last executing test programs:
1.130239154s ago: executing program 3 (id=4):
syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040cb0404010001000000010902200001010080320904000002000000000705810240000007050202400000"], 0x0)
nanosleep(&(0x7f0000000400)={0x1}, 0x0)
r0 = syz_open_dev$video(&(0x7f0000000100), 0x0, 0x2)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000200)={0x1, 0x4745504a, 0x1})
r1 = syz_open_dev$video(&(0x7f0000000100), 0x1, 0x2)
ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000200)={0x1, 0x4745504a, 0x1})
r2 = syz_open_dev$video(&(0x7f0000000100), 0x2, 0x2)
ioctl$VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000200)={0x1, 0x4745504a, 0x1})
r3 = syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2)
ioctl$VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000200)={0x1, 0x4745504a, 0x1})
r4 = syz_open_dev$video(&(0x7f0000000100), 0x4, 0x2)
ioctl$VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000200)={0x1, 0x4745504a, 0x1})
r5 = syz_open_dev$video(&(0x7f0000000100), 0x5, 0x2)
ioctl$VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000000200)={0x1, 0x4745504a, 0x1})
r6 = syz_open_dev$video(&(0x7f0000000100), 0x6, 0x2)
ioctl$VIDIOC_ENUM_FRAMESIZES(r6, 0xc02c564a, 0x0)
r7 = syz_open_dev$video(&(0x7f0000000100), 0x7, 0x2)
ioctl$VIDIOC_ENUM_FRAMESIZES(r7, 0xc02c564a, &(0x7f0000000200)={0x1, 0x4745504a, 0x1})
r8 = syz_open_dev$video(&(0x7f0000000100), 0x8, 0x2)
ioctl$VIDIOC_ENUM_FRAMESIZES(r8, 0xc02c564a, &(0x7f0000000200)={0x1, 0x4745504a, 0x1})
syz_open_dev$video(&(0x7f0000000100), 0x9, 0x2)
502.53093ms ago: executing program 0 (id=1):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./dev/ubi0\x00', 0x2, 0x0)
ioctl(r0, 0x40986f00, &(0x7f0000000480)="ffffffff01000000000080000000000003000400000000007465737400"/144)
337.510753ms ago: executing program 2 (id=2):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x42, 0x1b6)
pwrite64(r0, &(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/loop0/loop/backing_file\x00', 0x0, 0x0)
read(r2, &(0x7f0000000300)=""/4096, 0x1000)
132.091305ms ago: executing program 0 (id=5):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a30000000000800410072786500140033006574683000"/56], 0x38}}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/infiniband/syz0\x00', 0x0, 0x0)
121.043934ms ago: executing program 2 (id=6):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000080))
r1 = syz_open_pts(r0, 0x2)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x11)
r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
ioctl(r2, 0x8914, &(0x7f0000000200)="63616e300000000000000000000000000100"/40)
write(r0, &(0x7f0000000300)='e1a\r', 0x4)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
0s ago: executing program 1 (id=3):
r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000140)={0x20, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000780)={0x34, &(0x7f0000000600)={0x40, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000f00)={0x34, &(0x7f0000000cc0)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001240)={0x34, &(0x7f0000001080)={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001700)={0x34, &(0x7f0000001500)={0x20, 0x18, 0x1, ')'}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000002180)={0x34, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000006c0)={0x34, &(0x7f0000000500)={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000002540)={0x34, &(0x7f0000002340)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000840), 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
kernel console output (not intermixed with test programs):
no interfaces have a carrier
[ 52.073552][ T5277] 8021q: adding VLAN 0 to HW filter on device bond0
[ 52.095708][ T5277] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting crond: OK
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.0.195' (ED25519) to the list of known hosts.
syzkaller login: [ 78.022881][ T5603] cgroup: Unknown subsys name 'net'
[ 78.097422][ T5603] cgroup: Unknown subsys name 'cpuset'
[ 78.100479][ T5603] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 79.917167][ T5603] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 83.491161][ T5617] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 83.501104][ T5617] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 83.509035][ T5617] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 83.524114][ T5617] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 83.527437][ T5617] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 83.607352][ T5617] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 83.609199][ T5617] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 83.609809][ T5617] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 83.611298][ T5617] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 83.612009][ T5617] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 83.687990][ T5617] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 83.689615][ T5617] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 83.690535][ T5617] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 83.691610][ T5617] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 83.692787][ T5617] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 83.754435][ T5617] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 83.758112][ T5617] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 83.760003][ T5617] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 83.770971][ T5617] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 83.795117][ T5617] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 85.296946][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state
[ 85.297122][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state
[ 85.297253][ T5616] bridge_slave_0: entered allmulticast mode
[ 85.299549][ T5616] bridge_slave_0: entered promiscuous mode
[ 85.362629][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state
[ 85.362815][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state
[ 85.362967][ T5616] bridge_slave_1: entered allmulticast mode
[ 85.365451][ T5616] bridge_slave_1: entered promiscuous mode
[ 85.415475][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state
[ 85.415623][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state
[ 85.415759][ T5622] bridge_slave_0: entered allmulticast mode
[ 85.418383][ T5622] bridge_slave_0: entered promiscuous mode
[ 85.463849][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 85.464084][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state
[ 85.464262][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state
[ 85.464718][ T5622] bridge_slave_1: entered allmulticast mode
[ 85.466433][ T5622] bridge_slave_1: entered promiscuous mode
[ 85.467916][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state
[ 85.468068][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state
[ 85.468175][ T5626] bridge_slave_0: entered allmulticast mode
[ 85.470204][ T5626] bridge_slave_0: entered promiscuous mode
[ 85.472953][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state
[ 85.473084][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state
[ 85.473465][ T5626] bridge_slave_1: entered allmulticast mode
[ 85.475220][ T5626] bridge_slave_1: entered promiscuous mode
[ 85.510639][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 85.514347][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 85.546076][ T5626] team0: Port device team_slave_0 added
[ 85.548912][ T5626] team0: Port device team_slave_1 added
[ 85.597764][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 85.606651][ T5617] Bluetooth: hci0: command tx timeout
[ 85.625582][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state
[ 85.625699][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state
[ 85.625832][ T5627] bridge_slave_0: entered allmulticast mode
[ 85.627415][ T5627] bridge_slave_0: entered promiscuous mode
[ 85.659099][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 85.659116][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 85.659139][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 85.664838][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 85.664853][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 85.664875][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 85.703745][ T5617] Bluetooth: hci1: command tx timeout
[ 85.738121][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state
[ 85.738336][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state
[ 85.738498][ T5627] bridge_slave_1: entered allmulticast mode
[ 85.740292][ T5627] bridge_slave_1: entered promiscuous mode
[ 85.754544][ T5617] Bluetooth: hci2: command tx timeout
[ 85.761672][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 85.767552][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 85.814428][ T5616] team0: Port device team_slave_0 added
[ 85.832314][ T5626] hsr_slave_0: entered promiscuous mode
[ 85.833070][ T5626] hsr_slave_1: entered promiscuous mode
[ 85.833998][ T5617] Bluetooth: hci3: command tx timeout
[ 85.858146][ T5616] team0: Port device team_slave_1 added
[ 85.860118][ T5622] team0: Port device team_slave_0 added
[ 85.863194][ T5622] team0: Port device team_slave_1 added
[ 85.867217][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 85.907938][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 85.959590][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 85.959610][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 85.959635][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 85.973599][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 85.973616][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 85.973632][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 85.990415][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 85.990432][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 85.990454][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 86.003143][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 86.003159][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 86.003182][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 86.016114][ T5627] team0: Port device team_slave_0 added
[ 86.051116][ T5627] team0: Port device team_slave_1 added
[ 86.192191][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 86.192211][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 86.192236][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 86.200906][ T5622] hsr_slave_0: entered promiscuous mode
[ 86.202030][ T5622] hsr_slave_1: entered promiscuous mode
[ 86.202801][ T5622] debugfs: 'hsr0' already exists in 'hsr'
[ 86.202880][ T5622] Cannot create hsr debugfs directory
[ 86.264560][ T5616] hsr_slave_0: entered promiscuous mode
[ 86.265273][ T5616] hsr_slave_1: entered promiscuous mode
[ 86.265840][ T5616] debugfs: 'hsr0' already exists in 'hsr'
[ 86.265859][ T5616] Cannot create hsr debugfs directory
[ 86.288282][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 86.288299][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 86.288322][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 86.441612][ T5627] hsr_slave_0: entered promiscuous mode
[ 86.442282][ T5627] hsr_slave_1: entered promiscuous mode
[ 86.442776][ T5627] debugfs: 'hsr0' already exists in 'hsr'
[ 86.442806][ T5627] Cannot create hsr debugfs directory
[ 86.657246][ T5626] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 86.663543][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 86.665179][ T5626] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 86.675974][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 86.702500][ T5626] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 86.707047][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 86.709558][ T5626] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 86.721950][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 86.821874][ T5622] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 86.830563][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 86.839052][ T5622] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 86.848609][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 86.849982][ T5622] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 86.852668][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 86.872753][ T5622] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 86.883338][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 86.969362][ T5616] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 86.972776][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 86.990431][ T5616] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 86.997164][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 87.018755][ T5616] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 87.031846][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 87.032711][ T5616] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 87.041713][ T966] cfg80211: failed to load regulatory.db
[ 87.045883][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 87.140725][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0
[ 87.153116][ T5627] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 87.157809][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 87.158686][ T5627] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 87.164621][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 87.177741][ T5627] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 87.187578][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 87.199714][ T5627] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 87.202746][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 87.244331][ T5626] 8021q: adding VLAN 0 to HW filter on device team0
[ 87.286696][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 87.286845][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 87.326777][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0
[ 87.332167][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 87.332231][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 87.401359][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0
[ 87.411759][ T5622] 8021q: adding VLAN 0 to HW filter on device team0
[ 87.457735][ T1026] bridge0: port 1(bridge_slave_0) entered blocking state
[ 87.457867][ T1026] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 87.487969][ T5616] 8021q: adding VLAN 0 to HW filter on device team0
[ 87.513882][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 87.513999][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 87.516240][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 87.516371][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 87.582378][ T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 87.582498][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 87.674296][ T5617] Bluetooth: hci0: command tx timeout
[ 87.723203][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0
[ 87.754274][ T5617] Bluetooth: hci1: command tx timeout
[ 87.772239][ T5627] 8021q: adding VLAN 0 to HW filter on device team0
[ 87.830981][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 87.831105][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 87.835035][ T5617] Bluetooth: hci2: command tx timeout
[ 87.881574][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 87.881758][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 87.914010][ T5617] Bluetooth: hci3: command tx timeout
[ 88.002226][ T5627] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 88.479847][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 88.671062][ T5626] veth0_vlan: entered promiscuous mode
[ 88.710823][ T5626] veth1_vlan: entered promiscuous mode
[ 88.815217][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 88.840869][ T5626] veth0_macvtap: entered promiscuous mode
[ 88.856881][ T5626] veth1_macvtap: entered promiscuous mode
[ 88.925498][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 88.952891][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 88.973173][ T5622] veth0_vlan: entered promiscuous mode
[ 88.981018][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 89.027987][ T34] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 89.028792][ T5622] veth1_vlan: entered promiscuous mode
[ 89.090241][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 89.116496][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 89.155870][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 89.155943][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 89.171866][ T5616] veth0_vlan: entered promiscuous mode
[ 89.219204][ T5622] veth0_macvtap: entered promiscuous mode
[ 89.230886][ T5616] veth1_vlan: entered promiscuous mode
[ 89.231205][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 89.231224][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 89.269618][ T5622] veth1_macvtap: entered promiscuous mode
[ 89.319486][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 89.319509][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 89.351561][ T5616] veth0_macvtap: entered promiscuous mode
[ 89.358612][ T5616] veth1_macvtap: entered promiscuous mode
[ 89.372102][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 89.385593][ T5627] veth0_vlan: entered promiscuous mode
[ 89.407052][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 89.428983][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 89.431348][ T5627] veth1_vlan: entered promiscuous mode
[ 89.458189][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 89.469108][ T5626] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 89.662785][ T5627] veth0_macvtap: entered promiscuous mode
[ 89.686653][ T5627] veth1_macvtap: entered promiscuous mode
[ 89.720351][ T1119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 89.720373][ T1119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 89.762307][ T1119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 89.762331][ T1119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 89.764450][ T5617] Bluetooth: hci0: command tx timeout
[ 89.792442][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 89.834394][ T5617] Bluetooth: hci1: command tx timeout
[ 89.845514][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 89.850451][ T1119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 89.850473][ T1119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 89.880240][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 89.880263][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 89.884460][ T1218] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 89.914852][ T5617] Bluetooth: hci2: command tx timeout
[ 89.970792][ T1119] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 89.971396][ T1119] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 89.971622][ T1119] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 89.971767][ T1119] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 89.971958][ T1119] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 89.972152][ T1119] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 89.972342][ T1119] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 89.983274][ T1119] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 89.983330][ T1119] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 89.983363][ T1119] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 89.983396][ T1119] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 89.983428][ T1119] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 90.002239][ T5617] Bluetooth: hci3: command tx timeout
[ 90.043593][ T1218] usb 4-1: New USB device found, idVendor=04cb, idProduct=0104, bcdDevice= 1.00
[ 90.062649][ T1218] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[ 90.062681][ T1218] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[ 90.062719][ T1218] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 90.089109][ T5760] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 90.089256][ T5760] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 90.126491][ T1218] gspca_main: finepix-2.14.0 probing 04cb:0104
[ 90.249362][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 90.249388][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 90.467257][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 90.467281][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 90.701963][ T5771] can0: slcan on pts0.
[ 90.742554][ C0] ------------[ cut here ]------------
[ 90.742573][ C0] 1
[ 90.742581][ C0] WARNING: ./include/linux/skbuff.h:3003 at __netif_receive_skb_core+0x294/0x30c0, CPU#0: kworker/u8:9/1119
[ 90.762794][ C0] Modules linked in:
[ 90.768224][ C0] CPU: 0 UID: 0 PID: 1119 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full)
[ 90.777790][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 90.787968][ C0] Workqueue: events_unbound flush_to_ldisc
[ 90.793865][ C0] RIP: 0010:__netif_receive_skb_core+0x294/0x30c0
[ 90.800364][ C0] Code: f8 4d 8d b7 b8 00 00 00 4c 89 f0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 87 2a 00 00 45 8b 36 41 29 de eb 0c e8 bd 99 02 f8 90 <0f> 0b 90 45 31 f6 48 8d 9c 24 e0 00 00 00 48 c7 84 24 b0 00 00 00
[ 90.820167][ C0] RSP: 0018:ffffc90000007a00 EFLAGS: 00010246
[ 90.826357][ C0] RAX: ffffffff89c56b33 RBX: 000000000000ffff RCX: ffff888025043e80
[ 90.834406][ C0] RDX: 8000000000000100 RSI: 0000000000000100 RDI: 000000000000ffff
[ 90.842500][ C0] RBP: ffffc90000007c40 R08: 0000000000000100 R09: 1ffffffff213766f
[ 90.850569][ C0] R10: dffffc0000000000 R11: fffffbfff2137670 R12: 0000000000000000
[ 90.858631][ C0] R13: dffffc0000000000 R14: 0000000000000040 R15: ffff8880770b23c0
[ 90.866684][ C0] FS: 0000000000000000(0000) GS:ffff88812485b000(0000) knlGS:0000000000000000
[ 90.875693][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 90.882333][ C0] CR2: 000000110c3defaf CR3: 0000000033904000 CR4: 00000000003526f0
[ 90.890397][ C0] Call Trace:
[ 90.893954][ C0]
[ 90.896847][ C0] ? __lock_acquire+0x747/0x2de0
[ 90.901853][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 90.908028][ C0] ? update_se+0x90/0x1020
[ 90.912494][ C0] ? lock_acquire+0x115/0x350
[ 90.917277][ C0] ? process_backlog+0x3de/0x18b0
[ 90.922527][ C0] ? process_backlog+0x3de/0x18b0
[ 90.927661][ C0] process_backlog+0x727/0x18b0
[ 90.932569][ C0] ? process_backlog+0x3de/0x18b0
[ 90.937710][ C0] __napi_poll+0xaa/0x330
[ 90.942093][ C0] net_rx_action+0x61d/0xf50
[ 90.946799][ C0] ? __pfx_net_rx_action+0x10/0x10
[ 90.951965][ C0] ? kvm_sched_clock_read+0x11/0x20
[ 90.957267][ C0] ? __pfx_sched_clock_cpu+0x10/0x10
[ 90.962592][ C0] ? kvm_sched_clock_read+0x11/0x20
[ 90.967878][ C0] ? sched_clock+0x41/0x60
[ 90.972371][ C0] handle_softirqs+0x226/0x860
[ 90.973790][ T966] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[ 90.984928][ C0] ? do_softirq+0x77/0xd0
[ 90.989320][ C0] ? netif_rx+0x7f/0xa0
[ 90.993517][ C0] do_softirq+0x77/0xd0
[ 90.997761][ C0]
[ 91.000725][ C0]
[ 91.003717][ C0] __local_bh_enable_ip+0x100/0x140
[ 91.008958][ C0] netif_rx+0x89/0xa0
[ 91.012984][ C0] slcan_receive_buf+0x1c5f/0x2140
[ 91.018213][ C0] ? __pfx_slcan_receive_buf+0x10/0x10
[ 91.023758][ C0] ? ldsem_down_read_trylock+0x13d/0x1b0
[ 91.029446][ C0] ? tty_ldisc_ref+0x1c/0x90
[ 91.034121][ C0] ? __pfx_ldsem_down_read_trylock+0x10/0x10
[ 91.040142][ C0] ? tty_buffer_free+0x1e5/0x2f0
[ 91.045169][ C0] ? __pfx_slcan_receive_buf+0x10/0x10
[ 91.050676][ C0] tty_ldisc_receive_buf+0x119/0x160
[ 91.056051][ C0] tty_port_default_receive_buf+0x6e/0xa0
[ 91.061817][ C0] flush_to_ldisc+0x247/0x6c0
[ 91.066687][ C0] ? process_scheduled_works+0x97a/0x1630
[ 91.072720][ C0] process_scheduled_works+0xc3d/0x1630
[ 91.078492][ C0] ? __pfx_process_scheduled_works+0x10/0x10
[ 91.084561][ C0] ? assign_work+0x3cf/0x5d0
[ 91.089198][ C0] worker_thread+0xa47/0xfb0
[ 91.094062][ C0] ? __kthread_parkme+0x71/0x1f0
[ 91.099163][ C0] kthread+0x38b/0x480
[ 91.103294][ C0] ? __pfx_worker_thread+0x10/0x10
[ 91.108961][ C0] ? __pfx_kthread+0x10/0x10
[ 91.113609][ C0] ret_from_fork+0x514/0xb70
[ 91.118305][ C0] ? __pfx_ret_from_fork+0x10/0x10
[ 91.123472][ C0] ? __switch_to+0xc89/0x1420
[ 91.128352][ C0] ? __pfx_kthread+0x10/0x10
[ 91.132996][ C0] ret_from_fork_asm+0x1a/0x30
[ 91.135729][ T966] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 91.143353][ T966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 91.143377][ T966] usb 2-1: Product: syz
[ 91.143390][ T966] usb 2-1: Manufacturer: syz
[ 91.143403][ T966] usb 2-1: SerialNumber: syz
[ 91.168956][ C0]
[ 91.172012][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 91.179338][ C0] CPU: 0 UID: 0 PID: 1119 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full)
[ 91.188922][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 91.199013][ C0] Workqueue: events_unbound flush_to_ldisc
[ 91.205218][ C0] Call Trace:
[ 91.208541][ C0]
[ 91.211419][ C0] vpanic+0x56d/0xa70
[ 91.215455][ C0] ? __pfx__printk+0x10/0x10
[ 91.220078][ C0] ? __pfx_vpanic+0x10/0x10
[ 91.224631][ C0] ? is_bpf_text_address+0x292/0x2b0
[ 91.229959][ C0] ? is_bpf_text_address+0x26/0x2b0
[ 91.235203][ C0] panic+0xc5/0xd0
[ 91.238962][ C0] ? __pfx_panic+0x10/0x10
[ 91.243439][ C0] ? ret_from_fork_asm+0x1a/0x30
[ 91.248499][ C0] __warn+0x315/0x4c0
[ 91.252533][ C0] ? __netif_receive_skb_core+0x294/0x30c0
[ 91.258385][ C0] ? __netif_receive_skb_core+0x294/0x30c0
[ 91.264253][ C0] __report_bug+0x276/0x570
[ 91.268808][ C0] ? lock_acquire+0x115/0x350
[ 91.273625][ C0] ? __netif_receive_skb_core+0x294/0x30c0
[ 91.279568][ C0] ? __pfx___report_bug+0x10/0x10
[ 91.284650][ C0] ? lock_acquire+0x115/0x350
[ 91.289398][ C0] ? __netif_receive_skb_core+0x294/0x30c0
[ 91.295470][ C0] report_bug+0x16b/0x220
[ 91.299861][ C0] ? __netif_receive_skb_core+0x294/0x30c0
[ 91.305721][ C0] ? __netif_receive_skb_core+0x296/0x30c0
[ 91.311596][ C0] handle_bug+0x9c/0x200
[ 91.315898][ C0] exc_invalid_op+0x1a/0x50
[ 91.320458][ C0] asm_exc_invalid_op+0x1a/0x20
[ 91.325356][ C0] RIP: 0010:__netif_receive_skb_core+0x294/0x30c0
[ 91.331826][ C0] Code: f8 4d 8d b7 b8 00 00 00 4c 89 f0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 87 2a 00 00 45 8b 36 41 29 de eb 0c e8 bd 99 02 f8 90 <0f> 0b 90 45 31 f6 48 8d 9c 24 e0 00 00 00 48 c7 84 24 b0 00 00 00
[ 91.351560][ C0] RSP: 0018:ffffc90000007a00 EFLAGS: 00010246
[ 91.357760][ C0] RAX: ffffffff89c56b33 RBX: 000000000000ffff RCX: ffff888025043e80
[ 91.366124][ C0] RDX: 8000000000000100 RSI: 0000000000000100 RDI: 000000000000ffff
[ 91.374231][ C0] RBP: ffffc90000007c40 R08: 0000000000000100 R09: 1ffffffff213766f
[ 91.382242][ C0] R10: dffffc0000000000 R11: fffffbfff2137670 R12: 0000000000000000
[ 91.390297][ C0] R13: dffffc0000000000 R14: 0000000000000040 R15: ffff8880770b23c0
[ 91.398330][ C0] ? __netif_receive_skb_core+0x293/0x30c0
[ 91.404210][ C0] ? __lock_acquire+0x747/0x2de0
[ 91.409311][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 91.415446][ C0] ? update_se+0x90/0x1020
[ 91.419917][ C0] ? lock_acquire+0x115/0x350
[ 91.424663][ C0] ? process_backlog+0x3de/0x18b0
[ 91.429744][ C0] ? process_backlog+0x3de/0x18b0
[ 91.434843][ C0] process_backlog+0x727/0x18b0
[ 91.439764][ C0] ? process_backlog+0x3de/0x18b0
[ 91.444855][ C0] __napi_poll+0xaa/0x330
[ 91.449247][ C0] net_rx_action+0x61d/0xf50
[ 91.454069][ C0] ? __pfx_net_rx_action+0x10/0x10
[ 91.459238][ C0] ? kvm_sched_clock_read+0x11/0x20
[ 91.464488][ C0] ? __pfx_sched_clock_cpu+0x10/0x10
[ 91.469788][ C0] ? kvm_sched_clock_read+0x11/0x20
[ 91.475027][ C0] ? sched_clock+0x41/0x60
[ 91.479509][ C0] handle_softirqs+0x226/0x860
[ 91.484407][ C0] ? do_softirq+0x77/0xd0
[ 91.488777][ C0] ? netif_rx+0x7f/0xa0
[ 91.492979][ C0] do_softirq+0x77/0xd0
[ 91.497180][ C0]
[ 91.500139][ C0]
[ 91.503168][ C0] __local_bh_enable_ip+0x100/0x140
[ 91.508394][ C0] netif_rx+0x89/0xa0
[ 91.512404][ C0] slcan_receive_buf+0x1c5f/0x2140
[ 91.517565][ C0] ? __pfx_slcan_receive_buf+0x10/0x10
[ 91.523064][ C0] ? ldsem_down_read_trylock+0x13d/0x1b0
[ 91.528740][ C0] ? tty_ldisc_ref+0x1c/0x90
[ 91.533732][ C0] ? __pfx_ldsem_down_read_trylock+0x10/0x10
[ 91.539757][ C0] ? tty_buffer_free+0x1e5/0x2f0
[ 91.544852][ C0] ? __pfx_slcan_receive_buf+0x10/0x10
[ 91.550371][ C0] tty_ldisc_receive_buf+0x119/0x160
[ 91.555721][ C0] tty_port_default_receive_buf+0x6e/0xa0
[ 91.561496][ C0] flush_to_ldisc+0x247/0x6c0
[ 91.566245][ C0] ? process_scheduled_works+0x97a/0x1630
[ 91.572004][ C0] process_scheduled_works+0xc3d/0x1630
[ 91.577607][ C0] ? __pfx_process_scheduled_works+0x10/0x10
[ 91.583642][ C0] ? assign_work+0x3cf/0x5d0
[ 91.588369][ C0] worker_thread+0xa47/0xfb0
[ 91.593024][ C0] ? __kthread_parkme+0x71/0x1f0
[ 91.598068][ C0] kthread+0x38b/0x480
[ 91.602207][ C0] ? __pfx_worker_thread+0x10/0x10
[ 91.607364][ C0] ? __pfx_kthread+0x10/0x10
[ 91.612005][ C0] ret_from_fork+0x514/0xb70
[ 91.616647][ C0] ? __pfx_ret_from_fork+0x10/0x10
[ 91.621800][ C0] ? __switch_to+0xc89/0x1420
[ 91.626557][ C0] ? __pfx_kthread+0x10/0x10
[ 91.631298][ C0] ret_from_fork_asm+0x1a/0x30
[ 91.636141][ C0]
[ 91.639336][ C0] Kernel Offset: disabled
[ 91.643682][ C0] Rebooting in 86400 seconds..