last executing test programs: 650.383509ms ago: executing program 4 (id=5): syz_emit_ethernet(0x19c, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cabf00", 0x166, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x5, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad9657926974"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x12, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23"}, {0x0, 0x11, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4"}]}}}}}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x884) 631.078103ms ago: executing program 3 (id=4): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000003340)="a5d3b26367b9576854ff7bdc3f6fea67", 0x10) sendmmsg$alg(r2, &(0x7f0000007b40)=[{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000001740)="415b66934845e42acb83a6dbd1b12a2745576c45be86eeff2575833567f96eb9dd4a5ef3ffce4ea4f15804e73b945754a8a4fb4cd667072489d4a839397d9e8aca8717d2102305e397b04050046dd6c0361f79a35f0a9371975687164fb5207aa57f62531a2feac47a0da785a74e", 0x6e}], 0x1}], 0x1, 0x8000) recvmmsg(r2, &(0x7f0000005740)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000140)=""/4, 0x4}], 0x1}}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 411.344076ms ago: executing program 3 (id=6): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x1, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xb, 0x2}}]}}]}, 0x3c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 382.172358ms ago: executing program 2 (id=3): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300006773da2085000000040000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kvm_userspace_exit\x00', r0}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 370.694444ms ago: executing program 0 (id=1): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r3, @ANYBLOB="0000000a010000001800120008000100736974000c00020008000300", @ANYRES32], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, r4}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @mcast2}]}}}]}, 0x4c}}, 0x40000) 168.897624ms ago: executing program 1 (id=2): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, 0x0, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 154.639468ms ago: executing program 4 (id=7): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r2, &(0x7f0000000300), 0x20000000}, 0x20) close(r0) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000300)={r2, &(0x7f0000000240), 0x0}, 0x20) 0s ago: executing program 0 (id=8): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x4031, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000010000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='tlb_flush\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.22' (ED25519) to the list of known hosts. [ 75.243490][ T5819] cgroup: Unknown subsys name 'net' [ 75.369946][ T5819] cgroup: Unknown subsys name 'cpuset' [ 75.378868][ T5819] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.941321][ T5819] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.081024][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.116279][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.126124][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.146891][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.176086][ T5831] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.186132][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.215244][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.224258][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.231830][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.253613][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.264210][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.273032][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.275491][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.296461][ T5841] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 81.304396][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.313917][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.314942][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.321810][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.329917][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.344325][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.344329][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.346686][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.352180][ T5841] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 81.373433][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.404154][ T5844] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 81.416396][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.425392][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.441542][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.449664][ T5844] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 81.457101][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.819833][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 81.832965][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 82.038094][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.045326][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.054128][ T5829] bridge_slave_0: entered allmulticast mode [ 82.061327][ T5829] bridge_slave_0: entered promiscuous mode [ 82.089428][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.097678][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.104905][ T5834] bridge_slave_0: entered allmulticast mode [ 82.115203][ T5834] bridge_slave_0: entered promiscuous mode [ 82.126565][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 82.142075][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.150927][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.158729][ T5829] bridge_slave_1: entered allmulticast mode [ 82.165397][ T5829] bridge_slave_1: entered promiscuous mode [ 82.172975][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 82.184936][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.192383][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.199638][ T5834] bridge_slave_1: entered allmulticast mode [ 82.206595][ T5834] bridge_slave_1: entered promiscuous mode [ 82.271705][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.293157][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 82.315851][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.340551][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.394634][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.465841][ T5829] team0: Port device team_slave_0 added [ 82.485835][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.493165][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.500696][ T5842] bridge_slave_0: entered allmulticast mode [ 82.507702][ T5842] bridge_slave_0: entered promiscuous mode [ 82.526497][ T5834] team0: Port device team_slave_0 added [ 82.532538][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.540135][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.547564][ T5838] bridge_slave_0: entered allmulticast mode [ 82.554205][ T5838] bridge_slave_0: entered promiscuous mode [ 82.564017][ T5829] team0: Port device team_slave_1 added [ 82.590709][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.597994][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.605142][ T5842] bridge_slave_1: entered allmulticast mode [ 82.612306][ T5842] bridge_slave_1: entered promiscuous mode [ 82.620633][ T5834] team0: Port device team_slave_1 added [ 82.635348][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.642708][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.650239][ T5838] bridge_slave_1: entered allmulticast mode [ 82.657906][ T5838] bridge_slave_1: entered promiscuous mode [ 82.732458][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.742858][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.753902][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.780480][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.792467][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.802849][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.810614][ T5835] bridge_slave_0: entered allmulticast mode [ 82.818381][ T5835] bridge_slave_0: entered promiscuous mode [ 82.828839][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.840779][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.850527][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.857853][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.884858][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.897760][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.904752][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.931656][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.945388][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.971901][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.979356][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.005620][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.020770][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.027957][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.035109][ T5835] bridge_slave_1: entered allmulticast mode [ 83.042236][ T5835] bridge_slave_1: entered promiscuous mode [ 83.070963][ T5838] team0: Port device team_slave_0 added [ 83.100794][ T5838] team0: Port device team_slave_1 added [ 83.139918][ T5842] team0: Port device team_slave_0 added [ 83.154726][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.163496][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.189794][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.203369][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.231378][ T5842] team0: Port device team_slave_1 added [ 83.244464][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.248625][ T5844] Bluetooth: hci0: command tx timeout [ 83.251879][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.283203][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.301147][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.322481][ T5834] hsr_slave_0: entered promiscuous mode [ 83.328871][ T5834] hsr_slave_1: entered promiscuous mode [ 83.358683][ T5829] hsr_slave_0: entered promiscuous mode [ 83.365144][ T5829] hsr_slave_1: entered promiscuous mode [ 83.372087][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.380487][ T5829] Cannot create hsr debugfs directory [ 83.396735][ T5844] Bluetooth: hci2: command tx timeout [ 83.417776][ T5835] team0: Port device team_slave_0 added [ 83.424163][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.431481][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.457892][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.476349][ T5144] Bluetooth: hci1: command tx timeout [ 83.482171][ T5144] Bluetooth: hci3: command tx timeout [ 83.488357][ T5844] Bluetooth: hci4: command tx timeout [ 83.504121][ T5835] team0: Port device team_slave_1 added [ 83.510551][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.518156][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.545280][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.603822][ T5838] hsr_slave_0: entered promiscuous mode [ 83.610632][ T5838] hsr_slave_1: entered promiscuous mode [ 83.620529][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.628467][ T5838] Cannot create hsr debugfs directory [ 83.651590][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.658600][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.684625][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.725412][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.732732][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.758893][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.838893][ T5842] hsr_slave_0: entered promiscuous mode [ 83.845268][ T5842] hsr_slave_1: entered promiscuous mode [ 83.851985][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.859871][ T5842] Cannot create hsr debugfs directory [ 83.937782][ T5835] hsr_slave_0: entered promiscuous mode [ 83.947420][ T5835] hsr_slave_1: entered promiscuous mode [ 83.953958][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.963998][ T5835] Cannot create hsr debugfs directory [ 84.135561][ T5829] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.161473][ T5829] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.181865][ T5829] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.193782][ T5829] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.284092][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.302166][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.312737][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.322737][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.395549][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.412810][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.442723][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.461893][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.472813][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.506944][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.522121][ T5842] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.539527][ T5842] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.550284][ T5842] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.563413][ T5842] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.582232][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.589543][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.621667][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.628839][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.709116][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.726897][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.737769][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.750002][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.804417][ T5829] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 84.819961][ T5829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.891669][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.951290][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.980415][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.013758][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.021099][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.053672][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.111013][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.118201][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.141116][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.158443][ T3420] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.165526][ T3420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.175506][ T3420] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.182649][ T3420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.202162][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.240773][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.248305][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.270299][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.280556][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.287734][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.322412][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.329563][ T5844] Bluetooth: hci0: command tx timeout [ 85.377706][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.445498][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.452693][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.476610][ T5844] Bluetooth: hci2: command tx timeout [ 85.497808][ T3420] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.504920][ T3420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.556503][ T5844] Bluetooth: hci4: command tx timeout [ 85.561986][ T5844] Bluetooth: hci3: command tx timeout [ 85.567571][ T5144] Bluetooth: hci1: command tx timeout [ 85.749800][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.885824][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.902265][ T5829] veth0_vlan: entered promiscuous mode [ 85.933850][ T5834] veth0_vlan: entered promiscuous mode [ 85.970021][ T5829] veth1_vlan: entered promiscuous mode [ 86.004085][ T5834] veth1_vlan: entered promiscuous mode [ 86.041153][ T5842] veth0_vlan: entered promiscuous mode [ 86.055581][ T5842] veth1_vlan: entered promiscuous mode [ 86.094847][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.138220][ T5829] veth0_macvtap: entered promiscuous mode [ 86.155806][ T5829] veth1_macvtap: entered promiscuous mode [ 86.174914][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.209687][ T5842] veth0_macvtap: entered promiscuous mode [ 86.231053][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.245417][ T5834] veth0_macvtap: entered promiscuous mode [ 86.262181][ T5834] veth1_macvtap: entered promiscuous mode [ 86.284713][ T5842] veth1_macvtap: entered promiscuous mode [ 86.302996][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.313928][ T5838] veth0_vlan: entered promiscuous mode [ 86.345000][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.362738][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.375640][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.384064][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.394878][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.407200][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.418039][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.430410][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.445701][ T5829] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.455008][ T5829] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.463909][ T5829] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.472826][ T5829] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.485401][ T5838] veth1_vlan: entered promiscuous mode [ 86.498073][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.508701][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.521592][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.541597][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.555419][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.565685][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.580122][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.591430][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.611349][ T5834] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.620213][ T5834] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.630871][ T5834] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.641476][ T5834] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.654071][ T5835] veth0_vlan: entered promiscuous mode [ 86.664989][ T5842] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.673937][ T5842] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.682997][ T5842] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.691907][ T5842] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.713530][ T5835] veth1_vlan: entered promiscuous mode [ 86.788641][ T5838] veth0_macvtap: entered promiscuous mode [ 86.820603][ T5838] veth1_macvtap: entered promiscuous mode [ 86.913421][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.940212][ T46] cfg80211: failed to load regulatory.db [ 86.941455][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.964119][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.986930][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.009290][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.022596][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.041249][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.057065][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.065087][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.074348][ T5835] veth0_macvtap: entered promiscuous mode [ 87.114942][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.126040][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.133912][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.148509][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.167649][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.178250][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.188294][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.200802][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.212652][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.227863][ T5835] veth1_macvtap: entered promiscuous mode [ 87.255679][ T5838] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.268569][ T5838] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.277976][ T5838] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.287224][ T5838] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.330093][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.342317][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.353800][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.364638][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.374870][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.385780][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.396322][ T5844] Bluetooth: hci0: command tx timeout [ 87.397759][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.412693][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.424507][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.448621][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.466808][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.510934][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.530569][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.551908][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.564503][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.566105][ T5844] Bluetooth: hci2: command tx timeout [ 87.581243][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.592156][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.609732][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.623103][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.636115][ T5846] Bluetooth: hci1: command tx timeout [ 87.641558][ T5846] Bluetooth: hci4: command tx timeout [ 87.642330][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.647080][ T5844] Bluetooth: hci3: command tx timeout [ 87.680930][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.695606][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.703745][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.703939][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.715701][ T5835] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.733585][ T5835] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.742733][ T5835] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.751521][ T5835] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.853013][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 87.898992][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.914073][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.918015][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.929945][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.019650][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.029453][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.139918][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.172558][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.227251][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.236327][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.277630][ T5918] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 88.413858][ T5925] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 88.522898][ T5922] Zero length message leads to an empty skb [ 88.604857][ T5931] [ 88.607241][ T5931] ============================= [ 88.612100][ T5931] [ BUG: Invalid wait context ] [ 88.616964][ T5931] 6.12.0-syzkaller-01518-ga5c93bfec0be #0 Not tainted [ 88.623751][ T5931] ----------------------------- [ 88.628664][ T5931] syz.4.7/5931 is trying to lock: [ 88.633716][ T5931] ffffffff8e9b7fd8 (map_idr_lock){+...}-{3:3}, at: bpf_map_put+0x9a/0x380 [ 88.642346][ T5931] other info that might help us debug this: [ 88.648259][ T5931] context-{5:5} [ 88.651740][ T5931] 2 locks held by syz.4.7/5931: [ 88.656631][ T5931] #0: ffffffff8e93a5a0 (rcu_read_lock){....}-{1:3}, at: map_delete_elem+0x338/0x5c0 [ 88.666184][ T5931] #1: ffff88807d6cd0f8 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x1a4/0x370 [ 88.676369][ T5931] stack backtrace: [ 88.680114][ T5931] CPU: 0 UID: 0 PID: 5931 Comm: syz.4.7 Not tainted 6.12.0-syzkaller-01518-ga5c93bfec0be #0 [ 88.690192][ T5931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 88.700465][ T5931] Call Trace: [ 88.703753][ T5931] [ 88.706703][ T5931] dump_stack_lvl+0x241/0x360 [ 88.711402][ T5931] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.716610][ T5931] ? __pfx__printk+0x10/0x10 [ 88.721219][ T5931] __lock_acquire+0x15a8/0x2100 [ 88.726081][ T5931] lock_acquire+0x1ed/0x550 [ 88.730598][ T5931] ? bpf_map_put+0x9a/0x380 [ 88.735123][ T5931] ? __pfx_lock_acquire+0x10/0x10 [ 88.740167][ T5931] ? __pfx_lock_acquire+0x10/0x10 [ 88.745208][ T5931] ? do_raw_spin_lock+0x14f/0x370 [ 88.750245][ T5931] ? __lock_acquire+0x1397/0x2100 [ 88.755272][ T5931] _raw_spin_lock_irqsave+0xd5/0x120 [ 88.760584][ T5931] ? bpf_map_put+0x9a/0x380 [ 88.765106][ T5931] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 88.771025][ T5931] ? htab_lock_bucket+0x1a4/0x370 [ 88.776059][ T5931] bpf_map_put+0x9a/0x380 [ 88.780400][ T5931] ? __pfx_bpf_map_fd_put_ptr+0x10/0x10 [ 88.785987][ T5931] free_htab_elem+0xbb/0x460 [ 88.790593][ T5931] htab_map_delete_elem+0x576/0x6b0 [ 88.795808][ T5931] ? __pfx_lock_acquire+0x10/0x10 [ 88.800855][ T5931] ? __pfx_htab_map_delete_elem+0x10/0x10 [ 88.806589][ T5931] ? __might_fault+0xaa/0x120 [ 88.811281][ T5931] map_delete_elem+0x431/0x5c0 [ 88.816061][ T5931] __sys_bpf+0x598/0x810 [ 88.820315][ T5931] ? __pfx___sys_bpf+0x10/0x10 [ 88.825115][ T5931] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 88.831114][ T5931] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 88.837462][ T5931] ? do_syscall_64+0x100/0x230 [ 88.842238][ T5931] __x64_sys_bpf+0x7c/0x90 [ 88.846661][ T5931] do_syscall_64+0xf3/0x230 [ 88.851165][ T5931] ? clear_bhb_loop+0x35/0x90 [ 88.855846][ T5931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.861770][ T5931] RIP: 0033:0x7fd024f7e759 [ 88.866197][ T5931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.885834][ T5931] RSP: 002b:00007fd025c9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 88.894277][ T5931] RAX: ffffffffffffffda RBX: 00007fd025135f80 RCX: 00007fd024f7e759 [ 88.902258][ T5931] RDX: 0000000000000020 RSI: 0000000020000300 RDI: 0000000000000003 [ 88.910241][ T5931] RBP: 00007fd024ff175e R08: 0000000000000000 R09: 0000000000000000 [ 88.918220][ T5931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.926195][ T5931] R13: 0000000000000000 R14: 00007fd025135f80 R15: 00007ffdc29984f8 [ 88.934177][ T5931] [ 89.486130][ T5846] Bluetooth: hci0: command tx timeout [ 89.636499][ T5846] Bluetooth: hci2: command tx timeout [ 89.716311][ T5846] Bluetooth: hci4: command tx timeout [ 89.716445][ T5844] Bluetooth: hci3: command tx timeout [ 89.721867][ T5846] Bluetooth: hci1: command tx timeout