last executing test programs: 275.562715ms ago: executing program 1 (id=2): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r0, &(0x7f0000004940)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000004fc0)}, 0x1}, {{&(0x7f0000000a40)=@l2tp, 0x80, &(0x7f0000000640)=[{&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/28, 0x1c}, {&(0x7f0000000d40)=""/167, 0xa7}, {&(0x7f0000000e00)=""/68, 0x44}], 0x4, &(0x7f0000000e80)=""/36, 0x24}, 0xffffffff}, {{&(0x7f0000002180)=@phonet, 0x80, &(0x7f0000003200)=[{&(0x7f0000002200)=""/4096, 0x1000}], 0x1, &(0x7f0000004ac0)=""/191, 0xbf}, 0xfffc}, {{&(0x7f0000003300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000003480)=[{&(0x7f0000003380)=""/216, 0xd8}], 0x1, &(0x7f00000034c0)=""/102, 0x66}, 0x3}, {{0x0, 0x0, &(0x7f00000047c0)=[{&(0x7f0000003540)=""/82, 0x52}, {&(0x7f00000035c0)=""/68, 0x44}, {&(0x7f0000003640)=""/4096, 0x1000}, {&(0x7f0000004640)=""/33, 0x21}, {&(0x7f000000f3c0)=""/4096, 0x1000}, {0x0}, {&(0x7f00000046c0)=""/205, 0xcd}], 0x7, &(0x7f0000004840)=""/219, 0xdb}, 0x681a}], 0x6, 0x10001, 0x0) poll(&(0x7f000000af00)=[{r0, 0x2001}], 0x1, 0x8) 178.576915ms ago: executing program 1 (id=6): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, 0x0, 0x9a4e}) 0s ago: executing program 1 (id=7): r0 = fanotify_init(0x1, 0x2) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fanotify_mark(r0, 0x40, 0x3b, r1, 0x0) fanotify_mark(r0, 0x41, 0x8000038, r1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, 0x0, 0x0) pread64(r5, 0x0, 0x0, 0x7ff) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x20000000008) r7 = fsopen(&(0x7f0000000040)='selinuxfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r7, 0x4, &(0x7f0000000080)='+%\x00', &(0x7f00000000c0)='./bus\x00', 0xffffffffffffff9c) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.146' (ED25519) to the list of known hosts. [ 81.840804][ T5820] cgroup: Unknown subsys name 'net' [ 81.981891][ T5820] cgroup: Unknown subsys name 'cpuset' [ 81.992787][ T5820] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.591635][ T5820] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.257703][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.266276][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.293752][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.302232][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.310675][ T5833] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.318308][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.371795][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.380072][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.387823][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.396321][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.405229][ T5833] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.412774][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.451831][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.462971][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.470798][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.479222][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.487428][ T5833] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.495041][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.549545][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.564169][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.572158][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.580837][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.589265][ T5833] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.596841][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.653856][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.662420][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.670162][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.680064][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.688598][ T5833] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 86.697105][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.966181][ T873] cfg80211: failed to load regulatory.db [ 87.251364][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 87.347604][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 87.386118][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 87.575011][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 87.614569][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.622212][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.629976][ T5830] bridge_slave_0: entered allmulticast mode [ 87.637931][ T5830] bridge_slave_0: entered promiscuous mode [ 87.690166][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.697695][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.704963][ T5830] bridge_slave_1: entered allmulticast mode [ 87.712105][ T5830] bridge_slave_1: entered promiscuous mode [ 87.780838][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.788182][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.795567][ T5834] bridge_slave_0: entered allmulticast mode [ 87.802569][ T5834] bridge_slave_0: entered promiscuous mode [ 87.880574][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.887898][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.897908][ T5838] bridge_slave_0: entered allmulticast mode [ 87.905646][ T5838] bridge_slave_0: entered promiscuous mode [ 87.916687][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.923923][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.931070][ T5834] bridge_slave_1: entered allmulticast mode [ 87.939492][ T5834] bridge_slave_1: entered promiscuous mode [ 87.965489][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.978635][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.000073][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 88.010882][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.018419][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.026075][ T5838] bridge_slave_1: entered allmulticast mode [ 88.032924][ T5838] bridge_slave_1: entered promiscuous mode [ 88.122082][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.135853][ T5830] team0: Port device team_slave_0 added [ 88.175971][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.205404][ T5830] team0: Port device team_slave_1 added [ 88.242637][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.304535][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.332116][ T5834] team0: Port device team_slave_0 added [ 88.342962][ T5834] team0: Port device team_slave_1 added [ 88.361976][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.369830][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.377547][ T5841] bridge_slave_0: entered allmulticast mode [ 88.385797][ T5841] bridge_slave_0: entered promiscuous mode [ 88.394689][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.401842][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.410819][ T5841] bridge_slave_1: entered allmulticast mode [ 88.414287][ T5833] Bluetooth: hci0: command tx timeout [ 88.418947][ T5841] bridge_slave_1: entered promiscuous mode [ 88.480801][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.487853][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.502290][ T5833] Bluetooth: hci1: command tx timeout [ 88.519475][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.556764][ T5838] team0: Port device team_slave_0 added [ 88.563404][ T5833] Bluetooth: hci2: command tx timeout [ 88.580793][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.588161][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.614547][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.643398][ T5833] Bluetooth: hci3: command tx timeout [ 88.651303][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.658742][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.666066][ T5845] bridge_slave_0: entered allmulticast mode [ 88.673079][ T5845] bridge_slave_0: entered promiscuous mode [ 88.684127][ T5838] team0: Port device team_slave_1 added [ 88.690351][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.697406][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.723502][ T5833] Bluetooth: hci4: command tx timeout [ 88.725527][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.743155][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.750551][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.777030][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.800995][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.810955][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.818246][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.825597][ T5845] bridge_slave_1: entered allmulticast mode [ 88.832572][ T5845] bridge_slave_1: entered promiscuous mode [ 88.920047][ T5830] hsr_slave_0: entered promiscuous mode [ 88.926765][ T5830] hsr_slave_1: entered promiscuous mode [ 88.938715][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.964669][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.971631][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.997843][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.011178][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.018413][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.044376][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.087027][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.153635][ T5841] team0: Port device team_slave_0 added [ 89.162280][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.190671][ T5834] hsr_slave_0: entered promiscuous mode [ 89.197933][ T5834] hsr_slave_1: entered promiscuous mode [ 89.205436][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.213159][ T5834] Cannot create hsr debugfs directory [ 89.229490][ T5841] team0: Port device team_slave_1 added [ 89.317174][ T5845] team0: Port device team_slave_0 added [ 89.351136][ T5838] hsr_slave_0: entered promiscuous mode [ 89.358184][ T5838] hsr_slave_1: entered promiscuous mode [ 89.364675][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.372233][ T5838] Cannot create hsr debugfs directory [ 89.412158][ T5845] team0: Port device team_slave_1 added [ 89.463078][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.473142][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.499953][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.554825][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.561795][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.588137][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.646075][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.653060][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.679526][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.693604][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.700555][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.726890][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.957174][ T5841] hsr_slave_0: entered promiscuous mode [ 89.963820][ T5841] hsr_slave_1: entered promiscuous mode [ 89.970361][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.978346][ T5841] Cannot create hsr debugfs directory [ 90.009730][ T5845] hsr_slave_0: entered promiscuous mode [ 90.016839][ T5845] hsr_slave_1: entered promiscuous mode [ 90.024294][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.031863][ T5845] Cannot create hsr debugfs directory [ 90.262149][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.280751][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.306555][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.341585][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.485447][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.493339][ T5833] Bluetooth: hci0: command tx timeout [ 90.534209][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.569889][ T5833] Bluetooth: hci1: command tx timeout [ 90.587386][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.619026][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.643967][ T5833] Bluetooth: hci2: command tx timeout [ 90.704388][ T5838] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.717566][ T5838] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.725328][ T5833] Bluetooth: hci3: command tx timeout [ 90.749675][ T5838] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.765502][ T5838] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.804797][ T5833] Bluetooth: hci4: command tx timeout [ 90.907795][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.921030][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.932003][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.958967][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.033508][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.101144][ T5845] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.139649][ T5845] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.157959][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.181191][ T5845] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.214606][ T5845] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.238138][ T1085] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.245535][ T1085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.289183][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.296349][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.322828][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.431737][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.469256][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.536297][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.543529][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.565487][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.609794][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.617056][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.640984][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.648203][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.679936][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.752619][ T4603] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.759885][ T4603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.830635][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.868874][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.876140][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.900724][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.907946][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.062750][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.098442][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.151247][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.221750][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.229000][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.243420][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.250613][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.420344][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.428239][ T5830] veth0_vlan: entered promiscuous mode [ 92.475715][ T5830] veth1_vlan: entered promiscuous mode [ 92.565275][ T5833] Bluetooth: hci0: command tx timeout [ 92.654304][ T5833] Bluetooth: hci1: command tx timeout [ 92.726377][ T5833] Bluetooth: hci2: command tx timeout [ 92.753034][ T5830] veth0_macvtap: entered promiscuous mode [ 92.797532][ T5830] veth1_macvtap: entered promiscuous mode [ 92.814267][ T5833] Bluetooth: hci3: command tx timeout [ 92.865442][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.880737][ T5834] veth0_vlan: entered promiscuous mode [ 92.894257][ T5833] Bluetooth: hci4: command tx timeout [ 92.937235][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.956047][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.988863][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.050949][ T5830] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.065866][ T5830] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.076315][ T5830] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.085557][ T5830] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.107252][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.119360][ T5834] veth1_vlan: entered promiscuous mode [ 93.296185][ T5841] veth0_vlan: entered promiscuous mode [ 93.370157][ T5841] veth1_vlan: entered promiscuous mode [ 93.413029][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.426946][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.437953][ T5845] veth0_vlan: entered promiscuous mode [ 93.458888][ T5834] veth0_macvtap: entered promiscuous mode [ 93.528324][ T5834] veth1_macvtap: entered promiscuous mode [ 93.545516][ T5845] veth1_vlan: entered promiscuous mode [ 93.560440][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.576537][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.583916][ T5838] veth0_vlan: entered promiscuous mode [ 93.617508][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.635378][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.649828][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.679308][ T5838] veth1_vlan: entered promiscuous mode [ 93.719888][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.739991][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.759144][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.766156][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.809024][ T5841] veth0_macvtap: entered promiscuous mode [ 93.822102][ T5841] veth1_macvtap: entered promiscuous mode [ 93.841079][ T5834] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.859165][ T5834] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.870581][ T5834] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.896705][ T5834] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.977788][ T5845] veth0_macvtap: entered promiscuous mode [ 93.997926][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.011605][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.022936][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.033770][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.047328][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.077921][ T5845] veth1_macvtap: entered promiscuous mode [ 94.091336][ T5838] veth0_macvtap: entered promiscuous mode [ 94.119154][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.129795][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.148687][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.173268][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.189125][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.379118][ T5838] veth1_macvtap: entered promiscuous mode [ 94.428962][ T5841] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.441737][ T5841] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.451121][ T5841] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.463670][ T5841] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.652714][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.710891][ T5833] Bluetooth: hci0: command tx timeout [ 94.726296][ T5833] Bluetooth: hci1: command tx timeout [ 94.737548][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.749930][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.762390][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.774709][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.789085][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.803985][ T5833] Bluetooth: hci2: command tx timeout [ 94.820002][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.883361][ T5833] Bluetooth: hci3: command tx timeout [ 94.964245][ T5833] Bluetooth: hci4: command tx timeout [ 95.104125][ T5914] Oops: general protection fault, probably for non-canonical address 0xdffffc000000002b: 0000 [#1] PREEMPT SMP KASAN PTI [ 95.114678][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.116724][ T5914] KASAN: null-ptr-deref in range [0x0000000000000158-0x000000000000015f] [ 95.126508][ T5834] ieee80211 phy6: Selected rate control algorithm 'minstrel_ht' [ 95.132904][ T5914] CPU: 1 UID: 0 PID: 5914 Comm: syz.1.7 Not tainted 6.14.0-rc2-next-20250210-syzkaller #0 [ 95.140572][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.150351][ T5914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 95.150370][ T5914] RIP: 0010:qca_close+0x72/0x2e0 [ 95.164354][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.167666][ T5914] Code: e4 ca f4 f8 48 89 2c 24 42 80 7c 2d 00 00 74 08 4c 89 f7 e8 10 c6 5b f9 4d 8b 26 49 8d bc 24 5a 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 28 84 c0 4c 89 eb 0f 85 de 01 00 00 45 0f b6 ac 24 5a [ 95.172576][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.182948][ T5914] RSP: 0018:ffffc900043cfb90 EFLAGS: 00010206 [ 95.182965][ T5914] RAX: 000000000000002b RBX: ffff88802446e000 RCX: ffff888024ec9e00 [ 95.182975][ T5914] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000015a [ 95.182983][ T5914] RBP: 1ffff1100488dc37 R08: ffffffff81880e93 R09: 1ffffffff2863129 [ 95.182995][ T5914] R10: dffffc0000000000 R11: ffffffff88cabe90 R12: 0000000000000000 [ 95.207150][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.212332][ T5914] R13: dffffc0000000000 R14: ffff88802446e1b8 R15: 0000000000000000 [ 95.222815][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.226319][ T5914] FS: 000055556eb3b500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 95.226335][ T5914] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 95.226345][ T5914] CR2: 00007f8706971108 CR3: 000000002a0d8000 CR4: 00000000003526f0 [ 95.226359][ T5914] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 95.234750][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.242250][ T5914] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 95.250477][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.260746][ T5914] Call Trace: [ 95.260755][ T5914] [ 95.260762][ T5914] ? __die_body+0x5f/0xb0 [ 95.260787][ T5914] ? die_addr+0xb0/0xe0 [ 95.271311][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.278506][ T5914] ? exc_general_protection+0x3dd/0x5d0 [ 95.278540][ T5914] ? asm_exc_general_protection+0x26/0x30 [ 95.288800][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.294011][ T5914] ? __pfx_qca_close+0x10/0x10 [ 95.294033][ T5914] ? enable_work+0x2e3/0x360 [ 95.294054][ T5914] ? qca_close+0x72/0x2e0 [ 95.294073][ T5914] hci_uart_tty_close+0x205/0x290 [ 95.302747][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.309967][ T5914] tty_ldisc_kill+0xa3/0x1a0 [ 95.309989][ T5914] tty_ldisc_release+0x1a1/0x200 [ 95.310007][ T5914] tty_release_struct+0x2b/0xe0 [ 95.323989][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.328326][ T5914] tty_release+0xd06/0x12c0 [ 95.328353][ T5914] ? __pfx_tty_release+0x10/0x10 [ 95.328368][ T5914] __fput+0x3e9/0x9f0 [ 95.328391][ T5914] task_work_run+0x24f/0x310 [ 95.338744][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.341418][ T5914] ? _raw_spin_unlock+0x28/0x50 [ 95.344591][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.348626][ T5914] ? __pfx_task_work_run+0x10/0x10 [ 95.352747][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.359909][ T5914] ? syscall_exit_to_user_mode+0xa3/0x340 [ 95.359933][ T5914] syscall_exit_to_user_mode+0x13f/0x340 [ 95.369610][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.371144][ T5914] do_syscall_64+0x100/0x230 [ 95.381812][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.386252][ T5914] ? clear_bhb_loop+0x35/0x90 [ 95.386277][ T5914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.392253][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.395141][ T5914] RIP: 0033:0x7fb5a0f8cde9 [ 95.395171][ T5914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.570115][ T5914] RSP: 002b:00007ffee36757d8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 95.578519][ T5914] RAX: 0000000000000000 RBX: 00007fb5a11a7ba0 RCX: 00007fb5a0f8cde9 [ 95.586473][ T5914] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 95.594438][ T5914] RBP: 00007fb5a11a7ba0 R08: 0000000000000238 R09: 0000001be3675acf [ 95.602421][ T5914] R10: 00007fb5a11a7ac0 R11: 0000000000000246 R12: 0000000000017326 [ 95.610387][ T5914] R13: 00007fb5a11a6240 R14: ffffffffffffffff R15: 00007ffee36758f0 [ 95.618357][ T5914] [ 95.621363][ T5914] Modules linked in: [ 95.625573][ T5914] ---[ end trace 0000000000000000 ]--- [ 95.631059][ T5914] RIP: 0010:qca_close+0x72/0x2e0 [ 95.640494][ T5914] Code: e4 ca f4 f8 48 89 2c 24 42 80 7c 2d 00 00 74 08 4c 89 f7 e8 10 c6 5b f9 4d 8b 26 49 8d bc 24 5a 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 28 84 c0 4c 89 eb 0f 85 de 01 00 00 45 0f b6 ac 24 5a [ 95.647391][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.660383][ T5914] RSP: 0018:ffffc900043cfb90 EFLAGS: 00010206 [ 95.676831][ T5914] RAX: 000000000000002b RBX: ffff88802446e000 RCX: ffff888024ec9e00 [ 95.681339][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.684868][ T5914] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000015a [ 95.684883][ T5914] RBP: 1ffff1100488dc37 R08: ffffffff81880e93 R09: 1ffffffff2863129 [ 95.684896][ T5914] R10: dffffc0000000000 R11: ffffffff88cabe90 R12: 0000000000000000 [ 95.684908][ T5914] R13: dffffc0000000000 R14: ffff88802446e1b8 R15: 0000000000000000 [ 95.684920][ T5914] FS: 000055556eb3b500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 95.684934][ T5914] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 95.684945][ T5914] CR2: 00007f8706971108 CR3: 000000002a0d8000 CR4: 00000000003526f0 [ 95.684960][ T5914] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 95.684969][ T5914] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 95.684989][ T5914] Kernel panic - not syncing: Fatal exception [ 95.694973][ T5914] Kernel Offset: disabled