last executing test programs: 1.440056873s ago: executing program 3 (id=4): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') openat$sysfs(0xffffffffffffff9c, &(0x7f0000008100)='/sys/kernel/oops_count', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0xce, &(0x7f0000000080)=0x9, 0x4) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @remote}, 0x1c) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000000)={0x82, 0x17, 0x2, 0x401, 0x0, 0x9, 0x0}) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040)) getdents64(r0, &(0x7f0000000500)=""/166, 0xa6) 32.14163ms ago: executing program 3 (id=6): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, 0x0) truncate(&(0x7f0000000140)='./file0\x00', 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) ppoll(&(0x7f0000000000)=[{r1, 0x2030}], 0x1, 0x0, 0x0, 0x0) pipe(0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ppoll(&(0x7f0000000280)=[{r2, 0x6200}], 0x1, 0x0, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) sendfile(r3, r3, 0x0, 0x4ba9) cachestat(r3, &(0x7f0000000000)={0xa, 0x4000000}, &(0x7f0000000040), 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r4, 0x3) accept4$bt_l2cap(r4, &(0x7f0000000200), 0x0, 0x80800) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) 0s ago: executing program 1 (id=2): syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.18' (ED25519) to the list of known hosts. [ 86.950237][ T1230] cfg80211: failed to load regulatory.db [ 87.722926][ T5788] cgroup: Unknown subsys name 'net' [ 87.974448][ T5788] cgroup: Unknown subsys name 'cpuset' [ 88.029320][ T5788] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 90.046899][ T5788] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 93.086235][ T5811] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.090669][ T5811] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 93.096396][ T5811] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.098058][ T5811] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.100002][ T5811] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.100926][ T5811] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.102493][ T5811] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 93.103304][ T5811] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.104786][ T5811] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.104921][ T5806] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.106194][ T5811] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 93.107247][ T5811] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.112496][ T5802] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.113337][ T5802] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.114918][ T5802] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.117265][ T5802] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.131192][ T5807] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.140185][ T5802] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.142594][ T5802] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.144004][ T5802] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.145329][ T5802] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.147041][ T5802] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.149056][ T5807] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.172291][ T5119] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.175945][ T5815] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 94.233332][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 94.253811][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 94.430450][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 94.548533][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 94.554704][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 95.170134][ T61] Bluetooth: hci4: command tx timeout [ 95.248776][ T61] Bluetooth: hci0: command tx timeout [ 95.249000][ T61] Bluetooth: hci1: command tx timeout [ 95.249026][ T5119] Bluetooth: hci3: command tx timeout [ 95.259682][ T61] Bluetooth: hci2: command tx timeout [ 95.263121][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.263274][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.263955][ T5799] bridge_slave_0: entered allmulticast mode [ 95.268121][ T5799] bridge_slave_0: entered promiscuous mode [ 95.317296][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.317453][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.317578][ T5800] bridge_slave_0: entered allmulticast mode [ 95.321745][ T5800] bridge_slave_0: entered promiscuous mode [ 95.325365][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.325521][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.325697][ T5799] bridge_slave_1: entered allmulticast mode [ 95.328444][ T5799] bridge_slave_1: entered promiscuous mode [ 95.443245][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.443371][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.443501][ T5800] bridge_slave_1: entered allmulticast mode [ 95.445205][ T5800] bridge_slave_1: entered promiscuous mode [ 95.859929][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.860082][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.860271][ T5798] bridge_slave_0: entered allmulticast mode [ 95.862371][ T5798] bridge_slave_0: entered promiscuous mode [ 96.133566][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.133882][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.134028][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.134214][ T5798] bridge_slave_1: entered allmulticast mode [ 96.136313][ T5798] bridge_slave_1: entered promiscuous mode [ 96.137368][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.137448][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.137766][ T5809] bridge_slave_0: entered allmulticast mode [ 96.141172][ T5809] bridge_slave_0: entered promiscuous mode [ 96.145169][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.145303][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.145849][ T5812] bridge_slave_0: entered allmulticast mode [ 96.150040][ T5812] bridge_slave_0: entered promiscuous mode [ 96.157530][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.162693][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.249713][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.249895][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.250036][ T5809] bridge_slave_1: entered allmulticast mode [ 96.251773][ T5809] bridge_slave_1: entered promiscuous mode [ 96.252943][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.253061][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.253170][ T5812] bridge_slave_1: entered allmulticast mode [ 96.254884][ T5812] bridge_slave_1: entered promiscuous mode [ 96.258507][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.894196][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.152077][ T5799] team0: Port device team_slave_0 added [ 97.157876][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.167077][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.186215][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.188440][ T5800] team0: Port device team_slave_0 added [ 97.194601][ T5799] team0: Port device team_slave_1 added [ 97.248771][ T61] Bluetooth: hci4: command tx timeout [ 97.272438][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.274885][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.276591][ T5800] team0: Port device team_slave_1 added [ 97.328746][ T61] Bluetooth: hci2: command tx timeout [ 97.328786][ T61] Bluetooth: hci3: command tx timeout [ 97.328805][ T5119] Bluetooth: hci1: command tx timeout [ 97.328816][ T61] Bluetooth: hci0: command tx timeout [ 97.921864][ T5798] team0: Port device team_slave_0 added [ 98.141136][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.141150][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.141167][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.144887][ T5798] team0: Port device team_slave_1 added [ 98.146769][ T5809] team0: Port device team_slave_0 added [ 98.150762][ T5812] team0: Port device team_slave_0 added [ 98.154526][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.154540][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.154573][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.157011][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.157024][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.157047][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.291794][ T5809] team0: Port device team_slave_1 added [ 98.296303][ T5812] team0: Port device team_slave_1 added [ 98.297884][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.297897][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.297922][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.530153][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.530166][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.530183][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.697072][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.697092][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.697121][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.708841][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.708858][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.708885][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.721375][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.721392][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.721417][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.834850][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.834867][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.834884][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.835878][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.835889][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.835912][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.177431][ T5799] hsr_slave_0: entered promiscuous mode [ 99.178746][ T5799] hsr_slave_1: entered promiscuous mode [ 99.195291][ T5800] hsr_slave_0: entered promiscuous mode [ 99.196219][ T5800] hsr_slave_1: entered promiscuous mode [ 99.197023][ T5800] debugfs: 'hsr0' already exists in 'hsr' [ 99.197101][ T5800] Cannot create hsr debugfs directory [ 99.329101][ T5807] Bluetooth: hci4: command tx timeout [ 99.408950][ T5119] Bluetooth: hci1: command tx timeout [ 99.408989][ T5119] Bluetooth: hci3: command tx timeout [ 99.409013][ T5119] Bluetooth: hci2: command tx timeout [ 99.409031][ T5807] Bluetooth: hci0: command tx timeout [ 99.585652][ T5798] hsr_slave_0: entered promiscuous mode [ 99.586598][ T5798] hsr_slave_1: entered promiscuous mode [ 99.587327][ T5798] debugfs: 'hsr0' already exists in 'hsr' [ 99.587347][ T5798] Cannot create hsr debugfs directory [ 99.826208][ T5809] hsr_slave_0: entered promiscuous mode [ 99.827163][ T5809] hsr_slave_1: entered promiscuous mode [ 99.827880][ T5809] debugfs: 'hsr0' already exists in 'hsr' [ 99.827902][ T5809] Cannot create hsr debugfs directory [ 99.840766][ T5812] hsr_slave_0: entered promiscuous mode [ 99.842296][ T5812] hsr_slave_1: entered promiscuous mode [ 99.843333][ T5812] debugfs: 'hsr0' already exists in 'hsr' [ 99.843357][ T5812] Cannot create hsr debugfs directory [ 101.409410][ T5119] Bluetooth: hci4: command tx timeout [ 101.489541][ T5119] Bluetooth: hci2: command tx timeout [ 101.489590][ T5119] Bluetooth: hci0: command tx timeout [ 101.489615][ T5119] Bluetooth: hci3: command tx timeout [ 101.489638][ T5119] Bluetooth: hci1: command tx timeout [ 101.554798][ T5799] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 101.600211][ T5799] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 101.634446][ T5799] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 101.688235][ T5799] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 101.789331][ T5800] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 101.835510][ T5800] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 101.865401][ T5800] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 101.897685][ T5800] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 102.035624][ T5798] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 102.078728][ T5798] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 102.125703][ T5798] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 102.181532][ T5798] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 102.339845][ T5812] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 102.391971][ T5812] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 102.425070][ T5812] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 102.471576][ T5812] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 102.553072][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.623686][ T5809] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.674444][ T5809] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.710963][ T5809] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.750091][ T5809] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.790562][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.830681][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.830999][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.865658][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.891430][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.891881][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.984183][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.025780][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.027871][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.028435][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.084324][ T1395] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.084484][ T1395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.149977][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.195085][ T1395] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.195328][ T1395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.224753][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.256612][ T1395] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.256863][ T1395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.355111][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.412208][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.412483][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.425160][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.503257][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.503453][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.577515][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.631618][ T3519] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.631843][ T3519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.693116][ T3519] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.694153][ T3519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.740907][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.916262][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.110918][ T5799] veth0_vlan: entered promiscuous mode [ 104.211120][ T5799] veth1_vlan: entered promiscuous mode [ 104.284834][ T5800] veth0_vlan: entered promiscuous mode [ 104.301371][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.359171][ T5800] veth1_vlan: entered promiscuous mode [ 104.426616][ T5799] veth0_macvtap: entered promiscuous mode [ 104.451974][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.454480][ T5799] veth1_macvtap: entered promiscuous mode [ 104.582823][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.591758][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.640359][ T5798] veth0_vlan: entered promiscuous mode [ 104.645905][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.646905][ T5800] veth0_macvtap: entered promiscuous mode [ 104.707023][ T5800] veth1_macvtap: entered promiscuous mode [ 104.724439][ T1395] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.741735][ T1395] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.744092][ T5798] veth1_vlan: entered promiscuous mode [ 104.748238][ T1395] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.787637][ T1395] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.935402][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.021729][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.080789][ T44] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.121829][ T44] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.140522][ T5809] veth0_vlan: entered promiscuous mode [ 105.141392][ T44] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.147531][ T44] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.164773][ T3519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.164795][ T3519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.170312][ T5798] veth0_macvtap: entered promiscuous mode [ 105.256801][ T5798] veth1_macvtap: entered promiscuous mode [ 105.274627][ T5809] veth1_vlan: entered promiscuous mode [ 105.393572][ T5812] veth0_vlan: entered promiscuous mode [ 105.408973][ T3519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.408997][ T3519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.494665][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.525880][ T5812] veth1_vlan: entered promiscuous mode [ 105.545089][ T3519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.545112][ T3519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.560052][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.638047][ T58] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.661690][ T58] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.676251][ T3519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.676273][ T3519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.693982][ T58] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.707457][ T58] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.715351][ T5809] veth0_macvtap: entered promiscuous mode [ 105.985182][ T5809] veth1_macvtap: entered promiscuous mode [ 107.182243][ T5812] veth0_macvtap: entered promiscuous mode [ 107.256379][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.269288][ T5812] veth1_macvtap: entered promiscuous mode [ 107.382218][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.414064][ T3893] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.414087][ T3893] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.463829][ T3893] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.480651][ T3893] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.484724][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.507982][ T3893] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.509344][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 107.542567][ T3893] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.550429][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.552303][ T1395] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.552325][ T1395] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.668802][ T31] usb 2-1: device descriptor read/64, error -71 [ 107.677101][ T61] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 107.677131][ T61] CPU: 1 UID: 0 PID: 61 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 107.677158][ T61] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 107.677173][ T61] Workqueue: hci0 hci_rx_work [ 107.677203][ T61] Call Trace: [ 107.677212][ T61] [ 107.677227][ T61] dump_stack_lvl+0x189/0x250 [ 107.677272][ T61] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.677307][ T61] ? __pfx__printk+0x10/0x10 [ 107.677344][ T61] ? kernfs_path_from_node+0x2c/0x280 [ 107.677369][ T61] ? kernfs_path_from_node+0x243/0x280 [ 107.677391][ T61] ? kernfs_path_from_node+0x2c/0x280 [ 107.677420][ T61] sysfs_create_dir_ns+0x259/0x280 [ 107.677443][ T61] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 107.677472][ T61] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 107.677500][ T61] ? rt_spin_unlock+0x161/0x200 [ 107.677530][ T61] kobject_add_internal+0x5a5/0xb50 [ 107.677573][ T61] kobject_add+0x155/0x220 [ 107.677617][ T61] ? __pfx_kobject_add+0x10/0x10 [ 107.677662][ T61] ? get_device_parent+0x370/0x3a0 [ 107.677698][ T61] device_add+0x408/0xb50 [ 107.677734][ T61] hci_conn_add_sysfs+0xd5/0x1e0 [ 107.677762][ T61] le_conn_complete_evt+0xf39/0x1500 [ 107.677810][ T61] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 107.677844][ T61] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 107.677878][ T61] ? lockdep_hardirqs_on+0x9c/0x150 [ 107.677916][ T61] ? skb_pull_data+0xfb/0x200 [ 107.677954][ T61] hci_le_conn_complete_evt+0x187/0x450 [ 107.677994][ T61] hci_event_packet+0x78f/0x1200 [ 107.678024][ T61] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 107.678058][ T61] ? __pfx_hci_event_packet+0x10/0x10 [ 107.678096][ T61] ? hci_send_to_monitor+0xe2/0x570 [ 107.678134][ T61] hci_rx_work+0x46a/0xe80 [ 107.678170][ T61] ? process_scheduled_works+0x9ef/0x17b0 [ 107.678202][ T61] process_scheduled_works+0xae1/0x17b0 [ 107.678267][ T61] ? __pfx_process_scheduled_works+0x10/0x10 [ 107.678318][ T61] worker_thread+0x8a0/0xda0 [ 107.678381][ T61] kthread+0x711/0x8a0 [ 107.678420][ T61] ? __pfx_worker_thread+0x10/0x10 [ 107.678449][ T61] ? __pfx_kthread+0x10/0x10 [ 107.678479][ T61] ? rt_spin_unlock+0x150/0x200 [ 107.678511][ T61] ? rt_spin_unlock+0x161/0x200 [ 107.678533][ T61] ? __pfx_kthread+0x10/0x10 [ 107.678572][ T61] ret_from_fork+0x4bc/0x870 [ 107.678600][ T61] ? __pfx_ret_from_fork+0x10/0x10 [ 107.678637][ T61] ? __switch_to_asm+0x39/0x70 [ 107.678659][ T61] ? __switch_to_asm+0x33/0x70 [ 107.678679][ T61] ? __pfx_kthread+0x10/0x10 [ 107.678715][ T61] ret_from_fork_asm+0x1a/0x30 [ 107.678761][ T61] [ 107.679695][ T61] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 107.679737][ T61] Bluetooth: hci0: failed to register connection device [ 107.713791][ T44] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.789256][ T44] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.896264][ T68] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.903484][ T68] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.912256][ T31] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 108.034984][ T5893] ------------[ cut here ]------------ [ 108.034999][ T5893] kernel BUG at net/ipv6/route.c:1473! [ 108.035025][ T5893] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 108.035050][ T5893] CPU: 0 UID: 0 PID: 5893 Comm: kworker/0:7 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 108.035075][ T5893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 108.035089][ T5893] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 108.035119][ T5893] RIP: 0010:ip6_pol_route+0x117d/0x1180 [ 108.035155][ T5893] Code: ab f8 e9 f4 fa ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fb ff ff 48 89 df e8 5e 13 ab f8 e9 f6 fa ff ff e8 e4 5a 49 f8 90 <0f> 0b 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e [ 108.035173][ T5893] RSP: 0018:ffffc9000523f3c0 EFLAGS: 00010293 [ 108.035191][ T5893] RAX: ffffffff8975653c RBX: ffff888126df9000 RCX: ffff88802e06bc00 [ 108.035207][ T5893] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 108.035219][ T5893] RBP: ffffc9000523f4d0 R08: ffffe8ffffc7baf7 R09: 1ffffd1ffff8f75e [ 108.035235][ T5893] R10: dffffc0000000000 R11: fffff91ffff8f75f R12: ffff888010be7000 [ 108.035251][ T5893] R13: ffffffff89755522 R14: dffffc0000000000 R15: 0000607ed8e82af0 [ 108.035268][ T5893] FS: 0000000000000000(0000) GS:ffff888126df9000(0000) knlGS:0000000000000000 [ 108.035286][ T5893] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 108.035301][ T5893] CR2: 00007f5865898f98 CR3: 0000000027dfc000 CR4: 00000000003526f0 [ 108.035322][ T5893] Call Trace: [ 108.035329][ T5893] [ 108.035338][ T5893] ? ip6_pol_route+0x162/0x1180 [ 108.035372][ T5893] ? __pfx_ip6_pol_route+0x10/0x10 [ 108.035410][ T5893] fib6_rule_lookup+0x1fc/0x6f0 [ 108.035433][ T5893] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 108.035453][ T5893] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 108.035476][ T5893] ? ip6_route_output_flags+0x2e/0x5d0 [ 108.035502][ T5893] ip6_route_output_flags+0x364/0x5d0 [ 108.035523][ T5893] ? ip6_route_output_flags+0x2e/0x5d0 [ 108.035545][ T5893] ip6_dst_lookup_tail+0x299/0x1510 [ 108.035571][ T5893] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 108.035595][ T5893] ? __ipv6_chk_addr_and_flags+0x187/0x7f0 [ 108.035626][ T5893] ? __ipv6_chk_addr_and_flags+0x68f/0x7f0 [ 108.035652][ T5893] ? __ipv6_chk_addr_and_flags+0x187/0x7f0 [ 108.035684][ T5893] ip6_dst_lookup_flow+0x47/0xe0 [ 108.035708][ T5893] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 108.035731][ T5893] send6+0x4ce/0x8d0 [ 108.035753][ T5893] ? rt_read_lock+0x203/0x490 [ 108.035777][ T5893] ? send6+0x220/0x8d0 [ 108.035810][ T5893] ? __pfx_send6+0x10/0x10 [ 108.035833][ T5893] ? rcu_is_watching+0x15/0xb0 [ 108.035860][ T5893] ? wg_socket_send_skb_to_peer+0x59/0x200 [ 108.035885][ T5893] wg_socket_send_skb_to_peer+0x128/0x200 [ 108.035913][ T5893] wg_packet_tx_worker+0x1c8/0x7c0 [ 108.035937][ T5893] ? _raw_spin_unlock_irq+0x23/0x50 [ 108.035967][ T5893] ? process_scheduled_works+0x9ef/0x17b0 [ 108.035994][ T5893] process_scheduled_works+0xae1/0x17b0 [ 108.036031][ T5893] ? __pfx_process_scheduled_works+0x10/0x10 [ 108.036064][ T5893] worker_thread+0x8a0/0xda0 [ 108.036092][ T5893] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 108.036126][ T5893] ? __kthread_parkme+0x7b/0x200 [ 108.036157][ T5893] kthread+0x711/0x8a0 [ 108.036189][ T5893] ? __pfx_worker_thread+0x10/0x10 [ 108.036215][ T5893] ? __pfx_kthread+0x10/0x10 [ 108.036244][ T5893] ? rt_spin_unlock+0x150/0x200 [ 108.036269][ T5893] ? rt_spin_unlock+0x161/0x200 [ 108.036292][ T5893] ? __pfx_kthread+0x10/0x10 [ 108.036322][ T5893] ret_from_fork+0x4bc/0x870 [ 108.036349][ T5893] ? __pfx_ret_from_fork+0x10/0x10 [ 108.036376][ T5893] ? __switch_to_asm+0x39/0x70 [ 108.036397][ T5893] ? __switch_to_asm+0x33/0x70 [ 108.036418][ T5893] ? __pfx_kthread+0x10/0x10 [ 108.036448][ T5893] ret_from_fork_asm+0x1a/0x30 [ 108.036477][ T5893] [ 108.036485][ T5893] Modules linked in: [ 108.036499][ T5893] ---[ end trace 0000000000000000 ]--- [ 108.036509][ T5893] RIP: 0010:ip6_pol_route+0x117d/0x1180 [ 108.036543][ T5893] Code: ab f8 e9 f4 fa ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fb ff ff 48 89 df e8 5e 13 ab f8 e9 f6 fa ff ff e8 e4 5a 49 f8 90 <0f> 0b 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e [ 108.036559][ T5893] RSP: 0018:ffffc9000523f3c0 EFLAGS: 00010293 [ 108.036576][ T5893] RAX: ffffffff8975653c RBX: ffff888126df9000 RCX: ffff88802e06bc00 [ 108.036592][ T5893] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 108.036605][ T5893] RBP: ffffc9000523f4d0 R08: ffffe8ffffc7baf7 R09: 1ffffd1ffff8f75e [ 108.036621][ T5893] R10: dffffc0000000000 R11: fffff91ffff8f75f R12: ffff888010be7000 [ 108.036636][ T5893] R13: ffffffff89755522 R14: dffffc0000000000 R15: 0000607ed8e82af0 [ 108.036652][ T5893] FS: 0000000000000000(0000) GS:ffff888126df9000(0000) knlGS:0000000000000000 [ 108.036669][ T5893] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 108.036684][ T5893] CR2: 00007f5865898f98 CR3: 0000000027dfc000 CR4: 00000000003526f0 [ 108.036706][ T5893] Kernel panic - not syncing: Fatal exception in interrupt [ 108.037010][ T5893] Kernel Offset: disabled