last executing test programs: 17.441898ms ago: executing program 0 (id=1): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000100)=0x987, 0x4) 0s ago: executing program 0 (id=6): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x1, 0x81, 0x7, 0x8, 0x8}, {0x6, 0x1, 0xd, 0x6, 0x6, 0xfb8e000}, 0x6, 0x4, 0x111e}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000011}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}}, 0x4008000) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="b9ff0300600d698cff9e14f08edd", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff}, 0x50) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x49, &(0x7f00000009c0)=0xfefffffb, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.106' (ED25519) to the list of known hosts. [ 24.643584][ T6515] cgroup: Unknown subsys name 'net' [ 24.782173][ T6515] cgroup: Unknown subsys name 'cpuset' [ 24.784116][ T6515] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 24.943321][ T6515] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 26.067919][ T6532] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 26.068312][ T6532] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 26.069688][ T6535] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 26.069891][ T6535] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 26.070024][ T6535] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 26.081266][ T6538] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 26.081633][ T6538] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 26.082449][ T6538] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 26.082960][ T6538] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 26.083397][ T6536] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 26.084044][ T6538] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 26.084267][ T6538] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 26.084562][ T6538] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 26.084752][ T6538] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 26.085200][ T6538] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 26.085528][ T6538] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 26.085668][ T6538] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 26.085959][ T6538] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 26.086184][ T6538] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 26.086894][ T6535] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 26.087100][ T6535] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 26.087548][ T6535] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 26.087758][ T6535] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 26.088047][ T6535] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 26.088250][ T6535] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 26.254883][ T6526] chnl_net:caif_netlink_parms(): no params data found [ 26.273145][ T6530] chnl_net:caif_netlink_parms(): no params data found [ 26.331578][ T6526] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.333189][ T6526] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.334551][ T6526] bridge_slave_0: entered allmulticast mode [ 26.336056][ T6526] bridge_slave_0: entered promiscuous mode [ 26.339115][ T6526] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.340425][ T6526] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.343624][ T6526] bridge_slave_1: entered allmulticast mode [ 26.345051][ T6526] bridge_slave_1: entered promiscuous mode [ 26.355445][ T6533] chnl_net:caif_netlink_parms(): no params data found [ 26.374091][ T6525] chnl_net:caif_netlink_parms(): no params data found [ 26.375309][ T6534] chnl_net:caif_netlink_parms(): no params data found [ 26.379648][ T6526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.380047][ T6530] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.380950][ T6530] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.381043][ T6530] bridge_slave_0: entered allmulticast mode [ 26.382444][ T6530] bridge_slave_0: entered promiscuous mode [ 26.383250][ T6530] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.383275][ T6530] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.383319][ T6530] bridge_slave_1: entered allmulticast mode [ 26.383745][ T6530] bridge_slave_1: entered promiscuous mode [ 26.399543][ T6526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.425313][ T6530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.434165][ T6526] team0: Port device team_slave_0 added [ 26.434910][ T6526] team0: Port device team_slave_1 added [ 26.438554][ T6530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.440230][ T6533] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.440289][ T6533] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.440349][ T6533] bridge_slave_0: entered allmulticast mode [ 26.441140][ T6533] bridge_slave_0: entered promiscuous mode [ 26.456968][ T6533] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.457039][ T6533] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.457109][ T6533] bridge_slave_1: entered allmulticast mode [ 26.457524][ T6533] bridge_slave_1: entered promiscuous mode [ 26.468973][ T6526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.469000][ T6526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.469013][ T6526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.470008][ T6526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.470016][ T6526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.470027][ T6526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.484452][ T6530] team0: Port device team_slave_0 added [ 26.485105][ T6530] team0: Port device team_slave_1 added [ 26.498457][ T6533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.498588][ T6534] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.498667][ T6534] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.498716][ T6534] bridge_slave_0: entered allmulticast mode [ 26.499478][ T6534] bridge_slave_0: entered promiscuous mode [ 26.500257][ T6534] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.500272][ T6534] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.500333][ T6534] bridge_slave_1: entered allmulticast mode [ 26.501013][ T6534] bridge_slave_1: entered promiscuous mode [ 26.509495][ T6525] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.509553][ T6525] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.509603][ T6525] bridge_slave_0: entered allmulticast mode [ 26.510024][ T6525] bridge_slave_0: entered promiscuous mode [ 26.516255][ T6530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.516272][ T6530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.516287][ T6530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.516896][ T6530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.516902][ T6530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.516913][ T6530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.533291][ T6533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.539850][ T6525] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.539931][ T6525] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.539991][ T6525] bridge_slave_1: entered allmulticast mode [ 26.540555][ T6525] bridge_slave_1: entered promiscuous mode [ 26.543092][ T6526] hsr_slave_0: entered promiscuous mode [ 26.543431][ T6526] hsr_slave_1: entered promiscuous mode [ 26.570199][ T6530] hsr_slave_0: entered promiscuous mode [ 26.571941][ T6530] hsr_slave_1: entered promiscuous mode [ 26.573119][ T6530] debugfs: 'hsr0' already exists in 'hsr' [ 26.574093][ T6530] Cannot create hsr debugfs directory [ 26.575750][ T6533] team0: Port device team_slave_0 added [ 26.577109][ T6534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.578643][ T6534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.579935][ T6525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.583628][ T6525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.586492][ T6533] team0: Port device team_slave_1 added [ 26.611219][ T6534] team0: Port device team_slave_0 added [ 26.612442][ T6525] team0: Port device team_slave_0 added [ 26.613256][ T6525] team0: Port device team_slave_1 added [ 26.617545][ T6533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.618869][ T6533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.622876][ T6533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.623897][ T6534] team0: Port device team_slave_1 added [ 26.624348][ T6533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.624354][ T6533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.624367][ T6533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.658270][ T6533] hsr_slave_0: entered promiscuous mode [ 26.658571][ T6533] hsr_slave_1: entered promiscuous mode [ 26.658754][ T6533] debugfs: 'hsr0' already exists in 'hsr' [ 26.658764][ T6533] Cannot create hsr debugfs directory [ 26.664779][ T6525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.664804][ T6525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.664818][ T6525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.665809][ T6525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.665818][ T6525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.665829][ T6525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.668168][ T6534] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.668180][ T6534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.668194][ T6534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.668780][ T6534] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.668788][ T6534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.668800][ T6534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.734609][ T6534] hsr_slave_0: entered promiscuous mode [ 26.734918][ T6534] hsr_slave_1: entered promiscuous mode [ 26.735414][ T6534] debugfs: 'hsr0' already exists in 'hsr' [ 26.735425][ T6534] Cannot create hsr debugfs directory [ 26.744942][ T6525] hsr_slave_0: entered promiscuous mode [ 26.745225][ T6525] hsr_slave_1: entered promiscuous mode [ 26.745399][ T6525] debugfs: 'hsr0' already exists in 'hsr' [ 26.745407][ T6525] Cannot create hsr debugfs directory [ 26.819334][ T6526] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 26.823259][ T6526] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 26.825539][ T6526] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 26.834056][ T6526] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 26.859022][ T6526] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.859169][ T6526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.859383][ T6526] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.859407][ T6526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.859981][ T6530] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 26.863760][ T6530] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 26.866249][ T6530] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 26.868894][ T6530] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 26.898929][ T6533] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 26.901923][ T6533] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 26.906064][ T6533] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 26.908788][ T6530] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.908836][ T6530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.908902][ T6530] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.908935][ T6530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.914918][ T6533] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 26.926075][ T6526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.937108][ T6534] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 26.942806][ T6526] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.947294][ T6534] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 26.950920][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.952553][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.954201][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.973820][ T6534] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 26.984469][ T6534] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 26.987802][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.987856][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.009621][ T6525] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.014215][ T6525] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.016749][ T6525] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.024827][ T6526] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 27.026683][ T6526] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.030121][ T6525] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 27.041660][ T6530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.057016][ T6533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.060494][ T6533] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.072752][ T6530] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.088733][ T6534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.092051][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.092096][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.092384][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.092406][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.097469][ T5921] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.097509][ T5921] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.105162][ T635] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.105204][ T635] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.113257][ T6534] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.120349][ T6526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.125357][ T6530] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 27.127475][ T6530] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.138048][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.138094][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.142996][ T1777] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.143034][ T1777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.151460][ T6525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.158121][ T6525] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.175603][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.175653][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.175945][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.175966][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.198428][ T6534] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 27.203673][ T6534] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.227485][ T6530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.290192][ T6530] veth0_vlan: entered promiscuous mode [ 27.299106][ T6533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.316372][ T6526] veth0_vlan: entered promiscuous mode [ 27.318268][ T6530] veth1_vlan: entered promiscuous mode [ 27.329718][ T6530] veth0_macvtap: entered promiscuous mode [ 27.330663][ T6530] veth1_macvtap: entered promiscuous mode [ 27.337873][ T6525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.346443][ T6533] veth0_vlan: entered promiscuous mode [ 27.349578][ T6534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.353061][ T6526] veth1_vlan: entered promiscuous mode [ 27.356331][ T6530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.363781][ T6530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.370119][ T15] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.370337][ T15] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.370353][ T15] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.370367][ T15] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.386551][ T6533] veth1_vlan: entered promiscuous mode [ 27.388520][ T6525] veth0_vlan: entered promiscuous mode [ 27.416640][ T6525] veth1_vlan: entered promiscuous mode [ 27.419566][ T6526] veth0_macvtap: entered promiscuous mode [ 27.424032][ T1777] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.424061][ T1777] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.432441][ T6534] veth0_vlan: entered promiscuous mode [ 27.434178][ T6526] veth1_macvtap: entered promiscuous mode [ 27.443879][ T6533] veth0_macvtap: entered promiscuous mode [ 27.449273][ T6534] veth1_vlan: entered promiscuous mode [ 27.453966][ T6533] veth1_macvtap: entered promiscuous mode [ 27.457171][ T6525] veth0_macvtap: entered promiscuous mode [ 27.458589][ T6525] veth1_macvtap: entered promiscuous mode [ 27.463644][ T6526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.465164][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.465176][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.472932][ T6533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.473570][ T6525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.474932][ T6525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.481168][ T15] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.481537][ T15] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.481652][ T15] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.481713][ T15] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.489987][ T6526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.512381][ T6533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.524713][ T6530] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.537419][ T41] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.537475][ T41] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.537503][ T41] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.537520][ T41] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.537538][ T41] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.537554][ T41] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.537570][ T41] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.537585][ T41] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.559966][ T6642] ------------[ cut here ]------------ [ 27.559995][ T6642] verifier bug: not inlined functions bpf_probe_read_kernel_str#115 is missing func(1) [ 27.560226][ T6642] WARNING: CPU: 1 PID: 6642 at kernel/bpf/verifier.c:22840 bpf_check+0x1559c/0x15d8c [ 27.564138][ T6642] Modules linked in: [ 27.564769][ T6642] CPU: 1 UID: 0 PID: 6642 Comm: syz.0.6 Not tainted syzkaller #0 PREEMPT [ 27.566083][ T6642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 27.567696][ T6642] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 27.568938][ T6642] pc : bpf_check+0x1559c/0x15d8c [ 27.569773][ T6642] lr : bpf_check+0x1559c/0x15d8c [ 27.570586][ T6642] sp : ffff8000a35d7480 [ 27.571243][ T6642] x29: ffff8000a35d7980 x28: dfff800000000000 x27: 0000000000000006 [ 27.572588][ T6642] x26: 1ffff00012fa7c13 x25: ffff800097d3e09c x24: ffff0000c9220008 [ 27.573920][ T6642] x23: ffff800097d3e098 x22: ffff80008b1548c0 x21: ffff800092e12000 ** replaying previous printk message ** [ 27.575006][ T6534] veth0_macvtap: entered promiscuous mode [ 27.576624][ T6642] x20: ffff800097d3e09c x19: 1ffff00012fa7c13 x18: 1fffe0003379be88 ** replaying previous printk message ** [ 27.577555][ T6534] veth1_macvtap: entered promiscuous mode [ 27.579265][ T6642] x17: ffff80008f7de000 x16: ffff80008b0155d8 x15: 0000000000000001 [ 27.580534][ T6642] x14: 1fffe0003379e900 x13: 0000000000000000 x12: 0000000000000000 [ 27.581765][ T6642] x11: 0000000000080000 x10: 0000000000000003 x9 : ff847a715058d000 [ 27.582777][ T6534] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.584166][ T6642] x8 : ff847a715058d000 x7 : ffff800080490a90 x6 : 0000000000000000 [ 27.585382][ T6642] x5 : 0000000000000001 x4 : 0000000000000001 x3 : 0000000000000010 ** replaying previous printk message ** [ 27.585415][ T6534] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.588251][ T6642] x2 : ffff8000a35d7040 x1 : ffff80008b668440 x0 : 0000000000000001 [ 27.589432][ T6642] Call trace: [ 27.589883][ T6642] bpf_check+0x1559c/0x15d8c (P) [ 27.590574][ T6642] bpf_prog_load+0xec8/0x13fc [ 27.591263][ T6642] __sys_bpf+0x450/0x628 [ 27.591967][ T6642] __arm64_sys_bpf+0x80/0x98 [ 27.592702][ T6642] invoke_syscall+0x98/0x2b8 [ 27.593464][ T6642] el0_svc_common+0x130/0x23c [ 27.594213][ T6642] do_el0_svc+0x48/0x58 [ 27.594848][ T6642] el0_svc+0x5c/0x254 [ 27.595463][ T6642] el0t_64_sync_handler+0x84/0x12c [ 27.596257][ T6642] el0t_64_sync+0x198/0x19c [ 27.596994][ T6642] irq event stamp: 358 [ 27.597615][ T6642] hardirqs last enabled at (357): [] finish_lock_switch+0xb0/0x1c0 [ 27.599181][ T6642] hardirqs last disabled at (358): [] el1_brk64+0x20/0x54 [ 27.600558][ T6642] softirqs last enabled at (38): [] local_bh_enable+0x10/0x34 [ 27.602090][ T6642] softirqs last disabled at (36): [] local_bh_disable+0x10/0x34 [ 27.603536][ T6642] ---[ end trace 0000000000000000 ]--- [ 27.607636][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.615857][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.618625][ T15] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.618679][ T15] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.618701][ T15] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.618718][ T15] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.649149][ T6642] tipc: Started in network mode [ 27.650054][ T6642] tipc: Node identity 1e7bd238f5cb, cluster identity 4711 [ 27.651603][ T6642] tipc: Enabled bearer , priority 0 [ 27.659650][ T6642] syzkaller0: entered promiscuous mode [ 27.659684][ T6642] syzkaller0: entered allmulticast mode [ 27.665209][ T6642] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 27.669569][ T15] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.669603][ T15] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.677713][ T15] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.677737][ T15] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.688142][ T1777] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.688172][ T1777] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.693682][ T6641] tipc: Resetting bearer [ 27.698661][ T6641] tipc: Disabling bearer [ 27.717956][ T1777] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.717990][ T1777] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.730433][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.730460][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.740397][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.742476][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.772871][ T1777] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.772900][ T1777] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.111401][ T6535] Bluetooth: hci3: command tx timeout [ 28.191041][ T6536] Bluetooth: hci1: command tx timeout [ 28.191132][ T6538] Bluetooth: hci0: command tx timeout [ 28.191321][ T6536] Bluetooth: hci2: command tx timeout [ 28.194160][ T6535] Bluetooth: hci4: command tx timeout [ 30.190777][ T6535] Bluetooth: hci3: command tx timeout [ 30.270831][ T6121] Bluetooth: hci4: command tx timeout [ 30.270869][ T6121] Bluetooth: hci2: command tx timeout [ 30.270901][ T6121] Bluetooth: hci0: command tx timeout [ 30.270971][ T6535] Bluetooth: hci1: command tx timeout [ 32.270951][ T6535] Bluetooth: hci3: command tx timeout [ 32.351005][ T6535] Bluetooth: hci1: command tx timeout [ 32.351047][ T6535] Bluetooth: hci0: command tx timeout [ 32.351079][ T6535] Bluetooth: hci2: command tx timeout [ 32.351099][ T6535] Bluetooth: hci4: command tx timeout [ 34.350809][ T6535] Bluetooth: hci3: command tx timeout [ 34.431214][ T6535] Bluetooth: hci4: command tx timeout [ 34.431236][ T6538] Bluetooth: hci0: command tx timeout [ 34.431265][ T6538] Bluetooth: hci1: command tx timeout [ 34.431296][ T6538] Bluetooth: hci2: command tx timeout