last executing test programs: 778.62059ms ago: executing program 1 (id=2): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, @fallback=0x2d906d59d692afe5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000280)=[{0x3, 0x2, 0x43}, {0x4, 0x4, 0xa, 0x9}], 0x10, 0x7}, 0x94) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1869000002000000000000000300000018630000000000000001000000030000"], &(0x7f0000000400)='syzkaller\x00', 0xffff7fff, 0xd6, &(0x7f0000000440)=""/214, 0x0, 0x52, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x4, 0xc, 0x2, 0x5}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000580)=[0x1, 0x1], &(0x7f00000005c0)=[{0x0, 0x1, 0x3, 0x6}, {0x5, 0x2, 0x2, 0x7}, {0x3, 0x5, 0x6, 0x8}, {0x3, 0x4, 0xe, 0x6}, {0x3, 0x5, 0x7, 0xc}, {0x0, 0x4, 0xb, 0x1}, {0x5, 0x3, 0x8, 0x7}, {0x1, 0x1, 0xc, 0x7}], 0x10, 0x3}, 0x94) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_ext={0x1c, 0x23, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@generic={0x9, 0xe, 0x2, 0x8, 0xfffffffb}, @alu={0x7, 0x1, 0x0, 0x5, 0x2, 0x1, 0xffffffffffffffff}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x7}, @map_fd={0x18, 0x7, 0x1, 0x0, 0x1}, @jmp={0x5, 0x0, 0x3, 0x9, 0x3, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffbef}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000840)='GPL\x00', 0x400, 0x7b, &(0x7f00000009c0)=""/123, 0x41100, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000a40)={0x1, 0x7, 0x6, 0xdb0}, 0x10, 0x362f, 0xffffffffffffffff, 0x4, &(0x7f0000000a80)=[0xffffffffffffffff], &(0x7f0000000ac0)=[{0x0, 0x4, 0xc, 0x9}, {0x3, 0x5, 0xb, 0xa}, {0x0, 0x2, 0x0, 0x1}, {0x1, 0x1, 0x5, 0xb}], 0x10, 0x7}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffc}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc79, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10210, 0xfa8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="8c38f0ff10"], 0x0, 0x42, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffca4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1d38}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080), 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1d00416700000007004f3ac7b5948e0000249e070000000200000000d9cbead3cf52a87306267d8dce12411296099d2d38a6fe39d1b38cb08bfa24857ae6c3eefc8efa23c80798f93234023e34ad2da5c89363c37d8d2fa0bd6157a913a09b138b2a6fd497b70f75db73067f11550af03bc7f8fc008f0b9918e8bfb20198031ebf1a132e951231bc9f657b0c8eb7439dbc165f25491375db24e200", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r3) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="140000004f007f99de0dc892e8935b64ae384bac", 0x14}], 0x1}, 0x0) r5 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r5, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x4, 0x4}}, 0x80, 0x0}, 0x20008044) r6 = socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$kcm(r6, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x24004001) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x25, &(0x7f00000002c0)=r7, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r7, 0x1d, 0x1, 0x0, &(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0]}, 0x40) 311.87748ms ago: executing program 1 (id=5): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x8, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x94) 180.817087ms ago: executing program 1 (id=6): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff00000000000000001801000020646c4200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000002300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 0s ago: executing program 1 (id=7): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x53, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x14, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1fb49a98f4c93, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.139' (ED25519) to the list of known hosts. syzkaller login: [ 80.795696][ T5759] cgroup: Unknown subsys name 'net' [ 80.967046][ T5759] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.668222][ T5759] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.291346][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.301272][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.310982][ T5775] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.323673][ T5779] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.332161][ T5779] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.348399][ T5779] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.358296][ T5785] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.368291][ T5779] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.387126][ T5779] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.407497][ T5779] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.414986][ T5779] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.432044][ T5779] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.435697][ T5785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.440705][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.456379][ T5772] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.471813][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.479199][ T5779] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.483809][ T5786] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.494354][ T5786] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.500837][ T5782] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.505270][ T5786] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.510803][ T5782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.527153][ T5775] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.535138][ T5786] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.115934][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 85.142860][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 85.153318][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 85.346096][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 85.372382][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.380546][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.388277][ T5770] bridge_slave_0: entered allmulticast mode [ 85.395499][ T5770] bridge_slave_0: entered promiscuous mode [ 85.435409][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.444941][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.452764][ T5777] bridge_slave_0: entered allmulticast mode [ 85.460548][ T5777] bridge_slave_0: entered promiscuous mode [ 85.469418][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.476583][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.484224][ T5777] bridge_slave_1: entered allmulticast mode [ 85.491767][ T5777] bridge_slave_1: entered promiscuous mode [ 85.499530][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.506707][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.514067][ T5770] bridge_slave_1: entered allmulticast mode [ 85.521837][ T5770] bridge_slave_1: entered promiscuous mode [ 85.603019][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.616294][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.626407][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.635220][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.643108][ T5769] bridge_slave_0: entered allmulticast mode [ 85.650416][ T5769] bridge_slave_0: entered promiscuous mode [ 85.697840][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.705084][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.713092][ T5769] bridge_slave_1: entered allmulticast mode [ 85.721984][ T5769] bridge_slave_1: entered promiscuous mode [ 85.731254][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.747538][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.830127][ T5770] team0: Port device team_slave_0 added [ 85.867477][ T5777] team0: Port device team_slave_0 added [ 85.876103][ T5770] team0: Port device team_slave_1 added [ 85.888336][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.901578][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.912086][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.919468][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.926697][ T5776] bridge_slave_0: entered allmulticast mode [ 85.935044][ T5776] bridge_slave_0: entered promiscuous mode [ 85.944363][ T5777] team0: Port device team_slave_1 added [ 85.993598][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.000937][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.008288][ T5776] bridge_slave_1: entered allmulticast mode [ 86.016171][ T5776] bridge_slave_1: entered promiscuous mode [ 86.044050][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.051189][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.077250][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.127801][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.134877][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.160951][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.179800][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.186805][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.213785][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.229771][ T5769] team0: Port device team_slave_0 added [ 86.251827][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.265584][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.281791][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.308238][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.322116][ T5769] team0: Port device team_slave_1 added [ 86.341944][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.388213][ T5776] team0: Port device team_slave_0 added [ 86.436848][ T5776] team0: Port device team_slave_1 added [ 86.456407][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.465770][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.493166][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.507517][ T5775] Bluetooth: hci1: command tx timeout [ 86.515724][ T5777] hsr_slave_0: entered promiscuous mode [ 86.522648][ T5777] hsr_slave_1: entered promiscuous mode [ 86.543972][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.552821][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.582080][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.593409][ T5775] Bluetooth: hci2: command tx timeout [ 86.593831][ T5775] Bluetooth: hci0: command tx timeout [ 86.605405][ T5782] Bluetooth: hci3: command tx timeout [ 86.642298][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.649715][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.676190][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.690196][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.697312][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.723348][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.767277][ T5770] hsr_slave_0: entered promiscuous mode [ 86.773891][ T5770] hsr_slave_1: entered promiscuous mode [ 86.780670][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.789416][ T5770] Cannot create hsr debugfs directory [ 86.888892][ T5769] hsr_slave_0: entered promiscuous mode [ 86.895541][ T5769] hsr_slave_1: entered promiscuous mode [ 86.902134][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.909785][ T5769] Cannot create hsr debugfs directory [ 86.956631][ T5776] hsr_slave_0: entered promiscuous mode [ 86.964094][ T5776] hsr_slave_1: entered promiscuous mode [ 86.970735][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.978629][ T5776] Cannot create hsr debugfs directory [ 87.464911][ T5777] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.492197][ T5777] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.534455][ T5777] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.552718][ T5777] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.641201][ T5770] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.676412][ T5770] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.709313][ T5770] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.722761][ T5770] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.834682][ T5776] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.859022][ T5776] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.874098][ T5776] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.885215][ T5776] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.985370][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.031937][ T5769] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.044347][ T5769] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.056306][ T5769] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.090102][ T5769] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.121422][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.156538][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.163969][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.212876][ T4525] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.220183][ T4525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.304780][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.378051][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.390774][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.451674][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.459122][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.495174][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.502480][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.529780][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.582411][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.597878][ T5782] Bluetooth: hci1: command tx timeout [ 88.652933][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.660174][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.667726][ T5782] Bluetooth: hci3: command tx timeout [ 88.673198][ T5782] Bluetooth: hci0: command tx timeout [ 88.679519][ T5775] Bluetooth: hci2: command tx timeout [ 88.723391][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.734974][ T141] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.742279][ T141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.774668][ T4525] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.781894][ T4525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.821628][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.828929][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.957829][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.101551][ T5777] veth0_vlan: entered promiscuous mode [ 89.153899][ T5777] veth1_vlan: entered promiscuous mode [ 89.289633][ T5777] veth0_macvtap: entered promiscuous mode [ 89.320367][ T5777] veth1_macvtap: entered promiscuous mode [ 89.424776][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.459422][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.492562][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.518758][ T5777] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.527839][ T5777] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.536592][ T5777] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.546707][ T5777] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.619995][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.665441][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.731609][ T5776] veth0_vlan: entered promiscuous mode [ 89.752285][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.765746][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.834886][ T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.840227][ T5776] veth1_vlan: entered promiscuous mode [ 89.844681][ T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.896594][ T5769] veth0_vlan: entered promiscuous mode [ 89.970408][ T5776] veth0_macvtap: entered promiscuous mode [ 90.010581][ T5769] veth1_vlan: entered promiscuous mode [ 90.034503][ T5776] veth1_macvtap: entered promiscuous mode [ 90.116078][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.135003][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.149422][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.172969][ T5770] veth0_vlan: entered promiscuous mode [ 90.182771][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.209868][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.210645][ C1] hrtimer: interrupt took 94896 ns [ 90.230602][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.243683][ T5769] veth0_macvtap: entered promiscuous mode [ 90.260994][ T5769] veth1_macvtap: entered promiscuous mode [ 90.289842][ T5770] veth1_vlan: entered promiscuous mode [ 90.310131][ T5776] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.322535][ T5776] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.333965][ T5776] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.346594][ T5776] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.421678][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.452029][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.483171][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.508359][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.528655][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.551796][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.567279][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.580723][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.594653][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.633348][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.654915][ T5769] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.667941][ T52] Bluetooth: hci1: command tx timeout [ 90.678897][ T5867] Driver unsupported XDP return value 0 on prog (id 3) dev N/A, expect packet loss! [ 90.685464][ T5769] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.704102][ T5769] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.715779][ T5769] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.747457][ T52] Bluetooth: hci0: command tx timeout [ 90.753042][ T52] Bluetooth: hci3: command tx timeout [ 90.758789][ T5775] Bluetooth: hci2: command tx timeout [ 90.840722][ T5869] [ 90.843285][ T5869] ============================= [ 90.848665][ T5869] WARNING: suspicious RCU usage [ 90.853575][ T5869] syzkaller #0 Not tainted [ 90.858423][ T5869] ----------------------------- [ 90.863373][ T5869] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 90.872630][ T5869] [ 90.872630][ T5869] other info that might help us debug this: [ 90.872630][ T5869] [ 90.883355][ T5869] [ 90.883355][ T5869] rcu_scheduler_active = 2, debug_locks = 1 [ 90.891678][ T5869] 1 lock held by syz.1.7/5869: [ 90.896505][ T5869] #0: ffffffff8cd30180 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x70 [ 90.907742][ T5869] [ 90.907742][ T5869] stack backtrace: [ 90.912879][ T5770] veth0_macvtap: entered promiscuous mode [ 90.913694][ T5869] CPU: 0 PID: 5869 Comm: syz.1.7 Not tainted syzkaller #0 [ 90.923123][ T1320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.926547][ T5869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 90.944539][ T5869] Call Trace: [ 90.947891][ T5869] [ 90.950912][ T5869] dump_stack_lvl+0x16c/0x230 [ 90.955669][ T5869] ? show_regs_print_info+0x20/0x20 [ 90.961025][ T5869] ? load_image+0x3b0/0x3b0 [ 90.965602][ T5869] ? __lock_acquire+0x1260/0x7c80 [ 90.970701][ T5869] lockdep_rcu_suspicious+0x1e1/0x300 [ 90.976143][ T5869] get_callchain_entry+0x2a9/0x3c0 [ 90.977316][ T1320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.981293][ T5869] get_perf_callchain+0xbc/0x4d0 [ 90.981322][ T5869] ? verify_lock_unused+0x140/0x140 [ 90.999012][ T5869] ? put_callchain_entry+0xb0/0xb0 [ 91.004192][ T5869] ? plist_add+0x3d8/0x490 [ 91.006831][ T5770] veth1_macvtap: entered promiscuous mode [ 91.008659][ T5869] __bpf_get_stack+0x2d7/0x510 [ 91.008701][ T5869] ? stack_map_get_build_id_offset+0x720/0x720 [ 91.025469][ T5869] ? __cant_sleep+0x210/0x210 [ 91.030215][ T5869] ? bpf_prog_d43750871481577d+0x45/0x49 [ 91.036002][ T5869] bpf_get_stack_raw_tp+0x1a9/0x210 [ 91.041338][ T5869] bpf_prog_d43750871481577d+0x45/0x49 [ 91.046830][ T5869] bpf_prog_run_pin_on_cpu+0x64/0x150 [ 91.052244][ T5869] bpf_prog_test_run_syscall+0x311/0x490 [ 91.057919][ T5869] ? sock_gen_cookie+0x60/0x60 [ 91.062731][ T5869] ? sock_gen_cookie+0x60/0x60 [ 91.067538][ T5869] bpf_prog_test_run+0x321/0x390 [ 91.072513][ T5869] __sys_bpf+0x440/0x800 [ 91.076789][ T5869] ? bpf_link_show_fdinfo+0x350/0x350 [ 91.082202][ T5869] ? lock_chain_count+0x20/0x20 [ 91.087094][ T5869] __x64_sys_bpf+0x7c/0x90 [ 91.091551][ T5869] do_syscall_64+0x55/0xb0 [ 91.096025][ T5869] ? clear_bhb_loop+0x40/0x90 [ 91.100734][ T5869] ? clear_bhb_loop+0x40/0x90 [ 91.105442][ T5869] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 91.111485][ T5869] RIP: 0033:0x7f9f3598f749 [ 91.116021][ T5869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.135668][ T5869] RSP: 002b:00007f9f36838038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 91.144231][ T5869] RAX: ffffffffffffffda RBX: 00007f9f35be5fa0 RCX: 00007f9f3598f749 [ 91.152242][ T5869] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 91.160255][ T5869] RBP: 00007f9f35a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 91.168285][ T5869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.176287][ T5869] R13: 00007f9f35be6038 R14: 00007f9f35be5fa0 R15: 00007ffffd37ea58 [ 91.184299][ T5869] [ 91.273828][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.285588][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.295754][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.307615][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.319635][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.330610][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.352649][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.406321][ T1320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.415308][ T1320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.442557][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.453289][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.463772][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.483539][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.493830][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.504464][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.516700][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.533804][ T5770] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.542811][ T5770] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.558076][ T5770] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.566858][ T5770] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.587893][ T1320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.598844][ T1320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.700913][ T4525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.731415][ T4525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.805775][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.832919][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.895376][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.905264][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.277165][ T787] cfg80211: failed to load regulatory.db [ 92.747869][ T52] Bluetooth: hci1: command tx timeout [ 92.828400][ T52] Bluetooth: hci0: command tx timeout [ 92.828652][ T5775] Bluetooth: hci3: command tx timeout [ 92.833886][ T5782] Bluetooth: hci2: command tx timeout