last executing test programs: 396.940588ms ago: executing program 0 (id=1): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x28, 0x1, 0x0) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x4000085) msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, &(0x7f0000000180)={{0x80000000, 0xee01, 0xee01, 0xfff, 0xc, 0x40, 0x7}, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x8, 0x7ff, 0x3ff, 0x5, 0xa, 0xf9eb, 0x4, 0x3, 0x3ff, @inferred=0xffffffffffffffff, @raw=0x7fffffff}) setfsuid$auto(0xee00) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x1d, 0x2, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x44, r3, 0x1b, 0x74bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0xc, 0x3, 0x0, 0x1, [@nested={0x8, 0x6, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_HASH={0xc, 0xb, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) bpf$auto(0x80000400, &(0x7f0000000000)=@bpf_attr_3={0x9, 0x9, 0xffffffffffff7fff, 0x5, 0x1fe, 0x2, 0x1, 0x884, 0x4007, "0108a5172d53c213b43038e1423b2178", 0x0, 0x9, 0xffffffffffffffff, 0x81, 0x7fffffffffffffff, 0x89, 0x9, 0xffff, 0x3ff, 0x7, @attach_btf_obj_fd, 0x440, 0xa, 0x7, 0x1ff, 0x9}, 0x9) bind$auto(0x3, &(0x7f0000000040)=@can, 0x6a) close_range$auto(0x2, 0x8, 0x0) setfsuid$auto(0xee01) r4 = setfsgid$auto(0xee01) setresgid$auto(r4, 0x0, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000040)='\\\x00', 0x2) keyctl$auto(0x1f, 0x1, 0x6, r4, 0x402) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 0s ago: executing program 2 (id=3): unshare$auto(0x40000080) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) pipe2$auto(0x0, 0x80) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r0, 0x8000) ioctl$auto_BLKBSZSET(r0, 0x40081271, &(0x7f00000000c0)=0x10000) unshare$auto(0x80000001) setns(0xc9, 0x0) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, 0x0, 0xc1) accept$auto(0x3, 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) bind$auto(r1, 0x0, 0x6) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x240140, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mincore$auto(0x1000, 0x8001, 0x0) ioctl$auto(0x4000000000000c8, 0x400454d1, 0x6) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) bind$auto(0xffffffffffffffff, 0x0, 0x40000080) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x26, 0x8001, 0x0, 0xfffffffffffffffd, 0x0) setns(0xc9, 0x40000000) r2 = socket(0x8, 0x80000, 0x80000003) setsockopt$auto_SO_BROADCAST(r2, 0x71, 0x42020054, 0x0, 0x2) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x20000, 0x0) io_uring_enter$auto(0xffffffffffffffff, 0x9, 0x820e, 0x8b, 0x0, 0x18) close_range$auto(0x2, 0x8, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.239' (ED25519) to the list of known hosts. [ 73.817505][ T5613] cgroup: Unknown subsys name 'net' [ 73.921061][ T5613] cgroup: Unknown subsys name 'cpuset' [ 73.929929][ T5613] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.441239][ T5613] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.460798][ T5631] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.470722][ T5634] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.481185][ T5636] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.489689][ T5636] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.503524][ T5640] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.511199][ T5640] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.522111][ T5642] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.531766][ T5640] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.537333][ T5634] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.540146][ T5642] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.548119][ T5640] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.555287][ T5642] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.561837][ T5640] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.571019][ T5642] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.575976][ T5640] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.585772][ T5642] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.590036][ T5640] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.606026][ T5634] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.608085][ T5631] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.615697][ T5640] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.154322][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.161670][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.170469][ T5627] bridge_slave_0: entered allmulticast mode [ 79.178351][ T5627] bridge_slave_0: entered promiscuous mode [ 79.206475][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.213815][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.221294][ T5625] bridge_slave_0: entered allmulticast mode [ 79.228662][ T5625] bridge_slave_0: entered promiscuous mode [ 79.236632][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.244023][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.251588][ T5625] bridge_slave_1: entered allmulticast mode [ 79.258830][ T5625] bridge_slave_1: entered promiscuous mode [ 79.265709][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.272887][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.280589][ T5627] bridge_slave_1: entered allmulticast mode [ 79.287731][ T5627] bridge_slave_1: entered promiscuous mode [ 79.382739][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.394786][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.425637][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.437910][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.456451][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.463841][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.471438][ T5626] bridge_slave_0: entered allmulticast mode [ 79.478983][ T5626] bridge_slave_0: entered promiscuous mode [ 79.505536][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.512859][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.520390][ T5632] bridge_slave_0: entered allmulticast mode [ 79.527727][ T5632] bridge_slave_0: entered promiscuous mode [ 79.535843][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.543108][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.550411][ T5626] bridge_slave_1: entered allmulticast mode [ 79.557481][ T5626] bridge_slave_1: entered promiscuous mode [ 79.584068][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.591407][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.598895][ T5632] bridge_slave_1: entered allmulticast mode [ 79.605947][ T5632] bridge_slave_1: entered promiscuous mode [ 79.618256][ T5640] Bluetooth: hci3: command tx timeout [ 79.636828][ T5625] team0: Port device team_slave_0 added [ 79.645262][ T5627] team0: Port device team_slave_0 added [ 79.662533][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.673930][ T5625] team0: Port device team_slave_1 added [ 79.682125][ T5627] team0: Port device team_slave_1 added [ 79.698776][ T5640] Bluetooth: hci0: command tx timeout [ 79.700964][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.705009][ T4944] Bluetooth: hci2: command tx timeout [ 79.719692][ T5629] Bluetooth: hci1: command tx timeout [ 79.753623][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.765720][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.795782][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.802979][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.829067][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.862702][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.869875][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.896660][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.909134][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.916091][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.942338][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.954867][ T5626] team0: Port device team_slave_0 added [ 79.970037][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.977079][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.003146][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.026036][ T5626] team0: Port device team_slave_1 added [ 80.033422][ T5632] team0: Port device team_slave_0 added [ 80.060489][ T5632] team0: Port device team_slave_1 added [ 80.115016][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.122048][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.148306][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.171387][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.178522][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.204827][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.225367][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.232648][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.258791][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.276638][ T5625] hsr_slave_0: entered promiscuous mode [ 80.283231][ T5625] hsr_slave_1: entered promiscuous mode [ 80.290491][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.297526][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.323561][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.340193][ T5627] hsr_slave_0: entered promiscuous mode [ 80.346484][ T5627] hsr_slave_1: entered promiscuous mode [ 80.352917][ T5627] debugfs: 'hsr0' already exists in 'hsr' [ 80.358825][ T5627] Cannot create hsr debugfs directory [ 80.427832][ T5626] hsr_slave_0: entered promiscuous mode [ 80.434111][ T5626] hsr_slave_1: entered promiscuous mode [ 80.440595][ T5626] debugfs: 'hsr0' already exists in 'hsr' [ 80.446329][ T5626] Cannot create hsr debugfs directory [ 80.501988][ T5632] hsr_slave_0: entered promiscuous mode [ 80.508492][ T5632] hsr_slave_1: entered promiscuous mode [ 80.514722][ T5632] debugfs: 'hsr0' already exists in 'hsr' [ 80.520725][ T5632] Cannot create hsr debugfs directory [ 80.935845][ T5625] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.954259][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.964456][ T5625] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.974388][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.984115][ T5625] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.993644][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.011189][ T5625] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.020724][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.093657][ T5627] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.109300][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.120366][ T5627] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.131314][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.154930][ T5627] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.166430][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.185662][ T5627] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.195694][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.271044][ T5626] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.283456][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.292815][ T5626] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.304336][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.320828][ T5626] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.330288][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.340120][ T5626] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.349865][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.446136][ T5632] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.456564][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.472222][ T5632] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.481832][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.491041][ T5632] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.501697][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.515415][ T5632] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.526431][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.560579][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.640888][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.669572][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.677114][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.695709][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.702692][ T4944] Bluetooth: hci3: command tx timeout [ 81.715388][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.722626][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.786699][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.793386][ T4944] Bluetooth: hci2: command tx timeout [ 81.793438][ T4944] Bluetooth: hci0: command tx timeout [ 81.793474][ T4944] Bluetooth: hci1: command tx timeout [ 81.815621][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.836500][ T1180] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.843635][ T1180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.872611][ T1180] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.879774][ T1180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.919956][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.954426][ T1180] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.961575][ T1180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.983806][ T1180] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.990989][ T1180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.009218][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.075471][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.124955][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.132189][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.190473][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.198176][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.948063][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.037183][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.157671][ T5627] veth0_vlan: entered promiscuous mode [ 83.221807][ T5627] veth1_vlan: entered promiscuous mode [ 83.269705][ T5625] veth0_vlan: entered promiscuous mode [ 83.333791][ T5625] veth1_vlan: entered promiscuous mode [ 83.351707][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.361820][ T5627] veth0_macvtap: entered promiscuous mode [ 83.383983][ T5627] veth1_macvtap: entered promiscuous mode [ 83.397220][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.431706][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.463585][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.483110][ T5625] veth0_macvtap: entered promiscuous mode [ 83.501732][ T5625] veth1_macvtap: entered promiscuous mode [ 83.571729][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.581389][ T81] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.617286][ T5626] veth0_vlan: entered promiscuous mode [ 83.630092][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.665758][ T5632] veth0_vlan: entered promiscuous mode [ 83.677365][ T5626] veth1_vlan: entered promiscuous mode [ 83.709150][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.719271][ T1180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.730347][ T1180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.751838][ T5632] veth1_vlan: entered promiscuous mode [ 83.778928][ T5640] Bluetooth: hci3: command tx timeout [ 83.805578][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.814736][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.858180][ T5640] Bluetooth: hci1: command tx timeout [ 83.863944][ T4944] Bluetooth: hci0: command tx timeout [ 83.863992][ T5629] Bluetooth: hci2: command tx timeout [ 83.904501][ T5626] veth0_macvtap: entered promiscuous mode [ 83.937210][ T5626] veth1_macvtap: entered promiscuous mode [ 83.972435][ T5627] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.990442][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.004089][ T5632] veth0_macvtap: entered promiscuous mode [ 84.023701][ T5632] veth1_macvtap: entered promiscuous mode [ 84.038334][ T1120] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.048186][ T1120] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.066265][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.068760][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.085093][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.110330][ T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.143719][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.168278][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.226438][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.256156][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.265869][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.276389][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.298206][ T81] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.414311][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.426844][ T1180] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.715868][ T5782] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x1f pfn:0x5c036 [ 84.742889][ T5782] memcg:ffff888034cee800 [ 84.758158][ T5782] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 84.789563][ T5782] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 84.825654][ T5782] raw: 000000000000001f 0000000000000000 00000001ffffffff ffff888034cee800 [ 84.861817][ T5782] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 84.887914][ T5782] page_owner tracks the page as allocated [ 84.919663][ T5782] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5782, tgid 5779 (syz.2.3), ts 84715820157, free_ts 84712210360 [ 84.953485][ T5782] post_alloc_hook+0xfd/0x120 [ 84.958642][ T5782] get_page_from_freelist+0xf48/0x3530 [ 84.965440][ T5782] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 84.972531][ T5782] alloc_pages_mpol+0x1fb/0x540 [ 84.977524][ T5782] folio_alloc_noprof+0x22/0x250 [ 85.007938][ T5782] filemap_alloc_folio_noprof.part.0+0x377/0x450 [ 85.040161][ T5782] filemap_alloc_folio_noprof+0x5e/0x80 [ 85.056782][ T5782] page_cache_ra_order+0x539/0xed0 [ 85.067787][ T5782] filemap_fault+0x1943/0x3130 [ 85.073587][ T5782] __do_fault+0x10b/0x440 [ 85.079525][ T5782] do_fault+0xeb2/0x1750 [ 85.083857][ T5782] __handle_mm_fault+0x187d/0x2a00 [ 85.089492][ T5782] handle_mm_fault+0x37b/0xa30 [ 85.094457][ T5782] __get_user_pages+0x1178/0x32a0 [ 85.102570][ T5782] populate_vma_page_range+0x267/0x3f0 [ 85.108170][ T5782] __mm_populate+0x107/0x3a0 [ 85.112941][ T5782] page last free pid 5784 tgid 5779 stack trace: [ 85.119602][ T5782] free_unref_folios+0xa44/0x1710 [ 85.126055][ T5782] folios_put_refs+0x585/0xaa0 [ 85.131464][ T5782] truncate_inode_pages_range+0x30c/0x1050 [ 85.137486][ T5782] set_blocksize+0x2d1/0x460 [ 85.158923][ T5782] blkdev_bszset+0x19b/0x240 [ 85.172587][ T5782] blkdev_ioctl+0x513/0x6f0 [ 85.184732][ T5782] __x64_sys_ioctl+0x18e/0x210 [ 85.197154][ T5782] do_syscall_64+0x115/0x840 [ 85.201869][ T5782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.213754][ T5782] ------------[ cut here ]------------ [ 85.219708][ T5782] kernel BUG at mm/filemap.c:858! [ 85.230199][ T5782] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 85.236306][ T5626] ieee80211 phy8: Selected rate control algorithm 'minstrel_ht' [ 85.236484][ T5782] CPU: 0 UID: 0 PID: 5782 Comm: syz.2.3 Not tainted syzkaller #0 PREEMPT(full) [ 85.253098][ T5782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 85.263168][ T5782] RIP: 0010:__filemap_add_folio+0xfc2/0x12a0 [ 85.269181][ T5782] Code: 3d c2 ff 48 c7 c6 e0 89 dd 8b 4c 89 ef e8 f6 ee 12 00 90 0f 0b e8 0e 3d c2 ff 48 c7 c6 40 8a dd 8b 4c 89 ef e8 df ee 12 00 90 <0f> 0b e8 f7 3c c2 ff 48 c7 c6 c0 8a dd 8b 4c 89 ef e8 c8 ee 12 00 [ 85.288809][ T5782] RSP: 0018:ffffc90004fcf3f8 EFLAGS: 00010246 [ 85.294906][ T5782] RAX: 0000000000080000 RBX: 0000000000112cc0 RCX: ffffc900076e1000 [ 85.302892][ T5782] RDX: 0000000000080000 RSI: ffffffff825a6368 RDI: ffff8880325542c4 [ 85.310872][ T5782] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 85.318854][ T5782] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000004 [ 85.326834][ T5782] R13: ffffea0001700d80 R14: 0000000000000210 R15: 0000000000000000 [ 85.334829][ T5782] FS: 00007fbcf49a36c0(0000) GS:ffff888123ddf000(0000) knlGS:0000000000000000 [ 85.343787][ T5782] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.350401][ T5782] CR2: 0000200000a8d000 CR3: 0000000077ab2000 CR4: 00000000003526f0 [ 85.358753][ T5782] Call Trace: [ 85.362086][ T5782] [ 85.365038][ T5782] ? __pfx___filemap_add_folio+0x10/0x10 [ 85.370725][ T5782] filemap_add_folio+0x1d3/0x630 [ 85.375711][ T5782] ? __lock_acquire+0x49f/0x1a40 [ 85.380700][ T5782] ? __pfx_filemap_add_folio+0x10/0x10 [ 85.386193][ T5782] ? __pfx___css_rstat_updated+0x10/0x10 [ 85.391880][ T5782] page_cache_ra_order+0x602/0xed0 [ 85.397055][ T5782] filemap_fault+0x1943/0x3130 [ 85.401857][ T5782] ? __pfx_filemap_fault+0x10/0x10 [ 85.407004][ T5782] ? blk_cgroup_congested+0x136/0x270 [ 85.412408][ T5782] ? blk_cgroup_congested+0x136/0x270 [ 85.417807][ T5782] ? __pfx_filemap_map_pages+0x10/0x10 [ 85.423294][ T5782] __do_fault+0x10b/0x440 [ 85.427660][ T5782] do_fault+0xeb2/0x1750 [ 85.431957][ T5782] __handle_mm_fault+0x187d/0x2a00 [ 85.437098][ T5782] ? mark_held_locks+0x40/0x70 [ 85.441903][ T5782] ? __pfx___handle_mm_fault+0x10/0x10 [ 85.447382][ T5782] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 85.453184][ T5782] ? rcu_preempt_deferred_qs_irqrestore+0x4fd/0xb90 [ 85.459767][ T5782] ? pte_offset_map_lock+0x101/0x320 [ 85.465041][ T5782] ? follow_page_pte+0x4d0/0x13f0 [ 85.470058][ T5782] handle_mm_fault+0x37b/0xa30 [ 85.474806][ T5782] __get_user_pages+0x1178/0x32a0 [ 85.479840][ T5782] ? __pfx___get_user_pages+0x10/0x10 [ 85.485206][ T5782] populate_vma_page_range+0x267/0x3f0 [ 85.488758][ T1180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.490662][ T5782] ? __pfx_populate_vma_page_range+0x10/0x10 [ 85.499598][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.504426][ T5782] ? __pfx_find_vma_intersection+0x10/0x10 [ 85.512271][ T1180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.518009][ T5782] ? do_mmap+0x93f/0x12f0 [ 85.518048][ T5782] __mm_populate+0x107/0x3a0 [ 85.525338][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.529624][ T5782] ? __pfx___mm_populate+0x10/0x10 [ 85.546553][ T5782] ? up_write+0x2e5/0x5c0 [ 85.550875][ T5782] vm_mmap_pgoff+0x37f/0x470 [ 85.555459][ T5782] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 85.560599][ T5782] ? __fget_files+0x215/0x3d0 [ 85.565259][ T5782] ? __fget_files+0x21f/0x3d0 [ 85.569919][ T5782] ksys_mmap_pgoff+0x3cb/0x610 [ 85.574672][ T5782] ? __x64_sys_futex+0x358/0x4d0 [ 85.579602][ T5782] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 85.584890][ T5782] ? xfd_validate_state+0x129/0x190 [ 85.590098][ T5782] __x64_sys_mmap+0x125/0x190 [ 85.594771][ T5782] do_syscall_64+0x115/0x840 [ 85.599356][ T5782] ? clear_bhb_loop+0x40/0x90 [ 85.604018][ T5782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.609893][ T5782] RIP: 0033:0x7fbcf3b9e019 [ 85.614320][ T5782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.633913][ T5782] RSP: 002b:00007fbcf49a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 85.642316][ T5782] RAX: ffffffffffffffda RBX: 00007fbcf3e26090 RCX: 00007fbcf3b9e019 [ 85.650284][ T5782] RDX: 0000000000000ffb RSI: 0000000000810004 RDI: 0000000000000000 [ 85.658237][ T5782] RBP: 00007fbcf3c3500c R08: 0000000000000005 R09: 0000000000008000 [ 85.666189][ T5782] R10: 0008000000008012 R11: 0000000000000246 R12: 0000000000000000 [ 85.674148][ T5782] R13: 00007fbcf3e26128 R14: 00007fbcf3e26090 R15: 00007fff4e7088c8 [ 85.682121][ T5782] [ 85.685132][ T5782] Modules linked in: [ 85.691008][ T5782] ---[ end trace 0000000000000000 ]--- [ 85.709001][ T5782] RIP: 0010:__filemap_add_folio+0xfc2/0x12a0 [ 85.715711][ T5782] Code: 3d c2 ff 48 c7 c6 e0 89 dd 8b 4c 89 ef e8 f6 ee 12 00 90 0f 0b e8 0e 3d c2 ff 48 c7 c6 40 8a dd 8b 4c 89 ef e8 df ee 12 00 90 <0f> 0b e8 f7 3c c2 ff 48 c7 c6 c0 8a dd 8b 4c 89 ef e8 c8 ee 12 00 [ 85.735848][ T5782] RSP: 0018:ffffc90004fcf3f8 EFLAGS: 00010246 [ 85.742748][ T5782] RAX: 0000000000080000 RBX: 0000000000112cc0 RCX: ffffc900076e1000 [ 85.751195][ T5782] RDX: 0000000000080000 RSI: ffffffff825a6368 RDI: ffff8880325542c4 [ 85.759670][ T5782] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 85.769885][ T5782] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000004 [ 85.778513][ T5782] R13: ffffea0001700d80 R14: 0000000000000210 R15: 0000000000000000 [ 85.786822][ T5782] FS: 00007fbcf49a36c0(0000) GS:ffff888123ddf000(0000) knlGS:0000000000000000 [ 85.796038][ T5782] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.802865][ T5782] CR2: 00007ff38eaeb708 CR3: 0000000077ab2000 CR4: 00000000003526f0 [ 85.811054][ T5782] Kernel panic - not syncing: Fatal exception [ 85.817261][ T5782] Kernel Offset: disabled [ 85.821573][ T5782] Rebooting in 86400 seconds..