last executing test programs: 690.917942ms ago: executing program 1 (id=2): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r1 = socket(0x18, 0x800, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x1, @multicast, 'wg2\x00'}}, 0x1e) sendfile(r1, r0, 0x0, 0x8) 485.212033ms ago: executing program 1 (id=7): r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) fchown(r0, 0xffffffffffffffff, 0xee01) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) write$P9_RVERSION(r0, &(0x7f0000000180)={0x13, 0x65, 0xffff, 0x40, 0x6, '9P2000'}, 0x13) 483.595445ms ago: executing program 2 (id=3): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0xfe, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@eol]}}}}}}}, 0x0) 225.521362ms ago: executing program 2 (id=8): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b707000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 168.247462ms ago: executing program 1 (id=9): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x8, 0x8, 0x4}]}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000000)=0x31) 34.622927ms ago: executing program 1 (id=10): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 0s ago: executing program 2 (id=11): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast2, 0xffffffff}}, {{0xa, 0x4e21, 0x400, @ipv4={'\x00', '\xff\xff', @local}, 0x8}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001"], 0x190) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.73' (ED25519) to the list of known hosts. [ 84.455211][ T5846] cgroup: Unknown subsys name 'net' [ 84.582773][ T5846] cgroup: Unknown subsys name 'cpuset' [ 84.592055][ T5846] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.081869][ T5846] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.799191][ T5861] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.807531][ T5861] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.815167][ T5861] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.823631][ T5861] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.831784][ T5861] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.898392][ T5861] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.935208][ T5867] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.943054][ T5867] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.951537][ T5867] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.977297][ T5867] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.999068][ T5867] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.018272][ T5867] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.026150][ T5867] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.036141][ T5877] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.036877][ T5870] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.044093][ T5877] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 91.052880][ T5870] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.059184][ T5877] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 91.065836][ T5870] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.072386][ T5877] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.078641][ T5867] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 91.087117][ T5877] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.102027][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.118683][ T5880] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 91.126155][ T5880] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.134600][ T5880] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 91.135047][ T5870] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.148999][ T5870] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.170530][ T5880] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.209965][ T5877] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.315363][ T9] cfg80211: failed to load regulatory.db [ 91.897236][ T5858] chnl_net:caif_netlink_parms(): no params data found [ 92.006360][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 92.274879][ T5872] chnl_net:caif_netlink_parms(): no params data found [ 92.291761][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 92.389530][ T5873] chnl_net:caif_netlink_parms(): no params data found [ 92.546811][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.554935][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.562890][ T5858] bridge_slave_0: entered allmulticast mode [ 92.571162][ T5858] bridge_slave_0: entered promiscuous mode [ 92.583747][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.591127][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.598767][ T5858] bridge_slave_1: entered allmulticast mode [ 92.606312][ T5858] bridge_slave_1: entered promiscuous mode [ 92.714602][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 92.774152][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.781493][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.790067][ T5862] bridge_slave_0: entered allmulticast mode [ 92.797843][ T5862] bridge_slave_0: entered promiscuous mode [ 92.853339][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.863371][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.871671][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.879324][ T5862] bridge_slave_1: entered allmulticast mode [ 92.886765][ T5862] bridge_slave_1: entered promiscuous mode [ 92.893548][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.901006][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.908898][ T5874] Bluetooth: hci0: command tx timeout [ 92.909508][ T5872] bridge_slave_0: entered allmulticast mode [ 92.922889][ T5872] bridge_slave_0: entered promiscuous mode [ 92.965302][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.006452][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.013713][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.021472][ T5872] bridge_slave_1: entered allmulticast mode [ 93.029570][ T5872] bridge_slave_1: entered promiscuous mode [ 93.058674][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.065869][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.074074][ T5863] bridge_slave_0: entered allmulticast mode [ 93.083367][ T5863] bridge_slave_0: entered promiscuous mode [ 93.137767][ T5874] Bluetooth: hci3: command tx timeout [ 93.202898][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.210240][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.217399][ T5863] bridge_slave_1: entered allmulticast mode [ 93.226656][ T5863] bridge_slave_1: entered promiscuous mode [ 93.234401][ T5874] Bluetooth: hci5: command tx timeout [ 93.253264][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.260697][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.268222][ T5873] bridge_slave_0: entered allmulticast mode [ 93.276701][ T5873] bridge_slave_0: entered promiscuous mode [ 93.286351][ T5858] team0: Port device team_slave_0 added [ 93.294940][ T5858] team0: Port device team_slave_1 added [ 93.300774][ T5178] Bluetooth: hci1: command tx timeout [ 93.300782][ T5861] Bluetooth: hci2: command tx timeout [ 93.305864][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.306698][ T5874] Bluetooth: hci4: command tx timeout [ 93.322308][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.340551][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.372126][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.384320][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.391651][ T5873] bridge_slave_1: entered allmulticast mode [ 93.399699][ T5873] bridge_slave_1: entered promiscuous mode [ 93.454670][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.485649][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.499402][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.613223][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.623688][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.630900][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.656907][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.671125][ T5862] team0: Port device team_slave_0 added [ 93.677943][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.684925][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.711638][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.742912][ T5872] team0: Port device team_slave_0 added [ 93.749172][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.756302][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.763950][ T5864] bridge_slave_0: entered allmulticast mode [ 93.772042][ T5864] bridge_slave_0: entered promiscuous mode [ 93.800387][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.829906][ T5862] team0: Port device team_slave_1 added [ 93.846785][ T5872] team0: Port device team_slave_1 added [ 93.863584][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.871277][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.879278][ T5864] bridge_slave_1: entered allmulticast mode [ 93.886816][ T5864] bridge_slave_1: entered promiscuous mode [ 93.895583][ T5863] team0: Port device team_slave_0 added [ 93.905415][ T5863] team0: Port device team_slave_1 added [ 93.929271][ T5873] team0: Port device team_slave_0 added [ 94.036471][ T5873] team0: Port device team_slave_1 added [ 94.078525][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.085616][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.111769][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.141413][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.148478][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.174608][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.189647][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.244742][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.252120][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.278238][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.301452][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.308503][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.334478][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.348640][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.374545][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.381662][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.407800][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.421324][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.428439][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.454814][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.475714][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.483013][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.509184][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.522516][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.529779][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.556687][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.585419][ T5858] hsr_slave_0: entered promiscuous mode [ 94.597490][ T5858] hsr_slave_1: entered promiscuous mode [ 94.676966][ T5864] team0: Port device team_slave_0 added [ 94.688652][ T5864] team0: Port device team_slave_1 added [ 94.786749][ T5873] hsr_slave_0: entered promiscuous mode [ 94.794977][ T5873] hsr_slave_1: entered promiscuous mode [ 94.801807][ T5873] debugfs: 'hsr0' already exists in 'hsr' [ 94.807958][ T5873] Cannot create hsr debugfs directory [ 94.850093][ T5863] hsr_slave_0: entered promiscuous mode [ 94.856739][ T5863] hsr_slave_1: entered promiscuous mode [ 94.864639][ T5863] debugfs: 'hsr0' already exists in 'hsr' [ 94.870552][ T5863] Cannot create hsr debugfs directory [ 94.901067][ T5862] hsr_slave_0: entered promiscuous mode [ 94.908075][ T5862] hsr_slave_1: entered promiscuous mode [ 94.914544][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 94.920391][ T5862] Cannot create hsr debugfs directory [ 94.977849][ T5874] Bluetooth: hci0: command tx timeout [ 95.012067][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.019630][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.046529][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.060453][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.067406][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.093922][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.120882][ T5872] hsr_slave_0: entered promiscuous mode [ 95.127446][ T5872] hsr_slave_1: entered promiscuous mode [ 95.134068][ T5872] debugfs: 'hsr0' already exists in 'hsr' [ 95.140057][ T5872] Cannot create hsr debugfs directory [ 95.218130][ T5874] Bluetooth: hci3: command tx timeout [ 95.304349][ T5874] Bluetooth: hci5: command tx timeout [ 95.378668][ T5178] Bluetooth: hci2: command tx timeout [ 95.378682][ T5861] Bluetooth: hci1: command tx timeout [ 95.390762][ T5874] Bluetooth: hci4: command tx timeout [ 95.533232][ T5864] hsr_slave_0: entered promiscuous mode [ 95.541071][ T5864] hsr_slave_1: entered promiscuous mode [ 95.547393][ T5864] debugfs: 'hsr0' already exists in 'hsr' [ 95.553268][ T5864] Cannot create hsr debugfs directory [ 96.005655][ T5858] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.046947][ T5858] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.073578][ T5858] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.094905][ T5858] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.145826][ T5873] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.158906][ T5873] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.171182][ T5873] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.195673][ T5873] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.276780][ T5863] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.303683][ T5863] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.345469][ T5863] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.372416][ T5863] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.466122][ T5862] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 96.512887][ T5862] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 96.526282][ T5862] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 96.552092][ T5862] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 96.642526][ T5872] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.682377][ T5872] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.694340][ T5872] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.707141][ T5872] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.730494][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.797341][ T5864] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.832458][ T5864] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.845919][ T5864] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.859704][ T5864] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.885100][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.933266][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.965025][ T5873] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.994112][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.001450][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.036129][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.043334][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.054507][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.057826][ T5178] Bluetooth: hci0: command tx timeout [ 97.061709][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.128781][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.135975][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.186720][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.271652][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.297470][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.304617][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.313162][ T5178] Bluetooth: hci3: command tx timeout [ 97.355442][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.362607][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.385152][ T5178] Bluetooth: hci5: command tx timeout [ 97.389703][ T5873] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.458824][ T5178] Bluetooth: hci2: command tx timeout [ 97.464303][ T5178] Bluetooth: hci4: command tx timeout [ 97.475534][ T5874] Bluetooth: hci1: command tx timeout [ 97.628653][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.665722][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.686921][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.722415][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.729652][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.746684][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.753892][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.789009][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.922262][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.959293][ T5872] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.993698][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.000930][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.044185][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.051375][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.089085][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.096266][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.160063][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.182551][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.194543][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.201747][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.376848][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.535846][ T5873] veth0_vlan: entered promiscuous mode [ 98.603507][ T5873] veth1_vlan: entered promiscuous mode [ 98.661046][ T5858] veth0_vlan: entered promiscuous mode [ 98.682364][ T5858] veth1_vlan: entered promiscuous mode [ 98.874513][ T5873] veth0_macvtap: entered promiscuous mode [ 98.911763][ T5858] veth0_macvtap: entered promiscuous mode [ 98.938851][ T5873] veth1_macvtap: entered promiscuous mode [ 98.984867][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.024947][ T5858] veth1_macvtap: entered promiscuous mode [ 99.093897][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.138264][ T5178] Bluetooth: hci0: command tx timeout [ 99.144991][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.177200][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.191977][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.216233][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.241434][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.254217][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.264027][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.304110][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.317414][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.378003][ T5178] Bluetooth: hci3: command tx timeout [ 99.418457][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.457988][ T5178] Bluetooth: hci5: command tx timeout [ 99.480185][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.492437][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.514050][ T5864] veth0_vlan: entered promiscuous mode [ 99.538128][ T5178] Bluetooth: hci4: command tx timeout [ 99.543950][ T5874] Bluetooth: hci2: command tx timeout [ 99.543964][ T5861] Bluetooth: hci1: command tx timeout [ 99.561457][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.615643][ T5872] veth0_vlan: entered promiscuous mode [ 99.681463][ T5863] veth0_vlan: entered promiscuous mode [ 99.719288][ T3534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.727232][ T3534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.745149][ T5864] veth1_vlan: entered promiscuous mode [ 99.820283][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.824377][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.841628][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.845334][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.869555][ T5863] veth1_vlan: entered promiscuous mode [ 99.876705][ T5872] veth1_vlan: entered promiscuous mode [ 99.981076][ T5858] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 100.033336][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.046342][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.130702][ T5872] veth0_macvtap: entered promiscuous mode [ 100.157116][ T5863] veth0_macvtap: entered promiscuous mode [ 100.188501][ T5864] veth0_macvtap: entered promiscuous mode [ 100.229376][ T5863] veth1_macvtap: entered promiscuous mode [ 100.250821][ T5872] veth1_macvtap: entered promiscuous mode [ 100.294342][ T5864] veth1_macvtap: entered promiscuous mode [ 100.351633][ T5862] veth0_vlan: entered promiscuous mode [ 100.359147][ T6008] capability: warning: `syz.1.7' uses deprecated v2 capabilities in a way that may be insecure [ 100.385980][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.409940][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.424535][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.458806][ T5862] veth1_vlan: entered promiscuous mode [ 100.520062][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.563557][ T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.583611][ T60] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.614754][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.721864][ T60] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.744136][ T60] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.775173][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.776435][ T6017] [ 100.785390][ T6017] ============================= [ 100.790493][ T6017] WARNING: suspicious RCU usage [ 100.795365][ T6017] syzkaller #0 Not tainted [ 100.799914][ T6017] ----------------------------- [ 100.804761][ T6017] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage! [ 100.813403][ T6017] [ 100.813403][ T6017] other info that might help us debug this: [ 100.813403][ T6017] [ 100.825075][ T6017] [ 100.825075][ T6017] rcu_scheduler_active = 2, debug_locks = 1 [ 100.833760][ T6017] 1 lock held by syz.1.10/6017: [ 100.838913][ T6017] #0: ffffffff8e13a0c0 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x38/0x80 [ 100.849249][ T6017] [ 100.849249][ T6017] stack backtrace: [ 100.855145][ T6017] CPU: 0 UID: 0 PID: 6017 Comm: syz.1.10 Not tainted syzkaller #0 PREEMPT(full) [ 100.855173][ T6017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 100.855191][ T6017] Call Trace: [ 100.855200][ T6017] [ 100.855210][ T6017] dump_stack_lvl+0x189/0x250 [ 100.855248][ T6017] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.855278][ T6017] ? __pfx__printk+0x10/0x10 [ 100.855316][ T6017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.855354][ T6017] lockdep_rcu_suspicious+0x140/0x1d0 [ 100.855383][ T6017] get_callchain_entry+0x2b6/0x3c0 [ 100.855425][ T6017] get_perf_callchain+0xa1/0x6b0 [ 100.855470][ T6017] ? __pfx_get_perf_callchain+0x10/0x10 [ 100.855505][ T6017] ? futex_unqueue+0x22/0x240 [ 100.855533][ T6017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.855559][ T6017] ? futex_unqueue+0x211/0x240 [ 100.855585][ T6017] ? __futex_wait+0x1d1/0x3e0 [ 100.855621][ T6017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.855647][ T6017] ? __futex_wait+0x34f/0x3e0 [ 100.855686][ T6017] __bpf_get_stack+0x3fc/0xa60 [ 100.855737][ T6017] ? __pfx___bpf_get_stack+0x10/0x10 [ 100.855774][ T6017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.855801][ T6017] ? __lock_acquire+0xab9/0xd20 [ 100.855845][ T6017] bpf_get_stack+0x33/0x50 [ 100.855879][ T6017] ? bpf_prog_b8a90dd1efcc4ad9+0x46/0x4e [ 100.855902][ T6017] bpf_get_stack_raw_tp+0x1a9/0x220 [ 100.855938][ T6017] bpf_prog_b8a90dd1efcc4ad9+0x46/0x4e [ 100.855962][ T6017] bpf_prog_run_pin_on_cpu+0x6a/0x150 [ 100.856001][ T6017] bpf_prog_test_run_syscall+0x312/0x4b0 [ 100.856039][ T6017] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 100.856071][ T6017] ? __fget_files+0x2a/0x420 [ 100.856109][ T6017] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 100.856144][ T6017] bpf_prog_test_run+0x2c7/0x340 [ 100.856184][ T6017] __sys_bpf+0x581/0x870 [ 100.856214][ T6017] ? __pfx___sys_bpf+0x10/0x10 [ 100.856261][ T6017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.856284][ T6017] ? rcu_is_watching+0x15/0xb0 [ 100.856312][ T6017] __x64_sys_bpf+0x7c/0x90 [ 100.856338][ T6017] do_syscall_64+0xfa/0x3b0 [ 100.856370][ T6017] ? lockdep_hardirqs_on+0x9c/0x150 [ 100.856400][ T6017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.856419][ T6017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.856443][ T6017] ? exc_page_fault+0x9f/0xf0 [ 100.856474][ T6017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.856494][ T6017] RIP: 0033:0x7f11fb98ebe9 [ 100.856512][ T6017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.856529][ T6017] RSP: 002b:00007f11fc8a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 100.856550][ T6017] RAX: ffffffffffffffda RBX: 00007f11fbbb5fa0 RCX: 00007f11fb98ebe9 [ 100.856565][ T6017] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a [ 100.856579][ T6017] RBP: 00007f11fba11e19 R08: 0000000000000000 R09: 0000000000000000 [ 100.856591][ T6017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.856603][ T6017] R13: 00007f11fbbb6038 R14: 00007f11fbbb5fa0 R15: 00007ffedef34ac8 [ 100.856635][ T6017] [ 101.213274][ T60] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.223070][ T60] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.233508][ T60] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.242825][ T1012] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.295661][ T5862] veth0_macvtap: entered promiscuous mode [ 101.317147][ T1012] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.326985][ T1012] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.354622][ T1012] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.398695][ T1012] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.408294][ T5862] veth1_macvtap: entered promiscuous mode [ 101.438674][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.474735][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.506612][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.522834][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.544162][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.555500][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.574701][ T60] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.585100][ T60] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.596502][ T3534] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.628354][ T1012] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.644285][ T1012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.660108][ T1012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.711466][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.724394][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.869060][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.877076][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.877195][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.894661][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.021165][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.054755][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.133233][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.153496][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50