last executing test programs: 972.500324ms ago: executing program 0 (id=1): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r2], 0x50}, 0x1, 0xba01}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) 895.389445ms ago: executing program 1 (id=2): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 548.359731ms ago: executing program 0 (id=5): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000d40)={0x44, &(0x7f0000000a80)={0x40, 0x6, 0x1, "8f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 276.156856ms ago: executing program 3 (id=4): syz_usb_connect$hid(0x2, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) 233.549106ms ago: executing program 2 (id=3): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x1a, &(0x7f0000000040)={@local, @remote, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@llc_tr={0x11, {@snap={0x1, 0xaa, "a7", "bab435", 0x16}}}}}, 0x0) 123.171589ms ago: executing program 2 (id=6): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x703, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x64, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x28, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe8}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b07, &(0x7f0000000000)={'wlan1\x00'}) 0s ago: executing program 2 (id=7): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi4\x00', 0x141a00, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_CLOSE={0x13, 0x19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f00001859c0)={0xfffffdaf, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.7' (ED25519) to the list of known hosts. [ 81.183766][ T5775] cgroup: Unknown subsys name 'net' [ 81.320684][ T5775] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.156663][ T5775] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.854353][ T5790] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.864596][ T5797] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.876581][ T5797] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.886102][ T5797] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.894652][ T5797] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.903908][ T5797] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.911729][ T5797] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.919328][ T5797] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.936881][ T5800] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.944709][ T5797] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.951585][ T5800] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.960051][ T5800] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.963018][ T5797] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.967981][ T5800] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.982507][ T5800] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.990365][ T5800] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.997053][ T5803] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.998024][ T5800] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.019253][ T5803] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.031727][ T5806] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.039270][ T5806] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.046646][ T5803] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.057890][ T5804] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.066435][ T5790] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.500455][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 85.599385][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 85.778403][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 85.799946][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.807374][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.815597][ T5793] bridge_slave_0: entered allmulticast mode [ 85.823608][ T5793] bridge_slave_0: entered promiscuous mode [ 85.874007][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.881151][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.888703][ T5793] bridge_slave_1: entered allmulticast mode [ 85.896183][ T5793] bridge_slave_1: entered promiscuous mode [ 85.904377][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 85.926713][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.934052][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.941363][ T5787] bridge_slave_0: entered allmulticast mode [ 85.948769][ T5787] bridge_slave_0: entered promiscuous mode [ 85.956743][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.964531][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.971733][ T5787] bridge_slave_1: entered allmulticast mode [ 85.979689][ T5787] bridge_slave_1: entered promiscuous mode [ 86.034394][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.047387][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.137061][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.150486][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.163270][ T5793] team0: Port device team_slave_0 added [ 86.199112][ T5793] team0: Port device team_slave_1 added [ 86.268121][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.275424][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.301924][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.314643][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.321845][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.329777][ T5792] bridge_slave_0: entered allmulticast mode [ 86.337020][ T5792] bridge_slave_0: entered promiscuous mode [ 86.361304][ T5787] team0: Port device team_slave_0 added [ 86.368414][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.375594][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.401732][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.419381][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.426731][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.434030][ T5792] bridge_slave_1: entered allmulticast mode [ 86.440914][ T5792] bridge_slave_1: entered promiscuous mode [ 86.447900][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.455376][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.462790][ T5791] bridge_slave_0: entered allmulticast mode [ 86.469941][ T5791] bridge_slave_0: entered promiscuous mode [ 86.479092][ T5787] team0: Port device team_slave_1 added [ 86.527384][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.534703][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.541833][ T5791] bridge_slave_1: entered allmulticast mode [ 86.549145][ T5791] bridge_slave_1: entered promiscuous mode [ 86.557687][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.565146][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.591644][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.605306][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.612401][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.638534][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.709031][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.737360][ T5793] hsr_slave_0: entered promiscuous mode [ 86.744358][ T5793] hsr_slave_1: entered promiscuous mode [ 86.769711][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.781216][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.848924][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.876761][ T5787] hsr_slave_0: entered promiscuous mode [ 86.883281][ T5787] hsr_slave_1: entered promiscuous mode [ 86.889441][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.898450][ T5787] Cannot create hsr debugfs directory [ 86.907166][ T5792] team0: Port device team_slave_0 added [ 86.917433][ T5792] team0: Port device team_slave_1 added [ 87.019754][ T5791] team0: Port device team_slave_0 added [ 87.028864][ T5791] team0: Port device team_slave_1 added [ 87.058534][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.065812][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.092943][ T5794] Bluetooth: hci1: command tx timeout [ 87.092961][ T5804] Bluetooth: hci2: command tx timeout [ 87.098694][ T5794] Bluetooth: hci0: command tx timeout [ 87.110500][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.162596][ T5794] Bluetooth: hci3: command tx timeout [ 87.165007][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.175513][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.202084][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.219795][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.226884][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.253152][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.266225][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.273328][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.299803][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.454617][ T5791] hsr_slave_0: entered promiscuous mode [ 87.461147][ T5791] hsr_slave_1: entered promiscuous mode [ 87.468627][ T5791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.476756][ T5791] Cannot create hsr debugfs directory [ 87.494739][ T5792] hsr_slave_0: entered promiscuous mode [ 87.501034][ T5792] hsr_slave_1: entered promiscuous mode [ 87.507761][ T5792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.515483][ T5792] Cannot create hsr debugfs directory [ 87.689607][ T5793] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.703325][ T5793] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.733243][ T5793] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.749218][ T5793] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.890859][ T5787] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.918487][ T5787] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.931134][ T5787] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.947499][ T5787] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.027072][ T5791] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.038155][ T5791] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.058031][ T5791] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.071024][ T5791] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.200016][ T5792] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.236724][ T5792] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.249509][ T5792] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.269462][ T5792] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.297617][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.336019][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.388219][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.428511][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.440673][ T2924] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.448099][ T2924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.467170][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.497549][ T1312] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.504818][ T1312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.517342][ T1312] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.524513][ T1312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.550944][ T1312] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.558170][ T1312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.618709][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.675069][ T2924] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.682413][ T2924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.703347][ T2916] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.710853][ T2916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.729675][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.861292][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.899598][ T2916] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.906809][ T2916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.921646][ T2916] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.929331][ T2916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.961808][ T5791] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.108475][ T5792] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.164211][ T5794] Bluetooth: hci0: command tx timeout [ 89.172933][ T5794] Bluetooth: hci2: command tx timeout [ 89.178399][ T5794] Bluetooth: hci1: command tx timeout [ 89.242696][ T5794] Bluetooth: hci3: command tx timeout [ 89.246601][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.421195][ T5787] veth0_vlan: entered promiscuous mode [ 89.443194][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.488628][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.503965][ T5787] veth1_vlan: entered promiscuous mode [ 89.607152][ T5787] veth0_macvtap: entered promiscuous mode [ 89.639808][ T5793] veth0_vlan: entered promiscuous mode [ 89.651472][ T5787] veth1_macvtap: entered promiscuous mode [ 89.679649][ T5791] veth0_vlan: entered promiscuous mode [ 89.688281][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.717898][ T5793] veth1_vlan: entered promiscuous mode [ 89.742111][ T5791] veth1_vlan: entered promiscuous mode [ 89.768517][ T5793] veth0_macvtap: entered promiscuous mode [ 89.786248][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.813852][ T5793] veth1_macvtap: entered promiscuous mode [ 89.839399][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.871782][ T5787] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.880993][ T5787] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.890974][ T5787] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.900015][ T5787] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.915069][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.927192][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.939612][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.976889][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.987587][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.000301][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.046550][ T5793] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.055534][ T5793] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.065876][ T5793] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.075366][ T5793] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.109743][ T5791] veth0_macvtap: entered promiscuous mode [ 90.118748][ T5792] veth0_vlan: entered promiscuous mode [ 90.150355][ T5791] veth1_macvtap: entered promiscuous mode [ 90.158294][ T5792] veth1_vlan: entered promiscuous mode [ 90.302247][ T5792] veth0_macvtap: entered promiscuous mode [ 90.328813][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.329941][ T5792] veth1_macvtap: entered promiscuous mode [ 90.354717][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.367620][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.380996][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.387069][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.395234][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.409041][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.420751][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.432235][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.511170][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.522211][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.535184][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.548072][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.559789][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.568684][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.580691][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.592163][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.604749][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.614102][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.624631][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.634485][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.645169][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.658264][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.695881][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.710221][ T1312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.716211][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.719068][ T1312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.730735][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.747562][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.757605][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.768983][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.782017][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.798198][ T5791] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.807853][ T5791] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.816841][ T5791] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.825745][ T5791] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.865638][ T5792] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.875907][ T5792] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.886369][ T5792] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.896218][ T5792] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.103039][ T5884] netlink: 'syz.0.1': attribute type 10 has an invalid length. [ 91.117666][ T5884] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.126270][ T5884] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.177642][ T5884] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.184936][ T5884] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.192979][ T5884] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.200436][ T5884] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.215987][ T5884] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 91.243315][ T5804] Bluetooth: hci2: command tx timeout [ 91.248782][ T5804] Bluetooth: hci0: command tx timeout [ 91.254807][ T5794] Bluetooth: hci1: command tx timeout [ 91.322603][ T5794] Bluetooth: hci3: command tx timeout [ 91.360588][ T2924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.375679][ T2924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.479796][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.504748][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.551634][ T1312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.565453][ T1312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.597174][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.619940][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.793595][ T5862] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 91.867937][ T5895] warning: `syz.2.6' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 91.952138][ T5897] ------------[ cut here ]------------ [ 91.958511][ T5897] WARNING: CPU: 0 PID: 5897 at mm/page_alloc.c:4433 __alloc_pages+0x2de/0x460 [ 91.968683][ T5897] Modules linked in: [ 91.973005][ T5897] CPU: 0 PID: 5897 Comm: syz.2.7 Not tainted 6.6.97-syzkaller #0 [ 91.980782][ T5897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 91.991040][ T5897] RIP: 0010:__alloc_pages+0x2de/0x460 [ 91.996514][ T5897] Code: 0c 25 28 00 00 00 48 3b 8c 24 a0 00 00 00 0f 85 a0 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 c6 05 c0 cb 62 0c 01 <0f> 0b eb a5 a9 00 00 08 00 8b 74 24 0c 75 3e 44 89 f1 81 e1 7f ff [ 92.017222][ T5897] RSP: 0018:ffffc90004c7f9c0 EFLAGS: 00010246 [ 92.023565][ T5897] RAX: ffffc90004c7fa00 RBX: 1ffff9200098ff3c RCX: 0000000000000000 [ 92.031586][ T5897] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90004c7fa28 [ 92.041036][ T5897] RBP: ffffc90004c7fac0 R08: ffffc90004c7fa27 R09: 0000000000000000 [ 92.050708][ T5897] R10: ffffc90004c7fa00 R11: fffff5200098ff45 R12: 000000000000001a [ 92.058783][ T5897] R13: 0000000000000000 R14: 0000000000040dc0 R15: dffffc0000000000 [ 92.066932][ T5897] FS: 00007f7618dbd6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 92.075963][ T5897] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 92.082644][ T5897] CR2: 000055558882e808 CR3: 000000007eb86000 CR4: 00000000003506f0 [ 92.090670][ T5897] Call Trace: [ 92.094100][ T5897] [ 92.097082][ T5897] ? zone_statistics+0x170/0x170 [ 92.102076][ T5897] ? __might_fault+0xaa/0x120 [ 92.106885][ T5897] ? __lock_acquire+0x7c80/0x7c80 [ 92.112934][ T5897] __kmalloc_large_node+0x8c/0x1e0 [ 92.118112][ T5897] ? comedi_unlocked_ioctl+0x9f0/0xf00 [ 92.125486][ T5897] __kmalloc+0x111/0x240 [ 92.129832][ T5897] comedi_unlocked_ioctl+0x9f0/0xf00 [ 92.135248][ T5897] ? tomoyo_path_number_perm+0x477/0x590 [ 92.140932][ T5897] ? comedi_poll+0x8c0/0x8c0 [ 92.145634][ T5897] ? tomoyo_path_number_perm+0x4dc/0x590 [ 92.151314][ T5897] ? tomoyo_path_number_perm+0x1ba/0x590 [ 92.157058][ T5897] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 92.162644][ T5897] ? __fget_files+0x28/0x4d0 [ 92.167308][ T5897] ? bpf_lsm_file_ioctl+0x9/0x10 [ 92.172348][ T5897] ? security_file_ioctl+0x80/0xa0 [ 92.177504][ T5897] ? comedi_poll+0x8c0/0x8c0 [ 92.182156][ T5897] __se_sys_ioctl+0xfd/0x170 [ 92.186868][ T5897] do_syscall_64+0x55/0xb0 [ 92.191340][ T5897] ? clear_bhb_loop+0x40/0x90 [ 92.196115][ T5897] ? clear_bhb_loop+0x40/0x90 [ 92.200842][ T5897] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 92.207821][ T5897] RIP: 0033:0x7f7617f8e929 [ 92.212800][ T5897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.233637][ T5897] RSP: 002b:00007f7618dbd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 92.242124][ T5897] RAX: ffffffffffffffda RBX: 00007f76181b5fa0 RCX: 00007f7617f8e929 [ 92.250449][ T5897] RDX: 00002000001859c0 RSI: 000000008010640b RDI: 0000000000000003 [ 92.258962][ T5897] RBP: 00007f7618010b39 R08: 0000000000000000 R09: 0000000000000000 [ 92.267129][ T5897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.275205][ T5897] R13: 0000000000000000 R14: 00007f76181b5fa0 R15: 00007ffdd4f87408 [ 92.283364][ T5897] [ 92.286429][ T5897] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 92.293743][ T5897] CPU: 0 PID: 5897 Comm: syz.2.7 Not tainted 6.6.97-syzkaller #0 [ 92.301503][ T5897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 92.311596][ T5897] Call Trace: [ 92.314908][ T5897] [ 92.317855][ T5897] dump_stack_lvl+0x16c/0x230 [ 92.322573][ T5897] ? show_regs_print_info+0x20/0x20 [ 92.327797][ T5897] ? load_image+0x3b0/0x3b0 [ 92.332337][ T5897] panic+0x2c0/0x710 [ 92.336259][ T5897] ? bpf_jit_dump+0xd0/0xd0 [ 92.340782][ T5897] __warn+0x2e0/0x470 [ 92.344768][ T5897] ? __alloc_pages+0x2de/0x460 [ 92.349545][ T5897] ? __alloc_pages+0x2de/0x460 [ 92.354681][ T5897] report_bug+0x2be/0x4f0 [ 92.359059][ T5897] ? __alloc_pages+0x2de/0x460 [ 92.363903][ T5897] ? __alloc_pages+0x2de/0x460 [ 92.368688][ T5897] ? __alloc_pages+0x2e0/0x460 [ 92.373627][ T5897] handle_bug+0xcf/0x120 [ 92.377901][ T5897] exc_invalid_op+0x1a/0x50 [ 92.382428][ T5897] asm_exc_invalid_op+0x1a/0x20 [ 92.387308][ T5897] RIP: 0010:__alloc_pages+0x2de/0x460 [ 92.392705][ T5897] Code: 0c 25 28 00 00 00 48 3b 8c 24 a0 00 00 00 0f 85 a0 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 c6 05 c0 cb 62 0c 01 <0f> 0b eb a5 a9 00 00 08 00 8b 74 24 0c 75 3e 44 89 f1 81 e1 7f ff [ 92.412333][ T5897] RSP: 0018:ffffc90004c7f9c0 EFLAGS: 00010246 [ 92.418426][ T5897] RAX: ffffc90004c7fa00 RBX: 1ffff9200098ff3c RCX: 0000000000000000 [ 92.426412][ T5897] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90004c7fa28 [ 92.434399][ T5897] RBP: ffffc90004c7fac0 R08: ffffc90004c7fa27 R09: 0000000000000000 [ 92.442384][ T5897] R10: ffffc90004c7fa00 R11: fffff5200098ff45 R12: 000000000000001a [ 92.450382][ T5897] R13: 0000000000000000 R14: 0000000000040dc0 R15: dffffc0000000000 [ 92.458389][ T5897] ? zone_statistics+0x170/0x170 [ 92.463362][ T5897] ? __might_fault+0xaa/0x120 [ 92.468046][ T5897] ? __lock_acquire+0x7c80/0x7c80 [ 92.473090][ T5897] __kmalloc_large_node+0x8c/0x1e0 [ 92.478214][ T5897] ? comedi_unlocked_ioctl+0x9f0/0xf00 [ 92.483690][ T5897] __kmalloc+0x111/0x240 [ 92.487940][ T5897] comedi_unlocked_ioctl+0x9f0/0xf00 [ 92.493268][ T5897] ? tomoyo_path_number_perm+0x477/0x590 [ 92.498905][ T5897] ? comedi_poll+0x8c0/0x8c0 [ 92.503520][ T5897] ? tomoyo_path_number_perm+0x4dc/0x590 [ 92.509170][ T5897] ? tomoyo_path_number_perm+0x1ba/0x590 [ 92.514839][ T5897] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 92.520339][ T5897] ? __fget_files+0x28/0x4d0 [ 92.524963][ T5897] ? bpf_lsm_file_ioctl+0x9/0x10 [ 92.529923][ T5897] ? security_file_ioctl+0x80/0xa0 [ 92.535046][ T5897] ? comedi_poll+0x8c0/0x8c0 [ 92.539653][ T5897] __se_sys_ioctl+0xfd/0x170 [ 92.544264][ T5897] do_syscall_64+0x55/0xb0 [ 92.548694][ T5897] ? clear_bhb_loop+0x40/0x90 [ 92.553384][ T5897] ? clear_bhb_loop+0x40/0x90 [ 92.558076][ T5897] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 92.563987][ T5897] RIP: 0033:0x7f7617f8e929 [ 92.568411][ T5897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.588032][ T5897] RSP: 002b:00007f7618dbd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 92.596458][ T5897] RAX: ffffffffffffffda RBX: 00007f76181b5fa0 RCX: 00007f7617f8e929 [ 92.604436][ T5897] RDX: 00002000001859c0 RSI: 000000008010640b RDI: 0000000000000003 [ 92.612418][ T5897] RBP: 00007f7618010b39 R08: 0000000000000000 R09: 0000000000000000 [ 92.620405][ T5897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.628387][ T5897] R13: 0000000000000000 R14: 00007f76181b5fa0 R15: 00007ffdd4f87408 [ 92.636385][ T5897] [ 92.639711][ T5897] Kernel Offset: disabled [ 92.644087][ T5897] Rebooting in 86400 seconds..