Warning: Permanently added '10.128.1.148' (ED25519) to the list of known hosts. 2024/03/27 02:43:49 fuzzer started 2024/03/27 02:43:49 dialing manager at 10.128.0.169:30001 [ 69.803848][ T5073] cgroup: Unknown subsys name 'net' [ 69.922254][ T5073] cgroup: Unknown subsys name 'rlimit' [ 70.947505][ T1233] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.954122][ T1233] ieee802154 phy1 wpan1: encryption failed: -22 2024/03/27 02:43:51 syscalls: 3744 2024/03/27 02:43:51 code coverage: enabled 2024/03/27 02:43:51 comparison tracing: enabled 2024/03/27 02:43:51 extra coverage: enabled 2024/03/27 02:43:51 delay kcov mmap: enabled 2024/03/27 02:43:51 setuid sandbox: enabled 2024/03/27 02:43:51 namespace sandbox: enabled 2024/03/27 02:43:51 Android sandbox: /sys/fs/selinux/policy does not exist 2024/03/27 02:43:51 fault injection: enabled 2024/03/27 02:43:51 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2024/03/27 02:43:51 net packet injection: enabled 2024/03/27 02:43:51 net device setup: enabled 2024/03/27 02:43:51 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/03/27 02:43:51 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/03/27 02:43:51 NIC VF setup: PCI device 0000:00:11.0 is not available 2024/03/27 02:43:51 USB emulation: enabled 2024/03/27 02:43:51 hci packet injection: enabled 2024/03/27 02:43:51 wifi device emulation: enabled 2024/03/27 02:43:51 802.15.4 emulation: enabled 2024/03/27 02:43:51 swap file: enabled [ 71.554480][ T5073] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k 2024/03/27 02:43:52 starting 6 executor processes [ 72.720855][ T5089] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.736058][ T5089] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.750344][ T5089] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.772584][ T5098] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.792765][ T5106] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.801296][ T5106] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.809373][ T5100] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.809388][ T5106] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.826964][ T5106] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.827709][ T5105] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.838591][ T5106] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.842158][ T5100] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 72.849367][ T5106] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 72.856416][ T5105] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 72.869702][ T5100] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.876240][ T5108] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.877391][ T5105] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.883783][ T5106] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 72.899196][ T5106] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 72.900777][ T5105] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.915120][ T5089] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.922853][ T5105] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.926631][ T5106] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.930144][ T5105] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.937470][ T5106] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 72.946006][ T5105] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.958810][ T5106] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.958917][ T5089] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 72.966562][ T5106] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 72.973034][ T5105] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.980577][ T5106] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.986809][ T5089] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 73.001034][ T5089] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 73.009793][ T5089] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.010213][ T5103] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 73.024730][ T5103] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.716512][ T5090] chnl_net:caif_netlink_parms(): no params data found [ 73.912356][ T5093] chnl_net:caif_netlink_parms(): no params data found [ 73.980969][ T5099] chnl_net:caif_netlink_parms(): no params data found [ 74.108279][ T5087] chnl_net:caif_netlink_parms(): no params data found [ 74.164434][ T5092] chnl_net:caif_netlink_parms(): no params data found [ 74.199810][ T5093] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.207170][ T5093] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.214846][ T5093] bridge_slave_0: entered allmulticast mode [ 74.222580][ T5093] bridge_slave_0: entered promiscuous mode [ 74.230596][ T5091] chnl_net:caif_netlink_parms(): no params data found [ 74.263178][ T5090] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.270293][ T5090] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.277538][ T5090] bridge_slave_0: entered allmulticast mode [ 74.284773][ T5090] bridge_slave_0: entered promiscuous mode [ 74.294077][ T5090] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.301245][ T5090] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.308955][ T5090] bridge_slave_1: entered allmulticast mode [ 74.317880][ T5090] bridge_slave_1: entered promiscuous mode [ 74.342022][ T5093] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.349163][ T5093] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.356860][ T5093] bridge_slave_1: entered allmulticast mode [ 74.364457][ T5093] bridge_slave_1: entered promiscuous mode [ 74.472009][ T5090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.553815][ T5090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.584040][ T5099] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.591210][ T5099] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.598760][ T5099] bridge_slave_0: entered allmulticast mode [ 74.606635][ T5099] bridge_slave_0: entered promiscuous mode [ 74.617149][ T5093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.630313][ T5093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.673089][ T5090] team0: Port device team_slave_0 added [ 74.682191][ T5090] team0: Port device team_slave_1 added [ 74.701197][ T5099] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.708690][ T5099] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.716319][ T5099] bridge_slave_1: entered allmulticast mode [ 74.723681][ T5099] bridge_slave_1: entered promiscuous mode [ 74.849409][ T5093] team0: Port device team_slave_0 added [ 74.871089][ T5091] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.878354][ T5091] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.890662][ T5091] bridge_slave_0: entered allmulticast mode [ 74.897947][ T5091] bridge_slave_0: entered promiscuous mode [ 74.906519][ T5091] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.913788][ T5091] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.921146][ T5091] bridge_slave_1: entered allmulticast mode [ 74.928392][ T5091] bridge_slave_1: entered promiscuous mode [ 74.942309][ T5089] Bluetooth: hci1: command tx timeout [ 74.947988][ T5089] Bluetooth: hci0: command tx timeout [ 74.956178][ T5087] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.963414][ T5087] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.970826][ T5087] bridge_slave_0: entered allmulticast mode [ 74.978668][ T5087] bridge_slave_0: entered promiscuous mode [ 75.003557][ T5093] team0: Port device team_slave_1 added [ 75.012420][ T5099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.032154][ T5099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.041396][ T5092] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.048881][ T5092] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.056097][ T5092] bridge_slave_0: entered allmulticast mode [ 75.063825][ T5092] bridge_slave_0: entered promiscuous mode [ 75.084954][ T5090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.092100][ T5090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.118047][ T5089] Bluetooth: hci2: command tx timeout [ 75.118232][ T5089] Bluetooth: hci4: command tx timeout [ 75.129143][ T52] Bluetooth: hci5: command tx timeout [ 75.130724][ T5103] Bluetooth: hci3: command tx timeout [ 75.140556][ T5090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.154932][ T5090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.162033][ T5090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.188195][ T5090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.199672][ T5087] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.206990][ T5087] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.214437][ T5087] bridge_slave_1: entered allmulticast mode [ 75.221871][ T5087] bridge_slave_1: entered promiscuous mode [ 75.282601][ T5092] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.289746][ T5092] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.298644][ T5092] bridge_slave_1: entered allmulticast mode [ 75.306118][ T5092] bridge_slave_1: entered promiscuous mode [ 75.371176][ T5093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.378287][ T5093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.404246][ T5093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.419696][ T5099] team0: Port device team_slave_0 added [ 75.443481][ T5091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.456871][ T5091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.473597][ T5087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.483463][ T5093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.490421][ T5093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.521711][ T5093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.542852][ T5099] team0: Port device team_slave_1 added [ 75.551412][ T5092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.565999][ T5092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.604381][ T5087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.645867][ T5087] team0: Port device team_slave_0 added [ 75.721396][ T5091] team0: Port device team_slave_0 added [ 75.738520][ T5087] team0: Port device team_slave_1 added [ 75.745323][ T5099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.752670][ T5099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.779228][ T5099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.795114][ T5092] team0: Port device team_slave_0 added [ 75.830280][ T5091] team0: Port device team_slave_1 added [ 75.865856][ T5099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.872975][ T5099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.899161][ T5099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.912368][ T5092] team0: Port device team_slave_1 added [ 75.931144][ T5090] hsr_slave_0: entered promiscuous mode [ 75.937966][ T5090] hsr_slave_1: entered promiscuous mode [ 75.990065][ T5091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.997445][ T5091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.023694][ T5091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.051001][ T5087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.058180][ T5087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.086118][ T5087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.130662][ T5093] hsr_slave_0: entered promiscuous mode [ 76.138770][ T5093] hsr_slave_1: entered promiscuous mode [ 76.145307][ T5093] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.153634][ T5093] Cannot create hsr debugfs directory [ 76.159897][ T5091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.166923][ T5091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.218093][ T5091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.253031][ T5087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.259990][ T5087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.286662][ T5087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.323512][ T5092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.330460][ T5092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.356572][ T5092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.411219][ T5099] hsr_slave_0: entered promiscuous mode [ 76.417759][ T5099] hsr_slave_1: entered promiscuous mode [ 76.424713][ T5099] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.432650][ T5099] Cannot create hsr debugfs directory [ 76.461079][ T5092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.471711][ T5092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.497994][ T5092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.595354][ T5091] hsr_slave_0: entered promiscuous mode [ 76.602216][ T5091] hsr_slave_1: entered promiscuous mode [ 76.608504][ T5091] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.616478][ T5091] Cannot create hsr debugfs directory [ 76.745811][ T5092] hsr_slave_0: entered promiscuous mode [ 76.752622][ T5092] hsr_slave_1: entered promiscuous mode [ 76.759103][ T5092] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.766833][ T5092] Cannot create hsr debugfs directory [ 76.777425][ T5087] hsr_slave_0: entered promiscuous mode [ 76.789011][ T5087] hsr_slave_1: entered promiscuous mode [ 76.795580][ T5087] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.803213][ T5087] Cannot create hsr debugfs directory [ 77.021783][ T5103] Bluetooth: hci0: command tx timeout [ 77.027220][ T5103] Bluetooth: hci1: command tx timeout [ 77.181774][ T5103] Bluetooth: hci4: command tx timeout [ 77.187206][ T5103] Bluetooth: hci3: command tx timeout [ 77.192732][ T5098] Bluetooth: hci5: command tx timeout [ 77.192755][ T5089] Bluetooth: hci2: command tx timeout [ 77.408786][ T5093] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.436435][ T5093] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.461074][ T5093] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.486793][ T5093] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.516803][ T5099] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.533950][ T5099] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.554146][ T5099] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.572323][ T5099] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.686456][ T5090] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.711896][ T5090] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.736740][ T5090] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.748666][ T5090] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.842038][ T5091] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.855952][ T5091] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.867613][ T5091] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.908314][ T5091] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.950829][ T5093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.032551][ T5087] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.044826][ T5087] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.097730][ T5087] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.126249][ T5093] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.134582][ T5087] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.159618][ T5099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.195430][ T5097] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.202909][ T5097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.236264][ T5092] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 78.247255][ T5092] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 78.259127][ T5092] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 78.278243][ T5092] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 78.292992][ T5097] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.300109][ T5097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.386793][ T5090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.421327][ T5099] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.464389][ T5097] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.471561][ T5097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.488197][ T5097] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.495332][ T5097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.572547][ T5090] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.619020][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.626222][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.705649][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.712846][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.861278][ T5091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.960791][ T5091] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.021188][ T5087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.036718][ T5093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.079977][ T5148] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.087519][ T5148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.102251][ T5089] Bluetooth: hci1: command tx timeout [ 79.107731][ T52] Bluetooth: hci0: command tx timeout [ 79.121206][ T5148] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.128410][ T5148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.171436][ T5087] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.263293][ T5089] Bluetooth: hci3: command tx timeout [ 79.268730][ T5089] Bluetooth: hci5: command tx timeout [ 79.275689][ T52] Bluetooth: hci4: command tx timeout [ 79.275785][ T5103] Bluetooth: hci2: command tx timeout [ 79.287353][ T5092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.320398][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.327591][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.383295][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.390424][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.453354][ T5092] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.481322][ T5099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.551224][ T5093] veth0_vlan: entered promiscuous mode [ 79.571351][ T5097] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.578495][ T5097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.618995][ T5090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.629298][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.636487][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.656978][ T5093] veth1_vlan: entered promiscuous mode [ 79.807231][ T5099] veth0_vlan: entered promiscuous mode [ 79.933695][ T5099] veth1_vlan: entered promiscuous mode [ 80.000606][ T5090] veth0_vlan: entered promiscuous mode [ 80.028778][ T5090] veth1_vlan: entered promiscuous mode [ 80.155218][ T5093] veth0_macvtap: entered promiscuous mode [ 80.170859][ T5091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.217314][ T5093] veth1_macvtap: entered promiscuous mode [ 80.237502][ T5099] veth0_macvtap: entered promiscuous mode [ 80.260082][ T5087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.279638][ T5099] veth1_macvtap: entered promiscuous mode [ 80.357151][ T5093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.429056][ T5093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.460839][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.479846][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.493948][ T5099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.504836][ T5090] veth0_macvtap: entered promiscuous mode [ 80.519564][ T5093] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.529963][ T5093] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.540195][ T5093] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.549836][ T5093] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.585129][ T5087] veth0_vlan: entered promiscuous mode [ 80.633981][ T5092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.649616][ T5090] veth1_macvtap: entered promiscuous mode [ 80.657844][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.691735][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.713320][ T5099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.731145][ T5099] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.743590][ T5099] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.755180][ T5099] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.764281][ T5099] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.796511][ T5087] veth1_vlan: entered promiscuous mode [ 80.831165][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.843905][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.854659][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.866975][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.886267][ T5090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.948265][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.959543][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.969903][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.982398][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.996019][ T5090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.050223][ T5090] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.068273][ T5090] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.079688][ T5090] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.089883][ T5090] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.144370][ T988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.169438][ T988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.179825][ T5087] veth0_macvtap: entered promiscuous mode [ 81.185942][ T5103] Bluetooth: hci1: command tx timeout [ 81.186317][ T5089] Bluetooth: hci0: command tx timeout [ 81.320907][ T5087] veth1_macvtap: entered promiscuous mode [ 81.341607][ T5089] Bluetooth: hci5: command tx timeout [ 81.347117][ T5089] Bluetooth: hci4: command tx timeout [ 81.347139][ T5103] Bluetooth: hci2: command tx timeout [ 81.352868][ T52] Bluetooth: hci3: command tx timeout [ 81.395179][ T5091] veth0_vlan: entered promiscuous mode [ 81.407582][ T5097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.408700][ T5092] veth0_vlan: entered promiscuous mode [ 81.421405][ T5097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.517895][ T5092] veth1_vlan: entered promiscuous mode [ 81.574302][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.586937][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.620851][ T5091] veth1_vlan: entered promiscuous mode [ 81.638025][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.659595][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.680247][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.698475][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.708582][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.722030][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.739827][ T5087] batman_adv: batadv0: Interface activated: batadv_slave_0 02:44:01 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r0, &(0x7f0000000080), &(0x7f0000000000), 0x2}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000680), &(0x7f00000006c0)='%pK \x00'}, 0x20) [ 81.875178][ T5192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.875901][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.893327][ T5192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.908504][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.927217][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.939220][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.950378][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.961441][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 02:44:02 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=@framed={{}, [@printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x10}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000880)='ext4_evict_inode\x00', r0}, 0x10) unlink(&(0x7f0000000140)='./cgroup\x00') [ 81.976619][ T5087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.053157][ T5087] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.071552][ T5087] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 02:44:02 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000048500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) write$cgroup_subtree(r0, 0x0, 0xe) [ 82.101583][ T5087] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.111247][ T5087] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.302134][ T988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.309991][ T988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:44:02 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='block_bio_remap\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='block_bio_remap\x00', r5}, 0x10) write$cgroup_type(r3, &(0x7f0000000000), 0x9) [ 82.460687][ T5092] veth0_macvtap: entered promiscuous mode 02:44:02 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f0000000100)=0x6, 0x4) [ 82.504125][ T5091] veth0_macvtap: entered promiscuous mode [ 82.525346][ T5092] veth1_macvtap: entered promiscuous mode 02:44:02 executing program 3: ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'syztnl1\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_create1(0x0) wait4(0x0, 0x0, 0x80000000, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) wait4(0x0, 0x0, 0x80000000, 0x0) [ 82.556265][ T5154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.564947][ T5154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.633632][ T5091] veth1_macvtap: entered promiscuous mode 02:44:02 executing program 2: r0 = semget$private(0x0, 0x1, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000005ec0)={{0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) 02:44:02 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)='%+9llu \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='ext4_es_find_extent_range_enter\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x2000) [ 82.739214][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.773044][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.811537][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.838817][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.849040][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 02:44:02 executing program 2: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x2, 0x102) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020}, 0x2020) r0 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/231, 0xe7}, 0x21) r1 = mq_open(&(0x7f00000016c0)='+!+({),-\x00', 0x40, 0x0, &(0x7f0000001700)={0x7, 0x6, 0x2, 0xffffffffffffffff}) dup3(r0, r1, 0x0) write$P9_RSTAT(r1, &(0x7f0000002380)=ANY=[@ANYBLOB], 0x44) write$FUSE_STATFS(r1, &(0x7f0000002240)={0x60, 0x0, 0x0, {{0x0, 0x9, 0x7, 0x8000, 0x2, 0x0, 0x0, 0x1f}}}, 0x60) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) [ 82.864324][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.874473][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.886502][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.912808][ T5092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.923861][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.947989][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 02:44:03 executing program 3: socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "c4"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) close(r0) 02:44:03 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x1006, 0x0, 0x0) [ 82.969482][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.007285][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 02:44:03 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) userfaultfd(0x801) [ 83.051650][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.081763][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 02:44:03 executing program 2: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x4c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x1c, 0x8002, [@TCA_FQ_PIE_BETA={0x8}, @TCA_FQ_PIE_LIMIT={0x8}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xcb9f}]}}]}, 0x4c}}, 0x0) [ 83.116717][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.130559][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 02:44:03 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x1}]}}}]}, 0x3c}}, 0x0) [ 83.158184][ T5092] batman_adv: batadv0: Interface activated: batadv_slave_1 02:44:03 executing program 1: ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x420004}]}) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, &(0x7f0000000000)) [ 83.216311][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.247095][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 02:44:03 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000280)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, &(0x7f0000000100)='\r', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvfrom(r1, &(0x7f0000001a80)=""/4096, 0x1000, 0x0, 0x0, 0x0) [ 83.283743][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.303365][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.322944][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.334648][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.356809][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.369565][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 02:44:03 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x5, 0x5592, &(0x7f0000016340)="$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") syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x3108000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)) [ 83.379578][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.397603][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.420495][ T5091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.469678][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.489404][ T5092] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.512706][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:44:03 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000098c0), 0x0, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5453, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') read$usbmon(r0, 0x0, 0x0) 02:44:03 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d0000008500"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) rt_tgsigqueueinfo(0x0, 0x0, 0xc10000, &(0x7f0000000080)={0xfffffffe, 0x0, 0x1000}) [ 83.526327][ T5092] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.538564][ T5092] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.572723][ T5092] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.609804][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.637476][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.665223][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.676071][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 02:44:03 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b80)={&(0x7f0000000b40)='sys_exit\x00', r0}, 0x10) r1 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000000100)=[{r3}], 0x1, 0x603) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) 02:44:03 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) setreuid(0x0, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) [ 83.695246][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.729835][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.771415][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.802721][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 02:44:03 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000001ac0)='loginuid\x00') write$binfmt_misc(r0, 0x0, 0x0) [ 83.834940][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.850993][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.878633][ T5091] batman_adv: batadv0: Interface activated: batadv_slave_1 02:44:04 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) r2 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) dup3(r1, r0, 0x0) 02:44:04 executing program 2: syz_emit_ethernet(0x15d6, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c200000000000000000086dd62323e4f15a08400fe800000000000000000000000000038fe800000000000000000"], 0x0) [ 83.984438][ T5091] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.023486][ T5091] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 02:44:04 executing program 2: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="3400000024000b0f000003000000000000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000900010063616b65"], 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {}, {0xf}}, [@filter_kind_options=@f_fw={{0x7}, {0x44, 0x2, [@TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x8}}]}]}}]}, 0x70}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 84.041629][ T5091] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.050367][ T5091] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 02:44:04 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r2 = dup2(r1, r1) read$rfkill(r2, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f00000001c0)={0x14000000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) [ 84.207261][ T5250] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 84.217048][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.235933][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:44:04 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000040)=0x9, 0x4) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000000)={@mcast2}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000140)={@mcast1}, 0x14) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000080)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "003a04", 0x4, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}}, 0x0) 02:44:04 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@void, @void, @eth={@broadcast, @local, @val={@val, {0x8847}}, {@ipv6={0x86dd, @generic={0x0, 0x6, "77b77b", 0x0, 0x0, 0x0, @dev, @private0}}}}}, 0x3e) [ 84.458165][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.498432][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:44:04 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, &(0x7f0000000100)='\r', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvfrom(r1, &(0x7f0000001a80)=""/4096, 0x1000, 0x0, 0x0, 0x0) [ 84.627087][ T5259] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET) [ 84.808783][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.851728][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.874208][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.895003][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:44:05 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='mm_page_free_batched\x00', r3}, 0x10) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYRES64], 0x7) write$cgroup_int(r1, &(0x7f0000000200), 0x12) 02:44:05 executing program 0: socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'vlan1\x00', 0x0}) sendto$packet(r0, &(0x7f0000000040)="363c8f1fca5d66d08e583e7c88a8", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x8848, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) [ 85.081888][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.121810][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.298142][ T5233] loop3: detected capacity change from 0 to 40427 [ 85.349071][ T5233] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 85.361329][ T5233] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock 02:44:05 executing program 5: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x4c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x1c, 0x8002, [@TCA_FQ_PIE_BETA={0x8}, @TCA_FQ_PIE_LIMIT={0x8}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xcb9f}]}}]}, 0x4c}}, 0x0) 02:44:05 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000100), 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfecb2dc8}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x0, 0x1b}}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x58}}, 0x0) 02:44:05 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='block_plug\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c1300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000048aa008085000000040000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000f00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='block_plug\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) [ 85.462414][ T5233] F2FS-fs (loop3): invalid crc value [ 85.528230][ T5090] syz-executor.1 (5090) used greatest stack depth: 19216 bytes left [ 85.569286][ T5233] F2FS-fs (loop3): Found nat_bits in checkpoint [ 85.623995][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.641238][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.650127][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 02:44:05 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000080)) 02:44:05 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="3400000024000b0f000003000000000000000000", @ANYRES32, @ANYBLOB="00000000ffffffff000000000900010063616b65"], 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {}, {0xf}}, [@filter_kind_options=@f_fw={{0x7}, {0x44, 0x2, [@TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x8}}]}]}}]}, 0x70}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 85.675360][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.687405][ T52] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.695359][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.775839][ T50] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 02:44:05 executing program 2: socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000100)="5c00000012006bab9e0700000017aa31070000007ea60864160af365da8fb21a38001d00b556a71a251e618294ad49e9de00f6b71af755dd4408f14e9a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e450998530000000080bcc7", 0x5c}], 0x1, 0x0, 0x0, 0x1f000008}, 0x0) 02:44:06 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000100000000c00018008000100", @ANYRES32=r2], 0x20}}, 0x0) 02:44:06 executing program 0: unshare(0x400) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000340)={0x14, 0x0, 0x0, 0x0, 0x0, {0x2e}}, 0x14}}, 0x0) [ 85.971911][ T5285] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 02:44:06 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @remote, @broadcast}, &(0x7f0000000040)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000280)={'syztnl2\x00', r1, 0x4, 0x0, 0x40, 0x0, 0x0, @private1, @private2, 0x20, 0x8, 0xc0, 0x100}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00'}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) 02:44:06 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00') [ 86.084069][ T5233] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 86.113033][ T5233] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 02:44:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001300290a000000000000602007000000", @ANYRES32, @ANYBLOB="00000000020000001c001a80080002802d002d0008000200f5642d", @ANYRES8=r0], 0x44}}, 0x0) [ 86.130534][ T50] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 02:44:06 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, 0x0, &(0x7f00000000c0)='GPL\x00'}, 0x90) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r2 = dup2(r1, r1) read$rfkill(r2, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f00000001c0)={0x14000000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) [ 86.177938][ T5293] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list 02:44:06 executing program 3: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000001200010a000000000000000007fb"], 0x20}}, 0x0) [ 86.267628][ T5297] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.305510][ T780] cfg80211: failed to load regulatory.db 02:44:06 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) [ 86.349428][ T50] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.409717][ T5295] [ 86.412067][ T5295] ===================================================== [ 86.419006][ T5295] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 86.426468][ T5295] 6.8.0-syzkaller-08951-gfe46a7dd189e #0 Not tainted [ 86.433149][ T5295] ----------------------------------------------------- [ 86.440088][ T5295] syz-executor.4/5295 [HC0[0]:SC0[2]:HE0:SE0] is trying to acquire: [ 86.448084][ T5295] ffff88802a199020 (&htab->buckets[i].lock){+.-.}-{2:2}, at: sock_hash_delete_elem+0xb0/0x300 [ 86.458429][ T5295] [ 86.458429][ T5295] and this task is already holding: [ 86.465800][ T5295] ffff88801f44c3f0 (&dev->event_lock){-.-.}-{2:2}, at: drm_file_free+0x1e7/0x900 [ 86.474980][ T5295] which would create a new lock dependency: [ 86.480885][ T5295] (&dev->event_lock){-.-.}-{2:2} -> (&htab->buckets[i].lock){+.-.}-{2:2} [ 86.489465][ T5295] [ 86.489465][ T5295] but this new dependency connects a HARDIRQ-irq-safe lock: [ 86.498921][ T5295] (&dev->event_lock){-.-.}-{2:2} [ 86.498960][ T5295] [ 86.498960][ T5295] ... which became HARDIRQ-irq-safe at: [ 86.511699][ T5295] lock_acquire+0x1e4/0x530 [ 86.516309][ T5295] _raw_spin_lock_irqsave+0xd5/0x120 [ 86.521707][ T5295] drm_handle_vblank+0xc8/0x4c0 [ 86.526656][ T5295] vkms_vblank_simulate+0xd6/0x360 [ 86.531860][ T5295] __hrtimer_run_queues+0x597/0xd00 [ 86.537154][ T5295] hrtimer_interrupt+0x396/0x990 [ 86.542188][ T5295] __sysvec_apic_timer_interrupt+0x109/0x3a0 [ 86.548271][ T5295] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 86.554002][ T5295] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 86.560080][ T5295] acpi_safe_halt+0x21/0x30 [ 86.564671][ T5295] acpi_idle_enter+0xe4/0x140 [ 86.569441][ T5295] cpuidle_enter_state+0x11a/0x490 [ 86.574641][ T5295] cpuidle_enter+0x5d/0xa0 [ 86.579149][ T5295] do_idle+0x375/0x5d0 [ 86.583311][ T5295] cpu_startup_entry+0x42/0x60 [ 86.588166][ T5295] rest_init+0x2e0/0x300 [ 86.592501][ T5295] arch_call_rest_init+0xe/0x10 [ 86.598066][ T5295] start_kernel+0x47a/0x500 [ 86.602654][ T5295] x86_64_start_reservations+0x2a/0x30 [ 86.608212][ T5295] x86_64_start_kernel+0x99/0xa0 [ 86.613242][ T5295] common_startup_64+0x13e/0x147 [ 86.618273][ T5295] [ 86.618273][ T5295] to a HARDIRQ-irq-unsafe lock: [ 86.625288][ T5295] (&htab->buckets[i].lock){+.-.}-{2:2} [ 86.625322][ T5295] [ 86.625322][ T5295] ... which became HARDIRQ-irq-unsafe at: [ 86.638721][ T5295] ... [ 86.638729][ T5295] lock_acquire+0x1e4/0x530 [ 86.645911][ T5295] _raw_spin_lock_bh+0x35/0x50 [ 86.650773][ T5295] sock_hash_delete_elem+0xb0/0x300 [ 86.656070][ T5295] bpf_prog_2c29ac5cdc6b1842+0x42/0x4a [ 86.661617][ T5295] bpf_trace_run2+0x206/0x420 [ 86.666384][ T5295] kfree+0x291/0x380 [ 86.670364][ T5295] tomoyo_realpath_from_path+0xc2/0x5e0 [ 86.675997][ T5295] tomoyo_check_open_permission+0x255/0x500 [ 86.681990][ T5295] security_file_open+0x6b/0x570 [ 86.687027][ T5295] do_dentry_open+0x327/0x15a0 [ 86.691900][ T5295] path_openat+0x2860/0x3240 [ 86.696592][ T5295] do_filp_open+0x235/0x490 [ 86.701187][ T5295] do_sys_openat2+0x13e/0x1d0 [ 86.705956][ T5295] __x64_sys_openat+0x247/0x2a0 [ 86.710896][ T5295] do_syscall_64+0xfd/0x240 [ 86.715488][ T5295] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 86.721472][ T5295] [ 86.721472][ T5295] other info that might help us debug this: [ 86.721472][ T5295] [ 86.731703][ T5295] Possible interrupt unsafe locking scenario: [ 86.731703][ T5295] [ 86.740014][ T5295] CPU0 CPU1 [ 86.745375][ T5295] ---- ---- [ 86.750733][ T5295] lock(&htab->buckets[i].lock); [ 86.755766][ T5295] local_irq_disable(); [ 86.762512][ T5295] lock(&dev->event_lock); [ 86.769537][ T5295] lock(&htab->buckets[i].lock); [ 86.777088][ T5295] [ 86.780534][ T5295] lock(&dev->event_lock); [ 86.785213][ T5295] [ 86.785213][ T5295] *** DEADLOCK *** [ 86.785213][ T5295] [ 86.793350][ T5295] 2 locks held by syz-executor.4/5295: [ 86.798803][ T5295] #0: ffff88801f44c3f0 (&dev->event_lock){-.-.}-{2:2}, at: drm_file_free+0x1e7/0x900 [ 86.808400][ T5295] #1: ffffffff8e132020 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x114/0x420 [ 86.817842][ T5295] [ 86.817842][ T5295] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 86.828238][ T5295] -> (&dev->event_lock){-.-.}-{2:2} { [ 86.833637][ T5295] IN-HARDIRQ-W at: [ 86.837617][ T5295] lock_acquire+0x1e4/0x530 [ 86.843773][ T5295] _raw_spin_lock_irqsave+0xd5/0x120 [ 86.850721][ T5295] drm_handle_vblank+0xc8/0x4c0 [ 86.857231][ T5295] vkms_vblank_simulate+0xd6/0x360 [ 86.863996][ T5295] __hrtimer_run_queues+0x597/0xd00 [ 86.870855][ T5295] hrtimer_interrupt+0x396/0x990 [ 86.877450][ T5295] __sysvec_apic_timer_interrupt+0x109/0x3a0 [ 86.885095][ T5295] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 86.892392][ T5295] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 86.900029][ T5295] acpi_safe_halt+0x21/0x30 [ 86.906185][ T5295] acpi_idle_enter+0xe4/0x140 [ 86.912514][ T5295] cpuidle_enter_state+0x11a/0x490 [ 86.919276][ T5295] cpuidle_enter+0x5d/0xa0 [ 86.925344][ T5295] do_idle+0x375/0x5d0 [ 86.931066][ T5295] cpu_startup_entry+0x42/0x60 [ 86.937480][ T5295] rest_init+0x2e0/0x300 [ 86.943376][ T5295] arch_call_rest_init+0xe/0x10 [ 86.949876][ T5295] start_kernel+0x47a/0x500 [ 86.956028][ T5295] x86_64_start_reservations+0x2a/0x30 [ 86.963146][ T5295] x86_64_start_kernel+0x99/0xa0 [ 86.969741][ T5295] common_startup_64+0x13e/0x147 [ 86.976334][ T5295] IN-SOFTIRQ-W at: [ 86.980314][ T5295] lock_acquire+0x1e4/0x530 [ 86.986467][ T5295] _raw_spin_lock_irqsave+0xd5/0x120 [ 86.993416][ T5295] drm_handle_vblank+0xc8/0x4c0 [ 86.999930][ T5295] vkms_vblank_simulate+0xd6/0x360 [ 87.006701][ T5295] __hrtimer_run_queues+0x597/0xd00 [ 87.013560][ T5295] hrtimer_interrupt+0x396/0x990 [ 87.020154][ T5295] __sysvec_apic_timer_interrupt+0x109/0x3a0 [ 87.027800][ T5295] sysvec_apic_timer_interrupt+0x52/0xc0 [ 87.035100][ T5295] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 87.042740][ T5295] _raw_spin_unlock_irqrestore+0xd8/0x140 [ 87.050124][ T5295] debug_check_no_obj_freed+0x561/0x580 [ 87.057333][ T5295] kmem_cache_free+0xcc/0x2b0 [ 87.063660][ T5295] __put_task_struct+0x1cb/0x290 [ 87.070249][ T5295] delayed_put_task_struct+0x115/0x2d0 [ 87.077369][ T5295] rcu_core+0xaff/0x1830 [ 87.083280][ T5295] __do_softirq+0x2be/0x943 [ 87.089432][ T5295] __irq_exit_rcu+0xf2/0x1c0 [ 87.095674][ T5295] irq_exit_rcu+0x9/0x30 [ 87.101576][ T5295] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 87.108884][ T5295] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 87.116527][ T5295] lock_release+0x627/0x9d0 [ 87.122688][ T5295] mntput_no_expire+0x246/0x860 [ 87.129194][ T5295] terminate_walk+0x32b/0x430 [ 87.135532][ T5295] path_openat+0x2769/0x3240 [ 87.141776][ T5295] do_filp_open+0x235/0x490 [ 87.147934][ T5295] do_open_execat+0x165/0x470 [ 87.154269][ T5295] alloc_bprm+0x28/0xa00 [ 87.160168][ T5295] kernel_execve+0x99/0xa10 [ 87.166328][ T5295] call_usermodehelper_exec_async+0x237/0x380 [ 87.174051][ T5295] ret_from_fork+0x4d/0x80 [ 87.180133][ T5295] ret_from_fork_asm+0x1a/0x30 [ 87.186561][ T5295] INITIAL USE at: [ 87.190457][ T5295] lock_acquire+0x1e4/0x530 [ 87.196524][ T5295] _raw_spin_lock+0x2e/0x40 [ 87.202605][ T5295] vkms_crtc_atomic_flush+0x8d/0x1c0 [ 87.209454][ T5295] drm_atomic_helper_commit_planes+0xaf3/0xe00 [ 87.217178][ T5295] vkms_atomic_commit_tail+0x5d/0x200 [ 87.224128][ T5295] commit_tail+0x2ab/0x3c0 [ 87.230115][ T5295] drm_atomic_helper_commit+0x953/0x9f0 [ 87.237232][ T5295] drm_atomic_commit+0x2ae/0x310 [ 87.243742][ T5295] drm_client_modeset_commit_atomic+0x676/0x7e0 [ 87.251554][ T5295] drm_client_modeset_commit_locked+0xe0/0x520 [ 87.259275][ T5295] drm_client_modeset_commit+0x4a/0x70 [ 87.266301][ T5295] __drm_fb_helper_restore_fbdev_mode_unlocked+0xc3/0x170 [ 87.274984][ T5295] drm_fb_helper_set_par+0xaf/0x100 [ 87.281756][ T5295] fbcon_init+0x112b/0x2190 [ 87.287820][ T5295] visual_init+0x2e8/0x650 [ 87.293809][ T5295] do_bind_con_driver+0x863/0xf60 [ 87.300407][ T5295] do_take_over_console+0x5e7/0x750 [ 87.307182][ T5295] do_fbcon_takeover+0x11a/0x200 [ 87.313703][ T5295] fbcon_fb_registered+0x352/0x600 [ 87.320390][ T5295] register_framebuffer+0x6b2/0x8d0 [ 87.327157][ T5295] __drm_fb_helper_initial_config_and_unlock+0x172d/0x1e30 [ 87.335946][ T5295] drm_fbdev_generic_client_hotplug+0x16e/0x230 [ 87.343757][ T5295] drm_client_register+0x181/0x210 [ 87.350432][ T5295] vkms_init+0x5f5/0x730 [ 87.356246][ T5295] do_one_initcall+0x23a/0x830 [ 87.362584][ T5295] do_initcall_level+0x157/0x210 [ 87.369091][ T5295] do_initcalls+0x3f/0x80 [ 87.374986][ T5295] kernel_init_freeable+0x435/0x5d0 [ 87.381748][ T5295] kernel_init+0x1d/0x2a0 [ 87.387642][ T5295] ret_from_fork+0x4d/0x80 [ 87.393637][ T5295] ret_from_fork_asm+0x1a/0x30 [ 87.399979][ T5295] } [ 87.402477][ T5295] ... key at: [] drm_dev_init.__key.17+0x0/0x20 [ 87.410810][ T5295] [ 87.410810][ T5295] the dependencies between the lock to be acquired [ 87.410821][ T5295] and HARDIRQ-irq-unsafe lock: [ 87.424334][ T5295] -> (&htab->buckets[i].lock){+.-.}-{2:2} { [ 87.430254][ T5295] HARDIRQ-ON-W at: [ 87.434233][ T5295] lock_acquire+0x1e4/0x530 [ 87.440390][ T5295] _raw_spin_lock_bh+0x35/0x50 [ 87.446815][ T5295] sock_hash_delete_elem+0xb0/0x300 [ 87.453671][ T5295] bpf_prog_2c29ac5cdc6b1842+0x42/0x4a [ 87.460783][ T5295] bpf_trace_run2+0x206/0x420 [ 87.467114][ T5295] kfree+0x291/0x380 [ 87.472658][ T5295] tomoyo_realpath_from_path+0xc2/0x5e0 [ 87.479878][ T5295] tomoyo_check_open_permission+0x255/0x500 [ 87.487433][ T5295] security_file_open+0x6b/0x570 [ 87.494032][ T5295] do_dentry_open+0x327/0x15a0 [ 87.500461][ T5295] path_openat+0x2860/0x3240 [ 87.506709][ T5295] do_filp_open+0x235/0x490 [ 87.512872][ T5295] do_sys_openat2+0x13e/0x1d0 [ 87.519202][ T5295] __x64_sys_openat+0x247/0x2a0 [ 87.525723][ T5295] do_syscall_64+0xfd/0x240 [ 87.531878][ T5295] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 87.539429][ T5295] IN-SOFTIRQ-W at: [ 87.543408][ T5295] lock_acquire+0x1e4/0x530 [ 87.549565][ T5295] _raw_spin_lock_bh+0x35/0x50 [ 87.555990][ T5295] sock_hash_delete_elem+0xb0/0x300 [ 87.562850][ T5295] bpf_prog_2c29ac5cdc6b1842+0x42/0x4a [ 87.569960][ T5295] bpf_trace_run2+0x206/0x420 [ 87.576295][ T5295] kfree+0x291/0x380 [ 87.581844][ T5295] security_task_free+0xa0/0xc0 [ 87.588356][ T5295] __put_task_struct+0xf9/0x290 [ 87.594857][ T5295] delayed_put_task_struct+0x115/0x2d0 [ 87.601977][ T5295] rcu_core+0xaff/0x1830 [ 87.607872][ T5295] __do_softirq+0x2be/0x943 [ 87.614055][ T5295] __irq_exit_rcu+0xf2/0x1c0 [ 87.620309][ T5295] irq_exit_rcu+0x9/0x30 [ 87.626216][ T5295] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 87.633515][ T5295] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 87.641154][ T5295] __sanitizer_cov_trace_const_cmp4+0x8/0x90 [ 87.648801][ T5295] batadv_nc_worker+0x1fe/0x610 [ 87.655311][ T5295] process_scheduled_works+0xa02/0x1770 [ 87.662511][ T5295] worker_thread+0x86d/0xd70 [ 87.668753][ T5295] kthread+0x2f2/0x390 [ 87.674477][ T5295] ret_from_fork+0x4d/0x80 [ 87.680555][ T5295] ret_from_fork_asm+0x1a/0x30 [ 87.686983][ T5295] INITIAL USE at: [ 87.690878][ T5295] lock_acquire+0x1e4/0x530 [ 87.696950][ T5295] _raw_spin_lock_bh+0x35/0x50 [ 87.703292][ T5295] sock_hash_delete_elem+0xb0/0x300 [ 87.710067][ T5295] bpf_prog_2c29ac5cdc6b1842+0x42/0x4a [ 87.717115][ T5295] bpf_trace_run2+0x206/0x420 [ 87.723364][ T5295] kfree+0x291/0x380 [ 87.728822][ T5295] tomoyo_realpath_from_path+0xc2/0x5e0 [ 87.735931][ T5295] tomoyo_check_open_permission+0x255/0x500 [ 87.743402][ T5295] security_file_open+0x6b/0x570 [ 87.749913][ T5295] do_dentry_open+0x327/0x15a0 [ 87.756255][ T5295] path_openat+0x2860/0x3240 [ 87.762414][ T5295] do_filp_open+0x235/0x490 [ 87.768486][ T5295] do_sys_openat2+0x13e/0x1d0 [ 87.774728][ T5295] __x64_sys_openat+0x247/0x2a0 [ 87.781142][ T5295] do_syscall_64+0xfd/0x240 [ 87.787211][ T5295] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 87.794675][ T5295] } [ 87.797167][ T5295] ... key at: [] sock_hash_alloc.__key+0x0/0x20 [ 87.805504][ T5295] ... acquired at: [ 87.809492][ T5295] lock_acquire+0x1e4/0x530 [ 87.814176][ T5295] _raw_spin_lock_bh+0x35/0x50 [ 87.819133][ T5295] sock_hash_delete_elem+0xb0/0x300 [ 87.824518][ T5295] bpf_prog_2c29ac5cdc6b1842+0x42/0x4a [ 87.830149][ T5295] bpf_trace_run2+0x206/0x420 [ 87.835010][ T5295] kfree+0x291/0x380 [ 87.839079][ T5295] drm_file_free+0x4e2/0x900 [ 87.843846][ T5295] drm_release+0x32b/0x560 [ 87.848437][ T5295] __fput+0x42b/0x8a0 [ 87.852596][ T5295] __x64_sys_close+0x7f/0x110 [ 87.857447][ T5295] do_syscall_64+0xfd/0x240 [ 87.862122][ T5295] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 87.868216][ T5295] [ 87.870534][ T5295] [ 87.870534][ T5295] stack backtrace: [ 87.876413][ T5295] CPU: 1 PID: 5295 Comm: syz-executor.4 Not tainted 6.8.0-syzkaller-08951-gfe46a7dd189e #0 [ 87.886387][ T5295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 87.896442][ T5295] Call Trace: [ 87.899721][ T5295] [ 87.902656][ T5295] dump_stack_lvl+0x241/0x360 [ 87.907355][ T5295] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.912580][ T5295] ? __pfx__printk+0x10/0x10 [ 87.917220][ T5295] ? srso_return_thunk+0x5/0x5f [ 87.922086][ T5295] ? srso_return_thunk+0x5/0x5f [ 87.926945][ T5295] ? print_shortest_lock_dependencies+0xf2/0x160 [ 87.933299][ T5295] validate_chain+0x4dc7/0x58e0 [ 87.938174][ T5295] ? __pfx_validate_chain+0x10/0x10 [ 87.943393][ T5295] ? __pfx_validate_chain+0x10/0x10 [ 87.948603][ T5295] ? __pfx_validate_chain+0x10/0x10 [ 87.953813][ T5295] ? srso_return_thunk+0x5/0x5f [ 87.958668][ T5295] ? __update_load_avg_se+0x6a0/0xaf0 [ 87.964056][ T5295] ? srso_return_thunk+0x5/0x5f [ 87.968915][ T5295] ? mark_lock+0x9a/0x350 [ 87.973252][ T5295] __lock_acquire+0x1346/0x1fd0 [ 87.978118][ T5295] lock_acquire+0x1e4/0x530 [ 87.982626][ T5295] ? sock_hash_delete_elem+0xb0/0x300 [ 87.988010][ T5295] ? __pfx_lockdep_softirqs_off+0x10/0x10 [ 87.993735][ T5295] ? __pfx_lock_acquire+0x10/0x10 [ 87.998762][ T5295] ? srso_return_thunk+0x5/0x5f [ 88.004143][ T5295] ? sock_hash_delete_elem+0xb0/0x300 [ 88.009530][ T5295] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 88.015349][ T5295] ? __pfx_lock_acquire+0x10/0x10 [ 88.020404][ T5295] ? srso_return_thunk+0x5/0x5f [ 88.025272][ T5295] ? sock_hash_delete_elem+0xb0/0x300 [ 88.030657][ T5295] _raw_spin_lock_bh+0x35/0x50 [ 88.035438][ T5295] ? sock_hash_delete_elem+0xb0/0x300 [ 88.040821][ T5295] sock_hash_delete_elem+0xb0/0x300 [ 88.046033][ T5295] ? do_raw_spin_lock+0x14f/0x370 [ 88.051074][ T5295] bpf_prog_2c29ac5cdc6b1842+0x42/0x4a [ 88.056533][ T5295] bpf_trace_run2+0x206/0x420 [ 88.061219][ T5295] ? bpf_trace_run2+0x114/0x420 [ 88.066077][ T5295] ? __pfx_bpf_trace_run2+0x10/0x10 [ 88.071280][ T5295] ? srso_return_thunk+0x5/0x5f [ 88.076138][ T5295] ? drm_file_free+0x4e2/0x900 [ 88.080909][ T5295] ? srso_return_thunk+0x5/0x5f [ 88.085765][ T5295] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 88.091239][ T5295] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 88.097148][ T5295] ? drm_file_free+0x4e2/0x900 [ 88.101922][ T5295] kfree+0x291/0x380 [ 88.105841][ T5295] drm_file_free+0x4e2/0x900 [ 88.110441][ T5295] drm_release+0x32b/0x560 [ 88.114866][ T5295] ? __pfx_drm_release+0x10/0x10 [ 88.119809][ T5295] __fput+0x42b/0x8a0 [ 88.123811][ T5295] __x64_sys_close+0x7f/0x110 [ 88.128494][ T5295] do_syscall_64+0xfd/0x240 [ 88.133008][ T5295] ? srso_return_thunk+0x5/0x5f [ 88.137874][ T5295] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 88.143782][ T5295] RIP: 0033:0x7f64f7e7cc9a [ 88.148202][ T5295] Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 03 7f 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 63 7f 02 00 8b 44 24 [ 88.167811][ T5295] RSP: 002b:00007ffd3b8aba40 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 88.176229][ T5295] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f64f7e7cc9a [ 88.184204][ T5295] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 88.192175][ T5295] RBP: 00007f64f7fad980 R08: 0000001b31d20000 R09: 0000000000000032 [ 88.200151][ T5295] R10: 0000000081360ad3 R11: 0000000000000293 R12: 0000000000015430 [ 88.208126][ T5295] R13: ffffffffffffffff R14: 00007f64f7a00000 R15: 00000000000150ef [ 88.216129][ T5295] [ 88.219286][ C1] vkms_vblank_simulate: vblank timer overrun