last executing test programs: 1.134581211s ago: executing program 0 (id=1): r0 = socket$igmp(0x2, 0x3, 0x2) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, r2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x9661}}, './file0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3) ioctl$SG_IO(r1, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000000)="353513000000", 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f00000001c0)=[r4, r1], 0x2) ioctl$SG_IO(r4, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="008d7acda0b2", 0x0, 0x0, 0x10, 0x0, 0x0}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r5, 0x0, 0x5, &(0x7f0000000580)='C', 0x1) io_setup(0x9, &(0x7f0000000140)=0x0) io_submit(r6, 0x1, &(0x7f00000002c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r7, 0x0) io_cancel(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, r7}, 0x0) 635.920299ms ago: executing program 2 (id=3): syz_usb_connect(0x0, 0x2d, &(0x7f0000000940)={{0x12, 0x1, 0x0, 0xa6, 0xff, 0x5, 0x40, 0xabcd, 0xcdee, 0x5b9, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x51, 0x0, [], [{{0x9, 0x5, 0x3}}]}}]}}]}}, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_procfs$pagemap(0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r4, &(0x7f0000000540)={&(0x7f0000000200)=@name, 0x10, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) add_key(0x0, 0x0, &(0x7f0000000340)="143fda06ec07c23fde3cb79ed88031e0525844da66056aa14d12625411d03e53ce8b21eb6a1f226e36e0cac952721ddf616e87e9ffe93ac1e52dd133000344f88e2bd1940b122e4b8bfe75b7064af951aebf4702ad6acc0594005cf451e566a70a32db2041f15744318ba584e6b34cb67ef7e7c0f5b45bb40534e3afdd3909e48f4e3e368043a32ed1c11081d1cbc2d4408637fcc3d9c30aa0f86b4d38219b35ad30cb1f4388f03e1d475300dde6374b94340632c98c8cb13273cece1688495104", 0xc1, 0x0) 574.967151ms ago: executing program 0 (id=6): unshare(0x2a020400) socket$rds(0x15, 0x5, 0x0) getpid() ptrace(0x10, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000100)) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1d) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x102, 0x0) sendfile(r1, r1, 0x0, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x1}, 0x6e) 286.045332ms ago: executing program 0 (id=7): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, 0x0, 0x0) bind$inet(r4, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x8, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r6, 0x4014563c, &(0x7f000001f9c0)={0xa, {0x8000, 0x200}}) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f00000000c0)={0x2, 0x0, 0x0, {0x0, 0x0, 0xffffffff, 0xfffffff9}}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="738700000000000000000100000008000100000000000c0006000000000001"], 0x30}}, 0x0) 266.462216ms ago: executing program 1 (id=2): syz_open_dev$hidraw(0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x90) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet(0x2, 0x4, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f00000004c0)=""/52, &(0x7f0000000500)=0x34) r4 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r4, &(0x7f0000000040)="e5786a0d000000000000c83b", 0xc, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) 0s ago: executing program 3 (id=4): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, 0x0, 0x3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r5, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x800, &(0x7f0000000040)={[{@jqfmt_vfsv0}, {@test_dummy_encryption}]}, 0x1, 0x465, &(0x7f00000011c0)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000004c0), 0x208e24b) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.126' (ED25519) to the list of known hosts. [ 60.410761][ T5217] cgroup: Unknown subsys name 'net' [ 60.543767][ T5217] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 62.079899][ T5217] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 64.202018][ T5231] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.222663][ T5231] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.235642][ T5231] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.267179][ T4623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.275118][ T4623] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.284022][ T5234] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 64.291488][ T5234] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.317431][ T5235] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.335405][ T5235] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.375162][ T5235] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.387312][ T5234] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 64.394708][ T5234] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.422659][ T5231] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.435423][ T5231] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.446051][ T5234] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.456271][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.456521][ T5234] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.464162][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 64.477969][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.485695][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.496247][ T5234] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.514474][ T5234] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.528373][ T5234] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 64.535953][ T5234] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.555741][ T5234] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 64.568868][ T5235] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 64.576795][ T5235] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 64.586740][ T5235] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 64.595037][ T5235] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 64.602880][ T5235] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 64.844889][ T5227] chnl_net:caif_netlink_parms(): no params data found [ 64.951546][ T5232] chnl_net:caif_netlink_parms(): no params data found [ 65.038152][ T5227] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.045573][ T5227] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.052999][ T5227] bridge_slave_0: entered allmulticast mode [ 65.060660][ T5227] bridge_slave_0: entered promiscuous mode [ 65.105880][ T5227] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.113135][ T5227] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.122026][ T5227] bridge_slave_1: entered allmulticast mode [ 65.130536][ T5227] bridge_slave_1: entered promiscuous mode [ 65.153612][ T5241] chnl_net:caif_netlink_parms(): no params data found [ 65.219632][ T5227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.237163][ T5227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.246731][ T5237] chnl_net:caif_netlink_parms(): no params data found [ 65.266232][ T5232] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.273383][ T5232] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.285832][ T5232] bridge_slave_0: entered allmulticast mode [ 65.292829][ T5232] bridge_slave_0: entered promiscuous mode [ 65.336841][ T5232] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.343970][ T5232] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.351318][ T5232] bridge_slave_1: entered allmulticast mode [ 65.358589][ T5232] bridge_slave_1: entered promiscuous mode [ 65.372178][ T5227] team0: Port device team_slave_0 added [ 65.379109][ T5239] chnl_net:caif_netlink_parms(): no params data found [ 65.410195][ T5227] team0: Port device team_slave_1 added [ 65.462382][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.469861][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.496699][ T5227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.512765][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.520340][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.546838][ T5227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.560639][ T5232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.611926][ T5232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.631063][ T5241] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.638521][ T5241] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.646409][ T5241] bridge_slave_0: entered allmulticast mode [ 65.653178][ T5241] bridge_slave_0: entered promiscuous mode [ 65.689555][ T5241] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.700574][ T5241] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.708301][ T5241] bridge_slave_1: entered allmulticast mode [ 65.714988][ T5241] bridge_slave_1: entered promiscuous mode [ 65.738266][ T5237] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.745694][ T5237] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.753015][ T5237] bridge_slave_0: entered allmulticast mode [ 65.760655][ T5237] bridge_slave_0: entered promiscuous mode [ 65.768936][ T5237] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.776368][ T5237] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.783562][ T5237] bridge_slave_1: entered allmulticast mode [ 65.790994][ T5237] bridge_slave_1: entered promiscuous mode [ 65.803650][ T5232] team0: Port device team_slave_0 added [ 65.829352][ T5227] hsr_slave_0: entered promiscuous mode [ 65.836440][ T5227] hsr_slave_1: entered promiscuous mode [ 65.876933][ T5232] team0: Port device team_slave_1 added [ 65.898912][ T5241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.924455][ T5239] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.931843][ T5239] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.939529][ T5239] bridge_slave_0: entered allmulticast mode [ 65.946703][ T5239] bridge_slave_0: entered promiscuous mode [ 65.963756][ T5241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.989146][ T5237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.001893][ T5237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.021477][ T5232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.028505][ T5232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.054614][ T5232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.068037][ T5239] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.075515][ T5239] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.082770][ T5239] bridge_slave_1: entered allmulticast mode [ 66.089934][ T5239] bridge_slave_1: entered promiscuous mode [ 66.124492][ T5232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.134577][ T5232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.160662][ T5232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.191633][ T5239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.203758][ T5241] team0: Port device team_slave_0 added [ 66.221539][ T5239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.245065][ T5241] team0: Port device team_slave_1 added [ 66.263997][ T5237] team0: Port device team_slave_0 added [ 66.272083][ T5237] team0: Port device team_slave_1 added [ 66.328831][ T5239] team0: Port device team_slave_0 added [ 66.342813][ T5241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.350429][ T5241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.377647][ T5241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.377776][ T5235] Bluetooth: hci0: command tx timeout [ 66.390798][ T5241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.401302][ T5241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.427543][ T5241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.443030][ T5232] hsr_slave_0: entered promiscuous mode [ 66.448772][ T5235] Bluetooth: hci1: command tx timeout [ 66.454759][ T5232] hsr_slave_1: entered promiscuous mode [ 66.461667][ T5232] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.470182][ T5232] Cannot create hsr debugfs directory [ 66.493883][ T5239] team0: Port device team_slave_1 added [ 66.525432][ T5235] Bluetooth: hci2: command tx timeout [ 66.532666][ T5237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.541381][ T5237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.567618][ T5237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.580473][ T5237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.587718][ T5237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.614341][ T5237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.625177][ T5235] Bluetooth: hci3: command tx timeout [ 66.649910][ T5239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.656967][ T5239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.683074][ T5239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.685526][ T5235] Bluetooth: hci4: command tx timeout [ 66.717332][ T5239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.724316][ T5239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.750503][ T5239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.849388][ T5241] hsr_slave_0: entered promiscuous mode [ 66.860316][ T5241] hsr_slave_1: entered promiscuous mode [ 66.866833][ T5241] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.874427][ T5241] Cannot create hsr debugfs directory [ 66.892690][ T5237] hsr_slave_0: entered promiscuous mode [ 66.900039][ T5237] hsr_slave_1: entered promiscuous mode [ 66.906881][ T5237] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.914552][ T5237] Cannot create hsr debugfs directory [ 66.950052][ T5239] hsr_slave_0: entered promiscuous mode [ 66.957243][ T5239] hsr_slave_1: entered promiscuous mode [ 66.963307][ T5239] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.971269][ T5239] Cannot create hsr debugfs directory [ 67.108535][ T5227] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.140355][ T5227] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.182981][ T5227] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.226261][ T5227] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.317069][ T5232] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.327228][ T5232] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.340540][ T5232] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.367888][ T5232] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.417295][ T5241] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.431189][ T5241] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.452151][ T5241] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.481099][ T5241] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.539715][ T5239] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.570866][ T5239] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.580695][ T5239] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.620078][ T5239] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.669817][ T5237] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.680553][ T5237] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.692341][ T5237] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.703936][ T5237] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.717923][ T5227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.797497][ T5227] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.818252][ T5241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.844928][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.852306][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.863913][ T5232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.924715][ T2920] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.931889][ T2920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.952553][ T5241] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.978375][ T5232] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.007659][ T5237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.016347][ T2920] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.023495][ T2920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.033799][ T2920] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.041010][ T2920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.081379][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.088630][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.099096][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.106274][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.145053][ T5237] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.164321][ T5239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.178771][ T5227] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.203167][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.210384][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.251297][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.258498][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.326931][ T5239] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.385072][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.392285][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.403062][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.410239][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.447294][ T5235] Bluetooth: hci0: command tx timeout [ 68.493669][ T5227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.525712][ T5235] Bluetooth: hci1: command tx timeout [ 68.605981][ T5235] Bluetooth: hci2: command tx timeout [ 68.686285][ T5235] Bluetooth: hci3: command tx timeout [ 68.719078][ T5232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.766121][ T5235] Bluetooth: hci4: command tx timeout [ 68.850076][ T5227] veth0_vlan: entered promiscuous mode [ 68.951180][ T5227] veth1_vlan: entered promiscuous mode [ 68.969923][ T5232] veth0_vlan: entered promiscuous mode [ 68.997715][ T5239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.013627][ T5237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.040096][ T5232] veth1_vlan: entered promiscuous mode [ 69.049916][ T5241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.082465][ T5227] veth0_macvtap: entered promiscuous mode [ 69.139828][ T5227] veth1_macvtap: entered promiscuous mode [ 69.185007][ T5239] veth0_vlan: entered promiscuous mode [ 69.201128][ T5232] veth0_macvtap: entered promiscuous mode [ 69.236746][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.249834][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.261699][ T5237] veth0_vlan: entered promiscuous mode [ 69.270965][ T5232] veth1_macvtap: entered promiscuous mode [ 69.292561][ T5239] veth1_vlan: entered promiscuous mode [ 69.320852][ T5227] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.340917][ T5227] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.353375][ T5227] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.369221][ T5227] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.384925][ T5237] veth1_vlan: entered promiscuous mode [ 69.409387][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.421721][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.433249][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.477136][ T5237] veth0_macvtap: entered promiscuous mode [ 69.485856][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.496466][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.510948][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.536623][ T5232] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.546855][ T5232] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.557568][ T5232] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.567205][ T5232] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.581623][ T5237] veth1_macvtap: entered promiscuous mode [ 69.609016][ T5239] veth0_macvtap: entered promiscuous mode [ 69.659381][ T5239] veth1_macvtap: entered promiscuous mode [ 69.694369][ T2920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.705932][ T2920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.709088][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.728535][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.738788][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.749669][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.761744][ T5237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.770759][ T5241] veth0_vlan: entered promiscuous mode [ 69.810137][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.830827][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.841320][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.852541][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.864359][ T5237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.897870][ T1058] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.908531][ T5241] veth1_vlan: entered promiscuous mode [ 69.915905][ T1058] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.926063][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.939734][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.950011][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.961194][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.972536][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.983140][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.994272][ T5239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.008475][ T5237] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.017590][ T5237] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.029018][ T5237] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.038372][ T5237] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.068535][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.079192][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.089594][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.100310][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.110247][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.121975][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.133508][ T5239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.176418][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.191298][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.202636][ T5239] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.219250][ T5239] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.235534][ T5239] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.244289][ T5239] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.377771][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.379265][ T5241] veth0_macvtap: entered promiscuous mode [ 70.387359][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.395742][ T5241] veth1_macvtap: entered promiscuous mode [ 70.414536][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.425085][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.435569][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.446652][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.456708][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.467225][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.477157][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.487704][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.499113][ T5241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.504726][ T5305] capability: warning: `syz.0.1' uses deprecated v2 capabilities in a way that may be insecure [ 70.524759][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.536565][ T5235] Bluetooth: hci0: command tx timeout [ 70.543161][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.553382][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.564018][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.573977][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.584545][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.594434][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.604953][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.616046][ T5235] Bluetooth: hci1: command tx timeout [ 70.617329][ T5241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.658069][ T2581] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.671307][ T2581] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.684405][ T5241] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.694237][ T5235] Bluetooth: hci2: command tx timeout [ 70.700527][ T5241] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.711032][ T5241] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.721098][ T5241] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.765902][ T5235] Bluetooth: hci3: command tx timeout [ 70.787335][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.798052][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.853147][ T5235] Bluetooth: hci4: command tx timeout [ 70.906292][ T1058] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.923658][ T1058] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.042150][ T2581] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.067667][ T2581] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.077252][ T1058] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.121389][ T1058] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.215719][ T5274] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 71.299484][ T1058] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.345560][ T1058] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.538092][ T5323] IPVS: length: 52 != 24 [ 71.607360][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.614239][ T5319] BUG: sleeping function called from invalid context at include/linux/uaccess.h:176 [ 71.614266][ T5319] ================================================================== [ 71.614278][ T5319] BUG: KASAN: out-of-bounds in page_fault_oops+0x9c9/0xcc0 [ 71.614331][ T5319] Read of size 2 at addr ffffc900044b7110 by task syz.1.2/5319 [ 71.614354][ T5319] [ 71.614372][ T5319] CPU: 1 UID: 0 PID: 5319 Comm: syz.1.2 Not tainted 6.11.0-rc4-next-20240823-syzkaller #0 [ 71.614403][ T5319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 71.614419][ T5319] Call Trace: [ 71.614429][ T5319] [ 71.614439][ T5319] dump_stack_lvl+0x241/0x360 [ 71.614474][ T5319] ? __pfx_dump_stack_lvl+0x10/0x10 [ 71.614504][ T5319] ? __pfx__printk+0x10/0x10 [ 71.614532][ T5319] ? _printk+0xd5/0x120 [ 71.614561][ T5319] print_report+0x169/0x550 [ 71.614592][ T5319] ? bsearch+0x9f/0xc0 [ 71.614615][ T5319] ? __pfx_lock_release+0x10/0x10 [ 71.614650][ T5319] ? __virt_addr_valid+0xbd/0x530 [ 71.614675][ T5319] ? page_fault_oops+0x9c9/0xcc0 [ 71.614707][ T5319] kasan_report+0x143/0x180 [ 71.614738][ T5319] ? page_fault_oops+0x9c9/0xcc0 [ 71.614783][ T5319] page_fault_oops+0x9c9/0xcc0 [ 71.614816][ T5319] ? __lock_acquire+0x1384/0x2050 [ 71.614853][ T5319] ? __pfx_page_fault_oops+0x10/0x10 [ 71.614885][ T5319] ? inat_get_opcode_attribute+0xc/0x50 [ 71.614922][ T5319] ? is_prefetch+0x4ed/0x780 [ 71.614951][ T5319] ? insn_get_prefixes+0xc85/0x1ac0 [ 71.614976][ T5319] ? insn_get_opcode+0x5a/0xe80 [ 71.615019][ T5319] ? __pfx_is_prefetch+0x10/0x10 [ 71.615051][ T5319] ? inat_get_opcode_attribute+0xc/0x50 [ 71.615092][ T5319] ? put_dec_trunc8+0x1f1/0x330 [ 71.615128][ T5319] ? skip_atoi+0xb6/0xd0 [ 71.615164][ T5319] ? format_decode+0x6bc/0x1bb0 [ 71.615201][ T5319] ? __pfx_format_decode+0x10/0x10 [ 71.615240][ T5319] ? __asan_memset+0x23/0x50 [ 71.615264][ T5319] ? vsnprintf+0x948/0x1da0 [ 71.615297][ T5319] ? __asan_memcpy+0x40/0x70 [ 71.615322][ T5319] ? vsnprintf+0x1ccd/0x1da0 [ 71.615359][ T5319] ? __pfx_vsnprintf+0x10/0x10 [ 71.615397][ T5319] ? rcu_is_watching+0x15/0xb0 [ 71.615422][ T5319] ? lock_acquire+0xe3/0x550 [ 71.615456][ T5319] ? vsnprintf+0x1cc3/0x1da0 [ 71.615492][ T5319] ? do_raw_spin_lock+0x14f/0x370 [ 71.615525][ T5319] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 71.615554][ T5319] ? info_print_prefix+0x204/0x310 [ 71.615590][ T5319] ? __pfx_info_print_prefix+0x10/0x10 [ 71.615625][ T5319] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 71.615652][ T5319] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 71.615679][ T5319] ? printk_get_next_message+0x990/0xbe0 [ 71.615710][ T5319] ? wq_watchdog_touch+0xef/0x180 [ 71.615739][ T5319] ? io_serial_out+0x55/0xc0 [ 71.615784][ T5319] ? serial8250_console_write+0x14ed/0x1ed0 [ 71.615828][ T5319] ? __pfx_serial8250_console_write+0x10/0x10 [ 71.615864][ T5319] ? __pfx_lock_release+0x10/0x10 [ 71.615899][ T5319] ? do_raw_spin_lock+0x14f/0x370 [ 71.615932][ T5319] ? do_raw_spin_unlock+0x13c/0x8b0 [ 71.615964][ T5319] ? __pfx_univ8250_console_write+0x10/0x10 [ 71.615994][ T5319] ? console_flush_all+0x880/0xf50 [ 71.616026][ T5319] ? console_flush_all+0x147/0xf50 [ 71.616058][ T5319] ? __pfx_console_flush_all+0x10/0x10 [ 71.616089][ T5319] ? __pfx_lock_acquire+0x10/0x10 [ 71.616126][ T5319] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 71.616165][ T5319] ? console_unlock+0x13b/0x4d0 [ 71.616195][ T5319] ? __pfx_console_unlock+0x10/0x10 [ 71.616221][ T5319] ? _printk+0xd5/0x120 [ 71.616247][ T5319] ? _printk+0xd5/0x120 [ 71.616273][ T5319] ? __pfx___down_trylock_console_sem+0x10/0x10 [ 71.616306][ T5319] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 71.616339][ T5319] ? vprintk_emit+0x87d/0xa10 [ 71.616370][ T5319] ? __pfx_vprintk_emit+0x10/0x10 [ 71.616397][ T5319] ? _raw_spin_unlock_irq+0x23/0x50 [ 71.616422][ T5319] ? lockdep_hardirqs_on+0x99/0x150 [ 71.616450][ T5319] ? _raw_spin_unlock_irq+0x2e/0x50 [ 71.616475][ T5319] ? wait_for_completion+0x555/0x620 [ 71.616506][ T5319] ? _printk+0xd5/0x120 [ 71.616532][ T5319] ? __pfx_generic_exec_single+0x10/0x10 [ 71.616563][ T5319] ? __might_fault+0x51/0x120 [ 71.616589][ T5319] ? __pfx__printk+0x10/0x10 [ 71.616621][ T5319] ? __might_resched+0x3a8/0x780 [ 71.616656][ T5319] ? __pfx___might_resched+0x10/0x10 [ 71.616687][ T5319] ? __might_fault+0xaa/0x120 [ 71.616720][ T5319] ? __might_fault+0x72/0x120 [ 71.616747][ T5319] ? _copy_to_user+0x2a/0xb0 [ 71.616788][ T5319] ? msr_read+0x187/0x260 [ 71.616815][ T5319] ? __pfx_msr_read+0x10/0x10 [ 71.616843][ T5319] ? rw_verify_area+0x574/0x700 [ 71.616869][ T5319] ? __pfx_msr_read+0x10/0x10 [ 71.616896][ T5319] ? vfs_read+0x204/0xbd0 [ 71.616922][ T5319] ? __pfx_lock_release+0x10/0x10 [ 71.616959][ T5319] ? do_futex+0x33b/0x560 [ 71.616992][ T5319] ? __pfx_vfs_read+0x10/0x10 [ 71.617020][ T5319] ? __fget_files+0x29/0x470 [ 71.617056][ T5319] ? __fget_files+0x3f6/0x470 [ 71.617089][ T5319] ? __fget_files+0x29/0x470 [ 71.617130][ T5319] ? ksys_read+0x183/0x2b0 [ 71.617158][ T5319] ? __pfx_ksys_read+0x10/0x10 [ 71.617187][ T5319] ? do_syscall_64+0x100/0x230 [ 71.617217][ T5319] ? do_syscall_64+0xb6/0x230 [ 71.617249][ T5319] ? do_syscall_64+0xf3/0x230 [ 71.617278][ T5319] ? clear_bhb_loop+0x35/0x90 [ 71.617308][ T5319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.617341][ T5319] [ 71.617350][ T5319] [ 71.617357][ T5319] The buggy address belongs to stack of task syz.1.2/5319 [ 71.617371][ T5319] internal error: frame has invalid marker: 4294904320 [ 71.617382][ T5319] [ 71.617392][ T5319] The buggy address belongs to the virtual mapping at [ 71.617392][ T5319] [ffffc900044b0000, ffffc900044b9000) created by: [ 71.617392][ T5319] copy_process+0x5d1/0x3d50 [ 71.617433][ T5319] [ 71.617441][ T5319] The buggy address belongs to the physical page: [ 71.617458][ T5319] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888023177ee0 pfn:0x23177 [ 71.617489][ T5319] memcg:ffff88807df9fe02 [ 71.617501][ T5319] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 71.617535][ T5319] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 71.617557][ T5319] raw: ffff888023177ee0 0000000000000000 00000001ffffffff ffff88807df9fe02 [ 71.617570][ T5319] page dumped because: kasan: bad access detected [ 71.617589][ T5319] page_owner tracks the page as allocated [ 71.617598][ T5319] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102dc2(GFP_HIGHUSER|__GFP_NOWARN|__GFP_ZERO), pid 5316, tgid 5316 (syz.1.2), ts 71280688561, free_ts 71022673512 [ 71.617638][ T5319] post_alloc_hook+0x1f3/0x230 [ 71.617662][ T5319] get_page_from_freelist+0x312a/0x3270 [ 71.617689][ T5319] __alloc_pages_noprof+0x29e/0x780 [ 71.617716][ T5319] alloc_pages_mpol_noprof+0x3e8/0x680 [ 71.617756][ T5319] __vmalloc_node_range_noprof+0xa40/0x1400 [ 71.617783][ T5319] dup_task_struct+0x444/0x8c0 [ 71.617813][ T5319] copy_process+0x5d1/0x3d50 [ 71.617842][ T5319] kernel_clone+0x226/0x8f0 [ 71.617873][ T5319] __se_sys_clone3+0x2cb/0x350 [ 71.617906][ T5319] do_syscall_64+0xf3/0x230 [ 71.617933][ T5319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.617958][ T5319] page last free pid 5237 tgid 5237 stack trace: [ 71.617971][ T5319] free_unref_page+0xc07/0xd90 [ 71.617995][ T5319] __put_partials+0xeb/0x130 [ 71.618017][ T5319] put_cpu_partial+0x17c/0x250 [ 71.618041][ T5319] __slab_free+0x2ea/0x3d0 [ 71.618065][ T5319] qlist_free_all+0x9a/0x140 [ 71.618089][ T5319] kasan_quarantine_reduce+0x14f/0x170 [ 71.618114][ T5319] __kasan_slab_alloc+0x23/0x80 [ 71.618141][ T5319] __kmalloc_noprof+0x1a6/0x400 [ 71.618172][ T5319] tomoyo_realpath_from_path+0xcf/0x5e0 [ 71.618207][ T5319] tomoyo_path_perm+0x2b7/0x740 [ 71.618234][ T5319] security_path_chroot+0x86/0x250 [ 71.618256][ T5319] __se_sys_chroot+0x1c5/0x2b0 [ 71.618285][ T5319] do_syscall_64+0xf3/0x230 [ 71.618312][ T5319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.618337][ T5319] [ 71.618343][ T5319] Memory state around the buggy address: [ 71.618356][ T5319] ffffc900044b7000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 71.618372][ T5319] ffffc900044b7080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 71.618388][ T5319] >ffffc900044b7100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 71.618401][ T5319] ^ [ 71.618413][ T5319] ffffc900044b7180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 71.618429][ T5319] ffffc900044b7200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 71.618441][ T5319] ================================================================== [ 71.618455][ T5319] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 71.618467][ T5319] CPU: 1 UID: 0 PID: 5319 Comm: syz.1.2 Not tainted 6.11.0-rc4-next-20240823-syzkaller #0 [ 71.618493][ T5319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 71.618507][ T5319] Call Trace: [ 71.618516][ T5319] [ 71.618526][ T5319] dump_stack_lvl+0x241/0x360 [ 71.618559][ T5319] ? __pfx_dump_stack_lvl+0x10/0x10 [ 71.618590][ T5319] ? __pfx__printk+0x10/0x10 [ 71.618614][ T5319] ? rcu_is_watching+0x15/0xb0 [ 71.618639][ T5319] ? lock_release+0xbf/0xa30 [ 71.618674][ T5319] ? vscnprintf+0x5d/0x90 [ 71.618708][ T5319] panic+0x349/0x880 [ 71.618736][ T5319] ? check_panic_on_warn+0x21/0xb0 [ 71.618766][ T5319] ? __pfx_panic+0x10/0x10 [ 71.618791][ T5319] ? do_raw_spin_unlock+0x13c/0x8b0 [ 71.618825][ T5319] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 71.618851][ T5319] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 71.618877][ T5319] ? print_report+0x502/0x550 [ 71.618909][ T5319] check_panic_on_warn+0x86/0xb0 [ 71.618933][ T5319] ? page_fault_oops+0x9c9/0xcc0 [ 71.618964][ T5319] end_report+0x77/0x160 [ 71.618993][ T5319] kasan_report+0x154/0x180 [ 71.619024][ T5319] ? page_fault_oops+0x9c9/0xcc0 [ 71.619058][ T5319] page_fault_oops+0x9c9/0xcc0 [ 71.619090][ T5319] ? __lock_acquire+0x1384/0x2050 [ 71.619126][ T5319] ? __pfx_page_fault_oops+0x10/0x10 [ 71.619158][ T5319] ? inat_get_opcode_attribute+0xc/0x50 [ 71.619193][ T5319] ? is_prefetch+0x4ed/0x780 [ 71.619222][ T5319] ? insn_get_prefixes+0xc85/0x1ac0 [ 71.619247][ T5319] ? insn_get_opcode+0x5a/0xe80 [ 71.619271][ T5319] ? __pfx_is_prefetch+0x10/0x10 [ 71.619303][ T5319] ? inat_get_opcode_attribute+0xc/0x50 [ 71.619343][ T5319] ? put_dec_trunc8+0x1f1/0x330 [ 71.619378][ T5319] ? skip_atoi+0xb6/0xd0 [ 71.619413][ T5319] ? format_decode+0x6bc/0x1bb0 [ 71.619450][ T5319] ? __pfx_format_decode+0x10/0x10 [ 71.619484][ T5319] ? __asan_memset+0x23/0x50 [ 71.619507][ T5319] ? vsnprintf+0x948/0x1da0 [ 71.619540][ T5319] ? __asan_memcpy+0x40/0x70 [ 71.619565][ T5319] ? vsnprintf+0x1ccd/0x1da0 [ 71.619601][ T5319] ? __pfx_vsnprintf+0x10/0x10 [ 71.619639][ T5319] ? rcu_is_watching+0x15/0xb0 [ 71.619662][ T5319] ? lock_acquire+0xe3/0x550 [ 71.619696][ T5319] ? vsnprintf+0x1cc3/0x1da0 [ 71.619732][ T5319] ? do_raw_spin_lock+0x14f/0x370 [ 71.619770][ T5319] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 71.619799][ T5319] ? info_print_prefix+0x204/0x310 [ 71.619833][ T5319] ? __pfx_info_print_prefix+0x10/0x10 [ 71.619868][ T5319] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 71.619894][ T5319] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 71.619920][ T5319] ? printk_get_next_message+0x990/0xbe0 [ 71.619953][ T5319] ? wq_watchdog_touch+0xef/0x180 [ 71.619981][ T5319] ? io_serial_in+0x50/0xb0 [ 71.620016][ T5319] ? serial8250_console_write+0x1373/0x1ed0 [ 71.620060][ T5319] ? __pfx_serial8250_console_write+0x10/0x10 [ 71.620095][ T5319] ? __pfx_lock_release+0x10/0x10 [ 71.620129][ T5319] ? do_raw_spin_lock+0x14f/0x370 [ 71.620163][ T5319] ? do_raw_spin_unlock+0x13c/0x8b0 [ 71.620194][ T5319] ? __pfx_univ8250_console_write+0x10/0x10 [ 71.620223][ T5319] ? console_flush_all+0x880/0xf50 [ 71.620255][ T5319] ? console_flush_all+0x147/0xf50 [ 71.620287][ T5319] ? __pfx_console_flush_all+0x10/0x10 [ 71.620318][ T5319] ? __pfx_lock_acquire+0x10/0x10 [ 71.620354][ T5319] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 71.620392][ T5319] ? console_unlock+0x13b/0x4d0 [ 71.620421][ T5319] ? __pfx_console_unlock+0x10/0x10 [ 71.620447][ T5319] ? _printk+0xd5/0x120 [ 71.620473][ T5319] ? _printk+0xd5/0x120 [ 71.620498][ T5319] ? __pfx___down_trylock_console_sem+0x10/0x10 [ 71.620530][ T5319] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 71.620563][ T5319] ? vprintk_emit+0x87d/0xa10 [ 71.620592][ T5319] ? __pfx_vprintk_emit+0x10/0x10 [ 71.620619][ T5319] ? _raw_spin_unlock_irq+0x23/0x50 [ 71.620644][ T5319] ? lockdep_hardirqs_on+0x99/0x150 [ 71.620671][ T5319] ? _raw_spin_unlock_irq+0x2e/0x50 [ 71.620695][ T5319] ? wait_for_completion+0x555/0x620 [ 71.620726][ T5319] ? _printk+0xd5/0x120 [ 71.620844][ T5319] ? __pfx_generic_exec_single+0x10/0x10 [ 71.620887][ T5319] ? __might_fault+0x51/0x120 [ 71.620915][ T5319] ? __pfx__printk+0x10/0x10 [ 71.620949][ T5319] ? __might_resched+0x3a8/0x780 [ 71.620983][ T5319] ? __pfx___might_resched+0x10/0x10 [ 71.621014][ T5319] ? __might_fault+0xaa/0x120 [ 71.621047][ T5319] ? __might_fault+0x72/0x120 [ 71.621075][ T5319] ? _copy_to_user+0x2a/0xb0 [ 71.621110][ T5319] ? msr_read+0x187/0x260 [ 71.621137][ T5319] ? __pfx_msr_read+0x10/0x10 [ 71.621164][ T5319] ? rw_verify_area+0x574/0x700 [ 71.621191][ T5319] ? __pfx_msr_read+0x10/0x10 [ 71.621218][ T5319] ? vfs_read+0x204/0xbd0 [ 71.621244][ T5319] ? __pfx_lock_release+0x10/0x10 [ 71.621281][ T5319] ? do_futex+0x33b/0x560 [ 71.621315][ T5319] ? __pfx_vfs_read+0x10/0x10 [ 71.621342][ T5319] ? __fget_files+0x29/0x470 [ 71.621379][ T5319] ? __fget_files+0x3f6/0x470 [ 71.621413][ T5319] ? __fget_files+0x29/0x470 [ 71.621452][ T5319] ? ksys_read+0x183/0x2b0 [ 71.621479][ T5319] ? __pfx_ksys_read+0x10/0x10 [ 71.621507][ T5319] ? do_syscall_64+0x100/0x230 [ 71.621538][ T5319] ? do_syscall_64+0xb6/0x230 [ 71.621569][ T5319] ? do_syscall_64+0xf3/0x230 [ 71.621609][ T5319] ? clear_bhb_loop+0x35/0x90 [ 71.621637][ T5319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.621670][ T5319] [ 71.624042][ T5319] Kernel Offset: disabled