last executing test programs: 0s ago: executing program 3 (id=4): r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$md_new_array(r0, &(0x7f0000000080)={'md', @num=0x0}, 0x3) r1 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f00000000c0)={'/sys/block/md', @num=0x0, '/md/', @array='level\x00'}, 0x1, 0x0) write$md_sysfs(r1, &(0x7f0000000100)=@str='raid1', 0x5) r2 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000140)={'/sys/block/md', @num=0x0, '/md/', @array='raid_disks\x00'}, 0x1, 0x0) write$md_sysfs(r2, &(0x7f0000000180)=@str='2', 0x1) openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000740)={'/sys/block/md', @num=0x0, '/md/', @rdev={@rd='rd3/', 'offset\x00'}}, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r3) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x24, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4806}, 0x0) r5 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f00000001c0)={'/sys/block/md', @num=0x0, '/md/', @array='component_size\x00'}, 0x1, 0x0) write$md_sysfs(r5, &(0x7f0000000200)=@str='512', 0x3) r6 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000240)={'/sys/block/md', @num=0x0, '/md/', @array='new_dev\x00'}, 0x1, 0x0) write$md_sysfs(r6, &(0x7f0000000280)=@dev={'1:', 0x0}, 0x16) write$md_sysfs(r6, &(0x7f00000002c0)=@dev={'1:', 0x1}, 0x16) r7 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000300)={'/sys/block/md', @num=0x0, '/md/', @rdev={@ram={'dev-ram', 0x0}, 'slot\x00'}}, 0x1, 0x0) write$md_sysfs(r7, &(0x7f0000000340)=@str='0', 0x1) r8 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000380)={'/sys/block/md', @num=0x0, '/md/', @rdev={@ram={'dev-ram', 0x1}, 'slot\x00'}}, 0x1, 0x0) write$md_sysfs(r8, &(0x7f00000003c0)=@str='1', 0x1) r9 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000400)={'/sys/block/md', @num=0x0, '/md/', @array='array_state\x00'}, 0x1, 0x0) write$md_sysfs(r9, &(0x7f0000000440)=@str='active', 0x6) pwrite64(0xffffffffffffffff, &(0x7f00000004c0)="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0x20, 0x1000) close(0xffffffffffffffff) write$md_sysfs(r9, &(0x7f0000000500)=@str='clear', 0x5) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.181' (ED25519) to the list of known hosts. [ 84.519814][ T5773] cgroup: Unknown subsys name 'net' [ 84.659180][ T5773] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.355830][ T5773] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.153927][ T5799] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.162985][ T5799] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.172190][ T5799] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.180690][ T5799] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.188062][ T5799] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.192253][ T5793] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.203074][ T5799] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.210326][ T5799] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.218793][ T5799] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.226508][ T5799] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.226526][ T5794] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.238555][ T5799] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.250714][ T5794] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.255996][ T5799] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 88.265557][ T5793] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 88.265756][ T5799] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.273285][ T5793] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.282594][ T5799] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.288446][ T5793] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.302086][ T5793] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 88.304708][ T5096] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.311070][ T5793] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.318437][ T5096] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 88.331125][ T5096] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.438724][ T5785] (null): rxe_set_mtu: Set mtu to 1024 [ 88.454986][ T5784] (null): rxe_set_mtu: Set mtu to 1024 [ 88.460783][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.467586][ T5788] (null): rxe_set_mtu: Set mtu to 1024 [ 88.477505][ T5787] (null): rxe_set_mtu: Set mtu to 1024 [ 88.484834][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.485859][ T5784] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 88.498409][ T5788] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 88.505257][ T5787] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 88.522076][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.799973][ T5785] infiniband rxe0: set active [ 88.806150][ T5723] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.812859][ T5785] infiniband rxe0: added rxe_eth0 [ 88.879628][ T5785] RDS/IB: rxe0: added [ 88.894391][ T5785] smc: adding ib device rxe0 with port count 1 [ 88.901832][ T5785] smc: ib device rxe0 port 1 has pnetid [ 88.926308][ T5723] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.933397][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.147664][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 89.198741][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.237050][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 89.385277][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 89.507503][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.578972][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.588744][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.599801][ T5788] bridge_slave_0: entered allmulticast mode [ 89.607825][ T5788] bridge_slave_0: entered promiscuous mode [ 89.622109][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.629326][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.639957][ T5788] bridge_slave_1: entered allmulticast mode [ 89.647666][ T5788] bridge_slave_1: entered promiscuous mode [ 89.725260][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.733632][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.741301][ T5784] bridge_slave_0: entered allmulticast mode [ 89.748848][ T5784] bridge_slave_0: entered promiscuous mode [ 89.804847][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.820751][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.828285][ T5784] bridge_slave_1: entered allmulticast mode [ 89.852786][ T5784] bridge_slave_1: entered promiscuous mode [ 89.891563][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.949073][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.972828][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.995649][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.006478][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.013886][ T5787] bridge_slave_0: entered allmulticast mode [ 90.022007][ T5787] bridge_slave_0: entered promiscuous mode [ 90.033109][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.074509][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.083070][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.090352][ T5787] bridge_slave_1: entered allmulticast mode [ 90.098290][ T5787] bridge_slave_1: entered promiscuous mode [ 90.129288][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 90.153030][ T5788] team0: Port device team_slave_0 added [ 90.163602][ T5788] team0: Port device team_slave_1 added [ 90.220026][ T5784] team0: Port device team_slave_0 added [ 90.235336][ T5784] team0: Port device team_slave_1 added [ 90.265961][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.295173][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.306065][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.335715][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.355555][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.363098][ T5096] Bluetooth: hci0: command tx timeout [ 90.415305][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.422405][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.448850][ T5096] Bluetooth: hci3: command tx timeout [ 90.455026][ T52] Bluetooth: hci1: command tx timeout [ 90.455049][ T5793] Bluetooth: hci2: command tx timeout [ 90.457854][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.499374][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.506890][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.533550][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.548399][ T5787] team0: Port device team_slave_0 added [ 90.559309][ T5787] team0: Port device team_slave_1 added [ 90.582369][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.589384][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.615840][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.724110][ T5784] hsr_slave_0: entered promiscuous mode [ 90.731492][ T5784] hsr_slave_1: entered promiscuous mode [ 90.762978][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.769958][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.796515][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.819473][ T5788] hsr_slave_0: entered promiscuous mode [ 90.826625][ T5788] hsr_slave_1: entered promiscuous mode [ 90.833465][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.841887][ T5788] Cannot create hsr debugfs directory [ 90.855233][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.862397][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.890448][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.058440][ T5787] hsr_slave_0: entered promiscuous mode [ 91.066107][ T5787] hsr_slave_1: entered promiscuous mode [ 91.073655][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.093470][ T5787] Cannot create hsr debugfs directory [ 91.329442][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 91.612344][ T5723] rxe_eth0 speed is unknown, defaulting to 1000 [ 91.708207][ T5784] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.734040][ T5784] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.769188][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.778867][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.787745][ T5785] bridge_slave_0: entered allmulticast mode [ 91.796050][ T5785] bridge_slave_0: entered promiscuous mode [ 91.817304][ T5784] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.844982][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.861092][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.868515][ T5785] bridge_slave_1: entered allmulticast mode [ 91.882804][ T5785] bridge_slave_1: entered promiscuous mode [ 91.890497][ T5784] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.988976][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.010891][ T5788] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.033173][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.079173][ T5788] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.094164][ T5788] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.147381][ T5788] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.197973][ T5785] team0: Port device team_slave_0 added [ 92.240013][ T5785] team0: Port device team_slave_1 added [ 92.368419][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.385817][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.417994][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.430197][ T5787] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.441025][ T5096] Bluetooth: hci0: command tx timeout [ 92.459392][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.467937][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.494602][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.506358][ T5787] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.520630][ T5096] Bluetooth: hci3: command tx timeout [ 92.526236][ T52] Bluetooth: hci1: command tx timeout [ 92.526247][ T5793] Bluetooth: hci2: command tx timeout [ 92.555014][ T5787] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.568189][ T5787] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.633056][ T5785] hsr_slave_0: entered promiscuous mode [ 92.639625][ T5785] hsr_slave_1: entered promiscuous mode [ 92.647231][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.655093][ T5785] Cannot create hsr debugfs directory [ 92.663691][ T5445] infiniband rxe0: set active [ 92.718538][ T28] rxe_eth0 speed is unknown, defaulting to 1000 [ 92.823634][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.834567][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.895121][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.932113][ T2929] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.939580][ T2929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.969355][ T3465] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.976582][ T3465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.998820][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.038335][ T2929] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.045578][ T2929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.059455][ T2929] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.066606][ T2929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.193142][ T5785] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.208433][ T5785] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.218571][ T5785] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.248726][ T5785] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.388176][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.442990][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.476424][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.483759][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.550047][ T3465] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.557311][ T3465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.683360][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.745395][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.797678][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.837192][ T3465] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.844530][ T3465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.887865][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.904495][ T3465] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.911732][ T3465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.035834][ T5788] veth0_vlan: entered promiscuous mode [ 94.069654][ T5788] veth1_vlan: entered promiscuous mode [ 94.104990][ T5784] veth0_vlan: entered promiscuous mode [ 94.164599][ T5784] veth1_vlan: entered promiscuous mode [ 94.197479][ T5788] veth0_macvtap: entered promiscuous mode [ 94.236202][ T5788] veth1_macvtap: entered promiscuous mode [ 94.254893][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.319676][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.363806][ T5784] veth0_macvtap: entered promiscuous mode [ 94.376589][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.394508][ T5784] veth1_macvtap: entered promiscuous mode [ 94.426037][ T5788] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.437823][ T5788] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.450506][ T5788] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.459308][ T5788] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.519006][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.530996][ T52] Bluetooth: hci0: command tx timeout [ 94.539481][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.553559][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.592651][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.603957][ T52] Bluetooth: hci1: command tx timeout [ 94.609411][ T52] Bluetooth: hci3: command tx timeout [ 94.613376][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.617350][ T5096] Bluetooth: hci2: command tx timeout [ 94.634463][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.650939][ T5784] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.659714][ T5784] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.671666][ T5784] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.683477][ T5784] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.702069][ T5787] veth0_vlan: entered promiscuous mode [ 94.722330][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.766583][ T5787] veth1_vlan: entered promiscuous mode [ 94.836679][ T3465] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.861176][ T3465] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.896211][ T5785] veth0_vlan: entered promiscuous mode [ 94.951792][ T2929] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.960812][ T2929] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.976846][ T5785] veth1_vlan: entered promiscuous mode [ 95.012096][ T2929] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.020166][ T2929] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.051448][ T5787] veth0_macvtap: entered promiscuous mode [ 95.079266][ T5787] veth1_macvtap: entered promiscuous mode [ 95.094137][ T5788] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.196816][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.212571][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.226267][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.238924][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.256107][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.271237][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.279119][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.299491][ T5903] general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] PREEMPT SMP KASAN [ 95.306259][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.311276][ T5903] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 95.311308][ T5903] CPU: 0 PID: 5903 Comm: syz.3.4 Not tainted syzkaller #0 [ 95.322765][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.330239][ T5903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 95.357326][ T5903] RIP: 0010:__percpu_ref_switch_mode+0x123/0x5f0 [ 95.361384][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.363710][ T5903] Code: 31 ff 89 c6 e8 0e d1 59 fd 45 85 ff 0f 84 5a 04 00 00 e8 50 cd 59 fd eb 05 e8 49 cd 59 fd 4d 8d 74 24 10 4d 89 f5 49 c1 ed 03 <41> 80 7c 1d 00 00 74 08 4c 89 f7 e8 9d d2 b2 fd 49 83 3e 00 0f 84 [ 95.374817][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.393750][ T5903] RSP: 0018:ffffc9000484f8e0 EFLAGS: 00010002 [ 95.393773][ T5903] RAX: ffffffff842e0690 RBX: dffffc0000000000 RCX: 0000000000080000 [ 95.408972][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.409652][ T5903] RDX: ffffc9000d60c000 RSI: 000000000000152c RDI: 000000000000152d [ 95.433281][ T5903] RBP: ffffc9000484f9f8 R08: 0000000000000003 R09: 0000000000000004 [ 95.441312][ T5903] R10: dffffc0000000000 R11: fffff52000909f1c R12: 0000000000000000 [ 95.449345][ T5903] R13: 0000000000000002 R14: 0000000000000010 R15: 0000000000000001 [ 95.457369][ T5903] FS: 00007f6a2f2906c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 95.466356][ T5903] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 95.473077][ T5903] CR2: 0000001b2e91cff8 CR3: 000000007909f000 CR4: 00000000003506f0 [ 95.481096][ T5903] Call Trace: [ 95.484444][ T5903] [ 95.487423][ T5903] ? percpu_ref_switch_to_atomic+0xa0/0xa0 [ 95.493317][ T5903] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 95.498842][ T5903] ? _raw_spin_lock+0x40/0x40 [ 95.503575][ T5903] percpu_ref_kill_and_confirm+0x9b/0x130 [ 95.509359][ T5903] __mddev_suspend+0x2d1/0x630 [ 95.514176][ T5903] ? rcu_read_unlock+0xa0/0xa0 [ 95.518990][ T5903] ? _parse_integer_limit+0x19c/0x1e0 [ 95.524419][ T5903] ? kstrtoull+0x130/0x1d0 [ 95.528885][ T5903] raid_disks_store+0xb8/0x550 [ 95.533693][ T5903] ? md_attr_store+0x175/0x390 [ 95.538517][ T5903] ? __lock_acquire+0x7eb0/0x7eb0 [ 95.543590][ T5903] ? raid_disks_show+0x140/0x140 [ 95.548579][ T5903] ? do_raw_spin_unlock+0x121/0x230 [ 95.553840][ T5903] md_attr_store+0x19c/0x390 [ 95.558498][ T5903] ? sysfs_kf_read+0x360/0x360 [ 95.563307][ T5903] kernfs_fop_write_iter+0x3a4/0x520 [ 95.568649][ T5903] vfs_write+0x474/0x9a0 [ 95.572944][ T5903] ? file_end_write+0x250/0x250 [ 95.577851][ T5903] ? __fget_files+0x3fc/0x460 [ 95.582587][ T5903] ? __fdget_pos+0x2a3/0x330 [ 95.587236][ T5903] ? ksys_write+0x74/0x260 [ 95.591716][ T5903] ksys_write+0x151/0x260 [ 95.596201][ T5903] ? __ia32_sys_read+0x90/0x90 [ 95.601023][ T5903] ? lockdep_hardirqs_on+0x98/0x150 [ 95.606311][ T5903] do_syscall_64+0x55/0xb0 [ 95.610799][ T5903] ? clear_bhb_loop+0x40/0x90 [ 95.615552][ T5903] ? clear_bhb_loop+0x40/0x90 [ 95.620328][ T5903] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 95.626288][ T5903] RIP: 0033:0x7f6a2e39f559 [ 95.630778][ T5903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.650443][ T5903] RSP: 002b:00007f6a2f290028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 95.658921][ T5903] RAX: ffffffffffffffda RBX: 00007f6a2e625fa0 RCX: 00007f6a2e39f559 [ 95.666952][ T5903] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000005 [ 95.674997][ T5903] RBP: 00007f6a2e436b20 R08: 0000000000000000 R09: 0000000000000000 [ 95.683014][ T5903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.691051][ T5903] R13: 00007f6a2e626038 R14: 00007f6a2e625fa0 R15: 00007fff79c5d9d8 [ 95.699069][ T5903] [ 95.702128][ T5903] Modules linked in: [ 95.706061][ T5903] ---[ end trace 0000000000000000 ]--- [ 95.711535][ T5903] RIP: 0010:__percpu_ref_switch_mode+0x123/0x5f0 [ 95.718004][ T5903] Code: 31 ff 89 c6 e8 0e d1 59 fd 45 85 ff 0f 84 5a 04 00 00 e8 50 cd 59 fd eb 05 e8 49 cd 59 fd 4d 8d 74 24 10 4d 89 f5 49 c1 ed 03 <41> 80 7c 1d 00 00 74 08 4c 89 f7 e8 9d d2 b2 fd 49 83 3e 00 0f 84 [ 95.737743][ T5903] RSP: 0018:ffffc9000484f8e0 EFLAGS: 00010002 [ 95.743841][ T5903] RAX: ffffffff842e0690 RBX: dffffc0000000000 RCX: 0000000000080000 [ 95.751841][ T5903] RDX: ffffc9000d60c000 RSI: 000000000000152c RDI: 000000000000152d [ 95.759883][ T5903] RBP: ffffc9000484f9f8 R08: 0000000000000003 R09: 0000000000000004 [ 95.767894][ T5903] R10: dffffc0000000000 R11: fffff52000909f1c R12: 0000000000000000 [ 95.775900][ T5903] R13: 0000000000000002 R14: 0000000000000010 R15: 0000000000000001 [ 95.783903][ T5903] FS: 00007f6a2f2906c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 95.792878][ T5903] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 95.799500][ T5903] CR2: 0000001b2e91cff8 CR3: 000000007909f000 CR4: 00000000003506f0 [ 95.807529][ T5903] Kernel panic - not syncing: Fatal exception [ 95.814171][ T5903] Kernel Offset: disabled [ 95.818505][ T5903] Rebooting in 86400 seconds..