0x5, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x1fe, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$auto_BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, r3, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe462}, @BATADV_ATTR_FLAG_BEST={0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_BANDWIDTH_UP={0x8, 0x1b, 0xffffffa7}, @BATADV_ATTR_DAT_CACHE_VID={0x6, 0x25, 0x9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x101}, @BATADV_ATTR_TT_VID={0x6, 0x14, 0x40}]}, 0x50}}, 0x4000000) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0xc20f0000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x8) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="3b3d2abd7000fcdbdf25020000000a000900bbbbbbbbbbbb0000eaaeb87306be9a3cd848b9595c95826c1f515d1e64b2ee9478f79440cf06d3189ceff6367d95eabec9787847055f46ff046a8b0edbcd2c635c16de58400cdcdc30040c809b316f5a9fc08e2af2d49f254688d3c1ef1a3700eedb6dccb41126b36a65d033a4507c3a3a0130e2f351bafd7c94003f0ad2a1a6db5b2678976ae58cd093a7deb08d5f349ac57336717c0247e8"], 0x20}}, 0x80) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000540)='/proc/irq/10/effective_affinity_list\x00', 0x11000, 0x0) writev$auto(r0, &(0x7f0000000200)={0x0, 0x7ffffffff000}, 0x7) write$auto(r0, &(0x7f0000000000)='/sys/kernel/config/target/dbroot\x00', 0x63) futex$auto(&(0x7f0000000040)=0x42af, 0x9, 0x9, &(0x7f0000000080)={0x0, 0xfffffffffffffffe}, &(0x7f00000000c0)=0xc4, 0x7) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 62.877894][ T5498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.903210][ T5498] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.183' (ED25519) to the list of known hosts. syzkaller login: [ 84.124353][ T5820] cgroup: Unknown subsys name 'net' [ 84.317256][ T5820] cgroup: Unknown subsys name 'cpuset' [ 84.326388][ T5820] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.820151][ T5820] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.846978][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.864002][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.868438][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.871658][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.885444][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.893529][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.901335][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.922611][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.928879][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.937704][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.938304][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.953229][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.954195][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.967023][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.969028][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.975795][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.988696][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.996543][ T5153] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.997647][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.018707][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.560869][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 88.659755][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 88.679566][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 88.707770][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 88.816591][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.825901][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.834426][ T5832] bridge_slave_0: entered allmulticast mode [ 88.841518][ T5832] bridge_slave_0: entered promiscuous mode [ 88.871344][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.878637][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.886323][ T5832] bridge_slave_1: entered allmulticast mode [ 88.893370][ T5832] bridge_slave_1: entered promiscuous mode [ 88.999255][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.006861][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.014785][ T5829] bridge_slave_0: entered allmulticast mode [ 89.021741][ T5829] bridge_slave_0: entered promiscuous mode [ 89.029200][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.036574][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.044312][ T5830] bridge_slave_0: entered allmulticast mode [ 89.051280][ T5830] bridge_slave_0: entered promiscuous mode [ 89.059445][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.066766][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.074037][ T5830] bridge_slave_1: entered allmulticast mode [ 89.081014][ T5830] bridge_slave_1: entered promiscuous mode [ 89.090680][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.103835][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.125453][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.133607][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.140748][ T5829] bridge_slave_1: entered allmulticast mode [ 89.148806][ T5829] bridge_slave_1: entered promiscuous mode [ 89.187144][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.194327][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.201676][ T5831] bridge_slave_0: entered allmulticast mode [ 89.209657][ T5831] bridge_slave_0: entered promiscuous mode [ 89.256347][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.265200][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.272481][ T5831] bridge_slave_1: entered allmulticast mode [ 89.279479][ T5831] bridge_slave_1: entered promiscuous mode [ 89.290018][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.301718][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.314896][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.327573][ T5832] team0: Port device team_slave_0 added [ 89.359342][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.370672][ T5832] team0: Port device team_slave_1 added [ 89.428795][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.441006][ T5829] team0: Port device team_slave_0 added [ 89.450488][ T5829] team0: Port device team_slave_1 added [ 89.480487][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.504523][ T5830] team0: Port device team_slave_0 added [ 89.511430][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.518593][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.545815][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.590437][ T5830] team0: Port device team_slave_1 added [ 89.598487][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.605602][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.631689][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.660824][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.668050][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.694794][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.738990][ T5831] team0: Port device team_slave_0 added [ 89.746063][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.753248][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.779535][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.791557][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.798546][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.824525][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.837010][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.844090][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.870072][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.883250][ T5831] team0: Port device team_slave_1 added [ 89.950705][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.958400][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.984850][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.997126][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.005221][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.031469][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.048586][ T5832] hsr_slave_0: entered promiscuous mode [ 90.055049][ T5832] hsr_slave_1: entered promiscuous mode [ 90.082918][ T5835] Bluetooth: hci0: command tx timeout [ 90.088740][ T5835] Bluetooth: hci3: command tx timeout [ 90.094523][ T5840] Bluetooth: hci2: command tx timeout [ 90.094938][ T5841] Bluetooth: hci1: command tx timeout [ 90.179450][ T5829] hsr_slave_0: entered promiscuous mode [ 90.187088][ T5829] hsr_slave_1: entered promiscuous mode [ 90.193291][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.200982][ T5829] Cannot create hsr debugfs directory [ 90.211764][ T5830] hsr_slave_0: entered promiscuous mode [ 90.218264][ T5830] hsr_slave_1: entered promiscuous mode [ 90.225114][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.232942][ T5830] Cannot create hsr debugfs directory [ 90.274700][ T5831] hsr_slave_0: entered promiscuous mode [ 90.281411][ T5831] hsr_slave_1: entered promiscuous mode [ 90.288414][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.296845][ T5831] Cannot create hsr debugfs directory [ 90.704714][ T5832] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.730329][ T5832] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.741132][ T5832] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.759279][ T5832] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.808767][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.824846][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.836870][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.860314][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.919794][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.951538][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.979440][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.989625][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.072581][ T5829] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.086649][ T5829] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.111285][ T5829] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.121813][ T5829] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.231129][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.284172][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.298192][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.327447][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.334898][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.367928][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.375207][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.391390][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.445017][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.456485][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.463635][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.480556][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.503659][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.510887][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.548784][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.564461][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.591887][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.599106][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.612360][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.619522][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.662013][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.669235][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.723876][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.731044][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.164850][ T5841] Bluetooth: hci1: command tx timeout [ 92.166136][ T5846] Bluetooth: hci3: command tx timeout [ 92.170298][ T5841] Bluetooth: hci2: command tx timeout [ 92.176099][ T5835] Bluetooth: hci0: command tx timeout [ 92.270277][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.359525][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.379155][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.403583][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.466818][ T5831] veth0_vlan: entered promiscuous mode [ 92.501827][ T5831] veth1_vlan: entered promiscuous mode [ 92.593454][ T5830] veth0_vlan: entered promiscuous mode [ 92.606131][ T5832] veth0_vlan: entered promiscuous mode [ 92.627683][ T5829] veth0_vlan: entered promiscuous mode [ 92.675057][ T5830] veth1_vlan: entered promiscuous mode [ 92.687861][ T5832] veth1_vlan: entered promiscuous mode [ 92.719465][ T5831] veth0_macvtap: entered promiscuous mode [ 92.737521][ T5829] veth1_vlan: entered promiscuous mode [ 92.773965][ T5831] veth1_macvtap: entered promiscuous mode [ 92.848479][ T5830] veth0_macvtap: entered promiscuous mode [ 92.858224][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.891090][ T5832] veth0_macvtap: entered promiscuous mode [ 92.901694][ T5830] veth1_macvtap: entered promiscuous mode [ 92.937786][ T5832] veth1_macvtap: entered promiscuous mode [ 92.953907][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.973292][ T5829] veth0_macvtap: entered promiscuous mode [ 92.991324][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.000996][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.010137][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.019056][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.038761][ T5829] veth1_macvtap: entered promiscuous mode [ 93.050146][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.075605][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.107757][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.125019][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.139048][ T5832] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.149431][ T5832] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.159340][ T5832] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.168852][ T5832] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.210575][ T5830] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.219837][ T5830] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.228887][ T5830] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.237657][ T5830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.258742][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.328059][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.332835][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.349046][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.401756][ T2988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.414913][ T2988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.425776][ T5829] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.434812][ T5829] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.445190][ T5829] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.455532][ T5829] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.524566][ T2988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.543334][ T2988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.547554][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.664186][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.688826][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.729664][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.760694][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.821579][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.864772][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.920955][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.952206][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.097929][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.131495][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.246668][ T5835] Bluetooth: hci2: command tx timeout [ 94.254873][ T5846] Bluetooth: hci1: command tx timeout [ 94.260355][ T5846] Bluetooth: hci0: command tx timeout [ 94.267151][ T5840] Bluetooth: hci3: command tx timeout [ 94.286014][ T5928] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4'. [ 94.364180][ T5932] [ 94.366584][ T5932] ============================================ [ 94.372750][ T5932] WARNING: possible recursive locking detected [ 94.379189][ T5932] 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 Not tainted [ 94.386320][ T5932] -------------------------------------------- [ 94.392751][ T5932] syz.3.4/5932 is trying to acquire lock: [ 94.398489][ T5932] ffff888027becb78 (&p->frag_sem){.+.+}-{4:4}, at: __configfs_open_file+0xe8/0x9c0 [ 94.407892][ T5932] [ 94.407892][ T5932] but task is already holding lock: [ 94.415270][ T5932] ffff888027becb78 (&p->frag_sem){.+.+}-{4:4}, at: configfs_write_iter+0x219/0x4e0 [ 94.424651][ T5932] [ 94.424651][ T5932] other info that might help us debug this: [ 94.432726][ T5932] Possible unsafe locking scenario: [ 94.432726][ T5932] [ 94.440181][ T5932] CPU0 [ 94.443462][ T5932] ---- [ 94.446765][ T5932] lock(&p->frag_sem); [ 94.450934][ T5932] lock(&p->frag_sem); [ 94.455100][ T5932] [ 94.455100][ T5932] *** DEADLOCK *** [ 94.455100][ T5932] [ 94.463243][ T5932] May be due to missing lock nesting notation [ 94.463243][ T5932] [ 94.471562][ T5932] 5 locks held by syz.3.4/5932: [ 94.476416][ T5932] #0: ffff88807628feb8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 94.485604][ T5932] #1: ffff88801f3b2428 (sb_writers#12){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 94.494705][ T5932] #2: ffff888076079088 (&buffer->mutex){+.+.}-{4:4}, at: configfs_write_iter+0x75/0x4e0 [ 94.504585][ T5932] #3: ffff888027becb78 (&p->frag_sem){.+.+}-{4:4}, at: configfs_write_iter+0x219/0x4e0 [ 94.514367][ T5932] #4: ffffffff8f677f48 (target_devices_lock){+.+.}-{4:4}, at: target_core_item_dbroot_store+0x21/0x350 [ 94.525537][ T5932] [ 94.525537][ T5932] stack backtrace: [ 94.531614][ T5932] CPU: 1 UID: 0 PID: 5932 Comm: syz.3.4 Not tainted 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 94.531646][ T5932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 94.531664][ T5932] Call Trace: [ 94.531674][ T5932] [ 94.531687][ T5932] dump_stack_lvl+0x116/0x1f0 [ 94.531729][ T5932] print_deadlock_bug+0x1e9/0x240 [ 94.531758][ T5932] __lock_acquire+0x1106/0x1c90 [ 94.531793][ T5932] lock_acquire+0x179/0x350 [ 94.531823][ T5932] ? __configfs_open_file+0xe8/0x9c0 [ 94.531859][ T5932] ? __pfx___might_resched+0x10/0x10 [ 94.531885][ T5932] down_read+0x9b/0x480 [ 94.531906][ T5932] ? __configfs_open_file+0xe8/0x9c0 [ 94.531940][ T5932] ? __pfx_down_read+0x10/0x10 [ 94.531965][ T5932] __configfs_open_file+0xe8/0x9c0 [ 94.531998][ T5932] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 94.532029][ T5932] do_dentry_open+0x744/0x1c10 [ 94.532062][ T5932] ? __pfx_configfs_open_file+0x10/0x10 [ 94.532098][ T5932] vfs_open+0x82/0x3f0 [ 94.532123][ T5932] path_openat+0x1de4/0x2cb0 [ 94.532159][ T5932] ? __pfx_path_openat+0x10/0x10 [ 94.532190][ T5932] ? kasan_save_stack+0x42/0x60 [ 94.532222][ T5932] ? kasan_save_stack+0x33/0x60 [ 94.532259][ T5932] ? kasan_save_track+0x14/0x30 [ 94.532290][ T5932] ? __kasan_slab_alloc+0x89/0x90 [ 94.532326][ T5932] do_filp_open+0x20b/0x470 [ 94.532356][ T5932] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.532381][ T5932] ? __pfx_do_filp_open+0x10/0x10 [ 94.532429][ T5932] file_open_name+0x2a3/0x450 [ 94.532454][ T5932] ? __pfx_file_open_name+0x10/0x10 [ 94.532478][ T5932] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 94.532512][ T5932] ? getname_kernel+0x52/0x370 [ 94.532533][ T5932] ? __asan_memcpy+0x3c/0x60 [ 94.532571][ T5932] filp_open+0x4b/0x80 [ 94.532596][ T5932] target_core_item_dbroot_store+0x108/0x350 [ 94.532625][ T5932] configfs_write_iter+0x303/0x4e0 [ 94.532661][ T5932] vfs_write+0x6c7/0x1150 [ 94.532693][ T5932] ? __pfx_configfs_write_iter+0x10/0x10 [ 94.532727][ T5932] ? __pfx___mutex_lock+0x10/0x10 [ 94.532761][ T5932] ? __pfx_vfs_write+0x10/0x10 [ 94.532801][ T5932] ksys_write+0x12a/0x250 [ 94.532831][ T5932] ? __pfx_ksys_write+0x10/0x10 [ 94.532866][ T5932] do_syscall_64+0xcd/0x490 [ 94.532900][ T5932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.532924][ T5932] RIP: 0033:0x7f5a2498e929 [ 94.532949][ T5932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.532976][ T5932] RSP: 002b:00007f5a227d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 94.532998][ T5932] RAX: ffffffffffffffda RBX: 00007f5a24bb6080 RCX: 00007f5a2498e929 [ 94.533015][ T5932] RDX: 0000000000000063 RSI: 0000200000000000 RDI: 0000000000000003 [ 94.533029][ T5932] RBP: 00007f5a24a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 94.533044][ T5932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.533059][ T5932] R13: 0000000000000000 R14: 00007f5a24bb6080 R15: 00007ffc3ace2488 [ 94.533082][ T5932] [ 94.862272][ T5932] db_root: not a directory: /sys/kernel/config/target/dbroot [ 94.930695][ T30] audit: type=1804 audit(1751004545.712:2): pid=5932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4" name="/newroot/sys/kernel/config/target/dbroot" dev="configfs" ino=6072 res=1 errno=0 [ 94.954136][ T30] audit: type=1800 audit(1751004545.722:3): pid=5932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4" name="dbroot" dev="configfs" ino=6072 res=0 errno=0 [ 95.083192][ T5928] Zero length message leads to an empty skb [ 96.322443][ T5835] Bluetooth: hci2: command tx timeout [ 96.322464][ T5840] Bluetooth: hci3: command tx timeout [ 96.322496][ T5840] Bluetooth: hci1: command tx timeout [ 96.329657][ T5846] Bluetooth: hci0: command tx timeout [ 97.613551][ T24] cfg80211: failed to load regulatory.db