last executing test programs: 1.466706565s ago: executing program 4 (id=5): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) add_key(&(0x7f0000000440)='dns_resolver\x00', 0x0, &(0x7f00000004c0)="a079394a04954e2d1523cd274d954f18a7b1235d2023e670955c12e7265fa97c2cfb7ba5f67d4a0f06d00c089c2dbb7034ddf203c4f50b4d19d6ab0b49d345571461f3c9bc2be016252397574e61cd9b5fc6337f92b077112e9d69d5f0d761e584bd5f7a22aa334740193d174c89a6670c", 0x71, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) pselect6(0x40, &(0x7f0000000240)={0xffffffffffff4557, 0x4, 0xfffffffffffffff7, 0x1, 0x62a, 0x1, 0x7, 0x2}, &(0x7f0000000280)={0x3, 0x3e, 0x4, 0x7, 0x3, 0x1ccc200000000, 0x1, 0x3ec4d2c1}, &(0x7f0000000300)={0x9, 0xfffffffffffffffe, 0x8, 0xb, 0xb, 0x3, 0x8000, 0x7f}, &(0x7f0000000340), &(0x7f00000003c0)={&(0x7f0000000380)={[0x5]}, 0x8}) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) r6 = pidfd_getfd(r5, r5, 0x0) setns(r6, 0x66020000) r7 = syz_pidfd_open(0x0, 0x0) setns(r7, 0x24020000) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) 1.166851405s ago: executing program 3 (id=7): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x3, 0x5}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000001600010a00", @ANYRES8], 0x20}, 0x1, 0x0, 0x0, 0x10000841}, 0x0) 519.064696ms ago: executing program 3 (id=8): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x82, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7) 383.160395ms ago: executing program 3 (id=9): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x200a}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc0}}, 0x0) 316.392202ms ago: executing program 3 (id=10): syz_open_dev$usbfs(&(0x7f0000000340), 0xffffffffffffffff, 0x121a02) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000400)={0x23, 0x3, 0x18, 0x6, 0x0, 0xffffffff, 0x0}) 239.416223ms ago: executing program 3 (id=11): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = syz_io_uring_setup(0xdd4, &(0x7f0000000140)={0x0, 0x1204, 0x8, 0x3, 0x34f}, &(0x7f00000000c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_CLOCK(r1, 0x1d, 0x0, 0x0) 178.612942ms ago: executing program 1 (id=2): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x58a5}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x17, 0x8, 0x40, 0x42, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r0, &(0x7f0000000600), &(0x7f0000000580)=""/95}, 0x20) 955.482µs ago: executing program 3 (id=12): r0 = getpid() unshare(0x22020600) r1 = syz_pidfd_open(r0, 0x0) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=13): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000200)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xfdef, &(0x7f0000000380)=ANY=[], 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.47' (ED25519) to the list of known hosts. [ 68.520898][ T5810] cgroup: Unknown subsys name 'net' [ 68.627537][ T5810] cgroup: Unknown subsys name 'cpuset' [ 68.636367][ T5810] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 70.075455][ T5810] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.369054][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.375532][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.198812][ T5823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.207003][ T5823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.214816][ T5823] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.223488][ T5823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.231238][ T5823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.284947][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.305588][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.313575][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.322060][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.329970][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.338851][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.355244][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.372453][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.375642][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.388146][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.395920][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.396410][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.414256][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.417167][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.422348][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.428945][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.443712][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.443836][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.461170][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.477176][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.943691][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 73.121724][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 73.229703][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.237152][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.245247][ T5820] bridge_slave_0: entered allmulticast mode [ 73.252324][ T5820] bridge_slave_0: entered promiscuous mode [ 73.261022][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 73.298174][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.305734][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.312951][ T5820] bridge_slave_1: entered allmulticast mode [ 73.321729][ T5820] bridge_slave_1: entered promiscuous mode [ 73.413638][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.425869][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.490430][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 73.517374][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.524793][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.531949][ T5826] bridge_slave_0: entered allmulticast mode [ 73.539189][ T5826] bridge_slave_0: entered promiscuous mode [ 73.561861][ T5820] team0: Port device team_slave_0 added [ 73.571470][ T5820] team0: Port device team_slave_1 added [ 73.593809][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.601074][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.608574][ T5826] bridge_slave_1: entered allmulticast mode [ 73.615803][ T5826] bridge_slave_1: entered promiscuous mode [ 73.663235][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.670329][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.697101][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.746751][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.753795][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.780197][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.806654][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 73.840055][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.864992][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.872180][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.879470][ T5824] bridge_slave_0: entered allmulticast mode [ 73.886508][ T5824] bridge_slave_0: entered promiscuous mode [ 73.895576][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.902815][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.910118][ T5824] bridge_slave_1: entered allmulticast mode [ 73.917240][ T5824] bridge_slave_1: entered promiscuous mode [ 73.926827][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.041524][ T5826] team0: Port device team_slave_0 added [ 74.078465][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.093704][ T5826] team0: Port device team_slave_1 added [ 74.115962][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.123128][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.130443][ T5830] bridge_slave_0: entered allmulticast mode [ 74.137559][ T5830] bridge_slave_0: entered promiscuous mode [ 74.150882][ T5820] hsr_slave_0: entered promiscuous mode [ 74.157528][ T5820] hsr_slave_1: entered promiscuous mode [ 74.171241][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.192230][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.199520][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.206856][ T5830] bridge_slave_1: entered allmulticast mode [ 74.213904][ T5830] bridge_slave_1: entered promiscuous mode [ 74.258528][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.266245][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.292551][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.306314][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.313267][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.340107][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.340269][ T5145] Bluetooth: hci0: command tx timeout [ 74.411315][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.421305][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.428683][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.435916][ T5834] bridge_slave_0: entered allmulticast mode [ 74.442964][ T5834] bridge_slave_0: entered promiscuous mode [ 74.452482][ T5824] team0: Port device team_slave_0 added [ 74.484523][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.493955][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.501504][ T5145] Bluetooth: hci3: command tx timeout [ 74.501512][ T5839] Bluetooth: hci1: command tx timeout [ 74.502028][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.520380][ T5834] bridge_slave_1: entered allmulticast mode [ 74.527511][ T5834] bridge_slave_1: entered promiscuous mode [ 74.536437][ T5824] team0: Port device team_slave_1 added [ 74.565096][ T5145] Bluetooth: hci2: command tx timeout [ 74.574394][ T5145] Bluetooth: hci4: command tx timeout [ 74.657774][ T5826] hsr_slave_0: entered promiscuous mode [ 74.664630][ T5826] hsr_slave_1: entered promiscuous mode [ 74.670776][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 74.676663][ T5826] Cannot create hsr debugfs directory [ 74.690438][ T5830] team0: Port device team_slave_0 added [ 74.698893][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.709006][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.716266][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.742956][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.755683][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.762624][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.788582][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.807994][ T5830] team0: Port device team_slave_1 added [ 74.823786][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.905050][ T5834] team0: Port device team_slave_0 added [ 74.959164][ T5834] team0: Port device team_slave_1 added [ 74.998678][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.005696][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.031768][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.074578][ T5824] hsr_slave_0: entered promiscuous mode [ 75.081009][ T5824] hsr_slave_1: entered promiscuous mode [ 75.087547][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 75.093418][ T5824] Cannot create hsr debugfs directory [ 75.107165][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.114298][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.140310][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.157919][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.164994][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.191078][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.203773][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.210865][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.236807][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.366333][ T5834] hsr_slave_0: entered promiscuous mode [ 75.373081][ T5834] hsr_slave_1: entered promiscuous mode [ 75.380176][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 75.386243][ T5834] Cannot create hsr debugfs directory [ 75.467536][ T5830] hsr_slave_0: entered promiscuous mode [ 75.474426][ T5830] hsr_slave_1: entered promiscuous mode [ 75.480591][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 75.486461][ T5830] Cannot create hsr debugfs directory [ 75.699487][ T5820] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.740934][ T5820] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.780895][ T5820] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.823070][ T5820] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.915614][ T5826] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.942296][ T5826] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.953672][ T5826] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.964980][ T5826] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.058185][ T5824] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.074046][ T5824] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.085848][ T5824] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.096053][ T5824] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.193772][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.212308][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.222937][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.235463][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.260868][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.330609][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.356912][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.364821][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.376355][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.403883][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.410847][ T5145] Bluetooth: hci0: command tx timeout [ 76.421167][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.433260][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.440449][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.461609][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.492225][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.565303][ T5145] Bluetooth: hci3: command tx timeout [ 76.565704][ T5839] Bluetooth: hci1: command tx timeout [ 76.620569][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.644925][ T5839] Bluetooth: hci4: command tx timeout [ 76.644928][ T5145] Bluetooth: hci2: command tx timeout [ 76.670538][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.677939][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.726485][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.733707][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.758291][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.791220][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.869897][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.882753][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.932247][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.939447][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.949579][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.956776][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.966784][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.973878][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.006810][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.017267][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.024484][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.102859][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.182700][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.286915][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.294084][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.385293][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.392487][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.549323][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.651071][ T5820] veth0_vlan: entered promiscuous mode [ 77.695609][ T5820] veth1_vlan: entered promiscuous mode [ 77.761283][ T5826] veth0_vlan: entered promiscuous mode [ 77.801243][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.836414][ T5826] veth1_vlan: entered promiscuous mode [ 77.871304][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.920357][ T5820] veth0_macvtap: entered promiscuous mode [ 77.961138][ T5820] veth1_macvtap: entered promiscuous mode [ 77.984808][ T5826] veth0_macvtap: entered promiscuous mode [ 78.015723][ T5824] veth0_vlan: entered promiscuous mode [ 78.021946][ T5826] veth1_macvtap: entered promiscuous mode [ 78.056069][ T5824] veth1_vlan: entered promiscuous mode [ 78.082162][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.097285][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.116821][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.128945][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.162946][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.176369][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.186701][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.213737][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.222657][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.252583][ T5824] veth0_macvtap: entered promiscuous mode [ 78.271193][ T5834] veth0_vlan: entered promiscuous mode [ 78.277952][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.287868][ T1143] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.305041][ T5824] veth1_macvtap: entered promiscuous mode [ 78.320109][ T1143] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.329236][ T1143] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.360551][ T5834] veth1_vlan: entered promiscuous mode [ 78.423883][ T5830] veth0_vlan: entered promiscuous mode [ 78.450414][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.462013][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.482115][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.493478][ T5145] Bluetooth: hci0: command tx timeout [ 78.508805][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.533455][ T5834] veth0_macvtap: entered promiscuous mode [ 78.556772][ T1143] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.567857][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.578320][ T5830] veth1_vlan: entered promiscuous mode [ 78.593052][ T5834] veth1_macvtap: entered promiscuous mode [ 78.606009][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.616289][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.637468][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.645570][ T5145] Bluetooth: hci3: command tx timeout [ 78.645621][ T5145] Bluetooth: hci1: command tx timeout [ 78.660658][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.688050][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.699574][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.723444][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.731323][ T5839] Bluetooth: hci2: command tx timeout [ 78.737340][ T5145] Bluetooth: hci4: command tx timeout [ 78.777016][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 78.812921][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.820906][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.828959][ T1161] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.838180][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.852890][ T5830] veth0_macvtap: entered promiscuous mode [ 78.929589][ T1161] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.945856][ T1161] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.972548][ T5830] veth1_macvtap: entered promiscuous mode [ 79.007159][ T1161] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.063334][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.096716][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.110833][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.390312][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.417054][ T5948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7'. [ 80.091086][ T1161] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.113184][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.133721][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.147635][ T1161] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.184608][ T1161] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.249973][ T1161] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.294910][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.302758][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.549349][ C1] ------------[ cut here ]------------ [ 80.554996][ C1] WARNING: ./include/linux/ns_common.h:255 at delayed_free_pidns+0x118/0x150, CPU#1: ksoftirqd/1/23 [ 80.565824][ C1] Modules linked in: [ 80.569873][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 80.579121][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 80.589240][ C1] RIP: 0010:delayed_free_pidns+0x118/0x150 [ 80.595102][ C1] Code: 85 ed 7e 2b e8 99 9f 03 00 48 83 c3 a8 48 8b 3d 5e be c7 17 48 89 de 5b 41 5c 41 5e 41 5f 5d e9 1e 1e 5f 00 e8 79 9f 03 00 90 <0f> 0b 90 eb b4 e8 6e 9f 03 00 4c 89 ff be 03 00 00 00 e8 01 fb d2 [ 80.604839][ T5839] Bluetooth: hci0: command tx timeout [ 80.614749][ C1] RSP: 0018:ffffc900001d7890 EFLAGS: 00010246 [ 80.614777][ C1] RAX: ffffffff81bde0b7 RBX: ffff88803086c868 RCX: ffff88801ceedb80 [ 80.614791][ C1] RDX: 0000000000000100 RSI: 0000000000000002 RDI: 0000000000000000 [ 80.614804][ C1] RBP: 0000000000000002 R08: ffff88802f500193 R09: 1ffff11005ea0032 [ 80.614818][ C1] R10: dffffc0000000000 R11: ffffed1005ea0033 R12: dffffc0000000000 [ 80.614832][ C1] R13: ffffffff81a903d7 R14: ffff88802f500000 R15: ffff88802f500190 [ 80.614848][ C1] FS: 0000000000000000(0000) GS:ffff888125fc2000(0000) knlGS:0000000000000000 [ 80.675223][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 80.681827][ C1] CR2: 00007f5328c4f761 CR3: 0000000077ce2000 CR4: 00000000003526f0 [ 80.689853][ C1] Call Trace: [ 80.693182][ C1] [ 80.696158][ C1] ? __pfx_delayed_free_pidns+0x10/0x10 [ 80.697233][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.701716][ C1] rcu_core+0xcab/0x1770 [ 80.701766][ C1] ? __pfx_rcu_core+0x10/0x10 [ 80.718518][ C1] ? rcu_qs+0xc4/0x170 [ 80.722669][ C1] ? __pfx_rcu_qs+0x10/0x10 [ 80.724419][ T5839] Bluetooth: hci1: command tx timeout [ 80.727214][ C1] ? sched_clock_cpu+0x74/0x430 [ 80.733965][ T5145] Bluetooth: hci3: command tx timeout [ 80.737441][ C1] ? rcu_softirq_qs+0xf2/0x350 [ 80.737474][ C1] ? __pfx_rcu_softirq_qs+0x10/0x10 [ 80.737510][ C1] handle_softirqs+0x286/0x870 [ 80.757620][ C1] ? run_ksoftirqd+0x9b/0x100 [ 80.762331][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 80.763851][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.767669][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 80.767706][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 80.767731][ C1] run_ksoftirqd+0x9b/0x100 [ 80.790094][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 80.795279][ C1] smpboot_thread_fn+0x542/0xa60 [ 80.798704][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.800238][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 80.812569][ C1] kthread+0x711/0x8a0 [ 80.816691][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 80.818174][ T5839] Bluetooth: hci4: command tx timeout [ 80.822164][ C1] ? __pfx_kthread+0x10/0x10 [ 80.822191][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 80.837381][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 80.839645][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.842598][ C1] ? __pfx_kthread+0x10/0x10 [ 80.842627][ C1] ret_from_fork+0x599/0xb30 [ 80.859099][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 80.864282][ C1] ? __switch_to_asm+0x39/0x70 [ 80.869063][ C1] ? __switch_to_asm+0x33/0x70 [ 80.873848][ C1] ? __pfx_kthread+0x10/0x10 [ 80.878517][ C1] ret_from_fork_asm+0x1a/0x30 [ 80.883329][ C1] [ 80.886409][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 80.893701][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 80.902909][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 80.912978][ C1] Call Trace: [ 80.916255][ C1] [ 80.919214][ C1] dump_stack_lvl+0x99/0x250 [ 80.923801][ C1] ? __asan_memcpy+0x40/0x70 [ 80.928386][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 80.933579][ C1] ? __pfx__printk+0x10/0x10 [ 80.938183][ C1] vpanic+0x237/0x6d0 [ 80.942183][ C1] ? __pfx_vpanic+0x10/0x10 [ 80.946692][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 80.951901][ C1] panic+0xb9/0xc0 [ 80.955618][ C1] ? __pfx_panic+0x10/0x10 [ 80.960039][ C1] __warn+0x334/0x4c0 [ 80.964008][ C1] ? delayed_free_pidns+0x118/0x150 [ 80.969200][ C1] ? delayed_free_pidns+0x118/0x150 [ 80.974397][ C1] report_bug+0x2be/0x4f0 [ 80.978725][ C1] ? delayed_free_pidns+0x118/0x150 [ 80.984346][ C1] ? delayed_free_pidns+0x118/0x150 [ 80.989673][ C1] ? delayed_free_pidns+0x11a/0x150 [ 80.994878][ C1] handle_bug+0x84/0x160 [ 80.999125][ C1] exc_invalid_op+0x1a/0x50 [ 81.003635][ C1] asm_exc_invalid_op+0x1a/0x20 [ 81.008487][ C1] RIP: 0010:delayed_free_pidns+0x118/0x150 [ 81.014284][ C1] Code: 85 ed 7e 2b e8 99 9f 03 00 48 83 c3 a8 48 8b 3d 5e be c7 17 48 89 de 5b 41 5c 41 5e 41 5f 5d e9 1e 1e 5f 00 e8 79 9f 03 00 90 <0f> 0b 90 eb b4 e8 6e 9f 03 00 4c 89 ff be 03 00 00 00 e8 01 fb d2 [ 81.033879][ C1] RSP: 0018:ffffc900001d7890 EFLAGS: 00010246 [ 81.039935][ C1] RAX: ffffffff81bde0b7 RBX: ffff88803086c868 RCX: ffff88801ceedb80 [ 81.047905][ C1] RDX: 0000000000000100 RSI: 0000000000000002 RDI: 0000000000000000 [ 81.055867][ C1] RBP: 0000000000000002 R08: ffff88802f500193 R09: 1ffff11005ea0032 [ 81.063828][ C1] R10: dffffc0000000000 R11: ffffed1005ea0033 R12: dffffc0000000000 [ 81.071787][ C1] R13: ffffffff81a903d7 R14: ffff88802f500000 R15: ffff88802f500190 [ 81.079760][ C1] ? rcu_core+0xc37/0x1770 [ 81.084182][ C1] ? delayed_free_pidns+0x117/0x150 [ 81.089384][ C1] ? __pfx_delayed_free_pidns+0x10/0x10 [ 81.094929][ C1] rcu_core+0xcab/0x1770 [ 81.099200][ C1] ? __pfx_rcu_core+0x10/0x10 [ 81.103894][ C1] ? rcu_qs+0xc4/0x170 [ 81.107967][ C1] ? __pfx_rcu_qs+0x10/0x10 [ 81.112488][ C1] ? sched_clock_cpu+0x74/0x430 [ 81.117536][ C1] ? rcu_softirq_qs+0xf2/0x350 [ 81.122299][ C1] ? __pfx_rcu_softirq_qs+0x10/0x10 [ 81.127508][ C1] handle_softirqs+0x286/0x870 [ 81.132298][ C1] ? run_ksoftirqd+0x9b/0x100 [ 81.136988][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 81.142272][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 81.147292][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 81.152344][ C1] run_ksoftirqd+0x9b/0x100 [ 81.156843][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 81.161956][ C1] smpboot_thread_fn+0x542/0xa60 [ 81.166888][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 81.171915][ C1] kthread+0x711/0x8a0 [ 81.175978][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 81.181455][ C1] ? __pfx_kthread+0x10/0x10 [ 81.186030][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 81.191234][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 81.197324][ C1] ? __pfx_kthread+0x10/0x10 [ 81.201929][ C1] ret_from_fork+0x599/0xb30 [ 81.206517][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 81.211633][ C1] ? __switch_to_asm+0x39/0x70 [ 81.216388][ C1] ? __switch_to_asm+0x33/0x70 [ 81.221138][ C1] ? __pfx_kthread+0x10/0x10 [ 81.225717][ C1] ret_from_fork_asm+0x1a/0x30 [ 81.230480][ C1] [ 81.233744][ C1] Kernel Offset: disabled [ 81.238050][ C1] Rebooting in 86400 seconds..