Warning: Permanently added '10.128.0.151' (ED25519) to the list of known hosts. 2024/05/11 19:44:20 fuzzer started 2024/05/11 19:44:20 dialing manager at 10.128.0.169:30006 [ 62.607725][ T5084] cgroup: Unknown subsys name 'net' [ 62.742661][ T5084] cgroup: Unknown subsys name 'rlimit' 2024/05/11 19:44:22 code coverage: enabled 2024/05/11 19:44:22 comparison tracing: enabled 2024/05/11 19:44:22 extra coverage: enabled 2024/05/11 19:44:22 delay kcov mmap: enabled 2024/05/11 19:44:22 setuid sandbox: enabled 2024/05/11 19:44:22 namespace sandbox: enabled 2024/05/11 19:44:22 Android sandbox: /sys/fs/selinux/policy does not exist 2024/05/11 19:44:22 fault injection: enabled 2024/05/11 19:44:22 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2024/05/11 19:44:22 net packet injection: enabled 2024/05/11 19:44:22 net device setup: enabled 2024/05/11 19:44:22 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/05/11 19:44:22 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/05/11 19:44:22 NIC VF setup: PCI device 0000:00:11.0 is not available 2024/05/11 19:44:22 USB emulation: enabled 2024/05/11 19:44:22 hci packet injection: enabled 2024/05/11 19:44:22 wifi device emulation: enabled 2024/05/11 19:44:22 802.15.4 emulation: enabled 2024/05/11 19:44:22 swap file: enabled 2024/05/11 19:44:22 starting 5 executor processes [ 64.368214][ T5084] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 65.408099][ T5105] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 65.429752][ T5108] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 65.431019][ T5110] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 65.439081][ T5108] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 65.451738][ T5113] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 65.453532][ T5110] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 65.459642][ T5108] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 65.466643][ T5110] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 65.474127][ T5108] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 65.480389][ T5110] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 65.487951][ T5108] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 65.494535][ T5111] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 65.501604][ T5108] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 65.508661][ T5110] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 65.518302][ T5108] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 65.523322][ T5110] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 65.530484][ T5108] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 65.537697][ T5111] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 65.543177][ T5108] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 65.550425][ T5111] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 65.556918][ T5108] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 65.571820][ T5111] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 65.572602][ T5108] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 65.578908][ T5114] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 65.587669][ T5106] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 65.601230][ T5106] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.609064][ T5114] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 65.621452][ T5106] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 65.632300][ T4480] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 65.641996][ T4480] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 66.213792][ T5098] chnl_net:caif_netlink_parms(): no params data found [ 66.249706][ T5104] chnl_net:caif_netlink_parms(): no params data found [ 66.326822][ T5097] chnl_net:caif_netlink_parms(): no params data found [ 66.371875][ T5100] chnl_net:caif_netlink_parms(): no params data found [ 66.529538][ T5109] chnl_net:caif_netlink_parms(): no params data found [ 66.579153][ T5098] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.586863][ T5098] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.594073][ T5098] bridge_slave_0: entered allmulticast mode [ 66.604811][ T5098] bridge_slave_0: entered promiscuous mode [ 66.613872][ T5098] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.621239][ T5098] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.628551][ T5098] bridge_slave_1: entered allmulticast mode [ 66.636326][ T5098] bridge_slave_1: entered promiscuous mode [ 66.654848][ T5104] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.662005][ T5104] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.669564][ T5104] bridge_slave_0: entered allmulticast mode [ 66.677208][ T5104] bridge_slave_0: entered promiscuous mode [ 66.685820][ T5097] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.692943][ T5097] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.703221][ T5097] bridge_slave_0: entered allmulticast mode [ 66.711209][ T5097] bridge_slave_0: entered promiscuous mode [ 66.724597][ T5097] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.731748][ T5097] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.739386][ T5097] bridge_slave_1: entered allmulticast mode [ 66.746933][ T5097] bridge_slave_1: entered promiscuous mode [ 66.797973][ T5104] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.805877][ T5104] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.813001][ T5104] bridge_slave_1: entered allmulticast mode [ 66.821001][ T5104] bridge_slave_1: entered promiscuous mode [ 66.872240][ T5098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.884295][ T5098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.938642][ T5097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.960484][ T5100] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.967749][ T5100] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.975594][ T5100] bridge_slave_0: entered allmulticast mode [ 66.982481][ T5100] bridge_slave_0: entered promiscuous mode [ 67.012028][ T5104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.023585][ T5097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.042241][ T5100] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.050018][ T5100] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.057227][ T5100] bridge_slave_1: entered allmulticast mode [ 67.064122][ T5100] bridge_slave_1: entered promiscuous mode [ 67.101705][ T5109] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.109125][ T5109] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.116381][ T5109] bridge_slave_0: entered allmulticast mode [ 67.123350][ T5109] bridge_slave_0: entered promiscuous mode [ 67.133341][ T5104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.168469][ T5097] team0: Port device team_slave_0 added [ 67.194443][ T5098] team0: Port device team_slave_0 added [ 67.202702][ T5098] team0: Port device team_slave_1 added [ 67.209463][ T5109] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.216796][ T5109] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.223914][ T5109] bridge_slave_1: entered allmulticast mode [ 67.231069][ T5109] bridge_slave_1: entered promiscuous mode [ 67.262866][ T5104] team0: Port device team_slave_0 added [ 67.271455][ T5097] team0: Port device team_slave_1 added [ 67.279697][ T5100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.295202][ T5100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.342021][ T5109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.353235][ T5104] team0: Port device team_slave_1 added [ 67.425153][ T5098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.432180][ T5098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.458460][ T5098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.471664][ T5098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.478935][ T5098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.505022][ T5098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.518829][ T5109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.551315][ T5104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.558564][ T5104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.584611][ T5104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.600657][ T5097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.607762][ T5097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.635895][ T5097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.640290][ T52] Bluetooth: hci2: command tx timeout [ 67.649545][ T5097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.659356][ T5097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.685538][ T5097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.700562][ T5100] team0: Port device team_slave_0 added [ 67.704450][ T52] Bluetooth: hci0: command tx timeout [ 67.710242][ T5100] team0: Port device team_slave_1 added [ 67.711978][ T52] Bluetooth: hci4: command tx timeout [ 67.717398][ T5105] Bluetooth: hci1: command tx timeout [ 67.717556][ T5105] Bluetooth: hci3: command tx timeout [ 67.759531][ T5104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.767155][ T5104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.793797][ T5104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.843801][ T5109] team0: Port device team_slave_0 added [ 67.868436][ T5100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.875774][ T5100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.902427][ T5100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.930936][ T5098] hsr_slave_0: entered promiscuous mode [ 67.937550][ T5098] hsr_slave_1: entered promiscuous mode [ 67.946896][ T5109] team0: Port device team_slave_1 added [ 67.979370][ T5097] hsr_slave_0: entered promiscuous mode [ 67.987606][ T5097] hsr_slave_1: entered promiscuous mode [ 67.993873][ T5097] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.001767][ T5097] Cannot create hsr debugfs directory [ 68.008771][ T5100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.015840][ T5100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.042186][ T5100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.130655][ T5100] hsr_slave_0: entered promiscuous mode [ 68.137556][ T5100] hsr_slave_1: entered promiscuous mode [ 68.143712][ T5100] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.151527][ T5100] Cannot create hsr debugfs directory [ 68.161502][ T5104] hsr_slave_0: entered promiscuous mode [ 68.168244][ T5104] hsr_slave_1: entered promiscuous mode [ 68.174923][ T5104] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.182533][ T5104] Cannot create hsr debugfs directory [ 68.201289][ T5109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.208299][ T5109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.234497][ T5109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.252221][ T5109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.259260][ T5109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.285235][ T5109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.513108][ T5109] hsr_slave_0: entered promiscuous mode [ 68.519930][ T5109] hsr_slave_1: entered promiscuous mode [ 68.526475][ T5109] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.534082][ T5109] Cannot create hsr debugfs directory [ 68.843141][ T5098] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.862655][ T5098] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.873196][ T5098] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.886881][ T5098] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.936618][ T5097] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.949931][ T5097] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.968055][ T5097] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.978198][ T5097] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.052169][ T5100] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.100598][ T5100] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.112103][ T5100] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.137990][ T5100] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.192354][ T5104] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.203158][ T5104] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.214736][ T5104] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.250991][ T5104] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.299204][ T5109] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.309739][ T5109] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.338596][ T5109] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.351395][ T5109] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.421713][ T5098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.470130][ T5097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.516404][ T5098] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.573440][ T5148] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.580744][ T5148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.592063][ T5148] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.599231][ T5148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.611264][ T5097] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.656380][ T5150] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.663497][ T5150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.674035][ T5150] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.681311][ T5150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.705925][ T5105] Bluetooth: hci2: command tx timeout [ 69.764168][ T5109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.780375][ T5100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.785260][ T4480] Bluetooth: hci1: command tx timeout [ 69.791735][ T52] Bluetooth: hci0: command tx timeout [ 69.792454][ T4480] Bluetooth: hci3: command tx timeout [ 69.798283][ T5105] Bluetooth: hci4: command tx timeout [ 69.808988][ T5104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.878723][ T5100] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.897669][ T5104] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.917584][ T5149] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.924788][ T5149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.934013][ T5149] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.941184][ T5149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.964897][ T5109] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.973371][ T5149] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.980505][ T5149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.026579][ T5150] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.033728][ T5150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.063570][ T5150] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.070839][ T5150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.103908][ T5149] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.111120][ T5149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.141967][ T5097] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.217354][ T5104] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.230645][ T5104] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.319156][ T5098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.575182][ T5098] veth0_vlan: entered promiscuous mode [ 70.613313][ T5098] veth1_vlan: entered promiscuous mode [ 70.669837][ T5097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.768594][ T5098] veth0_macvtap: entered promiscuous mode [ 70.793227][ T5104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.815676][ T5098] veth1_macvtap: entered promiscuous mode [ 70.867714][ T5100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.880816][ T5097] veth0_vlan: entered promiscuous mode [ 70.908895][ T5098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.936336][ T5097] veth1_vlan: entered promiscuous mode [ 70.949097][ T5109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.962209][ T5098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.977479][ T5098] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.989652][ T5098] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.999399][ T5098] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.008566][ T5098] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.128968][ T5097] veth0_macvtap: entered promiscuous mode [ 71.188376][ T5104] veth0_vlan: entered promiscuous mode [ 71.205585][ T5097] veth1_macvtap: entered promiscuous mode [ 71.250735][ T5104] veth1_vlan: entered promiscuous mode [ 71.272473][ T5100] veth0_vlan: entered promiscuous mode [ 71.310446][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.322749][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.371518][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.388677][ T1243] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.392328][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.395783][ T1243] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.407671][ T5097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.421875][ T5100] veth1_vlan: entered promiscuous mode [ 71.436479][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.447860][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.492977][ T5109] veth0_vlan: entered promiscuous mode [ 71.502418][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.515620][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.528916][ T5097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.541759][ T5097] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.559077][ T5097] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.568097][ T5097] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.577082][ T5097] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.604115][ T5104] veth0_macvtap: entered promiscuous mode [ 71.616878][ T5100] veth0_macvtap: entered promiscuous mode executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)='c', 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000005c0)='O', 0x1}], 0x1}, 0x31) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x48) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/211, 0xd3}], 0x1}, 0x0) [ 71.649757][ T5109] veth1_vlan: entered promiscuous mode [ 71.659511][ T5104] veth1_macvtap: entered promiscuous mode [ 71.691314][ T5100] veth1_macvtap: entered promiscuous mode executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000800053000000007287fa0800000000000000ad"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000a300)) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00'}) [ 71.784591][ T5105] Bluetooth: hci2: command tx timeout [ 71.840952][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.851565][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.862015][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.873268][ T5105] Bluetooth: hci3: command tx timeout [ 71.879010][ T4480] Bluetooth: hci4: command tx timeout [ 71.879055][ T4480] Bluetooth: hci0: command tx timeout [ 71.879080][ T4480] Bluetooth: hci1: command tx timeout [ 71.910498][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.923143][ T5100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.937630][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.948652][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.959082][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.970038][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.983738][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.994463][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.005837][ T5104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.018784][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.029452][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.040390][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.051087][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.065721][ T5104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.076787][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) [ 72.085245][ T5183] warning: `syz-executor.1' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 72.096513][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.123949][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.135154][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.145604][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.158568][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.168737][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.179486][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffc, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='ext4_es_find_extent_range_exit\x00', r1}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x40305839, &(0x7f0000000540)={'\x00', @link_local={0x1, 0x80, 0xc2, 0x5}}) [ 72.193412][ T5100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.245588][ T5104] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.278269][ T5104] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 executing program 1: bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1141, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000000000000000000000000100018130000", @ANYRES32=r0, @ANYBLOB="0000000000000000850000001f00000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a3312779a", 0x0, 0x0, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) [ 72.293207][ T5104] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.309035][ T5104] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.325920][ T5100] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.346067][ T5100] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.361308][ T5100] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.370914][ T5100] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 executing program 1: socketpair(0x10, 0x2, 0x0, &(0x7f0000000040)) [ 72.390306][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.409559][ T5109] veth0_macvtap: entered promiscuous mode [ 72.418571][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r3}, 0x3d) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 72.498796][ T5109] veth1_macvtap: entered promiscuous mode executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) close(r0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) [ 72.598303][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x800c6613, &(0x7f0000000180)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='cq_reschedule\x00', r0}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000400)='FROZEN\x00', 0x7) mkdirat$cgroup(r2, &(0x7f0000000200)='syz1\x00', 0x1ff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000900)={'bridge0\x00', @broadcast}) [ 72.641378][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.654152][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.666918][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.676861][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.697592][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.707841][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.723909][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.737427][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.807736][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.820098][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.830504][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.841828][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.852686][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.867922][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.878099][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.889315][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.901054][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_1 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r3}, 0x3d) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r4}, 0x3d) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 72.918540][ T5198] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.926591][ T5198] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.937338][ C0] hrtimer: interrupt took 32242 ns executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000cd7c5796d409779000", @ANYRES32, @ANYBLOB="0000000000000000b70800000c0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0xc, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r1}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='ext4_sync_file_exit\x00', r4}, 0x10) write$cgroup_int(r3, &(0x7f0000000200), 0x43400) [ 73.055410][ T5199] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.062647][ T5199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.070429][ T5199] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.077760][ T5199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.096087][ T5199] bridge0: entered promiscuous mode [ 73.101329][ T5199] bridge0: entered allmulticast mode [ 73.133365][ T5109] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.142646][ T5109] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.157296][ T5109] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.166188][ T5109] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000000), 0x400000) executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) [ 73.194513][ T1787] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.202517][ T1787] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.313252][ T5152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.330820][ T5152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40286608, &(0x7f0000000540)) [ 73.415822][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.433992][ T5209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.443644][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.451253][ T5209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='ext4_es_remove_extent\x00', r1}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r2) unlink(&(0x7f0000000140)='./cgroup\x00') [ 73.513077][ T5211] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) executing program 3: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xda00) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) perf_event_open$cgroup(0x0, r0, 0x0, 0xffffffffffffffff, 0x0) [ 73.560399][ T5153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.585024][ T5153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.647751][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.659017][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8994, &(0x7f0000000900)={'bridge0\x00', @random="00000600"}) executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r1}, 0x3d) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r2}, 0x3d) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) [ 73.869062][ T5105] Bluetooth: hci2: command tx timeout [ 73.936334][ T5217] [ 73.938705][ T5217] ====================================================== [ 73.945737][ T5217] WARNING: possible circular locking dependency detected [ 73.952772][ T5217] 6.9.0-rc5-syzkaller-00185-g3e9bc0472b91 #0 Not tainted [ 73.959808][ T5217] ------------------------------------------------------ [ 73.966831][ T5217] syz-executor.1/5217 is trying to acquire lock: [ 73.973153][ T5217] ffff8880b9529430 (krc.lock){..-.}-{2:2}, at: kvfree_call_rcu+0x18a/0x790 [ 73.981799][ T5217] [ 73.981799][ T5217] but task is already holding lock: [ 73.989159][ T5217] ffff88802ad131f8 (&trie->lock){-.-.}-{2:2}, at: trie_update_elem+0xcb/0xc10 [ 73.998051][ T5217] [ 73.998051][ T5217] which lock already depends on the new lock. [ 73.998051][ T5217] [ 74.008442][ T5217] [ 74.008442][ T5217] the existing dependency chain (in reverse order) is: [ 74.017532][ T5217] [ 74.017532][ T5217] -> #2 (&trie->lock){-.-.}-{2:2}: [ 74.024826][ T5217] lock_acquire+0x1ed/0x550 [ 74.029850][ T5217] _raw_spin_lock_irqsave+0xd5/0x120 [ 74.035669][ T5217] trie_delete_elem+0x96/0x6a0 [ 74.040953][ T5217] bpf_prog_2c29ac5cdc6b1842+0x2e/0x46 [ 74.046929][ T5217] bpf_trace_run2+0x204/0x420 [ 74.052224][ T5217] enqueue_hrtimer+0x35a/0x3c0 [ 74.057512][ T5217] hrtimer_start_range_ns+0xaa0/0xc60 [ 74.063414][ T5217] do_nanosleep+0x158/0x600 [ 74.068450][ T5217] hrtimer_nanosleep+0x227/0x470 [ 74.073906][ T5217] __se_sys_clock_nanosleep+0x32b/0x3c0 [ 74.079972][ T5217] do_syscall_64+0xf5/0x240 [ 74.085006][ T5217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.091415][ T5217] [ 74.091415][ T5217] -> #1 (hrtimer_bases.lock){-.-.}-{2:2}: [ 74.099316][ T5217] lock_acquire+0x1ed/0x550 [ 74.104332][ T5217] _raw_spin_lock_irqsave+0xd5/0x120 [ 74.110152][ T5217] hrtimer_start_range_ns+0xdf/0xc60 [ 74.115953][ T5217] kvfree_call_rcu+0x5e6/0x790 [ 74.121251][ T5217] rtnl_register_internal+0x482/0x590 [ 74.127155][ T5217] rtnl_register+0x36/0x80 [ 74.132090][ T5217] ip_rt_init+0x2f5/0x3a0 [ 74.136942][ T5217] ip_init+0xe/0x20 [ 74.141269][ T5217] inet_init+0x3d8/0x580 [ 74.146038][ T5217] do_one_initcall+0x248/0x880 [ 74.151327][ T5217] do_initcall_level+0x157/0x210 [ 74.156789][ T5217] do_initcalls+0x3f/0x80 [ 74.161635][ T5217] kernel_init_freeable+0x435/0x5d0 [ 74.167357][ T5217] kernel_init+0x1d/0x2b0 [ 74.172217][ T5217] ret_from_fork+0x4b/0x80 [ 74.177194][ T5217] ret_from_fork_asm+0x1a/0x30 [ 74.182490][ T5217] [ 74.182490][ T5217] -> #0 (krc.lock){..-.}-{2:2}: [ 74.189534][ T5217] validate_chain+0x18cb/0x58e0 [ 74.194911][ T5217] __lock_acquire+0x1346/0x1fd0 [ 74.200287][ T5217] lock_acquire+0x1ed/0x550 [ 74.205309][ T5217] _raw_spin_lock+0x2e/0x40 [ 74.210339][ T5217] kvfree_call_rcu+0x18a/0x790 [ 74.215632][ T5217] trie_update_elem+0x819/0xc10 [ 74.221003][ T5217] bpf_map_update_value+0x4d3/0x540 [ 74.226714][ T5217] generic_map_update_batch+0x60d/0x900 [ 74.232777][ T5217] bpf_map_do_batch+0x3e0/0x690 [ 74.238158][ T5217] __sys_bpf+0x377/0x810 [ 74.242920][ T5217] __x64_sys_bpf+0x7c/0x90 [ 74.247861][ T5217] do_syscall_64+0xf5/0x240 [ 74.252890][ T5217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.259307][ T5217] [ 74.259307][ T5217] other info that might help us debug this: [ 74.259307][ T5217] [ 74.269526][ T5217] Chain exists of: [ 74.269526][ T5217] krc.lock --> hrtimer_bases.lock --> &trie->lock [ 74.269526][ T5217] [ 74.281861][ T5217] Possible unsafe locking scenario: [ 74.281861][ T5217] [ 74.289309][ T5217] CPU0 CPU1 [ 74.294670][ T5217] ---- ---- [ 74.300023][ T5217] lock(&trie->lock); [ 74.304084][ T5217] lock(hrtimer_bases.lock); [ 74.311275][ T5217] lock(&trie->lock); [ 74.317858][ T5217] lock(krc.lock); [ 74.321660][ T5217] [ 74.321660][ T5217] *** DEADLOCK *** [ 74.321660][ T5217] [ 74.329793][ T5217] 2 locks held by syz-executor.1/5217: [ 74.335238][ T5217] #0: ffffffff8e334d20 (rcu_read_lock){....}-{1:2}, at: bpf_map_update_value+0x3c4/0x540 [ 74.345165][ T5217] #1: ffff88802ad131f8 (&trie->lock){-.-.}-{2:2}, at: trie_update_elem+0xcb/0xc10 [ 74.354490][ T5217] [ 74.354490][ T5217] stack backtrace: [ 74.360371][ T5217] CPU: 1 PID: 5217 Comm: syz-executor.1 Not tainted 6.9.0-rc5-syzkaller-00185-g3e9bc0472b91 #0 [ 74.370691][ T5217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 74.380758][ T5217] Call Trace: [ 74.384039][ T5217] [ 74.386977][ T5217] dump_stack_lvl+0x241/0x360 [ 74.391672][ T5217] ? __pfx_dump_stack_lvl+0x10/0x10 [ 74.396886][ T5217] ? print_circular_bug+0x130/0x1a0 [ 74.402093][ T5217] check_noncircular+0x36a/0x4a0 [ 74.407037][ T5217] ? __pfx_check_noncircular+0x10/0x10 [ 74.412503][ T5217] ? lockdep_lock+0x123/0x2b0 [ 74.417179][ T5217] ? mark_lock+0x9a/0x350 [ 74.421515][ T5217] ? _find_first_zero_bit+0xd4/0x100 [ 74.426810][ T5217] validate_chain+0x18cb/0x58e0 [ 74.431674][ T5217] ? __pfx_validate_chain+0x10/0x10 [ 74.436914][ T5217] ? stack_depot_save_flags+0x6e4/0x830 [ 74.442470][ T5217] ? do_raw_spin_lock+0x14f/0x370 [ 74.447505][ T5217] ? __pfx_lock_release+0x10/0x10 [ 74.452536][ T5217] ? do_raw_spin_unlock+0x13c/0x8b0 [ 74.457773][ T5217] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 74.463679][ T5217] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 74.470012][ T5217] ? stack_trace_save+0x118/0x1d0 [ 74.475049][ T5217] ? mark_lock+0x9a/0x350 [ 74.479382][ T5217] __lock_acquire+0x1346/0x1fd0 [ 74.484245][ T5217] lock_acquire+0x1ed/0x550 [ 74.488747][ T5217] ? kvfree_call_rcu+0x18a/0x790 [ 74.493696][ T5217] ? __pfx_lock_acquire+0x10/0x10 [ 74.498734][ T5217] ? __phys_addr+0xba/0x170 [ 74.503251][ T5217] _raw_spin_lock+0x2e/0x40 [ 74.507768][ T5217] ? kvfree_call_rcu+0x18a/0x790 [ 74.512713][ T5217] kvfree_call_rcu+0x18a/0x790 [ 74.517488][ T5217] ? __pfx_kvfree_call_rcu+0x10/0x10 [ 74.522780][ T5217] ? percpu_ref_put+0x181/0x250 [ 74.527639][ T5217] ? longest_prefix_match+0x33d/0x670 [ 74.533029][ T5217] trie_update_elem+0x819/0xc10 [ 74.537903][ T5217] bpf_map_update_value+0x4d3/0x540 [ 74.543111][ T5217] generic_map_update_batch+0x60d/0x900 [ 74.548686][ T5217] ? __pfx_generic_map_update_batch+0x10/0x10 [ 74.554762][ T5217] ? __pfx_generic_map_update_batch+0x10/0x10 [ 74.560830][ T5217] bpf_map_do_batch+0x3e0/0x690 [ 74.565692][ T5217] __sys_bpf+0x377/0x810 [ 74.569941][ T5217] ? __pfx___sys_bpf+0x10/0x10 [ 74.574707][ T5217] ? xfd_validate_state+0x6e/0x150 [ 74.579839][ T5217] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 74.585824][ T5217] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 74.592164][ T5217] ? do_syscall_64+0x102/0x240 [ 74.596958][ T5217] __x64_sys_bpf+0x7c/0x90 [ 74.601390][ T5217] do_syscall_64+0xf5/0x240 [ 74.605906][ T5217] ? clear_bhb_loop+0x35/0x90 [ 74.610595][ T5217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.616497][ T5217] RIP: 0033:0x7fe7b287dd69 [ 74.620914][ T5217] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 74.640534][ T5217] RSP: 002b:00007fe7b36bd0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 74.648970][ T5217] RAX: ffffffffffffffda RBX: 00007fe7b29abf80 RCX: 00007fe7b287dd69 [ 74.656966][ T5217] RDX: 0000000000000038 RSI: 0000000020000000 RDI: 000000000000001a [ 74.664946][ T5217] RBP: 00007fe7b28ca49e R08: 0000000000000000 R09: 0000000000000000 [ 74.672921][ T5217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.680898][ T5217] R13: 000000000000000b R14: 00007fe7b29abf80 R15: 00007ffc7cc1f378 [ 74.688885][ T5217] [ 74.694074][ T5105] Bluetooth: hci3: command tx timeout [ 74.700686][ T5105] Bluetooth: hci1: command tx timeout [ 74.706222][ T5105] Bluetooth: hci0: command tx timeout [ 74.711694][ T5105] Bluetooth: hci4: command tx timeout [ 75.170181][ T5245] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.185420][ T5245] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.340660][ T5251] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.347889][ T5251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.355402][ T5251] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.362560][ T5251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.387627][ T5251] bridge0: entered promiscuous mode [ 75.393106][ T5251] bridge0: entered allmulticast mode [ 81.629770][ T44] cfg80211: failed to load regulatory.db