last executing test programs: 2.707255671s ago: executing program 1 (id=2): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x200000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @sock_ops=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000000)=ANY=[@ANYBLOB="00cdf0b3373e19744a101e8c91407176ad69f47a10954db9dd96888078f300e4fd5ccd1539e0c9462c274ee70479ae4a05d9a547611852"], 0x1, 0x556, &(0x7f0000000840)="$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") 2.504201747s ago: executing program 1 (id=5): process_vm_readv(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000f, 0x810, 0xffffffffffffffff, 0xc45f3000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) ftruncate(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, 0x0, 0x0) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r3, &(0x7f0000000200), 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) shutdown(r3, 0x1) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e74000905"], 0x0) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) close(r4) 1.875259329s ago: executing program 3 (id=4): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) close(0xffffffffffffffff) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) fcntl$F_GET_RW_HINT(r2, 0x40b, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00', @ANYRES32=0x0], 0x1c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x10, &(0x7f0000000040)={[{@noblock_validity}, {@stripe}, {@jqfmt_vfsv1}]}, 0x0, 0x45d, &(0x7f0000001480)="$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") 303.590346ms ago: executing program 3 (id=6): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) 0s ago: executing program 0 (id=1): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x34, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.143' (ED25519) to the list of known hosts. syzkaller login: [ 81.896789][ T5777] cgroup: Unknown subsys name 'net' [ 82.031326][ T5777] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.702919][ T5777] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.251064][ T5798] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.260651][ T5798] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.261700][ T5796] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.268877][ T5798] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.283573][ T5798] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.292406][ T5798] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.300043][ T5798] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.319027][ T5791] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.331056][ T5801] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.339448][ T5791] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.350369][ T5791] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.352765][ T5803] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.358679][ T5791] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.372173][ T5801] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.382043][ T5801] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.389514][ T5803] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.397505][ T5801] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.405179][ T5791] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.413092][ T5791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.422720][ T5791] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.423050][ T5803] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.437233][ T5791] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.447741][ T5791] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.456266][ T5791] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.955689][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 86.979765][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 87.036852][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 87.125390][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 87.285394][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.298103][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.306255][ T5788] bridge_slave_0: entered allmulticast mode [ 87.314363][ T5788] bridge_slave_0: entered promiscuous mode [ 87.361288][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.368494][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.380687][ T5787] bridge_slave_0: entered allmulticast mode [ 87.388258][ T5787] bridge_slave_0: entered promiscuous mode [ 87.403412][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.410626][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.418155][ T5787] bridge_slave_1: entered allmulticast mode [ 87.425503][ T5787] bridge_slave_1: entered promiscuous mode [ 87.441852][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.449102][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.456778][ T5788] bridge_slave_1: entered allmulticast mode [ 87.464351][ T5788] bridge_slave_1: entered promiscuous mode [ 87.575650][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.589164][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.633642][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.646224][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.700696][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.709427][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.716763][ T5789] bridge_slave_0: entered allmulticast mode [ 87.724707][ T5789] bridge_slave_0: entered promiscuous mode [ 87.749542][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.757018][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.764764][ T5790] bridge_slave_0: entered allmulticast mode [ 87.772686][ T5790] bridge_slave_0: entered promiscuous mode [ 87.814560][ T5788] team0: Port device team_slave_0 added [ 87.824271][ T5787] team0: Port device team_slave_0 added [ 87.830880][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.838602][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.846662][ T5789] bridge_slave_1: entered allmulticast mode [ 87.853831][ T5789] bridge_slave_1: entered promiscuous mode [ 87.868649][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.875925][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.888699][ T5790] bridge_slave_1: entered allmulticast mode [ 87.896143][ T5790] bridge_slave_1: entered promiscuous mode [ 87.904611][ T5788] team0: Port device team_slave_1 added [ 87.925628][ T5787] team0: Port device team_slave_1 added [ 88.028518][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.041127][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.052376][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.059820][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.086968][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.102040][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.114700][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.124659][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.131794][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.162304][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.175713][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.182898][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.209104][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.254230][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.261931][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.288747][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.337640][ T5790] team0: Port device team_slave_0 added [ 88.352415][ T5790] team0: Port device team_slave_1 added [ 88.389980][ T5789] team0: Port device team_slave_0 added [ 88.396584][ T5791] Bluetooth: hci0: command tx timeout [ 88.401865][ T5789] team0: Port device team_slave_1 added [ 88.450254][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.457671][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.484654][ T5791] Bluetooth: hci2: command tx timeout [ 88.484683][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.504555][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.512013][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.538336][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.551420][ T5791] Bluetooth: hci3: command tx timeout [ 88.551441][ T5795] Bluetooth: hci1: command tx timeout [ 88.574415][ T5787] hsr_slave_0: entered promiscuous mode [ 88.581389][ T5787] hsr_slave_1: entered promiscuous mode [ 88.620966][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.628031][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.655535][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.672870][ T5788] hsr_slave_0: entered promiscuous mode [ 88.679428][ T5788] hsr_slave_1: entered promiscuous mode [ 88.685990][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.693976][ T5788] Cannot create hsr debugfs directory [ 88.716056][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.723219][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.749862][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.799343][ T5790] hsr_slave_0: entered promiscuous mode [ 88.805929][ T5790] hsr_slave_1: entered promiscuous mode [ 88.812728][ T5790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.820420][ T5790] Cannot create hsr debugfs directory [ 88.949149][ T5789] hsr_slave_0: entered promiscuous mode [ 88.956125][ T5789] hsr_slave_1: entered promiscuous mode [ 88.963811][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.972000][ T5789] Cannot create hsr debugfs directory [ 89.338869][ T5787] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.352300][ T5787] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.365361][ T5787] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.378357][ T5787] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.447019][ T5788] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.458980][ T5788] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.474898][ T5788] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.485772][ T5788] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.578374][ T5789] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.623450][ T5789] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.634407][ T5789] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.645711][ T5789] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.705042][ T5790] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.730681][ T5790] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.753885][ T5790] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.769192][ T5790] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.844906][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.887175][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.923733][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.969994][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.977510][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.987860][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.995082][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.008892][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.040052][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.047266][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.058471][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.065747][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.127170][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.196702][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.220197][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.227493][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.270486][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.318326][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.325587][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.427509][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.472392][ T5791] Bluetooth: hci0: command tx timeout [ 90.479391][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.487118][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.520711][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.528002][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.552008][ T5791] Bluetooth: hci2: command tx timeout [ 90.631738][ T5791] Bluetooth: hci1: command tx timeout [ 90.632471][ T5795] Bluetooth: hci3: command tx timeout [ 90.805432][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.854736][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.924677][ T5787] veth0_vlan: entered promiscuous mode [ 90.949716][ T5787] veth1_vlan: entered promiscuous mode [ 91.044744][ T5788] veth0_vlan: entered promiscuous mode [ 91.067908][ T5787] veth0_macvtap: entered promiscuous mode [ 91.085124][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.110658][ T5788] veth1_vlan: entered promiscuous mode [ 91.127768][ T5787] veth1_macvtap: entered promiscuous mode [ 91.198249][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.210545][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.249327][ T5788] veth0_macvtap: entered promiscuous mode [ 91.270949][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.287778][ T5788] veth1_macvtap: entered promiscuous mode [ 91.303345][ T5787] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.312412][ T5787] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.322703][ T5787] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.331943][ T5787] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.353361][ T5789] veth0_vlan: entered promiscuous mode [ 91.388439][ T5789] veth1_vlan: entered promiscuous mode [ 91.420412][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.433741][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.446850][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.475920][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.488616][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.501049][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.536147][ T5788] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.545258][ T5788] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.555215][ T5788] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.564091][ T5788] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.625491][ T5790] veth0_vlan: entered promiscuous mode [ 91.645842][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.665843][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.682860][ T5789] veth0_macvtap: entered promiscuous mode [ 91.725887][ T4437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.726492][ T5789] veth1_macvtap: entered promiscuous mode [ 91.740406][ T4437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.753524][ T5790] veth1_vlan: entered promiscuous mode [ 91.810708][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.826272][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.839244][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.849843][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.863837][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.937801][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.957363][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.979160][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.990405][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.002457][ T5879] syz.1.2[5879]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 92.008561][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.018617][ T5879] loop1: detected capacity change from 0 to 164 [ 92.052723][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.066960][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.118337][ T5789] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.130153][ T5789] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.144858][ T5789] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.155531][ T5789] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.195701][ T5790] veth0_macvtap: entered promiscuous mode [ 92.250488][ T9] cfg80211: failed to load regulatory.db [ 92.278500][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.307114][ T5790] veth1_macvtap: entered promiscuous mode [ 92.327171][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.371116][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.383005][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.397351][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.411006][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.421439][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.432582][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.457812][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.469970][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.487587][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.504631][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.528958][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.547265][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.557883][ T5795] Bluetooth: hci0: command tx timeout [ 92.565376][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.590395][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.640830][ T5790] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.649712][ T5795] Bluetooth: hci2: command tx timeout [ 92.674762][ T5790] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.684189][ T5790] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.693535][ T5790] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.706047][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.714431][ T5795] Bluetooth: hci3: command tx timeout [ 92.721622][ T5795] Bluetooth: hci1: command tx timeout [ 92.725113][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.822396][ T5846] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 93.124890][ T5888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 93.190971][ T5889] loop3: detected capacity change from 0 to 512 [ 93.897237][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.922345][ T5846] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 93.936207][ T5889] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm syz.3.4: bg 0: block 16: invalid block bitmap [ 93.949921][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.961579][ T5889] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6642: Corrupt filesystem [ 93.991895][ T5889] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.4: attempt to clear invalid blocks 1669132790 len 1 [ 94.014256][ T5889] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.4: invalid indirect mapped block 4294967295 (level 1) [ 94.017418][ T5846] usb 2-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 94.053983][ T5889] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.4: invalid indirect mapped block 4294967295 (level 2) [ 94.056436][ T5846] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 94.078612][ T5889] EXT4-fs (loop3): 1 truncate cleaned up [ 94.088702][ T5889] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.089834][ T5846] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 94.164740][ T5846] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.180402][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 94.216512][ T5846] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 94.308784][ T5888] syz.3.4 (5888) used greatest stack depth: 17032 bytes left [ 94.376512][ T5846] snd-usb-audio: probe of 2-1:27.0 failed with error -2 [ 94.394990][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.420763][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.506760][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.554715][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.575594][ T5799] udevd[5799]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 94.599996][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.631791][ T5795] Bluetooth: hci0: command tx timeout [ 94.711857][ T5795] Bluetooth: hci2: command tx timeout [ 94.753694][ T4437] BUG: assuming non migratable context at include/linux/filter.h:599 [ 94.783927][ T4437] in_atomic(): 0, irqs_disabled(): 0, migration_disabled() 0 pid: 4437, name: kworker/u4:8 [ 94.792845][ T5795] Bluetooth: hci1: command tx timeout [ 94.798127][ T5791] Bluetooth: hci3: command tx timeout [ 94.832301][ T4437] 6 locks held by kworker/u4:8/4437: [ 94.839111][ T4437] #0: ffff88802d0dad38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 94.907317][ T4437] #1: ffffc9000e8e7d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 94.920405][ T4437] #2: ffffffff8dfbb188 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x14e0 [ 94.930090][ T4437] #3: ffff88805d192538 (&idev->mc_lock){+.+.}-{3:3}, at: ipv6_mc_dad_complete+0x31/0x210 [ 94.941474][ T4437] #4: ffffffff8cd2fba0 (rcu_read_lock){....}-{1:2}, at: mld_sendpack+0x1df/0xd70 [ 94.951002][ T4437] #5: ffffffff8cd2fba0 (rcu_read_lock){....}-{1:2}, at: nf_hook+0x9e/0x370 [ 94.969410][ T4437] CPU: 1 PID: 4437 Comm: kworker/u4:8 Not tainted 6.6.100-syzkaller #0 [ 94.977705][ T4437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 94.987803][ T4437] Workqueue: ipv6_addrconf addrconf_dad_work [ 94.993844][ T4437] Call Trace: [ 94.997144][ T4437] [ 95.000098][ T4437] dump_stack_lvl+0x16c/0x230 [ 95.004902][ T4437] ? show_regs_print_info+0x20/0x20 [ 95.010158][ T4437] __cant_migrate+0x234/0x2e0 [ 95.014951][ T4437] ? __cant_sleep+0x210/0x210 [ 95.019644][ T4437] ? __local_bh_enable_ip+0x12e/0x1c0 [ 95.025037][ T4437] ? ip6table_mangle_hook+0x298/0x6e0 [ 95.030438][ T4437] ? nf_nat_ipv6_fn+0xe8/0x2d0 [ 95.035234][ T4437] nf_hook_run_bpf+0x90/0x1e0 [ 95.039970][ T4437] ? ip6table_mangle_table_init+0x60/0x60 [ 95.045731][ T4437] ? bpf_nf_link_attach+0x810/0x810 [ 95.051038][ T4437] ? ip6t_do_table+0x1344/0x1500 [ 95.056008][ T4437] ? nf_nat_ipv6_out+0x21d/0x380 [ 95.061038][ T4437] ? bpf_nf_link_attach+0x810/0x810 [ 95.066250][ T4437] nf_hook_slow+0xbd/0x200 [ 95.070685][ T4437] nf_hook+0x215/0x370 [ 95.074768][ T4437] ? ip6t_do_table+0x1d5/0x1500 [ 95.079641][ T4437] ? nf_hook+0x9e/0x370 [ 95.083808][ T4437] ? ip6_make_skb+0x4c0/0x4c0 [ 95.088502][ T4437] ? ip6_output+0x3b0/0x3b0 [ 95.093032][ T4437] ? NF_HOOK+0x1cb/0x470 [ 95.097296][ T4437] ? __lock_acquire+0x7c80/0x7c80 [ 95.102360][ T4437] ip6_output+0x272/0x3b0 [ 95.106718][ T4437] ? ip6_output+0x3b0/0x3b0 [ 95.111258][ T4437] NF_HOOK+0x161/0x470 [ 95.115370][ T4437] ? mld_send_report+0x2e0/0x2e0 [ 95.120328][ T4437] ? NF_HOOK+0x470/0x470 [ 95.124680][ T4437] ? icmp6_dst_alloc+0x388/0x400 [ 95.129653][ T4437] ? icmp6_dst_alloc+0x388/0x400 [ 95.134624][ T4437] mld_sendpack+0x7f9/0xd70 [ 95.139165][ T4437] ? mld_sendpack+0x1df/0xd70 [ 95.143892][ T4437] ? add_grec+0x1660/0x1660 [ 95.148455][ T4437] ? mld_send_initial_cr+0x1b3/0x240 [ 95.153822][ T4437] ipv6_mc_dad_complete+0x88/0x210 [ 95.159167][ T4437] addrconf_dad_completed+0x6d0/0xd40 [ 95.164583][ T4437] ? addrconf_dad_stop+0x430/0x430 [ 95.169732][ T4437] addrconf_dad_work+0xc4e/0x14e0 [ 95.174797][ T4437] ? ipv6_get_saddr_eval+0xee0/0xee0 [ 95.180200][ T4437] ? read_lock_is_recursive+0x20/0x20 [ 95.185727][ T4437] ? _raw_spin_unlock_irq+0x23/0x50 [ 95.190977][ T4437] ? process_scheduled_works+0x957/0x15b0 [ 95.196735][ T4437] ? process_scheduled_works+0x957/0x15b0 [ 95.202491][ T4437] process_scheduled_works+0xa45/0x15b0 [ 95.208084][ T4437] ? assign_work+0x400/0x400 [ 95.212806][ T4437] ? assign_work+0x39e/0x400 [ 95.217420][ T4437] worker_thread+0xa55/0xfc0 [ 95.222066][ T4437] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 95.228072][ T4437] ? _raw_spin_unlock+0x40/0x40 [ 95.233032][ T4437] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 95.238969][ T4437] kthread+0x2fa/0x390 [ 95.243063][ T4437] ? pr_cont_work+0x560/0x560 [ 95.247768][ T4437] ? kthread_blkcg+0xd0/0xd0 [ 95.252466][ T4437] ret_from_fork+0x48/0x80 [ 95.256913][ T4437] ? kthread_blkcg+0xd0/0xd0 [ 95.261518][ T4437] ret_from_fork_asm+0x11/0x20 [ 95.266342][ T4437] [ 95.321591][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.368361][ T5824] usb 2-1: USB disconnect, device number 2