last executing test programs: 1.976576025s ago: executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 1.7242098s ago: executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000b4000000ffffffff95"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r0}, 0x10) 1.528500832s ago: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="940000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000c400000004c0500140004000000050005000a00000005000100060000000c000300686173683a6970002400078008001340fffffffd0800064000000006080006400000000708001240"], 0x94}}, 0x0) 1.358932855s ago: executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x5e23}}, 0x10) listen(r6, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r7, &(0x7f0000002300)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x4}}, 0x10, 0x0}, 0x0) sendmsg$tipc(r7, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) accept4(r6, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000100)=[{r2, 0x181}, {r3, 0x65c1}], 0x2, 0x0, 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/150, 0x96}], 0x1) r8 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10, r8, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000000002000000000000000000000000000010000180f7000280050001000000000030000380170001"], 0x58}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000fb000000"], 0x14}}, 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000006"], 0x24d8}], 0x1}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b1d5f501db033126aff0f1d0dbd30", 0x10) accept4(r0, 0x0, 0x0, 0x0) 940.43979ms ago: executing program 4: syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @broadcast}, @redirect={0x5, 0x0, 0x0, @remote, {0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev, {[@timestamp={0x44, 0xc, 0x0, 0x0, 0x0, [0x0, 0x0]}]}}}}}}}, 0x0) 830.001822ms ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030000005800018044000400200001000a00000000000000000000002d000000000000000000007700000000200002000a00000000000000fe880000000000000000000000000001000000000d0001007564703a73"], 0x6c}}, 0x0) 818.62203ms ago: executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000240)=[{&(0x7f0000002640)=""/102377, 0x18fe9}], 0x1, 0x1}}], 0x48}, 0x0) 763.893502ms ago: executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22}, 0x10) shutdown(r0, 0x1) shutdown(r0, 0x1) 673.720327ms ago: executing program 1: socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000300)={0x6, {{0x2, 0x0, @multicast2}}}, 0xe7) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000002c0)='cpuset.sched_load_balance\x00', 0x2, 0x0) poll(&(0x7f0000000100)=[{}], 0x64, 0x0) 656.398287ms ago: executing program 4: openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0), 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) 613.017907ms ago: executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000004000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000005600)='sys_enter\x00', r3}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r4, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)='2', 0x1}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) 588.8708ms ago: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x14, 0x6, 0x1, 0x801}, 0x14}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x6000000, [{0x9, 0x43000000}]}]}}, &(0x7f0000000f40)=""/4096, 0x2e, 0x1000, 0x1}, 0x20) socket$nl_sock_diag(0x10, 0x3, 0x4) unshare(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="180100002100000000000000000000108500"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x7) 533.930328ms ago: executing program 1: socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2b, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, &(0x7f00000005c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002cc0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00d0000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 490.054995ms ago: executing program 0: r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) 430.337031ms ago: executing program 3: socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'vcan0\x00', 0x0}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r0}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x300, 0x0, {0x0, 0x0, 0x74, r4}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 413.536972ms ago: executing program 4: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) 412.859524ms ago: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}]}]}]}], {0x14}}, 0x80}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000580)=ANY=[@ANYBLOB="bdc82612ef4ebf7d132b5a6488a8000081000000080045"], 0x0) 371.360232ms ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005000c000100000008001c004802000005000b"], 0x44}}, 0x0) 329.682102ms ago: executing program 1: r0 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/156, 0x9c}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 313.598585ms ago: executing program 2: r0 = socket$inet(0x2, 0x3, 0x5) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, &(0x7f0000000300)="b3", 0x1, 0x20000810, 0x0, 0x600) 277.474969ms ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000090400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b000100677265746170"], 0x3c}}, 0x0) 226.296175ms ago: executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x4}, 0x8) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x0, @local}, 0x10) 224.157726ms ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030000005800018044000400200001000a00000000000000000000002d000000000000000000007700000000200002000a00000000000000fe880000000000000000000000000001000000000d0001007564703a73"], 0x6c}}, 0x0) 189.66367ms ago: executing program 0: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) socket$inet(0x2, 0x80001, 0x0) socket(0x0, 0x80805, 0x0) socket(0x2, 0x80805, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x18, r2, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x4}]}, 0x18}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 163.923002ms ago: executing program 3: bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000080), 0x4000000000001f0, 0x0) 162.452231ms ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 73.402848ms ago: executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x14, 0x6, 0x1, 0x801}, 0x14}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x6000000, [{0x9, 0x43000000}]}]}}, &(0x7f0000000f40)=""/4096, 0x2e, 0x1000, 0x1}, 0x20) socket$nl_sock_diag(0x10, 0x3, 0x4) unshare(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="180100002100000000000000000000108500"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x7) 43.504272ms ago: executing program 2: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0xe) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000380), 0x12) 22.074002ms ago: executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000500)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000440)=@gcm_128={{0x304}, "e453f079df21d540", "1ec2d524d78682576ec2d9e13dad1018", "993161e3", "be0692db0b429ee8"}, 0x28) write$binfmt_script(r0, &(0x7f0000000c40), 0x4) 0s ago: executing program 3: socket$kcm(0xa, 0x2, 0x73) r0 = socket(0xa, 0x80003, 0x81) ioctl$SIOCGIFMTU(r0, 0x5450, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000001200)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000011c0)={0x0, 0x24}}, 0x8800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt$bt_hci(r1, 0x84, 0x83, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@newqdisc={0x8e0, 0x58, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xf}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @qdisc_kind_options=@q_tbf={{0x8}, {0x818, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x190891b17ff41dd9}, @TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x1e, 0x4, 0x1, 0xffffffff, 0xc223, 0x6, 0x0, 0x0, 0x912, 0xfffffffd, 0x0, 0x7, 0x101, 0x6, 0x5, 0x9, 0x6, 0x7ff, 0x2, 0x8, 0x3, 0x6c41, 0xfffffffa, 0x1f, 0xffffff65, 0xfffffffd, 0xa7, 0x200, 0x3ff, 0xfffff800, 0x7ff, 0x5, 0xde2, 0x2, 0x1, 0x7, 0x8, 0x3, 0x8000, 0x8500, 0xffff, 0x4, 0x76cb, 0x800, 0x7, 0x101, 0x8, 0x430, 0x101, 0x2, 0x7ba8, 0x4, 0x3, 0x609, 0x3ff, 0xf, 0x3e4, 0x80000000, 0x3, 0x5, 0x10001, 0x30bf0000, 0x9, 0x5, 0x100, 0x788f6990, 0x8, 0x9, 0x0, 0x7fffffff, 0x8, 0x6b7c, 0x0, 0x9, 0x7, 0x7fff, 0x3, 0x0, 0x2, 0x9, 0x8, 0x7, 0x8, 0x9, 0x0, 0x8, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0xa84, 0x4, 0xc83a, 0x6, 0x41, 0x3, 0x5, 0xffffffff, 0x0, 0x8, 0x7, 0xc1e6, 0x10, 0x1000, 0x639bdd5b, 0x0, 0x40, 0x9, 0x4c, 0x5827, 0x506, 0x6, 0x2, 0x4, 0x80000001, 0xa041, 0x3f, 0x1, 0x1ff, 0x0, 0xbad, 0x7fff, 0xf3, 0x400, 0x7, 0x100, 0x80, 0x0, 0x200, 0x8001, 0x2, 0x9f2f, 0x4, 0xffffffe1, 0x1, 0x9820, 0xfffffff9, 0x3, 0x1ff, 0x800, 0xff, 0x3f, 0x5, 0x4, 0x1, 0x0, 0x2, 0x7ff, 0x4, 0x3, 0x4, 0x100, 0x1000, 0x0, 0x1, 0x9, 0x0, 0x0, 0x100, 0x5, 0xfb, 0x9, 0x6, 0x9, 0x6, 0x0, 0x6, 0x7eb, 0x3, 0x200, 0x9, 0x1, 0x4, 0x8, 0x3, 0x7, 0xffff, 0x4000000, 0x2, 0x5, 0x47c2, 0x0, 0x3a5, 0x2, 0x100, 0x8, 0x9, 0x0, 0x0, 0x1, 0x8000, 0x1, 0x0, 0x1, 0x7, 0x4, 0x9, 0x2, 0x1, 0x1, 0x1ff, 0x8000, 0x93, 0x3, 0x7fff, 0xfff, 0x5, 0xfffffff8, 0x2, 0x80000000, 0x3, 0x4d5aede0, 0x5, 0x800, 0x81, 0x1000, 0xb1a, 0x0, 0x1f, 0x165, 0x9, 0xffffffff, 0x8, 0x93e, 0x145, 0x7, 0xfffffffd, 0x5a, 0x5, 0x0, 0x1f, 0x1, 0x7ff, 0x1000, 0x1, 0x0, 0x1032, 0x7ff, 0x6, 0x3, 0x9, 0x5, 0x3, 0x7, 0x3, 0x40, 0x101, 0x5, 0x20, 0x8000, 0x1ff, 0x7c]}, @TCA_TBF_PTAB={0x404, 0x3, [0x5, 0x6, 0x1f, 0xa1, 0xffff19c2, 0x0, 0x5, 0x0, 0x0, 0x9, 0x7, 0x10000, 0xc63e, 0x4, 0x401, 0x6d6, 0x10001, 0x8000, 0x0, 0x84, 0x5, 0x8, 0x80, 0x9, 0x8, 0x7fffffff, 0xfffffff7, 0x4, 0x4800, 0x7ff, 0x0, 0x0, 0x7f, 0x7fffffff, 0x0, 0x6, 0x7, 0xfffffffa, 0xbf08, 0xd1c, 0x1, 0x1f, 0x8, 0x81, 0x1, 0x1, 0x45, 0x1, 0x7, 0x0, 0x3, 0x55, 0x7fffffff, 0x1ff, 0x80000000, 0x5, 0x9, 0xffffffff, 0x5, 0xfffffeff, 0x1, 0x100, 0xff, 0x7fff, 0x6, 0x74, 0x5, 0x6, 0x400, 0x3f, 0x4, 0x6, 0x3, 0x0, 0x9, 0xffffffff, 0x1f, 0x80000, 0xffffffff, 0x0, 0x0, 0x8, 0x5, 0x8, 0x41, 0x23c, 0x3, 0xc77, 0xfffffffa, 0x0, 0x4, 0x6, 0x20, 0x2, 0x0, 0x3ff, 0x6, 0x6, 0xc8, 0x0, 0x7fff, 0x8, 0x8, 0x8, 0x2b8, 0x401, 0x5d000, 0x9, 0x8, 0x101, 0x893, 0x200, 0x6, 0x8, 0x0, 0x8000, 0x400, 0x7, 0x9, 0x8000, 0x7, 0x7fffffff, 0xfc, 0x7, 0x7, 0x3, 0x5c8, 0x1639, 0x1000, 0x200, 0x7, 0x5470, 0x0, 0xf8, 0x8, 0x3, 0x8001, 0xe024, 0x3, 0x5, 0x2, 0x7f, 0x7, 0x7fffffff, 0x9, 0x7f, 0x2e5, 0x7fffffff, 0x4, 0x1, 0x1f, 0x3, 0x220e, 0xb0d, 0x6, 0x6, 0x3, 0x9, 0x80000000, 0x1, 0x5, 0x8000, 0xa4, 0x2, 0x3, 0x800, 0x8, 0x7, 0x0, 0x96, 0x0, 0x4, 0x4, 0x0, 0x4, 0xff, 0x9, 0x8, 0x7ff, 0x401, 0x8000, 0x2, 0x9b, 0x0, 0x1f, 0x9, 0x9, 0x0, 0x6, 0x7, 0xff, 0x3ff, 0x6, 0x7, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x401, 0x0, 0x3f, 0x6, 0x4, 0x1, 0x1, 0x200, 0x5, 0x7f, 0x7fff, 0x6, 0x2, 0x1, 0x19c8000, 0x9, 0x400, 0x0, 0x6, 0x5, 0xffffff80, 0x5b96, 0x7, 0x6, 0x7, 0x4, 0x8001, 0x9, 0x8000, 0x1, 0x85, 0x80000001, 0x9, 0x2, 0x7, 0x5, 0x6, 0x0, 0x8d, 0x7, 0x328d, 0x0, 0x8, 0x5d, 0x31c4, 0x0, 0x3, 0xffffffff, 0x0, 0x474f, 0x2, 0x9, 0x5, 0x5, 0xffc, 0x4, 0xba63]}]}}, @TCA_STAB={0x88, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xc, 0x2, [0x5, 0x86, 0x8, 0x0]}}, {{0x1c, 0x1, {0x40, 0x3, 0x8, 0x7, 0x1, 0x9, 0x5, 0x7}}, {0x12, 0x2, [0x7, 0x7, 0x1f, 0x4, 0x5, 0xc55e, 0x8]}}, {{0x1c, 0x1, {0x5, 0x14, 0x6, 0x10000, 0x2, 0x45, 0x8, 0x6}}, {0x10, 0x2, [0x0, 0x9, 0x7ff, 0xff, 0x8, 0x1]}}]}]}, 0x8e0}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r5, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f00000005c0), 0x12) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x7fffffff, 0x5}) write$cgroup_int(r7, &(0x7f0000000200), 0x42400) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.37' (ED25519) to the list of known hosts. 2024/06/24 14:37:20 fuzzer started 2024/06/24 14:37:20 dialing manager at 10.128.0.169:30016 [ 52.945910][ T5088] cgroup: Unknown subsys name 'net' [ 53.127627][ T5088] cgroup: Unknown subsys name 'rlimit' 2024/06/24 14:37:22 starting 5 executor processes [ 54.254524][ T5089] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 55.045458][ T5111] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.058930][ T5111] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.066843][ T5111] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.075481][ T5111] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.083423][ T5111] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 55.090789][ T5111] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.115454][ T5119] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 55.136374][ T4489] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 55.136979][ T5119] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 55.144811][ T4489] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 55.160491][ T5121] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 55.163519][ T5119] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 55.176632][ T5119] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 55.184525][ T5119] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 55.185442][ T5124] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 55.192497][ T5119] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 55.205926][ T5121] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 55.208920][ T5119] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 55.213568][ T5124] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 55.220677][ T5119] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 55.228915][ T5124] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 55.235583][ T5111] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 55.242833][ T5124] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 55.255145][ T5119] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 55.256170][ T5124] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 55.269769][ T5124] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 55.279074][ T5124] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 55.279407][ T5119] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 55.294912][ T5119] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 55.303094][ T5119] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 55.889057][ T5108] chnl_net:caif_netlink_parms(): no params data found [ 55.905761][ T5112] chnl_net:caif_netlink_parms(): no params data found [ 56.025765][ T5114] chnl_net:caif_netlink_parms(): no params data found [ 56.064382][ T5122] chnl_net:caif_netlink_parms(): no params data found [ 56.085105][ T5113] chnl_net:caif_netlink_parms(): no params data found [ 56.096359][ T5112] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.103692][ T5112] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.111408][ T5112] bridge_slave_0: entered allmulticast mode [ 56.119164][ T5112] bridge_slave_0: entered promiscuous mode [ 56.171502][ T5108] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.178820][ T5108] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.186464][ T5108] bridge_slave_0: entered allmulticast mode [ 56.193809][ T5108] bridge_slave_0: entered promiscuous mode [ 56.212327][ T5112] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.219521][ T5112] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.226941][ T5112] bridge_slave_1: entered allmulticast mode [ 56.234079][ T5112] bridge_slave_1: entered promiscuous mode [ 56.262141][ T5108] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.269462][ T5108] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.277171][ T5108] bridge_slave_1: entered allmulticast mode [ 56.284657][ T5108] bridge_slave_1: entered promiscuous mode [ 56.359097][ T5108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.382252][ T5112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.408060][ T5108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.422947][ T5112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.531017][ T5112] team0: Port device team_slave_0 added [ 56.549961][ T5114] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.557829][ T5114] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.565394][ T5114] bridge_slave_0: entered allmulticast mode [ 56.572136][ T5114] bridge_slave_0: entered promiscuous mode [ 56.579864][ T5114] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.587486][ T5114] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.594843][ T5114] bridge_slave_1: entered allmulticast mode [ 56.601541][ T5114] bridge_slave_1: entered promiscuous mode [ 56.611751][ T5108] team0: Port device team_slave_0 added [ 56.628827][ T5113] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.636204][ T5113] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.643634][ T5113] bridge_slave_0: entered allmulticast mode [ 56.650362][ T5113] bridge_slave_0: entered promiscuous mode [ 56.659420][ T5112] team0: Port device team_slave_1 added [ 56.677433][ T5122] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.685102][ T5122] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.692229][ T5122] bridge_slave_0: entered allmulticast mode [ 56.699186][ T5122] bridge_slave_0: entered promiscuous mode [ 56.708737][ T5108] team0: Port device team_slave_1 added [ 56.729849][ T5114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.739260][ T5113] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.746858][ T5113] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.754238][ T5113] bridge_slave_1: entered allmulticast mode [ 56.760936][ T5113] bridge_slave_1: entered promiscuous mode [ 56.778437][ T5122] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.785724][ T5122] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.793101][ T5122] bridge_slave_1: entered allmulticast mode [ 56.799841][ T5122] bridge_slave_1: entered promiscuous mode [ 56.833876][ T5114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.877348][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.884340][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.910414][ T5112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.945107][ T5108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.952079][ T5108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.978493][ T5108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.003106][ T5114] team0: Port device team_slave_0 added [ 57.011437][ T5113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.023364][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.030322][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.056680][ T5112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.077321][ T5122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.088584][ T5122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.099130][ T5108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.106229][ T5108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.132611][ T5108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.151746][ T5114] team0: Port device team_slave_1 added [ 57.172515][ T5113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.203823][ T5119] Bluetooth: hci0: command tx timeout [ 57.213754][ T5122] team0: Port device team_slave_0 added [ 57.264684][ T5122] team0: Port device team_slave_1 added [ 57.271847][ T5114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.279774][ T5114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.305774][ T5119] Bluetooth: hci1: command tx timeout [ 57.311638][ T5114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.324968][ T5114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.331930][ T5114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.357877][ T5114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.368651][ T5115] Bluetooth: hci3: command tx timeout [ 57.372521][ T52] Bluetooth: hci2: command tx timeout [ 57.380105][ T5119] Bluetooth: hci4: command tx timeout [ 57.395278][ T5113] team0: Port device team_slave_0 added [ 57.448687][ T5113] team0: Port device team_slave_1 added [ 57.469677][ T5108] hsr_slave_0: entered promiscuous mode [ 57.476181][ T5108] hsr_slave_1: entered promiscuous mode [ 57.504133][ T5122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.511088][ T5122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.537465][ T5122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.555033][ T5112] hsr_slave_0: entered promiscuous mode [ 57.561242][ T5112] hsr_slave_1: entered promiscuous mode [ 57.567706][ T5112] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.575553][ T5112] Cannot create hsr debugfs directory [ 57.617633][ T5122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.624706][ T5122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.651129][ T5122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.680827][ T5113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.687847][ T5113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.714451][ T5113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.739903][ T5114] hsr_slave_0: entered promiscuous mode [ 57.746124][ T5114] hsr_slave_1: entered promiscuous mode [ 57.752109][ T5114] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.759793][ T5114] Cannot create hsr debugfs directory [ 57.784738][ T5113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.791700][ T5113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.817770][ T5113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.921458][ T5113] hsr_slave_0: entered promiscuous mode [ 57.928049][ T5113] hsr_slave_1: entered promiscuous mode [ 57.934490][ T5113] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.942047][ T5113] Cannot create hsr debugfs directory [ 57.975981][ T5122] hsr_slave_0: entered promiscuous mode [ 57.982269][ T5122] hsr_slave_1: entered promiscuous mode [ 57.988712][ T5122] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.996375][ T5122] Cannot create hsr debugfs directory [ 58.374418][ T5108] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.385651][ T5108] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.397425][ T5108] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.407202][ T5108] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.467047][ T5112] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.480874][ T5112] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.495350][ T5112] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.516343][ T5112] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.598583][ T5114] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.609323][ T5114] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.620075][ T5114] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.650653][ T5114] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.689557][ T5113] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.729308][ T5108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.737424][ T5113] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.749878][ T5113] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.761410][ T5113] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.817183][ T5108] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.857701][ T5122] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.875586][ T5122] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.888007][ T5122] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.900714][ T5159] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.908053][ T5159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.930847][ T5122] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.974924][ T5159] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.982066][ T5159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.027224][ T5112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.085220][ T5112] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.185680][ T2529] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.192880][ T2529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.239425][ T5159] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.246603][ T5159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.294216][ T5119] Bluetooth: hci0: command tx timeout [ 59.321273][ T5113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.363182][ T5119] Bluetooth: hci1: command tx timeout [ 59.381307][ T5113] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.400105][ T5114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.424240][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.431370][ T5160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.442656][ T5119] Bluetooth: hci3: command tx timeout [ 59.453732][ T5119] Bluetooth: hci4: command tx timeout [ 59.458819][ T5112] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.459148][ T5119] Bluetooth: hci2: command tx timeout [ 59.507136][ T2529] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.514291][ T2529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.538367][ T5108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.553513][ T5122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.624132][ T5114] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.675433][ T5162] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.683164][ T5162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.698369][ T5162] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.705577][ T5162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.727179][ T5122] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.802680][ T5162] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.809841][ T5162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.820046][ T5162] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.827243][ T5162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.859445][ T5112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.912456][ T5108] veth0_vlan: entered promiscuous mode [ 59.974803][ T5122] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.985650][ T5122] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.021062][ T5108] veth1_vlan: entered promiscuous mode [ 60.101826][ T5113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.191963][ T5108] veth0_macvtap: entered promiscuous mode [ 60.232253][ T5112] veth0_vlan: entered promiscuous mode [ 60.260574][ T5108] veth1_macvtap: entered promiscuous mode [ 60.281829][ T5112] veth1_vlan: entered promiscuous mode [ 60.350483][ T5108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.375659][ T5114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.428324][ T5108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.473673][ T5108] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.490496][ T5108] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.500428][ T5108] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.519504][ T5108] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.535797][ T5112] veth0_macvtap: entered promiscuous mode [ 60.546545][ T5112] veth1_macvtap: entered promiscuous mode [ 60.588328][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.599521][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.614268][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.634576][ T5122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.661157][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.672287][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.687134][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.699469][ T5112] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.709017][ T5112] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.718468][ T5112] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.728015][ T5112] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.749597][ T5114] veth0_vlan: entered promiscuous mode [ 60.789338][ T5114] veth1_vlan: entered promiscuous mode [ 60.866940][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.881128][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.930612][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.940632][ T5122] veth0_vlan: entered promiscuous mode [ 60.947026][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.951476][ T5113] veth0_vlan: entered promiscuous mode [ 61.002097][ T5122] veth1_vlan: entered promiscuous mode [ 61.028989][ T5114] veth0_macvtap: entered promiscuous mode [ 61.050992][ T5113] veth1_vlan: entered promiscuous mode [ 61.067860][ T5114] veth1_macvtap: entered promiscuous mode [ 61.129195][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.154842][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.165556][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.180223][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.192263][ T5114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.205064][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.226800][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.242194][ T5122] veth0_macvtap: entered promiscuous mode [ 61.258896][ T5122] veth1_macvtap: entered promiscuous mode [ 61.297478][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.309913][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.320487][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.334669][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.364054][ T5119] Bluetooth: hci0: command tx timeout [ 61.365193][ T5114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.417701][ T5113] veth0_macvtap: entered promiscuous mode [ 61.442794][ T5119] Bluetooth: hci1: command tx timeout [ 61.447871][ T5114] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.458483][ T5114] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.467915][ T5114] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.477054][ T5114] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.515287][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.523437][ T5119] Bluetooth: hci4: command tx timeout [ 61.533174][ T5119] Bluetooth: hci2: command tx timeout [ 61.533184][ T52] Bluetooth: hci3: command tx timeout [ 61.547036][ T5113] veth1_macvtap: entered promiscuous mode [ 61.567466][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.578913][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.588518][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.598603][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.609347][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.623191][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.630846][ T5194] Zero length message leads to an empty skb [ 61.633860][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.651164][ T5122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.710310][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.731371][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.743353][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.755245][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.766792][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.777943][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.789945][ T5122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.825713][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.845920][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.877079][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.888854][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.899293][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.910182][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.921076][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.950268][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.972809][ T5113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.001902][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.045220][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.068387][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.079710][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.095517][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.117040][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.142430][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.175826][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.192343][ T5113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.208360][ T5113] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.224542][ T5113] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.234564][ T5113] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.243639][ T5113] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.280145][ T5122] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.308066][ T5122] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.340068][ T5122] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.362426][ T5122] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.494022][ T5207] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 62.521127][ T5207] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 62.575135][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.605114][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.648687][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.678669][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.746142][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.763574][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.865098][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.906312][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.989972][ T2812] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.026640][ T2812] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.047267][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.085449][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.443075][ T52] Bluetooth: hci0: command tx timeout [ 63.523429][ T52] Bluetooth: hci1: command tx timeout [ 63.575179][ T5238] syzkaller0: entered promiscuous mode [ 63.603061][ T52] Bluetooth: hci3: command tx timeout [ 63.612836][ T52] Bluetooth: hci2: command tx timeout [ 63.614329][ T5119] Bluetooth: hci4: command tx timeout [ 63.702625][ T5238] syzkaller0: entered allmulticast mode [ 63.856758][ T5243] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 63.902679][ T5243] 0ªX¹¦À: renamed from caif0 [ 63.939962][ T5243] 0ªX¹¦À: entered allmulticast mode [ 63.963955][ T5243] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 64.322208][ T5302] Driver unsupported XDP return value 0 on prog (id 10) dev N/A, expect packet loss! [ 65.360852][ T5310] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 65.634458][ T5314] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 65.641340][ T5314] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 66.390175][ T5333] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 66.413410][ T5333] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 66.420754][ T5333] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 66.820082][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 68.958455][ T5404] warning: `syz-executor.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 69.362833][ T5410] netlink: 9286 bytes leftover after parsing attributes in process `syz-executor.4'. [ 69.853250][ T5424] Bluetooth: MGMT ver 1.22 [ 69.957600][ T5428] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 69.993527][ T5434] netlink: 9286 bytes leftover after parsing attributes in process `syz-executor.3'. [ 70.499991][ T5451] ɶƣ0GC¦: entered promiscuous mode [ 71.237198][ T5462] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 71.245462][ T5462] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 71.248283][ T5461] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 71.389470][ T5470] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 71.514028][ T5478] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 71.544873][ T5479] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 71.587045][ T5479] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 71.691516][ T1243] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.698334][ T1243] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.726493][ T5481] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET) [ 71.813337][ T5497] bridge0: port 2(bridge_slave_1) entered learning state [ 71.843308][ T5497] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 71.905056][ T5500] tipc: Started in network mode [ 71.925414][ T5500] tipc: Node identity , cluster identity 4711 [ 71.931530][ T5500] tipc: Failed to set node id, please configure manually [ 72.013137][ T5500] tipc: Enabling of bearer rejected, failed to enable media [ 72.122536][ T5509] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 72.377921][ T5522] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 72.493772][ T5520] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 72.519095][ T5520] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 72.684325][ T5539] dccp_invalid_packet: P.Data Offset(172) too large [ 72.842756][ T5544] tipc: Started in network mode [ 72.865730][ T5544] tipc: Node identity , cluster identity 4711 [ 72.883938][ T5544] tipc: Failed to set node id, please configure manually [ 72.912585][ T5544] tipc: Enabling of bearer rejected, failed to enable media [ 73.361476][ T5576] tipc: Started in network mode [ 73.368313][ T5576] tipc: Node identity , cluster identity 4711 [ 73.374799][ T5576] tipc: Failed to set node id, please configure manually [ 73.411208][ T5576] tipc: Enabling of bearer rejected, failed to enable media [ 73.646392][ T5593] [ 73.648740][ T5593] ============================================ [ 73.654879][ T5593] WARNING: possible recursive locking detected [ 73.660998][ T5593] 6.10.0-rc4-syzkaller-00177-g058722ee350c #0 Not tainted [ 73.668073][ T5593] -------------------------------------------- [ 73.674191][ T5593] syz-executor.4/5593 is trying to acquire lock: [ 73.680486][ T5593] ffff88805394b1d8 (&qs->lock){..-.}-{2:2}, at: __stack_map_get+0x14b/0x4b0 [ 73.689176][ T5593] [ 73.689176][ T5593] but task is already holding lock: [ 73.696531][ T5593] ffff88805394b1d8 (&qs->lock){..-.}-{2:2}, at: queue_stack_map_push_elem+0x1b2/0x660 [ 73.706070][ T5593] [ 73.706070][ T5593] other info that might help us debug this: [ 73.714102][ T5593] Possible unsafe locking scenario: [ 73.714102][ T5593] [ 73.721522][ T5593] CPU0 [ 73.724774][ T5593] ---- [ 73.728027][ T5593] lock(&qs->lock); [ 73.731894][ T5593] lock(&qs->lock); [ 73.735763][ T5593] [ 73.735763][ T5593] *** DEADLOCK *** [ 73.735763][ T5593] [ 73.743877][ T5593] May be due to missing lock nesting notation [ 73.743877][ T5593] [ 73.752171][ T5593] 4 locks held by syz-executor.4/5593: [ 73.757603][ T5593] #0: ffff888053e9f398 (&mm->mmap_lock){++++}-{3:3}, at: exit_mmap+0x2a9/0xc80 [ 73.766625][ T5593] #1: ffffffff8e333fa0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run3+0x24c/0x5a0 [ 73.776008][ T5593] #2: ffff88805394b1d8 (&qs->lock){..-.}-{2:2}, at: queue_stack_map_push_elem+0x1b2/0x660 [ 73.786010][ T5593] #3: ffffffff8e333fa0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x1fc/0x540 [ 73.795385][ T5593] [ 73.795385][ T5593] stack backtrace: [ 73.801254][ T5593] CPU: 1 PID: 5593 Comm: syz-executor.4 Not tainted 6.10.0-rc4-syzkaller-00177-g058722ee350c #0 [ 73.811637][ T5593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 73.821670][ T5593] Call Trace: [ 73.824928][ T5593] [ 73.827838][ T5593] dump_stack_lvl+0x241/0x360 [ 73.832503][ T5593] ? __pfx_dump_stack_lvl+0x10/0x10 [ 73.837680][ T5593] ? print_deadlock_bug+0x479/0x620 [ 73.842877][ T5593] validate_chain+0x15d3/0x5900 [ 73.847726][ T5593] ? __pfx_validate_chain+0x10/0x10 [ 73.852921][ T5593] ? __pfx_validate_chain+0x10/0x10 [ 73.858099][ T5593] ? lockdep_hardirqs_on+0x99/0x150 [ 73.863275][ T5593] ? __pfx_validate_chain+0x10/0x10 [ 73.868450][ T5593] ? validate_chain+0x11e/0x5900 [ 73.873385][ T5593] ? mark_lock+0x9a/0x350 [ 73.877691][ T5593] ? __lock_acquire+0x1346/0x1fd0 [ 73.882745][ T5593] ? mark_lock+0x9a/0x350 [ 73.887050][ T5593] ? __pfx_validate_chain+0x10/0x10 [ 73.892226][ T5593] __lock_acquire+0x1346/0x1fd0 [ 73.897143][ T5593] lock_acquire+0x1ed/0x550 [ 73.901621][ T5593] ? __stack_map_get+0x14b/0x4b0 [ 73.906538][ T5593] ? __pfx_lock_acquire+0x10/0x10 [ 73.911556][ T5593] ? __pfx_validate_chain+0x10/0x10 [ 73.916737][ T5593] ? __lock_acquire+0x1346/0x1fd0 [ 73.921738][ T5593] _raw_spin_lock_irqsave+0xd5/0x120 [ 73.927002][ T5593] ? __stack_map_get+0x14b/0x4b0 [ 73.931914][ T5593] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 73.937789][ T5593] ? bpf_trace_run2+0x1fc/0x540 [ 73.942619][ T5593] __stack_map_get+0x14b/0x4b0 [ 73.947362][ T5593] ? __pfx_lock_acquire+0x10/0x10 [ 73.952359][ T5593] ? __pfx_validate_chain+0x10/0x10 [ 73.957534][ T5593] ? __pfx___stack_map_get+0x10/0x10 [ 73.962797][ T5593] ? __pfx___cant_migrate+0x10/0x10 [ 73.967979][ T5593] ? __lock_acquire+0x1346/0x1fd0 [ 73.972978][ T5593] ? bpf_trace_run2+0x1fc/0x540 [ 73.977804][ T5593] bpf_prog_94b194d4ebfffdd5+0x45/0x49 [ 73.983244][ T5593] bpf_trace_run2+0x2ec/0x540 [ 73.987897][ T5593] ? __pfx_bpf_trace_run2+0x10/0x10 [ 73.993075][ T5593] trace_contention_end+0x114/0x140 [ 73.998267][ T5593] __pv_queued_spin_lock_slowpath+0xb81/0xdc0 [ 74.004315][ T5593] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 74.010898][ T5593] queued_spin_lock_slowpath+0x42/0x50 [ 74.016335][ T5593] do_raw_spin_lock+0x272/0x370 [ 74.021164][ T5593] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 74.026513][ T5593] ? __lock_acquire+0x1346/0x1fd0 [ 74.031514][ T5593] _raw_spin_lock_irqsave+0xe1/0x120 [ 74.036779][ T5593] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 74.042655][ T5593] queue_stack_map_push_elem+0x1b2/0x660 [ 74.048269][ T5593] ? exit_mm+0x220/0x310 [ 74.052506][ T5593] ? do_exit+0x9aa/0x27e0 [ 74.056814][ T5593] ? __pfx_queue_stack_map_push_elem+0x10/0x10 [ 74.062943][ T5593] ? __pfx___cant_migrate+0x10/0x10 [ 74.068119][ T5593] ? bpf_trace_run3+0x24c/0x5a0 [ 74.072947][ T5593] bpf_prog_216c997a1f42e404+0x3f/0x43 [ 74.078380][ T5593] bpf_trace_run3+0x33a/0x5a0 [ 74.083041][ T5593] ? __pfx_bpf_trace_run3+0x10/0x10 [ 74.088215][ T5593] ? __vm_area_free+0xe0/0x110 [ 74.092961][ T5593] ? __pfx___might_resched+0x10/0x10 [ 74.098221][ T5593] ? __vm_area_free+0xe0/0x110 [ 74.102962][ T5593] kmem_cache_free+0x2a9/0x350 [ 74.107706][ T5593] ? mas_find+0x950/0xbb0 [ 74.112016][ T5593] __vm_area_free+0xe0/0x110 [ 74.116584][ T5593] exit_mmap+0x645/0xc80 [ 74.120801][ T5593] ? __pfx_exit_mmap+0x10/0x10 [ 74.125541][ T5593] ? __asan_memset+0x23/0x50 [ 74.130110][ T5593] ? uprobe_clear_state+0x277/0x290 [ 74.135283][ T5593] ? mm_update_next_owner+0x53c/0x660 [ 74.140634][ T5593] __mmput+0x115/0x3c0 [ 74.144680][ T5593] exit_mm+0x220/0x310 [ 74.148726][ T5593] ? __pfx_exit_mm+0x10/0x10 [ 74.153290][ T5593] ? taskstats_exit+0x348/0xa70 [ 74.158116][ T5593] ? tty_audit_exit+0x155/0x200 [ 74.162954][ T5593] do_exit+0x9aa/0x27e0 [ 74.167087][ T5593] ? __pfx_do_exit+0x10/0x10 [ 74.171674][ T5593] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 74.177024][ T5593] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 74.182977][ T5593] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 74.189279][ T5593] ? _raw_spin_lock_irq+0xdf/0x120 [ 74.194371][ T5593] do_group_exit+0x207/0x2c0 [ 74.198937][ T5593] ? _raw_spin_unlock_irq+0x23/0x50 [ 74.204106][ T5593] ? lockdep_hardirqs_on+0x99/0x150 [ 74.209282][ T5593] get_signal+0x16a1/0x1740 [ 74.213767][ T5593] ? __pfx_get_signal+0x10/0x10 [ 74.218598][ T5593] arch_do_signal_or_restart+0x96/0x860 [ 74.224123][ T5593] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 74.230249][ T5593] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 74.236205][ T5593] ? syscall_exit_to_user_mode+0xa3/0x370 [ 74.241900][ T5593] syscall_exit_to_user_mode+0xc9/0x370 [ 74.247423][ T5593] do_syscall_64+0x100/0x230 [ 74.251989][ T5593] ? clear_bhb_loop+0x35/0x90 [ 74.256646][ T5593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.262524][ T5593] RIP: 0033:0x7f409787d0a9 [ 74.266914][ T5593] Code: Unable to access opcode bytes at 0x7f409787d07f. [ 74.273905][ T5593] RSP: 002b:00007f409861b178 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 74.282291][ T5593] RAX: 0000000000000001 RBX: 00007f40979b3f88 RCX: 00007f409787d0a9 [ 74.290237][ T5593] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f40979b3f8c [ 74.298183][ T5593] RBP: 00007f40979b3f80 R08: 7fffffffffffffff R09: 00007f409861b6c0 [ 74.306130][ T5593] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f40979b3f8c [ 74.314078][ T5593] R13: 000000000000000b R14: 00007ffc1176b6d0 R15: 00007ffc1176b7b8 [ 74.322029][ T5593]