last executing test programs: 421.911359ms ago: executing program 2 (id=3): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x21eae}}, 0x20}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r7, 0x10c, 0x5, &(0x7f0000000200), &(0x7f0000000280)=0x4) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @local, @val={@val={0x88a8, 0x7, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @private=0xa010102}}}}, &(0x7f0000000080)={0x0, 0x2, [0x829, 0x8cb, 0x3d, 0x66]}) socket$packet(0x11, 0x2, 0x300) close(r6) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) sendto$packet(0xffffffffffffffff, &(0x7f0000000640)="000a18000000", 0x6, 0x4000000, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x40083, 0x100) 156.483286ms ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./mnt\x00', &(0x7f0000000080), &(0x7f00000000c0)='./mnt\x00', 0x6, 0x0) 0s ago: executing program 1 (id=5): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000005700)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000020105000000000000"], 0x14}, 0x1, 0x0, 0x0, 0xcc811}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000006c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @val={@void, {0x8100, 0x5, 0x1}}, {@mpls_mc={0x8848, {[{0x8000, 0x0, 0x1}, {0xff}, {0xffff}, {0xff}, {0x256, 0x0, 0x1}, {0x29e}]}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) acct(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.28' (ED25519) to the list of known hosts. [ 73.117382][ T5764] cgroup: Unknown subsys name 'net' [ 73.227998][ T5764] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.689492][ T5764] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.153398][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.163240][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.171153][ T5783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.180170][ T5783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.189117][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.232463][ T5791] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.246349][ T5790] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.248180][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.261238][ T5790] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.268508][ T5791] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.271596][ T5789] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.282724][ T5791] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.283580][ T5786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.290181][ T5791] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.298593][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.312568][ T5786] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.315258][ T5791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.320213][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.335128][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.335595][ T5791] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.342878][ T5789] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.351873][ T5791] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.356908][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.364765][ T5791] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.830407][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 76.853402][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 76.897672][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 76.942755][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 77.105492][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.113068][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.121182][ T5776] bridge_slave_0: entered allmulticast mode [ 77.128786][ T5776] bridge_slave_0: entered promiscuous mode [ 77.136937][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.146567][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.154046][ T5779] bridge_slave_0: entered allmulticast mode [ 77.160726][ T5779] bridge_slave_0: entered promiscuous mode [ 77.169367][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.176713][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.186195][ T5779] bridge_slave_1: entered allmulticast mode [ 77.192954][ T5779] bridge_slave_1: entered promiscuous mode [ 77.217007][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.226418][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.233684][ T5778] bridge_slave_0: entered allmulticast mode [ 77.240539][ T5778] bridge_slave_0: entered promiscuous mode [ 77.248557][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.257032][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.265009][ T5776] bridge_slave_1: entered allmulticast mode [ 77.272331][ T5776] bridge_slave_1: entered promiscuous mode [ 77.296947][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.304443][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.311591][ T5777] bridge_slave_0: entered allmulticast mode [ 77.318485][ T5777] bridge_slave_0: entered promiscuous mode [ 77.326144][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.333520][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.340844][ T5777] bridge_slave_1: entered allmulticast mode [ 77.347794][ T5777] bridge_slave_1: entered promiscuous mode [ 77.354478][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.361595][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.369122][ T5778] bridge_slave_1: entered allmulticast mode [ 77.375953][ T5778] bridge_slave_1: entered promiscuous mode [ 77.414773][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.439780][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.467895][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.478669][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.510215][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.538471][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.550723][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.562665][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.596811][ T5776] team0: Port device team_slave_0 added [ 77.606160][ T5779] team0: Port device team_slave_0 added [ 77.614933][ T5779] team0: Port device team_slave_1 added [ 77.658993][ T5776] team0: Port device team_slave_1 added [ 77.677621][ T5777] team0: Port device team_slave_0 added [ 77.684983][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.694499][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.720596][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.734654][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.746739][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.773457][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.787572][ T5778] team0: Port device team_slave_0 added [ 77.797217][ T5778] team0: Port device team_slave_1 added [ 77.817118][ T5777] team0: Port device team_slave_1 added [ 77.883334][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.890497][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.918273][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.939382][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.946653][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.973061][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.985560][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.992748][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.018829][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.030929][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.038030][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.064256][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.076368][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.083590][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.110005][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.133362][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.140353][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.166379][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.197416][ T5779] hsr_slave_0: entered promiscuous mode [ 78.203903][ T5779] hsr_slave_1: entered promiscuous mode [ 78.271265][ T5777] hsr_slave_0: entered promiscuous mode [ 78.278447][ T5777] hsr_slave_1: entered promiscuous mode [ 78.284777][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.292738][ T5777] Cannot create hsr debugfs directory [ 78.327503][ T5776] hsr_slave_0: entered promiscuous mode [ 78.334129][ T5776] hsr_slave_1: entered promiscuous mode [ 78.340349][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.348161][ T5776] Cannot create hsr debugfs directory [ 78.372592][ T5089] Bluetooth: hci2: command tx timeout [ 78.381244][ T5778] hsr_slave_0: entered promiscuous mode [ 78.388720][ T5778] hsr_slave_1: entered promiscuous mode [ 78.395363][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.403092][ T5778] Cannot create hsr debugfs directory [ 78.452725][ T5089] Bluetooth: hci1: command tx timeout [ 78.458428][ T5089] Bluetooth: hci3: command tx timeout [ 78.465316][ T5780] Bluetooth: hci0: command tx timeout [ 78.794214][ T5777] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.807521][ T5777] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.817607][ T5777] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.829628][ T5777] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.903332][ T5779] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.916340][ T5779] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.926701][ T5779] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.945937][ T5779] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.006803][ T5776] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.033196][ T5776] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.043600][ T5776] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.062748][ T5776] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.143148][ T5778] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.154005][ T5778] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.168516][ T5778] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.193100][ T5778] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.228372][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.303544][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.339359][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.346841][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.366804][ T2912] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.373993][ T2912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.391416][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.483580][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.504710][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.526968][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.551393][ T5777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.565696][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.572875][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.586173][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.593297][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.629055][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.644354][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.658234][ T2955] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.665444][ T2955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.690220][ T5779] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 79.705425][ T5779] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.743744][ T2955] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.750929][ T2955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.761559][ T2955] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.768771][ T2955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.806772][ T2955] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.813991][ T2955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.045137][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.159485][ T5777] veth0_vlan: entered promiscuous mode [ 80.201343][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.228305][ T5777] veth1_vlan: entered promiscuous mode [ 80.357705][ T5779] veth0_vlan: entered promiscuous mode [ 80.368279][ T5777] veth0_macvtap: entered promiscuous mode [ 80.395825][ T5779] veth1_vlan: entered promiscuous mode [ 80.408428][ T5777] veth1_macvtap: entered promiscuous mode [ 80.418294][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.452377][ T5089] Bluetooth: hci2: command tx timeout [ 80.455437][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.474644][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.493708][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.529502][ T5777] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.531985][ T5089] Bluetooth: hci3: command tx timeout [ 80.539253][ T5777] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.544430][ T5780] Bluetooth: hci0: command tx timeout [ 80.544477][ T5780] Bluetooth: hci1: command tx timeout [ 80.568827][ T5777] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.577753][ T5777] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.600694][ T5779] veth0_macvtap: entered promiscuous mode [ 80.633678][ T5779] veth1_macvtap: entered promiscuous mode [ 80.697803][ T5778] veth0_vlan: entered promiscuous mode [ 80.714970][ T5778] veth1_vlan: entered promiscuous mode [ 80.721575][ T5776] veth0_vlan: entered promiscuous mode [ 80.733254][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.745468][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.756844][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.799959][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.811195][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.827155][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.839357][ T5779] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.848230][ T5779] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.860055][ T5779] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.869043][ T5779] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.927147][ T5776] veth1_vlan: entered promiscuous mode [ 80.950260][ T2955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.960478][ T2955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.002573][ T5778] veth0_macvtap: entered promiscuous mode [ 81.055955][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.058840][ T5776] veth0_macvtap: entered promiscuous mode [ 81.073888][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.086937][ T5778] veth1_macvtap: entered promiscuous mode [ 81.119425][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.142427][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.157952][ T5776] veth1_macvtap: entered promiscuous mode [ 81.213965][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.224987][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.234920][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.245767][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.257336][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.274290][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.284845][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.294831][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.305729][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.317320][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.329606][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.341182][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.352163][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.362667][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.372742][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.384957][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.396738][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.406291][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.419086][ T5778] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.427911][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.438280][ T5778] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.447725][ T5778] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.461770][ T5778] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.495811][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.508468][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.531873][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.542596][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.552992][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.563495][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.575119][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.587708][ T5776] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.600870][ T5776] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.611178][ T5776] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.620686][ T5776] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.651556][ T5843] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 81.805330][ T5847] jffs2: notice: (5847) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 81.887556][ T5779] ------------[ cut here ]------------ [ 81.894249][ T5779] kernel BUG at fs/jffs2/nodelist.c:462! [ 81.911093][ T5779] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 81.917246][ T5779] CPU: 0 PID: 5779 Comm: syz-executor Not tainted syzkaller #0 [ 81.924839][ T5779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 81.934900][ T5779] RIP: 0010:jffs2_del_ino_cache+0x2b8/0x2c0 [ 81.940815][ T5779] Code: 08 ff e9 51 ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 4f fe ff ff 4c 89 e7 e8 72 00 08 ff e9 42 fe ff ff e8 18 7e af fe <0f> 0b 66 0f 1f 44 00 00 66 0f 1f 00 55 41 57 41 56 41 55 41 54 53 [ 81.960784][ T5779] RSP: 0018:ffffc9000455fa98 EFLAGS: 00010293 [ 81.966843][ T5779] RAX: ffffffff82d7f368 RBX: ffff88805dccb000 RCX: ffff88801df8bc00 [ 81.974805][ T5779] RDX: 0000000000000000 RSI: ffff88805dccb000 RDI: ffff8880214a0000 [ 81.982781][ T5779] RBP: 0000000000000006 R08: ffff8880214a036b R09: 1ffff1100429406d [ 81.990738][ T5779] R10: dffffc0000000000 R11: ffffed100429406e R12: ffff88805dccb000 [ 81.998706][ T5779] R13: dffffc0000000000 R14: ffff88805dccb020 R15: ffff8880214a0000 [ 82.006931][ T5779] FS: 00005555597af500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 82.015852][ T5779] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 82.022424][ T5779] CR2: 0000001b2dff6ff8 CR3: 00000000634f4000 CR4: 00000000003506f0 [ 82.030386][ T5779] Call Trace: [ 82.033661][ T5779] [ 82.036578][ T5779] ? jffs2_do_clear_inode+0x314/0x390 [ 82.041951][ T5779] jffs2_do_clear_inode+0x31f/0x390 [ 82.047138][ T5779] ? jffs2_statfs+0x370/0x370 [ 82.051834][ T5779] evict+0x4b7/0x8a0 [ 82.055729][ T5779] ? xa_load+0x64/0x2e0 [ 82.059875][ T5779] ? proc_nr_inodes+0x230/0x230 [ 82.064722][ T5779] ? do_raw_spin_unlock+0x121/0x230 [ 82.069916][ T5779] ? do_raw_spin_unlock+0x121/0x230 [ 82.075107][ T5779] evict_inodes+0x64a/0x6e0 [ 82.079602][ T5779] ? clear_inode+0x150/0x150 [ 82.084183][ T5779] ? jffs2_sync_fs+0x97/0xa0 [ 82.088764][ T5779] generic_shutdown_super+0x97/0x2b0 [ 82.094042][ T5779] kill_mtd_super+0x23/0x70 [ 82.098542][ T5779] jffs2_kill_sb+0x96/0xb0 [ 82.102949][ T5779] deactivate_locked_super+0x97/0x100 [ 82.108334][ T5779] cleanup_mnt+0x3d7/0x460 [ 82.112745][ T5779] task_work_run+0x1d4/0x260 [ 82.117329][ T5779] ? task_work_cancel+0x220/0x220 [ 82.122348][ T5779] ? exit_to_user_mode_loop+0x3b/0x110 [ 82.127801][ T5779] exit_to_user_mode_loop+0xe6/0x110 [ 82.133083][ T5779] exit_to_user_mode_prepare+0xee/0x180 [ 82.138623][ T5779] syscall_exit_to_user_mode+0x1a/0x50 [ 82.144077][ T5779] do_syscall_64+0x61/0xb0 [ 82.148482][ T5779] ? clear_bhb_loop+0x40/0x90 [ 82.153150][ T5779] ? clear_bhb_loop+0x40/0x90 [ 82.157814][ T5779] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 82.163718][ T5779] RIP: 0033:0x7fe1f4d9f317 [ 82.168149][ T5779] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 82.187784][ T5779] RSP: 002b:00007ffe6e578f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 82.196238][ T5779] RAX: 0000000000000000 RBX: 00007fe1f4e34474 RCX: 00007fe1f4d9f317 [ 82.204221][ T5779] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe6e579010 [ 82.212211][ T5779] RBP: 00007ffe6e579010 R08: 00007ffe6e57a010 R09: 00000000ffffffff [ 82.220192][ T5779] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe6e57a0a0 [ 82.228157][ T5779] R13: 00007fe1f4e34474 R14: 0000000000013f96 R15: 00007ffe6e57a0e0 [ 82.236132][ T5779] [ 82.239140][ T5779] Modules linked in: [ 82.246175][ T5778] ieee80211 phy8: Selected rate control algorithm 'minstrel_ht' [ 82.263211][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.271063][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.306773][ T5779] ---[ end trace 0000000000000000 ]--- [ 82.315607][ T5779] RIP: 0010:jffs2_del_ino_cache+0x2b8/0x2c0 [ 82.321612][ T5779] Code: 08 ff e9 51 ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 4f fe ff ff 4c 89 e7 e8 72 00 08 ff e9 42 fe ff ff e8 18 7e af fe <0f> 0b 66 0f 1f 44 00 00 66 0f 1f 00 55 41 57 41 56 41 55 41 54 53 [ 82.345450][ T5776] ieee80211 phy9: Selected rate control algorithm 'minstrel_ht' [ 82.366376][ T5779] RSP: 0018:ffffc9000455fa98 EFLAGS: 00010293 [ 82.380517][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.387766][ T2912] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.403745][ T2912] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.411844][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.413253][ T5779] RAX: ffffffff82d7f368 RBX: ffff88805dccb000 RCX: ffff88801df8bc00 [ 82.427404][ T5776] ieee80211 phy10: Selected rate control algorithm 'minstrel_ht' [ 82.460317][ T5779] RDX: 0000000000000000 RSI: ffff88805dccb000 RDI: ffff8880214a0000 [ 82.469524][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.478087][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.485787][ T5779] RBP: 0000000000000006 R08: ffff8880214a036b R09: 1ffff1100429406d [ 82.496527][ T5779] R10: dffffc0000000000 R11: ffffed100429406e R12: ffff88805dccb000 [ 82.532862][ T5089] Bluetooth: hci2: command tx timeout [ 82.542241][ T5779] R13: dffffc0000000000 R14: ffff88805dccb020 R15: ffff8880214a0000 [ 82.550414][ T5779] FS: 00005555597af500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 82.572148][ T5779] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 82.580946][ T5779] CR2: 00007fda9e9ef2f8 CR3: 00000000634f4000 CR4: 00000000003506f0 [ 82.603501][ T5779] Kernel panic - not syncing: Fatal exception [ 82.609869][ T5779] Kernel Offset: disabled [ 82.614192][ T5779] Rebooting in 86400 seconds..