last executing test programs: 4.913668616s ago: executing program 2 (id=171): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac141400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e3bc40c7f8fd73d61164fc7d15648a9e0070949687000000000000000000000000000000000000000000000000000000227bf23d3ba4560ebd7000000000"], 0x34c}}, 0x44) 4.563885022s ago: executing program 2 (id=176): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd4d}], 0x1}, 0x0) 4.439599147s ago: executing program 2 (id=178): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000010000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 4.244892633s ago: executing program 2 (id=181): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x0, 0x0, @void, @value}, 0x10) socket$inet_dccp(0x2, 0x6, 0x0) 4.153479108s ago: executing program 2 (id=182): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00006be000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xffffc000) mmap(&(0x7f00006c9000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x8ee46000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) mmap(&(0x7f00006b7000/0x14000)=nil, 0x14000, 0x4, 0x12, r0, 0x0) 3.827047923s ago: executing program 2 (id=185): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x1, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)={0x28, r1, 0x5, 0x4, 0xb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}, @NL80211_ATTR_IE={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x0) 3.020134899s ago: executing program 3 (id=191): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x64, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x3e, 0x33, @beacon={{{}, {}, @broadcast}, 0x0, @default, 0xc9, @void, @void, @void, @val={0x4, 0x6, {0x6, 0x1, 0x400, 0x4a}}, @void, @val={0x5, 0x3, {0x4, 0xdd, 0x5}}, @void, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x5, 0xae, 0x8}}, @void, @void, @void, @void}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x64}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 2.73254452s ago: executing program 3 (id=194): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f00000087c0)={0x0, 0x0, &(0x7f0000008780)={&(0x7f0000008700)={0x34, r2, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x16ba183637aa1df2) 2.400108956s ago: executing program 0 (id=197): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000003}, 0x18) sendmsg$tipc(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000740)="fe5adb", 0x3}], 0x1}, 0x8800) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x20, 0x3fa, 0x20, 0x70bd27, 0x25dfdbfe, {0x1, 0x1, 0x0, 0x1}}, 0x20}}, 0x8000) 2.253475067s ago: executing program 3 (id=199): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/250, 0xfa}, 0x1000}], 0x1, 0x21e0, 0x0) 2.059089052s ago: executing program 3 (id=200): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x6, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000001300)={0xa, {{0x2, 0x0, @multicast2}}}, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) 1.987800152s ago: executing program 4 (id=201): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a01020000"], 0x14}}, 0x0) close(0x3) 1.858764371s ago: executing program 4 (id=202): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', 0x0}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0), 0x2}, 0x20) 1.710671509s ago: executing program 4 (id=203): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000040)={0x38, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x6, 0x13, [{0x16, 0x1}, {0x24}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.296055435s ago: executing program 1 (id=204): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 1.29385563s ago: executing program 0 (id=205): write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:'], 0xa) 1.151180142s ago: executing program 4 (id=206): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000001000030400000000fcdbdf2500000400", @ANYRES32=0x0, @ANYBLOB="21050400000000003000128009000100766c616e00000000200002800c0002001c0000001d00000006000100020000000600050088a8000008000500", @ANYRES32=r1], 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x20004084) 1.149190782s ago: executing program 3 (id=207): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2689064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.120072596s ago: executing program 1 (id=208): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f0000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000200000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0d, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.041556009s ago: executing program 0 (id=209): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000001580)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000940)={0x1f, @none}, 0x8) 916.952796ms ago: executing program 0 (id=210): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @broadcast, 'geneve0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000003c0)={0x18, 0x0, {0x1, @broadcast, 'veth0_to_bridge\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x0, @remote, 'veth0_to_batadv\x00'}}, 0x1e) 877.803476ms ago: executing program 0 (id=211): recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, 0x0}, 0x1f00) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b80)=@delchain={0xf4, 0x65, 0x810, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xc, 0x2}, {0x0, 0x9}, {0x9, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffffe}, @filter_kind_options=@f_flower={{0xb}, {0x4}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_route={{0xa}, {0xa4, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xffffffff}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0x90, 0x6, [@m_skbedit={0x8c, 0xd, 0x0, 0x0, {{0xc}, {0x4}, {0x5d, 0x6, "a707b36aaa9f7af7d3b4438eb81ccd8c40a11da73586f8e91ba98cf4b06aea06a75b1413c78cca3c419f9095aafa256bce3950c25943fca70489b3f03d378675d9c2515fcb79f523793a6f8477ff7f8e1546cfdfba51e1529b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x600400c5}, 0x40001) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 741.293354ms ago: executing program 4 (id=212): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000140)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000480)="09e438d4574c550eef57ff07ea6ce56221bd083ff2d5ab9887567d24010e05d942d414dc69d83910ba5ac0caa862489bf3bdb4d39221444bd00428b932af76806ba4ac2ae0e99c887f929ac94b1aa5cdc69b00144348dfd1ef3a386e1ceb66f7504ef937b5007927cb6276c21b94506933bd2e41b9235503903bfda1c9b5a013fe7931912575e5097f", 0x89}], 0x1}, 0x2000c015) recvmmsg(r1, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/130, 0x82}], 0x1, &(0x7f0000000340)=""/205, 0xcd}}], 0x1, 0x0, 0x0) 648.167634ms ago: executing program 1 (id=213): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}, 0x3}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x42, 0x1}, 0x10) sendmsg$tipc(r0, &(0x7f00000006c0)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20044094}, 0x0) 555.733081ms ago: executing program 3 (id=214): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @redirect={0xb, 0x3, 0x0, @broadcast, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @empty, {[@timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x0, [{@local}, {@private}, {@remote}]}, @timestamp_addr={0x44, 0x24, 0x0, 0x1, 0x0, [{@local}, {}, {@empty}, {@loopback}]}]}}}}}}}, 0x0) 510.808424ms ago: executing program 4 (id=215): socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) write$cgroup_devices(r0, &(0x7f0000000240)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRESOCT=r0], 0xffdd) 372.190262ms ago: executing program 1 (id=216): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8fffdffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e6a65585578f830e9000000", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 302.152949ms ago: executing program 0 (id=217): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x48, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "895235361a"}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}]}, @NL80211_ATTR_MAC={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 235.621012ms ago: executing program 1 (id=218): r0 = epoll_create1(0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000500)={0x14}) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x4}, 0x10) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=219): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEV(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x14, r2, 0xde6bcce13c096341}, 0x14}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.56' (ED25519) to the list of known hosts. [ 78.541701][ T5820] cgroup: Unknown subsys name 'net' [ 78.660730][ T5820] cgroup: Unknown subsys name 'cpuset' [ 78.670114][ T5820] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.207384][ T5820] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.594283][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.640247][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.648584][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.657637][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.666853][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.677828][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.687509][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.695583][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.698801][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.713435][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.721904][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.730291][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.738086][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.738437][ T5847] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 82.750925][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.754316][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.759937][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.768405][ T5847] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 82.775345][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.782879][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.787287][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.802425][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.803190][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.810499][ T5846] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 82.820337][ T5847] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 82.825659][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.831126][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.884536][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.893487][ T5833] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 82.901416][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.210108][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 83.345525][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 83.440308][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.448963][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.457815][ T5830] bridge_slave_0: entered allmulticast mode [ 83.465259][ T5830] bridge_slave_0: entered promiscuous mode [ 83.503796][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.512243][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.519717][ T5830] bridge_slave_1: entered allmulticast mode [ 83.526878][ T5830] bridge_slave_1: entered promiscuous mode [ 83.543666][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 83.583713][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.618315][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 83.641654][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.678447][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.686019][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.694042][ T5836] bridge_slave_0: entered allmulticast mode [ 83.701282][ T5836] bridge_slave_0: entered promiscuous mode [ 83.759271][ T5830] team0: Port device team_slave_0 added [ 83.765578][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.774740][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.782134][ T5836] bridge_slave_1: entered allmulticast mode [ 83.789966][ T5836] bridge_slave_1: entered promiscuous mode [ 83.838308][ T5830] team0: Port device team_slave_1 added [ 83.877020][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.912498][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 83.929831][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.968681][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.975730][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.002110][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.038172][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.045333][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.053588][ T5834] bridge_slave_0: entered allmulticast mode [ 84.064316][ T5834] bridge_slave_0: entered promiscuous mode [ 84.072306][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.080113][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.106412][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.144315][ T5836] team0: Port device team_slave_0 added [ 84.150849][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.158413][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.165657][ T5834] bridge_slave_1: entered allmulticast mode [ 84.172865][ T5834] bridge_slave_1: entered promiscuous mode [ 84.206155][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.216393][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.223656][ T5835] bridge_slave_0: entered allmulticast mode [ 84.231377][ T5835] bridge_slave_0: entered promiscuous mode [ 84.240535][ T5836] team0: Port device team_slave_1 added [ 84.289564][ T5830] hsr_slave_0: entered promiscuous mode [ 84.296059][ T5830] hsr_slave_1: entered promiscuous mode [ 84.310213][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.318055][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.325277][ T5835] bridge_slave_1: entered allmulticast mode [ 84.332684][ T5835] bridge_slave_1: entered promiscuous mode [ 84.365833][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.378534][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.403263][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.410498][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.437356][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.450335][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.457590][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.484728][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.524477][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.537361][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.563661][ T5834] team0: Port device team_slave_0 added [ 84.573355][ T5834] team0: Port device team_slave_1 added [ 84.646009][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.653498][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.661785][ T5844] bridge_slave_0: entered allmulticast mode [ 84.669361][ T5844] bridge_slave_0: entered promiscuous mode [ 84.678024][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.685136][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.692532][ T5844] bridge_slave_1: entered allmulticast mode [ 84.699867][ T5844] bridge_slave_1: entered promiscuous mode [ 84.718850][ T5835] team0: Port device team_slave_0 added [ 84.732177][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.739288][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.765736][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.778525][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.785539][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.811724][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.852454][ T5835] team0: Port device team_slave_1 added [ 84.874609][ T5836] hsr_slave_0: entered promiscuous mode [ 84.881084][ T5836] hsr_slave_1: entered promiscuous mode [ 84.889249][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.897544][ T5836] Cannot create hsr debugfs directory [ 84.908289][ T5833] Bluetooth: hci3: command tx timeout [ 84.914719][ T5842] Bluetooth: hci1: command tx timeout [ 84.914728][ T5849] Bluetooth: hci2: command tx timeout [ 84.919376][ T5843] Bluetooth: hci0: command tx timeout [ 84.962770][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.977020][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.987146][ T5843] Bluetooth: hci4: command tx timeout [ 84.989555][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.000804][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.027598][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.065640][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.073486][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.099842][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.172267][ T5834] hsr_slave_0: entered promiscuous mode [ 85.178625][ T5834] hsr_slave_1: entered promiscuous mode [ 85.184888][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.193250][ T5834] Cannot create hsr debugfs directory [ 85.216070][ T5844] team0: Port device team_slave_0 added [ 85.257746][ T5844] team0: Port device team_slave_1 added [ 85.278166][ T5835] hsr_slave_0: entered promiscuous mode [ 85.284449][ T5835] hsr_slave_1: entered promiscuous mode [ 85.293862][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.302719][ T5835] Cannot create hsr debugfs directory [ 85.367982][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.376163][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.402917][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.443885][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.451003][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.479167][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.633158][ T5844] hsr_slave_0: entered promiscuous mode [ 85.643469][ T5844] hsr_slave_1: entered promiscuous mode [ 85.649838][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.657643][ T5844] Cannot create hsr debugfs directory [ 85.679713][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.729107][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.771262][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.813382][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.859842][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.910869][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.935699][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.960567][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.007181][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.034705][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.045406][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.072977][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.153180][ T5835] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 86.168424][ T5835] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 86.203451][ T5835] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 86.215381][ T5835] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 86.296959][ T5844] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.324045][ T5844] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.336227][ T5844] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.346258][ T5844] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.380184][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.408436][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.455890][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.474981][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.501634][ T1039] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.509129][ T1039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.524018][ T1039] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.531312][ T1039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.573163][ T1039] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.580355][ T1039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.624112][ T1039] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.631417][ T1039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.735214][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.784153][ T5830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.824703][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.855333][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.913178][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.934646][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.975571][ T2959] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.982863][ T2959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.991605][ T5843] Bluetooth: hci1: command tx timeout [ 86.997707][ T5843] Bluetooth: hci0: command tx timeout [ 87.003167][ T5843] Bluetooth: hci3: command tx timeout [ 87.005504][ T5842] Bluetooth: hci2: command tx timeout [ 87.020526][ T2959] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.027746][ T2959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.042799][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.066778][ T5842] Bluetooth: hci4: command tx timeout [ 87.080293][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.087593][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.112606][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.119847][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.157503][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.164654][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.192432][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.199739][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.241265][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.334311][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.468105][ T5836] veth0_vlan: entered promiscuous mode [ 87.515362][ T5830] veth0_vlan: entered promiscuous mode [ 87.554708][ T5830] veth1_vlan: entered promiscuous mode [ 87.583488][ T5836] veth1_vlan: entered promiscuous mode [ 87.685623][ T5830] veth0_macvtap: entered promiscuous mode [ 87.723147][ T5830] veth1_macvtap: entered promiscuous mode [ 87.767535][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.800890][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.829785][ T5836] veth0_macvtap: entered promiscuous mode [ 87.842739][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.855702][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.892885][ T5830] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.903375][ T5830] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.913013][ T5830] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.922303][ T5830] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.934940][ T5836] veth1_macvtap: entered promiscuous mode [ 87.970854][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.063887][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.090240][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.104251][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.130644][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.141476][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.154151][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.205600][ T5836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.223188][ T5836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.232115][ T5836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.241022][ T5836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.319529][ T2959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.323296][ T5834] veth0_vlan: entered promiscuous mode [ 88.337131][ T2959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.390573][ T5834] veth1_vlan: entered promiscuous mode [ 88.405887][ T5844] veth0_vlan: entered promiscuous mode [ 88.435619][ T5835] veth0_vlan: entered promiscuous mode [ 88.454529][ T5844] veth1_vlan: entered promiscuous mode [ 88.482543][ T2959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.504491][ T2959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.547465][ T5835] veth1_vlan: entered promiscuous mode [ 88.560978][ T5834] veth0_macvtap: entered promiscuous mode [ 88.575226][ T5834] veth1_macvtap: entered promiscuous mode [ 88.602340][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.634751][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.653701][ T5844] veth0_macvtap: entered promiscuous mode [ 88.719665][ T5844] veth1_macvtap: entered promiscuous mode [ 88.739387][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.748005][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 88.766195][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.777899][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.788607][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.801424][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.840008][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.842168][ T5835] veth0_macvtap: entered promiscuous mode [ 88.860230][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.879549][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.926369][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.957456][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.968463][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.982556][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.993669][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.009111][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.019470][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.030782][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.053526][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.064503][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.075511][ T5842] Bluetooth: hci2: command tx timeout [ 89.078586][ T5849] Bluetooth: hci0: command tx timeout [ 89.081149][ T5842] Bluetooth: hci1: command tx timeout [ 89.086423][ T5843] Bluetooth: hci3: command tx timeout [ 89.100407][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.145644][ T5835] veth1_macvtap: entered promiscuous mode [ 89.151657][ T5843] Bluetooth: hci4: command tx timeout [ 89.170037][ T5834] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.196091][ T5834] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.244404][ T5834] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.276529][ T5834] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.299139][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.322389][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.332480][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.351240][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.363060][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.382184][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.395807][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.431781][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.452505][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.463815][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.481592][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.493982][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.512268][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.523716][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.540014][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.574249][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.632129][ T5844] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.649158][ T5844] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.660366][ T5844] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.674576][ T5844] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.715893][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.732692][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.742757][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.769803][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.783729][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.800400][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.812725][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.833132][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.845346][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.936033][ T5835] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.953421][ T5835] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.962483][ T5835] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.976378][ T5835] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.152689][ T1039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.185019][ T1039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.292811][ T2959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.323906][ T2959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.345069][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.358306][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.387342][ T5939] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 90.415539][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.439545][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.469510][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.513775][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.609803][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.624034][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.019241][ T5952] syz.2.17 uses obsolete (PF_INET,SOCK_PACKET) [ 91.148202][ T5843] Bluetooth: hci1: command tx timeout [ 91.153735][ T5849] Bluetooth: hci3: command tx timeout [ 91.153767][ T5842] Bluetooth: hci0: command tx timeout [ 91.159242][ T5849] Bluetooth: hci2: command tx timeout [ 91.228455][ T5849] Bluetooth: hci4: command tx timeout [ 91.898848][ T5978] Bluetooth: MGMT ver 1.23 [ 91.899502][ T5982] bridge_slave_0: left allmulticast mode [ 91.910095][ T5982] bridge_slave_0: left promiscuous mode [ 91.917264][ T5982] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.978492][ T5982] bridge_slave_1: left allmulticast mode [ 91.984228][ T5982] bridge_slave_1: left promiscuous mode [ 92.017367][ T5982] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.077281][ T5982] bond0: (slave bond_slave_0): Releasing backup interface [ 92.131146][ T5982] bond0: (slave bond_slave_1): Releasing backup interface [ 92.187573][ T5982] team0: Port device team_slave_0 removed [ 92.202391][ T5982] team0: Port device team_slave_1 removed [ 92.217762][ T5982] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.225734][ T5982] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.243548][ T5982] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.255477][ T5982] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.241293][ T6016] netlink: 4 bytes leftover after parsing attributes in process `syz.4.40'. [ 93.565100][ T8] cfg80211: failed to load regulatory.db [ 93.713384][ T6034] netlink: 12 bytes leftover after parsing attributes in process `syz.1.46'. [ 94.205102][ T6051] team0: No ports can be present during mode change [ 94.271291][ T6053] netlink: 12 bytes leftover after parsing attributes in process `syz.1.56'. [ 94.289661][ T6053] netlink: 'syz.1.56': attribute type 13 has an invalid length. [ 95.496256][ T6089] netlink: 'syz.3.72': attribute type 29 has an invalid length. [ 95.544439][ T6089] netlink: 'syz.3.72': attribute type 29 has an invalid length. [ 95.581495][ T6089] netlink: 516 bytes leftover after parsing attributes in process `syz.3.72'. [ 95.619690][ T6089] unsupported nla_type 58 [ 95.921678][ T6104] netlink: 20 bytes leftover after parsing attributes in process `syz.4.79'. [ 97.347932][ T6184] smc: net device bond0 applied user defined pnetid SYZ2 [ 97.526931][ T6188] netlink: 4 bytes leftover after parsing attributes in process `syz.3.97'. [ 97.880112][ T6199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.101'. [ 98.088878][ T6204] warning: `syz.1.105' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 98.172595][ T6207] team_slave_0: entered promiscuous mode [ 98.178826][ T6207] team_slave_1: entered promiscuous mode [ 98.246712][ T6207] macsec1: entered promiscuous mode [ 98.252018][ T6207] team0: entered promiscuous mode [ 98.315821][ T6207] macsec1: entered allmulticast mode [ 98.346236][ T6207] team0: entered allmulticast mode [ 98.373957][ T6207] team_slave_0: entered allmulticast mode [ 98.411736][ T6207] team_slave_1: entered allmulticast mode [ 98.462202][ T6207] team0: Device macsec1 is already an upper device of the team interface [ 98.587968][ T6207] team0: left allmulticast mode [ 98.594048][ T6207] team_slave_0: left allmulticast mode [ 98.601696][ T6207] team_slave_1: left allmulticast mode [ 98.623678][ T6207] team0: left promiscuous mode [ 98.642741][ T6207] team_slave_0: left promiscuous mode [ 98.648417][ T6207] team_slave_1: left promiscuous mode [ 99.814941][ T6261] sctp: [Deprecated]: syz.1.130 (pid 6261) Use of int in max_burst socket option deprecated. [ 99.814941][ T6261] Use struct sctp_assoc_value instead [ 99.909234][ T6268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.134'. [ 99.919549][ T974] hid-generic 0005:04F3:0009.0001: unknown main item tag 0x0 [ 99.984299][ T974] hid-generic 0005:04F3:0009.0001: unknown main item tag 0x0 [ 100.058393][ T974] hid-generic 0005:04F3:0009.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz0] on aa:aa:aa:aa:aa:aa [ 100.639039][ T6288] pim6reg1: entered promiscuous mode [ 100.661401][ T6288] pim6reg1: entered allmulticast mode [ 103.536523][ T6357] netlink: 'syz.2.171': attribute type 29 has an invalid length. [ 103.588474][ T6357] netlink: 'syz.2.171': attribute type 29 has an invalid length. [ 103.638050][ T6357] netlink: 500 bytes leftover after parsing attributes in process `syz.2.171'. [ 104.699032][ T6151] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.933154][ T6151] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.169896][ T6151] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.378589][ T6151] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.668397][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 105.685617][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 105.708575][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 105.726233][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 105.741230][ T5843] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 105.751674][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 105.903631][ T6151] bridge_slave_1: left allmulticast mode [ 105.938855][ T6151] bridge_slave_1: left promiscuous mode [ 105.946706][ T6151] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.042812][ T6151] bridge_slave_0: left allmulticast mode [ 106.056944][ T6151] bridge_slave_0: left promiscuous mode [ 106.062787][ T6151] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.134395][ T6414] Driver unsupported XDP return value 0 on prog (id 47) dev N/A, expect packet loss! [ 106.886919][ T6151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.906555][ T6151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.966223][ T6151] bond0 (unregistering): Released all slaves [ 107.392904][ T6433] vlan2: entered promiscuous mode [ 107.417022][ T6433] hsr0: entered promiscuous mode [ 107.856847][ T6459] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.877272][ T5843] Bluetooth: hci3: command tx timeout [ 108.469257][ T6456] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.478724][ T6456] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.488546][ T6456] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.498326][ T6456] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.694849][ T5502] [ 108.697255][ T5502] ============================================ [ 108.703439][ T5502] WARNING: possible recursive locking detected [ 108.709653][ T5502] 6.14.0-rc5-syzkaller-01140-ge2537326e3b6 #0 Not tainted [ 108.716797][ T5502] -------------------------------------------- [ 108.723329][ T5502] dhcpcd/5502 is trying to acquire lock: [ 108.728995][ T5502] ffff88802938cd28 (&dev->lock){+.+.}-{4:4}, at: register_netdevice+0x12d8/0x1b70 [ 108.738326][ T5502] [ 108.738326][ T5502] but task is already holding lock: [ 108.745731][ T5502] ffff88806e8b8d28 (&dev->lock){+.+.}-{4:4}, at: dev_change_flags+0x120/0x270 [ 108.754693][ T5502] [ 108.754693][ T5502] other info that might help us debug this: [ 108.762790][ T5502] Possible unsafe locking scenario: [ 108.762790][ T5502] [ 108.770275][ T5502] CPU0 [ 108.773599][ T5502] ---- [ 108.776912][ T5502] lock(&dev->lock); [ 108.780935][ T5502] lock(&dev->lock); [ 108.784951][ T5502] [ 108.784951][ T5502] *** DEADLOCK *** [ 108.784951][ T5502] [ 108.793129][ T5502] May be due to missing lock nesting notation [ 108.793129][ T5502] [ 108.801503][ T5502] 2 locks held by dhcpcd/5502: [ 108.806297][ T5502] #0: ffffffff8fed6848 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x34c/0x1d80 [ 108.815526][ T5502] #1: ffff88806e8b8d28 (&dev->lock){+.+.}-{4:4}, at: dev_change_flags+0x120/0x270 [ 108.824931][ T5502] [ 108.824931][ T5502] stack backtrace: [ 108.830875][ T5502] CPU: 0 UID: 0 PID: 5502 Comm: dhcpcd Not tainted 6.14.0-rc5-syzkaller-01140-ge2537326e3b6 #0 [ 108.830907][ T5502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 108.830926][ T5502] Call Trace: [ 108.830943][ T5502] [ 108.830957][ T5502] dump_stack_lvl+0x241/0x360 [ 108.831001][ T5502] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.831025][ T5502] ? __pfx__printk+0x10/0x10 [ 108.831045][ T5502] ? lockdep_unlock+0x16a/0x300 [ 108.831082][ T5502] print_deadlock_bug+0x483/0x620 [ 108.831107][ T5502] ? lockdep_unlock+0x16a/0x300 [ 108.831137][ T5502] validate_chain+0x15e2/0x5920 [ 108.831173][ T5502] ? __pfx_validate_chain+0x10/0x10 [ 108.831206][ T5502] ? __pfx_validate_chain+0x10/0x10 [ 108.831229][ T5502] ? __pfx_bpf_trace_printk+0x10/0x10 [ 108.831252][ T5502] ? bpf_trace_run2+0x1fc/0x540 [ 108.831279][ T5502] ? __pfx_lock_release+0x10/0x10 [ 108.831309][ T5502] ? look_up_lock_class+0x77/0x170 [ 108.831337][ T5502] ? register_lock_class+0x102/0x980 [ 108.831371][ T5502] ? __pfx_register_lock_class+0x10/0x10 [ 108.831405][ T5502] ? mark_lock+0x9a/0x360 [ 108.831426][ T5502] __lock_acquire+0x1397/0x2100 [ 108.831465][ T5502] lock_acquire+0x1ed/0x550 [ 108.831496][ T5502] ? register_netdevice+0x12d8/0x1b70 [ 108.831525][ T5502] ? __pfx_lock_acquire+0x10/0x10 [ 108.831558][ T5502] ? __pfx___might_resched+0x10/0x10 [ 108.831587][ T5502] ? __pfx_lock_release+0x10/0x10 [ 108.831624][ T5502] __mutex_lock+0x19c/0x1010 [ 108.831648][ T5502] ? register_netdevice+0x12d8/0x1b70 [ 108.831672][ T5502] ? __mutex_unlock_slowpath+0x227/0x800 [ 108.831699][ T5502] ? _raw_spin_lock_irq+0xdf/0x120 [ 108.831720][ T5502] ? register_netdevice+0x12d8/0x1b70 [ 108.831742][ T5502] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 108.831767][ T5502] ? __pfx___mutex_lock+0x10/0x10 [ 108.831790][ T5502] ? _raw_spin_unlock_irq+0x23/0x50 [ 108.831817][ T5502] ? netdev_register_kobject+0x2b0/0x2f0 [ 108.831843][ T5502] register_netdevice+0x12d8/0x1b70 [ 108.831875][ T5502] ? __pfx_register_netdevice+0x10/0x10 [ 108.831906][ T5502] bpq_device_event+0x4b1/0x8d0 [ 108.831941][ T5502] ? lockdep_rtnl_is_held+0x26/0x40 [ 108.831967][ T5502] notifier_call_chain+0x1a5/0x3f0 [ 108.832008][ T5502] __dev_notify_flags+0x207/0x400 [ 108.832042][ T5502] ? dev_set_rx_mode+0xb8/0x2e0 [ 108.832075][ T5502] ? __pfx___dev_notify_flags+0x10/0x10 [ 108.832106][ T5502] ? __dev_change_flags+0x515/0x6f0 [ 108.832127][ T5502] ? __pfx___mutex_lock+0x10/0x10 [ 108.832151][ T5502] ? __pfx___dev_change_flags+0x10/0x10 [ 108.832173][ T5502] ? __pfx___mutex_lock+0x10/0x10 [ 108.832205][ T5502] netif_change_flags+0xf0/0x1a0 [ 108.832227][ T5502] dev_change_flags+0x146/0x270 [ 108.832262][ T5502] devinet_ioctl+0xea2/0x1d80 [ 108.832299][ T5502] ? __pfx_devinet_ioctl+0x10/0x10 [ 108.832334][ T5502] ? get_user_ifreq+0x1bb/0x200 [ 108.832361][ T5502] inet_ioctl+0x3d7/0x4f0 [ 108.832384][ T5502] ? __pfx_inet_ioctl+0x10/0x10 [ 108.832407][ T5502] ? tomoyo_path_number_perm+0x5dd/0x770 [ 108.832451][ T5502] sock_do_ioctl+0x158/0x460 [ 108.832481][ T5502] ? __pfx_sock_do_ioctl+0x10/0x10 [ 108.832508][ T5502] ? __pfx_lock_release+0x10/0x10 [ 108.832545][ T5502] sock_ioctl+0x626/0x8e0 [ 108.832571][ T5502] ? __pfx_sock_ioctl+0x10/0x10 [ 108.832597][ T5502] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 108.832630][ T5502] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 108.832661][ T5502] ? __pfx_sock_ioctl+0x10/0x10 [ 108.832686][ T5502] __se_sys_ioctl+0xf5/0x170 [ 108.832712][ T5502] do_syscall_64+0xf3/0x230 [ 108.832738][ T5502] ? clear_bhb_loop+0x35/0x90 [ 108.832771][ T5502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.832805][ T5502] RIP: 0033:0x7fcea04bdd49 [ 108.832827][ T5502] Code: 5c c3 48 8d 44 24 08 48 89 54 24 e0 48 89 44 24 c0 48 8d 44 24 d0 48 89 44 24 c8 b8 10 00 00 00 c7 44 24 b8 10 00 00 00 0f 05 <41> 89 c0 3d 00 f0 ff ff 76 10 48 8b 15 ae 60 0d 00 f7 d8 41 83 c8 [ 108.832844][ T5502] RSP: 002b:00007fffde931338 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 108.832865][ T5502] RAX: ffffffffffffffda RBX: 00007fcea03ef6c0 RCX: 00007fcea04bdd49 [ 108.832881][ T5502] RDX: 00007fffde941528 RSI: 0000000000008914 RDI: 0000000000000010 [ 108.832894][ T5502] RBP: 00007fffde9516e8 R08: 00007fffde9414e8 R09: 00007fffde941498 [ 108.832908][ T5502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.832920][ T5502] R13: 00007fffde941528 R14: 0000000000000028 R15: 0000000000008914 [ 108.832942][ T5502] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 109.659399][ T6151] hsr_slave_0: left promiscuous mode [ 109.708112][ T6151] hsr_slave_1: left promiscuous mode [ 109.714169][ T6151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.764339][ T6151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.779382][ T6151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.798287][ T6151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.830586][ T6266] ================================================================== [ 109.838823][ T6266] BUG: KASAN: slab-use-after-free in __mutex_lock+0x830/0x1010 [ 109.846432][ T6266] Read of size 8 at addr ffff8880632a4060 by task khidpd_04f30009/6266 [ 109.854711][ T6266] [ 109.857074][ T6266] CPU: 1 UID: 0 PID: 6266 Comm: khidpd_04f30009 Not tainted 6.14.0-rc5-syzkaller-01140-ge2537326e3b6 #0 [ 109.857100][ T6266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 109.857114][ T6266] Call Trace: [ 109.857122][ T6266] [ 109.857130][ T6266] dump_stack_lvl+0x241/0x360 [ 109.857164][ T6266] ? __pfx_dump_stack_lvl+0x10/0x10 [ 109.857186][ T6266] ? __pfx__printk+0x10/0x10 [ 109.857208][ T6266] ? _printk+0xd5/0x120 [ 109.857226][ T6266] ? __virt_addr_valid+0x183/0x530 [ 109.857248][ T6266] ? __virt_addr_valid+0x183/0x530 [ 109.857268][ T6266] print_report+0x16e/0x5b0 [ 109.857308][ T6266] ? __virt_addr_valid+0x183/0x530 [ 109.857326][ T6266] ? __virt_addr_valid+0x183/0x530 [ 109.857345][ T6266] ? __virt_addr_valid+0x45f/0x530 [ 109.857363][ T6266] ? __phys_addr+0xba/0x170 [ 109.857382][ T6266] ? __mutex_lock+0x830/0x1010 [ 109.857407][ T6266] kasan_report+0x143/0x180 [ 109.857431][ T6266] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 109.857452][ T6266] ? __mutex_lock+0x830/0x1010 [ 109.857479][ T6266] __mutex_lock+0x830/0x1010 [ 109.857504][ T6266] ? __mutex_lock+0x602/0x1010 [ 109.857530][ T6266] ? l2cap_unregister_user+0x6a/0x1c0 [ 109.857561][ T6266] ? __pfx___mutex_lock+0x10/0x10 [ 109.857589][ T6266] ? __pfx___timer_delete_sync+0x10/0x10 [ 109.857619][ T6266] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 109.857643][ T6266] l2cap_unregister_user+0x6a/0x1c0 [ 109.857675][ T6266] hidp_session_thread+0x450/0x490 [ 109.857705][ T6266] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 109.857726][ T6266] ? __pfx_hidp_session_thread+0x10/0x10 [ 109.857753][ T6266] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 109.857774][ T6266] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 109.857805][ T6266] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 109.857836][ T6266] ? __kthread_parkme+0x169/0x1d0 [ 109.857868][ T6266] ? __pfx_hidp_session_thread+0x10/0x10 [ 109.857896][ T6266] kthread+0x7a9/0x920 [ 109.857913][ T6266] ? __pfx_kthread+0x10/0x10 [ 109.857932][ T6266] ? __pfx_hidp_session_thread+0x10/0x10 [ 109.857961][ T6266] ? __pfx_kthread+0x10/0x10 [ 109.857978][ T6266] ? __pfx_kthread+0x10/0x10 [ 109.857997][ T6266] ? __pfx_kthread+0x10/0x10 [ 109.858014][ T6266] ? _raw_spin_unlock_irq+0x23/0x50 [ 109.858033][ T6266] ? lockdep_hardirqs_on+0x99/0x150 [ 109.858062][ T6266] ? __pfx_kthread+0x10/0x10 [ 109.858080][ T6266] ret_from_fork+0x4b/0x80 [ 109.858108][ T6266] ? __pfx_kthread+0x10/0x10 [ 109.858126][ T6266] ret_from_fork_asm+0x1a/0x30 [ 109.858158][ T6266] [ 109.858165][ T6266] [ 110.103093][ T6266] Allocated by task 5844: [ 110.107454][ T6266] kasan_save_track+0x3f/0x80 [ 110.112153][ T6266] __kasan_kmalloc+0x98/0xb0 [ 110.116750][ T6266] __kmalloc_noprof+0x285/0x4c0 [ 110.121609][ T6266] hci_alloc_dev_priv+0x27/0x2030 [ 110.126648][ T6266] vhci_create_device+0x116/0x6b0 [ 110.131683][ T6266] vhci_write+0x3cf/0x490 [ 110.136048][ T6266] vfs_write+0xacf/0xd10 [ 110.140322][ T6266] ksys_write+0x18f/0x2b0 [ 110.144671][ T6266] do_syscall_64+0xf3/0x230 [ 110.149204][ T6266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.155116][ T6266] [ 110.157465][ T6266] Freed by task 5844: [ 110.161465][ T6266] kasan_save_track+0x3f/0x80 [ 110.166170][ T6266] kasan_save_free_info+0x40/0x50 [ 110.171214][ T6266] __kasan_slab_free+0x59/0x70 [ 110.175989][ T6266] kfree+0x196/0x430 [ 110.179918][ T6266] hci_release_dev+0x1525/0x16b0 [ 110.185125][ T6266] bt_host_release+0x83/0x90 [ 110.189734][ T6266] device_release+0x99/0x1c0 [ 110.194342][ T6266] kobject_put+0x22f/0x480 [ 110.198774][ T6266] vhci_release+0x88/0xd0 [ 110.203117][ T6266] __fput+0x3e9/0x9f0 [ 110.207134][ T6266] task_work_run+0x24f/0x310 [ 110.211731][ T6266] do_exit+0xa2a/0x28e0 [ 110.215894][ T6266] do_group_exit+0x207/0x2c0 [ 110.220500][ T6266] __x64_sys_exit_group+0x3f/0x40 [ 110.225543][ T6266] x64_sys_call+0x26a8/0x26b0 [ 110.230227][ T6266] do_syscall_64+0xf3/0x230 [ 110.234735][ T6266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.240641][ T6266] [ 110.242964][ T6266] Last potentially related work creation: [ 110.248677][ T6266] kasan_save_stack+0x3f/0x60 [ 110.253363][ T6266] kasan_record_aux_stack+0xaa/0xc0 [ 110.258577][ T6266] insert_work+0x3e/0x330 [ 110.262916][ T6266] __queue_work+0xc62/0x1090 [ 110.267529][ T6266] queue_work_on+0x1c2/0x380 [ 110.272133][ T6266] process_scheduled_works+0xabe/0x18e0 [ 110.277691][ T6266] worker_thread+0x870/0xd30 [ 110.282291][ T6266] kthread+0x7a9/0x920 [ 110.286365][ T6266] ret_from_fork+0x4b/0x80 [ 110.290791][ T6266] ret_from_fork_asm+0x1a/0x30 [ 110.295577][ T6266] [ 110.297923][ T6266] Second to last potentially related work creation: [ 110.304511][ T6266] kasan_save_stack+0x3f/0x60 [ 110.309218][ T6266] kasan_record_aux_stack+0xaa/0xc0 [ 110.314464][ T6266] insert_work+0x3e/0x330 [ 110.318845][ T6266] __queue_work+0xd9a/0x1090 [ 110.323469][ T6266] call_timer_fn+0x187/0x650 [ 110.328072][ T6266] __run_timer_base+0x695/0x8e0 [ 110.332969][ T6266] run_timer_softirq+0xb7/0x170 [ 110.337862][ T6266] handle_softirqs+0x2d4/0x9b0 [ 110.342641][ T6266] __irq_exit_rcu+0xf7/0x220 [ 110.347262][ T6266] irq_exit_rcu+0x9/0x30 [ 110.351526][ T6266] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 110.357183][ T6266] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 110.363221][ T6266] [ 110.365558][ T6266] The buggy address belongs to the object at ffff8880632a4000 [ 110.365558][ T6266] which belongs to the cache kmalloc-8k of size 8192 [ 110.379626][ T6266] The buggy address is located 96 bytes inside of [ 110.379626][ T6266] freed 8192-byte region [ffff8880632a4000, ffff8880632a6000) [ 110.393436][ T6266] [ 110.395762][ T6266] The buggy address belongs to the physical page: [ 110.402196][ T6266] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x632a0 [ 110.410970][ T6266] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 110.419474][ T6266] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 110.427034][ T6266] page_type: f5(slab) [ 110.431024][ T6266] raw: 00fff00000000040 ffff88801b042280 dead000000000122 0000000000000000 [ 110.439699][ T6266] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 110.448289][ T6266] head: 00fff00000000040 ffff88801b042280 dead000000000122 0000000000000000 [ 110.456965][ T6266] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 110.465642][ T6266] head: 00fff00000000003 ffffea00018ca801 ffffffffffffffff 0000000000000000 [ 110.474320][ T6266] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 110.482992][ T6266] page dumped because: kasan: bad access detected [ 110.489421][ T6266] page_owner tracks the page as allocated [ 110.495143][ T6266] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5835, tgid 5835 (syz-executor), ts 82561038963, free_ts 30834423520 [ 110.516559][ T6266] post_alloc_hook+0x1f4/0x240 [ 110.521353][ T6266] get_page_from_freelist+0x365c/0x37a0 [ 110.527281][ T6266] __alloc_frozen_pages_noprof+0x292/0x710 [ 110.533284][ T6266] alloc_pages_mpol+0x311/0x660 [ 110.538157][ T6266] allocate_slab+0x8f/0x3a0 [ 110.542757][ T6266] ___slab_alloc+0xc27/0x14a0 [ 110.547532][ T6266] __slab_alloc+0x58/0xa0 [ 110.551875][ T6266] __kmalloc_noprof+0x2e6/0x4c0 [ 110.556739][ T6266] hci_alloc_dev_priv+0x27/0x2030 [ 110.561777][ T6266] vhci_create_device+0x116/0x6b0 [ 110.566813][ T6266] vhci_write+0x3cf/0x490 [ 110.571161][ T6266] vfs_write+0xacf/0xd10 [ 110.575406][ T6266] ksys_write+0x18f/0x2b0 [ 110.579738][ T6266] do_syscall_64+0xf3/0x230 [ 110.584248][ T6266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.590158][ T6266] page last free pid 1 tgid 1 stack trace: [ 110.595961][ T6266] free_frozen_pages+0xe0d/0x10e0 [ 110.601000][ T6266] free_contig_range+0x14c/0x430 [ 110.605958][ T6266] destroy_args+0x94/0x4b0 [ 110.610395][ T6266] debug_vm_pgtable+0x551/0x590 [ 110.615270][ T6266] do_one_initcall+0x248/0x930 [ 110.620044][ T6266] do_initcall_level+0x157/0x210 [ 110.625000][ T6266] do_initcalls+0x71/0xd0 [ 110.629344][ T6266] kernel_init_freeable+0x435/0x5d0 [ 110.634555][ T6266] kernel_init+0x1d/0x2b0 [ 110.638896][ T6266] ret_from_fork+0x4b/0x80 [ 110.643326][ T6266] ret_from_fork_asm+0x1a/0x30 [ 110.648100][ T6266] [ 110.650433][ T6266] Memory state around the buggy address: [ 110.656075][ T6266] ffff8880632a3f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 110.664144][ T6266] ffff8880632a3f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 110.672296][ T6266] >ffff8880632a4000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 110.680382][ T6266] ^ [ 110.687575][ T6266] ffff8880632a4080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 110.695638][ T6266] ffff8880632a4100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 110.703786][ T6266] ================================================================== [ 110.713198][ T6266] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 110.720457][ T6266] CPU: 1 UID: 0 PID: 6266 Comm: khidpd_04f30009 Not tainted 6.14.0-rc5-syzkaller-01140-ge2537326e3b6 #0 [ 110.731609][ T6266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 110.741706][ T6266] Call Trace: [ 110.745020][ T6266] [ 110.747997][ T6266] dump_stack_lvl+0x241/0x360 [ 110.752720][ T6266] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.757965][ T6266] ? __pfx__printk+0x10/0x10 [ 110.762585][ T6266] ? rcu_is_watching+0x15/0xb0 [ 110.767388][ T6266] ? vscnprintf+0x5d/0x90 [ 110.771769][ T6266] panic+0x349/0x880 [ 110.775711][ T6266] ? check_panic_on_warn+0x21/0xb0 [ 110.780863][ T6266] ? __pfx_panic+0x10/0x10 [ 110.785309][ T6266] ? trace_irq_enable+0x2c/0x120 [ 110.790308][ T6266] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 110.796251][ T6266] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 110.802183][ T6266] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 110.808536][ T6266] ? print_report+0x519/0x5b0 [ 110.813240][ T6266] check_panic_on_warn+0x86/0xb0 [ 110.818203][ T6266] ? __mutex_lock+0x830/0x1010 [ 110.822991][ T6266] end_report+0x77/0x160 [ 110.827280][ T6266] kasan_report+0x154/0x180 [ 110.831917][ T6266] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 110.837846][ T6266] ? __mutex_lock+0x830/0x1010 [ 110.842636][ T6266] __mutex_lock+0x830/0x1010 [ 110.847247][ T6266] ? __mutex_lock+0x602/0x1010 [ 110.852030][ T6266] ? l2cap_unregister_user+0x6a/0x1c0 [ 110.857424][ T6266] ? __pfx___mutex_lock+0x10/0x10 [ 110.862493][ T6266] ? __pfx___timer_delete_sync+0x10/0x10 [ 110.868151][ T6266] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 110.874108][ T6266] l2cap_unregister_user+0x6a/0x1c0 [ 110.879361][ T6266] hidp_session_thread+0x450/0x490 [ 110.884499][ T6266] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 110.890405][ T6266] ? __pfx_hidp_session_thread+0x10/0x10 [ 110.896056][ T6266] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 110.901959][ T6266] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 110.908216][ T6266] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 110.914487][ T6266] ? __kthread_parkme+0x169/0x1d0 [ 110.919539][ T6266] ? __pfx_hidp_session_thread+0x10/0x10 [ 110.925209][ T6266] kthread+0x7a9/0x920 [ 110.929285][ T6266] ? __pfx_kthread+0x10/0x10 [ 110.933879][ T6266] ? __pfx_hidp_session_thread+0x10/0x10 [ 110.939533][ T6266] ? __pfx_kthread+0x10/0x10 [ 110.944130][ T6266] ? __pfx_kthread+0x10/0x10 [ 110.948728][ T6266] ? __pfx_kthread+0x10/0x10 [ 110.953413][ T6266] ? _raw_spin_unlock_irq+0x23/0x50 [ 110.958630][ T6266] ? lockdep_hardirqs_on+0x99/0x150 [ 110.963878][ T6266] ? __pfx_kthread+0x10/0x10 [ 110.968504][ T6266] ret_from_fork+0x4b/0x80 [ 110.972946][ T6266] ? __pfx_kthread+0x10/0x10 [ 110.977555][ T6266] ret_from_fork_asm+0x1a/0x30 [ 110.982345][ T6266] [ 110.985661][ T6266] Kernel Offset: disabled [ 110.989994][ T6266] Rebooting in 86400 seconds..