last executing test programs: 1.408010313s ago: executing program 1 (id=2): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x5}) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000080)={0xa, 0x4e22, 0x80000, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=[@hopopts={{0x14, 0x29, 0x36, {0x88}}}], 0x14}, 0x200440d0) 1.077166129s ago: executing program 1 (id=5): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r0, 0x80015b1a, 0x0) 955.727966ms ago: executing program 0 (id=1): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000180), 0x0, 0x24044013, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0xfdef}], 0x1) 815.618914ms ago: executing program 0 (id=6): r0 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f0000000080)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) unshare(0x28000600) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0xf, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x8, 0x3, 0x7, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 732.219548ms ago: executing program 1 (id=7): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x803}) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffff9]}, 0x0, 0x8) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000100)=0x1) 585.864115ms ago: executing program 2 (id=3): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(r0) socket$can_raw(0x1d, 0x3, 0x1) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x4c5, 0x0, 0x0, 0x800000000001, 0x0, r0, 0x0, 0x300}]) 204.531104ms ago: executing program 3 (id=4): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0xe, 0x6, 0x0, 0xb49, 0x9, 0xb, 0x2, 0x3}, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x83) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) getpid() fcntl$setownex(r0, 0xf, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x8e79f0352167ea94) 0s ago: executing program 2 (id=8): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000040)={@val={0x8, 0x800}, @val={0x4, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x2, 0x2, 0x18, 0x66, 0x0, 0xb, 0x67, 0x0, @rand_addr=0x64010101, @broadcast, {[@generic={0x83, 0x2}]}}}}, 0x26) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.143' (ED25519) to the list of known hosts. [ 90.842955][ T5599] cgroup: Unknown subsys name 'net' [ 91.084167][ T5599] cgroup: Unknown subsys name 'cpuset' [ 91.139343][ T5599] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 92.000724][ T822] cfg80211: failed to load regulatory.db [ 93.175092][ T5599] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.872078][ T5620] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.898028][ T5624] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.912287][ T5624] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.932282][ T5624] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.947693][ T5624] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.977346][ T5627] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.986900][ T5624] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.990098][ T5624] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.992886][ T5624] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.997693][ T5624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.016876][ T5624] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.018154][ T5624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.031983][ T5624] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.047286][ T5624] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.050607][ T5631] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.064951][ T5631] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.077104][ T5624] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.077665][ T5631] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.088558][ T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 96.103842][ T4927] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 98.150093][ T60] Bluetooth: hci0: command tx timeout [ 98.229108][ T60] Bluetooth: hci2: command tx timeout [ 98.238865][ T60] Bluetooth: hci1: command tx timeout [ 98.318822][ T60] Bluetooth: hci3: command tx timeout [ 98.374844][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.375818][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.376100][ T5615] bridge_slave_0: entered allmulticast mode [ 98.381735][ T5615] bridge_slave_0: entered promiscuous mode [ 98.463475][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.463732][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.463938][ T5615] bridge_slave_1: entered allmulticast mode [ 98.466352][ T5615] bridge_slave_1: entered promiscuous mode [ 98.569777][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.570086][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.570336][ T5616] bridge_slave_0: entered allmulticast mode [ 98.572776][ T5616] bridge_slave_0: entered promiscuous mode [ 98.642177][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.642427][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.646123][ T5616] bridge_slave_1: entered allmulticast mode [ 98.649152][ T5616] bridge_slave_1: entered promiscuous mode [ 98.666423][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.668203][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.670002][ T5614] bridge_slave_0: entered allmulticast mode [ 98.679943][ T5614] bridge_slave_0: entered promiscuous mode [ 98.709871][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.752147][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.752399][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.752600][ T5614] bridge_slave_1: entered allmulticast mode [ 98.754990][ T5614] bridge_slave_1: entered promiscuous mode [ 98.769433][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.899668][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.899958][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.901484][ T5617] bridge_slave_0: entered allmulticast mode [ 98.903932][ T5617] bridge_slave_0: entered promiscuous mode [ 98.940236][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.982182][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.982567][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.982847][ T5617] bridge_slave_1: entered allmulticast mode [ 98.986200][ T5617] bridge_slave_1: entered promiscuous mode [ 99.006717][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.030767][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.035507][ T5615] team0: Port device team_slave_0 added [ 99.086684][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.095442][ T5615] team0: Port device team_slave_1 added [ 99.177605][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.188952][ T5616] team0: Port device team_slave_0 added [ 99.252892][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.256130][ T5616] team0: Port device team_slave_1 added [ 99.268358][ T5614] team0: Port device team_slave_0 added [ 99.280917][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.280930][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.280950][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.354701][ T5614] team0: Port device team_slave_1 added [ 99.356560][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.356571][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.356592][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.468417][ T5617] team0: Port device team_slave_0 added [ 99.476128][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.476140][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.476159][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.539071][ T5617] team0: Port device team_slave_1 added [ 99.540687][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.540700][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.540720][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.542667][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.542679][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.542699][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.652093][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.652106][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.652126][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.764693][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.764707][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.764726][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.813770][ T5615] hsr_slave_0: entered promiscuous mode [ 99.815723][ T5615] hsr_slave_1: entered promiscuous mode [ 99.830527][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.830543][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.830571][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.941844][ T5616] hsr_slave_0: entered promiscuous mode [ 99.944676][ T5616] hsr_slave_1: entered promiscuous mode [ 99.946032][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 99.946117][ T5616] Cannot create hsr debugfs directory [ 100.228805][ T60] Bluetooth: hci0: command tx timeout [ 100.264616][ T5614] hsr_slave_0: entered promiscuous mode [ 100.266229][ T5614] hsr_slave_1: entered promiscuous mode [ 100.267485][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 100.267509][ T5614] Cannot create hsr debugfs directory [ 100.309755][ T60] Bluetooth: hci2: command tx timeout [ 100.322962][ T60] Bluetooth: hci1: command tx timeout [ 100.389092][ T60] Bluetooth: hci3: command tx timeout [ 100.406750][ T5617] hsr_slave_0: entered promiscuous mode [ 100.408382][ T5617] hsr_slave_1: entered promiscuous mode [ 100.414714][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 100.414780][ T5617] Cannot create hsr debugfs directory [ 101.251121][ T5615] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 101.290742][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.304914][ T5615] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 101.346535][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.365656][ T5615] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 101.397471][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.426427][ T5615] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 101.445399][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.567089][ T5614] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.600770][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.605095][ T5614] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.644750][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.661447][ T5614] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.710742][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.738012][ T5614] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.776127][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.976227][ T5617] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 102.004103][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.041900][ T5617] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 102.077748][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.089388][ T5617] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 102.114490][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.147917][ T5617] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 102.187124][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.309206][ T60] Bluetooth: hci0: command tx timeout [ 102.388930][ T4927] Bluetooth: hci2: command tx timeout [ 102.389030][ T60] Bluetooth: hci1: command tx timeout [ 102.391726][ T5616] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 102.436766][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.461602][ T5616] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 102.471209][ T60] Bluetooth: hci3: command tx timeout [ 102.504366][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.508088][ T5616] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 102.548230][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.561450][ T5616] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 102.607539][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.755095][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.858077][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.922232][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.934718][ T159] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.946593][ T159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.006725][ T159] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.006887][ T159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.127874][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.156974][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.189913][ T1189] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.190228][ T1189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.255212][ T1189] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.255397][ T1189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.324447][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.376770][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.392325][ T3347] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.392499][ T3347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.465272][ T3431] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.465447][ T3431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.593342][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.667347][ T1189] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.667633][ T1189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.754941][ T3347] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.755148][ T3347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.389389][ T60] Bluetooth: hci0: command tx timeout [ 104.469609][ T60] Bluetooth: hci1: command tx timeout [ 104.469642][ T60] Bluetooth: hci2: command tx timeout [ 104.560430][ T4927] Bluetooth: hci3: command tx timeout [ 104.674081][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.029657][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.211422][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.282042][ T5615] veth0_vlan: entered promiscuous mode [ 105.380700][ T5615] veth1_vlan: entered promiscuous mode [ 105.465631][ T5614] veth0_vlan: entered promiscuous mode [ 105.489910][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.534549][ T5614] veth1_vlan: entered promiscuous mode [ 105.629797][ T5617] veth0_vlan: entered promiscuous mode [ 105.642168][ T5615] veth0_macvtap: entered promiscuous mode [ 105.678240][ T5615] veth1_macvtap: entered promiscuous mode [ 105.700938][ T5617] veth1_vlan: entered promiscuous mode [ 105.810132][ T5614] veth0_macvtap: entered promiscuous mode [ 105.835469][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.836045][ T5616] veth0_vlan: entered promiscuous mode [ 105.861384][ T5614] veth1_macvtap: entered promiscuous mode [ 105.885182][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.922391][ T5616] veth1_vlan: entered promiscuous mode [ 105.949949][ T3384] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.972667][ T3384] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.004574][ T3384] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.005457][ T5617] veth0_macvtap: entered promiscuous mode [ 106.033545][ T3384] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.055587][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.077301][ T5617] veth1_macvtap: entered promiscuous mode [ 106.151911][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.274052][ T1520] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.333785][ T1520] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.351282][ T3384] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.358452][ T3384] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.427135][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.548111][ T5616] veth0_macvtap: entered promiscuous mode [ 106.577703][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.703095][ T5616] veth1_macvtap: entered promiscuous mode [ 106.725803][ T3384] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.746830][ T3384] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.760684][ T3384] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.766022][ T1520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.766040][ T1520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.855569][ T3384] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.173456][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.320063][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.340347][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.340368][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.477332][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.477348][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.487248][ T1391] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.542217][ T1391] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.551273][ T1391] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.585322][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.808757][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.808775][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.253406][ T3384] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.253425][ T3384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.473646][ T1189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.473665][ T1189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.564957][ T5763] capability: warning: `syz.1.2' uses deprecated v2 capabilities in a way that may be insecure [ 109.013996][ T3347] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.014016][ T3347] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.268154][ T1520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.268178][ T1520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.001630][ T0] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN PTI [ 110.001652][ T0] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 110.001684][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 110.001703][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 110.001714][ T0] RIP: 0010:__schedule+0x4030/0x5550 [ 110.001739][ T0] Code: 24 80 00 00 00 e8 80 97 f2 f6 48 8b 84 24 80 00 00 00 48 8b 18 4c 8d 7b 14 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 87 04 00 00 45 8b 3f 49 83 ff 08 0f 83 98 [ 110.001753][ T0] RSP: 0018:ffffc900001e7c40 EFLAGS: 00010003 [ 110.001770][ T0] RAX: 0000000000000002 RBX: 0000000000000000 RCX: dffffc0000000000 [ 110.001781][ T0] RDX: 0000000000000003 RSI: 0000000000000001 RDI: ffff8880b863c918 [ 110.001792][ T0] RBP: ffffc900001e7e30 R08: ffffffff8fcf38f7 R09: 1ffffffff1f9e71e [ 110.001805][ T0] R10: dffffc0000000000 R11: fffffbfff1f9e71f R12: ffff8880b873c658 [ 110.001818][ T0] R13: ffff888125b6b000 R14: 1ffff110170e7922 R15: 0000000000000014 [ 110.001830][ T0] FS: 0000000000000000(0000) GS:ffff888125b6b000(0000) knlGS:0000000000000000 [ 110.001844][ T0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 110.001856][ T0] CR2: 00007fcb77ef7dac CR3: 000000000e1b8000 CR4: 00000000003526f0 [ 110.001871][ T0] Call Trace: [ 110.001882][ T0] [ 110.001898][ T0] ? irqentry_exit+0x1c1/0x8c0 [ 110.001922][ T0] ? __pfx___schedule+0x10/0x10 [ 110.001940][ T0] ? lockdep_hardirqs_on+0x7a/0x110 [ 110.001964][ T0] ? tick_nohz_idle_exit+0x2a6/0x370 [ 110.001990][ T0] schedule_idle+0x51/0x90 [ 110.002010][ T0] do_idle+0x4a6/0x540 [ 110.002035][ T0] ? __pfx_do_idle+0x10/0x10 [ 110.002068][ T0] cpu_startup_entry+0x43/0x60 [ 110.002092][ T0] start_secondary+0x101/0x110 [ 110.002111][ T0] common_startup_64+0x13e/0x157 [ 110.002144][ T0] [ 110.002150][ T0] Modules linked in: [ 110.002165][ T0] ---[ end trace 0000000000000000 ]--- [ 110.002180][ T0] RIP: 0010:__schedule+0x4030/0x5550 [ 110.002199][ T0] Code: 24 80 00 00 00 e8 80 97 f2 f6 48 8b 84 24 80 00 00 00 48 8b 18 4c 8d 7b 14 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 87 04 00 00 45 8b 3f 49 83 ff 08 0f 83 98 [ 110.002213][ T0] RSP: 0018:ffffc900001e7c40 EFLAGS: 00010003 [ 110.002227][ T0] RAX: 0000000000000002 RBX: 0000000000000000 RCX: dffffc0000000000 [ 110.002238][ T0] RDX: 0000000000000003 RSI: 0000000000000001 RDI: ffff8880b863c918 [ 110.002249][ T0] RBP: ffffc900001e7e30 R08: ffffffff8fcf38f7 R09: 1ffffffff1f9e71e [ 110.002262][ T0] R10: dffffc0000000000 R11: fffffbfff1f9e71f R12: ffff8880b873c658 [ 110.002274][ T0] R13: ffff888125b6b000 R14: 1ffff110170e7922 R15: 0000000000000014 [ 110.002286][ T0] FS: 0000000000000000(0000) GS:ffff888125b6b000(0000) knlGS:0000000000000000 [ 110.002301][ T0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 110.002312][ T0] CR2: 00007fcb77ef7dac CR3: 000000000e1b8000 CR4: 00000000003526f0 [ 110.002328][ T0] Kernel panic - not syncing: Fatal exception [ 111.106798][ T0] Shutting down cpus with NMI [ 111.107442][ T0] Kernel Offset: disabled