last executing test programs: 887.238484ms ago: executing program 0 (id=1): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000b004205"], 0x44}}, 0x0) 654.042118ms ago: executing program 0 (id=6): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x5, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="8252", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000140)="9294", 0x2}], 0x1, &(0x7f0000000740)=ANY=[@ANYBLOB="9001"], 0x190}}], 0x2, 0x4000c020) 448.303662ms ago: executing program 0 (id=7): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000040)=0x1c, 0x4) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000009b67edc70c5c0c319e8b3eb0007ae53c60fdf11b51e3a8799cf1724900fa2aa07e8cb9e68054f7eb42f961579d00"/65, @ANYRES16=r1, @ANYBLOB="030e000000000000000001000000"], 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x10, 0x453, 0x0, 0x0, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfffffffffffffe24, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0) shutdown(0xffffffffffffffff, 0x1) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x6, 0x0, 0xc8) 0s ago: executing program 0 (id=8): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r0, 0x8004b709, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.227' (ED25519) to the list of known hosts. [ 70.820886][ T5085] cgroup: Unknown subsys name 'net' [ 71.023939][ T5085] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.610874][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.617744][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.829998][ T5085] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.069479][ T5098] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.086197][ T5098] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.115288][ T5098] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.123762][ T5098] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.131866][ T5098] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.139824][ T5098] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.180202][ T5098] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.188706][ T5098] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.197290][ T5098] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.206875][ T5098] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.215266][ T5098] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.228303][ T5104] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.237228][ T5104] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.237289][ T5105] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.245645][ T5104] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.260803][ T5104] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.269310][ T5104] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.282483][ T4493] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.291960][ T5104] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.309937][ T5104] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.337709][ T5104] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.346855][ T5104] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.355484][ T5104] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.365546][ T5104] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.403551][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.417148][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.431709][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.441200][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.458365][ T55] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 75.466902][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.981119][ T5100] chnl_net:caif_netlink_parms(): no params data found [ 76.024554][ T5095] chnl_net:caif_netlink_parms(): no params data found [ 76.070649][ T5106] chnl_net:caif_netlink_parms(): no params data found [ 76.094381][ T5112] chnl_net:caif_netlink_parms(): no params data found [ 76.191542][ T5099] chnl_net:caif_netlink_parms(): no params data found [ 76.279064][ T5100] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.287181][ T5100] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.294560][ T5100] bridge_slave_0: entered allmulticast mode [ 76.302172][ T5100] bridge_slave_0: entered promiscuous mode [ 76.342262][ T5100] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.349759][ T5100] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.357116][ T5100] bridge_slave_1: entered allmulticast mode [ 76.364163][ T5100] bridge_slave_1: entered promiscuous mode [ 76.396712][ T5095] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.403854][ T5095] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.411397][ T5095] bridge_slave_0: entered allmulticast mode [ 76.419186][ T5095] bridge_slave_0: entered promiscuous mode [ 76.462899][ T5095] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.470241][ T5095] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.477507][ T5095] bridge_slave_1: entered allmulticast mode [ 76.484605][ T5095] bridge_slave_1: entered promiscuous mode [ 76.516720][ T5106] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.523905][ T5106] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.531946][ T5106] bridge_slave_0: entered allmulticast mode [ 76.539493][ T5106] bridge_slave_0: entered promiscuous mode [ 76.616038][ T5112] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.623242][ T5112] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.630887][ T5112] bridge_slave_0: entered allmulticast mode [ 76.637913][ T5112] bridge_slave_0: entered promiscuous mode [ 76.649490][ T5106] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.656974][ T5106] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.664174][ T5106] bridge_slave_1: entered allmulticast mode [ 76.673683][ T5106] bridge_slave_1: entered promiscuous mode [ 76.696332][ T5100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.732291][ T5095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.742012][ T5112] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.749438][ T5112] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.756888][ T5112] bridge_slave_1: entered allmulticast mode [ 76.763848][ T5112] bridge_slave_1: entered promiscuous mode [ 76.785891][ T5100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.795373][ T5099] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.802546][ T5099] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.809889][ T5099] bridge_slave_0: entered allmulticast mode [ 76.817851][ T5099] bridge_slave_0: entered promiscuous mode [ 76.828005][ T5095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.837296][ T5099] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.844447][ T5099] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.852734][ T5099] bridge_slave_1: entered allmulticast mode [ 76.859937][ T5099] bridge_slave_1: entered promiscuous mode [ 76.882429][ T5106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.896000][ T5106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.969740][ T5112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.011521][ T5100] team0: Port device team_slave_0 added [ 77.035866][ T5095] team0: Port device team_slave_0 added [ 77.057568][ T5112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.083539][ T5106] team0: Port device team_slave_0 added [ 77.096456][ T5100] team0: Port device team_slave_1 added [ 77.103892][ T5095] team0: Port device team_slave_1 added [ 77.123437][ T5099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.138969][ T5099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.162463][ T5106] team0: Port device team_slave_1 added [ 77.208586][ T5095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.216684][ T5095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.216738][ T5104] Bluetooth: hci0: command tx timeout [ 77.248614][ T5095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.285547][ T5104] Bluetooth: hci1: command tx timeout [ 77.287424][ T5112] team0: Port device team_slave_0 added [ 77.300937][ T5112] team0: Port device team_slave_1 added [ 77.320025][ T5106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.327079][ T5106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.353117][ T5106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.366406][ T5104] Bluetooth: hci2: command tx timeout [ 77.386953][ T5100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.393952][ T5100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.420610][ T5100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.432779][ T5095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.440242][ T5095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.466348][ T5104] Bluetooth: hci3: command tx timeout [ 77.472162][ T5095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.500790][ T5099] team0: Port device team_slave_0 added [ 77.521189][ T5099] team0: Port device team_slave_1 added [ 77.535612][ T5104] Bluetooth: hci4: command tx timeout [ 77.552719][ T5106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.561699][ T5106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.588086][ T5106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.607631][ T5100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.614606][ T5100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.640831][ T5100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.701680][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.708798][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.735148][ T5112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.750746][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.757887][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.784350][ T5112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.821818][ T5099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.829101][ T5099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.855555][ T5099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.903198][ T5106] hsr_slave_0: entered promiscuous mode [ 77.910070][ T5106] hsr_slave_1: entered promiscuous mode [ 77.929349][ T5095] hsr_slave_0: entered promiscuous mode [ 77.938716][ T5095] hsr_slave_1: entered promiscuous mode [ 77.945934][ T5095] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.953790][ T5095] Cannot create hsr debugfs directory [ 77.972958][ T5099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.980127][ T5099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.006619][ T5099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.084098][ T5100] hsr_slave_0: entered promiscuous mode [ 78.092168][ T5100] hsr_slave_1: entered promiscuous mode [ 78.098743][ T5100] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.106654][ T5100] Cannot create hsr debugfs directory [ 78.184579][ T5112] hsr_slave_0: entered promiscuous mode [ 78.191323][ T5112] hsr_slave_1: entered promiscuous mode [ 78.198740][ T5112] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.206423][ T5112] Cannot create hsr debugfs directory [ 78.355481][ T5099] hsr_slave_0: entered promiscuous mode [ 78.365491][ T5099] hsr_slave_1: entered promiscuous mode [ 78.372470][ T5099] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.381056][ T5099] Cannot create hsr debugfs directory [ 78.774573][ T5095] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.796287][ T5095] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.807459][ T5095] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.830472][ T5095] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.882576][ T5106] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.896576][ T5106] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.907205][ T5106] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.926181][ T5106] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.046932][ T5112] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.058517][ T5112] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.072927][ T5112] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.114006][ T5112] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.193373][ T5100] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.207648][ T5100] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.250479][ T5100] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.263932][ T5100] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.285380][ T5104] Bluetooth: hci0: command tx timeout [ 79.313439][ T5095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.360480][ T5099] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.368452][ T5104] Bluetooth: hci1: command tx timeout [ 79.375883][ T5099] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.387502][ T5099] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.427537][ T5099] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.445268][ T5104] Bluetooth: hci2: command tx timeout [ 79.523152][ T5106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.531989][ T5104] Bluetooth: hci3: command tx timeout [ 79.544631][ T5095] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.587611][ T5147] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.595129][ T5147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.615838][ T5104] Bluetooth: hci4: command tx timeout [ 79.623162][ T5147] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.630388][ T5147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.680534][ T5106] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.787466][ T5149] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.794595][ T5149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.822111][ T5100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.848607][ T5112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.870636][ T5149] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.877873][ T5149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.910795][ T5099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.986256][ T5112] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.013563][ T5099] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.030775][ T5100] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.062340][ T5149] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.069638][ T5149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.091489][ T5149] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.098741][ T5149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.136525][ T5149] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.143715][ T5149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.161830][ T5149] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.169036][ T5149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.179179][ T5149] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.186380][ T5149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.212483][ T5149] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.219688][ T5149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.464002][ T5100] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.513486][ T5095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.551317][ T5112] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.606811][ T5106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.758005][ T5095] veth0_vlan: entered promiscuous mode [ 80.857508][ T5095] veth1_vlan: entered promiscuous mode [ 80.937945][ T5099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.012259][ T5095] veth0_macvtap: entered promiscuous mode [ 81.061772][ T5095] veth1_macvtap: entered promiscuous mode [ 81.123801][ T5100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.164019][ T5095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.208474][ T5099] veth0_vlan: entered promiscuous mode [ 81.231955][ T5095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.251294][ T5112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.277434][ T5095] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.286973][ T5095] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.296465][ T5095] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.305521][ T5095] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.345893][ T5099] veth1_vlan: entered promiscuous mode [ 81.366241][ T5104] Bluetooth: hci0: command tx timeout [ 81.413031][ T5106] veth0_vlan: entered promiscuous mode [ 81.445914][ T5104] Bluetooth: hci1: command tx timeout [ 81.491574][ T5106] veth1_vlan: entered promiscuous mode [ 81.509715][ T5100] veth0_vlan: entered promiscuous mode [ 81.525737][ T5104] Bluetooth: hci2: command tx timeout [ 81.540466][ T5099] veth0_macvtap: entered promiscuous mode [ 81.565792][ T5100] veth1_vlan: entered promiscuous mode [ 81.587912][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.607545][ T5104] Bluetooth: hci3: command tx timeout [ 81.611485][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.623394][ T5099] veth1_macvtap: entered promiscuous mode [ 81.667114][ T5106] veth0_macvtap: entered promiscuous mode [ 81.690876][ T5104] Bluetooth: hci4: command tx timeout [ 81.703338][ T5106] veth1_macvtap: entered promiscuous mode [ 81.721453][ T5112] veth0_vlan: entered promiscuous mode [ 81.731413][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.743410][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.754951][ T5099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.768929][ T1277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.792425][ T5100] veth0_macvtap: entered promiscuous mode [ 81.803806][ T1277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.808446][ T5112] veth1_vlan: entered promiscuous mode [ 81.831509][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.843197][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.863021][ T5099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.954169][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.972734][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.984351][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.996649][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.010883][ T5106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.032477][ T5099] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.056561][ T5099] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.075406][ T5099] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.084627][ T5099] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.099084][ T5100] veth1_macvtap: entered promiscuous mode [ 82.144723][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.185864][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.225245][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.245610][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.281951][ T5106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.317194][ T5180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 82.329258][ T5180] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 82.357456][ T5106] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.375319][ T5106] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.397065][ T5106] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.437101][ T5106] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.475927][ T5112] veth0_macvtap: entered promiscuous mode [ 82.576558][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.584420][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.638749][ T5112] veth1_macvtap: entered promiscuous mode [ 82.700919][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.720687][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.733123][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.743942][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.754248][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.764912][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.779448][ T5100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.812019][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.823073][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.837317][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.848527][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.860099][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.871054][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.882787][ T5100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.923812][ T5184] netlink: 'syz.0.7': attribute type 10 has an invalid length. [ 82.951436][ T5184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.964815][ T5184] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 82.980967][ T5100] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.991329][ T5100] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.001069][ T5100] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.010762][ T5100] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.026307][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.040428][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.051521][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.062893][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.074009][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.084647][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.094765][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.106943][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.114157][ T5188] [ 83.118672][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.119112][ T5188] ================================================ [ 83.132824][ T5188] WARNING: lock held when returning to user space! [ 83.139337][ T5188] 6.10.0-syzkaller-04472-g51835949dda3 #0 Not tainted [ 83.146122][ T5188] ------------------------------------------------ [ 83.152653][ T5188] syz.0.8/5188 is leaving the kernel with locks still held! [ 83.159955][ T5188] 1 lock held by syz.0.8/5188: [ 83.164744][ T5188] #0: ffffffff8e335fe0 (rcu_read_lock){....}-{1:2}, at: ns_ioctl+0x3e0/0x740 [ 83.174539][ T5106] ieee80211 phy7: Selected rate control algorithm 'minstrel_ht' [ 83.175793][ T5188] ------------[ cut here ]------------ [ 83.187675][ T5188] Voluntary context switch within RCU read-side critical section! [ 83.187806][ T5188] WARNING: CPU: 0 PID: 5188 at kernel/rcu/tree_plugin.h:330 rcu_note_context_switch+0xcf4/0xff0 [ 83.206076][ T5188] Modules linked in: [ 83.209980][ T5188] CPU: 0 PID: 5188 Comm: syz.0.8 Not tainted 6.10.0-syzkaller-04472-g51835949dda3 #0 [ 83.219431][ T5188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 83.229501][ T5188] RIP: 0010:rcu_note_context_switch+0xcf4/0xff0 [ 83.235777][ T5188] Code: 00 ba 02 00 00 00 e8 cb 02 fe ff 4c 8b b4 24 80 00 00 00 eb 91 c6 05 98 3f 1b 0e 01 90 48 c7 c7 40 21 cc 8b e8 8d 26 db ff 90 <0f> 0b 90 90 e9 3b f4 ff ff 90 0f 0b 90 45 84 ed 0f 84 00 f4 ff ff [ 83.255386][ T5188] RSP: 0000:ffffc9000478fba0 EFLAGS: 00010046 [ 83.261462][ T5188] RAX: cc18226d076d3200 RBX: ffff8880222cde44 RCX: 0000000000040000 [ 83.269473][ T5188] RDX: ffffc900038da000 RSI: 000000000003ffff RDI: 0000000000040000 [ 83.277441][ T5188] RBP: ffffc9000478fcf0 R08: ffffffff815878a2 R09: fffffbfff1c39d94 [ 83.285428][ T5188] R10: dffffc0000000000 R11: fffffbfff1c39d94 R12: ffff8880222cda00 [ 83.293411][ T5188] R13: 0000000000000000 R14: 1ffff920008f1f8c R15: dffffc0000000000 [ 83.301390][ T5188] FS: 00007f6e73f946c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 83.310342][ T5188] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 83.316942][ T5188] CR2: 00007f6e73305a6c CR3: 000000007cfc4000 CR4: 00000000003506f0 [ 83.324928][ T5188] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 83.332947][ T5188] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 83.340926][ T5188] Call Trace: [ 83.344211][ T5188] [ 83.347141][ T5188] ? __warn+0x163/0x4e0 [ 83.351303][ T5188] ? rcu_note_context_switch+0xcf4/0xff0 [ 83.356958][ T5188] ? report_bug+0x2b3/0x500 [ 83.361467][ T5188] ? rcu_note_context_switch+0xcf4/0xff0 [ 83.367126][ T5188] ? handle_bug+0x3e/0x70 [ 83.371458][ T5188] ? exc_invalid_op+0x1a/0x50 [ 83.376156][ T5188] ? asm_exc_invalid_op+0x1a/0x20 [ 83.381230][ T5188] ? __warn_printk+0x292/0x360 [ 83.386015][ T5188] ? rcu_note_context_switch+0xcf4/0xff0 [ 83.391679][ T5188] ? __schedule+0x1808/0x4a60 [ 83.396366][ T5188] ? irq_work_queue+0xd1/0x150 [ 83.401132][ T5188] ? __pfx_rcu_note_context_switch+0x10/0x10 [ 83.407139][ T5188] ? rcu_is_watching+0x15/0xb0 [ 83.411927][ T5188] __schedule+0x348/0x4a60 [ 83.416363][ T5188] ? trace_irq_disable+0x3b/0x120 [ 83.421406][ T5188] ? preempt_schedule_irq+0x144/0x1c0 [ 83.426789][ T5188] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 83.432513][ T5188] ? __pfx___schedule+0x10/0x10 [ 83.437366][ T5188] ? trace_irq_disable+0x2c/0x120 [ 83.442390][ T5188] ? rcu_is_watching+0x15/0xb0 [ 83.447162][ T5188] schedule+0x14b/0x320 [ 83.451322][ T5188] irqentry_exit_to_user_mode+0xe7/0x280 [ 83.456954][ T5188] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 83.462416][ T5188] RIP: 0033:0x7f6e73175a19 [ 83.466850][ T5188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.486475][ T5188] RSP: 002b:00007f6e73f94048 EFLAGS: 00000246 [ 83.492546][ T5188] RAX: fffffffffffffffd RBX: 00007f6e73303f60 RCX: 00007f6e73175a19 [ 83.500521][ T5188] RDX: 0000000000000000 RSI: 000000008004b709 RDI: 0000000000000003 [ 83.508493][ T5188] RBP: 00007f6e731e4e49 R08: 0000000000000000 R09: 0000000000000000 [ 83.516473][ T5188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.524481][ T5188] R13: 000000000000000b R14: 00007f6e73303f60 R15: 00007ffcb7197718 [ 83.532490][ T5188] [ 83.535523][ T5188] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 83.542798][ T5188] CPU: 0 PID: 5188 Comm: syz.0.8 Not tainted 6.10.0-syzkaller-04472-g51835949dda3 #0 [ 83.552253][ T5188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 83.562316][ T5188] Call Trace: [ 83.565606][ T5188] [ 83.568548][ T5188] dump_stack_lvl+0x241/0x360 [ 83.573230][ T5188] ? __pfx_dump_stack_lvl+0x10/0x10 [ 83.578444][ T5188] ? __pfx__printk+0x10/0x10 [ 83.583053][ T5188] ? vscnprintf+0x5d/0x90 [ 83.587389][ T5188] panic+0x349/0x860 [ 83.591285][ T5188] ? __warn+0x172/0x4e0 [ 83.595445][ T5188] ? __pfx_panic+0x10/0x10 [ 83.599882][ T5188] __warn+0x346/0x4e0 [ 83.603885][ T5188] ? rcu_note_context_switch+0xcf4/0xff0 [ 83.609575][ T5188] report_bug+0x2b3/0x500 [ 83.613933][ T5188] ? rcu_note_context_switch+0xcf4/0xff0 [ 83.619594][ T5188] handle_bug+0x3e/0x70 [ 83.623772][ T5188] exc_invalid_op+0x1a/0x50 [ 83.628316][ T5188] asm_exc_invalid_op+0x1a/0x20 [ 83.633189][ T5188] RIP: 0010:rcu_note_context_switch+0xcf4/0xff0 [ 83.639453][ T5188] Code: 00 ba 02 00 00 00 e8 cb 02 fe ff 4c 8b b4 24 80 00 00 00 eb 91 c6 05 98 3f 1b 0e 01 90 48 c7 c7 40 21 cc 8b e8 8d 26 db ff 90 <0f> 0b 90 90 e9 3b f4 ff ff 90 0f 0b 90 45 84 ed 0f 84 00 f4 ff ff [ 83.659252][ T5188] RSP: 0000:ffffc9000478fba0 EFLAGS: 00010046 [ 83.665322][ T5188] RAX: cc18226d076d3200 RBX: ffff8880222cde44 RCX: 0000000000040000 [ 83.673326][ T5188] RDX: ffffc900038da000 RSI: 000000000003ffff RDI: 0000000000040000 [ 83.681306][ T5188] RBP: ffffc9000478fcf0 R08: ffffffff815878a2 R09: fffffbfff1c39d94 [ 83.689284][ T5188] R10: dffffc0000000000 R11: fffffbfff1c39d94 R12: ffff8880222cda00 [ 83.697269][ T5188] R13: 0000000000000000 R14: 1ffff920008f1f8c R15: dffffc0000000000 [ 83.705256][ T5188] ? __warn_printk+0x292/0x360 [ 83.710049][ T5188] ? __schedule+0x1808/0x4a60 [ 83.714739][ T5188] ? irq_work_queue+0xd1/0x150 [ 83.719508][ T5188] ? __pfx_rcu_note_context_switch+0x10/0x10 [ 83.725510][ T5188] ? rcu_is_watching+0x15/0xb0 [ 83.730284][ T5188] __schedule+0x348/0x4a60 [ 83.734723][ T5188] ? trace_irq_disable+0x3b/0x120 [ 83.739768][ T5188] ? preempt_schedule_irq+0x144/0x1c0 [ 83.745145][ T5188] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 83.750878][ T5188] ? __pfx___schedule+0x10/0x10 [ 83.755732][ T5188] ? trace_irq_disable+0x2c/0x120 [ 83.760778][ T5188] ? rcu_is_watching+0x15/0xb0 [ 83.765562][ T5188] schedule+0x14b/0x320 [ 83.769740][ T5188] irqentry_exit_to_user_mode+0xe7/0x280 [ 83.775400][ T5188] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 83.780885][ T5188] RIP: 0033:0x7f6e73175a19 [ 83.785312][ T5188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.804947][ T5188] RSP: 002b:00007f6e73f94048 EFLAGS: 00000246 [ 83.811018][ T5188] RAX: fffffffffffffffd RBX: 00007f6e73303f60 RCX: 00007f6e73175a19 [ 83.818991][ T5188] RDX: 0000000000000000 RSI: 000000008004b709 RDI: 0000000000000003 [ 83.826970][ T5188] RBP: 00007f6e731e4e49 R08: 0000000000000000 R09: 0000000000000000 [ 83.834941][ T5188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.842912][ T5188] R13: 000000000000000b R14: 00007f6e73303f60 R15: 00007ffcb7197718 [ 83.850900][ T5188] [ 83.854280][ T5188] Kernel Offset: disabled [ 83.858607][ T5188] Rebooting in 86400 seconds..