last executing test programs: 1.474659058s ago: executing program 3 (id=4): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x1, 0x1000000000000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x18, 0x0, 0x0, 0x0, 0x5, 0x2], 0xeeee8000, 0x8340}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000d00)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.126612942s ago: executing program 2 (id=3): socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) r0 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$kcm(0x10, 0x400000002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_VENDOR(r2, &(0x7f00000010c0)={0x0, 0x0, 0x0}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, 0x0, 0x946331bef812bdab) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) close(0xffffffffffffffff) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, &(0x7f0000000500)={0x1, [0x7f, 0x7f, 0x0, 0x1ff, 0x1, 0x8, 0x8, 0x200, 0x2, 0x1, 0x400, 0x7, 0x81, 0x800, 0x7, 0x0, 0xf, 0x9, 0x3, 0xfff7, 0x8, 0x8, 0x7fff, 0x4, 0x1, 0x2, 0x7, 0x0, 0x6, 0x5, 0x1, 0x3, 0xf, 0xfff, 0x9ac, 0x5, 0x0, 0x2, 0x1, 0x1, 0x1, 0x10, 0x3, 0x8, 0x88, 0x1, 0x3, 0x59], 0xe}) socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg(r3, &(0x7f0000000540)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0xfffe, 0x2, 0x0, 0x3, {0xa, 0x4e22, 0x20064a, @dev={0xfe, 0x80, '\x00', 0x15}, 0x8}}}, 0x80, 0x0}, 0x10040800) ioctl$sock_SIOCINQ(r3, 0x541b, 0x0) 956.865644ms ago: executing program 3 (id=5): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) 952.57779ms ago: executing program 2 (id=6): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000002a00)=ANY=[@ANYBLOB="8f6dcb5707e61096f37538e486dd6372ce23ff892f", @ANYBLOB="3339e0a0c092dd8535065b4ca3291b983ed8e2322c7c5f386037d69b5f080cec60e7"], 0xffbf) 0s ago: executing program 3 (id=7): openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x4001) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x7a) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004840) r3 = syz_open_dev$I2C(0x0, 0x1, 0x105402) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="000426bd7000fcdbdf250c00000034000980080002000010000008000100fbffffff08000100ffffff7f08000200d63c0000080001000400000008000100090000002c0101800d0001007564703a73797a3200000000380004001400010002004e23ac1e00010000000000000000200002000a004e227ffffffffc00000000000000000000000000000001000080080003000400000038000400200001000a004e2000000009ff020000000000000000000000000001040000001400020002004e240000000000000000000000004c00028008000300ff0100000800040001040000080003000900000008000200f6000000080001001c0000000800020001000000080001001a0000000800030009000000080001001700000054000280080001001c00000008"], 0x2d0}, 0x1, 0x0, 0x0, 0x40408c1}, 0x40) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x8a2b81) write$char_usb(r4, &(0x7f0000000040)="e2", 0x12d8) ioctl$I2C_RDWR(r3, 0x707, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.10' (ED25519) to the list of known hosts. [ 81.726429][ T5820] cgroup: Unknown subsys name 'net' [ 81.862579][ T5820] cgroup: Unknown subsys name 'cpuset' [ 81.872158][ T5820] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.614773][ T5820] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.543062][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.559487][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.568137][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.569662][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.586493][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.587073][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.595693][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.605063][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.613543][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.619692][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.628220][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.637840][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.656446][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.658640][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.676326][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.686112][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.696680][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.707085][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.724781][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.747587][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.201624][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 88.440003][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.447376][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.457460][ T5836] bridge_slave_0: entered allmulticast mode [ 88.466909][ T5836] bridge_slave_0: entered promiscuous mode [ 88.506424][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.515619][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.523503][ T5836] bridge_slave_1: entered allmulticast mode [ 88.535950][ T5836] bridge_slave_1: entered promiscuous mode [ 88.594901][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.609318][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 88.630481][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 88.645252][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.730570][ T5836] team0: Port device team_slave_0 added [ 88.775347][ T5836] team0: Port device team_slave_1 added [ 88.845325][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 88.874109][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.882102][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.911180][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.957082][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.965071][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.994019][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.017494][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.026296][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.035651][ T5832] bridge_slave_0: entered allmulticast mode [ 89.043858][ T5832] bridge_slave_0: entered promiscuous mode [ 89.097184][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.105794][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.113474][ T5832] bridge_slave_1: entered allmulticast mode [ 89.121562][ T5832] bridge_slave_1: entered promiscuous mode [ 89.131118][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.139213][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.147166][ T5833] bridge_slave_0: entered allmulticast mode [ 89.155928][ T5833] bridge_slave_0: entered promiscuous mode [ 89.166569][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.175392][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.184292][ T5833] bridge_slave_1: entered allmulticast mode [ 89.193058][ T5833] bridge_slave_1: entered promiscuous mode [ 89.280085][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.294766][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.331321][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.345701][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.377684][ T5836] hsr_slave_0: entered promiscuous mode [ 89.386083][ T5836] hsr_slave_1: entered promiscuous mode [ 89.418659][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.427818][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.436440][ T5835] bridge_slave_0: entered allmulticast mode [ 89.445273][ T5835] bridge_slave_0: entered promiscuous mode [ 89.454937][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.462948][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.470811][ T5835] bridge_slave_1: entered allmulticast mode [ 89.479138][ T5835] bridge_slave_1: entered promiscuous mode [ 89.511139][ T5833] team0: Port device team_slave_0 added [ 89.520891][ T5833] team0: Port device team_slave_1 added [ 89.541549][ T5832] team0: Port device team_slave_0 added [ 89.584494][ T5832] team0: Port device team_slave_1 added [ 89.593916][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.638206][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.659209][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.667497][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.697668][ T5154] Bluetooth: hci3: command tx timeout [ 89.698899][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.750270][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.758047][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.788204][ T5154] Bluetooth: hci1: command tx timeout [ 89.788213][ T5848] Bluetooth: hci0: command tx timeout [ 89.801114][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.820725][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.829956][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.849133][ T5154] Bluetooth: hci2: command tx timeout [ 89.868483][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.906737][ T5835] team0: Port device team_slave_0 added [ 89.917453][ T5835] team0: Port device team_slave_1 added [ 89.939999][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.947081][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.976163][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.049082][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.056945][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.085919][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.102169][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.110351][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.138589][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.203383][ T5833] hsr_slave_0: entered promiscuous mode [ 90.210362][ T5833] hsr_slave_1: entered promiscuous mode [ 90.217057][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 90.223686][ T5833] Cannot create hsr debugfs directory [ 90.261493][ T5832] hsr_slave_0: entered promiscuous mode [ 90.268965][ T5832] hsr_slave_1: entered promiscuous mode [ 90.276172][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 90.282819][ T5832] Cannot create hsr debugfs directory [ 90.379663][ T5835] hsr_slave_0: entered promiscuous mode [ 90.388113][ T5835] hsr_slave_1: entered promiscuous mode [ 90.395508][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 90.403400][ T5835] Cannot create hsr debugfs directory [ 90.690666][ T5836] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.736465][ T5836] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.785420][ T5836] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.822726][ T5836] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.035565][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.052812][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.066666][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.101789][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.222080][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.235705][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.255552][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.269671][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.375512][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.458524][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.480195][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.491929][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.529292][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.537021][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.558103][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.573592][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.613543][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.621137][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.638319][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.692010][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.734849][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.742385][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.770033][ T5154] Bluetooth: hci3: command tx timeout [ 91.800571][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.808987][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.849480][ T5154] Bluetooth: hci1: command tx timeout [ 91.850596][ T5848] Bluetooth: hci0: command tx timeout [ 91.934215][ T5848] Bluetooth: hci2: command tx timeout [ 91.956672][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.995070][ T5832] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 92.007391][ T5832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.106927][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.137997][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.187363][ T3456] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.195100][ T3456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.226702][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.234450][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.256115][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.290428][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.298124][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.345559][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.353916][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.393243][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.501205][ T951] cfg80211: failed to load regulatory.db [ 92.501634][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.632306][ T5836] veth0_vlan: entered promiscuous mode [ 92.674876][ T5836] veth1_vlan: entered promiscuous mode [ 92.803730][ T5832] veth0_vlan: entered promiscuous mode [ 92.880643][ T5832] veth1_vlan: entered promiscuous mode [ 92.888319][ T5836] veth0_macvtap: entered promiscuous mode [ 92.935129][ T5836] veth1_macvtap: entered promiscuous mode [ 92.981658][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.006194][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.023766][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.072229][ T147] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.084453][ T147] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.110083][ T147] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.120642][ T147] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.148481][ T5832] veth0_macvtap: entered promiscuous mode [ 93.164284][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.189462][ T5832] veth1_macvtap: entered promiscuous mode [ 93.234365][ T5833] veth0_vlan: entered promiscuous mode [ 93.266203][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.296655][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.316200][ T5833] veth1_vlan: entered promiscuous mode [ 93.329333][ T3456] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.360127][ T3456] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.370475][ T3456] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.403381][ T3456] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.437177][ T5835] veth0_vlan: entered promiscuous mode [ 93.447120][ T3456] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.467577][ T3456] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.524385][ T3456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.542948][ T3456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.562799][ T5835] veth1_vlan: entered promiscuous mode [ 93.576359][ T5833] veth0_macvtap: entered promiscuous mode [ 93.596990][ T5833] veth1_macvtap: entered promiscuous mode [ 93.658131][ T5836] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.691009][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.705319][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.793148][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.850154][ T5848] Bluetooth: hci3: command tx timeout [ 93.858935][ T3456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.867265][ T3456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.877374][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.896757][ T5835] veth0_macvtap: entered promiscuous mode [ 93.928720][ T5926] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.930110][ T5848] Bluetooth: hci1: command tx timeout [ 93.949447][ T5154] Bluetooth: hci0: command tx timeout [ 93.975733][ T5835] veth1_macvtap: entered promiscuous mode [ 93.999428][ T58] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.009274][ T5154] Bluetooth: hci2: command tx timeout [ 94.026473][ T58] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.038261][ T58] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.077399][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.096314][ T58] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.136800][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.207667][ T58] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.220310][ T58] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.264581][ T58] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.300405][ T147] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.441158][ T3582] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.479868][ T3582] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.357002][ T5938] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000038: 0000 [#1] SMP KASAN PTI [ 95.369558][ T5938] KASAN: null-ptr-deref in range [0x00000000000001c0-0x00000000000001c7] [ 95.378941][ T5938] CPU: 0 UID: 0 PID: 5938 Comm: syz.3.7 Not tainted syzkaller #0 PREEMPT(full) [ 95.388017][ T5938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 95.398270][ T5938] RIP: 0010:__queue_work+0xa2/0xf90 [ 95.403962][ T5938] Code: 11 31 ff 89 ee e8 2e f3 37 00 85 ed 0f 85 ef 0c 00 00 e8 e1 ee 37 00 4d 8d b7 c0 01 00 00 4c 89 f0 48 c1 e8 03 48 89 44 24 28 <42> 0f b6 04 20 84 c0 0f 85 22 0d 00 00 4c 89 34 24 41 8b 2e 89 ee [ 95.424699][ T5938] RSP: 0018:ffffc90004b074b8 EFLAGS: 00010002 [ 95.431093][ T5938] RAX: 0000000000000038 RBX: 0000000000000008 RCX: 0000000000080000 [ 95.440063][ T5938] RDX: ffffc9000c612000 RSI: 00000000000004ae RDI: 00000000000004af [ 95.449197][ T5938] RBP: 0000000000000000 R08: ffff88813fe32017 R09: 1ffff11027fc6402 [ 95.457645][ T5938] R10: dffffc0000000000 R11: ffffed1027fc6403 R12: dffffc0000000000 [ 95.466437][ T5938] R13: ffff88813fe32010 R14: 00000000000001c0 R15: 0000000000000000 [ 95.474416][ T5938] FS: 00007fcdbc7f66c0(0000) GS:ffff88812505d000(0000) knlGS:0000000000000000 [ 95.483705][ T5938] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 95.491116][ T5938] CR2: 0000001b31919ff8 CR3: 000000007b55e000 CR4: 00000000003526f0 [ 95.499383][ T5938] Call Trace: [ 95.502869][ T5938] [ 95.505839][ T5938] ? __asan_memcpy+0x40/0x70 [ 95.510469][ T5938] ? __tty_insert_flip_string_flags+0x3e9/0x430 [ 95.516977][ T5938] queue_work_on+0x106/0x1d0 [ 95.521593][ T5938] fn_enter+0x45d/0x900 [ 95.525771][ T5938] ? __pfx_fn_enter+0x10/0x10 [ 95.530568][ T5938] ? notifier_chain_unregister+0x24d/0x280 [ 95.536588][ T5938] ? atomic_notifier_call_chain+0x26/0x180 [ 95.542720][ T5938] ? k_spec+0x10b/0x180 [ 95.546907][ T5938] kbd_event+0x2ec1/0x40d0 [ 95.551425][ T5938] ? __pfx_kbd_event+0x10/0x10 [ 95.556402][ T5938] ? add_lock_to_list+0xc7/0x100 [ 95.561385][ T5938] ? lockdep_unlock+0x5d/0xd0 [ 95.566178][ T5938] ? __lock_acquire+0x146e/0x2cf0 [ 95.571489][ T5938] ? __lock_acquire+0x6b5/0x2cf0 [ 95.576543][ T5938] ? __lock_acquire+0x6b5/0x2cf0 [ 95.582030][ T5938] ? __lock_acquire+0x6b5/0x2cf0 [ 95.587252][ T5938] ? input_pass_values+0x8d/0x890 [ 95.592545][ T5938] ? lock_acquire+0x106/0x330 [ 95.597326][ T5938] ? input_pass_values+0x8d/0x890 [ 95.602539][ T5938] input_handle_events_default+0xd4/0x1a0 [ 95.608279][ T5938] ? input_pass_values+0x8d/0x890 [ 95.613402][ T5938] input_pass_values+0x288/0x890 [ 95.618433][ T5938] ? input_handle_event+0x70c/0xf30 [ 95.623720][ T5938] input_event_dispose+0x330/0x6b0 [ 95.628837][ T5938] input_inject_event+0x1dd/0x340 [ 95.633917][ T5938] ? input_inject_event+0xb6/0x340 [ 95.639035][ T5938] evdev_write+0x325/0x4c0 [ 95.643551][ T5938] ? __lock_acquire+0x6b5/0x2cf0 [ 95.648865][ T5938] ? __pfx_evdev_write+0x10/0x10 [ 95.654088][ T5938] ? bpf_lsm_file_permission+0x9/0x20 [ 95.659490][ T5938] ? security_file_permission+0x75/0x260 [ 95.665177][ T5938] ? rw_verify_area+0x255/0x4d0 [ 95.670227][ T5938] ? __pfx_evdev_write+0x10/0x10 [ 95.675196][ T5938] vfs_write+0x29a/0xb90 [ 95.679567][ T5938] ? __pfx_vfs_write+0x10/0x10 [ 95.684545][ T5938] ? __fget_files+0x2a/0x420 [ 95.689526][ T5938] ? __fget_files+0x2a/0x420 [ 95.694399][ T5938] ? __fget_files+0x3a0/0x420 [ 95.699468][ T5938] ? __fget_files+0x2a/0x420 [ 95.704790][ T5938] ksys_write+0x150/0x270 [ 95.709566][ T5938] ? __pfx_ksys_write+0x10/0x10 [ 95.714652][ T5938] do_syscall_64+0xe2/0xf80 [ 95.719400][ T5938] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.726202][ T5938] ? trace_irq_disable+0x37/0x100 [ 95.732417][ T5938] ? clear_bhb_loop+0x40/0x90 [ 95.737391][ T5938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.744646][ T5938] RIP: 0033:0x7fcdbe59aeb9 [ 95.750228][ T5938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.773384][ T5938] RSP: 002b:00007fcdbc7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 95.782431][ T5938] RAX: ffffffffffffffda RBX: 00007fcdbe815fa0 RCX: 00007fcdbe59aeb9 [ 95.790906][ T5938] RDX: 00000000000012d8 RSI: 0000200000000040 RDI: 0000000000000007 [ 95.799804][ T5938] RBP: 00007fcdbe608c1f R08: 0000000000000000 R09: 0000000000000000 [ 95.808243][ T5938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.816708][ T5938] R13: 00007fcdbe816038 R14: 00007fcdbe815fa0 R15: 00007ffc4fe511b8 [ 95.825008][ T5938] [ 95.828139][ T5938] Modules linked in: [ 95.832171][ T5938] ---[ end trace 0000000000000000 ]--- [ 95.837816][ T5938] RIP: 0010:__queue_work+0xa2/0xf90 [ 95.843529][ T5938] Code: 11 31 ff 89 ee e8 2e f3 37 00 85 ed 0f 85 ef 0c 00 00 e8 e1 ee 37 00 4d 8d b7 c0 01 00 00 4c 89 f0 48 c1 e8 03 48 89 44 24 28 <42> 0f b6 04 20 84 c0 0f 85 22 0d 00 00 4c 89 34 24 41 8b 2e 89 ee [ 95.864499][ T5938] RSP: 0018:ffffc90004b074b8 EFLAGS: 00010002 [ 95.871215][ T5938] RAX: 0000000000000038 RBX: 0000000000000008 RCX: 0000000000080000 [ 95.879514][ T5938] RDX: ffffc9000c612000 RSI: 00000000000004ae RDI: 00000000000004af [ 95.888228][ T5938] RBP: 0000000000000000 R08: ffff88813fe32017 R09: 1ffff11027fc6402 [ 95.896579][ T5938] R10: dffffc0000000000 R11: ffffed1027fc6403 R12: dffffc0000000000 [ 95.904966][ T5938] R13: ffff88813fe32010 R14: 00000000000001c0 R15: 0000000000000000 [ 95.913228][ T5938] FS: 00007fcdbc7f66c0(0000) GS:ffff88812505d000(0000) knlGS:0000000000000000 [ 95.922533][ T5938] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 95.929319][ T5938] CR2: 0000001b31919ff8 CR3: 000000007b55e000 CR4: 00000000003526f0 [ 95.937856][ T5938] Kernel panic - not syncing: Fatal exception [ 95.945260][ T5938] Kernel Offset: disabled [ 95.949750][ T5938] Rebooting in 86400 seconds..