last executing test programs: 14.415819272s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r0}, &(0x7f0000000a80), &(0x7f0000000ac0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 14.250672768s ago: executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, 0x0, 0xda00) 2.60485341s ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000100300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x2000) 2.296061395s ago: executing program 1: r0 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r0, &(0x7f0000006480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000006280)=""/108, 0x6c}, {&(0x7f00000008c0)=""/199, 0xc7}, {&(0x7f00000045c0)=""/4107, 0x100b}, {&(0x7f0000003500)=""/100, 0x64}, {&(0x7f0000000a80)=""/224, 0xe0}, {&(0x7f0000000d40)=""/91, 0x5b}, {&(0x7f00000034c0)=""/44, 0x2c}], 0x8}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a788bab6c95f79725074", 0x1c}], 0x1}, 0x0) 1.764068806s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000680), &(0x7f00000006c0)='%+9llu \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='ext4_discard_preallocations\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) 1.669376182s ago: executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b81a100850000006d000000040000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000f80)='mm_page_alloc\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='mm_page_alloc\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x7, 0x4, 0x100, 0x401, 0x0, 0x1}, 0x48) 1.600972008s ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x97) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{}, &(0x7f0000000a80), &(0x7f0000000ac0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x8, &(0x7f0000000000)=@framed={{}, [@map_val, @map_val={0x18, 0x0, 0x2, 0x0, r0}, @alu]}, 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) 1.457359514s ago: executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1], 0x18}, 0x0) close(r0) 1.297540805s ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='ext4_da_update_reserve_space\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000280)=ANY=[], 0x8) write$cgroup_int(r3, &(0x7f0000000200), 0x43400) 1.283362057s ago: executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='ext4_sync_file_exit\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='ext4_sync_file_exit\x00', r0}, 0x10) write$cgroup_int(r3, &(0x7f0000000200), 0x43400) 1.07904701s ago: executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10}, 0x49) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf04000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x90) 1.02694526s ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x3, 0x6}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) 991.126667ms ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, 0x0, 0x32600) 875.081245ms ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000178500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='ext4_da_write_pages_extent\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_pid(r2, &(0x7f0000000980), 0x12) 774.309757ms ago: executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x101) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r1, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000980)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$sock(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000040)="ff", 0x1}], 0x1}, 0x0) 734.096063ms ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='ext4_da_write_pages_extent\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x2000) 714.227643ms ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2600}, 0x90) 663.956439ms ago: executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='ext4_sync_file_enter\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_pid(r1, &(0x7f0000000980), 0x12) 574.648935ms ago: executing program 1: r0 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r0, &(0x7f0000006480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000006280)=""/108, 0x6c}, {&(0x7f00000008c0)=""/199, 0xc7}, {&(0x7f00000045c0)=""/4107, 0x100b}, {&(0x7f0000003500)=""/100, 0x64}, {&(0x7f0000000a80)=""/224, 0xe0}, {&(0x7f0000000d40)=""/91, 0x5b}, {&(0x7f00000034c0)=""/44, 0x2c}], 0x8}, 0x0) sendmsg$inet(r0, 0x0, 0x0) 517.459125ms ago: executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) write$cgroup_devices(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="1e0308"], 0xffdd) 507.7204ms ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='ext4_da_update_reserve_space\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000280)=ANY=[], 0x8) write$cgroup_int(r3, &(0x7f0000000200), 0x43400) 459.932103ms ago: executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xe, 0x4, 0x0, 0x200}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000e40000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000a80)='ext4_writepages\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f00000003c0), 0x9) 369.991495ms ago: executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "b9dc05cc9591a0e9", "9d597b8566fb9b1ff9e847ef151545d4", "a483a4b2", "b2e71c7c92421350"}, 0x28) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40010043, 0x0) 340.286213ms ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000f404000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) 327.738993ms ago: executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) 276.463151ms ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) r4 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000000c0), 0x12) write$cgroup_freezer_state(r3, &(0x7f0000000400)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r3, &(0x7f0000000080)='THAWED\x00', 0x7) 229.810332ms ago: executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10}, 0x49) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xf, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x90) 125.09457ms ago: executing program 0: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x80}}, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x44, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1d, r2}, 0x10, &(0x7f0000000180)={0x0}, 0x2}, 0x0) 46.365696ms ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 0s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000faffffffb703000008400000b70600000000feff850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x143ffe, 0x7fe2, 0x1}, 0x48) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.245' (ED25519) to the list of known hosts. 2024/06/14 18:59:00 fuzzer started 2024/06/14 18:59:01 dialing manager at 10.128.0.169:30016 [ 71.924640][ T5095] cgroup: Unknown subsys name 'net' [ 72.129286][ T5095] cgroup: Unknown subsys name 'rlimit' 2024/06/14 18:59:03 starting 5 executor processes [ 73.562378][ T5096] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 74.548404][ T5122] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.550467][ T5124] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.557755][ T5122] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.564750][ T5124] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.571237][ T5122] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.577998][ T5124] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.585295][ T5122] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.594667][ T5124] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.599624][ T5122] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 74.606497][ T5124] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.612221][ T5122] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.621018][ T5124] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 74.634483][ T5124] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.642737][ T5124] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.648225][ T4492] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.651779][ T5124] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.665008][ T5124] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 74.673607][ T5124] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.731372][ T5124] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.750783][ T5126] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 74.750863][ T5125] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.767785][ T5125] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 74.775764][ T5125] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 74.781672][ T5126] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.784627][ T5125] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 74.792312][ T5126] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.817883][ T5126] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 74.825401][ T5126] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 74.835155][ T5126] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 74.843688][ T5126] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.363373][ T5117] chnl_net:caif_netlink_parms(): no params data found [ 75.413225][ T5116] chnl_net:caif_netlink_parms(): no params data found [ 75.604276][ T5118] chnl_net:caif_netlink_parms(): no params data found [ 75.636246][ T5117] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.644455][ T5117] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.652990][ T5117] bridge_slave_0: entered allmulticast mode [ 75.661084][ T5117] bridge_slave_0: entered promiscuous mode [ 75.674359][ T5117] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.681633][ T5117] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.689198][ T5117] bridge_slave_1: entered allmulticast mode [ 75.696394][ T5117] bridge_slave_1: entered promiscuous mode [ 75.704128][ T5116] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.711512][ T5116] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.718900][ T5116] bridge_slave_0: entered allmulticast mode [ 75.725891][ T5116] bridge_slave_0: entered promiscuous mode [ 75.764968][ T5127] chnl_net:caif_netlink_parms(): no params data found [ 75.786593][ T5116] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.793833][ T5116] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.801623][ T5116] bridge_slave_1: entered allmulticast mode [ 75.809204][ T5116] bridge_slave_1: entered promiscuous mode [ 75.915601][ T5117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.973671][ T5117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.986661][ T5116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.029758][ T5118] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.036988][ T5118] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.045098][ T5118] bridge_slave_0: entered allmulticast mode [ 76.052852][ T5118] bridge_slave_0: entered promiscuous mode [ 76.076988][ T5116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.106260][ T5118] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.113704][ T5118] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.121023][ T5118] bridge_slave_1: entered allmulticast mode [ 76.128760][ T5118] bridge_slave_1: entered promiscuous mode [ 76.166195][ T5117] team0: Port device team_slave_0 added [ 76.189975][ T5116] team0: Port device team_slave_0 added [ 76.225424][ T5127] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.232882][ T5127] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.240891][ T5127] bridge_slave_0: entered allmulticast mode [ 76.249149][ T5127] bridge_slave_0: entered promiscuous mode [ 76.274171][ T5117] team0: Port device team_slave_1 added [ 76.281948][ T5116] team0: Port device team_slave_1 added [ 76.297199][ T5128] chnl_net:caif_netlink_parms(): no params data found [ 76.309664][ T5127] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.316865][ T5127] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.324602][ T5127] bridge_slave_1: entered allmulticast mode [ 76.332117][ T5127] bridge_slave_1: entered promiscuous mode [ 76.354212][ T5118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.423510][ T5118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.446600][ T5117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.453971][ T5117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.480028][ T5117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.514926][ T5127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.528815][ T5127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.555177][ T5117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.562328][ T5117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.588971][ T5117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.601125][ T5116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.608775][ T5116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.635401][ T5116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.649668][ T5116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.656649][ T5116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.682784][ T5116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.698358][ T5126] Bluetooth: hci0: command tx timeout [ 76.704235][ T5126] Bluetooth: hci2: command tx timeout [ 76.726494][ T5118] team0: Port device team_slave_0 added [ 76.785507][ T5118] team0: Port device team_slave_1 added [ 76.787531][ T5126] Bluetooth: hci1: command tx timeout [ 76.819980][ T5127] team0: Port device team_slave_0 added [ 76.846195][ T5117] hsr_slave_0: entered promiscuous mode [ 76.853936][ T5117] hsr_slave_1: entered promiscuous mode [ 76.868396][ T5126] Bluetooth: hci4: command tx timeout [ 76.915389][ T5127] team0: Port device team_slave_1 added [ 76.937851][ T5126] Bluetooth: hci3: command tx timeout [ 76.939466][ T5118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.951291][ T5118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.977592][ T5118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.993554][ T5116] hsr_slave_0: entered promiscuous mode [ 77.000957][ T5116] hsr_slave_1: entered promiscuous mode [ 77.007957][ T5116] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.015858][ T5116] Cannot create hsr debugfs directory [ 77.074999][ T5118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.086290][ T5118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.113117][ T5118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.132483][ T5128] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.140113][ T5128] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.148021][ T5128] bridge_slave_0: entered allmulticast mode [ 77.155621][ T5128] bridge_slave_0: entered promiscuous mode [ 77.172642][ T5127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.179973][ T5127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.205982][ T5127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.220751][ T5127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.228000][ T5127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.254528][ T5127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.280511][ T5128] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.287962][ T5128] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.295170][ T5128] bridge_slave_1: entered allmulticast mode [ 77.302553][ T5128] bridge_slave_1: entered promiscuous mode [ 77.374115][ T5128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.430553][ T5118] hsr_slave_0: entered promiscuous mode [ 77.437023][ T5118] hsr_slave_1: entered promiscuous mode [ 77.443864][ T5118] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.451900][ T5118] Cannot create hsr debugfs directory [ 77.479122][ T5128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.618290][ T5127] hsr_slave_0: entered promiscuous mode [ 77.625134][ T5127] hsr_slave_1: entered promiscuous mode [ 77.634056][ T5127] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.641922][ T5127] Cannot create hsr debugfs directory [ 77.652173][ T5128] team0: Port device team_slave_0 added [ 77.661901][ T5128] team0: Port device team_slave_1 added [ 77.816716][ T5128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.823967][ T5128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.850200][ T5128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.863736][ T5128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.870799][ T5128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.896958][ T5128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.018869][ T5128] hsr_slave_0: entered promiscuous mode [ 78.025990][ T5128] hsr_slave_1: entered promiscuous mode [ 78.033607][ T5128] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.041247][ T5128] Cannot create hsr debugfs directory [ 78.192203][ T5117] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.227090][ T5117] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.240291][ T5117] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.275096][ T5117] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.375980][ T5116] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.393772][ T5116] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.420191][ T5116] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.431410][ T5116] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 78.534721][ T5118] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.550988][ T5118] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.590732][ T5118] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.621059][ T5118] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.686566][ T5127] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.721006][ T5127] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.734169][ T5127] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.779059][ T5126] Bluetooth: hci2: command tx timeout [ 78.781915][ T5127] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.784811][ T5121] Bluetooth: hci0: command tx timeout [ 78.867979][ T5121] Bluetooth: hci1: command tx timeout [ 78.883651][ T5128] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.896364][ T5128] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.922047][ T5116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.936123][ T5128] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.943437][ T5121] Bluetooth: hci4: command tx timeout [ 78.954536][ T5128] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.982672][ T5117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.019530][ T5121] Bluetooth: hci3: command tx timeout [ 79.069098][ T5117] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.101830][ T5116] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.125908][ T5164] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.133515][ T5164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.145767][ T5164] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.152932][ T5164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.183381][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.190595][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.270721][ T5118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.295765][ T5165] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.302992][ T5165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.348200][ T5118] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.441022][ T5165] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.448322][ T5165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.474515][ T5165] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.481796][ T5165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.692224][ T5127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.776125][ T5128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.831555][ T5127] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.869208][ T5117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.914115][ T933] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.921448][ T933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.962262][ T5128] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.990491][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.997773][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.032829][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.040103][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.051081][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.058310][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.116478][ T5116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.161036][ T5118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.225541][ T5127] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 80.236367][ T5127] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.316224][ T5128] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 80.327586][ T5128] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.408939][ T5117] veth0_vlan: entered promiscuous mode [ 80.507248][ T5117] veth1_vlan: entered promiscuous mode [ 80.535066][ T5118] veth0_vlan: entered promiscuous mode [ 80.599811][ T5118] veth1_vlan: entered promiscuous mode [ 80.744843][ T5127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.773180][ T5118] veth0_macvtap: entered promiscuous mode [ 80.793454][ T5118] veth1_macvtap: entered promiscuous mode [ 80.809746][ T5117] veth0_macvtap: entered promiscuous mode [ 80.858608][ T5121] Bluetooth: hci2: command tx timeout [ 80.858625][ T5126] Bluetooth: hci0: command tx timeout [ 80.874823][ T5117] veth1_macvtap: entered promiscuous mode [ 80.900905][ T5118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.926987][ T5128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.947771][ T5126] Bluetooth: hci1: command tx timeout [ 80.959799][ T5118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.993871][ T5118] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.005288][ T5118] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.014450][ T5118] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.023444][ T5126] Bluetooth: hci4: command tx timeout [ 81.029505][ T5118] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.085748][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.099557][ T5126] Bluetooth: hci3: command tx timeout [ 81.105137][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.119286][ T5117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.135247][ T5127] veth0_vlan: entered promiscuous mode [ 81.142924][ T5116] veth0_vlan: entered promiscuous mode [ 81.158076][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.171397][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.183922][ T5117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.222831][ T5117] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.232021][ T5117] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.241738][ T5117] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.250858][ T5117] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.276622][ T5116] veth1_vlan: entered promiscuous mode [ 81.286759][ T5128] veth0_vlan: entered promiscuous mode [ 81.299706][ T5127] veth1_vlan: entered promiscuous mode [ 81.334896][ T5128] veth1_vlan: entered promiscuous mode [ 81.470428][ T5116] veth0_macvtap: entered promiscuous mode [ 81.488410][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.496540][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.529383][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.530688][ T5127] veth0_macvtap: entered promiscuous mode [ 81.537270][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.559575][ T5116] veth1_macvtap: entered promiscuous mode [ 81.609958][ T128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.611707][ T5127] veth1_macvtap: entered promiscuous mode [ 81.629968][ T128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.651398][ T5128] veth0_macvtap: entered promiscuous mode [ 81.683532][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.696268][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.713387][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.724226][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.738258][ T5116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.756747][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.768174][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.778549][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.789721][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.801315][ T5116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.829919][ T128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.840489][ T5128] veth1_macvtap: entered promiscuous mode [ 81.849767][ T128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.880390][ T5116] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.904676][ T5116] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.926210][ T5116] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.937358][ T5116] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.974538][ T5128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.000754][ T5128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.014054][ T5128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.025471][ T5128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.043345][ T5128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.054302][ T5128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.072406][ T5128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.123003][ T5128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.150324][ T5128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.167967][ T5128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.198466][ T5128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.218941][ T5128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.233674][ T5128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.261091][ T5128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.296750][ T5127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.318871][ T5127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.335142][ T5127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.347758][ T5127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.358339][ T5127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.369410][ T5127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.383190][ T5127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.394814][ T5127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.449637][ T5127] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.460119][ T5198] €Â: renamed from pim6reg1 [ 82.520794][ T5128] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.539730][ T5128] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.550484][ T5128] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.559724][ T5128] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.644417][ T5127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.664783][ T5127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.675287][ T5127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.690108][ T5127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.704561][ T5127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.747935][ T5127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.759958][ T5127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.772077][ T5127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.815176][ T5127] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.927019][ T5127] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.936453][ T5127] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.942418][ T5126] Bluetooth: hci0: command tx timeout [ 82.952165][ T5126] Bluetooth: hci2: command tx timeout [ 82.959004][ T5127] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.967971][ T5127] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.019834][ T5121] Bluetooth: hci1: command tx timeout [ 83.097770][ T5121] Bluetooth: hci4: command tx timeout [ 83.177483][ T5121] Bluetooth: hci3: command tx timeout [ 83.483502][ T2454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.496547][ T2454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.576383][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.624658][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.765218][ T1108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.776814][ T1108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.801753][ T128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.844520][ T128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.967468][ T2798] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.975355][ T2798] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.144422][ T2454] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.148510][ T5223] syz-executor.4[5223] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.167151][ T2454] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.169634][ T5223] syz-executor.4[5223] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.076320][ T5252] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 85.312503][ T5252] bond1 (unregistering): Released all slaves [ 85.432415][ T5259] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 85.687174][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 86.294312][ T5297] mac80211_hwsim hwsim9 €Â: renamed from wlan1 (while UP) [ 86.948960][ T5320] warning: `syz-executor.0' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 87.036212][ T45] cfg80211: failed to load regulatory.db [ 87.114678][ T5326] mac80211_hwsim hwsim5 €Â: renamed from wlan1 (while UP) [ 88.441416][ T5372] mac80211_hwsim hwsim11 €Â: renamed from wlan1 (while UP) [ 89.020151][ T5391] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 89.281561][ T5407] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 89.937034][ T5433] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 90.695379][ T5461] Bluetooth: MGMT ver 1.22 [ 90.838359][ T5467] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 91.071074][ T5475] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 92.984457][ T29] audit: type=1804 audit(1718391562.591:2): pid=5553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1188649584/syzkaller.viLPJU/30/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 93.141571][ T5552] netlink: 4076 bytes leftover after parsing attributes in process `syz-executor.2'. [ 93.332076][ T5564] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 93.367529][ T5564] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.4'. [ 94.200473][ T29] audit: type=1804 audit(1718391563.821:3): pid=5597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3622098262/syzkaller.eP1sCt/39/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0 [ 94.256416][ T5597] netlink: 4076 bytes leftover after parsing attributes in process `syz-executor.4'. [ 94.787653][ T5621] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.3'. [ 95.668344][ T5662] nbd: must specify at least one socket [ 96.014878][ T5684] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 96.864575][ T5724] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 96.879403][ T5724] NCSI netlink: No device for ifindex 0 [ 98.947830][ T5856] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 100.057585][ T5126] Bluetooth: hci4: command 0x0405 tx timeout [ 100.976099][ T5959] Bluetooth: MGMT ver 1.22 [ 101.089454][ T5957] dccp_close: ABORT with 120 bytes unread [ 101.108323][ T5126] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 101.127523][ T5126] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 101.141936][ T5126] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 101.198014][ T5126] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 101.219075][ T5126] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 101.227392][ T5126] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 101.432111][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.656388][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.953086][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.154851][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.428046][ T6014] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'. [ 102.765147][ T35] bridge_slave_1: left allmulticast mode [ 102.788056][ T35] bridge_slave_1: left promiscuous mode [ 102.812903][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.868559][ T35] bridge_slave_0: left allmulticast mode [ 102.880133][ T35] bridge_slave_0: left promiscuous mode [ 102.886004][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.049165][ T6039] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.213861][ T6045] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'. [ 103.337781][ T5121] Bluetooth: hci4: command tx timeout [ 103.885614][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.919822][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.942958][ T35] bond0 (unregistering): Released all slaves [ 103.975517][ T6043] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 104.044944][ T5962] chnl_net:caif_netlink_parms(): no params data found [ 104.589143][ T6101] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'. [ 105.006038][ T5962] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.030839][ T5962] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.049670][ T5962] bridge_slave_0: entered allmulticast mode [ 105.068386][ T5962] bridge_slave_0: entered promiscuous mode [ 105.092193][ T5962] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.120344][ T5962] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.149141][ T5962] bridge_slave_1: entered allmulticast mode [ 105.175625][ T5962] bridge_slave_1: entered promiscuous mode [ 105.427574][ T5126] Bluetooth: hci4: command tx timeout [ 105.466893][ T35] hsr_slave_0: left promiscuous mode [ 105.489847][ T35] hsr_slave_1: left promiscuous mode [ 105.507924][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.539053][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.561111][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.588933][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.673085][ T35] veth1_macvtap: left promiscuous mode [ 105.686479][ T35] veth0_macvtap: left promiscuous mode [ 105.698035][ T35] veth1_vlan: left promiscuous mode [ 105.715100][ T35] veth0_vlan: left promiscuous mode [ 106.433258][ T35] team0 (unregistering): Port device team_slave_1 removed [ 106.479084][ T35] team0 (unregistering): Port device team_slave_0 removed [ 106.885071][ T5962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.999510][ T5962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.202801][ T5962] team0: Port device team_slave_0 added [ 107.251066][ T5962] team0: Port device team_slave_1 added [ 107.500403][ T5126] Bluetooth: hci4: command 0x040f tx timeout [ 107.529609][ T5962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.536630][ T5962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.564696][ T5962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.643956][ T5962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.697554][ T5962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.741322][ T5962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.957042][ T6203] dccp_close: ABORT with 1 bytes unread [ 108.160456][ T5962] hsr_slave_0: entered promiscuous mode [ 108.215563][ T5962] hsr_slave_1: entered promiscuous mode [ 108.299016][ T5962] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.306671][ T5962] Cannot create hsr debugfs directory [ 108.856480][ T6249] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 109.577530][ T5126] Bluetooth: hci4: command 0x040f tx timeout [ 109.798393][ T5962] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 109.880538][ T5962] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 109.947743][ T5962] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 109.979296][ T5962] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 110.312039][ T5962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.468670][ T5962] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.520272][ T5165] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.528299][ T5165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.567163][ T5165] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.574457][ T5165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.754269][ T5962] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 111.263663][ T5962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.544559][ T5962] veth0_vlan: entered promiscuous mode [ 111.657950][ T5962] veth1_vlan: entered promiscuous mode [ 111.661236][ T5126] Bluetooth: hci4: command 0x040f tx timeout [ 111.861201][ T5962] veth0_macvtap: entered promiscuous mode [ 111.919532][ T5962] veth1_macvtap: entered promiscuous mode [ 112.016799][ T5962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.052253][ T5962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.085092][ T5962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.114061][ T5962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.135645][ T5962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.156546][ T6398] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 112.174215][ T5962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.206823][ T5962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.226498][ T6398] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 112.255132][ T5962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.301842][ T5962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.356628][ T5962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.402017][ T5962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.426688][ T5962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.487603][ T5962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.509509][ T5962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.548552][ T5962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.588569][ T5962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.640213][ T5962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.683120][ T5962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.761834][ T5962] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.791804][ T5962] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.817577][ T5962] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.877645][ T5962] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.190077][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.244567][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.382435][ T2862] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.405528][ T2862] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.738055][ T5126] Bluetooth: hci4: command 0x040f tx timeout [ 113.811429][ T6466] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.0'. [ 114.169584][ T6487] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 114.481969][ T6503] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.3'. [ 115.004848][ T6531] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.0'. [ 115.472555][ T6553] Zero length message leads to an empty skb [ 115.692554][ T6562] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.3'. [ 115.822532][ T5126] Bluetooth: hci4: command 0x040f tx timeout [ 116.542584][ T6601] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.3'. [ 116.922339][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 117.251572][ T6622] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'. [ 117.897603][ T5121] Bluetooth: hci4: command 0x040f tx timeout [ 118.243972][ T6668] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 119.977571][ T5126] Bluetooth: hci4: command 0x040f tx timeout [ 120.055125][ T6733] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 120.323189][ T6743] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 120.380207][ T6743] bridge_slave_1: left allmulticast mode [ 120.405852][ T6743] bridge_slave_1: left promiscuous mode [ 120.440161][ T6743] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.500312][ T6743] bridge_slave_0: left allmulticast mode [ 120.529453][ T6743] bridge_slave_0: left promiscuous mode [ 120.536437][ T6743] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.060799][ T6765] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 121.097554][ T6765] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 121.821861][ T6797] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 121.867643][ T6797] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 121.964847][ T6799] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 122.057588][ T5126] Bluetooth: hci4: command 0x040f tx timeout [ 122.495982][ T6831] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 122.513040][ T6831] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 122.778481][ T6838] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 123.646252][ T6870] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 124.403393][ T6904] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 125.118391][ T6932] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 125.367623][ T5166] IPVS: starting estimator thread 0... [ 125.493791][ T6942] IPVS: using max 16 ests per chain, 38400 per kthread [ 125.900412][ T6970] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'. [ 126.070406][ T784] IPVS: starting estimator thread 0... [ 126.133295][ T6980] : renamed from ipvlan1 [ 126.181254][ T6979] IPVS: using max 15 ests per chain, 36000 per kthread [ 126.898856][ T7012] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'. [ 127.581860][ T5163] IPVS: starting estimator thread 0... [ 127.687460][ T7050] IPVS: using max 17 ests per chain, 40800 per kthread [ 127.733225][ T7058] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.3'. [ 127.844051][ T7064] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 128.274631][ T7086] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.3'. [ 128.692436][ T7110] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 128.800144][ T7116] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'. [ 129.531838][ T7146] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.3'. [ 130.118714][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 130.162459][ T7182] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 130.391877][ T7195] IPVS: wlc: TCP 172.20.20.170:0 - no destination available [ 131.967177][ T7265] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 132.050676][ T7269] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 132.322810][ T5121] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 132.334585][ T5121] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 132.351835][ T5121] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 132.372339][ T5121] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 132.388319][ T5121] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 132.396871][ T5121] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 132.655339][ T5870] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.836154][ T5870] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.108666][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.115398][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.145032][ T5870] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.424420][ T5870] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.649315][ T5126] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 133.667714][ T5126] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 133.687567][ T5126] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 133.699267][ T5126] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 133.717537][ T5126] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 133.725172][ T5126] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 133.939827][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 134.215294][ T7279] chnl_net:caif_netlink_parms(): no params data found [ 134.241991][ T5870] bridge_slave_1: left allmulticast mode [ 134.253298][ T5870] bridge_slave_1: left promiscuous mode [ 134.264318][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.318552][ T5870] bridge_slave_0: left allmulticast mode [ 134.338890][ T5870] bridge_slave_0: left promiscuous mode [ 134.354950][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.457732][ T5126] Bluetooth: hci2: command tx timeout [ 134.764526][ T5870] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.776682][ T5870] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.793199][ T5870] bond0 (unregistering): Released all slaves [ 134.978931][ T7344] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 135.317736][ T7279] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.337757][ T7279] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.355837][ T7279] bridge_slave_0: entered allmulticast mode [ 135.379320][ T7279] bridge_slave_0: entered promiscuous mode [ 135.412191][ T7279] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.427572][ T7279] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.434974][ T7279] bridge_slave_1: entered allmulticast mode [ 135.447468][ T7279] bridge_slave_1: entered promiscuous mode [ 135.680398][ T5870] hsr_slave_0: left promiscuous mode [ 135.693984][ T5870] hsr_slave_1: left promiscuous mode [ 135.704261][ T5870] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.717863][ T5870] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.740883][ T5870] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.757540][ T5870] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.802926][ T5870] veth1_macvtap: left promiscuous mode [ 135.812572][ T5870] veth0_macvtap: left promiscuous mode [ 135.818724][ T5126] Bluetooth: hci3: command tx timeout [ 135.829603][ T5870] veth1_vlan: left promiscuous mode [ 135.835049][ T5870] veth0_vlan: left promiscuous mode [ 136.548219][ T5126] Bluetooth: hci2: command tx timeout [ 136.650569][ T5870] team0 (unregistering): Port device team_slave_1 removed [ 136.685398][ T5870] team0 (unregistering): Port device team_slave_0 removed [ 137.061748][ T7279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.144672][ T7279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.370956][ T7408] IPVS: wlc: TCP 172.20.20.170:0 - no destination available [ 137.446425][ T7279] team0: Port device team_slave_0 added [ 137.457897][ T7279] team0: Port device team_slave_1 added [ 137.611442][ T7279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.649809][ T7279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.705828][ T7279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.723794][ T7312] chnl_net:caif_netlink_parms(): no params data found [ 137.811406][ T7279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.833492][ T7279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.867568][ T7279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.879937][ T7426] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 137.895383][ T7426] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 137.908260][ T5126] Bluetooth: hci3: command tx timeout [ 137.953355][ T7426] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 137.972891][ T7426] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 138.356919][ T7279] hsr_slave_0: entered promiscuous mode [ 138.397881][ T7279] hsr_slave_1: entered promiscuous mode [ 138.412340][ T7279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 138.425936][ T7279] Cannot create hsr debugfs directory [ 138.507002][ T7312] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.532139][ T7312] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.578009][ T7312] bridge_slave_0: entered allmulticast mode [ 138.591512][ T7312] bridge_slave_0: entered promiscuous mode [ 138.617801][ T5126] Bluetooth: hci2: command tx timeout [ 138.714030][ T7312] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.731165][ T7312] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.744764][ T7312] bridge_slave_1: entered allmulticast mode [ 138.754359][ T7312] bridge_slave_1: entered promiscuous mode [ 138.889008][ T7469] IPVS: wlc: TCP 172.20.20.170:0 - no destination available [ 138.925178][ T7312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.054270][ T7312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.255344][ T5870] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.470104][ T5870] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.518582][ T7312] team0: Port device team_slave_0 added [ 139.551170][ T7312] team0: Port device team_slave_1 added [ 139.698252][ T5121] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 139.712574][ T5121] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 139.723576][ T5121] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 139.734575][ T5121] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 139.750484][ T5121] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 139.764465][ T5121] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 139.814947][ T5870] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.862698][ T5117] syz-executor.0 (5117) used greatest stack depth: 18448 bytes left [ 139.987789][ T5121] Bluetooth: hci3: command tx timeout [ 140.147601][ T5870] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.205241][ T7312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.246248][ T7312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.321810][ T7312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.352707][ T7312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.378253][ T7312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.457598][ T7312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.707502][ T5121] Bluetooth: hci2: command tx timeout [ 140.724191][ T7312] hsr_slave_0: entered promiscuous mode [ 140.770069][ T7312] hsr_slave_1: entered promiscuous mode [ 140.797470][ T7312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 140.805097][ T7312] Cannot create hsr debugfs directory [ 140.966962][ T7533] IPVS: wlc: TCP 172.20.20.170:0 - no destination available [ 141.197089][ T7540] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.4'. [ 141.828780][ T5121] Bluetooth: hci0: command tx timeout [ 141.858045][ T5870] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.898955][ T5870] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.931750][ T5870] bond0 (unregistering): Released all slaves [ 142.069517][ T5126] Bluetooth: hci3: command tx timeout [ 142.815053][ T7487] chnl_net:caif_netlink_parms(): no params data found [ 142.949728][ T5870] hsr_slave_0: left promiscuous mode [ 143.014831][ T5870] hsr_slave_1: left promiscuous mode [ 143.036354][ T5870] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.044639][ T5870] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.060918][ T5870] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.076361][ T5870] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.115803][ T5870] veth1_macvtap: left promiscuous mode [ 143.129196][ T5870] veth0_macvtap: left promiscuous mode [ 143.898929][ T5121] Bluetooth: hci0: command tx timeout [ 144.138144][ T5870] team0 (unregistering): Port device team_slave_1 removed [ 144.174572][ T5870] team0 (unregistering): Port device team_slave_0 removed [ 144.562796][ T7279] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 144.582822][ T7279] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 144.834935][ T7279] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 144.990832][ T7630] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'. [ 145.063362][ T7279] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 145.261562][ T7487] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.290037][ T7487] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.298923][ T7487] bridge_slave_0: entered allmulticast mode [ 145.306369][ T7487] bridge_slave_0: entered promiscuous mode [ 145.348772][ T7487] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.375381][ T7487] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.387817][ T7487] bridge_slave_1: entered allmulticast mode [ 145.405790][ T7487] bridge_slave_1: entered promiscuous mode [ 145.598688][ T7487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.683361][ T7487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.771327][ T5870] IPVS: stop unused estimator thread 0... [ 145.776466][ T7487] team0: Port device team_slave_0 added [ 145.813004][ T7487] team0: Port device team_slave_1 added [ 145.953938][ T7487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.977868][ T5121] Bluetooth: hci0: command tx timeout [ 145.985656][ T7487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.024267][ T7487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.085620][ T7487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.110025][ T7487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.183758][ T7487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.329839][ T7312] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 146.366658][ T7312] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 146.463736][ T7487] hsr_slave_0: entered promiscuous mode [ 146.502599][ T7487] hsr_slave_1: entered promiscuous mode [ 146.537855][ T7487] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.567035][ T7487] Cannot create hsr debugfs directory [ 146.703478][ T7312] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 147.022119][ T5870] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.136951][ T7312] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 147.269898][ T5870] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.501840][ T5870] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.661548][ T7279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.761025][ T5870] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.030075][ T7279] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.063382][ T5121] Bluetooth: hci0: command tx timeout [ 148.182293][ T5136] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.189549][ T5136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.245468][ T5136] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.252716][ T5136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.423756][ T5870] bridge_slave_1: left allmulticast mode [ 148.432938][ T5870] bridge_slave_1: left promiscuous mode [ 148.440072][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.478856][ T5870] bridge_slave_0: left allmulticast mode [ 148.484756][ T5870] bridge_slave_0: left promiscuous mode [ 148.495330][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.101187][ T5870] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.135470][ T5870] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.157921][ T5870] bond0 (unregistering): Released all slaves [ 149.630213][ T7312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.963793][ T7312] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.085352][ T5168] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.092609][ T5168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.262396][ T5870] hsr_slave_0: left promiscuous mode [ 150.282113][ T5870] hsr_slave_1: left promiscuous mode [ 150.300251][ T5870] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.315930][ T5870] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.325063][ T5870] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.333079][ T5870] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.368691][ T5870] veth1_macvtap: left promiscuous mode [ 150.374987][ T5870] veth0_macvtap: left promiscuous mode [ 150.382975][ T5870] veth1_vlan: left promiscuous mode [ 150.397676][ T5870] veth0_vlan: left promiscuous mode [ 151.222918][ T5870] team0 (unregistering): Port device team_slave_1 removed [ 151.292115][ T5870] team0 (unregistering): Port device team_slave_0 removed [ 151.702025][ T5168] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.709300][ T5168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.973466][ T7279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.095297][ T7312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 152.140977][ T7487] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 152.210310][ T7487] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 152.281446][ T7487] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 152.417632][ T7487] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 152.454970][ T7279] veth0_vlan: entered promiscuous mode [ 152.558744][ T7279] veth1_vlan: entered promiscuous mode [ 152.794963][ T7279] veth0_macvtap: entered promiscuous mode [ 152.840354][ T7279] veth1_macvtap: entered promiscuous mode [ 152.939556][ T7279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.957976][ T7279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.983652][ T7279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.012965][ T7279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.039133][ T7279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.085160][ T7279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.137463][ T7279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.174300][ T7279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.197786][ T7279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.216146][ T7279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.235300][ T7279] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.302428][ T7279] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.312625][ T7279] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.322213][ T7279] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.365284][ T7312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.514756][ T7487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.719393][ T7487] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.833422][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.840773][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.893152][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.900403][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.048733][ T5126] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 154.058453][ T5126] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 154.067010][ T5126] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 154.080416][ T5126] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 154.090351][ T5126] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 154.099331][ T5126] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 154.158742][ T7312] veth0_vlan: entered promiscuous mode [ 154.207638][ T7312] veth1_vlan: entered promiscuous mode [ 154.364924][ T5870] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.409130][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.417021][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.563816][ T5870] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.607155][ T7312] veth0_macvtap: entered promiscuous mode [ 154.690094][ T5870] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.717105][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.727069][ T7312] veth1_macvtap: entered promiscuous mode [ 154.737604][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.820071][ T5870] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.067259][ T7312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.129269][ T7312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.162151][ T7312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.205891][ T7312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.227364][ T7312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.245796][ T7312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.270939][ T7312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.401321][ T7312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.444654][ T7312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.478642][ T7312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.502417][ T7312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.519970][ T7312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.543528][ T7312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.571755][ T7312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.703142][ T7884] chnl_net:caif_netlink_parms(): no params data found [ 155.739587][ T7312] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.768204][ T7312] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.799248][ T7312] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.808121][ T7312] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.836176][ T5870] bridge_slave_1: left allmulticast mode [ 155.843195][ T5870] bridge_slave_1: left promiscuous mode [ 155.854109][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.863792][ T5870] bridge_slave_0: left allmulticast mode [ 155.870031][ T5870] bridge_slave_0: left promiscuous mode [ 155.875773][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.139325][ T5126] Bluetooth: hci1: command tx timeout [ 156.353705][ T5870] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.366661][ T5870] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.379858][ T5870] bond0 (unregistering): Released all slaves [ 156.488163][ T7487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.065342][ T7884] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.087820][ T7884] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.112486][ T7884] bridge_slave_0: entered allmulticast mode [ 157.124876][ T7884] bridge_slave_0: entered promiscuous mode [ 157.185378][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.197499][ T5870] hsr_slave_0: left promiscuous mode [ 157.210255][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.267778][ T5870] hsr_slave_1: left promiscuous mode [ 157.281371][ T5870] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.298356][ T5870] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.319177][ T5870] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.326662][ T5870] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.396600][ T5870] veth1_macvtap: left promiscuous mode [ 157.402504][ T5870] veth0_macvtap: left promiscuous mode [ 157.409357][ T5870] veth1_vlan: left promiscuous mode [ 157.414904][ T5870] veth0_vlan: left promiscuous mode [ 158.058547][ T5870] team0 (unregistering): Port device team_slave_1 removed [ 158.102711][ T5870] team0 (unregistering): Port device team_slave_0 removed [ 158.221118][ T5126] Bluetooth: hci1: command tx timeout [ 158.498686][ T7884] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.505850][ T7884] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.522956][ T7884] bridge_slave_1: entered allmulticast mode [ 158.530339][ T7884] bridge_slave_1: entered promiscuous mode [ 158.729131][ T7884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.786463][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.817347][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.837560][ T7884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.988861][ T7884] team0: Port device team_slave_0 added [ 159.039452][ T7487] veth0_vlan: entered promiscuous mode [ 159.066964][ T7884] team0: Port device team_slave_1 added [ 159.252052][ T7487] veth1_vlan: entered promiscuous mode [ 159.278982][ T7884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.297470][ T7884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.355269][ T7884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.412554][ T7884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.421333][ T7884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.479186][ T7884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.555598][ T5870] IPVS: stop unused estimator thread 0... [ 159.662215][ T7884] hsr_slave_0: entered promiscuous mode [ 159.683198][ T7884] hsr_slave_1: entered promiscuous mode [ 159.926156][ T7487] veth0_macvtap: entered promiscuous mode [ 160.030685][ T7487] veth1_macvtap: entered promiscuous mode [ 160.211272][ T7487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.241137][ T7487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.253418][ T7487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.264319][ T7487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.274286][ T7487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.286442][ T7487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.297854][ T5121] Bluetooth: hci1: command tx timeout [ 160.315167][ T7487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.425108][ T7487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.482781][ T7487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.493994][ T7487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.507917][ T7487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.519883][ T7487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.531187][ T7487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.544590][ T7487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.641564][ T7487] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.657697][ T7487] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.677462][ T7487] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.687570][ T7487] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.111045][ T8054] pim6reg1: entered promiscuous mode [ 161.120941][ T8054] pim6reg1: entered allmulticast mode [ 161.238730][ T8057] syzkaller0: entered promiscuous mode [ 161.244414][ T8057] syzkaller0: entered allmulticast mode [ 161.317192][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.331081][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.378160][ T5121] Bluetooth: hci1: command 0x0419 tx timeout [ 163.335656][ T2862] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.366879][ T2862] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.501952][ T7884] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 163.541284][ T7884] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 163.565448][ T7884] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 163.609001][ T7884] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 163.894980][ T7884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.962051][ T7884] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.976995][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.984423][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.063720][ T784] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.071020][ T784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.462202][ T5126] Bluetooth: hci1: command 0x0419 tx timeout [ 164.746195][ T7884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.492685][ T7884] veth0_vlan: entered promiscuous mode [ 165.543656][ T7884] veth1_vlan: entered promiscuous mode [ 165.706505][ T7884] veth0_macvtap: entered promiscuous mode [ 165.745304][ T7884] veth1_macvtap: entered promiscuous mode [ 165.805413][ T7884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.822556][ T7884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.835712][ T7884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.864494][ T7884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.882289][ T7884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.894387][ T7884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.907732][ T7884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.934505][ T7884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.950500][ T7884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.993019][ T7884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.023241][ T7884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.067550][ T7884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.086979][ T7884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.100538][ T7884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.111916][ T7884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.128525][ T8198] syz-executor.3[8198] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.128706][ T8198] syz-executor.3[8198] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.146051][ T7884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.181687][ T7884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.202284][ T7884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.269549][ T7884] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.298748][ T7884] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.317837][ T7884] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.343423][ T7884] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.670497][ T5881] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.694367][ T5881] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.698424][ T8216] syz-executor.0[8216] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.706200][ T8216] syz-executor.0[8216] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.772380][ T5870] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.821695][ T5870] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.365651][ T5870] [ 167.368069][ T5870] ====================================================== [ 167.375141][ T5870] WARNING: possible circular locking dependency detected [ 167.382146][ T5870] 6.10.0-rc2-syzkaller-00249-gbe27b8965297 #0 Not tainted [ 167.389256][ T5870] ------------------------------------------------------ [ 167.396255][ T5870] kworker/u8:16/5870 is trying to acquire lock: [ 167.402478][ T5870] ffff8880b9529430 (krc.lock){..-.}-{2:2}, at: kvfree_call_rcu+0x18a/0x790 [ 167.411116][ T5870] [ 167.411116][ T5870] but task is already holding lock: [ 167.418464][ T5870] ffff8880b952a718 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x112/0x240 [ 167.427435][ T5870] [ 167.427435][ T5870] which lock already depends on the new lock. [ 167.427435][ T5870] [ 167.437926][ T5870] [ 167.437926][ T5870] the existing dependency chain (in reverse order) is: [ 167.446938][ T5870] [ 167.446938][ T5870] -> #1 (&base->lock){-.-.}-{2:2}: [ 167.454236][ T5870] lock_acquire+0x1ed/0x550 [ 167.459348][ T5870] _raw_spin_lock_irqsave+0xd5/0x120 [ 167.465160][ T5870] lock_timer_base+0x112/0x240 [ 167.470437][ T5870] __mod_timer+0x1ca/0xeb0 [ 167.475365][ T5870] queue_delayed_work_on+0x1ca/0x390 [ 167.481360][ T5870] kvfree_call_rcu+0x47f/0x790 [ 167.486637][ T5870] rtnl_register_internal+0x482/0x590 [ 167.492539][ T5870] rtnl_register+0x36/0x80 [ 167.497475][ T5870] ip_rt_init+0x2f6/0x3a0 [ 167.502408][ T5870] ip_init+0xe/0x20 [ 167.506735][ T5870] inet_init+0x3d8/0x580 [ 167.511509][ T5870] do_one_initcall+0x248/0x880 [ 167.516796][ T5870] do_initcall_level+0x157/0x210 [ 167.522255][ T5870] do_initcalls+0x3f/0x80 [ 167.527103][ T5870] kernel_init_freeable+0x435/0x5d0 [ 167.532828][ T5870] kernel_init+0x1d/0x2b0 [ 167.537676][ T5870] ret_from_fork+0x4b/0x80 [ 167.542700][ T5870] ret_from_fork_asm+0x1a/0x30 [ 167.548103][ T5870] [ 167.548103][ T5870] -> #0 (krc.lock){..-.}-{2:2}: [ 167.555232][ T5870] validate_chain+0x18e0/0x5900 [ 167.560608][ T5870] __lock_acquire+0x1346/0x1fd0 [ 167.565995][ T5870] lock_acquire+0x1ed/0x550 [ 167.571026][ T5870] _raw_spin_lock+0x2e/0x40 [ 167.576090][ T5870] kvfree_call_rcu+0x18a/0x790 [ 167.581367][ T5870] trie_delete_elem+0x546/0x6a0 [ 167.586730][ T5870] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 167.592815][ T5870] bpf_trace_run2+0x2ec/0x540 [ 167.598028][ T5870] enqueue_timer+0x3ce/0x570 [ 167.603331][ T5870] __mod_timer+0xa0e/0xeb0 [ 167.608372][ T5870] queue_delayed_work_on+0x1ca/0x390 [ 167.614280][ T5870] process_scheduled_works+0xa2c/0x1830 [ 167.620396][ T5870] worker_thread+0x86d/0xd70 [ 167.625501][ T5870] kthread+0x2f0/0x390 [ 167.630103][ T5870] ret_from_fork+0x4b/0x80 [ 167.635102][ T5870] ret_from_fork_asm+0x1a/0x30 [ 167.640398][ T5870] [ 167.640398][ T5870] other info that might help us debug this: [ 167.640398][ T5870] [ 167.650657][ T5870] Possible unsafe locking scenario: [ 167.650657][ T5870] [ 167.658113][ T5870] CPU0 CPU1 [ 167.663480][ T5870] ---- ---- [ 167.668851][ T5870] lock(&base->lock); [ 167.672925][ T5870] lock(krc.lock); [ 167.679351][ T5870] lock(&base->lock); [ 167.685950][ T5870] lock(krc.lock); [ 167.689771][ T5870] [ 167.689771][ T5870] *** DEADLOCK *** [ 167.689771][ T5870] [ 167.697992][ T5870] 4 locks held by kworker/u8:16/5870: [ 167.703372][ T5870] #0: ffff88802a745148 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 167.714680][ T5870] #1: ffffc900042b7d00 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 167.727807][ T5870] #2: ffff8880b952a718 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x112/0x240 [ 167.737128][ T5870] #3: ffffffff8e333fa0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x1fc/0x540 [ 167.746539][ T5870] [ 167.746539][ T5870] stack backtrace: [ 167.752600][ T5870] CPU: 1 PID: 5870 Comm: kworker/u8:16 Not tainted 6.10.0-rc2-syzkaller-00249-gbe27b8965297 #0 [ 167.762909][ T5870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 167.772954][ T5870] Workqueue: bat_events batadv_nc_worker [ 167.778592][ T5870] Call Trace: [ 167.781865][ T5870] [ 167.784805][ T5870] dump_stack_lvl+0x241/0x360 [ 167.789496][ T5870] ? __pfx_dump_stack_lvl+0x10/0x10 [ 167.794702][ T5870] ? print_circular_bug+0x130/0x1a0 [ 167.799914][ T5870] check_noncircular+0x36a/0x4a0 [ 167.805200][ T5870] ? __pfx_check_noncircular+0x10/0x10 [ 167.810673][ T5870] ? lockdep_lock+0x123/0x2b0 [ 167.815342][ T5870] ? mark_lock+0x9a/0x350 [ 167.819664][ T5870] ? _find_first_zero_bit+0xd3/0x100 [ 167.824955][ T5870] validate_chain+0x18e0/0x5900 [ 167.829810][ T5870] ? __pfx_validate_chain+0x10/0x10 [ 167.835017][ T5870] ? stack_depot_save_flags+0x6e4/0x830 [ 167.840555][ T5870] ? do_raw_spin_lock+0x14f/0x370 [ 167.845576][ T5870] ? __pfx_lock_release+0x10/0x10 [ 167.850594][ T5870] ? do_raw_spin_unlock+0x13c/0x8b0 [ 167.855790][ T5870] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 167.861790][ T5870] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 167.868112][ T5870] ? stack_trace_save+0x118/0x1d0 [ 167.873406][ T5870] ? mark_lock+0x9a/0x350 [ 167.877741][ T5870] __lock_acquire+0x1346/0x1fd0 [ 167.882596][ T5870] lock_acquire+0x1ed/0x550 [ 167.887105][ T5870] ? kvfree_call_rcu+0x18a/0x790 [ 167.892092][ T5870] ? __pfx_lock_acquire+0x10/0x10 [ 167.897147][ T5870] ? __phys_addr+0xba/0x170 [ 167.901678][ T5870] _raw_spin_lock+0x2e/0x40 [ 167.906193][ T5870] ? kvfree_call_rcu+0x18a/0x790 [ 167.911226][ T5870] kvfree_call_rcu+0x18a/0x790 [ 167.915997][ T5870] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 167.921895][ T5870] ? __pfx_kvfree_call_rcu+0x10/0x10 [ 167.927179][ T5870] ? longest_prefix_match+0x49f/0x650 [ 167.932572][ T5870] trie_delete_elem+0x546/0x6a0 [ 167.937422][ T5870] ? bpf_trace_run2+0x1fc/0x540 [ 167.942269][ T5870] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 167.947726][ T5870] bpf_trace_run2+0x2ec/0x540 [ 167.952415][ T5870] ? __pfx_bpf_trace_run2+0x10/0x10 [ 167.957618][ T5870] ? __pfx_debug_object_activate+0x10/0x10 [ 167.963441][ T5870] enqueue_timer+0x3ce/0x570 [ 167.968136][ T5870] __mod_timer+0xa0e/0xeb0 [ 167.972558][ T5870] ? __pfx___mod_timer+0x10/0x10 [ 167.977499][ T5870] ? __local_bh_enable_ip+0x168/0x200 [ 167.982876][ T5870] ? __pfx_lock_release+0x10/0x10 [ 167.987913][ T5870] ? batadv_nc_purge_paths+0x30f/0x3b0 [ 167.993372][ T5870] ? __queue_delayed_work+0x1ae/0x250 [ 167.998739][ T5870] queue_delayed_work_on+0x1ca/0x390 [ 168.004038][ T5870] ? __pfx_queue_delayed_work_on+0x10/0x10 [ 168.009844][ T5870] ? batadv_nc_process_nc_paths+0xb5/0x3a0 [ 168.015655][ T5870] ? batadv_nc_worker+0x4fa/0x610 [ 168.020772][ T5870] ? process_scheduled_works+0x945/0x1830 [ 168.026498][ T5870] process_scheduled_works+0xa2c/0x1830 [ 168.032093][ T5870] ? __pfx_process_scheduled_works+0x10/0x10 [ 168.038069][ T5870] ? assign_work+0x364/0x3d0 [ 168.042653][ T5870] worker_thread+0x86d/0xd70 [ 168.047268][ T5870] ? __kthread_parkme+0x169/0x1d0 [ 168.052304][ T5870] ? __pfx_worker_thread+0x10/0x10 [ 168.057407][ T5870] kthread+0x2f0/0x390 [ 168.061478][ T5870] ? __pfx_worker_thread+0x10/0x10 [ 168.066580][ T5870] ? __pfx_kthread+0x10/0x10 [ 168.071163][ T5870] ret_from_fork+0x4b/0x80 [ 168.075578][ T5870] ? __pfx_kthread+0x10/0x10 [ 168.080250][ T5870] ret_from_fork_asm+0x1a/0x30 [ 168.085056][ T5870] 2024/06/14 19:00:37 SYZFATAL: failed to send *flatrpc.ExecutorMessageRawT: write tcp 10.128.0.245:54194->10.128.0.169:30016: write: broken pipe