last executing test programs: 803.720162ms ago: executing program 2 (id=3): openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x10) syz_emit_ethernet(0x26, &(0x7f0000000040)={@local, @random="ff80cd0fc16f", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @local}, "5613e798"}}}}, 0x0) 633.407628ms ago: executing program 2 (id=6): r0 = socket(0x23, 0x5, 0x0) listen(r0, 0x3) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) 561.409295ms ago: executing program 2 (id=7): r0 = syz_clone(0xa0000280, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x4208, r0) 396.915428ms ago: executing program 2 (id=8): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000080), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000005, 0x10012, r2, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000001c0)=r1, 0x4) 286.587358ms ago: executing program 2 (id=9): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7) ioctl$TCFLSH(r0, 0x8926, 0x4000000000000) 110.434318ms ago: executing program 0 (id=1): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000a40)="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", 0x5ad) 42.322742ms ago: executing program 2 (id=10): syz_emit_ethernet(0x86, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x2, 0x0, 0xe0, "00ab08653904030401c50900000009c5000000efffffffff00", "9384bbeb3018ad591b661fe808b21b77", {"694c875dfb1be5d2a0057a62022a1564", "a329d3a13bd5b6cc6a9471314a1d8c69"}}}}}}}, 0x0) 0s ago: executing program 1 (id=2): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x240400d5) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.223' (ED25519) to the list of known hosts. [ 74.432144][ T5832] cgroup: Unknown subsys name 'net' [ 74.580340][ T5832] cgroup: Unknown subsys name 'cpuset' [ 74.589036][ T5832] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.059730][ T5832] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.724930][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.735509][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.750566][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.758571][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.768625][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.776618][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.786102][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.795154][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.803599][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.811666][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.903455][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.911603][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.920214][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.929726][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.938203][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.997721][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.005997][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.017161][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.025400][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.035145][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.063148][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.072088][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.079860][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.089346][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.097369][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.505893][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 80.646141][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 80.696362][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 80.804821][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.812603][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.820500][ T5851] bridge_slave_0: entered allmulticast mode [ 80.827977][ T5851] bridge_slave_0: entered promiscuous mode [ 80.840937][ T5859] chnl_net:caif_netlink_parms(): no params data found [ 80.884931][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.892165][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.899918][ T5851] bridge_slave_1: entered allmulticast mode [ 80.906822][ T5851] bridge_slave_1: entered promiscuous mode [ 80.981879][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.989386][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.996599][ T5854] bridge_slave_0: entered allmulticast mode [ 81.004905][ T5854] bridge_slave_0: entered promiscuous mode [ 81.062849][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.070080][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.077747][ T5854] bridge_slave_1: entered allmulticast mode [ 81.084851][ T5854] bridge_slave_1: entered promiscuous mode [ 81.092222][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.099566][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.106715][ T5853] bridge_slave_0: entered allmulticast mode [ 81.114384][ T5853] bridge_slave_0: entered promiscuous mode [ 81.126909][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.134080][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.141365][ T5853] bridge_slave_1: entered allmulticast mode [ 81.149023][ T5853] bridge_slave_1: entered promiscuous mode [ 81.163798][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.180929][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.244308][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 81.298156][ T5851] team0: Port device team_slave_0 added [ 81.324611][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.338534][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.350603][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.361606][ T5851] team0: Port device team_slave_1 added [ 81.432511][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.454827][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.462144][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.488268][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.502312][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.509350][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.535729][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.546920][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.554255][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.561526][ T5859] bridge_slave_0: entered allmulticast mode [ 81.568822][ T5859] bridge_slave_0: entered promiscuous mode [ 81.625864][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.633115][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.641036][ T5859] bridge_slave_1: entered allmulticast mode [ 81.648805][ T5859] bridge_slave_1: entered promiscuous mode [ 81.658299][ T5854] team0: Port device team_slave_0 added [ 81.702103][ T5853] team0: Port device team_slave_0 added [ 81.763810][ T5854] team0: Port device team_slave_1 added [ 81.773143][ T5853] team0: Port device team_slave_1 added [ 81.907856][ T5849] Bluetooth: hci1: command tx timeout [ 81.907861][ T5166] Bluetooth: hci0: command tx timeout [ 81.922594][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.929915][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.956047][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.974126][ T5851] hsr_slave_0: entered promiscuous mode [ 81.982265][ T5851] hsr_slave_1: entered promiscuous mode [ 81.990129][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.998047][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.005267][ T5860] bridge_slave_0: entered allmulticast mode [ 82.013501][ T5860] bridge_slave_0: entered promiscuous mode [ 82.023877][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.053207][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.060381][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.087144][ T5166] Bluetooth: hci3: command tx timeout [ 82.087332][ T5849] Bluetooth: hci2: command tx timeout [ 82.093193][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.123409][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.132949][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.140486][ T5860] bridge_slave_1: entered allmulticast mode [ 82.147139][ T5849] Bluetooth: hci4: command tx timeout [ 82.148671][ T5860] bridge_slave_1: entered promiscuous mode [ 82.162002][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.172331][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.179604][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.205730][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.223897][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.231182][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.257238][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.319647][ T5859] team0: Port device team_slave_0 added [ 82.364039][ T5859] team0: Port device team_slave_1 added [ 82.404348][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.486546][ T5854] hsr_slave_0: entered promiscuous mode [ 82.493853][ T5854] hsr_slave_1: entered promiscuous mode [ 82.500853][ T5854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.508625][ T5854] Cannot create hsr debugfs directory [ 82.516635][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.537814][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.544789][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.571151][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.595186][ T5853] hsr_slave_0: entered promiscuous mode [ 82.602511][ T5853] hsr_slave_1: entered promiscuous mode [ 82.608856][ T5853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.616420][ T5853] Cannot create hsr debugfs directory [ 82.653896][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.661091][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.687499][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.735090][ T5860] team0: Port device team_slave_0 added [ 82.780183][ T5860] team0: Port device team_slave_1 added [ 82.873762][ T5859] hsr_slave_0: entered promiscuous mode [ 82.881359][ T5859] hsr_slave_1: entered promiscuous mode [ 82.887694][ T5859] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.895249][ T5859] Cannot create hsr debugfs directory [ 82.924570][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.931682][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.957931][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.997468][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.004459][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.031312][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.151044][ T5860] hsr_slave_0: entered promiscuous mode [ 83.158953][ T5860] hsr_slave_1: entered promiscuous mode [ 83.165058][ T5860] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.172890][ T5860] Cannot create hsr debugfs directory [ 83.291143][ T5851] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.303083][ T5851] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.356810][ T5851] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.369351][ T5851] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.571786][ T5853] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.583389][ T5853] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.595226][ T5853] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.639638][ T5853] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.734401][ T5854] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.745330][ T5854] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.760289][ T5854] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.781303][ T5854] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.902804][ T5859] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.926449][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.939001][ T5859] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.949923][ T5859] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.978686][ T5859] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.991627][ T5166] Bluetooth: hci1: command tx timeout [ 83.997620][ T5849] Bluetooth: hci0: command tx timeout [ 84.061374][ T5860] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.076474][ T5860] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.099875][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.106797][ T5860] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.126186][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.136172][ T5860] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.147270][ T5166] Bluetooth: hci3: command tx timeout [ 84.156179][ T5849] Bluetooth: hci2: command tx timeout [ 84.182349][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.189568][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.200654][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.207853][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.227576][ T5849] Bluetooth: hci4: command tx timeout [ 84.253745][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.322824][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.330085][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.350436][ T3566] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.357632][ T3566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.373351][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.464146][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.499939][ T3566] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.507126][ T3566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.536705][ T3566] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.543892][ T3566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.569477][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.590058][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.675747][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.702061][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.722417][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.734037][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.755356][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.762536][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.787956][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.795153][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.805316][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.812944][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.855681][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.871125][ T5851] veth0_vlan: entered promiscuous mode [ 84.885831][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.893034][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.945477][ T5851] veth1_vlan: entered promiscuous mode [ 85.025043][ T5853] veth0_vlan: entered promiscuous mode [ 85.053156][ T5854] veth0_vlan: entered promiscuous mode [ 85.083950][ T5853] veth1_vlan: entered promiscuous mode [ 85.091967][ T5851] veth0_macvtap: entered promiscuous mode [ 85.104469][ T5851] veth1_macvtap: entered promiscuous mode [ 85.122686][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.137944][ T5854] veth1_vlan: entered promiscuous mode [ 85.164780][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.202568][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.236628][ T5851] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.247339][ T5851] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.256065][ T5851] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.265856][ T5851] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.278741][ T5853] veth0_macvtap: entered promiscuous mode [ 85.312373][ T5853] veth1_macvtap: entered promiscuous mode [ 85.371906][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.390266][ T5860] veth0_vlan: entered promiscuous mode [ 85.406525][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.415901][ T5854] veth0_macvtap: entered promiscuous mode [ 85.449459][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.462495][ T5854] veth1_macvtap: entered promiscuous mode [ 85.499620][ T5853] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.509310][ T5853] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.518469][ T5853] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.527454][ T5853] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.540770][ T5860] veth1_vlan: entered promiscuous mode [ 85.565001][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.573791][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.633362][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.646410][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.673287][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.687661][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.689132][ T5854] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.703852][ T5854] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.712809][ T5854] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.721773][ T5854] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.745248][ T5859] veth0_vlan: entered promiscuous mode [ 85.763331][ T5860] veth0_macvtap: entered promiscuous mode [ 85.791887][ T5860] veth1_macvtap: entered promiscuous mode [ 85.826553][ T5859] veth1_vlan: entered promiscuous mode [ 85.871084][ T5851] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 85.884985][ T5859] veth0_macvtap: entered promiscuous mode [ 85.941204][ T5859] veth1_macvtap: entered promiscuous mode [ 85.972840][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.022551][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.055256][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.066731][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.071497][ T5860] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.078667][ T5849] Bluetooth: hci0: command tx timeout [ 86.084216][ T5860] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.088213][ T5166] Bluetooth: hci1: command tx timeout [ 86.096759][ T5860] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.111043][ T5860] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.212446][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.227980][ T5166] Bluetooth: hci2: command tx timeout [ 86.233450][ T5166] Bluetooth: hci3: command tx timeout [ 86.239313][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.282861][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.308188][ T5166] Bluetooth: hci4: command tx timeout [ 86.351932][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.432007][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.446726][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.451428][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.456140][ T5859] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.481493][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.491803][ T5859] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.504370][ T5859] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.514156][ T5859] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.753130][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.798103][ T977] cfg80211: failed to load regulatory.db [ 86.805389][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.855386][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.886735][ T5858] ------------[ cut here ]------------ [ 86.892367][ T5858] WARNING: CPU: 1 PID: 5858 at kernel/softirq.c:387 __local_bh_enable_ip+0x180/0x1c0 [ 86.901861][ T5858] Modules linked in: [ 86.905941][ T5858] CPU: 1 UID: 0 PID: 5858 Comm: krxrpcio/7001 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 86.916469][ T5858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 86.926558][ T5858] RIP: 0010:__local_bh_enable_ip+0x180/0x1c0 [ 86.932595][ T5858] Code: 48 3b 44 24 48 75 57 48 8d 65 e0 5b 41 5c 41 5e 41 5f 5d e9 82 41 ec 09 cc 90 0f 0b 90 e9 f9 fe ff ff e8 53 00 00 00 eb 9f 90 <0f> 0b 90 e9 24 ff ff ff 48 c7 c1 30 17 a2 8f 80 e1 07 80 c1 03 38 [ 86.952227][ T5858] RSP: 0018:ffffc90003f8f4c0 EFLAGS: 00010046 [ 86.958310][ T5858] RAX: 0000000000000000 RBX: 0000000000000201 RCX: 0000000000000001 [ 86.966276][ T5858] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff89de65e3 [ 86.974246][ T5858] RBP: ffffc90003f8f548 R08: ffff8880b873bf03 R09: 1ffff110170e77e0 [ 86.982219][ T5858] R10: dffffc0000000000 R11: ffffed10170e77e1 R12: ffff8880b873bf00 [ 86.990194][ T5858] R13: ffff888076a38770 R14: dffffc0000000000 R15: 1ffff920007f1e98 [ 86.998178][ T5858] FS: 0000000000000000(0000) GS:ffff888125d1d000(0000) knlGS:0000000000000000 [ 87.007109][ T5858] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.013686][ T5858] CR2: 00000000f73f6188 CR3: 0000000026da4000 CR4: 00000000003526f0 [ 87.021655][ T5858] Call Trace: [ 87.024931][ T5858] [ 87.027872][ T5858] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 87.033596][ T5858] ? do_raw_spin_unlock+0x122/0x240 [ 87.038801][ T5858] ? rt_set_nexthop+0x693/0xa80 [ 87.043653][ T5858] rt_set_nexthop+0x693/0xa80 [ 87.048337][ T5858] ip_route_output_key_hash_rcu+0x18f6/0x23a0 [ 87.054419][ T5858] ? ip_route_output_key_hash+0xde/0x2e0 [ 87.060063][ T5858] ip_route_output_key_hash+0x1b9/0x2e0 [ 87.065616][ T5858] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 87.071691][ T5858] ? make_kuid+0x1d9/0x680 [ 87.076117][ T5858] ? lockdep_unlock+0x89/0x120 [ 87.080878][ T5858] ? __pfx_make_kuid+0x10/0x10 [ 87.085654][ T5858] ip_route_output_flow+0x2a/0x150 [ 87.090779][ T5858] rxrpc_init_peer+0x50a/0xc60 [ 87.095561][ T5858] ? __pfx_rxrpc_init_peer+0x10/0x10 [ 87.100863][ T5858] ? __lock_acquire+0xab9/0xd20 [ 87.105727][ T5858] ? do_raw_spin_lock+0x121/0x290 [ 87.110759][ T5858] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 87.116135][ T5858] rxrpc_new_incoming_peer+0x281/0x5a0 [ 87.121608][ T5858] rxrpc_new_incoming_call+0x612/0x14f0 [ 87.127606][ T5858] rxrpc_io_thread+0x18b2/0x2cd0 [ 87.132549][ T5858] ? rxrpc_io_thread+0x1171/0x2cd0 [ 87.137691][ T5858] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 87.142986][ T5858] ? do_raw_spin_lock+0x121/0x290 [ 87.148022][ T5858] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 87.153939][ T5858] ? __kthread_parkme+0x1a1/0x200 [ 87.158971][ T5858] kthread+0x70e/0x8a0 [ 87.163083][ T5858] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 87.168372][ T5858] ? __pfx_kthread+0x10/0x10 [ 87.172968][ T5858] ? _raw_spin_unlock_irq+0x23/0x50 [ 87.178169][ T5858] ? lockdep_hardirqs_on+0x9c/0x150 [ 87.183374][ T5858] ? __pfx_kthread+0x10/0x10 [ 87.187974][ T5858] ret_from_fork+0x3fc/0x770 [ 87.192568][ T5858] ? __pfx_ret_from_fork+0x10/0x10 [ 87.197685][ T5858] ? __switch_to_asm+0x39/0x70 [ 87.202449][ T5858] ? __switch_to_asm+0x33/0x70 [ 87.207212][ T5858] ? __pfx_kthread+0x10/0x10 [ 87.211809][ T5858] ret_from_fork_asm+0x1a/0x30 [ 87.216597][ T5858] [ 87.219612][ T5858] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 87.226891][ T5858] CPU: 1 UID: 0 PID: 5858 Comm: krxrpcio/7001 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 87.237390][ T5858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 87.247438][ T5858] Call Trace: [ 87.250717][ T5858] [ 87.253647][ T5858] dump_stack_lvl+0x99/0x250 [ 87.258243][ T5858] ? __asan_memcpy+0x40/0x70 [ 87.262835][ T5858] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.268037][ T5858] ? __pfx__printk+0x10/0x10 [ 87.272638][ T5858] panic+0x2db/0x790 [ 87.276558][ T5858] ? __pfx_panic+0x10/0x10 [ 87.281405][ T5858] ? show_trace_log_lvl+0x4fb/0x550 [ 87.286613][ T5858] ? ret_from_fork_asm+0x1a/0x30 [ 87.291566][ T5858] __warn+0x31b/0x4b0 [ 87.295571][ T5858] ? __local_bh_enable_ip+0x180/0x1c0 [ 87.300964][ T5858] ? __local_bh_enable_ip+0x180/0x1c0 [ 87.306359][ T5858] report_bug+0x2be/0x4f0 [ 87.310695][ T5858] ? __local_bh_enable_ip+0x180/0x1c0 [ 87.316088][ T5858] ? __local_bh_enable_ip+0x180/0x1c0 [ 87.321491][ T5858] ? __local_bh_enable_ip+0x182/0x1c0 [ 87.326879][ T5858] handle_bug+0x84/0x160 [ 87.331128][ T5858] exc_invalid_op+0x1a/0x50 [ 87.335639][ T5858] asm_exc_invalid_op+0x1a/0x20 [ 87.340487][ T5858] RIP: 0010:__local_bh_enable_ip+0x180/0x1c0 [ 87.346470][ T5858] Code: 48 3b 44 24 48 75 57 48 8d 65 e0 5b 41 5c 41 5e 41 5f 5d e9 82 41 ec 09 cc 90 0f 0b 90 e9 f9 fe ff ff e8 53 00 00 00 eb 9f 90 <0f> 0b 90 e9 24 ff ff ff 48 c7 c1 30 17 a2 8f 80 e1 07 80 c1 03 38 [ 87.366509][ T5858] RSP: 0018:ffffc90003f8f4c0 EFLAGS: 00010046 [ 87.372588][ T5858] RAX: 0000000000000000 RBX: 0000000000000201 RCX: 0000000000000001 [ 87.380588][ T5858] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff89de65e3 [ 87.388562][ T5858] RBP: ffffc90003f8f548 R08: ffff8880b873bf03 R09: 1ffff110170e77e0 [ 87.396534][ T5858] R10: dffffc0000000000 R11: ffffed10170e77e1 R12: ffff8880b873bf00 [ 87.404508][ T5858] R13: ffff888076a38770 R14: dffffc0000000000 R15: 1ffff920007f1e98 [ 87.412500][ T5858] ? rt_set_nexthop+0x693/0xa80 [ 87.417361][ T5858] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 87.423084][ T5858] ? do_raw_spin_unlock+0x122/0x240 [ 87.428287][ T5858] ? rt_set_nexthop+0x693/0xa80 [ 87.433144][ T5858] rt_set_nexthop+0x693/0xa80 [ 87.437829][ T5858] ip_route_output_key_hash_rcu+0x18f6/0x23a0 [ 87.443927][ T5858] ? ip_route_output_key_hash+0xde/0x2e0 [ 87.449583][ T5858] ip_route_output_key_hash+0x1b9/0x2e0 [ 87.455135][ T5858] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 87.461207][ T5858] ? make_kuid+0x1d9/0x680 [ 87.465627][ T5858] ? lockdep_unlock+0x89/0x120 [ 87.470390][ T5858] ? __pfx_make_kuid+0x10/0x10 [ 87.475161][ T5858] ip_route_output_flow+0x2a/0x150 [ 87.480278][ T5858] rxrpc_init_peer+0x50a/0xc60 [ 87.485081][ T5858] ? __pfx_rxrpc_init_peer+0x10/0x10 [ 87.490396][ T5858] ? __lock_acquire+0xab9/0xd20 [ 87.495611][ T5858] ? do_raw_spin_lock+0x121/0x290 [ 87.500657][ T5858] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 87.506040][ T5858] rxrpc_new_incoming_peer+0x281/0x5a0 [ 87.511548][ T5858] rxrpc_new_incoming_call+0x612/0x14f0 [ 87.517114][ T5858] rxrpc_io_thread+0x18b2/0x2cd0 [ 87.522053][ T5858] ? rxrpc_io_thread+0x1171/0x2cd0 [ 87.527195][ T5858] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 87.532500][ T5858] ? do_raw_spin_lock+0x121/0x290 [ 87.537540][ T5858] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 87.543458][ T5858] ? __kthread_parkme+0x1a1/0x200 [ 87.548500][ T5858] kthread+0x70e/0x8a0 [ 87.552584][ T5858] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 87.557880][ T5858] ? __pfx_kthread+0x10/0x10 [ 87.562481][ T5858] ? _raw_spin_unlock_irq+0x23/0x50 [ 87.567681][ T5858] ? lockdep_hardirqs_on+0x9c/0x150 [ 87.572889][ T5858] ? __pfx_kthread+0x10/0x10 [ 87.577504][ T5858] ret_from_fork+0x3fc/0x770 [ 87.582095][ T5858] ? __pfx_ret_from_fork+0x10/0x10 [ 87.587216][ T5858] ? __switch_to_asm+0x39/0x70 [ 87.591991][ T5858] ? __switch_to_asm+0x33/0x70 [ 87.596756][ T5858] ? __pfx_kthread+0x10/0x10 [ 87.601357][ T5858] ret_from_fork_asm+0x1a/0x30 [ 87.606159][ T5858] [ 87.609440][ T5858] Kernel Offset: disabled [ 87.613776][ T5858] Rebooting in 86400 seconds..