last executing test programs: 14.369003152s ago: executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b80)={0x6, 0x4, &(0x7f0000001a00)=@framed={{}, [@jmp={0x5, 0x0, 0xa, 0x9}]}, &(0x7f0000001a40)='syzkaller\x00', 0x8}, 0x90) 14.289877173s ago: executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r2, 0x3, 0x6, @random="cea0300a1672"}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6}, 0x10) close(r0) 14.138842887s ago: executing program 4: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={r1, 0x123, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeea, 0x0}}, 0x10) 14.034349237s ago: executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) unshare(0x28000600) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pwrite64(r1, 0x0, 0x0, 0x0) 13.937747531s ago: executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001480)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x9, [@fwd={0x7}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @var={0x4, 0x0, 0x0, 0xe, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x2e]}}, 0x0, 0x49}, 0x20) 13.774868079s ago: executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x34f740, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x846512678b3a18b2}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000001900)={'sit0\x00', @remote}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000740)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/24, 0x18) socket$alg(0x26, 0x5, 0x0) r4 = accept$alg(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0x8, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff010}], 0x1, 0x0, 0x3000000, 0x7000000}}], 0xe100, 0x0, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x2000010000a006) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000400)="79b1cbd0451a8c774e6a040299e958bbaa319548c5b010970881f1f4049f1de80fb24f02d336fcca97d45b3ecdafbbae5ecb444800995cd4ae834021858e233486f8fdd4ae1e51fac0d71e5d89039d5ec7b5d5ef6ea199fa26a31b1d9bc3b2dbd0a8b570b1d6", 0x66) read(r2, &(0x7f00000000c0)=""/29, 0x1d) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x301}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4040000) recvmmsg(r5, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xf, 0x3, &(0x7f0000000cc0)=ANY=[@ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x20005, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x19, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x800, 0xc, 0xfffffffb, 0xdc}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x90) r6 = openat$cgroup_procs(r1, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) socket(0x1c, 0x800, 0x9) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x200000000000002, 0x12) sendfile(0xffffffffffffffff, r7, 0x0, 0xf03afffd) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000280)='FROZEN\x00', 0x7) 2.681810255s ago: executing program 1: unshare(0x20040600) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000000), 0x4) 2.595888892s ago: executing program 1: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7000000}, 0x50) 2.528733083s ago: executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket$phonet(0x23, 0x2, 0x1) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$ax25(0x27, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x158, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}, @TCA_STAB={0x10c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xfeff, 0x2, [0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x16, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}, {0x18, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}]}, 0x158}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r8, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r7, r6, 0x0, 0x100000002) 2.517780092s ago: executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000100), 0x1001) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}, @printk={@ld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='block_plug\x00', r1}, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) 2.396508666s ago: executing program 3: unshare(0x20000400) r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, 0x0) 2.3106229s ago: executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x7, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0xac}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x24}, 0x90) 2.250919311s ago: executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r0, &(0x7f0000000000)="2dcb5ea97a1a075aa02250c7170b677c49ce7de6a8b0101de24af2096cba7b0ed98708a7f3b23d9bf6ac93a8170f8e11e917a8bf8099a78a85bca449a660c0a1a71782b8ad6bac7fe0aa2fd859cb40a8af43c56f42966ac83f57e192dd69253d5aacc14592852d585d0d2629a750a078ee5d26ffa7396aa17c731f0314d94153e7", 0x81, 0x0, &(0x7f00000000c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x0, {0x2, 0x0, @multicast1}}, 0xc4) 2.222251655s ago: executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f00000006c0)=ANY=[], 0x25533) write$cgroup_type(r0, &(0x7f0000000000), 0x248800) 2.130341133s ago: executing program 1: r0 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, 0xee01) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) 2.031528913s ago: executing program 0: setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x34, r1, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'batadv0\x00'}}}}}, 0x34}}, 0x0) 2.029523235s ago: executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000100), 0x1001) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}, @printk={@ld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='block_plug\x00', r1}, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) 1.928544137s ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x30}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003a00)=@can_delroute={0x34, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_CS_XOR={0x8, 0x5, {0x4}}, @CGW_MOD_AND={0x15, 0x1, {{{}, 0x0, 0x0, 0x0, 0x0, "0eabdac5a3619b2c"}, 0x5}}]}, 0x34}}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d0"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0xe) close(r1) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r4, 0x65, 0x8, 0xfffffffffffffffe, &(0x7f0000001280)=0x5a) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, 0x0, 0x36) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010003704000000000000060000000000", @ANYRES32=0x0, @ANYBLOB="8b040400000000002800128008000100736974001c000280060008003f00000008000200ac14140008000300e0000002"], 0x48}}, 0x0) 1.906947812s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x30}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003a00)=@can_delroute={0x34, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_CS_XOR={0x8, 0x5, {0x4}}, @CGW_MOD_AND={0x15, 0x1, {{{}, 0x0, 0x0, 0x0, 0x0, "0eabdac5a3619b2c"}, 0x5}}]}, 0x34}}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d0"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0xe) close(r1) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r4, 0x65, 0x8, 0xfffffffffffffffe, &(0x7f0000001280)=0x5a) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, 0x0, 0x36) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010003704000000000000060000000000", @ANYRES32=0x0, @ANYBLOB="8b040400000000002800128008000100736974001c000280060008003f00000008000200ac14140008000300e0000002"], 0x48}}, 0x0) 1.821187699s ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x30}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003a00)=@can_delroute={0x34, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_CS_XOR={0x8, 0x5, {0x4}}, @CGW_MOD_AND={0x15, 0x1, {{{}, 0x0, 0x0, 0x0, 0x0, "0eabdac5a3619b2c"}, 0x5}}]}, 0x34}}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d0"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0xe) close(r1) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r4, 0x65, 0x8, 0xfffffffffffffffe, &(0x7f0000001280)=0x5a) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, 0x0, 0x36) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010003704000000000000060000000000", @ANYRES32=0x0, @ANYBLOB="8b040400000000002800128008000100736974001c000280060008003f00000008000200ac14140008000300e0000002"], 0x48}}, 0x0) 703.59019ms ago: executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xa, 0x0, 0x300}}) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c951ee12e"}}}}}}}, 0x0) 576.748332ms ago: executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x48}}, 0x0) 490.361945ms ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001600)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_ct={0x5c, 0x1, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x28}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_CT_NAT_PORT_MIN={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) 449.903724ms ago: executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x7, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0xac}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x24}, 0x90) 361.344729ms ago: executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000100), 0x1001) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}, @printk={@ld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='block_plug\x00', r1}, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) 352.803312ms ago: executing program 0: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7000000}, 0x50) 232.975543ms ago: executing program 0: ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x48) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x101, 0x8, 0x2}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000180)=@tcp6=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f00000002c0), &(0x7f00000001c0)=""/70}, 0x20) 207.71267ms ago: executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000500)="46aa", 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x2, 0x1}, 0x48) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xe) sendto$inet6(r2, &(0x7f00000004c0)="d9", 0x1, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r2, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000280)='consume_skb\x00', r3}, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000740), 0xffffffffffffffff) 100.044107ms ago: executing program 0: r0 = socket$inet6(0xa, 0x2, 0x3a) unshare(0x8040480) socket$rds(0x15, 0x5, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r1, &(0x7f0000000580)="af4da7eef46ae41e1384e95ee625b975b94ca15a5f24d7ee0000751603e5fc0b56c0fa53c1314c07b7927f598c74b03bb90d1bdb75889c5724d73f163c152e6c511e0d83f6c027d807f88416764abdc6b0fb02fc56320af97703ca61ba308cc176454936d8258ed5924f0fbb64a2bccf7ca1d20ff5d7edb807702650a2e1fd3971dae62265bb11d72af1d5573f04fc0000000000000000008753716bfee3d21e088c034a00f547c8c70c3c3d2388b6439192f5ff045e69", 0xb7, 0x2000c880, 0x0, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000140)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="10000000000000002900000005"], 0x30}}], 0x1, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x34, r4, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}]}, 0x34}}, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, 0x0, &(0x7f0000000100)) socket$kcm(0x21, 0x2, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x4, 0x8, 0x82c3}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r7}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000100), 0x1001) socket$netlink(0x10, 0x3, 0x6) ioctl$SIOCSIFHWADDR(r8, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x8}}) 0s ago: executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x0, 0x81}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ppoll(0x0, 0x0, &(0x7f0000000080)={0x77359400}, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.13' (ED25519) to the list of known hosts. 2024/06/02 00:42:00 fuzzer started 2024/06/02 00:42:00 dialing manager at 10.128.0.169:30016 [ 50.269353][ T5096] cgroup: Unknown subsys name 'net' [ 50.466295][ T5096] cgroup: Unknown subsys name 'rlimit' 2024/06/02 00:42:02 starting 5 executor processes [ 51.460778][ T5095] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 51.473889][ T5095] syz-executor (5095) used greatest stack depth: 19600 bytes left [ 52.218491][ T5119] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.242968][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.252349][ T5132] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 52.260513][ T5132] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 52.268590][ T5132] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 52.274498][ T5133] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 52.276736][ T5132] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 52.291178][ T5134] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.292076][ T5132] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 52.299408][ T5133] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 52.307094][ T5134] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 52.314258][ T5133] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 52.320182][ T5136] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 52.327725][ T5133] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 52.343477][ T5133] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 52.344017][ T5134] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 52.351662][ T5136] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 52.358949][ T5132] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.365079][ T5133] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 52.372765][ T5132] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 52.379651][ T5136] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 52.385426][ T5134] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 52.395340][ T5136] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 52.407378][ T5134] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 52.409326][ T5136] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 52.414944][ T5134] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 52.421534][ T5136] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 52.436428][ T5134] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 52.447660][ T5125] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 52.455292][ T5137] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 52.950188][ T5117] chnl_net:caif_netlink_parms(): no params data found [ 53.038030][ T5124] chnl_net:caif_netlink_parms(): no params data found [ 53.102957][ T5122] chnl_net:caif_netlink_parms(): no params data found [ 53.162078][ T5120] chnl_net:caif_netlink_parms(): no params data found [ 53.177076][ T5117] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.184656][ T5117] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.192204][ T5117] bridge_slave_0: entered allmulticast mode [ 53.199297][ T5117] bridge_slave_0: entered promiscuous mode [ 53.251875][ T5117] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.259105][ T5117] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.266551][ T5117] bridge_slave_1: entered allmulticast mode [ 53.274352][ T5117] bridge_slave_1: entered promiscuous mode [ 53.380017][ T5124] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.387307][ T5124] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.395080][ T5124] bridge_slave_0: entered allmulticast mode [ 53.401782][ T5124] bridge_slave_0: entered promiscuous mode [ 53.409407][ T5124] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.416828][ T5124] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.424292][ T5124] bridge_slave_1: entered allmulticast mode [ 53.430994][ T5124] bridge_slave_1: entered promiscuous mode [ 53.440719][ T5117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.453940][ T5117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.473513][ T5122] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.480641][ T5122] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.488745][ T5122] bridge_slave_0: entered allmulticast mode [ 53.496310][ T5122] bridge_slave_0: entered promiscuous mode [ 53.545749][ T5122] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.552939][ T5122] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.560742][ T5122] bridge_slave_1: entered allmulticast mode [ 53.568088][ T5122] bridge_slave_1: entered promiscuous mode [ 53.574774][ T5121] chnl_net:caif_netlink_parms(): no params data found [ 53.589174][ T5124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.643672][ T5124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.656588][ T5117] team0: Port device team_slave_0 added [ 53.676646][ T5120] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.684085][ T5120] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.691205][ T5120] bridge_slave_0: entered allmulticast mode [ 53.698223][ T5120] bridge_slave_0: entered promiscuous mode [ 53.707242][ T5120] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.714626][ T5120] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.721781][ T5120] bridge_slave_1: entered allmulticast mode [ 53.729023][ T5120] bridge_slave_1: entered promiscuous mode [ 53.754585][ T5122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.765752][ T5117] team0: Port device team_slave_1 added [ 53.802868][ T5122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.840000][ T5124] team0: Port device team_slave_0 added [ 53.866645][ T5120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.901773][ T5124] team0: Port device team_slave_1 added [ 53.925346][ T5120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.947702][ T5122] team0: Port device team_slave_0 added [ 53.955577][ T5122] team0: Port device team_slave_1 added [ 53.962207][ T5117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.969227][ T5117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.995401][ T5117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.009298][ T5117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.016329][ T5117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.042371][ T5117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.119632][ T5124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.126871][ T5124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.152868][ T5124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.176132][ T5120] team0: Port device team_slave_0 added [ 54.182671][ T5122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.189786][ T5122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.215788][ T5122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.229453][ T5122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.236491][ T5122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.262514][ T5122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.286659][ T5124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.294104][ T5124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.320249][ T5124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.346735][ T5120] team0: Port device team_slave_1 added [ 54.352747][ T5121] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.360777][ T5121] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.368049][ T5121] bridge_slave_0: entered allmulticast mode [ 54.375481][ T5121] bridge_slave_0: entered promiscuous mode [ 54.411197][ T5121] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.420102][ T5121] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.427769][ T5121] bridge_slave_1: entered allmulticast mode [ 54.435237][ T5121] bridge_slave_1: entered promiscuous mode [ 54.455676][ T5117] hsr_slave_0: entered promiscuous mode [ 54.461961][ T5117] hsr_slave_1: entered promiscuous mode [ 54.493854][ T52] Bluetooth: hci3: command tx timeout [ 54.504299][ T5119] Bluetooth: hci4: command tx timeout [ 54.504346][ T5125] Bluetooth: hci0: command tx timeout [ 54.509982][ T52] Bluetooth: hci2: command tx timeout [ 54.541112][ T5120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.548148][ T5120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.574456][ T5120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.585332][ T52] Bluetooth: hci1: command tx timeout [ 54.607861][ T5121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.620360][ T5121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.649789][ T5120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.657129][ T5120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.683411][ T5120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.704477][ T5122] hsr_slave_0: entered promiscuous mode [ 54.710718][ T5122] hsr_slave_1: entered promiscuous mode [ 54.717670][ T5122] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.725845][ T5122] Cannot create hsr debugfs directory [ 54.784547][ T5121] team0: Port device team_slave_0 added [ 54.795282][ T5124] hsr_slave_0: entered promiscuous mode [ 54.801495][ T5124] hsr_slave_1: entered promiscuous mode [ 54.808091][ T5124] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.815722][ T5124] Cannot create hsr debugfs directory [ 54.847117][ T5121] team0: Port device team_slave_1 added [ 54.927759][ T5120] hsr_slave_0: entered promiscuous mode [ 54.934659][ T5120] hsr_slave_1: entered promiscuous mode [ 54.940771][ T5120] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.948502][ T5120] Cannot create hsr debugfs directory [ 54.999996][ T5121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.007103][ T5121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.034068][ T5121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.100734][ T5121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.107842][ T5121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.134152][ T5121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.303939][ T5121] hsr_slave_0: entered promiscuous mode [ 55.310401][ T5121] hsr_slave_1: entered promiscuous mode [ 55.317756][ T5121] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.325396][ T5121] Cannot create hsr debugfs directory [ 55.379268][ T5117] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.407120][ T5117] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.416562][ T5117] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.449546][ T5117] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.527585][ T5124] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.551921][ T5124] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.562291][ T5124] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.589551][ T5124] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.661919][ T5122] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.672995][ T5122] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.682523][ T5122] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.698988][ T5122] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.826678][ T5121] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.838905][ T5121] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.849182][ T5121] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.860908][ T5121] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.929692][ T5117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.938346][ T5120] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.967271][ T5120] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.978361][ T5120] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.989717][ T5120] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.053008][ T5124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.069960][ T5117] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.127416][ T5124] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.138679][ T5171] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.146110][ T5171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.191536][ T5170] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.198666][ T5170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.210374][ T5170] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.217514][ T5170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.250300][ T5170] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.257442][ T5170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.318766][ T5122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.397504][ T5124] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.422772][ T5122] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.447838][ T5117] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.465771][ T5172] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.472872][ T5172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.505185][ T5175] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.512323][ T5175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.551496][ T5120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.583678][ T52] Bluetooth: hci0: command tx timeout [ 56.588690][ T5125] Bluetooth: hci2: command tx timeout [ 56.589159][ T52] Bluetooth: hci4: command tx timeout [ 56.594989][ T5125] Bluetooth: hci3: command tx timeout [ 56.655060][ T5125] Bluetooth: hci1: command tx timeout [ 56.688723][ T5121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.717415][ T5120] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.782203][ T5171] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.789433][ T5171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.804921][ T5121] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.846188][ T5171] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.853421][ T5171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.912660][ T5171] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.919845][ T5171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.939921][ T5171] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.947108][ T5171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.987576][ T5124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.003116][ T5120] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.060588][ T5117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.215081][ T5124] veth0_vlan: entered promiscuous mode [ 57.223207][ T5122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.301446][ T5124] veth1_vlan: entered promiscuous mode [ 57.371651][ T5122] veth0_vlan: entered promiscuous mode [ 57.427733][ T5122] veth1_vlan: entered promiscuous mode [ 57.460830][ T5124] veth0_macvtap: entered promiscuous mode [ 57.518741][ T5124] veth1_macvtap: entered promiscuous mode [ 57.542593][ T5120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.575527][ T5122] veth0_macvtap: entered promiscuous mode [ 57.587906][ T5122] veth1_macvtap: entered promiscuous mode [ 57.644740][ T5122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.665704][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.678661][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.689912][ T5124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.703180][ T5124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.727933][ T5124] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.739931][ T5124] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.748750][ T5124] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.757747][ T5124] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.770507][ T5121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.779954][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.791335][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.804335][ T5122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.815402][ T5122] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.824341][ T5122] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.833040][ T5122] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.843629][ T5122] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.855932][ T5117] veth0_vlan: entered promiscuous mode [ 57.880302][ T5120] veth0_vlan: entered promiscuous mode [ 57.901158][ T5120] veth1_vlan: entered promiscuous mode [ 57.912530][ T5117] veth1_vlan: entered promiscuous mode [ 58.063024][ T2859] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.075224][ T2859] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.107086][ T5121] veth0_vlan: entered promiscuous mode [ 58.138181][ T5117] veth0_macvtap: entered promiscuous mode [ 58.147153][ T2903] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.151125][ T5120] veth0_macvtap: entered promiscuous mode [ 58.160810][ T2903] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.179941][ T5117] veth1_macvtap: entered promiscuous mode [ 58.195068][ T5121] veth1_vlan: entered promiscuous mode [ 58.212504][ T5171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.231996][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.242553][ T5171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.252168][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.272459][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.285709][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.297320][ T5117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.305926][ T5120] veth1_macvtap: entered promiscuous mode [ 58.342590][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.357917][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.368115][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.378646][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.389952][ T5117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.416515][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.427716][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.437633][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.449512][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.459531][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.470975][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.483315][ T5120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.519603][ T5117] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.529885][ T5117] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.542174][ T5117] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.551075][ T5117] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.571564][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.584196][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.595362][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.605951][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.616156][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.627960][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.640824][ T5120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.654037][ T5125] Bluetooth: hci4: command tx timeout [ 58.654055][ T5119] Bluetooth: hci2: command tx timeout [ 58.659439][ T5125] Bluetooth: hci0: command tx timeout [ 58.664956][ T52] Bluetooth: hci3: command tx timeout [ 58.721487][ T5120] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.734155][ T5125] Bluetooth: hci1: command tx timeout [ 58.744396][ T5120] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.753130][ T5120] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.764258][ T5120] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.785664][ T2903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.797129][ T2903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.845668][ T5121] veth0_macvtap: entered promiscuous mode [ 58.921751][ T5121] veth1_macvtap: entered promiscuous mode [ 59.060268][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.065425][ T2921] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.089290][ T2921] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.091535][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.116105][ T5211] xt_CT: You must specify a L4 protocol and not use inversions on it [ 59.127708][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.154548][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.164716][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.176574][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.186791][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.197735][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.211011][ T5121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.250019][ T5211] syz-executor.2 uses obsolete (PF_INET,SOCK_PACKET) [ 59.327422][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.355920][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.369924][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.381955][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.401051][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.411759][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.421919][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.432652][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.447216][ T5121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.503673][ T5126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.511532][ T5126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.520760][ T5172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.533992][ T5172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.549405][ T5121] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.566549][ T5121] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.579845][ T5221] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.2'. [ 59.581856][ T5121] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.599225][ T5121] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.671696][ T5172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.681910][ T5172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.037437][ T5229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.051627][ T5229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.071958][ T5235] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 60.187848][ T5240] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.4'. [ 60.213091][ T785] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.237874][ T785] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.455853][ T5246] xt_CT: You must specify a L4 protocol and not use inversions on it [ 60.491980][ T5248] xt_CT: You must specify a L4 protocol and not use inversions on it [ 60.562321][ T5253] xt_CT: You must specify a L4 protocol and not use inversions on it [ 60.734699][ T5137] Bluetooth: hci3: command tx timeout [ 60.735655][ T5119] Bluetooth: hci4: command tx timeout [ 60.740462][ T5137] Bluetooth: hci0: command tx timeout [ 60.740520][ T5125] Bluetooth: hci2: command tx timeout [ 60.813987][ T5119] Bluetooth: hci1: command tx timeout [ 61.087658][ T5267] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 61.123655][ T5267] netlink: 43 bytes leftover after parsing attributes in process `syz-executor.2'. [ 61.160151][ T5267] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 61.211747][ T5268] tipc: Started in network mode [ 61.221438][ T5267] netlink: 43 bytes leftover after parsing attributes in process `syz-executor.2'. [ 61.257287][ T5268] tipc: Node identity 6ea69ff9ae3e, cluster identity 4711 [ 61.281450][ T5268] tipc: Enabled bearer , priority 0 [ 61.872153][ T5294] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 61.905870][ T5294] netlink: 43 bytes leftover after parsing attributes in process `syz-executor.4'. [ 61.918220][ T5302] xt_CT: You must specify a L4 protocol and not use inversions on it [ 61.922166][ T5294] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 61.950853][ T5294] netlink: 43 bytes leftover after parsing attributes in process `syz-executor.4'. [ 61.952237][ T5303] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.980152][ T5301] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 61.996452][ T5301] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 62.035233][ T5301] tipc: Started in network mode [ 62.044570][ T5301] tipc: Node identity 3a6757383e6c, cluster identity 4711 [ 62.058293][ T5301] tipc: Enabled bearer , priority 0 [ 62.074590][ T5294] tipc: Started in network mode [ 62.083033][ T5294] tipc: Node identity 3686fe5956fe, cluster identity 4711 [ 62.095882][ T5294] tipc: Enabled bearer , priority 0 [ 62.394460][ T60] tipc: Node number set to 3231227897 [ 62.555590][ T5318] xt_CT: You must specify a L4 protocol and not use inversions on it [ 62.847984][ T5325] xt_CT: You must specify a L4 protocol and not use inversions on it [ 63.183465][ T60] tipc: Node number set to 67852088 [ 63.213837][ T60] tipc: Node number set to 1618542169 [ 64.463807][ T5398] xt_CT: You must specify a L4 protocol and not use inversions on it [ 64.768594][ T5414] __nla_validate_parse: 7 callbacks suppressed [ 64.768613][ T5414] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.4'. [ 65.147899][ T5437] xt_CT: You must specify a L4 protocol and not use inversions on it [ 66.967111][ T5222] IPVS: starting estimator thread 0... [ 67.063653][ T5483] IPVS: using max 19 ests per chain, 45600 per kthread [ 67.472923][ T5497] Zero length message leads to an empty skb [ 67.565792][ T5504] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 67.638556][ T5127] IPVS: starting estimator thread 0... [ 67.752508][ T5519] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 67.753482][ T5509] IPVS: using max 20 ests per chain, 48000 per kthread [ 67.911596][ T5529] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 67.958324][ T5529] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.146874][ T5544] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 68.234650][ T5548] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 68.265800][ T5550] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 68.290888][ T5550] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 68.334994][ T5548] syz-executor.4 (5548) used greatest stack depth: 18864 bytes left [ 68.378387][ T5557] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 68.684443][ T5575] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 68.718729][ T5581] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 68.849480][ T5589] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 69.098270][ T5604] netlink: 'syz-executor.2': attribute type 33 has an invalid length. [ 69.257522][ T5613] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 69.462401][ T5625] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 69.491430][ T5625] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 69.611852][ T5636] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 69.695137][ T5638] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 69.710516][ T5638] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 70.006673][ T5659] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.4'. [ 70.121555][ T5663] siw: device registration error -23 [ 70.206100][ T5668] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 70.295008][ T5675] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 70.334064][ T5675] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 70.347094][ T5668] team1: Mode changed to "broadcast" [ 70.457018][ T5679] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 70.682145][ T5698] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.0'. [ 70.833628][ T5707] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 70.944687][ T5707] team1: Mode changed to "broadcast" [ 71.059832][ T5722] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 71.192313][ T5733] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.0'. [ 71.352610][ T5743] syz-executor.0 uses old SIOCAX25GETINFO [ 71.611821][ T5758] siw: device registration error -23 [ 71.703264][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.709978][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.818964][ T5768] siw: device registration error -23 [ 71.840938][ T5770] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 71.895533][ T5773] netlink: 240 bytes leftover after parsing attributes in process `syz-executor.1'. [ 71.994140][ T5770] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 72.492192][ T5799] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 72.905514][ T5815] delete_channel: no stack [ 73.496416][ T5844] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 73.827397][ T5854] delete_channel: no stack [ 74.477688][ T5892] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 74.704790][ T5900] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 74.970667][ T5909] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 75.104173][ T5911] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 75.130616][ T5911] tipc: Enabled bearer , priority 10 [ 75.540187][ T5931] warning: `syz-executor.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 75.607569][ T5933] batman_adv: batadv0: Adding interface: macvlan2 [ 75.620512][ T5933] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.665763][ T5933] batman_adv: batadv0: Not using interface macvlan2 (retrying later): interface not active [ 75.871076][ T5947] tipc: Enabling of bearer rejected, already enabled [ 75.910213][ T5949] __nla_validate_parse: 10 callbacks suppressed [ 75.910232][ T5949] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 75.926439][ T5949] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 75.935865][ T5949] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 76.207751][ T5957] validate_nla: 2 callbacks suppressed [ 76.207771][ T5957] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 76.487275][ T5973] batman_adv: batadv0: Adding interface: macvlan2 [ 76.509252][ T5973] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.544690][ T5973] batman_adv: batadv0: Not using interface macvlan2 (retrying later): interface not active [ 76.609721][ T5975] tipc: Started in network mode [ 76.614790][ T5975] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 76.634413][ T5975] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 76.647030][ T5975] tipc: Enabled bearer , priority 10 [ 76.823726][ T57] cfg80211: failed to load regulatory.db [ 76.921952][ T5987] Driver unsupported XDP return value 0 on prog (id 66) dev N/A, expect packet loss! [ 77.021298][ T5993] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 77.773512][ T57] tipc: Node number set to 1 [ 78.204955][ T6035] bond_slave_0: entered promiscuous mode [ 78.210952][ T6035] bond_slave_1: entered promiscuous mode [ 78.239914][ T6038] bond_slave_0: left promiscuous mode [ 78.260366][ T6038] bond_slave_1: left promiscuous mode [ 78.519789][ T6038] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.581255][ T6038] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.622442][ T6038] bond0 (unregistering): Released all slaves [ 78.708902][ T6037] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 79.001561][ T2903] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.083695][ T6066] trusted_key: syz-executor.1 sent an empty control message without MSG_MORE. [ 79.181270][ T6072] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.2'. [ 79.214964][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.224244][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.232466][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.241721][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.250558][ T52] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 79.260844][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.465615][ T29] audit: type=1804 audit(1717288950.327:2): pid=6080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir4077921937/syzkaller.3Opodm/68/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 79.518763][ T2903] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.600621][ T6088] No such timeout policy "syz0" [ 79.650768][ T2903] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.697115][ T6085] vxcan2: entered promiscuous mode [ 79.709134][ T6085] vxcan2: entered allmulticast mode [ 79.824169][ T2903] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.140296][ T2903] bridge_slave_1: left allmulticast mode [ 80.160341][ T2903] bridge_slave_1: left promiscuous mode [ 80.168520][ T2903] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.194461][ T2903] bridge_slave_0: left allmulticast mode [ 80.212123][ T2903] bridge_slave_0: left promiscuous mode [ 80.218309][ T2903] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.717520][ T2903] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.729007][ T2903] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.745691][ T2903] bond0 (unregistering): Released all slaves [ 80.758845][ T2903] bond1 (unregistering): Released all slaves [ 80.789310][ T6073] chnl_net:caif_netlink_parms(): no params data found [ 80.845623][ T6125] vxcan2: entered promiscuous mode [ 80.877996][ T6125] vxcan2: entered allmulticast mode [ 81.304422][ T52] Bluetooth: hci3: command tx timeout [ 81.324924][ T6153] Bluetooth: MGMT ver 1.22 [ 81.441437][ T6073] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.466995][ T6073] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.481545][ T6073] bridge_slave_0: entered allmulticast mode [ 81.490141][ T6073] bridge_slave_0: entered promiscuous mode [ 81.524898][ T6073] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.552656][ T6168] xt_CT: You must specify a L4 protocol and not use inversions on it [ 81.565131][ T6073] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.572447][ T6073] bridge_slave_1: entered allmulticast mode [ 81.595791][ T6073] bridge_slave_1: entered promiscuous mode [ 81.706041][ T2903] hsr_slave_0: left promiscuous mode [ 81.730204][ T2903] hsr_slave_1: left promiscuous mode [ 81.752763][ T2903] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.766018][ T2903] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.791880][ T2903] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.811154][ T2903] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.868116][ T2903] veth1_macvtap: left promiscuous mode [ 81.877586][ T2903] veth0_macvtap: left promiscuous mode [ 81.894306][ T2903] veth1_vlan: left promiscuous mode [ 81.899841][ T2903] veth0_vlan: left promiscuous mode [ 82.529079][ T2903] team0 (unregistering): Port device team_slave_1 removed [ 82.562596][ T2903] team0 (unregistering): Port device team_slave_0 removed [ 82.898255][ T6073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.918735][ T6202] vxcan2: entered promiscuous mode [ 82.953701][ T6202] vxcan2: entered allmulticast mode [ 83.030296][ T6073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.153230][ T6073] team0: Port device team_slave_0 added [ 83.190854][ T6073] team0: Port device team_slave_1 added [ 83.373999][ T52] Bluetooth: hci3: command tx timeout [ 83.714614][ T6073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.733555][ T6073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.775708][ T6073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.841727][ T6073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.849067][ T6073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.893512][ T6073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.927555][ T6233] vxcan2: entered promiscuous mode [ 83.938089][ T6233] vxcan2: entered allmulticast mode [ 84.054161][ T29] audit: type=1804 audit(1717288954.907:3): pid=6246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir4077921937/syzkaller.3Opodm/81/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 [ 84.110455][ T6073] hsr_slave_0: entered promiscuous mode [ 84.119822][ T6073] hsr_slave_1: entered promiscuous mode [ 84.134803][ T6073] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.147694][ T6073] Cannot create hsr debugfs directory [ 84.319354][ T6256] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 84.585771][ T6266] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 84.601354][ T6266] ip6gretap0: entered promiscuous mode [ 84.611489][ T6266] batadv_slave_0: entered promiscuous mode [ 84.719246][ T6270] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 84.836771][ T6073] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.865237][ T6073] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.895878][ T6073] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.917495][ T6073] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.010703][ T6073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.030404][ T6073] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.052562][ T5126] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.059690][ T5126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.069312][ T5126] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.076473][ T5126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.185818][ T6073] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.277220][ T6278] syzkaller0: entered promiscuous mode [ 85.282943][ T6278] syzkaller0: entered allmulticast mode [ 85.454110][ T52] Bluetooth: hci3: command tx timeout [ 85.696571][ T6305] TCP: MD5 Hash not found for 172.20.20.187.0->172.20.20.170.20002 [RP.] L3 index 0 [ 86.907150][ T6298] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 86.939798][ T6290] team0: Port device team_slave_0 removed [ 86.949443][ T6290] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 86.983449][ T6306] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 87.044792][ T6309] team0: Port device team_slave_0 removed [ 87.051078][ T6309] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 87.113835][ T6324] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 87.129329][ T6073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.310394][ T6073] veth0_vlan: entered promiscuous mode [ 87.362015][ T6073] veth1_vlan: entered promiscuous mode [ 87.468524][ T6073] veth0_macvtap: entered promiscuous mode [ 87.491628][ T6343] team_slave_0: entered promiscuous mode [ 87.497673][ T6343] team_slave_1: entered promiscuous mode [ 87.517595][ T6343] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 87.530273][ T6343] bond0: (slave macvlan3): Enslaving as an active interface with an up link [ 87.539489][ T52] Bluetooth: hci3: command tx timeout [ 87.552412][ T6073] veth1_macvtap: entered promiscuous mode [ 87.662104][ T6346] syzkaller0: entered promiscuous mode [ 87.669030][ T6346] syzkaller0: entered allmulticast mode [ 87.732547][ T6343] bond0: entered promiscuous mode [ 87.759140][ T6343] bond_slave_0: entered promiscuous mode [ 87.782364][ T6343] bond_slave_1: entered promiscuous mode [ 87.788868][ T6343] macvlan3: entered promiscuous mode [ 87.801662][ T6343] team0: entered promiscuous mode [ 87.847845][ T6073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.878157][ T6073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.903122][ T6073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.929004][ T6073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.940522][ T6073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.951284][ T6073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.961686][ T6073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.972545][ T6073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.993741][ T6073] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.218592][ T6353] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 89.228657][ T6351] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 89.278449][ T6073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.292665][ T6073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.325037][ T6073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.340071][ T6073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.369977][ T6073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.409651][ T6073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.419611][ T6073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.433084][ T6073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.461959][ T6073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.497717][ T6073] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.535061][ T6073] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.558917][ T6073] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.586373][ T6073] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.890244][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.919330][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.990118][ T5172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.020703][ T5172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.284898][ T6427] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 90.607424][ T6443] x_tables: duplicate underflow at hook 1 [ 91.109176][ T6463] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.4'. [ 91.486795][ T6484] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 91.987793][ T6513] smc: net device ip6tnl0 applied user defined pnetid SYZ2 [ 93.407751][ T6579] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 94.029122][ T6602] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 94.709914][ T6632] vcan0 speed is unknown, defaulting to 1000 [ 94.712760][ T6633] rdma_rxe: rxe_newlink: failed to add vcan0 [ 94.728303][ T6632] vcan0 speed is unknown, defaulting to 1000 [ 94.739236][ T6632] vcan0 speed is unknown, defaulting to 1000 [ 94.855379][ T6637] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 95.077469][ T6632] infiniband syz1: set active [ 95.082493][ T6632] infiniband syz1: added vcan0 [ 95.091970][ T5172] vcan0 speed is unknown, defaulting to 1000 [ 95.272620][ T6632] RDS/IB: syz1: added [ 95.293257][ T6653] x_tables: unsorted entry at hook 2 [ 95.301665][ T6632] smc: adding ib device syz1 with port count 1 [ 95.345129][ T6632] smc: ib device syz1 port 1 has pnetid [ 95.367193][ T5126] vcan0 speed is unknown, defaulting to 1000 [ 95.400673][ T6632] vcan0 speed is unknown, defaulting to 1000 [ 95.882406][ T6632] vcan0 speed is unknown, defaulting to 1000 [ 96.164287][ T6632] vcan0 speed is unknown, defaulting to 1000 [ 96.345011][ T6685] x_tables: unsorted entry at hook 2 [ 96.379439][ T6632] vcan0 speed is unknown, defaulting to 1000 [ 96.675597][ T6632] vcan0 speed is unknown, defaulting to 1000 [ 96.909264][ T6704] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 96.919843][ T6704] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 96.930262][ T6704] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 96.940584][ T6704] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 98.156123][ T6733] rdma_rxe: rxe_newlink: failed to add vcan0 [ 98.922994][ T6771] dummy0: entered promiscuous mode [ 98.950568][ T6771] dummy0: left promiscuous mode [ 99.079239][ T6776] dummy0: entered promiscuous mode [ 99.102026][ T6776] dummy0: left promiscuous mode [ 99.480083][ T6794] dummy0: entered promiscuous mode [ 99.502709][ T6794] dummy0: left promiscuous mode [ 99.667680][ T6813] dummy0: entered promiscuous mode [ 99.681581][ T6813] dummy0: left promiscuous mode [ 99.869185][ T6821] dummy0: entered promiscuous mode [ 99.889872][ T6821] dummy0: left promiscuous mode [ 100.188840][ T6843] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 100.215369][ T6843] nbd: couldn't find a device at index 20 [ 100.484243][ T5119] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 100.497731][ T5119] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 100.513201][ T5119] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 100.531784][ T5119] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 100.543175][ T5119] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 100.556612][ T5119] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 100.661558][ T2859] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.699615][ T6850] vcan0 speed is unknown, defaulting to 1000 [ 100.779820][ T2859] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.939279][ T2859] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.053160][ T2859] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.366543][ T6889] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 101.383858][ T6889] vlan2: entered promiscuous mode [ 101.391276][ T6889] syz_tun: entered promiscuous mode [ 101.402746][ T6889] syz_tun: left promiscuous mode [ 101.477969][ T2859] bridge_slave_1: left allmulticast mode [ 101.490657][ T2859] bridge_slave_1: left promiscuous mode [ 101.508018][ T2859] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.521361][ T6896] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 101.542882][ T2859] bridge_slave_0: left allmulticast mode [ 101.564093][ T2859] bridge_slave_0: left promiscuous mode [ 101.571104][ T2859] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.811505][ T2859] smc: removing net device ip6tnl0 with user defined pnetid SYZ2 [ 102.136136][ T2859] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.156831][ T2859] bond_slave_0: left promiscuous mode [ 102.172575][ T2859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.183685][ T29] audit: type=1804 audit(1717288973.037:4): pid=6893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2890202783/syzkaller.PenwPA/171/cgroup.controllers" dev="sda1" ino=1939 res=1 errno=0 [ 102.210373][ T2859] bond_slave_1: left promiscuous mode [ 102.229232][ T2859] bond0 (unregistering): (slave macvlan3): Releasing backup interface [ 102.249631][ T2859] macvlan3: left promiscuous mode [ 102.258978][ T2859] team0: left promiscuous mode [ 102.274236][ T2859] team_slave_0: left promiscuous mode [ 102.280016][ T2859] team_slave_1: left promiscuous mode [ 102.289804][ T2859] bond0 (unregistering): Released all slaves [ 102.318012][ T2859] bond1 (unregistering): Released all slaves [ 102.337655][ T2859] bond2 (unregistering): Released all slaves [ 102.473596][ T2859] tipc: Disabling bearer [ 102.486375][ T2859] tipc: Left network mode [ 102.574360][ T5119] Bluetooth: hci1: command tx timeout [ 102.713762][ T6850] chnl_net:caif_netlink_parms(): no params data found [ 102.831923][ T6923] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 102.874959][ T6923] vlan2: entered promiscuous mode [ 102.881122][ T6923] syz_tun: entered promiscuous mode [ 102.890353][ T6923] syz_tun: left promiscuous mode [ 103.180937][ T6935] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 103.225084][ T6850] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.243595][ T6850] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.250836][ T6850] bridge_slave_0: entered allmulticast mode [ 103.262828][ T6850] bridge_slave_0: entered promiscuous mode [ 103.290782][ T2859] hsr_slave_0: left promiscuous mode [ 103.303246][ T2859] hsr_slave_1: left promiscuous mode [ 103.309878][ T2859] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.325186][ T2859] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.344931][ T2859] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.352364][ T2859] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.374219][ T2859] batman_adv: batadv0: Removing interface: macvlan2 [ 103.414762][ T2859] veth1_macvtap: left promiscuous mode [ 103.427571][ T2859] veth0_macvtap: left promiscuous mode [ 103.449230][ T2859] veth1_vlan: left promiscuous mode [ 103.461584][ T2859] veth0_vlan: left promiscuous mode [ 103.548521][ T6945] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 103.924590][ T29] audit: type=1804 audit(1717288974.767:5): pid=6933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3203061840/syzkaller.4b2Sxp/131/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 103.996695][ T29] audit: type=1804 audit(1717288974.777:6): pid=6931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3203061840/syzkaller.4b2Sxp/131/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 104.259941][ T29] audit: type=1804 audit(1717288975.117:7): pid=6944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2890202783/syzkaller.PenwPA/176/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 104.665765][ T5119] Bluetooth: hci1: command tx timeout [ 104.733205][ T2859] team0 (unregistering): Port device team_slave_1 removed [ 104.793826][ T2859] team0 (unregistering): Port device team_slave_0 removed [ 105.310257][ T6850] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.321401][ T6850] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.328736][ T6850] bridge_slave_1: entered allmulticast mode [ 105.336162][ T6850] bridge_slave_1: entered promiscuous mode [ 105.437362][ T6850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.478976][ T6850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.554331][ T6955] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 105.569438][ T6955] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.3'. [ 105.581099][ T6955] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 105.603748][ T6955] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 105.631885][ T6955] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 105.692049][ T6850] team0: Port device team_slave_0 added [ 105.720409][ T6850] team0: Port device team_slave_1 added [ 105.847568][ T6850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.862031][ T6850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.909399][ T6850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.931796][ T6850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.939313][ T6850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.965764][ T6850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.098459][ T6850] hsr_slave_0: entered promiscuous mode [ 106.121594][ T6850] hsr_slave_1: entered promiscuous mode [ 106.138571][ T6850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 106.148047][ T6850] Cannot create hsr debugfs directory [ 106.218637][ T6985] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 106.228703][ T6985] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.2'. [ 106.240179][ T6985] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 106.248640][ T6985] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 106.257206][ T6985] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 106.736804][ T5119] Bluetooth: hci1: command tx timeout [ 106.887431][ T6850] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 106.918418][ T6850] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.944606][ T6850] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 106.963842][ T6850] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 107.177665][ T6850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.243985][ T6850] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.266652][ T5126] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.273868][ T5126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.302833][ T5126] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.310061][ T5126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.382487][ T6850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.693151][ T6850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.789356][ T6850] veth0_vlan: entered promiscuous mode [ 107.812021][ T6850] veth1_vlan: entered promiscuous mode [ 107.865690][ T6850] veth0_macvtap: entered promiscuous mode [ 107.885125][ T6850] veth1_macvtap: entered promiscuous mode [ 107.936968][ T6850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.957901][ T6850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.968633][ T6850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.971734][ T7071] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 107.981431][ T6850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.001492][ T6850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.012549][ T6850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.027786][ T6850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.039726][ T6850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.051628][ T6850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.072230][ T6850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.115558][ T6850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.132837][ T6850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.145240][ T6850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.160232][ T6850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.179687][ T6850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.207183][ T6850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.232320][ T6850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.256420][ T6850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.281158][ T6850] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.308634][ T6850] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.323742][ T6850] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.353087][ T6850] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.613756][ T5126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.621626][ T5126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.780383][ T5126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.792743][ T5126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.814872][ T5119] Bluetooth: hci1: command tx timeout [ 108.907551][ T7098] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 108.918461][ T7098] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 109.014694][ T7106] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. [ 109.357940][ T7124] pim6reg1: entered promiscuous mode [ 109.364174][ T7124] pim6reg1: entered allmulticast mode [ 109.367512][ T7126] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 109.431103][ T7128] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 109.441139][ T7128] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 109.524854][ T7132] tipc: Enabled bearer , priority 0 [ 110.003834][ T7157] pim6reg1: entered promiscuous mode [ 110.009184][ T7157] pim6reg1: entered allmulticast mode [ 110.245271][ T7168] tipc: Started in network mode [ 110.250400][ T7168] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 110.262847][ T7168] tipc: Enabled bearer , priority 0 [ 110.658998][ T7188] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.1'. [ 110.670813][ T29] audit: type=1804 audit(1717288981.527:8): pid=7188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir93374415/syzkaller.vBrU7i/12/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 110.755519][ T7192] tipc: Enabling of bearer rejected, already enabled [ 110.869337][ T7196] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.0'. [ 110.889855][ T7196] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 111.181385][ T7216] tipc: Enabling of bearer rejected, already enabled [ 111.308925][ T7225] vcan0 speed is unknown, defaulting to 1000 [ 111.374046][ T5172] tipc: Node number set to 8432298 [ 111.858437][ T7224] vcan0 speed is unknown, defaulting to 1000 [ 112.117559][ T7232] IPv6: sit1: Disabled Multicast RS [ 112.140789][ T7229] IPv6: sit1: Disabled Multicast RS [ 112.211709][ T29] audit: type=1804 audit(1717288983.067:9): pid=7244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2890202783/syzkaller.PenwPA/207/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0 [ 112.362391][ T7225] IPv6: sit1: Disabled Multicast RS [ 112.413190][ T7231] vcan0 speed is unknown, defaulting to 1000 [ 113.179228][ T7267] [ 113.181592][ T7267] ====================================================== [ 113.188612][ T7267] WARNING: possible circular locking dependency detected [ 113.195620][ T7267] 6.10.0-rc1-syzkaller-00110-g45c0a209dcf2 #0 Not tainted [ 113.202714][ T7267] ------------------------------------------------------ [ 113.209725][ T7267] syz-executor.2/7267 is trying to acquire lock: [ 113.216039][ T7267] ffff888020da5c98 (&sighand->siglock){....}-{2:2}, at: __lock_task_sighand+0x149/0x2d0 [ 113.225801][ T7267] [ 113.225801][ T7267] but task is already holding lock: [ 113.233322][ T7267] ffff8880b9538828 (lock#10){+.+.}-{2:2}, at: __mmap_lock_do_trace_acquire_returned+0x8f/0x630 [ 113.243679][ T7267] [ 113.243679][ T7267] which lock already depends on the new lock. [ 113.243679][ T7267] [ 113.254066][ T7267] [ 113.254066][ T7267] the existing dependency chain (in reverse order) is: [ 113.263064][ T7267] [ 113.263064][ T7267] -> #2 (lock#10){+.+.}-{2:2}: [ 113.270008][ T7267] lock_acquire+0x1ed/0x550 [ 113.275023][ T7267] __mmap_lock_do_trace_acquire_returned+0xa8/0x630 [ 113.282119][ T7267] stack_map_get_build_id_offset+0x9af/0x9d0 [ 113.288609][ T7267] __bpf_get_stack+0x4ad/0x5a0 [ 113.293891][ T7267] bpf_get_stack_raw_tp+0x1a3/0x240 [ 113.299619][ T7267] 0xffffffffa0001a6a [ 113.304117][ T7267] bpf_trace_run2+0x2ec/0x540 [ 113.309412][ T7267] trace_tlb_flush+0x118/0x140 [ 113.314689][ T7267] switch_mm_irqs_off+0x7cb/0xae0 [ 113.320242][ T7267] __schedule+0x1066/0x4a20 [ 113.325354][ T7267] schedule+0x14b/0x320 [ 113.330019][ T7267] do_nanosleep+0x197/0x600 [ 113.335032][ T7267] hrtimer_nanosleep+0x227/0x470 [ 113.340485][ T7267] __se_sys_clock_nanosleep+0x32b/0x3c0 [ 113.346539][ T7267] do_syscall_64+0xf3/0x230 [ 113.351553][ T7267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.357955][ T7267] [ 113.357955][ T7267] -> #1 (&rq->__lock){-.-.}-{2:2}: [ 113.365243][ T7267] lock_acquire+0x1ed/0x550 [ 113.370251][ T7267] _raw_spin_lock_nested+0x31/0x40 [ 113.375872][ T7267] raw_spin_rq_lock_nested+0x2a/0x140 [ 113.381761][ T7267] sched_mm_cid_exit_signals+0x17b/0x4b0 [ 113.387905][ T7267] exit_signals+0x2a1/0x5c0 [ 113.392922][ T7267] do_exit+0x6b4/0x27e0 [ 113.397587][ T7267] __pfx___ia32_sys_exit+0x0/0x10 [ 113.403122][ T7267] do_syscall_64+0xf3/0x230 [ 113.408132][ T7267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.414538][ T7267] [ 113.414538][ T7267] -> #0 (&sighand->siglock){....}-{2:2}: [ 113.422345][ T7267] validate_chain+0x18e0/0x5900 [ 113.427710][ T7267] __lock_acquire+0x1346/0x1fd0 [ 113.433068][ T7267] lock_acquire+0x1ed/0x550 [ 113.438078][ T7267] _raw_spin_lock_irqsave+0xd5/0x120 [ 113.443872][ T7267] __lock_task_sighand+0x149/0x2d0 [ 113.449494][ T7267] group_send_sig_info+0x274/0x310 [ 113.455116][ T7267] bpf_send_signal_common+0x2dd/0x430 [ 113.460995][ T7267] bpf_send_signal_thread+0x16/0x20 [ 113.466705][ T7267] bpf_prog_7bb747c56a8bcba8+0x1d/0x25 [ 113.472668][ T7267] bpf_trace_run4+0x334/0x590 [ 113.477858][ T7267] __mmap_lock_do_trace_acquire_returned+0x5c8/0x630 [ 113.485043][ T7267] lock_mm_and_find_vma+0x213/0x2f0 [ 113.490754][ T7267] exc_page_fault+0x1bf/0x8c0 [ 113.495939][ T7267] asm_exc_page_fault+0x26/0x30 [ 113.501299][ T7267] fault_in_readable+0x165/0x2b0 [ 113.506766][ T7267] fault_in_iov_iter_readable+0x229/0x280 [ 113.513031][ T7267] generic_perform_write+0x220/0x640 [ 113.518839][ T7267] ext4_buffered_write_iter+0xc6/0x350 [ 113.524821][ T7267] ext4_file_write_iter+0x1de/0x1a10 [ 113.530617][ T7267] vfs_write+0xa72/0xc90 [ 113.535378][ T7267] ksys_write+0x1a0/0x2c0 [ 113.540223][ T7267] do_syscall_64+0xf3/0x230 [ 113.545243][ T7267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.551651][ T7267] [ 113.551651][ T7267] other info that might help us debug this: [ 113.551651][ T7267] [ 113.561877][ T7267] Chain exists of: [ 113.561877][ T7267] &sighand->siglock --> &rq->__lock --> lock#10 [ 113.561877][ T7267] [ 113.574042][ T7267] Possible unsafe locking scenario: [ 113.574042][ T7267] [ 113.581478][ T7267] CPU0 CPU1 [ 113.586826][ T7267] ---- ---- [ 113.592175][ T7267] lock(lock#10); [ 113.595984][ T7267] lock(&rq->__lock); [ 113.602559][ T7267] lock(lock#10); [ 113.608802][ T7267] lock(&sighand->siglock); [ 113.613396][ T7267] [ 113.613396][ T7267] *** DEADLOCK *** [ 113.613396][ T7267] [ 113.621537][ T7267] 8 locks held by syz-executor.2/7267: [ 113.627165][ T7267] #0: ffff888022834848 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x24e/0x310 [ 113.636477][ T7267] #1: ffff88804d8f6420 (sb_writers#4){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 113.645352][ T7267] #2: ffff88806134a200 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0x97/0x350 [ 113.656659][ T7267] #3: ffff88802ec64d98 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 113.666571][ T7267] #4: ffff8880b9538828 (lock#10){+.+.}-{2:2}, at: __mmap_lock_do_trace_acquire_returned+0x8f/0x630 [ 113.677352][ T7267] #5: ffffffff8e333f60 (rcu_read_lock){....}-{1:2}, at: get_mm_memcg_path+0xb1/0x600 [ 113.686912][ T7267] #6: ffffffff8e333f60 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run4+0x244/0x590 [ 113.696306][ T7267] #7: ffffffff8e333f60 (rcu_read_lock){....}-{1:2}, at: __lock_task_sighand+0x29/0x2d0 [ 113.706047][ T7267] [ 113.706047][ T7267] stack backtrace: [ 113.711929][ T7267] CPU: 1 PID: 7267 Comm: syz-executor.2 Not tainted 6.10.0-rc1-syzkaller-00110-g45c0a209dcf2 #0 [ 113.722333][ T7267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 113.732392][ T7267] Call Trace: [ 113.735665][ T7267] [ 113.738586][ T7267] dump_stack_lvl+0x241/0x360 [ 113.743693][ T7267] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.748885][ T7267] ? print_circular_bug+0x130/0x1a0 [ 113.754077][ T7267] check_noncircular+0x36a/0x4a0 [ 113.759010][ T7267] ? __pfx_check_noncircular+0x10/0x10 [ 113.764476][ T7267] ? lockdep_lock+0x123/0x2b0 [ 113.769184][ T7267] ? __bfs+0x368/0x6f0 [ 113.773283][ T7267] ? __pfx_hlock_conflict+0x10/0x10 [ 113.778491][ T7267] ? _find_first_zero_bit+0xd3/0x100 [ 113.783783][ T7267] validate_chain+0x18e0/0x5900 [ 113.788630][ T7267] ? __pfx_lock_release+0x10/0x10 [ 113.793657][ T7267] ? __pfx_validate_chain+0x10/0x10 [ 113.798848][ T7267] ? lockdep_unlock+0x16a/0x300 [ 113.803688][ T7267] ? unwind_get_return_address+0x91/0xc0 [ 113.809403][ T7267] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.815465][ T7267] ? __pfx_validate_chain+0x10/0x10 [ 113.820658][ T7267] ? validate_chain+0x15b1/0x5900 [ 113.825680][ T7267] ? __pfx_validate_chain+0x10/0x10 [ 113.830888][ T7267] ? mark_lock+0x9a/0x350 [ 113.835213][ T7267] ? __pfx_validate_chain+0x10/0x10 [ 113.840404][ T7267] __lock_acquire+0x1346/0x1fd0 [ 113.845252][ T7267] lock_acquire+0x1ed/0x550 [ 113.849746][ T7267] ? __lock_task_sighand+0x149/0x2d0 [ 113.855028][ T7267] ? __pfx_lock_acquire+0x10/0x10 [ 113.860043][ T7267] ? __pfx_lock_acquire+0x10/0x10 [ 113.865064][ T7267] _raw_spin_lock_irqsave+0xd5/0x120 [ 113.870347][ T7267] ? __lock_task_sighand+0x149/0x2d0 [ 113.875627][ T7267] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 113.881601][ T7267] __lock_task_sighand+0x149/0x2d0 [ 113.886705][ T7267] ? __lock_task_sighand+0x29/0x2d0 [ 113.891895][ T7267] group_send_sig_info+0x274/0x310 [ 113.896999][ T7267] ? __pfx_group_send_sig_info+0x10/0x10 [ 113.902628][ T7267] bpf_send_signal_common+0x2dd/0x430 [ 113.907992][ T7267] ? __pfx_bpf_send_signal_common+0x10/0x10 [ 113.913877][ T7267] ? bpf_trace_run4+0x244/0x590 [ 113.918721][ T7267] bpf_send_signal_thread+0x16/0x20 [ 113.923919][ T7267] bpf_prog_7bb747c56a8bcba8+0x1d/0x25 [ 113.929378][ T7267] bpf_trace_run4+0x334/0x590 [ 113.934072][ T7267] ? __pfx_bpf_trace_run4+0x10/0x10 [ 113.939289][ T7267] ? get_mm_memcg_path+0x36c/0x600 [ 113.944395][ T7267] ? get_mm_memcg_path+0x4e6/0x600 [ 113.949495][ T7267] __mmap_lock_do_trace_acquire_returned+0x5c8/0x630 [ 113.956160][ T7267] ? __mmap_lock_do_trace_acquire_returned+0x8f/0x630 [ 113.962912][ T7267] lock_mm_and_find_vma+0x213/0x2f0 [ 113.968104][ T7267] exc_page_fault+0x1bf/0x8c0 [ 113.972775][ T7267] asm_exc_page_fault+0x26/0x30 [ 113.977626][ T7267] RIP: 0010:fault_in_readable+0x165/0x2b0 [ 113.983360][ T7267] Code: b5 ff 4c 8d b3 ff 0f 00 00 48 89 d8 4d 01 e6 49 81 e6 00 f0 ff ff 49 39 c6 72 6b e8 45 75 b5 ff 4c 39 f3 74 6e 4c 89 64 24 10 <44> 8a 23 43 0f b6 04 2f 84 c0 75 18 44 88 64 24 40 48 81 c3 00 10 [ 114.002970][ T7267] RSP: 0018:ffffc90012597860 EFLAGS: 00050287 [ 114.009026][ T7267] RAX: ffffffff81e0a13b RBX: 0000000020001000 RCX: 0000000000040000 [ 114.016990][ T7267] RDX: ffffc90009899000 RSI: 0000000000000074 RDI: 0000000000000075 [ 114.024956][ T7267] RBP: ffffc90012597918 R08: ffffffff81e0a0d8 R09: ffffffff84acda59 [ 114.032917][ T7267] R10: 0000000000000002 R11: ffff888060b1bc00 R12: 0000000000001000 [ 114.040879][ T7267] R13: dffffc0000000000 R14: 0000000020002000 R15: 1ffff920024b2f14 [ 114.048844][ T7267] ? fault_in_iov_iter_readable+0x49/0x280 [ 114.054646][ T7267] ? fault_in_readable+0xf8/0x2b0 [ 114.059665][ T7267] ? fault_in_readable+0x15b/0x2b0 [ 114.064777][ T7267] ? __pfx_fault_in_readable+0x10/0x10 [ 114.070229][ T7267] ? file_remove_privs_flags+0x438/0x590 [ 114.075853][ T7267] fault_in_iov_iter_readable+0x229/0x280 [ 114.081566][ T7267] generic_perform_write+0x220/0x640 [ 114.086843][ T7267] ? generic_write_checks_count+0x415/0x530 [ 114.092733][ T7267] ? __pfx_generic_perform_write+0x10/0x10 [ 114.098531][ T7267] ? ext4_write_checks+0x256/0x2c0 [ 114.103634][ T7267] ext4_buffered_write_iter+0xc6/0x350 [ 114.109093][ T7267] ext4_file_write_iter+0x1de/0x1a10 [ 114.114369][ T7267] ? __pfx_lock_acquire+0x10/0x10 [ 114.119391][ T7267] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 114.125111][ T7267] vfs_write+0xa72/0xc90 [ 114.129357][ T7267] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 114.135068][ T7267] ? __pfx_vfs_write+0x10/0x10 [ 114.139822][ T7267] ? do_futex+0x33b/0x560 [ 114.144148][ T7267] ksys_write+0x1a0/0x2c0 [ 114.148468][ T7267] ? __pfx_ksys_write+0x10/0x10 [ 114.153305][ T7267] ? do_syscall_64+0x100/0x230 [ 114.158065][ T7267] ? do_syscall_64+0xb6/0x230 [ 114.162743][ T7267] do_syscall_64+0xf3/0x230 [ 114.167234][ T7267] ? clear_bhb_loop+0x35/0x90 [ 114.171900][ T7267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.177788][ T7267] RIP: 0033:0x7f71be27cee9 [ 114.182195][ T7267] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 114.201791][ T7267] RSP: 002b:00007f71bf0370c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 114.210197][ T7267] RAX: ffffffffffffffda RBX: 00007f71be3b3fa0 RCX: 00007f71be27cee9 [ 114.218157][ T7267] RDX: 000000000000fecc RSI: 0000000020000100 RDI: 0000000000000005 [ 114.226117][ T7267] RBP: 00007f71be2c947f R08: 0000000000000000 R09: 0000000000000000 2024/06/02 00:43:05 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 114.234083][ T7267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.242053][ T7267] R13: 000000000000000b R14: 00007f71be3b3fa0 R15: 00007ffeb37f19d8 [ 114.250022][ T7267]