last executing test programs: 25m43.705175138s ago: executing program 1 (id=564): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], 0x0, 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000380), &(0x7f0000000000), 0x80, r6, 0x0, 0x7}, 0x38) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000040)={0x24, r0, 0x62c21a4ade68aba1, 0x0, 0x2, {{0x32}, {@val={0x8, 0x1, 0x60}, @val={0x8, 0x3, r2}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x48d4}, 0x40010) 25m42.079595433s ago: executing program 1 (id=570): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet(0x2, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="020afc030700000028bd7000fedb800005001a00000000000000000000008000000000"], 0x38}}, 0x40408c0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 25m37.81442053s ago: executing program 1 (id=580): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000600)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x18f}}]}}) r1 = syz_open_procfs(0x0, &(0x7f0000001400)='mounts\x00') read$FUSE(r1, &(0x7f0000003ac0)={0x2020}, 0x2023) 25m37.468783679s ago: executing program 1 (id=582): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x4, 0xc4}, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r0, 0x4) 25m37.013851488s ago: executing program 1 (id=587): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf25040000"], 0x3c}, 0x1, 0x0, 0x0, 0x26040041}, 0x40) 25m35.765413217s ago: executing program 1 (id=590): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet(0x2, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="020afc030700000028bd7000fedb800005001a00000000000000000000008000000000"], 0x38}}, 0x40408c0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 25m19.127202831s ago: executing program 32 (id=590): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet(0x2, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="020afc030700000028bd7000fedb800005001a00000000000000000000008000000000"], 0x38}}, 0x40408c0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 25m17.564246087s ago: executing program 4 (id=661): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000740)=0xffffffffffffffff) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000480)=""/53, 0x0, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000c40)={0x1, 0x0, [{0xdddd1000, 0xb3, &(0x7f0000000540)=""/179}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, 0x0, 0x0, 0x0, 0x10000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) 25m16.918884953s ago: executing program 4 (id=664): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc3400000000001090224000100007f0009040000"], 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r0, 0x0, 0x0, 0x8, 0x0) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000"], 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 25m16.062707835s ago: executing program 3 (id=671): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8], 0x3c}}, 0x10) 25m14.377303584s ago: executing program 3 (id=674): r0 = inotify_init1(0x800) fanotify_init(0x4, 0x40000) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x541b, 0xfffffffffffffffa) 25m14.17740428s ago: executing program 3 (id=676): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) r1 = socket$inet6(0xa, 0x5, 0x0) listen(r1, 0x50) syz_emit_ethernet(0x4f, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6c2d01000019840100000000000000000002000000010102fe8000000000000000000000000000aaa5ba94e385673ccfd3fe184ab0643975bcc85fbf438632261b"], 0x0) 25m13.944185264s ago: executing program 3 (id=678): syz_emit_ethernet(0x3f, &(0x7f0000000080)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x31, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x1d, 0x0, @wg=@data={0x4, 0x1, 0x6, "9f810f8f43"}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x7, 0x8}}}}}, 0x0) 25m13.71651466s ago: executing program 3 (id=681): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x4}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 25m13.286185846s ago: executing program 3 (id=685): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x4, 0xfffffffc, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x375, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r5, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 25m13.241857102s ago: executing program 4 (id=686): connect$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) 25m12.914069368s ago: executing program 4 (id=690): syz_emit_ethernet(0x3f, &(0x7f0000000080)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x31, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x1d, 0x0, @wg=@data={0x4, 0x1, 0x6, "9f810f8f43"}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x7, 0x8}}}}}, 0x0) 25m12.504921249s ago: executing program 4 (id=693): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x240008c4) 25m12.052893961s ago: executing program 4 (id=697): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 24m57.854282074s ago: executing program 33 (id=685): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x4, 0xfffffffc, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x375, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r5, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 24m56.867050607s ago: executing program 34 (id=697): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 7m49.71799278s ago: executing program 5 (id=6062): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="2309fefffffffcffffff010000000500070000000000080009"], 0x3c}}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000700001000000000000000000070000", @ANYRES32=r2, @ANYBLOB="0c000280"], 0x24}}, 0x0) 7m48.496911305s ago: executing program 5 (id=6067): r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)={0x28, r0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x881}, 0x20000090) 7m48.000610912s ago: executing program 5 (id=6071): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x28, r4, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b0000000800", @ANYRES32=r2, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050"], 0x3c}}, 0x10) 7m39.837231716s ago: executing program 5 (id=6088): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={0x154, r2, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_FRAME={0x12f, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @initial, {0xf, 0x5}}, 0xffffffffffffffff, @default, 0x1000, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0x2c}, @void, @val={0x6, 0x2, 0x1fc}, @val={0x5, 0xbe, {0x5, 0x97, 0x5, "e92d8c458adf49e46a30734780cde5e7b336119ecd6049603e0ed6a7a7f78d07433b3aff409b745affbc14077530151e5a4b5edadb9a2ada9ca23b0c8f6f5090381d615438cf774c2fde45d6e124316dd99a8683c4cfe0042e1947c36b79a67700000000000000094d6305d376b4ff84a51ab87345eaf309b31f39ace612dde9c9b9c2fdd28228617d741b708fcccc201b6878d347779bcefe7c68961710a95a4a0decc54d2331cd79711c1b8d52a9825b2f0263210dcfc7e8f1b5"}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x2, 0xb7b, 0x0, 0x347, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x1}}, @void, @val={0x71, 0x7, {0x69, 0x0, 0x1, 0xffffffffffffffff, 0x1, 0x7, 0x20}}, @val={0x76, 0x6, {0x3, 0x0, 0x2f, 0x6}}, [{0xdd, 0x6, "d603975e745c"}]}}]}, 0x154}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 7m38.334133007s ago: executing program 5 (id=6092): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 7m37.672457446s ago: executing program 5 (id=6096): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x5) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3a, &(0x7f0000000200)=0xfffffff9, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000, &(0x7f0000000440)={0x2, 0x4e21, @local}, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, 0x0, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000085000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42003, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDSIGACCEPT(r4, 0x800455c9, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0) 7m21.140270078s ago: executing program 35 (id=6096): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x5) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3a, &(0x7f0000000200)=0xfffffff9, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000, &(0x7f0000000440)={0x2, 0x4e21, @local}, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, 0x0, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000085000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42003, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDSIGACCEPT(r4, 0x800455c9, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0) 6m31.673987977s ago: executing program 7 (id=6212): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000004000018007000600666f00000800080000000000060001000200000008000500000000000c00070000"], 0x54}}, 0x24008800) 6m28.286910516s ago: executing program 7 (id=6216): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x84, @private, 0x0, 0x1, 'sh\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x48f, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x200000001, 'ovf\x00'}, 0x2c) 6m26.98211986s ago: executing program 6 (id=6220): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000021c0)='lo\x00', 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0x1, 0x0, @empty}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000200000000"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4000}, 0x48) 6m26.386386823s ago: executing program 7 (id=6221): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xffff}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_ACT={0x4}, @TCA_BPF_FD={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8d8}, 0x20004804) 6m25.629253147s ago: executing program 6 (id=6223): syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040ed7e54e"], 0x7) 6m24.965104823s ago: executing program 6 (id=6225): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x4000000) mbind(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x1ff, 0x3) r0 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 6m23.173977696s ago: executing program 7 (id=6227): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000005500e95f25bd7000fedbdf25070000", @ANYRES32=0x0, @ANYBLOB="20000100e4e15f94db"], 0x38}}, 0x4008000) 6m23.002809421s ago: executing program 6 (id=6228): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x42, 0x40, 0xc2, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000640), 0x1003, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, &(0x7f0000000080)="af", &(0x7f00000002c0)=""/244}, 0x20) 6m19.774391924s ago: executing program 6 (id=6229): sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000055c0)=[{{&(0x7f0000001640)={0xa, 0xf, 0xfffffc01, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0xe}, 0x1c, &(0x7f0000002880)=[{&(0x7f0000001780)="9c435a7de4c0ff7c4563", 0xffe3}], 0x2d}}], 0x1, 0x4001c00) 6m18.99776717s ago: executing program 7 (id=6231): r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x2, 0x2}, 0x10) write(r0, &(0x7f0000000300)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 6m18.484420291s ago: executing program 6 (id=6232): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) 6m4.792557184s ago: executing program 7 (id=6245): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 6m2.378195099s ago: executing program 36 (id=6232): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) 5m49.054256347s ago: executing program 37 (id=6245): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 13.90470719s ago: executing program 2 (id=6912): pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x141000) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f00000002c0)={0x38, 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) socket(0x40000000015, 0x5, 0x0) 9.47987674s ago: executing program 2 (id=6921): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0xfffffffffffffd8a, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0xce4, r3}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, r3, 0x0, 0x100000000000000}, 0x38) 8.344164528s ago: executing program 2 (id=6922): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r0, 0x80, 0x0) 8.001697427s ago: executing program 2 (id=6925): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}}, 0x0) 7.753864795s ago: executing program 8 (id=6926): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000200)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$watch_queue(&(0x7f0000000100), 0x80) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xc0202, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) 7.708867038s ago: executing program 2 (id=6927): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000200)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f00000001c0)=0x2, 0x4) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000140), 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x5a6c103}) timerfd_settime(r4, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xc0202, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) writev(r5, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) 6.221198762s ago: executing program 2 (id=6929): pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x141000) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f00000002c0)={0x38, 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) socket(0x40000000015, 0x5, 0x0) 3.854888376s ago: executing program 0 (id=6935): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}}, 0x0) 3.678354521s ago: executing program 9 (id=6246): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x42, 0x40, 0xc2, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000640), 0x1003, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, &(0x7f0000000080)="af", &(0x7f00000002c0)=""/244}, 0x20) 3.539311655s ago: executing program 0 (id=6936): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x238, 0x240, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x2f8, 0xffffffff, 0xffffffff, 0x2f8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xe8, 0x0, {0x0, 0x1c8}, [@common=@inet=@hashlimit1={{0x58}, {'veth0_to_batadv\x00', {0x0, 0x0, 0x8, 0x0, 0x2, 0x5, 0x4023}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@remote, @rand_addr=0x64010101, 0xff, 0xffffff, 'veth0_vlan\x00', 'vcan0\x00', {}, {0xff}}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x3, 0x400, 0x7ff, 0x200, 'netbios-ns\x00', {0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x298) r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000100)=0xffff, 0x4) sendto$inet6(r0, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000000380)=[{{&(0x7f0000000640)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)=""/144}, {&(0x7f0000000200)=""/230}, {&(0x7f0000000300)=""/86, 0xfffffe94}, {&(0x7f00000003c0)=""/253}, {&(0x7f00000004c0)=""/208}]}, 0x3422a61a}], 0x4000000000003c9, 0x10102, 0x0) 3.328603484s ago: executing program 9 (id=6937): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000200)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f00000001c0)=0x2, 0x4) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000140), 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x5a6c103}) timerfd_settime(r3, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xc0202, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) writev(r4, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) 2.341809519s ago: executing program 0 (id=6938): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newtaction={0xf0, 0x30, 0x1, 0x2, 0x25dfdbfc, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x4, 0x8000446, {}, {0x7, 0x0, 0x0, 0x0, 0x3}, 0xfffffffd}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, 0x405}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8010}, 0x44830) 2.2710211s ago: executing program 8 (id=6939): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2002) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) mremap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f000000d000/0x2000)=nil) 2.250759057s ago: executing program 9 (id=6940): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000180)="27031c0016001400020000000000000006e1f0000000894f000f1102ee1680ca82973d2b", 0x24}, {&(0x7f0000000280)="7d3ed2ea1f2f23edbb324820e73b5f4b1100201a03df64a4853ed1b39e5d175223317057500c30ec0d61342b1c428df8", 0x30}], 0x2}, 0x24000008) 1.513279501s ago: executing program 8 (id=6941): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x8001, @empty, 0xffffff5d}, 0x1c) listen(r0, 0x50) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x100000b}, 0x1c) listen(r2, 0xb) listen(r1, 0x50) 1.319480093s ago: executing program 0 (id=6942): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x28, 0x70, 0x1, 0x0, 0x0, {}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0x4, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x34000}}}]}, 0x28}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r0, 0x0, 0x404c080) 807.396486ms ago: executing program 9 (id=6943): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0a000000030000000400000008"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 603.732255ms ago: executing program 8 (id=6944): ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @local}, {0x2, 0xffff, @private}, 0xd0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x9}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000024000100000000000000000000000000060003"], 0x1c}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000002f3144e8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020000002"], 0x80}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f00000000c0), 0x2c8, 0x0) 554.558845ms ago: executing program 0 (id=6945): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000080)=@ethtool_ringparam={0xd, 0x0, 0x2003fffe, 0x0, 0x4002, 0x0, 0x0, 0x100000}}) 468.928285ms ago: executing program 8 (id=6946): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x42, 0x40, 0xc2, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000640), 0x1003, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, &(0x7f0000000080)="af", &(0x7f00000002c0)=""/244}, 0x20) 269.297678ms ago: executing program 9 (id=6947): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtaction={0x18, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 164.876324ms ago: executing program 8 (id=6948): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000200)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$watch_queue(&(0x7f0000000100), 0x80) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xc0202, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) 164.608958ms ago: executing program 0 (id=6949): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000200)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f00000001c0)=0x2, 0x4) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000140), 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x5a6c103}) timerfd_settime(r3, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xc0202, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) writev(r4, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) 0s ago: executing program 9 (id=6950): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x693d3506}, [@jmp={0x5, 0x1, 0x8, 0x3, 0x8, 0x1, 0xfffffffffffffff0}]}, 0x0, 0x9d, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xada1, 0xffffffffffffffff, 0x0, &(0x7f0000000540)=[0xffffffffffffffff], 0x0, 0x10, 0xff}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xa, {"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", 0x5b6}}, 0x1006) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) close(0x3) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) recvmsg(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r4, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) sync() close_range(r3, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): ceived packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1455.063850][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1455.064266][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1455.064677][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1455.070207][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1455.070661][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1455.071078][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1455.071485][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1455.249068][T23877] bridge0: port 1(bridge_slave_0) entered blocking state [ 1455.250764][T23877] bridge0: port 1(bridge_slave_0) entered disabled state [ 1455.251032][T23877] bridge_slave_0: entered allmulticast mode [ 1455.277478][T23877] bridge_slave_0: entered promiscuous mode [ 1455.526420][T23721] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1455.610632][T23721] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1455.612139][T23721] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1455.614010][T23721] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1455.614824][T23721] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1457.757148][ T5266] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1457.972477][T23721] Bluetooth: hci4: command tx timeout [ 1460.038424][T23721] Bluetooth: hci4: command tx timeout [ 1460.073403][ C1] net_ratelimit: 15326 callbacks suppressed [ 1460.073427][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1460.073842][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1460.074271][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1460.074676][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1460.075092][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1460.080063][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1460.080482][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1460.081756][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1460.086807][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:93:ba:ba:7f:37, vlan:0) [ 1460.087230][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:93:ba:ba:7f:37, vlan:0) [ 1462.112579][T23721] Bluetooth: hci4: command tx timeout [ 1464.235986][T23721] Bluetooth: hci4: command tx timeout [ 1465.082624][ C1] net_ratelimit: 18117 callbacks suppressed [ 1465.082649][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1465.082664][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:93:ba:ba:7f:37, vlan:0) [ 1465.083039][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1465.083438][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1465.083851][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1465.084249][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1465.084607][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1465.084953][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1465.085292][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1465.085629][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1470.056037][T20150] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1470.092424][ C0] net_ratelimit: 18016 callbacks suppressed [ 1470.092445][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:93:ba:ba:7f:37, vlan:0) [ 1470.092803][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:93:ba:ba:7f:37, vlan:0) [ 1470.093138][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:93:ba:ba:7f:37, vlan:0) [ 1470.093475][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:93:ba:ba:7f:37, vlan:0) [ 1470.093894][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:93:ba:ba:7f:37, vlan:0) [ 1470.094289][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:93:ba:ba:7f:37, vlan:0) [ 1470.094701][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:93:ba:ba:7f:37, vlan:0) [ 1470.095176][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:93:ba:ba:7f:37, vlan:0) [ 1470.095658][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:93:ba:ba:7f:37, vlan:0) [ 1470.096073][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:93:ba:ba:7f:37, vlan:0) [ 1475.102424][ C0] net_ratelimit: 16941 callbacks suppressed [ 1475.102449][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:93:ba:ba:7f:37, vlan:0) [ 1475.102453][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1475.102884][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1475.103324][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1475.103780][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1475.104160][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:93:ba:ba:7f:37, vlan:0) [ 1475.104211][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1475.104636][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1475.105125][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1475.105553][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1478.853876][T20150] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1480.112544][ C0] net_ratelimit: 6612 callbacks suppressed [ 1480.112568][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:93:ba:ba:7f:37, vlan:0) [ 1480.112672][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1480.113140][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1480.113598][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1480.114088][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:93:ba:ba:7f:37, vlan:0) [ 1480.114396][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1480.114901][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1480.115358][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1480.115466][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:93:ba:ba:7f:37, vlan:0) [ 1480.115830][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1483.521593][T20150] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1484.679435][ T4921] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1484.725620][ T4921] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1484.727517][ T4921] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1484.732013][ T4921] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1484.732954][ T4921] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1485.122526][ C1] net_ratelimit: 9952 callbacks suppressed [ 1485.122551][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1485.122995][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1485.123410][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1485.124141][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:93:ba:ba:7f:37, vlan:0) [ 1485.127486][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:93:ba:ba:7f:37, vlan:0) [ 1485.130145][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1485.130579][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1485.131011][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1485.131421][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1485.131874][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1486.832575][T23721] Bluetooth: hci5: command tx timeout [ 1487.446221][T20150] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1488.912392][T23721] Bluetooth: hci5: command tx timeout [ 1490.082459][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1490.094111][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1490.132434][ C1] net_ratelimit: 10883 callbacks suppressed [ 1490.132460][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1490.132902][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1490.133331][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1490.133723][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1490.134133][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1490.134530][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1490.134948][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1490.135349][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1490.135768][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1490.136192][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1490.994385][T23721] Bluetooth: hci5: command tx timeout [ 1491.269704][T24164] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1491.601791][T24164] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1491.782473][T24164] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1491.785628][T24164] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1491.786526][T24164] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1493.072444][T23721] Bluetooth: hci5: command tx timeout [ 1494.273347][T23721] Bluetooth: hci0: command tx timeout [ 1495.142390][ C0] net_ratelimit: 10029 callbacks suppressed [ 1495.142415][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1495.142631][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1495.142887][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1495.143086][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1495.143490][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1495.143752][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:93:ba:ba:7f:37, vlan:0) [ 1495.143898][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1495.144297][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1495.144711][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1495.144713][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1496.366520][T23721] Bluetooth: hci0: command tx timeout [ 1498.442512][T23721] Bluetooth: hci0: command tx timeout [ 1498.547007][ T5266] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1500.152241][ C0] net_ratelimit: 9472 callbacks suppressed [ 1500.152263][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:93:ba:ba:7f:37, vlan:0) [ 1500.153284][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1500.153678][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1500.155734][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1500.156328][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1500.156735][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1500.157138][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1500.157533][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1500.157652][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:93:ba:ba:7f:37, vlan:0) [ 1500.157935][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1500.512553][T23721] Bluetooth: hci0: command tx timeout [ 1503.964840][T24164] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1504.035926][T24164] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1504.058652][T24164] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1504.064348][T24164] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1504.067501][T24164] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1505.162312][ C0] net_ratelimit: 8773 callbacks suppressed [ 1505.162336][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1505.162694][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1505.163654][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1505.163671][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:93:ba:ba:7f:37, vlan:0) [ 1505.164147][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1505.164557][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1505.164567][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1505.164970][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1505.164978][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1505.165396][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1505.832696][T20150] veth1_to_bridge: left allmulticast mode [ 1505.832737][T20150] veth1_to_bridge: left promiscuous mode [ 1505.833030][T20150] bridge0: port 3(veth1_to_bridge) entered disabled state [ 1505.930089][T20150] bridge_slave_1: left allmulticast mode [ 1505.930116][T20150] bridge_slave_1: left promiscuous mode [ 1505.930293][T20150] bridge0: port 2(bridge_slave_1) entered disabled state [ 1506.013399][T20150] bridge_slave_0: left allmulticast mode [ 1506.013428][T20150] bridge_slave_0: left promiscuous mode [ 1506.013684][T20150] bridge0: port 1(bridge_slave_0) entered disabled state [ 1506.153313][T20150] bridge_slave_1: left allmulticast mode [ 1506.153341][T20150] bridge_slave_1: left promiscuous mode [ 1506.153604][T20150] bridge0: port 2(bridge_slave_1) entered disabled state [ 1506.213553][T20150] bridge_slave_0: left allmulticast mode [ 1506.213580][T20150] bridge_slave_0: left promiscuous mode [ 1506.213758][T20150] bridge0: port 1(bridge_slave_0) entered disabled state [ 1506.532840][T20150] bridge_slave_1: left allmulticast mode [ 1506.532868][T20150] bridge_slave_1: left promiscuous mode [ 1506.533030][T20150] bridge0: port 2(bridge_slave_1) entered disabled state [ 1506.603452][T20150] bridge_slave_0: left allmulticast mode [ 1506.603479][T20150] bridge_slave_0: left promiscuous mode [ 1506.603654][T20150] bridge0: port 1(bridge_slave_0) entered disabled state [ 1506.672456][T23721] Bluetooth: hci2: command tx timeout [ 1506.763422][T20150] bridge_slave_1: left allmulticast mode [ 1506.763461][T20150] bridge_slave_1: left promiscuous mode [ 1506.763768][T20150] bridge0: port 2(bridge_slave_1) entered disabled state [ 1506.833567][T20150] bridge_slave_0: left allmulticast mode [ 1506.833595][T20150] bridge_slave_0: left promiscuous mode [ 1506.833767][T20150] bridge0: port 1(bridge_slave_0) entered disabled state [ 1507.802909][T20150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1507.824628][T20150] bond0 (unregistering): Released all slaves [ 1507.970278][T20150] bond0 (unregistering): Released all slaves [ 1508.129438][T20150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1508.203460][T20150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1508.264097][T20150] bond0 (unregistering): Released all slaves [ 1508.752332][T23721] Bluetooth: hci2: command tx timeout [ 1508.844031][T20150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1508.903205][T20150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1508.948729][T20150] bond0 (unregistering): Released all slaves [ 1509.562884][T20150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1509.588347][T20150] bond0 (unregistering): Released all slaves [ 1510.083104][T24270] netlink: 'syz.0.6316': attribute type 2 has an invalid length. [ 1510.842645][T23721] Bluetooth: hci2: command tx timeout [ 1510.977921][T24084] bridge0: port 1(bridge_slave_0) entered blocking state [ 1510.978144][T24084] bridge0: port 1(bridge_slave_0) entered disabled state [ 1510.978358][T24084] bridge_slave_0: entered allmulticast mode [ 1511.008876][T24084] bridge_slave_0: entered promiscuous mode [ 1511.081628][T24084] bridge0: port 2(bridge_slave_1) entered blocking state [ 1511.081778][T24084] bridge0: port 2(bridge_slave_1) entered disabled state [ 1511.082048][T24084] bridge_slave_1: entered allmulticast mode [ 1511.089207][T24084] bridge_slave_1: entered promiscuous mode [ 1511.379490][T20150] tipc: Left network mode [ 1511.577288][T24084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1511.672004][T24084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1512.130663][T24084] team0: Port device team_slave_0 added [ 1512.312809][T24084] team0: Port device team_slave_1 added [ 1512.685182][T20150] IPVS: stopping master sync thread 22922 ... [ 1512.718577][T24084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1512.718595][T24084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1512.718624][T24084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1512.921084][T23721] Bluetooth: hci2: command tx timeout [ 1512.984661][T24084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1512.984680][T24084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1512.984710][T24084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1513.947533][ T5266] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1514.667476][T24164] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1514.745824][T24164] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1514.747326][T24164] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1514.748573][T24164] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1514.757284][T24164] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1516.059195][T24342] ======================================================= [ 1516.059195][T24342] WARNING: The mand mount option has been deprecated and [ 1516.059195][T24342] and is ignored by this kernel. Remove the mand [ 1516.059195][T24342] option from the mount to silence this warning. [ 1516.059195][T24342] ======================================================= [ 1516.905909][T24158] bridge0: port 1(bridge_slave_0) entered blocking state [ 1516.906069][T24158] bridge0: port 1(bridge_slave_0) entered disabled state [ 1516.906413][T24158] bridge_slave_0: entered allmulticast mode [ 1516.939610][T24158] bridge_slave_0: entered promiscuous mode [ 1516.993189][T23721] Bluetooth: hci1: command tx timeout [ 1517.204766][T24158] bridge0: port 2(bridge_slave_1) entered blocking state [ 1517.206385][T24158] bridge0: port 2(bridge_slave_1) entered disabled state [ 1517.206678][T24158] bridge_slave_1: entered allmulticast mode [ 1517.258179][T24158] bridge_slave_1: entered promiscuous mode [ 1519.071841][T24187] bridge0: port 1(bridge_slave_0) entered blocking state [ 1519.072034][T24187] bridge0: port 1(bridge_slave_0) entered disabled state [ 1519.072622][T23721] Bluetooth: hci1: command tx timeout [ 1519.093575][T24187] bridge_slave_0: entered allmulticast mode [ 1519.099329][T24187] bridge_slave_0: entered promiscuous mode [ 1519.121178][T24371] netlink: 'syz.0.6337': attribute type 2 has an invalid length. [ 1519.225427][T24187] bridge0: port 2(bridge_slave_1) entered blocking state [ 1519.225580][T24187] bridge0: port 2(bridge_slave_1) entered disabled state [ 1519.225851][T24187] bridge_slave_1: entered allmulticast mode [ 1519.242039][T24187] bridge_slave_1: entered promiscuous mode [ 1519.336033][T24158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1519.448043][T24158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1519.809663][T24187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1520.479248][T24187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1520.828270][T24158] team0: Port device team_slave_0 added [ 1520.943013][T24158] team0: Port device team_slave_1 added [ 1521.002137][T24187] team0: Port device team_slave_0 added [ 1521.152525][T23721] Bluetooth: hci1: command tx timeout [ 1521.226718][T24187] team0: Port device team_slave_1 added [ 1521.274469][T24158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1521.274489][T24158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1521.274519][T24158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1521.381519][T24158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1521.381538][T24158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1521.381564][T24158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1521.675552][T24187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1521.675571][T24187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1521.675597][T24187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1521.761562][T24187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1521.761575][T24187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1521.761591][T24187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1522.095403][T24253] bridge0: port 1(bridge_slave_0) entered blocking state [ 1522.095767][T24253] bridge0: port 1(bridge_slave_0) entered disabled state [ 1522.095997][T24253] bridge_slave_0: entered allmulticast mode [ 1522.106896][T24253] bridge_slave_0: entered promiscuous mode [ 1522.324357][T24253] bridge0: port 2(bridge_slave_1) entered blocking state [ 1522.324526][T24253] bridge0: port 2(bridge_slave_1) entered disabled state [ 1522.325598][T24253] bridge_slave_1: entered allmulticast mode [ 1522.329129][T24253] bridge_slave_1: entered promiscuous mode [ 1522.373245][T24158] hsr_slave_0: entered promiscuous mode [ 1522.375121][T24158] hsr_slave_1: entered promiscuous mode [ 1522.541559][T24187] hsr_slave_0: entered promiscuous mode [ 1522.569656][T24187] hsr_slave_1: entered promiscuous mode [ 1522.580782][T24187] debugfs: 'hsr0' already exists in 'hsr' [ 1522.580812][T24187] Cannot create hsr debugfs directory [ 1522.658175][T24253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1522.856999][T20150] hsr_slave_0: left promiscuous mode [ 1522.892629][T20150] hsr_slave_1: left promiscuous mode [ 1522.893933][T20150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1522.893958][T20150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1522.955117][T20150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1522.955145][T20150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1523.232608][T24164] Bluetooth: hci1: command tx timeout [ 1523.303070][T20150] hsr_slave_0: left promiscuous mode [ 1523.342424][T20150] hsr_slave_1: left promiscuous mode [ 1523.343315][T20150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1523.343334][T20150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1523.409316][T20150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1523.446381][T20150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1524.786453][T20150] hsr_slave_0: left promiscuous mode [ 1525.562340][T20150] hsr_slave_1: left promiscuous mode [ 1525.565851][T20150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1525.586231][T20150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1525.675003][T20150] veth1_macvtap: left promiscuous mode [ 1525.675081][T20150] veth0_macvtap: left promiscuous mode [ 1525.675240][T20150] veth1_vlan: left promiscuous mode [ 1525.675339][T20150] veth0_vlan: left promiscuous mode [ 1525.752592][T20150] veth1_macvtap: left promiscuous mode [ 1525.752660][T20150] veth0_macvtap: left promiscuous mode [ 1525.752820][T20150] veth1_vlan: left promiscuous mode [ 1525.752926][T20150] veth0_vlan: left promiscuous mode [ 1526.622870][T20150] team0 (unregistering): Port device team_slave_1 removed [ 1526.663487][T20150] team0 (unregistering): Port device team_slave_0 removed [ 1526.878148][T20150] team0 (unregistering): Port device team_slave_1 removed [ 1526.917239][T20150] team0 (unregistering): Port device team_slave_0 removed [ 1527.465394][T20150] team0 (unregistering): Port device team_slave_1 removed [ 1527.494370][T20150] team0 (unregistering): Port device team_slave_0 removed [ 1528.202960][T20150] team0 (unregistering): Port device team_slave_1 removed [ 1528.242864][T20150] team0 (unregistering): Port device team_slave_0 removed [ 1528.524702][T24253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1528.808012][ T5266] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1528.941376][T24253] team0: Port device team_slave_0 added [ 1528.971585][T24253] team0: Port device team_slave_1 added [ 1529.176598][T24253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1529.176612][T24253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1529.176628][T24253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1529.265431][T24253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1529.265447][T24253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1529.265464][T24253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1529.964537][T24253] hsr_slave_0: entered promiscuous mode [ 1529.969422][T24253] hsr_slave_1: entered promiscuous mode [ 1529.975143][T24253] debugfs: 'hsr0' already exists in 'hsr' [ 1529.975170][T24253] Cannot create hsr debugfs directory [ 1531.799456][ T5266] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1532.248615][T24325] bridge0: port 1(bridge_slave_0) entered blocking state [ 1532.248753][T24325] bridge0: port 1(bridge_slave_0) entered disabled state [ 1532.248966][T24325] bridge_slave_0: entered allmulticast mode [ 1532.263546][T24325] bridge_slave_0: entered promiscuous mode [ 1532.277368][T24325] bridge0: port 2(bridge_slave_1) entered blocking state [ 1532.277493][T24325] bridge0: port 2(bridge_slave_1) entered disabled state [ 1532.277714][T24325] bridge_slave_1: entered allmulticast mode [ 1532.310034][T24325] bridge_slave_1: entered promiscuous mode [ 1532.518003][T24158] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1532.580821][T24158] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1532.975035][T24158] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1533.017158][T24158] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1533.029734][T24325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1533.067341][T24158] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1533.116070][T24158] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1533.119294][T24325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1533.119935][T24158] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1533.175686][T24158] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1533.847398][T24325] team0: Port device team_slave_0 added [ 1533.859476][T24492] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6364'. [ 1533.887169][T24325] team0: Port device team_slave_1 added [ 1534.021332][T24496] netlink: 'syz.0.6365': attribute type 3 has an invalid length. [ 1534.358345][T24325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1534.358374][T24325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1534.358402][T24325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1534.466276][T24325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1534.466295][T24325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1534.466322][T24325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1535.981685][T24325] hsr_slave_0: entered promiscuous mode [ 1535.985084][T24325] hsr_slave_1: entered promiscuous mode [ 1535.989952][T24325] debugfs: 'hsr0' already exists in 'hsr' [ 1535.989976][T24325] Cannot create hsr debugfs directory [ 1536.826749][ T5266] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1537.483063][T24158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1537.677932][T24158] 8021q: adding VLAN 0 to HW filter on device team0 [ 1537.698673][T20150] IPVS: stop unused estimator thread 0... [ 1537.711099][ T3031] bridge0: port 1(bridge_slave_0) entered blocking state [ 1537.711250][ T3031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1537.772460][ T2849] bridge0: port 2(bridge_slave_1) entered blocking state [ 1537.772682][ T2849] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1537.859383][T24253] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1537.938999][T24253] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1537.972278][T24253] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1538.073932][T24253] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1538.100360][T24253] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1538.194034][T24253] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1538.219585][T24253] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1538.330147][T24253] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1538.567973][ T5266] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1538.568253][T24556] lo speed is unknown, defaulting to 1000 [ 1538.589984][T24556] lo speed is unknown, defaulting to 1000 [ 1538.600087][T24556] lo speed is unknown, defaulting to 1000 [ 1538.642700][T24556] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1538.642742][T24556] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1538.642784][T24556] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1538.705174][T24556] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1538.932476][T20150] bridge_slave_1: left allmulticast mode [ 1538.932504][T20150] bridge_slave_1: left promiscuous mode [ 1538.932743][T20150] bridge0: port 2(bridge_slave_1) entered disabled state [ 1539.013393][T20150] bridge_slave_0: left allmulticast mode [ 1539.013419][T20150] bridge_slave_0: left promiscuous mode [ 1539.015981][T20150] bridge0: port 1(bridge_slave_0) entered disabled state [ 1539.334104][T20150] bridge_slave_0: left allmulticast mode [ 1539.334144][T20150] bridge_slave_0: left promiscuous mode [ 1539.334414][T20150] bridge0: port 1(bridge_slave_0) entered disabled state [ 1539.633092][T20150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1539.743007][T20150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1539.804207][T20150] bond0 (unregistering): Released all slaves [ 1539.939094][T20150] bond0 (unregistering): Released all slaves [ 1540.058065][T20150] bond0 (unregistering): Released all slaves [ 1540.203617][T20150] bond0 (unregistering): Released all slaves [ 1540.347569][T20150] bond0 (unregistering): Released all slaves [ 1540.492099][T20150] bond0 (unregistering): Released all slaves [ 1540.774549][T20150] bond0 (unregistering): Released all slaves [ 1540.803216][T24556] lo speed is unknown, defaulting to 1000 [ 1540.830165][T24556] lo speed is unknown, defaulting to 1000 [ 1541.128674][T24556] lo speed is unknown, defaulting to 1000 [ 1541.163148][T24556] lo speed is unknown, defaulting to 1000 [ 1541.312374][T24556] lo speed is unknown, defaulting to 1000 [ 1541.352033][T24556] lo speed is unknown, defaulting to 1000 [ 1541.361615][T24556] lo speed is unknown, defaulting to 1000 [ 1542.083502][T24187] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1542.177525][T24187] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1542.177916][T24556] lo speed is unknown, defaulting to 1000 [ 1542.198408][T24187] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1542.280337][T24187] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1542.313947][T24556] lo speed is unknown, defaulting to 1000 [ 1542.316967][T24187] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1542.367307][T24187] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1542.447062][T24556] lo speed is unknown, defaulting to 1000 [ 1542.984065][T24187] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1543.028520][T24187] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1543.046530][T24556] lo speed is unknown, defaulting to 1000 [ 1543.071371][T24556] lo speed is unknown, defaulting to 1000 [ 1543.146285][T24556] lo speed is unknown, defaulting to 1000 [ 1543.685892][T24556] lo speed is unknown, defaulting to 1000 [ 1543.700439][ T5266] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1544.577862][T23721] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1544.635690][T23721] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1544.651292][T23721] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1544.663579][T23721] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1544.672002][T23721] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1544.856931][T24589] netlink: 'syz.0.6379': attribute type 4 has an invalid length. [ 1544.875077][T20150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1544.932665][T20150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1545.333422][T20150] team0 (unregistering): Port device team_slave_1 removed [ 1545.420986][T20150] team0 (unregistering): Port device team_slave_0 removed [ 1547.001967][T24164] Bluetooth: hci4: command tx timeout [ 1548.176428][T24634] hub 8-0:1.0: USB hub found [ 1548.192485][T24634] hub 8-0:1.0: 1 port detected [ 1549.135866][T24164] Bluetooth: hci4: command tx timeout [ 1549.258130][T24253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1549.444053][T24253] 8021q: adding VLAN 0 to HW filter on device team0 [ 1549.575947][ T174] bridge0: port 1(bridge_slave_0) entered blocking state [ 1549.576128][ T174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1549.622948][ T174] bridge0: port 2(bridge_slave_1) entered blocking state [ 1549.623074][ T174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1550.647969][T23721] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1550.700461][T23721] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1550.702012][T23721] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1550.811729][T23721] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1550.821918][T23721] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1551.138596][T24590] lo speed is unknown, defaulting to 1000 [ 1551.152691][T24164] Bluetooth: hci4: command tx timeout [ 1551.310996][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.311077][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1552.013880][ T5266] 8021q: adding VLAN 0 to HW filter on device eth23 [ 1552.591388][T24325] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1552.633169][T24325] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1552.664165][T24325] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1552.735967][T24325] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1552.783525][T24325] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1552.824578][T24325] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1552.851452][T24325] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1552.926329][T24325] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1553.082330][T24164] Bluetooth: hci5: command tx timeout [ 1553.117439][T24655] lo speed is unknown, defaulting to 1000 [ 1553.232711][T24164] Bluetooth: hci4: command tx timeout [ 1553.656578][T24253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1555.196996][T24164] Bluetooth: hci5: command tx timeout [ 1555.598792][ T5266] 8021q: adding VLAN 0 to HW filter on device eth24 [ 1556.534470][T24590] bridge0: port 1(bridge_slave_0) entered blocking state [ 1556.534636][T24590] bridge0: port 1(bridge_slave_0) entered disabled state [ 1556.534851][T24590] bridge_slave_0: entered allmulticast mode [ 1556.539788][T24590] bridge_slave_0: entered promiscuous mode [ 1556.802520][T24590] bridge0: port 2(bridge_slave_1) entered blocking state [ 1556.802666][T24590] bridge0: port 2(bridge_slave_1) entered disabled state [ 1556.802914][T24590] bridge_slave_1: entered allmulticast mode [ 1556.807739][T24590] bridge_slave_1: entered promiscuous mode [ 1556.962315][T24751] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6411'. [ 1557.043097][T24590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1557.122734][T24590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1557.232498][T24164] Bluetooth: hci5: command tx timeout [ 1557.658136][T24590] team0: Port device team_slave_0 added [ 1557.758882][T24590] team0: Port device team_slave_1 added [ 1557.996364][T24590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1557.996383][T24590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1557.996411][T24590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1558.300877][T24590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1558.300890][T24590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1558.300906][T24590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1559.312708][T24164] Bluetooth: hci5: command tx timeout [ 1559.580207][T24253] veth0_vlan: entered promiscuous mode [ 1559.762390][T24590] hsr_slave_0: entered promiscuous mode [ 1559.764597][T24590] hsr_slave_1: entered promiscuous mode [ 1559.767269][T24590] debugfs: 'hsr0' already exists in 'hsr' [ 1559.767296][T24590] Cannot create hsr debugfs directory [ 1559.769187][T24655] bridge0: port 1(bridge_slave_0) entered blocking state [ 1559.769322][T24655] bridge0: port 1(bridge_slave_0) entered disabled state [ 1559.769525][T24655] bridge_slave_0: entered allmulticast mode [ 1559.801177][T24655] bridge_slave_0: entered promiscuous mode [ 1559.849309][T24325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1559.853905][T24655] bridge0: port 2(bridge_slave_1) entered blocking state [ 1559.854139][T24655] bridge0: port 2(bridge_slave_1) entered disabled state [ 1559.854338][T24655] bridge_slave_1: entered allmulticast mode [ 1559.860801][T24655] bridge_slave_1: entered promiscuous mode [ 1560.139847][T24253] veth1_vlan: entered promiscuous mode [ 1560.233520][T24655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1560.281979][T24655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1561.594656][T24655] team0: Port device team_slave_0 added [ 1561.683331][T24655] team0: Port device team_slave_1 added [ 1561.699020][T24325] 8021q: adding VLAN 0 to HW filter on device team0 [ 1562.203538][T24655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1562.203557][T24655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1562.203586][T24655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1562.216314][T24833] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6426'. [ 1562.249852][ T1180] bridge0: port 1(bridge_slave_0) entered blocking state [ 1562.250049][ T1180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1562.259365][T24655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1562.259380][T24655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1562.259406][T24655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1562.501291][T23721] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1562.548656][T23721] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1562.550698][T23721] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1562.567877][ T1180] bridge0: port 2(bridge_slave_1) entered blocking state [ 1562.568122][ T1180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1562.584129][T23721] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1562.588068][T23721] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1563.350334][T24655] hsr_slave_0: entered promiscuous mode [ 1563.356640][T24655] hsr_slave_1: entered promiscuous mode [ 1563.364284][T24655] debugfs: 'hsr0' already exists in 'hsr' [ 1563.364310][T24655] Cannot create hsr debugfs directory [ 1564.799883][T24164] Bluetooth: hci0: command tx timeout [ 1566.305719][T24899] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6433'. [ 1566.976584][T24164] Bluetooth: hci0: command tx timeout [ 1569.589543][T24164] Bluetooth: hci0: command tx timeout [ 1569.756331][T24935] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6440'. [ 1571.632348][T24164] Bluetooth: hci0: command tx timeout [ 1572.051846][T24837] lo speed is unknown, defaulting to 1000 [ 1575.721833][T23721] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1575.803859][T23721] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1575.839290][T23721] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1575.847593][T23721] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1575.849755][T23721] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1578.059187][T23721] Bluetooth: hci2: command tx timeout [ 1578.172484][T20150] bridge_slave_1: left allmulticast mode [ 1578.172511][T20150] bridge_slave_1: left promiscuous mode [ 1578.172704][T20150] bridge0: port 2(bridge_slave_1) entered disabled state [ 1578.253337][T20150] bridge_slave_0: left allmulticast mode [ 1578.253364][T20150] bridge_slave_0: left promiscuous mode [ 1578.253545][T20150] bridge0: port 1(bridge_slave_0) entered disabled state [ 1578.372439][T20150] bridge_slave_1: left allmulticast mode [ 1578.372467][T20150] bridge_slave_1: left promiscuous mode [ 1578.372655][T20150] bridge0: port 2(bridge_slave_1) entered disabled state [ 1578.433416][T20150] bridge_slave_0: left allmulticast mode [ 1578.433443][T20150] bridge_slave_0: left promiscuous mode [ 1578.433614][T20150] bridge0: port 1(bridge_slave_0) entered disabled state [ 1578.753470][T20150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1578.812903][T20150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1578.874318][T20150] bond0 (unregistering): Released all slaves [ 1579.302882][T20150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1579.385720][T20150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1579.408080][T20150] bond0 (unregistering): Released all slaves [ 1579.928282][T25050] fuse: Bad value for 'fd' [ 1580.150228][T23721] Bluetooth: hci2: command tx timeout [ 1580.812396][T20150] hsr_slave_0: left promiscuous mode [ 1580.862285][T20150] hsr_slave_1: left promiscuous mode [ 1580.863569][T20150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1580.904964][T20150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1581.382428][T20150] hsr_slave_0: left promiscuous mode [ 1581.582707][T20150] hsr_slave_1: left promiscuous mode [ 1581.715884][T20150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1582.331993][T23721] Bluetooth: hci2: command tx timeout [ 1582.368393][T20150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1584.144951][T20150] team0 (unregistering): Port device team_slave_1 removed [ 1584.182857][T20150] team0 (unregistering): Port device team_slave_0 removed [ 1584.352669][T23721] Bluetooth: hci2: command tx timeout [ 1584.663483][T20150] team0 (unregistering): Port device team_slave_1 removed [ 1584.722951][T20150] team0 (unregistering): Port device team_slave_0 removed [ 1585.103287][T24837] bridge0: port 1(bridge_slave_0) entered blocking state [ 1585.103425][T24837] bridge0: port 1(bridge_slave_0) entered disabled state [ 1585.103611][T24837] bridge_slave_0: entered allmulticast mode [ 1585.105261][T24837] bridge_slave_0: entered promiscuous mode [ 1585.108313][T25005] lo speed is unknown, defaulting to 1000 [ 1585.148279][T24837] bridge0: port 2(bridge_slave_1) entered blocking state [ 1585.148439][T24837] bridge0: port 2(bridge_slave_1) entered disabled state [ 1585.148659][T24837] bridge_slave_1: entered allmulticast mode [ 1585.179611][T24837] bridge_slave_1: entered promiscuous mode [ 1585.368677][T25119] syzkaller0: entered promiscuous mode [ 1585.368706][T25119] syzkaller0: entered allmulticast mode [ 1585.389771][T25120] tipc: Started in network mode [ 1585.389799][T25120] tipc: Node identity e21147dae4, cluster identity 4711 [ 1585.425101][T25120] tipc: Enabled bearer , priority 0 [ 1585.436627][T24837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1585.834451][T25118] tipc: Resetting bearer [ 1586.016767][T25118] tipc: Disabling bearer [ 1586.176678][T24837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1586.533444][T24837] team0: Port device team_slave_0 added [ 1586.559701][T24837] team0: Port device team_slave_1 added [ 1586.680809][T24837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1586.680829][T24837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1586.680858][T24837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1586.687149][T24837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1586.687166][T24837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1586.687195][T24837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1588.370205][T24837] hsr_slave_0: entered promiscuous mode [ 1588.371736][T24837] hsr_slave_1: entered promiscuous mode [ 1588.951871][T24590] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1589.103140][T24590] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1589.116200][T24590] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1589.143413][T24590] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1589.230822][T24590] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1589.301780][T24590] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1589.333498][T24590] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1589.408238][T24590] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1590.093821][T25005] bridge0: port 1(bridge_slave_0) entered blocking state [ 1590.094039][T25005] bridge0: port 1(bridge_slave_0) entered disabled state [ 1590.094249][T25005] bridge_slave_0: entered allmulticast mode [ 1590.097376][T25005] bridge_slave_0: entered promiscuous mode [ 1590.210488][T25005] bridge0: port 2(bridge_slave_1) entered blocking state [ 1590.210927][T25005] bridge0: port 2(bridge_slave_1) entered disabled state [ 1590.211138][T25005] bridge_slave_1: entered allmulticast mode [ 1590.234748][T25005] bridge_slave_1: entered promiscuous mode [ 1590.414095][T25005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1590.428320][T24655] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1590.467210][T24655] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1590.483399][T25005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1591.081497][T24655] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1591.110376][T24655] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1591.349185][T24655] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1591.435500][T24655] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1591.570883][T24655] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1591.639292][T24655] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1592.850320][T25005] team0: Port device team_slave_0 added [ 1592.900127][T25005] team0: Port device team_slave_1 added [ 1594.139054][T25005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1594.139074][T25005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1594.139103][T25005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1594.158055][T25005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1594.158072][T25005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1594.158097][T25005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1594.493629][T25005] hsr_slave_0: entered promiscuous mode [ 1594.494629][T25005] hsr_slave_1: entered promiscuous mode [ 1594.495312][T25005] debugfs: 'hsr0' already exists in 'hsr' [ 1594.495328][T25005] Cannot create hsr debugfs directory [ 1595.868851][T24590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1596.256470][T25269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6484'. [ 1596.334431][T24837] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1596.380897][T24837] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1596.407971][T24837] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1596.484233][T24837] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1596.544980][T24837] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1596.685247][T24837] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1596.690448][T24837] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1597.541928][T24837] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1597.575938][T24590] 8021q: adding VLAN 0 to HW filter on device team0 [ 1597.822403][T20150] bridge_slave_1: left allmulticast mode [ 1597.822431][T20150] bridge_slave_1: left promiscuous mode [ 1597.822618][T20150] bridge0: port 2(bridge_slave_1) entered disabled state [ 1597.894316][T20150] bridge_slave_0: left allmulticast mode [ 1597.894356][T20150] bridge_slave_0: left promiscuous mode [ 1597.894669][T20150] bridge0: port 1(bridge_slave_0) entered disabled state [ 1598.056188][T20150] bridge_slave_1: left allmulticast mode [ 1598.056217][T20150] bridge_slave_1: left promiscuous mode [ 1598.056449][T20150] bridge0: port 2(bridge_slave_1) entered disabled state [ 1598.113498][T20150] bridge_slave_0: left allmulticast mode [ 1598.113527][T20150] bridge_slave_0: left promiscuous mode [ 1598.113760][T20150] bridge0: port 1(bridge_slave_0) entered disabled state [ 1598.993423][T20150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1599.053098][T20150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1599.098489][T20150] bond0 (unregistering): Released all slaves [ 1599.594044][T20150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1599.674517][T20150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1599.717491][T20150] bond0 (unregistering): Released all slaves [ 1599.776964][T20355] bridge0: port 1(bridge_slave_0) entered blocking state [ 1599.777055][T20355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1599.904605][T25297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6491'. [ 1600.733990][T24655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1600.737417][ T3126] bridge0: port 2(bridge_slave_1) entered blocking state [ 1600.737554][ T3126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1600.936658][T24655] 8021q: adding VLAN 0 to HW filter on device team0 [ 1601.069618][ T3069] bridge0: port 1(bridge_slave_0) entered blocking state [ 1601.069869][ T3069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1601.216662][T25303] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6493'. [ 1601.602309][T20150] hsr_slave_0: left promiscuous mode [ 1601.642342][T20150] hsr_slave_1: left promiscuous mode [ 1601.643993][T20150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1601.665810][T20150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1601.822447][T20150] hsr_slave_0: left promiscuous mode [ 1601.852329][T20150] hsr_slave_1: left promiscuous mode [ 1601.853120][T20150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1601.895202][T20150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1601.983778][T20150] veth1_vlan: left promiscuous mode [ 1601.983889][T20150] veth0_vlan: left promiscuous mode [ 1602.596397][T20150] team0 (unregistering): Port device team_slave_1 removed [ 1602.652910][T20150] team0 (unregistering): Port device team_slave_0 removed [ 1603.157183][T20150] team0 (unregistering): Port device team_slave_1 removed [ 1603.218347][T20150] team0 (unregistering): Port device team_slave_0 removed [ 1603.627908][T20128] bridge0: port 2(bridge_slave_1) entered blocking state [ 1603.628043][T20128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1604.780537][T24837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1605.152805][T24837] 8021q: adding VLAN 0 to HW filter on device team0 [ 1605.154843][T24164] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1605.221047][T24164] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1605.231582][T24164] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1605.240080][T24164] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1605.242302][T24164] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1605.888141][T20128] bridge0: port 1(bridge_slave_0) entered blocking state [ 1605.892642][T20128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1606.121623][T20128] bridge0: port 2(bridge_slave_1) entered blocking state [ 1606.131501][T20128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1607.685652][T25362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6500'. [ 1607.821492][T23721] Bluetooth: hci1: command tx timeout [ 1608.001754][T25005] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1608.076249][T25005] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1608.128041][T25005] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1608.262370][T25005] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1608.265610][T25005] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1608.344372][T25005] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1608.345825][T25335] lo speed is unknown, defaulting to 1000 [ 1608.359061][T25005] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1608.433571][T25005] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1608.524519][T24655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1609.748672][T24655] veth0_vlan: entered promiscuous mode [ 1609.872323][T23721] Bluetooth: hci1: command tx timeout [ 1610.849798][T24164] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1610.944731][T24164] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1610.970839][T24164] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1610.990744][T24164] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1611.004751][T24164] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1611.433827][T24837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1611.612865][T25335] bridge0: port 1(bridge_slave_0) entered blocking state [ 1611.613093][T25335] bridge0: port 1(bridge_slave_0) entered disabled state [ 1611.613328][T25335] bridge_slave_0: entered allmulticast mode [ 1611.626292][T25335] bridge_slave_0: entered promiscuous mode [ 1611.643674][T25335] bridge0: port 2(bridge_slave_1) entered blocking state [ 1611.643809][T25335] bridge0: port 2(bridge_slave_1) entered disabled state [ 1611.644008][T25335] bridge_slave_1: entered allmulticast mode [ 1611.654907][T25335] bridge_slave_1: entered promiscuous mode [ 1611.740871][T25005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1611.959048][T23721] Bluetooth: hci1: command tx timeout [ 1612.047305][T25335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1612.101305][T25335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1613.226618][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1613.226698][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1613.230314][T23721] Bluetooth: hci4: command tx timeout [ 1613.308168][T25443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6507'. [ 1613.460852][T25335] team0: Port device team_slave_0 added [ 1613.486270][T25005] 8021q: adding VLAN 0 to HW filter on device team0 [ 1613.491983][T25335] team0: Port device team_slave_1 added [ 1613.618561][T25414] lo speed is unknown, defaulting to 1000 [ 1613.676837][T25335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1613.676857][T25335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1613.676885][T25335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1613.760794][T20128] bridge0: port 1(bridge_slave_0) entered blocking state [ 1613.760951][T20128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1613.783414][T25335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1613.783427][T25335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1613.783443][T25335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1613.942453][ T1180] bridge_slave_1: left allmulticast mode [ 1613.942481][ T1180] bridge_slave_1: left promiscuous mode [ 1613.942696][ T1180] bridge0: port 2(bridge_slave_1) entered disabled state [ 1614.013485][ T1180] bridge_slave_0: left allmulticast mode [ 1614.013512][ T1180] bridge_slave_0: left promiscuous mode [ 1614.013723][ T1180] bridge0: port 1(bridge_slave_0) entered disabled state [ 1614.032308][T23721] Bluetooth: hci1: command tx timeout [ 1614.591319][T25453] netlink: 'syz.0.6510': attribute type 10 has an invalid length. [ 1614.743043][ T1180] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1614.816443][ T1180] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1614.854599][ T1180] bond0 (unregistering): Released all slaves [ 1614.879267][ T3405] bridge0: port 2(bridge_slave_1) entered blocking state [ 1614.879364][ T3405] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1614.889321][T25453] bridge0: port 2(bridge_slave_1) entered disabled state [ 1614.889704][T25453] bridge0: port 1(bridge_slave_0) entered disabled state [ 1614.904402][T25453] bridge0: port 2(bridge_slave_1) entered blocking state [ 1614.904556][T25453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1614.904890][T25453] bridge0: port 1(bridge_slave_0) entered blocking state [ 1614.905130][T25453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1614.922047][T25453] team0: Port device bridge0 added [ 1615.238797][T25335] hsr_slave_0: entered promiscuous mode [ 1615.240308][T25335] hsr_slave_1: entered promiscuous mode [ 1615.241370][T25335] debugfs: 'hsr0' already exists in 'hsr' [ 1615.241396][T25335] Cannot create hsr debugfs directory [ 1615.327489][T23721] Bluetooth: hci4: command tx timeout [ 1616.432615][ T1180] hsr_slave_0: left promiscuous mode [ 1616.452332][ T1180] hsr_slave_1: left promiscuous mode [ 1616.453055][ T1180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1616.482853][ T1180] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1616.834536][ T1180] team0 (unregistering): Port device team_slave_1 removed [ 1616.859355][ T1180] team0 (unregistering): Port device team_slave_0 removed [ 1617.244166][T25466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6514'. [ 1617.348436][T24837] veth0_vlan: entered promiscuous mode [ 1617.392313][T23721] Bluetooth: hci4: command tx timeout [ 1617.854705][T24837] veth1_vlan: entered promiscuous mode [ 1618.779651][ T5266] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1619.475596][T23721] Bluetooth: hci4: command tx timeout [ 1619.480721][T25414] bridge0: port 1(bridge_slave_0) entered blocking state [ 1619.480952][T25414] bridge0: port 1(bridge_slave_0) entered disabled state [ 1619.481201][T25414] bridge_slave_0: entered allmulticast mode [ 1619.490701][T25414] bridge_slave_0: entered promiscuous mode [ 1619.652901][T25414] bridge0: port 2(bridge_slave_1) entered blocking state [ 1619.653076][T25414] bridge0: port 2(bridge_slave_1) entered disabled state [ 1619.653336][T25414] bridge_slave_1: entered allmulticast mode [ 1619.656496][T25414] bridge_slave_1: entered promiscuous mode [ 1620.087991][T25414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1620.233851][T24837] veth0_macvtap: entered promiscuous mode [ 1620.239886][T25414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1620.501599][T24837] veth1_macvtap: entered promiscuous mode [ 1620.564676][T25414] team0: Port device team_slave_0 added [ 1620.591678][T25414] team0: Port device team_slave_1 added [ 1621.894363][T25414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1621.894382][T25414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1621.894412][T25414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1622.089178][T25414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1622.089197][T25414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1622.089226][T25414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1622.099194][T25524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6521'. [ 1622.817232][T25005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1623.016584][T24164] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1623.103948][T24164] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1623.105873][T24164] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1623.111701][T24164] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1623.113394][T24164] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1624.639737][T25414] hsr_slave_0: entered promiscuous mode [ 1624.651182][T25414] hsr_slave_1: entered promiscuous mode [ 1624.654108][T25414] debugfs: 'hsr0' already exists in 'hsr' [ 1624.654134][T25414] Cannot create hsr debugfs directory [ 1624.880464][T25554] fuse: Unknown parameter 'grou00000000000000000000' [ 1625.012285][T25335] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1625.054221][T25335] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1625.105253][T25335] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1625.211093][T25335] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1625.351277][T25335] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1625.387850][T25335] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1625.409320][T25335] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1625.455883][T25335] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1625.757929][T25530] lo speed is unknown, defaulting to 1000 [ 1625.792431][T23721] Bluetooth: hci5: command tx timeout [ 1625.880560][T25575] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6528'. [ 1625.932841][ T3358] bridge_slave_1: left allmulticast mode [ 1625.932879][ T3358] bridge_slave_1: left promiscuous mode [ 1625.933202][ T3358] bridge0: port 2(bridge_slave_1) entered disabled state [ 1626.007199][ T3358] bridge_slave_0: left allmulticast mode [ 1626.007263][ T3358] bridge_slave_0: left promiscuous mode [ 1626.007559][ T3358] bridge0: port 1(bridge_slave_0) entered disabled state [ 1626.803227][ T3358] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1626.863488][ T3358] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1626.887473][ T3358] bond0 (unregistering): Released all slaves [ 1627.884908][T23721] Bluetooth: hci5: command tx timeout [ 1627.957682][T25005] veth0_vlan: entered promiscuous mode [ 1628.573360][ T3358] hsr_slave_0: left promiscuous mode [ 1628.612540][ T3358] hsr_slave_1: left promiscuous mode [ 1628.613651][ T3358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1628.643986][ T3358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1628.722888][ T3358] veth0_vlan: left promiscuous mode [ 1629.183461][ T3358] team0 (unregistering): Port device team_slave_1 removed [ 1629.235964][ T3358] team0 (unregistering): Port device team_slave_0 removed [ 1629.572562][T25587] fuse: Unknown parameter 'grou00000000000000000000' [ 1629.635239][T25005] veth1_vlan: entered promiscuous mode [ 1629.955678][T23721] Bluetooth: hci5: command tx timeout [ 1630.247177][T25005] veth0_macvtap: entered promiscuous mode [ 1630.289511][T25005] veth1_macvtap: entered promiscuous mode [ 1630.383633][T25335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1630.881007][T25005] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1630.895775][T25530] bridge0: port 1(bridge_slave_0) entered blocking state [ 1630.895920][T25530] bridge0: port 1(bridge_slave_0) entered disabled state [ 1630.896136][T25530] bridge_slave_0: entered allmulticast mode [ 1630.917407][T25530] bridge_slave_0: entered promiscuous mode [ 1631.003962][T25530] bridge0: port 2(bridge_slave_1) entered blocking state [ 1631.004094][T25530] bridge0: port 2(bridge_slave_1) entered disabled state [ 1631.004336][T25530] bridge_slave_1: entered allmulticast mode [ 1631.008291][T25530] bridge_slave_1: entered promiscuous mode [ 1631.045277][T25612] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6535'. [ 1631.108932][T25335] 8021q: adding VLAN 0 to HW filter on device team0 [ 1631.126869][T25005] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1631.269048][T25530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1631.296612][T25530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1631.410906][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1631.637062][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 1631.637381][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1631.682404][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1631.752763][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1631.755738][T25530] team0: Port device team_slave_0 added [ 1632.758755][T23721] Bluetooth: hci5: command tx timeout [ 1632.882541][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1632.947969][T25530] team0: Port device team_slave_1 added [ 1633.091367][T20128] bridge0: port 2(bridge_slave_1) entered blocking state [ 1633.092765][T20128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1633.379245][T25636] fuse: Unknown parameter 'grou00000000000000000000' [ 1633.702475][T25530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1633.702495][T25530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1633.702524][T25530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1633.707968][T25530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1633.707981][T25530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1633.709235][T25530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1633.868075][T25414] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1633.908630][T25414] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1633.930805][T25414] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1633.988125][T25414] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1634.588823][T25414] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1634.644824][T25414] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1635.123566][T25414] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1635.434647][T25414] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1635.744968][T24164] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1635.814334][T24164] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1635.819284][T24164] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1635.841706][T24164] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1635.849836][T24164] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1636.015188][T25530] hsr_slave_0: entered promiscuous mode [ 1636.016850][T25530] hsr_slave_1: entered promiscuous mode [ 1636.018210][T25530] debugfs: 'hsr0' already exists in 'hsr' [ 1636.018246][T25530] Cannot create hsr debugfs directory [ 1636.662082][T25675] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6542'. [ 1637.953266][T23721] Bluetooth: hci0: command tx timeout [ 1638.123284][T25660] lo speed is unknown, defaulting to 1000 [ 1638.392424][ T3358] bridge_slave_1: left allmulticast mode [ 1638.392466][ T3358] bridge_slave_1: left promiscuous mode [ 1638.392908][ T3358] bridge0: port 2(bridge_slave_1) entered disabled state [ 1639.318717][ T3358] bridge_slave_0: left allmulticast mode [ 1639.318759][ T3358] bridge_slave_0: left promiscuous mode [ 1639.319045][ T3358] bridge0: port 1(bridge_slave_0) entered disabled state [ 1639.507702][T25709] fuse: Unknown parameter 'group_i00000000000000000000' [ 1640.032418][T23721] Bluetooth: hci0: command tx timeout [ 1640.123053][ T3358] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1640.213510][ T3358] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1640.254293][ T3358] bond0 (unregistering): Released all slaves [ 1640.781531][T25716] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6549'. [ 1641.052288][ T3358] hsr_slave_0: left promiscuous mode [ 1641.092411][ T3358] hsr_slave_1: left promiscuous mode [ 1641.093650][ T3358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1641.143193][ T3358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1641.208669][ T3358] veth1_macvtap: left promiscuous mode [ 1641.208741][ T3358] veth0_macvtap: left promiscuous mode [ 1641.208887][ T3358] veth1_vlan: left promiscuous mode [ 1641.208991][ T3358] veth0_vlan: left promiscuous mode [ 1641.873552][ T3358] team0 (unregistering): Port device team_slave_1 removed [ 1641.918716][ T3358] team0 (unregistering): Port device team_slave_0 removed [ 1642.116208][T23721] Bluetooth: hci0: command tx timeout [ 1643.336950][T25335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1643.355206][T25414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1643.641325][T25414] 8021q: adding VLAN 0 to HW filter on device team0 [ 1644.351088][T23721] Bluetooth: hci0: command tx timeout [ 1645.075848][T25749] fuse: Unknown parameter 'group_i00000000000000000000' [ 1645.263836][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1645.263999][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1645.477689][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1645.477862][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1645.988195][T25660] bridge0: port 1(bridge_slave_0) entered blocking state [ 1645.988425][T25660] bridge0: port 1(bridge_slave_0) entered disabled state [ 1645.988641][T25660] bridge_slave_0: entered allmulticast mode [ 1645.999400][T25660] bridge_slave_0: entered promiscuous mode [ 1646.019364][T25660] bridge0: port 2(bridge_slave_1) entered blocking state [ 1646.019503][T25660] bridge0: port 2(bridge_slave_1) entered disabled state [ 1646.019703][T25660] bridge_slave_1: entered allmulticast mode [ 1646.066624][T25660] bridge_slave_1: entered promiscuous mode [ 1646.347141][T25660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1646.454378][T25771] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6556'. [ 1646.488139][T25660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1646.609981][T25660] team0: Port device team_slave_0 added [ 1646.735075][T25660] team0: Port device team_slave_1 added [ 1646.946610][T23721] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1646.946639][T23721] CPU: 1 UID: 0 PID: 23721 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1646.946665][T23721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1646.946678][T23721] Workqueue: hci3 hci_rx_work [ 1646.946708][T23721] Call Trace: [ 1646.946715][T23721] [ 1646.946725][T23721] dump_stack_lvl+0xe8/0x150 [ 1646.946755][T23721] sysfs_create_dir_ns+0x271/0x2a0 [ 1646.946789][T23721] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1646.946822][T23721] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1646.946857][T23721] ? rt_spin_unlock+0x160/0x200 [ 1646.946898][T23721] kobject_add_internal+0x631/0xd10 [ 1646.946937][T23721] kobject_add+0x163/0x240 [ 1646.946970][T23721] ? __pfx_kobject_add+0x10/0x10 [ 1646.947003][T23721] ? get_device_parent+0x370/0x3a0 [ 1646.947029][T23721] device_add+0x408/0xbb0 [ 1646.947058][T23721] hci_conn_add_sysfs+0xd5/0x210 [ 1646.947086][T23721] le_conn_complete_evt+0x10e6/0x16b0 [ 1646.947126][T23721] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1646.947153][T23721] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1646.947177][T23721] ? lockdep_hardirqs_on+0x7a/0x110 [ 1646.947202][T23721] ? skb_pull_data+0xfb/0x200 [ 1646.947236][T23721] hci_le_conn_complete_evt+0x187/0x470 [ 1646.947274][T23721] hci_event_packet+0x659/0xef0 [ 1646.947306][T23721] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1646.947334][T23721] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1646.947362][T23721] ? __pfx_hci_event_packet+0x10/0x10 [ 1646.947384][T23721] ? rt_spin_unlock+0x14f/0x200 [ 1646.947420][T23721] ? hci_send_to_monitor+0xe2/0x590 [ 1646.947453][T23721] hci_rx_work+0x3ee/0x1040 [ 1646.947480][T23721] ? process_scheduled_works+0xa70/0x1860 [ 1646.947505][T23721] process_scheduled_works+0xb5d/0x1860 [ 1646.947562][T23721] ? __pfx_process_scheduled_works+0x10/0x10 [ 1646.947594][T23721] ? assign_work+0x3d5/0x5e0 [ 1646.947623][T23721] worker_thread+0xa53/0xfc0 [ 1646.947674][T23721] kthread+0x388/0x470 [ 1646.947700][T23721] ? __pfx_worker_thread+0x10/0x10 [ 1646.947718][T23721] ? __pfx_kthread+0x10/0x10 [ 1646.947745][T23721] ret_from_fork+0x514/0xb70 [ 1646.947770][T23721] ? __pfx_ret_from_fork+0x10/0x10 [ 1646.947793][T23721] ? __switch_to+0xc79/0x1410 [ 1646.947825][T23721] ? __pfx_kthread+0x10/0x10 [ 1646.947852][T23721] ret_from_fork_asm+0x1a/0x30 [ 1646.947957][T23721] [ 1646.947992][T23721] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1646.948032][T23721] Bluetooth: hci3: failed to register connection device [ 1647.074602][T25660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1647.074619][T25660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1647.074643][T25660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1647.326256][T25660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1647.326273][T25660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1647.326297][T25660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1647.606554][T25782] fuse: Unknown parameter 'group_i00000000000000000000' [ 1647.651162][T25335] veth0_vlan: entered promiscuous mode [ 1647.890529][ T3358] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1648.054973][T25660] hsr_slave_0: entered promiscuous mode [ 1648.061753][T25660] hsr_slave_1: entered promiscuous mode [ 1648.077615][T25530] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1648.109380][T25530] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1648.127965][T25530] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1648.168777][T25530] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1648.389969][ T3358] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1648.451781][T25530] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1648.481420][T25530] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1648.711849][T25530] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1649.200140][T25530] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1649.657610][T25796] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6563'. [ 1649.660037][T25335] veth1_vlan: entered promiscuous mode [ 1651.201822][ T3358] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1651.651544][T25820] fuse: Unknown parameter 'group_id00000000000000000000' [ 1651.746770][ T3358] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1652.364668][T25335] veth0_macvtap: entered promiscuous mode [ 1652.452933][T25335] veth1_macvtap: entered promiscuous mode [ 1652.538988][T25414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1652.637469][T25335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1652.672244][T25335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1652.808536][T25840] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6570'. [ 1652.887628][ T3069] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1652.918146][ T3069] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1652.927239][ T3069] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1652.948765][ T3069] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1652.967998][T25530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1653.505891][T25850] fuse: Unknown parameter 'group_id00000000000000000000' [ 1653.882587][ T3358] bridge_slave_1: left allmulticast mode [ 1653.882614][ T3358] bridge_slave_1: left promiscuous mode [ 1653.882913][ T3358] bridge0: port 2(bridge_slave_1) entered disabled state [ 1653.943500][ T3358] bridge_slave_0: left allmulticast mode [ 1653.943530][ T3358] bridge_slave_0: left promiscuous mode [ 1653.943700][ T3358] bridge0: port 1(bridge_slave_0) entered disabled state [ 1654.459777][T25855] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1654.513784][T25857] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6577'. [ 1655.960753][T25866] netlink: 'syz.0.6580': attribute type 10 has an invalid length. [ 1655.970817][ T3358] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1656.022869][ T3358] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1656.070344][ T3358] bond0 (unregistering): Released all slaves [ 1656.195586][T25866] bridge0: port 2(bridge_slave_1) entered disabled state [ 1656.195934][T25866] bridge0: port 1(bridge_slave_0) entered disabled state [ 1656.265969][T25866] team0: Port device bridge0 removed [ 1656.267264][T25866] bridge0: port 2(bridge_slave_1) entered blocking state [ 1656.267403][T25866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1656.267667][T25866] bridge0: port 1(bridge_slave_0) entered blocking state [ 1656.267760][T25866] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1656.270920][T25866] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1656.396378][T25530] 8021q: adding VLAN 0 to HW filter on device team0 [ 1656.448205][T25414] veth0_vlan: entered promiscuous mode [ 1656.489049][T25870] fuse: Unknown parameter 'group_id00000000000000000000' [ 1657.243980][ T3069] bridge0: port 1(bridge_slave_0) entered blocking state [ 1657.244133][ T3069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1657.308870][T25414] veth1_vlan: entered promiscuous mode [ 1657.325950][ T3069] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1657.325972][ T3069] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1657.328118][ T2849] bridge0: port 2(bridge_slave_1) entered blocking state [ 1657.328317][ T2849] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1657.439498][T25875] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1657.526071][T25877] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6584'. [ 1657.548795][ T3358] hsr_slave_0: left promiscuous mode [ 1657.582306][ T3358] hsr_slave_1: left promiscuous mode [ 1657.589440][ T3358] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1657.589468][ T3358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1657.643199][ T3358] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1657.643229][ T3358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1657.895343][ T3358] veth1_macvtap: left promiscuous mode [ 1657.895938][ T3358] veth0_macvtap: left promiscuous mode [ 1657.896122][ T3358] veth1_vlan: left promiscuous mode [ 1657.896224][ T3358] veth0_vlan: left promiscuous mode [ 1659.043691][T25890] fuse: Bad value for 'user_id' [ 1659.043714][T25890] fuse: Bad value for 'user_id' [ 1659.682812][ T3358] team0 (unregistering): Port device team_slave_1 removed [ 1659.723436][ T3358] team0 (unregistering): Port device team_slave_0 removed [ 1660.019798][T25895] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1661.585209][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1661.585230][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1661.811406][T25414] veth0_macvtap: entered promiscuous mode [ 1661.860720][T25912] fuse: Bad value for 'user_id' [ 1661.860742][T25912] fuse: Bad value for 'user_id' [ 1661.875025][T25414] veth1_macvtap: entered promiscuous mode [ 1662.127991][T25414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1662.299503][T25414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1662.368317][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1662.403457][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1662.421102][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1662.424092][ T2977] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1663.061487][T25925] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1665.165597][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1665.165619][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1665.194845][T25947] fuse: Bad value for 'user_id' [ 1665.194866][T25947] fuse: Bad value for 'user_id' [ 1665.546406][ T3358] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1666.308456][ T3358] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1667.322652][T25660] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1667.362397][T25660] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1667.433931][T25972] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6611'. [ 1667.437250][T25660] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1667.524137][T25660] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1667.525733][ T3126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1667.525754][ T3126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1667.561935][T25660] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1667.611351][T25660] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1668.150165][ T3358] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1669.009049][T25530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1669.033122][T25660] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1669.260550][T25660] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1669.261755][T25985] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6616'. [ 1669.384492][T25997] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6620'. [ 1669.610398][T26007] netlink: 63 bytes leftover after parsing attributes in process `syz.2.5948'. [ 1669.610424][T26007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5948'. [ 1669.830398][ T3358] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1670.605597][T26028] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6628'. [ 1671.867216][T25530] veth0_vlan: entered promiscuous mode [ 1671.884259][T25660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1671.995413][T25530] veth1_vlan: entered promiscuous mode [ 1672.342867][T26049] netlink: 63 bytes leftover after parsing attributes in process `syz.2.6635'. [ 1672.342892][T26049] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6635'. [ 1672.492617][T26052] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6636'. [ 1672.504503][T25660] 8021q: adding VLAN 0 to HW filter on device team0 [ 1672.819906][T26056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6637'. [ 1672.909008][T26056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6637'. [ 1672.926968][ T3126] bridge0: port 1(bridge_slave_0) entered blocking state [ 1672.927178][ T3126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1673.224215][ T174] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1673.251761][ T56] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1673.268199][ T56] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1673.271650][ T3031] bridge0: port 2(bridge_slave_1) entered blocking state [ 1673.271872][ T3031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1673.276023][ T56] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1674.241764][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1674.241850][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1674.545113][T26073] netlink: 63 bytes leftover after parsing attributes in process `syz.2.6645'. [ 1674.545139][T26073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6645'. [ 1674.664905][T26077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6646'. [ 1674.702742][ T3358] bridge_slave_1: left allmulticast mode [ 1674.702780][ T3358] bridge_slave_1: left promiscuous mode [ 1674.703145][ T3358] bridge0: port 2(bridge_slave_1) entered disabled state [ 1674.775588][ T3358] bridge_slave_0: left allmulticast mode [ 1674.775615][ T3358] bridge_slave_0: left promiscuous mode [ 1674.775788][ T3358] bridge0: port 1(bridge_slave_0) entered disabled state [ 1675.623055][ T3358] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1675.664775][ T3358] bond0 (unregistering): Released all slaves [ 1676.089101][T26089] fuse: Bad value for 'fd' [ 1677.234357][T25530] veth0_macvtap: entered promiscuous mode [ 1677.364120][T25530] veth1_macvtap: entered promiscuous mode [ 1677.738020][T25530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1677.823049][T25530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1677.952865][ T3358] IPVS: stopping master sync thread 22954 ... [ 1677.974920][ T3031] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1678.019439][ T2977] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1678.020762][ T2977] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1678.021283][ T2977] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1678.219939][T26112] fuse: Bad value for 'fd' [ 1678.514972][T26120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6663'. [ 1679.807476][ C0] vcan0: j1939_tp_rxtimer: 0xffff888011022800: rx timeout, send abort [ 1679.807758][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888011022800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 1680.433091][ T5266] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1681.849482][ T3358] hsr_slave_0: left promiscuous mode [ 1681.994175][ T3358] hsr_slave_1: left promiscuous mode [ 1681.997157][ T3358] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1681.997183][ T3358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1682.067069][ T3358] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1682.067101][ T3358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1682.127593][ T3358] veth1_macvtap: left promiscuous mode [ 1682.127663][ T3358] veth0_macvtap: left promiscuous mode [ 1682.127805][ T3358] veth1_vlan: left promiscuous mode [ 1682.127913][ T3358] veth0_vlan: left promiscuous mode [ 1684.431343][T24164] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1684.473730][T24164] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1684.485045][T24164] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1684.504971][T24164] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1684.506223][T24164] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1685.156167][ T174] smbdirect: ib_dev[syz1] removed [ 1685.505418][T23721] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1685.535097][ T3358] team0 (unregistering): Port device team_slave_1 removed [ 1685.601116][ T3358] team0 (unregistering): Port device team_slave_0 removed [ 1685.811951][T26211] loop8: detected capacity change from 0 to 7 [ 1685.931506][T26211] Dev loop8: unable to read RDB block 7 [ 1685.931556][T26211] loop8: unable to read partition table [ 1685.931823][T26211] loop8: partition table beyond EOD, truncated [ 1685.933046][T26211] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1686.197744][ T7150] infiniband syz1: ib_query_port failed (-19) [ 1687.355001][T23721] Bluetooth: hci2: command tx timeout [ 1687.529377][T26235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6695'. [ 1687.709234][T26235] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1687.779669][T25660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1687.985467][T23721] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1688.516055][T25660] veth0_vlan: entered promiscuous mode [ 1688.748952][T25660] veth1_vlan: entered promiscuous mode [ 1688.777970][T26187] lo speed is unknown, defaulting to 1000 [ 1689.404399][T24164] Bluetooth: hci2: command tx timeout [ 1690.505208][T24164] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1690.505236][T24164] CPU: 1 UID: 0 PID: 24164 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1690.505262][T24164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1690.505276][T24164] Workqueue: hci1 hci_rx_work [ 1690.505307][T24164] Call Trace: [ 1690.505316][T24164] [ 1690.505325][T24164] dump_stack_lvl+0xe8/0x150 [ 1690.505355][T24164] sysfs_create_dir_ns+0x271/0x2a0 [ 1690.505390][T24164] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1690.505435][T24164] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1690.505472][T24164] ? rt_spin_unlock+0x160/0x200 [ 1690.505506][T24164] kobject_add_internal+0x631/0xd10 [ 1690.505546][T24164] kobject_add+0x163/0x240 [ 1690.505580][T24164] ? __pfx_kobject_add+0x10/0x10 [ 1690.505616][T24164] ? get_device_parent+0x370/0x3a0 [ 1690.505646][T24164] device_add+0x408/0xbb0 [ 1690.505674][T24164] hci_conn_add_sysfs+0xd5/0x210 [ 1690.505702][T24164] le_conn_complete_evt+0x10e6/0x16b0 [ 1690.505743][T24164] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1690.505773][T24164] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1690.505795][T24164] ? lockdep_hardirqs_on+0x7a/0x110 [ 1690.505819][T24164] ? skb_pull_data+0xfb/0x200 [ 1690.505854][T24164] hci_le_conn_complete_evt+0x187/0x470 [ 1690.505893][T24164] hci_event_packet+0x659/0xef0 [ 1690.505926][T24164] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1690.505953][T24164] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1690.505980][T24164] ? __pfx_hci_event_packet+0x10/0x10 [ 1690.506002][T24164] ? rt_spin_unlock+0x14f/0x200 [ 1690.506047][T24164] ? hci_send_to_monitor+0xe2/0x590 [ 1690.506083][T24164] hci_rx_work+0x3ee/0x1040 [ 1690.506115][T24164] ? process_scheduled_works+0xa70/0x1860 [ 1690.506141][T24164] process_scheduled_works+0xb5d/0x1860 [ 1690.506199][T24164] ? __pfx_process_scheduled_works+0x10/0x10 [ 1690.506230][T24164] ? assign_work+0x3d5/0x5e0 [ 1690.506259][T24164] worker_thread+0xa53/0xfc0 [ 1690.506315][T24164] kthread+0x388/0x470 [ 1690.506345][T24164] ? __pfx_worker_thread+0x10/0x10 [ 1690.506368][T24164] ? __pfx_kthread+0x10/0x10 [ 1690.506399][T24164] ret_from_fork+0x514/0xb70 [ 1690.506436][T24164] ? __pfx_ret_from_fork+0x10/0x10 [ 1690.506461][T24164] ? __switch_to+0xc79/0x1410 [ 1690.506499][T24164] ? __pfx_kthread+0x10/0x10 [ 1690.506529][T24164] ret_from_fork_asm+0x1a/0x30 [ 1690.506576][T24164] [ 1690.522473][T24164] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1690.522517][T24164] Bluetooth: hci1: failed to register connection device [ 1690.701272][ T5266] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1691.321355][T25660] veth0_macvtap: entered promiscuous mode [ 1691.670567][T23721] Bluetooth: hci2: command tx timeout [ 1691.680959][T25660] veth1_macvtap: entered promiscuous mode [ 1693.134738][T23721] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1693.221048][ T3358] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1693.712186][T23721] Bluetooth: hci2: command tx timeout [ 1693.802544][T25660] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1693.846350][T26353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6726'. [ 1693.911211][T25660] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1694.563242][T26372] netlink: 'syz.0.6732': attribute type 1 has an invalid length. [ 1694.563266][T26372] netlink: 67 bytes leftover after parsing attributes in process `syz.0.6732'. [ 1694.775967][T26376] EXT4-fs (loop2): unable to read superblock [ 1694.939590][ T3358] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1695.131731][T20150] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1695.312717][T20150] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1695.716274][T26400] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6739'. [ 1695.814305][ T3358] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1695.888517][T20150] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1696.077472][T20150] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1696.079741][T26187] bridge0: port 1(bridge_slave_0) entered blocking state [ 1696.079883][T26187] bridge0: port 1(bridge_slave_0) entered disabled state [ 1696.080140][T26187] bridge_slave_0: entered allmulticast mode [ 1696.088664][T26187] bridge_slave_0: entered promiscuous mode [ 1696.335633][T26408] loop8: detected capacity change from 0 to 7 [ 1696.373289][T26408] Dev loop8: unable to read RDB block 7 [ 1696.373338][T26408] loop8: unable to read partition table [ 1696.373605][T26408] loop8: partition table beyond EOD, truncated [ 1696.373645][T26408] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1696.627665][T24164] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1696.704366][T24164] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1696.706930][T24164] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1696.726248][T24164] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1696.736043][T24164] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1697.071545][ T3358] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1697.128855][T26423] netlink: 'syz.8.6746': attribute type 1 has an invalid length. [ 1697.128880][T26423] netlink: 67 bytes leftover after parsing attributes in process `syz.8.6746'. [ 1697.183347][T26187] bridge0: port 2(bridge_slave_1) entered blocking state [ 1697.183949][T26187] bridge0: port 2(bridge_slave_1) entered disabled state [ 1697.184192][T26187] bridge_slave_1: entered allmulticast mode [ 1697.191256][T26187] bridge_slave_1: entered promiscuous mode [ 1697.800714][T26432] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6748'. [ 1697.956465][T26187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1697.994275][T26187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1698.236000][T26437] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6750'. [ 1698.236063][T26437] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6750'. [ 1698.549047][T26437] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6750'. [ 1698.549108][T26437] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6750'. [ 1698.549406][T26187] team0: Port device team_slave_0 added [ 1698.588483][T26443] loop8: detected capacity change from 0 to 7 [ 1698.626732][T26187] team0: Port device team_slave_1 added [ 1698.657322][T26443] Dev loop8: unable to read RDB block 7 [ 1698.657371][T26443] loop8: unable to read partition table [ 1698.658257][T26443] loop8: partition table beyond EOD, truncated [ 1698.658278][T26443] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1698.879927][T26437] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6750'. [ 1698.879991][T26437] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6750'. [ 1698.993186][T24164] Bluetooth: hci5: command tx timeout [ 1699.490324][T26465] siw: device registration error -23 [ 1699.810544][T26187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1699.810562][T26187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1699.810586][T26187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1699.917812][T26187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1699.917831][T26187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1699.917860][T26187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1700.139875][T26412] lo speed is unknown, defaulting to 1000 [ 1700.566263][T26487] fuse: Unknown parameter 'group_id00000000000000000000' [ 1700.657248][T26187] hsr_slave_0: entered promiscuous mode [ 1700.661812][T26187] hsr_slave_1: entered promiscuous mode [ 1700.671054][T26187] debugfs: 'hsr0' already exists in 'hsr' [ 1700.671080][T26187] Cannot create hsr debugfs directory [ 1700.873003][T26493] netlink: 'syz.0.6763': attribute type 4 has an invalid length. [ 1701.072559][T24164] Bluetooth: hci5: command tx timeout [ 1701.096222][ T5266] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1701.309038][T26496] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6764'. [ 1701.309106][T26496] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6764'. [ 1701.655849][ T3358] bridge_slave_1: left allmulticast mode [ 1701.655887][ T3358] bridge_slave_1: left promiscuous mode [ 1701.656176][ T3358] bridge0: port 2(bridge_slave_1) entered disabled state [ 1701.743328][ T3358] bridge_slave_0: left allmulticast mode [ 1701.743355][ T3358] bridge_slave_0: left promiscuous mode [ 1701.743556][ T3358] bridge0: port 1(bridge_slave_0) entered disabled state [ 1702.658095][T26520] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6772'. [ 1702.723458][ T3358] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1702.782853][ T3358] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1702.828481][ T3358] bond0 (unregistering): Released all slaves [ 1702.886899][T25900] lo speed is unknown, defaulting to 1000 [ 1702.886931][T25900] syz0: Port: 1 Link DOWN [ 1702.970091][T26504] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1703.166668][T24164] Bluetooth: hci5: command tx timeout [ 1703.188127][T26520] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1703.253428][T26526] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6773'. [ 1703.253489][T26526] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6773'. [ 1704.520146][T26540] fuse: Bad value for 'fd' [ 1705.269513][T24164] Bluetooth: hci5: command tx timeout [ 1705.852289][ T3358] hsr_slave_0: left promiscuous mode [ 1705.882361][ T3358] hsr_slave_1: left promiscuous mode [ 1705.883367][ T3358] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1705.883393][ T3358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1705.943105][ T3358] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1705.943136][ T3358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1706.045761][ T3358] veth1_macvtap: left promiscuous mode [ 1706.045897][ T3358] veth0_macvtap: left promiscuous mode [ 1706.046176][ T3358] veth1_vlan: left promiscuous mode [ 1706.046388][ T3358] veth0_vlan: left promiscuous mode [ 1706.873860][ T3358] team0 (unregistering): Port device team_slave_1 removed [ 1706.932756][ T3358] team0 (unregistering): Port device team_slave_0 removed [ 1710.817154][T26681] loop8: detected capacity change from 0 to 8 [ 1710.835332][T26681] Dev loop8: unable to read RDB block 8 [ 1710.835381][T26681] loop8: unable to read partition table [ 1710.835695][T26681] loop8: partition table beyond EOD, truncated [ 1710.838054][T26681] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1711.313427][ T3358] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1711.890146][T26412] bridge0: port 1(bridge_slave_0) entered blocking state [ 1711.890331][T26412] bridge0: port 1(bridge_slave_0) entered disabled state [ 1711.890585][T26412] bridge_slave_0: entered allmulticast mode [ 1711.919930][T26412] bridge_slave_0: entered promiscuous mode [ 1712.099413][T26707] loop8: detected capacity change from 0 to 7 [ 1712.105578][T26707] Dev loop8: unable to read RDB block 7 [ 1712.105782][T26707] loop8: unable to read partition table [ 1712.105999][T26707] loop8: partition table beyond EOD, truncated [ 1712.106131][T26707] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1712.394948][ T3358] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1712.585677][T26412] bridge0: port 2(bridge_slave_1) entered blocking state [ 1712.585823][T26412] bridge0: port 2(bridge_slave_1) entered disabled state [ 1712.586066][T26412] bridge_slave_1: entered allmulticast mode [ 1712.589506][T26412] bridge_slave_1: entered promiscuous mode [ 1713.081792][T26714] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6826'. [ 1713.684284][ T3358] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1713.822917][T26412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1713.858076][T26714] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1713.858114][T26714] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 1713.922361][T26412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1714.456199][T26733] fuse: Bad value for 'fd' [ 1714.516446][ T3358] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1714.591308][T26412] team0: Port device team_slave_0 added [ 1714.645840][T26412] team0: Port device team_slave_1 added [ 1714.770944][T26739] loop8: detected capacity change from 0 to 7 [ 1714.783927][T26739] Dev loop8: unable to read RDB block 7 [ 1714.783970][T26739] loop8: unable to read partition table [ 1714.784192][T26739] loop8: partition table beyond EOD, truncated [ 1714.784210][T26739] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1715.516163][T26751] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6837'. [ 1715.592979][T26412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1715.592997][T26412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1715.593024][T26412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1715.611326][T26412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1715.611342][T26412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1715.611368][T26412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1716.092886][T26187] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1716.142032][T26187] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1716.206831][T26412] hsr_slave_0: entered promiscuous mode [ 1716.209890][T26412] hsr_slave_1: entered promiscuous mode [ 1716.225637][T26412] debugfs: 'hsr0' already exists in 'hsr' [ 1716.225666][T26412] Cannot create hsr debugfs directory [ 1716.229749][T26187] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1716.292848][T26187] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1716.567669][T26776] fuse: Invalid rootmode [ 1716.843967][T26187] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1716.890575][T26187] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1716.902305][T26187] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1716.928412][T26187] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1716.958441][T24164] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1716.958469][T24164] CPU: 1 UID: 0 PID: 24164 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1716.958497][T24164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1716.958511][T24164] Workqueue: hci4 hci_rx_work [ 1716.958544][T24164] Call Trace: [ 1716.958553][T24164] [ 1716.958563][T24164] dump_stack_lvl+0xe8/0x150 [ 1716.958594][T24164] sysfs_create_dir_ns+0x271/0x2a0 [ 1716.958630][T24164] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1716.958666][T24164] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1716.958704][T24164] ? rt_spin_unlock+0x160/0x200 [ 1716.958736][T24164] kobject_add_internal+0x631/0xd10 [ 1716.958777][T24164] kobject_add+0x163/0x240 [ 1716.958807][T24164] ? __pfx_kobject_add+0x10/0x10 [ 1716.958841][T24164] ? get_device_parent+0x370/0x3a0 [ 1716.958888][T24164] device_add+0x408/0xbb0 [ 1716.958918][T24164] hci_conn_add_sysfs+0xd5/0x210 [ 1716.958945][T24164] le_conn_complete_evt+0x10e6/0x16b0 [ 1716.958984][T24164] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1716.959012][T24164] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1716.959035][T24164] ? lockdep_hardirqs_on+0x7a/0x110 [ 1716.959059][T24164] ? skb_pull_data+0xfb/0x200 [ 1716.959093][T24164] hci_le_conn_complete_evt+0x187/0x470 [ 1716.959141][T24164] hci_event_packet+0x659/0xef0 [ 1716.959173][T24164] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1716.959199][T24164] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1716.959223][T24164] ? __pfx_hci_event_packet+0x10/0x10 [ 1716.959243][T24164] ? rt_spin_unlock+0x14f/0x200 [ 1716.959279][T24164] ? hci_send_to_monitor+0xe2/0x590 [ 1716.959309][T24164] hci_rx_work+0x3ee/0x1040 [ 1716.959340][T24164] ? process_scheduled_works+0xa70/0x1860 [ 1716.959365][T24164] process_scheduled_works+0xb5d/0x1860 [ 1716.959421][T24164] ? __pfx_process_scheduled_works+0x10/0x10 [ 1716.959450][T24164] ? assign_work+0x3d5/0x5e0 [ 1716.959476][T24164] worker_thread+0xa53/0xfc0 [ 1716.959528][T24164] kthread+0x388/0x470 [ 1716.959556][T24164] ? __pfx_worker_thread+0x10/0x10 [ 1716.959576][T24164] ? __pfx_kthread+0x10/0x10 [ 1716.959606][T24164] ret_from_fork+0x514/0xb70 [ 1716.959635][T24164] ? __pfx_ret_from_fork+0x10/0x10 [ 1716.959660][T24164] ? __switch_to+0xc79/0x1410 [ 1716.959697][T24164] ? __pfx_kthread+0x10/0x10 [ 1716.959728][T24164] ret_from_fork_asm+0x1a/0x30 [ 1716.959776][T24164] [ 1716.959920][T24164] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1716.959964][T24164] Bluetooth: hci4: failed to register connection device [ 1717.554871][T26796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6849'. [ 1718.345784][ T3358] bridge_slave_1: left allmulticast mode [ 1718.345823][ T3358] bridge_slave_1: left promiscuous mode [ 1718.346114][ T3358] bridge0: port 2(bridge_slave_1) entered disabled state [ 1718.504995][ T3358] bridge_slave_0: left allmulticast mode [ 1718.505020][ T3358] bridge_slave_0: left promiscuous mode [ 1718.505197][ T3358] bridge0: port 1(bridge_slave_0) entered disabled state [ 1718.565535][T26825] fuse: Invalid rootmode [ 1719.402992][ T3358] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1719.495213][ T3358] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1719.498673][T26831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6859'. [ 1719.561882][ T3358] bond0 (unregistering): Released all slaves [ 1720.908222][ T3358] hsr_slave_0: left promiscuous mode [ 1720.943794][ T3358] hsr_slave_1: left promiscuous mode [ 1720.947189][ T3358] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1720.947216][ T3358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1720.995657][ T3358] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1720.996204][ T3358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1721.171255][T24164] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 1721.324836][ T3358] veth1_macvtap: left promiscuous mode [ 1721.324958][ T3358] veth0_macvtap: left promiscuous mode [ 1721.326396][ T3358] veth1_vlan: left promiscuous mode [ 1721.340362][ T3358] veth0_vlan: left promiscuous mode [ 1722.302733][ T3358] team0 (unregistering): Port device team_slave_1 removed [ 1722.362989][ T3358] team0 (unregistering): Port device team_slave_0 removed [ 1723.354200][T24164] Bluetooth: hci4: command 0x0406 tx timeout [ 1723.514613][T24164] Bluetooth: Wrong link type (-22) [ 1724.884102][T26187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1724.936851][T26187] 8021q: adding VLAN 0 to HW filter on device team0 [ 1725.029859][T20150] bridge0: port 1(bridge_slave_0) entered blocking state [ 1725.030606][T20150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1725.112444][ T174] bridge0: port 2(bridge_slave_1) entered blocking state [ 1725.112591][ T174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1727.347496][ T5266] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1730.635560][T26187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1731.036497][T26412] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1731.100481][T26412] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1731.116741][T26412] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1731.213861][T26412] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1731.217212][T26412] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1731.321381][T26412] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1731.331760][T26412] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1731.379715][T26412] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1731.964721][T26412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1732.255352][T26412] 8021q: adding VLAN 0 to HW filter on device team0 [ 1732.280529][ T174] bridge0: port 1(bridge_slave_0) entered blocking state [ 1732.280746][ T174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1732.284888][T26187] veth0_vlan: entered promiscuous mode [ 1732.416923][T20150] bridge0: port 2(bridge_slave_1) entered blocking state [ 1732.419102][T20150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1732.753393][T24164] Bluetooth: hci1: command 0x0406 tx timeout [ 1732.956299][T26187] veth1_vlan: entered promiscuous mode [ 1734.208379][T26187] veth0_macvtap: entered promiscuous mode [ 1734.328071][T26187] veth1_macvtap: entered promiscuous mode [ 1734.407144][T26187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1734.438088][T26187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1734.467655][T26192] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1734.470647][T26192] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1734.477855][ T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1734.485982][ T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1735.565274][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1735.565357][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1737.645035][T23721] Bluetooth: hci4: command 0x0406 tx timeout [ 1737.675801][ T3031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1737.675822][ T3031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1738.092227][ T3031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1738.092251][ T3031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1738.656934][T26412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1738.956163][T26412] veth0_vlan: entered promiscuous mode [ 1738.979531][T26412] veth1_vlan: entered promiscuous mode [ 1739.442592][T26412] veth0_macvtap: entered promiscuous mode [ 1739.459136][T26412] veth1_macvtap: entered promiscuous mode [ 1739.496944][T26412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1739.521116][T26412] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1739.569408][ T174] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1739.581312][ T174] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1739.581958][ T174] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1739.624818][ T174] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1741.779380][ T2849] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1741.779406][ T2849] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1742.151418][ T2977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1742.151439][ T2977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1742.930939][T24164] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 1742.930968][T24164] CPU: 1 UID: 0 PID: 24164 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1742.930996][T24164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1742.931010][T24164] Workqueue: hci2 hci_rx_work [ 1742.931041][T24164] Call Trace: [ 1742.931050][T24164] [ 1742.931060][T24164] dump_stack_lvl+0xe8/0x150 [ 1742.931091][T24164] sysfs_create_dir_ns+0x271/0x2a0 [ 1742.931147][T24164] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1742.931178][T24164] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1742.931216][T24164] ? rt_spin_unlock+0x160/0x200 [ 1742.931249][T24164] kobject_add_internal+0x631/0xd10 [ 1742.931287][T24164] kobject_add+0x163/0x240 [ 1742.931322][T24164] ? __pfx_kobject_add+0x10/0x10 [ 1742.931360][T24164] ? get_device_parent+0x370/0x3a0 [ 1742.931390][T24164] device_add+0x408/0xbb0 [ 1742.931420][T24164] hci_conn_add_sysfs+0xd5/0x210 [ 1742.931448][T24164] le_conn_complete_evt+0x10e6/0x16b0 [ 1742.931498][T24164] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1742.931531][T24164] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1742.931556][T24164] ? lockdep_hardirqs_on+0x7a/0x110 [ 1742.931583][T24164] ? skb_pull_data+0xfb/0x200 [ 1742.931621][T24164] hci_le_conn_complete_evt+0x187/0x470 [ 1742.931661][T24164] hci_event_packet+0x659/0xef0 [ 1742.931692][T24164] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1742.931720][T24164] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1742.931746][T24164] ? __pfx_hci_event_packet+0x10/0x10 [ 1742.931769][T24164] ? rt_spin_unlock+0x14f/0x200 [ 1742.931811][T24164] ? hci_send_to_monitor+0xe2/0x590 [ 1742.931847][T24164] hci_rx_work+0x3ee/0x1040 [ 1742.931876][T24164] ? process_scheduled_works+0xa70/0x1860 [ 1742.931898][T24164] process_scheduled_works+0xb5d/0x1860 [ 1742.931958][T24164] ? __pfx_process_scheduled_works+0x10/0x10 [ 1742.931992][T24164] ? assign_work+0x3d5/0x5e0 [ 1742.932023][T24164] worker_thread+0xa53/0xfc0 [ 1742.932076][T24164] kthread+0x388/0x470 [ 1742.932115][T24164] ? __pfx_worker_thread+0x10/0x10 [ 1742.932139][T24164] ? __pfx_kthread+0x10/0x10 [ 1742.932170][T24164] ret_from_fork+0x514/0xb70 [ 1742.932200][T24164] ? __pfx_ret_from_fork+0x10/0x10 [ 1742.932224][T24164] ? __switch_to+0xc79/0x1410 [ 1742.932260][T24164] ? __pfx_kthread+0x10/0x10 [ 1742.932289][T24164] ret_from_fork_asm+0x1a/0x30 [ 1742.932334][T24164] [ 1742.932654][T24164] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1742.932699][T24164] Bluetooth: hci2: failed to register connection device [ 1743.004614][T24164] ================================================================== [ 1743.004634][T24164] BUG: KASAN: slab-use-after-free in l2cap_connect_cfm+0x902/0x1560 [ 1743.004683][T24164] Read of size 8 at addr ffff8880979e4500 by task kworker/u9:3/24164 [ 1743.004701][T24164] [ 1743.004713][T24164] CPU: 1 UID: 0 PID: 24164 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1743.004737][T24164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1743.004751][T24164] Workqueue: hci2 hci_rx_work [ 1743.004777][T24164] Call Trace: [ 1743.004785][T24164] [ 1743.004793][T24164] dump_stack_lvl+0xe8/0x150 [ 1743.004819][T24164] print_address_description+0x55/0x1e0 [ 1743.004843][T24164] ? l2cap_connect_cfm+0x902/0x1560 [ 1743.004869][T24164] print_report+0x58/0x70 [ 1743.004888][T24164] kasan_report+0x117/0x150 [ 1743.004911][T24164] ? l2cap_connect_cfm+0x902/0x1560 [ 1743.004944][T24164] l2cap_connect_cfm+0x902/0x1560 [ 1743.004979][T24164] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1743.005005][T24164] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1743.005029][T24164] ? lockdep_hardirqs_on+0x7a/0x110 [ 1743.005051][T24164] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1743.005072][T24164] ? mutex_lock_nested+0x152/0x1d0 [ 1743.005099][T24164] ? hci_connect_cfm+0x2c/0x140 [ 1743.005134][T24164] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1743.005164][T24164] hci_connect_cfm+0x95/0x140 [ 1743.005190][T24164] le_conn_complete_evt+0x1134/0x16b0 [ 1743.005224][T24164] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1743.005251][T24164] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1743.005273][T24164] ? lockdep_hardirqs_on+0x7a/0x110 [ 1743.005295][T24164] ? skb_pull_data+0xfb/0x200 [ 1743.005326][T24164] hci_le_conn_complete_evt+0x187/0x470 [ 1743.005358][T24164] hci_event_packet+0x659/0xef0 [ 1743.005384][T24164] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1743.005412][T24164] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1743.005436][T24164] ? __pfx_hci_event_packet+0x10/0x10 [ 1743.005458][T24164] ? rt_spin_unlock+0x14f/0x200 [ 1743.005491][T24164] ? hci_send_to_monitor+0xe2/0x590 [ 1743.005522][T24164] hci_rx_work+0x3ee/0x1040 [ 1743.005547][T24164] ? process_scheduled_works+0xa70/0x1860 [ 1743.005572][T24164] process_scheduled_works+0xb5d/0x1860 [ 1743.005609][T24164] ? __pfx_process_scheduled_works+0x10/0x10 [ 1743.005635][T24164] ? assign_work+0x3d5/0x5e0 [ 1743.005657][T24164] worker_thread+0xa53/0xfc0 [ 1743.005692][T24164] kthread+0x388/0x470 [ 1743.005717][T24164] ? __pfx_worker_thread+0x10/0x10 [ 1743.005739][T24164] ? __pfx_kthread+0x10/0x10 [ 1743.005766][T24164] ret_from_fork+0x514/0xb70 [ 1743.005790][T24164] ? __pfx_ret_from_fork+0x10/0x10 [ 1743.005812][T24164] ? __switch_to+0xc79/0x1410 [ 1743.005842][T24164] ? __pfx_kthread+0x10/0x10 [ 1743.005868][T24164] ret_from_fork_asm+0x1a/0x30 [ 1743.005899][T24164] [ 1743.005906][T24164] [ 1743.005910][T24164] Allocated by task 24164: [ 1743.005921][T24164] kasan_save_track+0x3e/0x80 [ 1743.005940][T24164] __kasan_kmalloc+0x93/0xb0 [ 1743.005959][T24164] __kmalloc_cache_noprof+0x3a6/0x690 [ 1743.005979][T24164] l2cap_chan_create+0x51/0x7a0 [ 1743.005999][T24164] l2cap_sock_new_connection_cb+0x182/0x2e0 [ 1743.006018][T24164] l2cap_connect_cfm+0x368/0x1560 [ 1743.006046][T24164] hci_connect_cfm+0x95/0x140 [ 1743.006069][T24164] le_conn_complete_evt+0x1134/0x16b0 [ 1743.006096][T24164] hci_le_conn_complete_evt+0x187/0x470 [ 1743.006130][T24164] hci_event_packet+0x659/0xef0 [ 1743.006149][T24164] hci_rx_work+0x3ee/0x1040 [ 1743.006168][T24164] process_scheduled_works+0xb5d/0x1860 [ 1743.006188][T24164] worker_thread+0xa53/0xfc0 [ 1743.006208][T24164] kthread+0x388/0x470 [ 1743.006233][T24164] ret_from_fork+0x514/0xb70 [ 1743.006252][T24164] ret_from_fork_asm+0x1a/0x30 [ 1743.006275][T24164] [ 1743.006281][T24164] Freed by task 27160: [ 1743.006290][T24164] kasan_save_track+0x3e/0x80 [ 1743.006307][T24164] kasan_save_free_info+0x46/0x50 [ 1743.006333][T24164] __kasan_slab_free+0x5c/0x80 [ 1743.006352][T24164] kfree+0x1c5/0x6c0 [ 1743.006369][T24164] l2cap_sock_cleanup_listen+0xf0/0x440 [ 1743.006387][T24164] l2cap_sock_release+0x6e/0x270 [ 1743.006416][T24164] sock_close+0xc3/0x240 [ 1743.006440][T24164] __fput+0x461/0xa70 [ 1743.006467][T24164] task_work_run+0x1d9/0x270 [ 1743.006493][T24164] exit_to_user_mode_loop+0xed/0x480 [ 1743.006517][T24164] do_syscall_64+0x33e/0xf80 [ 1743.006536][T24164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1743.006555][T24164] [ 1743.006559][T24164] The buggy address belongs to the object at ffff8880979e4000 [ 1743.006559][T24164] which belongs to the cache kmalloc-2k of size 2048 [ 1743.006576][T24164] The buggy address is located 1280 bytes inside of [ 1743.006576][T24164] freed 2048-byte region [ffff8880979e4000, ffff8880979e4800) [ 1743.006594][T24164] [ 1743.006600][T24164] The buggy address belongs to the physical page: [ 1743.006610][T24164] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x979e0 [ 1743.006629][T24164] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1743.006646][T24164] flags: 0x80000000000040(head|node=0|zone=1) [ 1743.006662][T24164] page_type: f5(slab) [ 1743.006680][T24164] raw: 0080000000000040 ffff88801a010000 dead000000000100 dead000000000122 [ 1743.006698][T24164] raw: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 1743.006716][T24164] head: 0080000000000040 ffff88801a010000 dead000000000100 dead000000000122 [ 1743.006733][T24164] head: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 1743.006751][T24164] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1743.006767][T24164] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 1743.006778][T24164] page dumped because: kasan: bad access detected [ 1743.006787][T24164] page_owner tracks the page as allocated [ 1743.006795][T24164] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2849, tgid 2849 (kworker/u8:11), ts 1550107467397, free_ts 1549928641106 [ 1743.006831][T24164] post_alloc_hook+0x231/0x280 [ 1743.006851][T24164] get_page_from_freelist+0x27c8/0x2840 [ 1743.006873][T24164] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1743.006898][T24164] allocate_slab+0x77/0x660 [ 1743.006921][T24164] refill_objects+0x33c/0x3d0 [ 1743.006944][T24164] __pcs_replace_empty_main+0x373/0x720 [ 1743.006972][T24164] __kmalloc_noprof+0x530/0x7b0 [ 1743.006990][T24164] ___neigh_create+0x722/0x2350 [ 1743.007016][T24164] ip6_finish_output2+0x729/0x1430 [ 1743.007041][T24164] ip6_output+0x340/0x550 [ 1743.007060][T24164] ndisc_send_skb+0xd0b/0x1670 [ 1743.007076][T24164] ndisc_send_ns+0xd7/0x160 [ 1743.007091][T24164] addrconf_dad_work+0xbea/0x1680 [ 1743.007119][T24164] process_scheduled_works+0xb5d/0x1860 [ 1743.007139][T24164] worker_thread+0xa53/0xfc0 [ 1743.007159][T24164] kthread+0x388/0x470 [ 1743.007183][T24164] page last free pid 24640 tgid 24640 stack trace: [ 1743.007194][T24164] __free_frozen_pages+0xfa6/0x10f0 [ 1743.007215][T24164] __slab_free+0x252/0x2a0 [ 1743.007235][T24164] qlist_free_all+0x99/0x100 [ 1743.007251][T24164] kasan_quarantine_reduce+0x148/0x160 [ 1743.007268][T24164] __kasan_slab_alloc+0x22/0x80 [ 1743.007287][T24164] kmem_cache_alloc_noprof+0x33b/0x680 [ 1743.007306][T24164] vm_area_alloc+0x24/0x140 [ 1743.007328][T24164] mmap_region+0x1203/0x2280 [ 1743.007355][T24164] do_mmap+0xc2f/0x10c0 [ 1743.007372][T24164] vm_mmap_pgoff+0x2cc/0x4f0 [ 1743.007389][T24164] ksys_mmap_pgoff+0x4e8/0x720 [ 1743.007407][T24164] do_syscall_64+0x15f/0xf80 [ 1743.007426][T24164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1743.007445][T24164] [ 1743.007450][T24164] Memory state around the buggy address: [ 1743.007462][T24164] ffff8880979e4400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1743.007475][T24164] ffff8880979e4480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1743.007488][T24164] >ffff8880979e4500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1743.007499][T24164] ^ [ 1743.007509][T24164] ffff8880979e4580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1743.007522][T24164] ffff8880979e4600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1743.007532][T24164] ================================================================== [ 1743.008702][T24164] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1743.008720][T24164] CPU: 1 UID: 0 PID: 24164 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1743.008744][T24164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1743.008758][T24164] Workqueue: hci2 hci_rx_work [ 1743.008784][T24164] Call Trace: [ 1743.008791][T24164] [ 1743.008800][T24164] vpanic+0x56c/0xa60 [ 1743.008828][T24164] ? __pfx_vpanic+0x10/0x10 [ 1743.008857][T24164] panic+0xc5/0xd0 [ 1743.008882][T24164] ? __pfx_panic+0x10/0x10 [ 1743.008908][T24164] ? preempt_schedule_thunk+0x16/0x30 [ 1743.008941][T24164] ? l2cap_connect_cfm+0x902/0x1560 [ 1743.008971][T24164] ? preempt_schedule_thunk+0x16/0x30 [ 1743.009002][T24164] ? l2cap_connect_cfm+0x902/0x1560 [ 1743.009030][T24164] check_panic_on_warn+0x89/0xb0 [ 1743.009061][T24164] ? l2cap_connect_cfm+0x902/0x1560 [ 1743.009090][T24164] end_report+0x73/0x170 [ 1743.009122][T24164] ? l2cap_connect_cfm+0x902/0x1560 [ 1743.009149][T24164] kasan_report+0x128/0x150 [ 1743.009171][T24164] ? l2cap_connect_cfm+0x902/0x1560 [ 1743.009205][T24164] l2cap_connect_cfm+0x902/0x1560 [ 1743.009237][T24164] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1743.009263][T24164] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1743.009284][T24164] ? lockdep_hardirqs_on+0x7a/0x110 [ 1743.009305][T24164] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1743.009328][T24164] ? mutex_lock_nested+0x152/0x1d0 [ 1743.009356][T24164] ? hci_connect_cfm+0x2c/0x140 [ 1743.009382][T24164] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1743.009413][T24164] hci_connect_cfm+0x95/0x140 [ 1743.009441][T24164] le_conn_complete_evt+0x1134/0x16b0 [ 1743.009473][T24164] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1743.009499][T24164] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1743.009521][T24164] ? lockdep_hardirqs_on+0x7a/0x110 [ 1743.009543][T24164] ? skb_pull_data+0xfb/0x200 [ 1743.009573][T24164] hci_le_conn_complete_evt+0x187/0x470 [ 1743.009604][T24164] hci_event_packet+0x659/0xef0 [ 1743.009628][T24164] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1743.009655][T24164] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1743.009679][T24164] ? __pfx_hci_event_packet+0x10/0x10 [ 1743.009699][T24164] ? rt_spin_unlock+0x14f/0x200 [ 1743.009731][T24164] ? hci_send_to_monitor+0xe2/0x590 [ 1743.009758][T24164] hci_rx_work+0x3ee/0x1040 [ 1743.009783][T24164] ? process_scheduled_works+0xa70/0x1860 [ 1743.009804][T24164] process_scheduled_works+0xb5d/0x1860 [ 1743.009839][T24164] ? __pfx_process_scheduled_works+0x10/0x10 [ 1743.009863][T24164] ? assign_work+0x3d5/0x5e0 [ 1743.009885][T24164] worker_thread+0xa53/0xfc0 [ 1743.009920][T24164] kthread+0x388/0x470 [ 1743.009944][T24164] ? __pfx_worker_thread+0x10/0x10 [ 1743.009963][T24164] ? __pfx_kthread+0x10/0x10 [ 1743.009989][T24164] ret_from_fork+0x514/0xb70 [ 1743.010013][T24164] ? __pfx_ret_from_fork+0x10/0x10 [ 1743.010034][T24164] ? __switch_to+0xc79/0x1410 [ 1743.010064][T24164] ? __pfx_kthread+0x10/0x10 [ 1743.010088][T24164] ret_from_fork_asm+0x1a/0x30 [ 1743.010130][T24164] [ 1743.011217][T24164] Kernel Offset: disabled