last executing test programs: 2.418922959s ago: executing program 1: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x80) ioctl$TUNSETOFFLOAD(r1, 0x4010744d, 0x20000000) 1.961616476s ago: executing program 1: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r0, &(0x7f00000000c0)='G', 0xfffffffffffffca0, 0x8001, 0x0, 0x0) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000740)=""/14, 0xe}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/36, 0x24}], 0x1}}], 0x2, 0x0, 0x0) 1.887396538s ago: executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002100010000000000000000000200"/28], 0x1c}}, 0x0) sendfile(r2, r1, 0x0, 0x10000000f) 1.712133997s ago: executing program 1: r0 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, 0xffffffffffffffff, &(0x7f0000000000)=0xc) syz_genetlink_get_family_id$team(&(0x7f0000000300), 0xffffffffffffffff) socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000180)) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0x4, &(0x7f00000007c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r1}, 0xc) 1.438610434s ago: executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) setsockopt$inet6_int(r0, 0x84, 0x24, 0x0, 0x0) 1.303408633s ago: executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @multicast1}]}}}]}, 0x3c}, 0x1, 0x2}, 0x0) 1.123265833s ago: executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x40010) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=ANY=[@ANYBLOB="8500000000000000070000000000306f381a000000000080"], &(0x7f0000000040)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x14, &(0x7f00000000c0), 0x1, 0x10, &(0x7f0000000000), 0xa, 0x0, 0xffffffffffffffff, 0x4c}, 0x70) 985.619743ms ago: executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000040), 0x2) 915.42306ms ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x200000100000011, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000005c0)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000680)) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="440000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000006000002400128008000100677265001800028005000a00000000000400120005001300"], 0x44}}, 0x0) 906.784591ms ago: executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000200)=ANY=[], 0x9) sendto$inet6(r0, &(0x7f0000000100)="ea", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 865.143712ms ago: executing program 4: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x81, 0x8, 0x2}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000180)=@tcp6=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000380), &(0x7f00000004c0)=""/77}, 0x20) 815.903596ms ago: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 764.534315ms ago: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x38, 0xb, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x82a8}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xf8}}, 0x0) 709.380084ms ago: executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000000)={'wlan1\x00'}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x40, 0x7800, 0x8, 0x4, {{0x2e, 0x4, 0x3, 0x9, 0xb8, 0x65, 0x0, 0x9, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x36}, @local, {[@noop, @generic={0x88, 0xd, "f91a2962e01ed1e323dcf5"}, @timestamp_prespec={0x44, 0x3c, 0xdc, 0x3, 0x3, [{@empty, 0x3ff}, {@multicast1, 0x1f}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x6}, {@broadcast, 0x81}, {@local, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7fff}, {@broadcast, 0xffffffff}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @end, @cipso={0x86, 0x51, 0x0, [{0x5, 0x2}, {0x2, 0x12, "1a793ef1a7e1fe32b280a7c6aabdcaae"}, {0x0, 0x12, "a59ddc312a2dcc0a1f9e590f2f1ec003"}, {0x0, 0x7, "e00054608d"}, {0x5, 0x4, '}\f'}, {0x6, 0x3, '\t'}, {0x5, 0xd, "784faaa935688fbc5bad57"}, {0x5, 0xa, "e64d5e4b6fae7b76"}]}]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r3, @ANYBLOB="db"], 0x1c}}, 0x0) 692.101389ms ago: executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='sched_switch\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) close(r1) 610.382547ms ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf9b3e73a200000000000007020000f8ffffffb703000008000000b70400000000000000800000630000009500000000000000515a8ab225aa35aeeafb1607d840778d08a45c99d6c3c10c7ec329cdf0f7c414ef14f692e83af9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0x25, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @multicast2}}}}, &(0x7f0000000280)=0xb0) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), r0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x48, r1, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x14000800}, 0x4040005) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x26, 0x0, "8ddbb51a3cfd954e41e8ccb21f650fa6a867fb9bbcf0feeee4dc036d0675af58b39fa8d54ee8323507a61a95cf134ce8f605671338c7f8838a00bdfba71bc4b828c7de258b6b9ca1fc52bcc83e2a016a"}, 0xd8) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$bt_BT_SECURITY(r3, 0x10e, 0x9, 0x0, 0x20b36000) listen(r2, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x28, 0x6, 0x0, @remote, @mcast2, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x3a, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "fb6b9acd8f4e1c92833a2f1e90339d18"}]}}}}}}}}, 0x0) 587.480675ms ago: executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x0, 0x0, 0x0, 0xb, 0x3}]}}, 0x0, 0x26}, 0x20) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x10001}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000340)={0xa, 0x4e24, 0x1000000080000, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="28000000000000002900000002"], 0x28}, 0x0) 575.027546ms ago: executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000040), 0xfea0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000300)={0x0, r1, 0x7ff, 0x2}) 525.416072ms ago: executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfcb8) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000001c0)={0x17c04, 0xffffffffffffffff, 0xb8fc, 0x2a9}) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 436.041946ms ago: executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000200)=ANY=[], 0x9) sendto$inet6(r0, &(0x7f0000000100)="ea", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 396.136304ms ago: executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0x0, 0x2}, 0x6) 385.392532ms ago: executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 349.639379ms ago: executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @func={0x1}]}, {0x0, [0x5f]}}, 0x0, 0x4f}, 0x20) 277.359497ms ago: executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @random="c5f9772bb146", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x5}}}}}}}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x4a) 263.253567ms ago: executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000840)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000040)='mm_lru_insertion\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) 207.627322ms ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7400000010003b1500000000000000005fc858a6", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000700000000000a000100aa"], 0x74}}, 0x0) 189.874249ms ago: executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x9, 0x8, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x58}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x80) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000880)={0x2, [0x0, 0x0]}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380), 0x24}, 0x1, 0x0, 0x0, 0x20024018}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000008c0)=0x14) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000004c0)={@in6={{0xa, 0x4e26, 0x6, @loopback, 0xb6e3}}, 0x0, 0x0, 0x12, 0x0, "2109d5f9a98f5548903180430aed77d3914d23667b90f0481a341f3d8ba265ff6cb30dddfd64caca2ea2f88f6ddbe94ff1da7e4e11647f389267e6e02a76fcc2c0e6784040090fda24b37d25e60e01f2"}, 0xd8) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000a40)='btrfs_trigger_flush\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r4}, &(0x7f0000000800), &(0x7f0000000840)=r5}, 0x20) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000840), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x3, 0x22, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000800)='GPL\x00', 0xf6, 0xe9, &(0x7f0000000900)=""/233, 0xf784965c455617a1, 0x60, '\x00', r3, 0x1a, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a00)={0x3, 0x1, 0x2, 0x100000}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, &(0x7f0000000ac0)=[r0, r0, 0xffffffffffffffff], &(0x7f0000000b00)=[{0x2, 0x3, 0x10, 0xc}, {0x5, 0x4, 0x7}, {0x4, 0x3, 0xf, 0xc}, {0x5, 0x4, 0x4, 0x1}, {0x0, 0x5, 0x4, 0x2}, {0x3, 0x3, 0x5, 0x3}], 0x10, 0x101}, 0x90) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000fc0)={'wg1\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getchain={0x2c, 0x66, 0x8, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xc}, {0x0, 0x2}, {0xfff2, 0xf}}, [{0x8, 0xb, 0x800000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040005}, 0x20000050) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000600), 0x208e24b) getpeername$inet6(r7, &(0x7f0000000300)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000400)=0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x11, r7, 0x0) openat$cgroup_ro(r7, &(0x7f00000002c0)='cgroup.events\x00', 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f00000011c0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={{0x14}, [@NFT_MSG_DELSETELEM={0x30, 0xe, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0x20004041}, 0x40) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000140)=0x5, 0x4) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r9, r8, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r9, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r1}, 0x20) sendto$inet(r1, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) 188.064155ms ago: executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x4c, 0x0, 0x8, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6007}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4305}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x600}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x805}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x48, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}]}]}, 0x48}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r0, 0x10d, 0x1b, 0x0, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) openat$cgroup_ro(r3, &(0x7f0000000340)='io.stat\x00', 0x0, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) recvmmsg$unix(r5, &(0x7f0000007a80)=[{{0x0, 0x0, &(0x7f0000000940)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}], 0x1, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@bridge_delneigh={0x30, 0x1c, 0xc07, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x40}, [@NDA_LLADDR={0xa, 0x2, @remote}, @NDA_FLAGS_EXT={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x1c, 0x2, 0x0, 0x1, {{0x8, 0x6}, {0x8}, [@IFLA_GTP_ROLE={0x8}]}}}}]}, 0x48}}, 0x0) 45.181597ms ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=@newtaction={0x488, 0x30, 0x2d, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x101}}}], [@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81]}]]}, {0x4}, {0xc, 0xa}, {0xc}}}]}]}, 0x488}}, 0x0) 0s ago: executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000040), 0xfea0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000300)={0x0, r1, 0x7ff, 0x2}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.232' (ED25519) to the list of known hosts. 2024/05/27 20:58:30 fuzzer started 2024/05/27 20:58:30 dialing manager at 10.128.0.169:30016 [ 87.012893][ T8] cfg80211: failed to load regulatory.db [ 101.140432][ T5100] cgroup: Unknown subsys name 'net' [ 101.322032][ T5100] cgroup: Unknown subsys name 'rlimit' 2024/05/27 20:59:05 starting 5 executor processes [ 102.744623][ T5104] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 103.371488][ T5129] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 103.371625][ T5126] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 103.380044][ T5129] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 103.396879][ T5129] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 103.400231][ T5130] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 103.406554][ T5129] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 103.411545][ T5130] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 103.418988][ T5129] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 103.425863][ T5130] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 103.439880][ T5133] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 103.440998][ T5130] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 103.447462][ T5133] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 103.455254][ T5130] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 103.462447][ T5133] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 103.468080][ T5130] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 103.475377][ T5133] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 103.482039][ T5130] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 103.496017][ T5130] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 103.498386][ T5133] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 103.514662][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 103.526828][ T5122] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 103.536742][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 103.544134][ T5122] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 103.551895][ T5122] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 103.552803][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 103.560237][ T5122] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 103.573882][ T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 103.574013][ T5122] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 103.597942][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 103.607578][ T5126] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 104.097441][ T5120] chnl_net:caif_netlink_parms(): no params data found [ 104.157424][ T5121] chnl_net:caif_netlink_parms(): no params data found [ 104.291274][ T5128] chnl_net:caif_netlink_parms(): no params data found [ 104.372177][ T5120] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.379434][ T5120] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.387311][ T5120] bridge_slave_0: entered allmulticast mode [ 104.395232][ T5120] bridge_slave_0: entered promiscuous mode [ 104.404241][ T5120] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.412304][ T5120] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.419533][ T5120] bridge_slave_1: entered allmulticast mode [ 104.427543][ T5120] bridge_slave_1: entered promiscuous mode [ 104.453391][ T5121] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.461009][ T5121] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.468146][ T5121] bridge_slave_0: entered allmulticast mode [ 104.475258][ T5121] bridge_slave_0: entered promiscuous mode [ 104.490117][ T5121] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.497581][ T5121] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.505202][ T5121] bridge_slave_1: entered allmulticast mode [ 104.512922][ T5121] bridge_slave_1: entered promiscuous mode [ 104.539770][ T5119] chnl_net:caif_netlink_parms(): no params data found [ 104.613790][ T5120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.630438][ T5121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.669333][ T5120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.706954][ T5121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.748546][ T5120] team0: Port device team_slave_0 added [ 104.783061][ T5125] chnl_net:caif_netlink_parms(): no params data found [ 104.802102][ T5120] team0: Port device team_slave_1 added [ 104.876952][ T5128] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.884957][ T5128] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.892844][ T5128] bridge_slave_0: entered allmulticast mode [ 104.899902][ T5128] bridge_slave_0: entered promiscuous mode [ 104.914449][ T5121] team0: Port device team_slave_0 added [ 104.929421][ T5121] team0: Port device team_slave_1 added [ 104.937168][ T5120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.944415][ T5120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.970733][ T5120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.995895][ T5119] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.003206][ T5119] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.010409][ T5119] bridge_slave_0: entered allmulticast mode [ 105.018015][ T5119] bridge_slave_0: entered promiscuous mode [ 105.027303][ T5128] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.034980][ T5128] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.042204][ T5128] bridge_slave_1: entered allmulticast mode [ 105.049186][ T5128] bridge_slave_1: entered promiscuous mode [ 105.080384][ T5120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.087406][ T5120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.113531][ T5120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.125358][ T5119] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.132890][ T5119] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.140051][ T5119] bridge_slave_1: entered allmulticast mode [ 105.148065][ T5119] bridge_slave_1: entered promiscuous mode [ 105.236023][ T5119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.248365][ T5128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.265135][ T5128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.275454][ T5121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.283263][ T5121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.309411][ T5121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.323172][ T5121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.330139][ T5121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.356253][ T5121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.395168][ T5119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.502740][ T5128] team0: Port device team_slave_0 added [ 105.508912][ T5125] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.516692][ T5125] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.524359][ T5125] bridge_slave_0: entered allmulticast mode [ 105.531887][ T5125] bridge_slave_0: entered promiscuous mode [ 105.571500][ T5129] Bluetooth: hci0: command tx timeout [ 105.582108][ T5119] team0: Port device team_slave_0 added [ 105.591679][ T5128] team0: Port device team_slave_1 added [ 105.597784][ T5125] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.605419][ T5125] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.612724][ T5125] bridge_slave_1: entered allmulticast mode [ 105.620305][ T5125] bridge_slave_1: entered promiscuous mode [ 105.632084][ T5120] hsr_slave_0: entered promiscuous mode [ 105.638640][ T5120] hsr_slave_1: entered promiscuous mode [ 105.650809][ T53] Bluetooth: hci1: command tx timeout [ 105.652913][ T5121] hsr_slave_0: entered promiscuous mode [ 105.656583][ T5129] Bluetooth: hci4: command tx timeout [ 105.663395][ T5126] Bluetooth: hci2: command tx timeout [ 105.668312][ T53] Bluetooth: hci3: command tx timeout [ 105.679760][ T5121] hsr_slave_1: entered promiscuous mode [ 105.686363][ T5121] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.694250][ T5121] Cannot create hsr debugfs directory [ 105.701616][ T5119] team0: Port device team_slave_1 added [ 105.770928][ T5128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.777898][ T5128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.804033][ T5128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.856968][ T5125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.879474][ T5128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.886584][ T5128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.913274][ T5128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.945349][ T5125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.968040][ T5119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.975481][ T5119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.001482][ T5119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.014610][ T5119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.021636][ T5119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.047580][ T5119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.107511][ T5125] team0: Port device team_slave_0 added [ 106.121119][ T5125] team0: Port device team_slave_1 added [ 106.230050][ T5119] hsr_slave_0: entered promiscuous mode [ 106.236945][ T5119] hsr_slave_1: entered promiscuous mode [ 106.243621][ T5119] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 106.251530][ T5119] Cannot create hsr debugfs directory [ 106.273422][ T5128] hsr_slave_0: entered promiscuous mode [ 106.280124][ T5128] hsr_slave_1: entered promiscuous mode [ 106.286757][ T5128] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 106.294722][ T5128] Cannot create hsr debugfs directory [ 106.347346][ T5125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.354401][ T5125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.380875][ T5125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.399361][ T5125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.407001][ T5125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.433327][ T5125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.652408][ T5125] hsr_slave_0: entered promiscuous mode [ 106.659404][ T5125] hsr_slave_1: entered promiscuous mode [ 106.667857][ T5125] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 106.675786][ T5125] Cannot create hsr debugfs directory [ 106.910240][ T5120] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.923867][ T5120] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.941973][ T5120] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.953579][ T5120] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 107.051915][ T5121] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 107.070091][ T5121] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 107.094517][ T5121] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 107.114357][ T5121] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 107.170108][ T5128] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 107.188346][ T5128] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 107.208638][ T5128] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 107.220092][ T5128] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 107.345584][ T5125] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 107.370427][ T5125] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 107.387589][ T5125] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 107.397845][ T5125] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 107.434931][ T5120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.535855][ T5119] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 107.558460][ T5120] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.566970][ T5119] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 107.579117][ T5119] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 107.593378][ T5119] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 107.645249][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.652723][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.663816][ T5126] Bluetooth: hci0: command tx timeout [ 107.685930][ T5121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.717035][ T5121] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.727048][ T5173] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.731908][ T5126] Bluetooth: hci2: command tx timeout [ 107.734223][ T5173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.747211][ T5126] Bluetooth: hci3: command tx timeout [ 107.748298][ T5129] Bluetooth: hci1: command tx timeout [ 107.758211][ T53] Bluetooth: hci4: command tx timeout [ 107.796283][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.803631][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.849183][ T5128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.858658][ T5178] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.865831][ T5178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.975453][ T5125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.987141][ T5128] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.015578][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.022770][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.052441][ T5125] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.092317][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.099666][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.127823][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.135036][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.176542][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.183763][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.243900][ T5125] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 108.254482][ T5125] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 108.339133][ T5121] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 108.445801][ T5120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.536965][ T5119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.662618][ T5119] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.708473][ T5120] veth0_vlan: entered promiscuous mode [ 108.728534][ T5125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.739240][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.746484][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.778434][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.785646][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.814497][ T5120] veth1_vlan: entered promiscuous mode [ 108.867553][ T5121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.889492][ T5128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.997769][ T5120] veth0_macvtap: entered promiscuous mode [ 109.054436][ T5120] veth1_macvtap: entered promiscuous mode [ 109.092054][ T5125] veth0_vlan: entered promiscuous mode [ 109.166051][ T5120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.196937][ T5125] veth1_vlan: entered promiscuous mode [ 109.281087][ T5120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.291774][ T5121] veth0_vlan: entered promiscuous mode [ 109.313565][ T5120] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.328758][ T5120] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.337855][ T5120] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.348157][ T5120] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.385181][ T5121] veth1_vlan: entered promiscuous mode [ 109.492487][ T5125] veth0_macvtap: entered promiscuous mode [ 109.507008][ T5119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.532706][ T5128] veth0_vlan: entered promiscuous mode [ 109.548823][ T5125] veth1_macvtap: entered promiscuous mode [ 109.577380][ T5121] veth0_macvtap: entered promiscuous mode [ 109.589480][ T5121] veth1_macvtap: entered promiscuous mode [ 109.636451][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.647607][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.663827][ T5125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.672720][ T5128] veth1_vlan: entered promiscuous mode [ 109.687442][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.695642][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.728312][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.740468][ T53] Bluetooth: hci0: command tx timeout [ 109.741703][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.758055][ T5125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.768779][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.780397][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.793099][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.803602][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.813964][ T53] Bluetooth: hci1: command tx timeout [ 109.814592][ T5129] Bluetooth: hci3: command tx timeout [ 109.819381][ T53] Bluetooth: hci2: command tx timeout [ 109.824947][ T5126] Bluetooth: hci4: command tx timeout [ 109.827005][ T5121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.864212][ T5125] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.873347][ T5125] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.882688][ T5125] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.893585][ T5125] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.906730][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.917685][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.927890][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.940064][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.952422][ T5121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.963324][ T5121] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.973078][ T5121] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.982269][ T5121] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.991629][ T5121] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.066255][ T5119] veth0_vlan: entered promiscuous mode [ 110.076886][ T5128] veth0_macvtap: entered promiscuous mode [ 110.085226][ T2483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.094081][ T2483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.115467][ T5128] veth1_macvtap: entered promiscuous mode [ 110.148740][ T5119] veth1_vlan: entered promiscuous mode [ 110.282357][ T5128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.299223][ T5128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.311708][ T5128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.324101][ T5128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.352809][ T5128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.377372][ T5128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.392507][ T5128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.418314][ T5128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.449447][ T5128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.466537][ T5128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.483758][ T5128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.494089][ T5128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.504684][ T5128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.530220][ T5128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.564079][ T2483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.573717][ T5214] Illegal XDP return value 4294967294 on prog (id 2) dev N/A, expect packet loss! [ 110.579149][ T5128] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.583787][ T2483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.599528][ T5128] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.608608][ T5128] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.618733][ T5128] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.644674][ T5119] veth0_macvtap: entered promiscuous mode [ 110.669233][ T5216] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 110.695394][ T5216] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 110.701770][ T5119] veth1_macvtap: entered promiscuous mode [ 110.821937][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.829914][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.864450][ T5176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.875221][ T5176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.924795][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.940174][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.958728][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.972361][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.982707][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.993407][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.005447][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.018958][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.029599][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.040134][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.052359][ T5119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.134312][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.146048][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.158151][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.169080][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.179968][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.190694][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.200811][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.211438][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.223302][ T5119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.235955][ T5119] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.246575][ T5119] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.260086][ T5119] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.269355][ T5119] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.287191][ T5224] bond_slave_0: entered promiscuous mode [ 111.293523][ T5224] bond_slave_1: entered promiscuous mode [ 111.299505][ T5224] macsec1: entered promiscuous mode [ 111.304780][ T5224] bond0: entered promiscuous mode [ 111.310300][ T5224] macsec1: entered allmulticast mode [ 111.316153][ T5224] bond0: entered allmulticast mode [ 111.322099][ T5224] bond_slave_0: entered allmulticast mode [ 111.327887][ T5224] bond_slave_1: entered allmulticast mode [ 111.338203][ T5224] bond0: left allmulticast mode [ 111.344951][ T5224] bond_slave_0: left allmulticast mode [ 111.350500][ T5224] bond_slave_1: left allmulticast mode [ 111.358279][ T5224] bond0: left promiscuous mode [ 111.364169][ T5224] bond_slave_0: left promiscuous mode [ 111.369608][ T5224] bond_slave_1: left promiscuous mode [ 111.403421][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.411708][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.513942][ T5178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.539945][ T5178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.722847][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.755751][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.811388][ T53] Bluetooth: hci0: command tx timeout [ 111.893617][ T53] Bluetooth: hci3: command tx timeout [ 111.893759][ T5129] Bluetooth: hci4: command tx timeout [ 111.899043][ T53] Bluetooth: hci1: command tx timeout [ 111.904851][ T5122] Bluetooth: hci2: command tx timeout [ 111.927014][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.960482][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.741909][ T5266] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 112.818958][ T5267] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 112.927278][ T5273] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.3'. [ 113.210167][ T5281] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 113.568737][ T5293] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 113.636614][ T5297] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.4'. [ 113.712929][ T5301] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.3'. [ 113.782004][ T5303] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 114.122809][ T5316] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 114.592994][ T5331] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 114.964763][ T5340] Bluetooth: MGMT ver 1.22 [ 116.882349][ T5411] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 117.279634][ T5429] bond_slave_0: entered promiscuous mode [ 117.285448][ T5429] bond_slave_1: entered promiscuous mode [ 117.338788][ T5429] macsec1: entered promiscuous mode [ 117.355942][ T5429] bond0: entered promiscuous mode [ 117.378713][ T5429] macsec1: entered allmulticast mode [ 117.384661][ T5429] bond0: entered allmulticast mode [ 117.390054][ T5429] bond_slave_0: entered allmulticast mode [ 117.404290][ T5429] bond_slave_1: entered allmulticast mode [ 117.429448][ T5429] bond0: left allmulticast mode [ 117.434897][ T5429] bond_slave_0: left allmulticast mode [ 117.444489][ T5429] bond_slave_1: left allmulticast mode [ 117.463465][ T5429] bond0: left promiscuous mode [ 117.482312][ T5429] bond_slave_0: left promiscuous mode [ 117.487864][ T5429] bond_slave_1: left promiscuous mode [ 117.654947][ T5432] bond_slave_0: entered promiscuous mode [ 117.660919][ T5432] bond_slave_1: entered promiscuous mode [ 117.685946][ T5432] macsec1: entered promiscuous mode [ 117.699193][ T5432] bond0: entered promiscuous mode [ 117.715599][ T5432] macsec1: entered allmulticast mode [ 117.729439][ T5432] bond0: entered allmulticast mode [ 117.752284][ T5432] bond_slave_0: entered allmulticast mode [ 117.758162][ T5432] bond_slave_1: entered allmulticast mode [ 117.781582][ T5432] bond0: left allmulticast mode [ 117.786532][ T5432] bond_slave_0: left allmulticast mode [ 117.801227][ T5432] bond_slave_1: left allmulticast mode [ 117.806765][ T5432] bond0: left promiscuous mode [ 117.841339][ T5432] bond_slave_0: left promiscuous mode [ 117.846903][ T5432] bond_slave_1: left promiscuous mode [ 117.897724][ T5434] bond_slave_0: entered promiscuous mode [ 117.903523][ T5434] bond_slave_1: entered promiscuous mode [ 117.909867][ T5434] macsec1: entered promiscuous mode [ 117.915454][ T5434] bond0: entered promiscuous mode [ 117.931700][ T5434] macsec1: entered allmulticast mode [ 117.937035][ T5434] bond0: entered allmulticast mode [ 117.947969][ T5434] bond_slave_0: entered allmulticast mode [ 117.968059][ T5434] bond_slave_1: entered allmulticast mode [ 117.980517][ T5434] bond0: left allmulticast mode [ 117.991849][ T5434] bond_slave_0: left allmulticast mode [ 117.997360][ T5434] bond_slave_1: left allmulticast mode [ 118.009016][ T5434] bond0: left promiscuous mode [ 118.014677][ T5434] bond_slave_0: left promiscuous mode [ 118.020172][ T5434] bond_slave_1: left promiscuous mode [ 118.389456][ T5447] __nla_validate_parse: 6 callbacks suppressed [ 118.389478][ T5447] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 118.445526][ T5451] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 118.907995][ T5468] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 118.962511][ T5474] bond_slave_0: entered promiscuous mode [ 118.968315][ T5474] bond_slave_1: entered promiscuous mode [ 118.976682][ T5474] macsec1: entered promiscuous mode [ 118.983232][ T5474] bond0: entered promiscuous mode [ 118.995089][ T5474] macsec1: entered allmulticast mode [ 119.003279][ T5474] bond0: entered allmulticast mode [ 119.019554][ T5474] bond_slave_0: entered allmulticast mode [ 119.033429][ T5474] bond_slave_1: entered allmulticast mode [ 119.047583][ T5474] bond0: left allmulticast mode [ 119.056886][ T5474] bond_slave_0: left allmulticast mode [ 119.066797][ T5474] bond_slave_1: left allmulticast mode [ 119.075538][ T5474] bond0: left promiscuous mode [ 119.083243][ T5474] bond_slave_0: left promiscuous mode [ 119.088763][ T5474] bond_slave_1: left promiscuous mode [ 119.142368][ T5471] bond_slave_0: entered promiscuous mode [ 119.148092][ T5471] bond_slave_1: entered promiscuous mode [ 119.155655][ T5471] macsec1: entered promiscuous mode [ 119.162371][ T5471] bond0: entered promiscuous mode [ 119.167908][ T5471] macsec1: entered allmulticast mode [ 119.174034][ T5471] bond0: entered allmulticast mode [ 119.179190][ T5471] bond_slave_0: entered allmulticast mode [ 119.184969][ T5471] bond_slave_1: entered allmulticast mode [ 119.194265][ T5471] bond0: left allmulticast mode [ 119.199146][ T5471] bond_slave_0: left allmulticast mode [ 119.205672][ T5471] bond_slave_1: left allmulticast mode [ 119.213266][ T5471] bond0: left promiscuous mode [ 119.218752][ T5471] bond_slave_0: left promiscuous mode [ 119.224271][ T5471] bond_slave_1: left promiscuous mode [ 119.272976][ T5477] bond_slave_0: entered promiscuous mode [ 119.278982][ T5477] bond_slave_1: entered promiscuous mode [ 119.289588][ T5477] macsec1: entered promiscuous mode [ 119.294989][ T5477] bond0: entered promiscuous mode [ 119.302888][ T5477] macsec1: entered allmulticast mode [ 119.308217][ T5477] bond0: entered allmulticast mode [ 119.318719][ T5477] bond_slave_0: entered allmulticast mode [ 119.326598][ T5477] bond_slave_1: entered allmulticast mode [ 119.344152][ T5477] bond0: left allmulticast mode [ 119.349067][ T5477] bond_slave_0: left allmulticast mode [ 119.357904][ T5477] bond_slave_1: left allmulticast mode [ 119.366967][ T5477] bond0: left promiscuous mode [ 119.374385][ T5477] bond_slave_0: left promiscuous mode [ 119.379825][ T5477] bond_slave_1: left promiscuous mode [ 120.238587][ T5515] bond_slave_0: entered promiscuous mode [ 120.244491][ T5515] bond_slave_1: entered promiscuous mode [ 120.265568][ T5515] macsec1: entered promiscuous mode [ 120.298915][ T5515] bond0: entered promiscuous mode [ 120.315246][ T5515] macsec1: entered allmulticast mode [ 120.332566][ T5515] bond0: entered allmulticast mode [ 120.361364][ T5515] bond_slave_0: entered allmulticast mode [ 120.386493][ T5515] bond_slave_1: entered allmulticast mode [ 120.435782][ T5515] bond0: left allmulticast mode [ 120.451879][ T29] audit: type=1804 audit(1716843563.578:2): pid=5523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2458964827/syzkaller.7jzG5V/23/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 120.489891][ T5515] bond_slave_0: left allmulticast mode [ 120.501198][ T5515] bond_slave_1: left allmulticast mode [ 120.510177][ T5515] bond0: left promiscuous mode [ 120.518750][ T5515] bond_slave_0: left promiscuous mode [ 120.524306][ T5515] bond_slave_1: left promiscuous mode [ 120.544521][ T5523] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 120.573655][ T5527] Unsupported ieee802154 address type: 0 [ 120.916976][ T29] audit: type=1804 audit(1716843564.048:3): pid=5537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir466536501/syzkaller.FUY9lJ/29/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0 [ 120.979049][ T5541] Unsupported ieee802154 address type: 0 [ 120.979300][ T5537] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 122.444817][ T29] audit: type=1804 audit(1716843565.578:4): pid=5600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3325351192/syzkaller.KoEzYW/30/cgroup.controllers" dev="sda1" ino=1943 res=1 errno=0 [ 122.506729][ T5600] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 122.525857][ T5602] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 122.548158][ T5604] Unsupported ieee802154 address type: 0 [ 122.564013][ T29] audit: type=1804 audit(1716843565.628:5): pid=5602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2458964827/syzkaller.7jzG5V/27/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 122.594222][ T5608] Unsupported ieee802154 address type: 0 [ 122.964275][ T5623] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 123.020656][ T5623] netlink: 9344 bytes leftover after parsing attributes in process `syz-executor.1'. [ 123.057597][ T5623] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 123.465192][ T8] IPVS: starting estimator thread 0... [ 123.469449][ T5173] IPVS: starting estimator thread 0... [ 123.572030][ T5645] IPVS: using max 16 ests per chain, 38400 per kthread [ 123.600776][ T5643] IPVS: using max 17 ests per chain, 40800 per kthread [ 124.190805][ T29] audit: type=1804 audit(1716843567.318:6): pid=5664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2458964827/syzkaller.7jzG5V/30/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 [ 124.225817][ T5664] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 124.271211][ T5670] Unsupported ieee802154 address type: 0 [ 124.463854][ T5241] IPVS: starting estimator thread 0... [ 124.571002][ T5685] IPVS: using max 21 ests per chain, 50400 per kthread [ 125.013969][ T29] audit: type=1804 audit(1716843568.138:7): pid=5702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3325351192/syzkaller.KoEzYW/36/cgroup.controllers" dev="sda1" ino=1949 res=1 errno=0 [ 125.099296][ T5699] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 125.148118][ T5702] Unsupported ieee802154 address type: 0 [ 125.196653][ T45] IPVS: starting estimator thread 0... [ 125.291870][ T5713] IPVS: using max 15 ests per chain, 36000 per kthread [ 126.358967][ T5761] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.4'. [ 126.710160][ T5774] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.1'. [ 126.751295][ T5773] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.1'. [ 127.125699][ T5794] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.4'. [ 127.313956][ T5804] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 127.441767][ T5810] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.1'. [ 127.471277][ T5807] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.1'. [ 127.963478][ T5831] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 128.008867][ T5833] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 128.666538][ T5868] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 128.704420][ T5869] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 128.817017][ T5877] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. [ 129.272928][ T5893] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 129.414351][ T5898] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 129.564430][ T5909] syz-executor.3 uses obsolete (PF_INET,SOCK_PACKET) [ 129.645211][ T5911] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.653422][ T5911] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.729999][ T5917] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.737387][ T5917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.746136][ T5917] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.753477][ T5917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.797375][ T5917] bridge0: entered promiscuous mode [ 129.853445][ T5917] bridge0: entered allmulticast mode [ 130.114937][ T5929] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 130.138276][ T5930] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 130.410230][ T5946] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 130.435119][ T5946] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.4'. [ 130.522759][ T5946] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 130.569003][ T5946] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. [ 130.611654][ T5948] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 130.646891][ T5948] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. [ 131.380919][ T5996] netlink: 212424 bytes leftover after parsing attributes in process `syz-executor.2'. [ 131.495380][ T6001] netem: incorrect ge model size [ 131.513855][ T6001] netem: change failed [ 131.535646][ T6004] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 131.558362][ T6004] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.2'. [ 131.578053][ T6004] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 131.587889][ T6004] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 131.639612][ T6004] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 132.168624][ T6032] netem: incorrect ge model size [ 132.181344][ T6032] netem: change failed [ 132.251730][ T6039] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 133.103332][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.110154][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.936272][ T6116] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.945675][ T6116] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.954674][ T6116] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.963474][ T6116] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.991502][ T6116] vxlan0: entered promiscuous mode [ 134.032926][ T6117] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.041908][ T6117] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.050965][ T6117] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.059696][ T6117] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.076855][ T6117] vxlan0: entered promiscuous mode [ 134.454282][ T6134] __nla_validate_parse: 12 callbacks suppressed [ 134.454315][ T6134] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 134.544674][ T6138] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 134.806259][ T6147] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 135.380012][ T6179] RDS: rds_bind could not find a transport for 2e70:7269:6f69:6478::, load rds_tcp or rds_rdma? [ 135.594666][ T6186] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 135.619578][ T6186] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.628873][ T6186] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.637703][ T6186] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.647518][ T6186] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.672875][ T6186] vxlan0: entered promiscuous mode [ 135.869488][ T6192] team0: Device vlan2 is already an upper device of the team interface [ 136.287436][ T6212] netlink: 14568 bytes leftover after parsing attributes in process `syz-executor.1'. [ 136.959420][ T6253] team0: Device vlan2 is already an upper device of the team interface [ 137.611879][ T6280] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 138.398372][ T6309] tipc: Enabling of bearer rejected, failed to enable media [ 139.289149][ T6340] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 139.355274][ T6339] tipc: Enabling of bearer rejected, failed to enable media [ 139.374535][ T6338] tipc: Enabling of bearer rejected, failed to enable media [ 140.092611][ T6365] tipc: Enabling of bearer rejected, failed to enable media [ 140.192655][ T6366] tipc: Enabling of bearer rejected, failed to enable media [ 140.672935][ T6389] tipc: Enabling of bearer rejected, failed to enable media [ 143.715518][ T6525] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 143.748682][ T6525] mac80211_hwsim hwsim8 v: renamed from wlan1 (while UP) [ 143.879220][ T6525] syz-executor.2 (6525) used greatest stack depth: 18224 bytes left [ 144.498491][ T6555] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 144.805489][ T6563] validate_nla: 1 callbacks suppressed [ 144.805509][ T6563] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 144.830913][ T6563] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 144.849600][ T6563] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 146.042480][ T6601] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 146.068056][ T6601] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 146.088816][ T6601] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 146.639468][ T6630] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 146.705253][ T6631] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 146.864346][ T6639] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 146.876887][ T6642] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 146.892051][ T6639] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 146.932555][ T6639] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 147.350102][ T6658] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 148.102258][ T6666] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 149.310455][ T6702] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 149.387642][ T6709] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 149.474151][ T6712] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 151.388017][ T6744] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 151.771307][ T6759] validate_nla: 3 callbacks suppressed [ 151.771328][ T6759] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 151.855948][ T6759] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 152.142280][ T6770] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 152.175307][ T6770] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 152.218444][ T6776] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 152.547680][ T6783] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 152.767489][ T6789] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 154.359877][ T6806] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 154.373916][ T6806] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 154.398893][ T6806] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 154.678641][ T6826] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 154.730389][ T6826] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 154.749550][ T6831] warning: `syz-executor.0' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 154.914950][ T6839] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 155.314895][ T6851] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 155.321994][ T6847] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 155.338628][ T6851] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 155.359835][ T6847] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 155.385862][ T6847] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 155.975993][ T6872] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 155.996218][ T6872] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 156.307093][ T6887] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 156.784906][ T6911] validate_nla: 3 callbacks suppressed [ 156.784925][ T6911] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 156.936141][ T6917] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 157.173481][ T6932] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 157.218099][ T6934] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 157.321130][ T6938] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 157.349998][ T6938] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 157.513418][ T6948] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 157.668053][ T6955] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 158.028054][ T6967] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 158.151095][ T6970] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 158.376179][ T6980] smc: net device ip6tnl0 applied user defined pnetid SYZ2 [ 159.480241][ T7029] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.541725][ T7029] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.549204][ T7029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.597119][ T7035] smc: net device ip6tnl0 applied user defined pnetid SYZ2 [ 160.114900][ T29] audit: type=1800 audit(1716843603.248:8): pid=7053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="cgroup.controllers" dev="sda1" ino=1948 res=0 errno=0 [ 160.151141][ T7054] __nla_validate_parse: 1 callbacks suppressed [ 160.151161][ T7054] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.4'. [ 160.597715][ T7079] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 161.329403][ T29] audit: type=1800 audit(1716843604.458:9): pid=7105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="cgroup.controllers" dev="sda1" ino=1963 res=0 errno=0 [ 161.495526][ T7114] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.4'. [ 161.555696][ T7116] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.0'. [ 161.688864][ T7121] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.743602][ T7121] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.750924][ T7121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.807724][ T7125] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.0'. [ 162.704196][ T7161] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.0'. [ 162.773345][ T7163] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.4'. [ 162.784773][ T29] audit: type=1800 audit(1716843605.898:10): pid=7164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="cgroup.controllers" dev="sda1" ino=1958 res=0 errno=0 [ 163.718566][ T7194] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.0'. [ 163.839288][ T29] audit: type=1800 audit(1716843606.968:11): pid=7199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="cgroup.controllers" dev="sda1" ino=1956 res=0 errno=0 [ 164.160363][ T29] audit: type=1804 audit(1716843607.288:12): pid=7209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir466536501/syzkaller.FUY9lJ/174/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 164.195669][ T7209] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 164.586098][ T7228] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.2'. [ 165.449458][ T7263] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 165.462773][ T7263] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 165.713985][ T29] audit: type=1804 audit(1716843608.838:13): pid=7272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3325351192/syzkaller.KoEzYW/160/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 165.753526][ T7272] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 167.195006][ T7342] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.0'. [ 167.219106][ T7342] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.0'. [ 167.263599][ T7346] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 167.430605][ T29] audit: type=1804 audit(1716843610.548:14): pid=7345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1742495627/syzkaller.VNydyM/165/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 [ 167.501678][ T7345] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 167.971794][ T7378] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 168.014152][ T29] audit: type=1804 audit(1716843611.148:15): pid=7376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2229794009/syzkaller.7bWkZq/165/memory.events" dev="sda1" ino=1952 res=1 errno=0 [ 168.102967][ T29] audit: type=1800 audit(1716843611.178:16): pid=7376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1952 res=0 errno=0 [ 168.265903][ T29] audit: type=1804 audit(1716843611.398:17): pid=7384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir466536501/syzkaller.FUY9lJ/190/memory.events" dev="sda1" ino=1953 res=1 errno=0 [ 168.332308][ T29] audit: type=1800 audit(1716843611.428:18): pid=7384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1953 res=0 errno=0 [ 168.356824][ T7392] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 168.817848][ T29] audit: type=1804 audit(1716843611.948:19): pid=7414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir466536501/syzkaller.FUY9lJ/193/memory.events" dev="sda1" ino=1967 res=1 errno=0 [ 168.906794][ T29] audit: type=1800 audit(1716843611.948:20): pid=7414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1967 res=0 errno=0 [ 169.013130][ T29] audit: type=1804 audit(1716843612.138:21): pid=7415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2458964827/syzkaller.7jzG5V/172/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 [ 169.051111][ T7415] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 169.458499][ T7441] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 170.143686][ T7469] TCP: MD5 Hash mismatch for [fe80::bb].0->[ff02::1].20002 [SP.]L3 index 0 [ 170.336530][ T7478] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 170.481561][ T7489] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 170.652336][ T7490] [ 170.654713][ T7490] ====================================================== [ 170.661732][ T7490] WARNING: possible circular locking dependency detected [ 170.668742][ T7490] 6.9.0-syzkaller-12088-g52a2f0608366 #0 Not tainted [ 170.675412][ T7490] ------------------------------------------------------ [ 170.682430][ T7490] syz-executor.2/7490 is trying to acquire lock: [ 170.688752][ T7490] ffff88801ceca2b0 (&psock->link_lock){+...}-{2:2}, at: sock_map_update_common+0x31c/0x5b0 [ 170.698799][ T7490] [ 170.698799][ T7490] but task is already holding lock: [ 170.706162][ T7490] ffff88802c3a0a20 (&stab->lock){+.-.}-{2:2}, at: sock_map_update_common+0x1b6/0x5b0 [ 170.715672][ T7490] [ 170.715672][ T7490] which lock already depends on the new lock. [ 170.715672][ T7490] [ 170.726071][ T7490] [ 170.726071][ T7490] the existing dependency chain (in reverse order) is: [ 170.735085][ T7490] [ 170.735085][ T7490] -> #1 (&stab->lock){+.-.}-{2:2}: [ 170.742393][ T7490] lock_acquire+0x1ed/0x550 [ 170.747423][ T7490] _raw_spin_lock_bh+0x35/0x50 [ 170.752719][ T7490] sock_map_delete_elem+0x175/0x250 [ 170.758450][ T7490] 0xffffffffa0001ff5 [ 170.762980][ T7490] bpf_trace_run2+0x2ec/0x540 [ 170.768194][ T7490] kfree+0x2bb/0x360 [ 170.772706][ T7490] sock_map_unref+0x3ac/0x5e0 [ 170.777913][ T7490] sock_hash_delete_elem+0x392/0x400 [ 170.783723][ T7490] 0xffffffffa000212a [ 170.788222][ T7490] bpf_trace_run1+0x2ca/0x520 [ 170.793424][ T7490] __traceiter_ext4_da_reserve_space+0x71/0xc0 [ 170.800120][ T7490] ext4_da_reserve_space+0x4c4/0x530 [ 170.805937][ T7490] ext4_da_get_block_prep+0x955/0x1420 [ 170.811936][ T7490] ext4_block_write_begin+0x513/0x1800 [ 170.817918][ T7490] ext4_da_write_begin+0x5f0/0xa70 [ 170.823552][ T7490] generic_perform_write+0x322/0x640 [ 170.829356][ T7490] ext4_buffered_write_iter+0xc6/0x350 [ 170.835332][ T7490] ext4_file_write_iter+0x1de/0x1a10 [ 170.841139][ T7490] vfs_write+0xa72/0xc90 [ 170.845910][ T7490] ksys_write+0x1a0/0x2c0 [ 170.850766][ T7490] do_syscall_64+0xf3/0x230 [ 170.855807][ T7490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.862233][ T7490] [ 170.862233][ T7490] -> #0 (&psock->link_lock){+...}-{2:2}: [ 170.870063][ T7490] validate_chain+0x18e0/0x5900 [ 170.875450][ T7490] __lock_acquire+0x1346/0x1fd0 [ 170.880827][ T7490] lock_acquire+0x1ed/0x550 [ 170.885855][ T7490] _raw_spin_lock_bh+0x35/0x50 [ 170.891144][ T7490] sock_map_update_common+0x31c/0x5b0 [ 170.897045][ T7490] sock_map_update_elem_sys+0x55f/0x910 [ 170.903112][ T7490] map_update_elem+0x53a/0x6f0 [ 170.908405][ T7490] __sys_bpf+0x76f/0x810 [ 170.913188][ T7490] __x64_sys_bpf+0x7c/0x90 [ 170.918137][ T7490] do_syscall_64+0xf3/0x230 [ 170.923174][ T7490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.929588][ T7490] [ 170.929588][ T7490] other info that might help us debug this: [ 170.929588][ T7490] [ 170.939829][ T7490] Possible unsafe locking scenario: [ 170.939829][ T7490] [ 170.947281][ T7490] CPU0 CPU1 [ 170.952664][ T7490] ---- ---- [ 170.958027][ T7490] lock(&stab->lock); [ 170.962103][ T7490] lock(&psock->link_lock); [ 170.969221][ T7490] lock(&stab->lock); [ 170.975818][ T7490] lock(&psock->link_lock); [ 170.980417][ T7490] [ 170.980417][ T7490] *** DEADLOCK *** [ 170.980417][ T7490] [ 170.988557][ T7490] 3 locks held by syz-executor.2/7490: [ 170.994012][ T7490] #0: ffff88805deb7098 (sk_lock-AF_INET){+.+.}-{0:0}, at: sock_map_update_elem_sys+0x1cc/0x910 [ 171.004469][ T7490] #1: ffffffff8e333e60 (rcu_read_lock){....}-{1:2}, at: sock_map_update_elem_sys+0x1d8/0x910 [ 171.014744][ T7490] #2: ffff88802c3a0a20 (&stab->lock){+.-.}-{2:2}, at: sock_map_update_common+0x1b6/0x5b0 [ 171.024672][ T7490] [ 171.024672][ T7490] stack backtrace: [ 171.030560][ T7490] CPU: 1 PID: 7490 Comm: syz-executor.2 Not tainted 6.9.0-syzkaller-12088-g52a2f0608366 #0 [ 171.040534][ T7490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 171.050592][ T7490] Call Trace: [ 171.053882][ T7490] [ 171.056811][ T7490] dump_stack_lvl+0x241/0x360 [ 171.061491][ T7490] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.066693][ T7490] ? print_circular_bug+0x130/0x1a0 [ 171.071905][ T7490] check_noncircular+0x36a/0x4a0 [ 171.076856][ T7490] ? __pfx_check_noncircular+0x10/0x10 [ 171.082339][ T7490] ? lockdep_lock+0x123/0x2b0 [ 171.087024][ T7490] validate_chain+0x18e0/0x5900 [ 171.091884][ T7490] ? __pfx_validate_chain+0x10/0x10 [ 171.097101][ T7490] ? __pfx_validate_chain+0x10/0x10 [ 171.102313][ T7490] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 171.108299][ T7490] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 171.114632][ T7490] ? look_up_lock_class+0x77/0x160 [ 171.119756][ T7490] ? register_lock_class+0x102/0x980 [ 171.125061][ T7490] ? __pfx_register_lock_class+0x10/0x10 [ 171.130728][ T7490] ? mark_lock+0x9a/0x350 [ 171.135065][ T7490] __lock_acquire+0x1346/0x1fd0 [ 171.139927][ T7490] lock_acquire+0x1ed/0x550 [ 171.144431][ T7490] ? sock_map_update_common+0x31c/0x5b0 [ 171.149989][ T7490] ? __pfx_lock_acquire+0x10/0x10 [ 171.155019][ T7490] ? sock_map_update_common+0x31c/0x5b0 [ 171.160570][ T7490] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 171.166387][ T7490] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 171.171778][ T7490] ? sock_map_update_common+0x31c/0x5b0 [ 171.177338][ T7490] _raw_spin_lock_bh+0x35/0x50 [ 171.182112][ T7490] ? sock_map_update_common+0x31c/0x5b0 [ 171.187659][ T7490] sock_map_update_common+0x31c/0x5b0 [ 171.193054][ T7490] sock_map_update_elem_sys+0x55f/0x910 [ 171.198615][ T7490] ? sock_map_update_elem_sys+0x1d8/0x910 [ 171.204335][ T7490] ? __pfx_sock_map_update_elem_sys+0x10/0x10 [ 171.210415][ T7490] map_update_elem+0x53a/0x6f0 [ 171.215219][ T7490] __sys_bpf+0x76f/0x810 [ 171.219476][ T7490] ? __pfx___sys_bpf+0x10/0x10 [ 171.224248][ T7490] ? __rseq_handle_notify_resume+0x353/0x14e0 [ 171.230318][ T7490] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 171.236309][ T7490] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 171.242643][ T7490] ? do_syscall_64+0x100/0x230 [ 171.247421][ T7490] __x64_sys_bpf+0x7c/0x90 [ 171.251843][ T7490] do_syscall_64+0xf3/0x230 [ 171.256348][ T7490] ? clear_bhb_loop+0x35/0x90 [ 171.261031][ T7490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.266933][ T7490] RIP: 0033:0x7f0c0527cee9 [ 171.271348][ T7490] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 171.290960][ T7490] RSP: 002b:00007f0c05f380c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 2024/05/27 21:00:14 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 171.299395][ T7490] RAX: ffffffffffffffda RBX: 00007f0c053b3f80 RCX: 00007f0c0527cee9 [ 171.307366][ T7490] RDX: 0000000000000020 RSI: 0000000020000100 RDI: 0000000000000002 [ 171.315452][ T7490] RBP: 00007f0c052c947f R08: 0000000000000000 R09: 0000000000000000 [ 171.323432][ T7490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.331408][ T7490] R13: 000000000000000b R14: 00007f0c053b3f80 R15: 00007fff4e89d0b8 [ 171.339399][ T7490] [ 171.386911][ T7486] syzkaller0: entered promiscuous mode [ 171.392623][ T7486] syzkaller0: entered allmulticast mode