syzkaller login: [ 47.228797][ C0] clocksource: Watchdog remote CPU 1 read timed out Warning: Permanently added '[localhost]:4031' (ED25519) to the list of known hosts. 2026/06/09 16:14:31 parsed 1 programs [ 53.982536][ T5627] cgroup: Unknown subsys name 'net' [ 54.112773][ T5627] cgroup: Unknown subsys name 'cpuset' [ 54.118882][ T5627] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 55.474459][ T5627] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 57.357226][ T5637] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 58.240548][ T5684] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 58.244157][ T5684] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 58.248292][ T5684] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 58.262709][ T5684] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 58.265985][ T5684] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.851747][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.863491][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.922971][ T1115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.927987][ T1115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.982765][ T5687] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.986917][ T5687] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.992332][ T5687] bridge_slave_0: entered allmulticast mode [ 59.005268][ T5687] bridge_slave_0: entered promiscuous mode [ 59.012085][ T5687] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.014915][ T5687] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.017503][ T5687] bridge_slave_1: entered allmulticast mode [ 59.021400][ T5687] bridge_slave_1: entered promiscuous mode [ 59.041126][ T5687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.045733][ T5687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.065782][ T5687] team0: Port device team_slave_0 added [ 59.070104][ T5687] team0: Port device team_slave_1 added [ 59.087148][ T5687] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.089787][ T5687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.098476][ T5687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.104116][ T5687] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.106905][ T5687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.115852][ T5687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.151180][ T5687] hsr_slave_0: entered promiscuous mode [ 59.153494][ T5687] hsr_slave_1: entered promiscuous mode [ 59.434303][ T5687] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.443050][ T5687] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 59.446966][ T5687] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.451997][ T5687] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 59.454814][ T5687] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.460345][ T5687] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 59.463021][ T5687] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.467046][ T5687] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 59.524297][ T5687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.537088][ T5687] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.544358][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.547128][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.555897][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.558847][ T1115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.825712][ T5687] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.868197][ T5687] veth0_vlan: entered promiscuous mode [ 59.880545][ T5687] veth1_vlan: entered promiscuous mode [ 59.906531][ T5687] veth0_macvtap: entered promiscuous mode [ 59.912163][ T5687] veth1_macvtap: entered promiscuous mode [ 59.924329][ T5687] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.932064][ T5687] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.951333][ T5483] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.958430][ T5483] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.963562][ T5483] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.970310][ T5483] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/06/09 16:14:39 executed programs: 0 [ 60.075723][ T5684] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.081752][ T5684] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.084783][ T5684] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.090426][ T5684] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.094226][ T5684] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.142730][ T5008] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 60.146525][ T5008] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 60.152508][ T5008] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 60.155223][ T5008] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 60.158313][ T5008] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 60.162707][ T5755] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 60.172723][ T5755] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 60.176065][ T5758] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 60.179230][ T5758] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 60.184376][ T5758] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 60.359832][ T5717] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.434987][ T5717] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.724059][ T5749] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.726458][ T5749] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.728912][ T5749] bridge_slave_0: entered allmulticast mode [ 60.731499][ T5749] bridge_slave_0: entered promiscuous mode [ 60.741986][ T5751] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.744280][ T5751] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.746613][ T5751] bridge_slave_0: entered allmulticast mode [ 60.750417][ T5751] bridge_slave_0: entered promiscuous mode [ 60.764988][ T5749] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.767301][ T5749] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.769740][ T5749] bridge_slave_1: entered allmulticast mode [ 60.772333][ T5749] bridge_slave_1: entered promiscuous mode [ 60.780994][ T5751] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.783335][ T5751] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.785568][ T5751] bridge_slave_1: entered allmulticast mode [ 60.788126][ T5751] bridge_slave_1: entered promiscuous mode [ 60.824280][ T5751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.833058][ T5749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.837946][ T5749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.842369][ T5751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.901307][ T5749] team0: Port device team_slave_0 added [ 60.905695][ T5751] team0: Port device team_slave_0 added [ 60.907437][ T5752] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.909991][ T5752] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.912327][ T5752] bridge_slave_0: entered allmulticast mode [ 60.914836][ T5752] bridge_slave_0: entered promiscuous mode [ 60.917889][ T5752] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.920352][ T5752] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.922808][ T5752] bridge_slave_1: entered allmulticast mode [ 60.925362][ T5752] bridge_slave_1: entered promiscuous mode [ 60.929681][ T5749] team0: Port device team_slave_1 added [ 60.943379][ T5751] team0: Port device team_slave_1 added [ 60.976348][ T5749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.981095][ T5749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.990527][ T5749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.995831][ T5749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.997996][ T5749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.006089][ T5749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.019069][ T5752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.024682][ T5752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.032361][ T5751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.034559][ T5751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.042928][ T5751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.047803][ T5751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.050358][ T5751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.061341][ T5751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.087526][ T5752] team0: Port device team_slave_0 added [ 61.099506][ T5752] team0: Port device team_slave_1 added [ 61.137997][ T5751] hsr_slave_0: entered promiscuous mode [ 61.141420][ T5751] hsr_slave_1: entered promiscuous mode [ 61.144679][ T5751] debugfs: 'hsr0' already exists in 'hsr' [ 61.147121][ T5751] Cannot create hsr debugfs directory [ 61.154025][ T5749] hsr_slave_0: entered promiscuous mode [ 61.156270][ T5749] hsr_slave_1: entered promiscuous mode [ 61.158342][ T5749] debugfs: 'hsr0' already exists in 'hsr' [ 61.160371][ T5749] Cannot create hsr debugfs directory [ 61.172271][ T5752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.174977][ T5752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.183702][ T5752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.188949][ T5752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.191435][ T5752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.200511][ T5752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.304076][ T5752] hsr_slave_0: entered promiscuous mode [ 61.307054][ T5752] hsr_slave_1: entered promiscuous mode [ 61.310488][ T5752] debugfs: 'hsr0' already exists in 'hsr' [ 61.312796][ T5752] Cannot create hsr debugfs directory [ 61.511715][ T5717] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.564200][ T5749] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.572530][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 61.576753][ T5749] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.582994][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 61.586755][ T5749] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.593927][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 61.605923][ T5749] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.613661][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 61.650265][ T5752] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.655564][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 61.663850][ T5752] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 61.671286][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 61.674634][ T5752] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 61.679272][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 61.684913][ T5752] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 61.691753][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 61.789906][ T5749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.806035][ T5752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.819954][ T5749] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.829866][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.832425][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.842094][ T5752] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.847183][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.849990][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.858017][ T1114] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.861015][ T1114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.877507][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.880450][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.108910][ T5752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.134824][ T5749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.152178][ T5752] veth0_vlan: entered promiscuous mode [ 62.165294][ T5752] veth1_vlan: entered promiscuous mode [ 62.179639][ T54] Bluetooth: hci0: command tx timeout [ 62.185874][ T5749] veth0_vlan: entered promiscuous mode [ 62.193781][ T5749] veth1_vlan: entered promiscuous mode [ 62.212290][ T5752] veth0_macvtap: entered promiscuous mode [ 62.219771][ T5752] veth1_macvtap: entered promiscuous mode [ 62.233968][ T5749] veth0_macvtap: entered promiscuous mode [ 62.240160][ T5749] veth1_macvtap: entered promiscuous mode [ 62.244448][ T5752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.255979][ T5752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.260087][ T5684] Bluetooth: hci1: command tx timeout [ 62.262650][ T54] Bluetooth: hci2: command tx timeout [ 62.266819][ T5749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.276032][ T5749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.278602][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.283155][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.290245][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.296873][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.300517][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.309971][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.313719][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.316689][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.394348][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.399647][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.421562][ T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.424792][ T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.466163][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.476892][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.506655][ T5839] BUG: sleeping function called from invalid context at ./include/linux/sched/mm.h:323 [ 62.510802][ T5839] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5839, name: syz.1.18 [ 62.512910][ T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.513680][ T5839] preempt_count: 201, expected: 0 [ 62.516987][ T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.518237][ T5839] RCU nest depth: 0, expected: 0 [ 62.518247][ T5839] 2 locks held by syz.1.18/5839: [ 62.524376][ T5839] #0: ffffffff9a952da0 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0xa71/0x12c0 [ 62.527879][ T5839] #1: ffff888168150028 (&t->gc_lock){+...}-{3:3}, at: hash_ipmark4_resize+0x13f/0x1ae0 [ 62.531733][ T5839] Preemption disabled at: [ 62.531742][ T5839] [<0000000000000000>] 0x0 [ 62.535027][ T5839] CPU: 1 UID: 0 PID: 5839 Comm: syz.1.18 Not tainted syzkaller #0 PREEMPT(full) [ 62.535038][ T5839] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 62.535042][ T5839] Call Trace: [ 62.535046][ T5839] [ 62.535050][ T5839] dump_stack_lvl+0xe8/0x150 [ 62.535062][ T5839] __might_resched+0x378/0x4d0 [ 62.535092][ T5839] __kvmalloc_node_noprof+0x164/0x8a0 [ 62.535107][ T5839] ? hash_ipmark4_resize+0x26f/0x1ae0 [ 62.535118][ T5839] hash_ipmark4_resize+0x26f/0x1ae0 [ 62.535139][ T5839] call_ad+0x562/0xb60 [ 62.535158][ T5839] ? __pfx_call_ad+0x10/0x10 [ 62.535169][ T5839] ? ip_set_pernet+0x23/0x240 [ 62.535188][ T5839] ? __nla_parse+0x40/0x60 [ 62.535205][ T5839] ip_set_ad+0x824/0x9d0 [ 62.535223][ T5839] ? __pfx_ip_set_ad+0x10/0x10 [ 62.535256][ T5839] nfnetlink_rcv_msg+0xc03/0x12c0 [ 62.535265][ T5839] ? unwind_get_return_address+0x4d/0x90 [ 62.535274][ T5839] ? nfnetlink_rcv_msg+0x22a/0x12c0 [ 62.535287][ T5839] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 62.535309][ T5839] netlink_rcv_skb+0x232/0x4b0 [ 62.535318][ T5839] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 62.535326][ T5839] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 62.535338][ T5839] ? bpf_lsm_capable+0x9/0x20 [ 62.535345][ T5839] ? security_capable+0x7e/0x2c0 [ 62.535358][ T5839] nfnetlink_rcv+0x2c0/0x27b0 [ 62.535368][ T5839] ? __local_bh_enable_ip+0xd0/0x130 [ 62.535376][ T5839] ? lockdep_hardirqs_on+0x7a/0x110 [ 62.535384][ T5839] ? __dev_queue_xmit+0x2b6/0x3950 [ 62.535393][ T5839] ? __local_bh_enable_ip+0xd0/0x130 [ 62.535399][ T5839] ? __dev_queue_xmit+0x2b6/0x3950 [ 62.535407][ T5839] ? __dev_queue_xmit+0x1fe5/0x3950 [ 62.535415][ T5839] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 62.535426][ T5839] ? __dev_queue_xmit+0x2b6/0x3950 [ 62.535436][ T5839] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 62.535445][ T5839] ? __pfx___dev_queue_xmit+0x10/0x10 [ 62.535456][ T5839] ? ref_tracker_free+0x693/0x840 [ 62.535465][ T5839] ? __pfx_ref_tracker_free+0x10/0x10 [ 62.535472][ T5839] ? __asan_memcpy+0x40/0x70 [ 62.535481][ T5839] ? __skb_clone+0x63/0x7a0 [ 62.535491][ T5839] ? __skb_clone+0x483/0x7a0 [ 62.535501][ T5839] ? skb_clone+0x246/0x3a0 [ 62.535510][ T5839] ? __netlink_deliver_tap+0x807/0x850 [ 62.535518][ T5839] ? netlink_deliver_tap+0x2e/0x1b0 [ 62.535528][ T5839] ? netlink_deliver_tap+0x2e/0x1b0 [ 62.535536][ T5839] ? netlink_deliver_tap+0x2e/0x1b0 [ 62.535545][ T5839] netlink_unicast+0x75c/0x8e0 [ 62.535556][ T5839] netlink_sendmsg+0x813/0xb40 [ 62.535568][ T5839] ? __pfx_netlink_sendmsg+0x10/0x10 [ 62.535611][ T5839] ? aa_sock_msg_perm+0xf1/0x1b0 [ 62.535629][ T5839] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 62.535640][ T5839] ____sys_sendmsg+0x972/0x9f0 [ 62.535648][ T5839] ? __might_fault+0xaf/0x130 [ 62.535660][ T5839] ? __pfx_____sys_sendmsg+0x10/0x10 [ 62.535671][ T5839] ? import_iovec+0x73/0xa0 [ 62.535680][ T5839] ___sys_sendmsg+0x2a5/0x360 [ 62.535688][ T5839] ? __lock_acquire+0x6b5/0x2cf0 [ 62.535698][ T5839] ? __pfx____sys_sendmsg+0x10/0x10 [ 62.535708][ T5839] ? futex_wake+0x4ac/0x580 [ 62.535726][ T5839] ? __fget_files+0x2a/0x420 [ 62.535735][ T5839] ? __fget_files+0x3a0/0x420 [ 62.535746][ T5839] __x64_sys_sendmsg+0x1bd/0x2a0 [ 62.535756][ T5839] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 62.535767][ T5839] ? rcu_is_watching+0x15/0xb0 [ 62.535779][ T5839] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.535787][ T5839] do_syscall_64+0x174/0x580 [ 62.535795][ T5839] ? trace_irq_disable+0x3b/0x140 [ 62.535807][ T5839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.535814][ T5839] RIP: 0033:0x7f37dad9ce59 [ 62.535822][ T5839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.535828][ T5839] RSP: 002b:00007f37dbd30028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 62.535837][ T5839] RAX: ffffffffffffffda RBX: 00007f37db015fa0 RCX: 00007f37dad9ce59 [ 62.535842][ T5839] RDX: 00000000040c0080 RSI: 00002000000002c0 RDI: 0000000000000004 [ 62.535847][ T5839] RBP: 00007f37dae32d6f R08: 0000000000000000 R09: 0000000000000000 [ 62.535851][ T5839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.535855][ T5839] R13: 00007f37db016038 R14: 00007f37db015fa0 R15: 00007fff6c4f3458 [ 62.535866][ T5839] [ 62.716277][ T5839] INFO: trying to register non-static key. [ 62.718105][ T5839] The code is fine but needs lockdep annotation, or maybe [ 62.720298][ T5839] you didn't initialize this object before use? [ 62.722127][ T5839] turning off the locking correctness validator. [ 62.723997][ T5839] CPU: 1 UID: 0 PID: 5839 Comm: syz.1.18 Tainted: G W syzkaller #0 PREEMPT(full) [ 62.724008][ T5839] Tainted: [W]=WARN [ 62.724010][ T5839] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 62.724015][ T5839] Call Trace: [ 62.724020][ T5839] [ 62.724023][ T5839] dump_stack_lvl+0xe8/0x150 [ 62.724035][ T5839] assign_lock_key+0x133/0x150 [ 62.724045][ T5839] register_lock_class+0xcc/0x2e0 [ 62.724052][ T5839] ? __kfree_rcu_sheaf+0x1f/0x5d0 [ 62.724063][ T5839] __lock_acquire+0xad/0x2cf0 [ 62.724070][ T5839] ? do_raw_spin_lock+0x12b/0x2f0 [ 62.724081][ T5839] ? hash_ipmark4_add+0x89/0x20e0 [ 62.724089][ T5839] ? __local_bh_enable_ip+0xd0/0x130 [ 62.724096][ T5839] ? lockdep_hardirqs_on+0x7a/0x110 [ 62.724104][ T5839] ? hash_ipmark4_add+0x89/0x20e0 [ 62.724112][ T5839] ? hash_ipmark4_resize+0x13f/0x1ae0 [ 62.724119][ T5839] lock_acquire+0x106/0x350 [ 62.724125][ T5839] ? hash_ipmark4_resize+0x13f/0x1ae0 [ 62.724134][ T5839] ? hash_ipmark4_resize+0x13f/0x1ae0 [ 62.724142][ T5839] _raw_spin_lock_bh+0x36/0x50 [ 62.724148][ T5839] ? hash_ipmark4_resize+0x13f/0x1ae0 [ 62.724155][ T5839] hash_ipmark4_resize+0x13f/0x1ae0 [ 62.724164][ T5839] ? __pfx_hash_ipmark4_add+0x10/0x10 [ 62.724174][ T5839] call_ad+0x463/0xb60 [ 62.724182][ T5839] ? __pfx_call_ad+0x10/0x10 [ 62.724189][ T5839] ? ip_set_pernet+0x23/0x240 [ 62.724196][ T5839] ? __nla_parse+0x40/0x60 [ 62.724206][ T5839] ip_set_ad+0x824/0x9d0 [ 62.724214][ T5839] ? __pfx_ip_set_ad+0x10/0x10 [ 62.724226][ T5839] nfnetlink_rcv_msg+0xc03/0x12c0 [ 62.724233][ T5839] ? unwind_get_return_address+0x4d/0x90 [ 62.724242][ T5839] ? nfnetlink_rcv_msg+0x22a/0x12c0 [ 62.724251][ T5839] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 62.724264][ T5839] netlink_rcv_skb+0x232/0x4b0 [ 62.724272][ T5839] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 62.724279][ T5839] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 62.724287][ T5839] ? bpf_lsm_capable+0x9/0x20 [ 62.724294][ T5839] ? security_capable+0x7e/0x2c0 [ 62.724305][ T5839] nfnetlink_rcv+0x2c0/0x27b0 [ 62.724313][ T5839] ? __local_bh_enable_ip+0xd0/0x130 [ 62.724320][ T5839] ? lockdep_hardirqs_on+0x7a/0x110 [ 62.724327][ T5839] ? __dev_queue_xmit+0x2b6/0x3950 [ 62.724335][ T5839] ? __local_bh_enable_ip+0xd0/0x130 [ 62.724341][ T5839] ? __dev_queue_xmit+0x2b6/0x3950 [ 62.724349][ T5839] ? __dev_queue_xmit+0x1fe5/0x3950 [ 62.724357][ T5839] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 62.724366][ T5839] ? __dev_queue_xmit+0x2b6/0x3950 [ 62.724374][ T5839] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 62.724381][ T5839] ? __pfx___dev_queue_xmit+0x10/0x10 [ 62.724391][ T5839] ? ref_tracker_free+0x693/0x840 [ 62.724398][ T5839] ? __pfx_ref_tracker_free+0x10/0x10 [ 62.724405][ T5839] ? __asan_memcpy+0x40/0x70 [ 62.724414][ T5839] ? __skb_clone+0x63/0x7a0 [ 62.724422][ T5839] ? __skb_clone+0x483/0x7a0 [ 62.724430][ T5839] ? skb_clone+0x246/0x3a0 [ 62.724438][ T5839] ? __netlink_deliver_tap+0x807/0x850 [ 62.724446][ T5839] ? netlink_deliver_tap+0x2e/0x1b0 [ 62.724454][ T5839] ? netlink_deliver_tap+0x2e/0x1b0 [ 62.724461][ T5839] ? netlink_deliver_tap+0x2e/0x1b0 [ 62.724469][ T5839] netlink_unicast+0x75c/0x8e0 [ 62.724477][ T5839] netlink_sendmsg+0x813/0xb40 [ 62.724486][ T5839] ? __pfx_netlink_sendmsg+0x10/0x10 [ 62.724495][ T5839] ? aa_sock_msg_perm+0xf1/0x1b0 [ 62.724505][ T5839] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 62.724515][ T5839] ____sys_sendmsg+0x972/0x9f0 [ 62.724522][ T5839] ? __might_fault+0xaf/0x130 [ 62.724532][ T5839] ? __pfx_____sys_sendmsg+0x10/0x10 [ 62.724540][ T5839] ? import_iovec+0x73/0xa0 [ 62.724549][ T5839] ___sys_sendmsg+0x2a5/0x360 [ 62.724556][ T5839] ? __lock_acquire+0x6b5/0x2cf0 [ 62.724564][ T5839] ? __pfx____sys_sendmsg+0x10/0x10 [ 62.724590][ T5839] ? futex_wake+0x4ac/0x580 [ 62.724610][ T5839] ? __fget_files+0x2a/0x420 [ 62.724618][ T5839] ? __fget_files+0x3a0/0x420 [ 62.724627][ T5839] __x64_sys_sendmsg+0x1bd/0x2a0 [ 62.724635][ T5839] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 62.724644][ T5839] ? rcu_is_watching+0x15/0xb0 [ 62.724653][ T5839] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.724660][ T5839] do_syscall_64+0x174/0x580 [ 62.724667][ T5839] ? trace_irq_disable+0x3b/0x140 [ 62.724678][ T5839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.724685][ T5839] RIP: 0033:0x7f37dad9ce59 [ 62.724693][ T5839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.724698][ T5839] RSP: 002b:00007f37dbd30028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 62.724707][ T5839] RAX: ffffffffffffffda RBX: 00007f37db015fa0 RCX: 00007f37dad9ce59 [ 62.724712][ T5839] RDX: 00000000040c0080 RSI: 00002000000002c0 RDI: 0000000000000004 [ 62.724717][ T5839] RBP: 00007f37dae32d6f R08: 0000000000000000 R09: 0000000000000000 [ 62.724721][ T5839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.724725][ T5839] R13: 00007f37db016038 R14: 00007f37db015fa0 R15: 00007fff6c4f3458 [ 62.724732][ T5839] [ 62.909330][ T5717] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.091502][ T5717] bridge_slave_1: left allmulticast mode [ 63.093465][ T5717] bridge_slave_1: left promiscuous mode [ 63.095747][ T5717] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.100331][ T5717] bridge_slave_0: left allmulticast mode [ 63.102076][ T5717] bridge_slave_0: left promiscuous mode [ 63.104044][ T5717] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.153125][ T5717] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.157313][ T5717] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.164714][ T5717] bond0 (unregistering): Released all slaves [ 63.265610][ T5362] 8021q: adding VLAN 0 to HW filter on device eth1 [ 63.436014][ T5362] 8021q: adding VLAN 0 to HW filter on device eth2 [ 63.561355][ T5717] hsr_slave_0: left promiscuous mode [ 63.564841][ T5717] hsr_slave_1: left promiscuous mode [ 63.568094][ T5717] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.570752][ T5717] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.574934][ T5717] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.577399][ T5717] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.586926][ T5717] veth1_macvtap: left promiscuous mode [ 63.588125][ T5842] BUG: sleeping function called from invalid context at ./include/linux/sched/mm.h:323 [ 63.588849][ T5717] veth0_macvtap: left promiscuous mode [ 63.592184][ T5842] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5842, name: syz.0.17 [ 63.594240][ T5717] veth1_vlan: left promiscuous mode [ 63.596760][ T5842] preempt_count: 201, expected: 0 [ 63.596767][ T5842] RCU nest depth: 0, expected: 0 [ 63.596771][ T5842] INFO: lockdep is turned off. [ 63.596774][ T5842] Preemption disabled at: [ 63.596776][ T5842] [<0000000000000000>] 0x0 [ 63.596791][ T5842] CPU: 0 UID: 0 PID: 5842 Comm: syz.0.17 Tainted: G W syzkaller #0 PREEMPT(full) [ 63.596801][ T5842] Tainted: [W]=WARN [ 63.596804][ T5842] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 63.596809][ T5842] Call Trace: [ 63.596813][ T5842] [ 63.596816][ T5842] dump_stack_lvl+0xe8/0x150 [ 63.596827][ T5842] __might_resched+0x378/0x4d0 [ 63.596838][ T5842] __kvmalloc_node_noprof+0x164/0x8a0 [ 63.596849][ T5842] ? hash_ipmark4_resize+0x26f/0x1ae0 [ 63.596858][ T5842] ? hash_ipmark4_add+0x89/0x20e0 [ 63.596866][ T5842] hash_ipmark4_resize+0x26f/0x1ae0 [ 63.596878][ T5842] call_ad+0x463/0xb60 [ 63.596886][ T5842] ? __pfx_call_ad+0x10/0x10 [ 63.596893][ T5842] ? rcu_is_watching+0x15/0xb0 [ 63.596902][ T5842] ? ip_set_pernet+0x23/0x240 [ 63.596909][ T5842] ? __nla_parse+0x40/0x60 [ 63.596919][ T5842] ip_set_ad+0x824/0x9d0 [ 63.596927][ T5842] ? __pfx_ip_set_ad+0x10/0x10 [ 63.596937][ T5842] ? rcu_is_watching+0x15/0xb0 [ 63.596945][ T5842] ? lock_release+0x4b/0x3c0 [ 63.596952][ T5842] ? __nla_parse+0x40/0x60 [ 63.596961][ T5842] nfnetlink_rcv_msg+0xc03/0x12c0 [ 63.596968][ T5842] ? unwind_get_return_address+0x4d/0x90 [ 63.596977][ T5842] ? nfnetlink_rcv_msg+0x22a/0x12c0 [ 63.596986][ T5842] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 63.596998][ T5842] netlink_rcv_skb+0x232/0x4b0 [ 63.597006][ T5842] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 63.597013][ T5842] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 63.597021][ T5842] ? bpf_lsm_capable+0x9/0x20 [ 63.597029][ T5842] ? security_capable+0x7e/0x2c0 [ 63.597039][ T5842] nfnetlink_rcv+0x2c0/0x27b0 [ 63.597046][ T5842] ? rcu_is_watching+0x15/0xb0 [ 63.597054][ T5842] ? __dev_queue_xmit+0x2b6/0x3950 [ 63.597063][ T5842] ? trace_irq_enable+0x3b/0x140 [ 63.597073][ T5842] ? __dev_queue_xmit+0x2b6/0x3950 [ 63.597081][ T5842] ? __dev_queue_xmit+0x2b6/0x3950 [ 63.597089][ T5842] ? __local_bh_enable_ip+0xd0/0x130 [ 63.597095][ T5842] ? __dev_queue_xmit+0x2b6/0x3950 [ 63.597103][ T5842] ? __dev_queue_xmit+0x1fe5/0x3950 [ 63.597111][ T5842] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 63.597119][ T5842] ? __dev_queue_xmit+0x2b6/0x3950 [ 63.597128][ T5842] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 63.597135][ T5842] ? __pfx___dev_queue_xmit+0x10/0x10 [ 63.597144][ T5842] ? ref_tracker_free+0x693/0x840 [ 63.597152][ T5842] ? __pfx_ref_tracker_free+0x10/0x10 [ 63.597159][ T5842] ? __asan_memcpy+0x40/0x70 [ 63.597167][ T5842] ? __skb_clone+0x63/0x7a0 [ 63.597175][ T5842] ? __skb_clone+0x483/0x7a0 [ 63.597183][ T5842] ? skb_clone+0x246/0x3a0 [ 63.597191][ T5842] ? __netlink_deliver_tap+0x807/0x850 [ 63.597199][ T5842] ? netlink_deliver_tap+0x2e/0x1b0 [ 63.597206][ T5842] ? rcu_is_watching+0x15/0xb0 [ 63.597213][ T5842] ? netlink_deliver_tap+0x2e/0x1b0 [ 63.597221][ T5842] ? lock_release+0x4b/0x3c0 [ 63.597227][ T5842] ? netlink_deliver_tap+0x2e/0x1b0 [ 63.597235][ T5842] netlink_unicast+0x75c/0x8e0 [ 63.597244][ T5842] netlink_sendmsg+0x813/0xb40 [ 63.597253][ T5842] ? __pfx_netlink_sendmsg+0x10/0x10 [ 63.597261][ T5842] ? aa_sock_msg_perm+0xf1/0x1b0 [ 63.597272][ T5842] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 63.597281][ T5842] ____sys_sendmsg+0x972/0x9f0 [ 63.597290][ T5842] ? __pfx_____sys_sendmsg+0x10/0x10 [ 63.597298][ T5842] ? import_iovec+0x73/0xa0 [ 63.597307][ T5842] ___sys_sendmsg+0x2a5/0x360 [ 63.597314][ T5842] ? try_to_wake_up+0x828/0x1380 [ 63.597324][ T5842] ? __pfx____sys_sendmsg+0x10/0x10 [ 63.597333][ T5842] ? futex_wake+0x4ac/0x580 [ 63.597345][ T5842] ? __fget_files+0x2a/0x420 [ 63.597353][ T5842] ? __fget_files+0x3a0/0x420 [ 63.597362][ T5842] __x64_sys_sendmsg+0x1bd/0x2a0 [ 63.597370][ T5842] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 63.597379][ T5842] ? rcu_is_watching+0x15/0xb0 [ 63.597387][ T5842] ? rcu_is_watching+0x15/0xb0 [ 63.597395][ T5842] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.597407][ T5842] do_syscall_64+0x174/0x580 [ 63.597415][ T5842] ? trace_irq_disable+0x3b/0x140 [ 63.597426][ T5842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.597433][ T5842] RIP: 0033:0x7f5d7859ce59 [ 63.597440][ T5842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.597446][ T5842] RSP: 002b:00007f5d79445028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 63.597454][ T5842] RAX: ffffffffffffffda RBX: 00007f5d78816090 RCX: 00007f5d7859ce59 [ 63.597459][ T5842] RDX: 00000000040c0080 RSI: 00002000000002c0 RDI: 0000000000000004 [ 63.597464][ T5842] RBP: 00007f5d78632d6f R08: 0000000000000000 R09: 0000000000000000 [ 63.597468][ T5842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.597472][ T5842] R13: 00007f5d78816128 R14: 00007f5d78816090 R15: 00007fff28684158 [ 63.597479][ T5842] [ 63.777446][ T5717] veth0_vlan: left promiscuous mode [ 63.974473][ T5717] team0 (unregistering): Port device team_slave_1 removed [ 63.980081][ T5717] team0 (unregistering): Port device team_slave_0 removed [ 64.056830][ T5751] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.060899][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 64.063801][ T5751] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.068080][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 64.084850][ T5751] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.091744][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 64.094340][ T5751] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.099198][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 64.162970][ T5751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.169145][ T5751] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.173114][ T1114] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.175563][ T1114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.188776][ T5751] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.191840][ T5751] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.210129][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.212340][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.258833][ T54] Bluetooth: hci0: command tx timeout [ 64.314848][ T5751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.344273][ T54] Bluetooth: hci2: command tx timeout [ 64.346483][ T54] Bluetooth: hci1: command tx timeout [ 64.370022][ T5751] veth0_vlan: entered promiscuous mode [ 64.376093][ T5751] veth1_vlan: entered promiscuous mode [ 64.395350][ T5751] veth0_macvtap: entered promiscuous mode [ 64.400324][ T5751] veth1_macvtap: entered promiscuous mode [ 64.409648][ T5751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.414109][ T5751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.431178][ T5801] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.434013][ T5801] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.437471][ T5839] Set syz1 is full, maxelem 65536 reached [ 64.438279][ T5801] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.454181][ T5801] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.460802][ T5751] ieee80211 phy9: Selected rate control algorithm 'minstrel_ht' [ 64.471682][ T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.474159][ T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.480026][ T5751] ieee80211 phy10: Selected rate control algorithm 'minstrel_ht' [ 64.490891][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.493615][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.521444][ T5842] Set syz1 is full, maxelem 65536 reached [ 64.608767][ T5886] BUG: sleeping function called from invalid context at ./include/linux/sched/mm.h:323 [ 64.611687][ T5886] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5886, name: syz.2.19 [ 64.614309][ T5886] preempt_count: 201, expected: 0 [ 64.615832][ T5886] RCU nest depth: 0, expected: 0 [ 64.617306][ T5886] INFO: lockdep is turned off. [ 64.618849][ T5886] Preemption disabled at: [ 64.618854][ T5886] [<0000000000000000>] 0x0 [ 64.621445][ T5886] CPU: 0 UID: 0 PID: 5886 Comm: syz.2.19 Tainted: G W syzkaller #0 PREEMPT(full) [ 64.621456][ T5886] Tainted: [W]=WARN [ 64.621458][ T5886] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 64.621463][ T5886] Call Trace: [ 64.621466][ T5886] [ 64.621469][ T5886] dump_stack_lvl+0xe8/0x150 [ 64.621480][ T5886] __might_resched+0x378/0x4d0 [ 64.621490][ T5886] __kvmalloc_node_noprof+0x164/0x8a0 [ 64.621508][ T5886] ? hash_ipmark4_resize+0x26f/0x1ae0 [ 64.621517][ T5886] ? hash_ipmark4_add+0x89/0x20e0 [ 64.621525][ T5886] hash_ipmark4_resize+0x26f/0x1ae0 [ 64.621537][ T5886] call_ad+0x463/0xb60 [ 64.621546][ T5886] ? __pfx_call_ad+0x10/0x10 [ 64.621553][ T5886] ? rcu_is_watching+0x15/0xb0 [ 64.621562][ T5886] ? ip_set_pernet+0x23/0x240 [ 64.621588][ T5886] ? __nla_parse+0x40/0x60 [ 64.621599][ T5886] ip_set_ad+0x824/0x9d0 [ 64.621607][ T5886] ? __pfx_ip_set_ad+0x10/0x10 [ 64.621614][ T5886] ? unwind_next_frame+0xa6/0x2550 [ 64.621625][ T5886] ? rcu_is_watching+0x15/0xb0 [ 64.621633][ T5886] ? lock_release+0x4b/0x3c0 [ 64.621640][ T5886] ? __nla_parse+0x40/0x60 [ 64.621649][ T5886] nfnetlink_rcv_msg+0xc03/0x12c0 [ 64.621656][ T5886] ? unwind_get_return_address+0x4d/0x90 [ 64.621664][ T5886] ? nfnetlink_rcv_msg+0x22a/0x12c0 [ 64.621673][ T5886] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 64.621686][ T5886] netlink_rcv_skb+0x232/0x4b0 [ 64.621694][ T5886] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 64.621701][ T5886] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 64.621710][ T5886] ? bpf_lsm_capable+0x9/0x20 [ 64.621717][ T5886] ? security_capable+0x7e/0x2c0 [ 64.621728][ T5886] nfnetlink_rcv+0x2c0/0x27b0 [ 64.621735][ T5886] ? rcu_is_watching+0x15/0xb0 [ 64.621743][ T5886] ? __dev_queue_xmit+0x2b6/0x3950 [ 64.621751][ T5886] ? trace_irq_enable+0x3b/0x140 [ 64.621762][ T5886] ? __dev_queue_xmit+0x2b6/0x3950 [ 64.621775][ T5886] ? __dev_queue_xmit+0x2b6/0x3950 [ 64.621783][ T5886] ? __local_bh_enable_ip+0xd0/0x130 [ 64.621789][ T5886] ? __dev_queue_xmit+0x2b6/0x3950 [ 64.621797][ T5886] ? __dev_queue_xmit+0x1fe5/0x3950 [ 64.621805][ T5886] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 64.621814][ T5886] ? __dev_queue_xmit+0x2b6/0x3950 [ 64.621823][ T5886] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 64.621830][ T5886] ? __pfx___dev_queue_xmit+0x10/0x10 [ 64.621839][ T5886] ? ref_tracker_free+0x693/0x840 [ 64.621847][ T5886] ? __pfx_ref_tracker_free+0x10/0x10 [ 64.621854][ T5886] ? __asan_memcpy+0x40/0x70 [ 64.621863][ T5886] ? __skb_clone+0x63/0x7a0 [ 64.621871][ T5886] ? __skb_clone+0x483/0x7a0 [ 64.621879][ T5886] ? skb_clone+0x246/0x3a0 [ 64.621887][ T5886] ? __netlink_deliver_tap+0x807/0x850 [ 64.621894][ T5886] ? netlink_deliver_tap+0x2e/0x1b0 [ 64.621902][ T5886] ? rcu_is_watching+0x15/0xb0 [ 64.621909][ T5886] ? netlink_deliver_tap+0x2e/0x1b0 [ 64.621916][ T5886] ? lock_release+0x4b/0x3c0 [ 64.621923][ T5886] ? netlink_deliver_tap+0x2e/0x1b0 [ 64.621931][ T5886] netlink_unicast+0x75c/0x8e0 [ 64.621939][ T5886] netlink_sendmsg+0x813/0xb40 [ 64.621948][ T5886] ? __pfx_netlink_sendmsg+0x10/0x10 [ 64.621956][ T5886] ? futex_unqueue+0x22/0x240 [ 64.621963][ T5886] ? aa_sock_msg_perm+0xf1/0x1b0 [ 64.621973][ T5886] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 64.621983][ T5886] ____sys_sendmsg+0x972/0x9f0 [ 64.621991][ T5886] ? __pfx_____sys_sendmsg+0x10/0x10 [ 64.622000][ T5886] ? import_iovec+0x73/0xa0 [ 64.622009][ T5886] ___sys_sendmsg+0x2a5/0x360 [ 64.622017][ T5886] ? lock_release+0x4b/0x3c0 [ 64.622023][ T5886] ? __pfx_get_futex_key+0x10/0x10 [ 64.622030][ T5886] ? __pfx____sys_sendmsg+0x10/0x10 [ 64.622038][ T5886] ? futex_wait+0x2a2/0x390 [ 64.622050][ T5886] ? __fget_files+0x2a/0x420 [ 64.622058][ T5886] ? __fget_files+0x3a0/0x420 [ 64.622067][ T5886] __x64_sys_sendmsg+0x1bd/0x2a0 [ 64.622075][ T5886] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 64.622084][ T5886] ? rcu_is_watching+0x15/0xb0 [ 64.622092][ T5886] ? rcu_is_watching+0x15/0xb0 [ 64.622100][ T5886] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.622107][ T5886] do_syscall_64+0x174/0x580 [ 64.622115][ T5886] ? trace_irq_disable+0x3b/0x140 [ 64.622125][ T5886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.622132][ T5886] RIP: 0033:0x7ff5a819ce59 [ 64.622139][ T5886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.622145][ T5886] RSP: 002b:00007ff5a9048028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 64.622153][ T5886] RAX: ffffffffffffffda RBX: 00007ff5a8415fa0 RCX: 00007ff5a819ce59 [ 64.622159][ T5886] RDX: 00000000040c0080 RSI: 00002000000002c0 RDI: 0000000000000004 [ 64.622163][ T5886] RBP: 00007ff5a8232d6f R08: 0000000000000000 R09: 0000000000000000 [ 64.622167][ T5886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.622171][ T5886] R13: 00007ff5a8416038 R14: 00007ff5a8415fa0 R15: 00007ffcbd3057f8 [ 64.622178][ T5886] 2026/06/09 16:14:44 executed programs: 14 [ 65.304635][ T5886] Set syz1 is full, maxelem 65536 reached [ 66.338773][ T5684] Bluetooth: hci0: command tx timeout [ 66.419279][ T5684] Bluetooth: hci1: command tx timeout [ 66.420993][ T54] Bluetooth: hci2: command tx timeout [ 68.418625][ T5684] Bluetooth: hci0: command tx timeout [ 68.498775][ T54] Bluetooth: hci2: command tx timeout [ 68.500800][ T5684] Bluetooth: hci1: command tx timeout 2026/06/09 16:14:49 executed programs: 717