last executing test programs: 709.515426ms ago: executing program 3 (id=4): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) write$binfmt_misc(r2, 0x0, 0x4) 36.372278ms ago: executing program 1 (id=2): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) capset(&(0x7f0000000080), &(0x7f0000000040)={0x200000}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x47}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b480000945f0400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd0000001000010009", 0x4d}], 0x1) r3 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, 0x1c) listen(0xffffffffffffffff, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1c00000d0000000000000040000060cd3c680028060087c50000000000000000000000000000fe88000000000000000000000100000000000000000000000000000000fc"], 0x5e) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @private=0xa010101}, 0x10) listen(r7, 0x8) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f00000000c0), 0x4) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmsg(r8, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001440)}, 0x0) 0s ago: executing program 4 (id=5): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000004000000000000000000190095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001840)={r0, r2, 0x25, 0x0, @val=@netfilter}, 0x40) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000100)={0x0, 'macvlan0\x00', {0x3}, 0xd}) syz_emit_ethernet(0x16, &(0x7f0000000280)={@empty, @remote, @val={@val={0x88a8, 0x6}, {0x8100, 0x1}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.145' (ED25519) to the list of known hosts. [ 49.373686][ T5074] cgroup: Unknown subsys name 'net' [ 49.570943][ T5074] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 50.926733][ T5074] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.128448][ T5091] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.141820][ T5091] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.184009][ T5101] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.192520][ T5101] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.193432][ T5106] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.200997][ T5101] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 53.215443][ T5101] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.216344][ T5106] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.223610][ T5101] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.238231][ T5101] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 53.240882][ T5106] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.245661][ T5108] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.253466][ T5106] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.260986][ T5108] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.266975][ T5106] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 53.274393][ T5101] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 53.280792][ T5106] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.287870][ T5108] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.296865][ T5101] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.301535][ T5108] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.308805][ T5101] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 53.319523][ T5108] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 53.322742][ T5101] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.329729][ T5108] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 53.343441][ T4492] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 53.343580][ T5108] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.358443][ T5108] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 53.359377][ T5101] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 53.367473][ T5108] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.373178][ T5101] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.898010][ T5095] chnl_net:caif_netlink_parms(): no params data found [ 53.998768][ T5094] chnl_net:caif_netlink_parms(): no params data found [ 54.008355][ T5090] chnl_net:caif_netlink_parms(): no params data found [ 54.022808][ T5088] chnl_net:caif_netlink_parms(): no params data found [ 54.143468][ T5089] chnl_net:caif_netlink_parms(): no params data found [ 54.162752][ T5095] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.170006][ T5095] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.179238][ T5095] bridge_slave_0: entered allmulticast mode [ 54.186301][ T5095] bridge_slave_0: entered promiscuous mode [ 54.195160][ T5095] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.202290][ T5095] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.209898][ T5095] bridge_slave_1: entered allmulticast mode [ 54.217586][ T5095] bridge_slave_1: entered promiscuous mode [ 54.338841][ T5088] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.346369][ T5088] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.353522][ T5088] bridge_slave_0: entered allmulticast mode [ 54.360994][ T5088] bridge_slave_0: entered promiscuous mode [ 54.379156][ T5090] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.386721][ T5090] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.394272][ T5090] bridge_slave_0: entered allmulticast mode [ 54.401160][ T5090] bridge_slave_0: entered promiscuous mode [ 54.411722][ T5095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.424525][ T5095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.449365][ T5088] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.456836][ T5088] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.464158][ T5088] bridge_slave_1: entered allmulticast mode [ 54.470853][ T5088] bridge_slave_1: entered promiscuous mode [ 54.488188][ T5090] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.495826][ T5090] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.502975][ T5090] bridge_slave_1: entered allmulticast mode [ 54.510586][ T5090] bridge_slave_1: entered promiscuous mode [ 54.551341][ T5094] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.558747][ T5094] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.566169][ T5094] bridge_slave_0: entered allmulticast mode [ 54.572808][ T5094] bridge_slave_0: entered promiscuous mode [ 54.580325][ T5094] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.587519][ T5094] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.595425][ T5094] bridge_slave_1: entered allmulticast mode [ 54.602101][ T5094] bridge_slave_1: entered promiscuous mode [ 54.622163][ T5088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.646375][ T5095] team0: Port device team_slave_0 added [ 54.683238][ T5088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.705540][ T5095] team0: Port device team_slave_1 added [ 54.713568][ T5090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.723447][ T5089] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.731448][ T5089] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.739193][ T5089] bridge_slave_0: entered allmulticast mode [ 54.746162][ T5089] bridge_slave_0: entered promiscuous mode [ 54.767835][ T5094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.791223][ T5088] team0: Port device team_slave_0 added [ 54.819618][ T5090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.840704][ T5089] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.848348][ T5089] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.856019][ T5089] bridge_slave_1: entered allmulticast mode [ 54.863014][ T5089] bridge_slave_1: entered promiscuous mode [ 54.881951][ T5094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.902472][ T5088] team0: Port device team_slave_1 added [ 54.921768][ T5095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.928738][ T5095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.954872][ T5095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.007013][ T5094] team0: Port device team_slave_0 added [ 55.028215][ T5088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.036339][ T5088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.062427][ T5088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.076187][ T5095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.083157][ T5095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.109598][ T5095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.123576][ T5090] team0: Port device team_slave_0 added [ 55.132597][ T5090] team0: Port device team_slave_1 added [ 55.140726][ T5089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.152085][ T5094] team0: Port device team_slave_1 added [ 55.169450][ T5088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.176723][ T5088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.202939][ T5088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.242002][ T5089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.285329][ T5090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.292302][ T5090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.318392][ T5090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.353835][ T5094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.360796][ T5094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.389966][ T5094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.405000][ T5097] Bluetooth: hci3: command tx timeout [ 55.410856][ T5097] Bluetooth: hci4: command tx timeout [ 55.416631][ T5101] Bluetooth: hci0: command tx timeout [ 55.435997][ T5090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.442953][ T5090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.469668][ T5090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.483986][ T5101] Bluetooth: hci1: command tx timeout [ 55.484004][ T5097] Bluetooth: hci2: command tx timeout [ 55.501434][ T5089] team0: Port device team_slave_0 added [ 55.510167][ T5089] team0: Port device team_slave_1 added [ 55.516831][ T5094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.523950][ T5094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.549889][ T5094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.564440][ T5088] hsr_slave_0: entered promiscuous mode [ 55.570731][ T5088] hsr_slave_1: entered promiscuous mode [ 55.594020][ T5095] hsr_slave_0: entered promiscuous mode [ 55.600233][ T5095] hsr_slave_1: entered promiscuous mode [ 55.606773][ T5095] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.614867][ T5095] Cannot create hsr debugfs directory [ 55.668308][ T5089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.676187][ T5089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.702087][ T5089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.714067][ T5089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.721033][ T5089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.747220][ T5089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.821466][ T5090] hsr_slave_0: entered promiscuous mode [ 55.828118][ T5090] hsr_slave_1: entered promiscuous mode [ 55.835037][ T5090] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.842593][ T5090] Cannot create hsr debugfs directory [ 55.892380][ T5094] hsr_slave_0: entered promiscuous mode [ 55.898722][ T5094] hsr_slave_1: entered promiscuous mode [ 55.906048][ T5094] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.913613][ T5094] Cannot create hsr debugfs directory [ 55.954432][ T5089] hsr_slave_0: entered promiscuous mode [ 55.960687][ T5089] hsr_slave_1: entered promiscuous mode [ 55.967462][ T5089] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.975716][ T5089] Cannot create hsr debugfs directory [ 56.394010][ T5088] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.406233][ T5088] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.418045][ T5088] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.428203][ T5088] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.490039][ T5095] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.501041][ T5095] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.513455][ T5095] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.538477][ T5095] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.588603][ T5089] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.599808][ T5089] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.612232][ T5089] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.637339][ T5089] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.736785][ T5094] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.749355][ T5094] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.760193][ T5094] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.771906][ T5094] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.851841][ T5090] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.869730][ T5090] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.890275][ T5088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.905320][ T5090] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.914999][ T5090] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.948807][ T5088] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.972702][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.980014][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.014340][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.021449][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.157654][ T5089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.175784][ T5095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.209407][ T5088] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.221016][ T5088] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.250870][ T5089] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.312577][ T5095] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.323228][ T5142] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.330414][ T5142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.363484][ T5142] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.370691][ T5142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.396261][ T5090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.416910][ T5142] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.424104][ T5142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.433438][ T5142] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.440595][ T5142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.486074][ T5101] Bluetooth: hci4: command tx timeout [ 57.486354][ T5097] Bluetooth: hci3: command tx timeout [ 57.491492][ T5101] Bluetooth: hci0: command tx timeout [ 57.507955][ T5090] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.536957][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.544662][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.561577][ T5094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.569634][ T5101] Bluetooth: hci1: command tx timeout [ 57.574193][ T5097] Bluetooth: hci2: command tx timeout [ 57.588977][ T5094] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.608726][ T5089] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.647568][ T5095] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.658330][ T5095] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.676563][ T5088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.693237][ T5143] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.700401][ T5143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.739190][ T5143] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.746372][ T5143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.757862][ T5143] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.765051][ T5143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.020873][ T5090] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.081243][ T5089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.243160][ T5089] veth0_vlan: entered promiscuous mode [ 58.321376][ T5089] veth1_vlan: entered promiscuous mode [ 58.350937][ T5095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.417788][ T5088] veth0_vlan: entered promiscuous mode [ 58.450750][ T5094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.472652][ T5088] veth1_vlan: entered promiscuous mode [ 58.482345][ T5089] veth0_macvtap: entered promiscuous mode [ 58.527298][ T5089] veth1_macvtap: entered promiscuous mode [ 58.540777][ T5090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.562203][ T5095] veth0_vlan: entered promiscuous mode [ 58.575995][ T5095] veth1_vlan: entered promiscuous mode [ 58.631945][ T5088] veth0_macvtap: entered promiscuous mode [ 58.642827][ T5088] veth1_macvtap: entered promiscuous mode [ 58.654739][ T5089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.681780][ T5089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.693158][ T5089] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.703531][ T5089] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.713347][ T5089] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.723628][ T5089] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.769077][ T5090] veth0_vlan: entered promiscuous mode [ 58.782363][ T5090] veth1_vlan: entered promiscuous mode [ 58.792317][ T5094] veth0_vlan: entered promiscuous mode [ 58.811235][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.822420][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.835923][ T5088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.892630][ T5094] veth1_vlan: entered promiscuous mode [ 58.907797][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.918624][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.932610][ T5088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.948103][ T5090] veth0_macvtap: entered promiscuous mode [ 58.960610][ T5090] veth1_macvtap: entered promiscuous mode [ 58.977731][ T5095] veth0_macvtap: entered promiscuous mode [ 58.997305][ T5088] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.007832][ T5088] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.017111][ T5088] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.026433][ T5088] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.092785][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.094836][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.111871][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.117204][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.129473][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.140022][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.151047][ T5090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.172246][ T5095] veth1_macvtap: entered promiscuous mode [ 59.189146][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.199989][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.209905][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.221415][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.233027][ T5090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.248716][ T5094] veth0_macvtap: entered promiscuous mode [ 59.280840][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.282295][ T5090] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.295013][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.299134][ T5090] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.313719][ T5090] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.322507][ T5090] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.350443][ T5094] veth1_macvtap: entered promiscuous mode [ 59.371414][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.382351][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.392582][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.403226][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.414196][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.426374][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.438439][ T5095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.459686][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.470364][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.481799][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.497970][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.507922][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.518672][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.530629][ T5095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.564856][ T5097] Bluetooth: hci3: command tx timeout [ 59.565078][ T5101] Bluetooth: hci4: command tx timeout [ 59.570263][ T5091] Bluetooth: hci0: command tx timeout [ 59.593205][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.604973][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.619769][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.632264][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.643692][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.655730][ T5097] Bluetooth: hci1: command tx timeout [ 59.661165][ T5097] Bluetooth: hci2: command tx timeout [ 59.667065][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.677095][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.687799][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.699659][ T5094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.739010][ T5095] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.747900][ T5095] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.757111][ T5095] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.766462][ T5095] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.801885][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.812499][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.824822][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.836093][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.846437][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.857062][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.868770][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.879595][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.892621][ T5094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.916299][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.920133][ T5094] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.924596][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.938909][ T5094] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.949154][ T5094] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.958756][ T5094] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.026903][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.035366][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.131285][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.138624][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.143076][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.156714][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.231265][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.249420][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.276522][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.296130][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.399359][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.415790][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.488257][ T5180] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000007: 0000 [#1] PREEMPT SMP KASAN PTI [ 60.488282][ T5180] KASAN: null-ptr-deref in range [0x0000000000000038-0x000000000000003f] [ 60.488305][ T5180] CPU: 1 UID: 0 PID: 5180 Comm: syz.4.5 Not tainted 6.10.0-rc6-next-20240703-syzkaller #0 [ 60.488324][ T5180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 60.488335][ T5180] RIP: 0010:xdp_do_redirect+0x63/0xb40 [ 60.488372][ T5180] Code: c3 00 18 00 00 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 9c 38 90 f8 4c 8b 23 4d 8d 74 24 38 4c 89 f3 48 c1 eb 03 <42> 0f b6 04 2b 84 c0 0f 85 fc 07 00 00 41 8b 2e 89 ee 83 e6 02 31 [ 60.488389][ T5180] RSP: 0018:ffffc900087e7828 EFLAGS: 00010202 [ 60.488406][ T5180] RAX: 1ffff11005392a80 RBX: 0000000000000007 RCX: 0000000000040000 [ 60.488419][ T5180] RDX: ffffc900092fb000 RSI: 000000000000031f RDI: 0000000000000320 [ 60.488431][ T5180] RBP: ffffc900087e79b0 R08: 0000000000000005 R09: ffffffff866bc849 [ 60.488444][ T5180] R10: 0000000000000005 R11: ffff888029c93c00 R12: 0000000000000000 [ 60.488455][ T5180] R13: dffffc0000000000 R14: 0000000000000038 R15: ffffc900087e7af0 [ 60.488468][ T5180] FS: 00007f7d51e746c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 60.488484][ T5180] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 60.488497][ T5180] CR2: 000000110c2fe5b5 CR3: 0000000051026000 CR4: 00000000003506f0 [ 60.488512][ T5180] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 60.488522][ T5180] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 60.488532][ T5180] Call Trace: [ 60.488538][ T5180] [ 60.488545][ T5180] ? __die_body+0x88/0xe0 [ 60.488570][ T5180] ? die_addr+0x108/0x140 [ 60.488593][ T5180] ? exc_general_protection+0x3dd/0x5d0 [ 60.488623][ T5180] ? asm_exc_general_protection+0x26/0x30 [ 60.488644][ T5180] ? tun_xdp_act+0x89/0xb70 [ 60.488664][ T5180] ? xdp_do_redirect+0x63/0xb40 [ 60.488686][ T5180] ? xdp_do_redirect+0x2e/0xb40 [ 60.488715][ T5180] tun_xdp_act+0xe9/0xb70 [ 60.488734][ T5180] ? tun_get_user+0x84c/0x4560 [ 60.488751][ T5180] ? __pfx___cant_migrate+0x10/0x10 [ 60.488770][ T5180] ? __pfx_tun_xdp_act+0x10/0x10 [ 60.488799][ T5180] tun_get_user+0x346d/0x4560 [ 60.488817][ T5180] ? tun_get_user+0x84c/0x4560 [ 60.488840][ T5180] ? __pfx_tun_get_user+0x10/0x10 [ 60.488860][ T5180] ? tun_get+0x1e/0x2f0 [ 60.488883][ T5180] ? tun_get+0x1e/0x2f0 [ 60.488897][ T5180] ? tun_get+0x27d/0x2f0 [ 60.488913][ T5180] tun_chr_write_iter+0x113/0x1f0 [ 60.488930][ T5180] vfs_write+0xa72/0xc90 [ 60.488948][ T5180] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 60.488965][ T5180] ? __pfx_vfs_write+0x10/0x10 [ 60.488980][ T5180] ? do_futex+0x33b/0x560 [ 60.489007][ T5180] ksys_write+0x1a0/0x2c0 [ 60.489026][ T5180] ? __pfx_ksys_write+0x10/0x10 [ 60.489042][ T5180] ? do_syscall_64+0x100/0x230 [ 60.489060][ T5180] ? do_syscall_64+0xb6/0x230 [ 60.489077][ T5180] do_syscall_64+0xf3/0x230 [ 60.489091][ T5180] ? clear_bhb_loop+0x35/0x90 [ 60.489111][ T5180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.489131][ T5180] RIP: 0033:0x7f7d5117475f [ 60.489153][ T5180] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 60.489168][ T5180] RSP: 002b:00007f7d51e74010 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 60.489187][ T5180] RAX: ffffffffffffffda RBX: 00007f7d51303f60 RCX: 00007f7d5117475f [ 60.489200][ T5180] RDX: 0000000000000016 RSI: 0000000020000280 RDI: 00000000000000c8 [ 60.489212][ T5180] RBP: 00007f7d511e4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 60.489223][ T5180] R10: 0000000000000016 R11: 0000000000000293 R12: 0000000000000000 [ 60.489234][ T5180] R13: 000000000000000b R14: 00007f7d51303f60 R15: 00007ffd82facec8 [ 60.489252][ T5180] [ 60.489259][ T5180] Modules linked in: [ 60.489270][ T5180] ---[ end trace 0000000000000000 ]--- [ 60.497235][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.501914][ T5180] RIP: 0010:xdp_do_redirect+0x63/0xb40 [ 60.532818][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.535765][ T5180] Code: c3 00 18 00 00 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 9c 38 90 f8 4c 8b 23 4d 8d 74 24 38 4c 89 f3 48 c1 eb 03 <42> 0f b6 04 2b 84 c0 0f 85 fc 07 00 00 41 8b 2e 89 ee 83 e6 02 31 [ 60.535800][ T5180] RSP: 0018:ffffc900087e7828 EFLAGS: 00010202 [ 60.535820][ T5180] RAX: 1ffff11005392a80 RBX: 0000000000000007 RCX: 0000000000040000 [ 60.535834][ T5180] RDX: ffffc900092fb000 RSI: 000000000000031f RDI: 0000000000000320 [ 60.535847][ T5180] RBP: ffffc900087e79b0 R08: 0000000000000005 R09: ffffffff866bc849 [ 60.535861][ T5180] R10: 0000000000000005 R11: ffff888029c93c00 R12: 0000000000000000 [ 60.535874][ T5180] R13: dffffc0000000000 R14: 0000000000000038 R15: ffffc900087e7af0 [ 60.535888][ T5180] FS: 00007f7d51e746c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 60.535905][ T5180] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 60.535919][ T5180] CR2: 000000110c2fe5b5 CR3: 0000000051026000 CR4: 00000000003506f0 [ 60.535935][ T5180] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 60.535946][ T5180] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 60.535961][ T5180] Kernel panic - not syncing: Fatal exception in interrupt [ 60.536169][ T5180] Kernel Offset: disabled