last executing test programs: 1.555146278s ago: executing program 2: bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000300), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, 0x0, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x0, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/46}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='rpm_return_int\x00', r1}, 0x10) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = socket$kcm(0x2, 0xa, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r4, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"}) ioctl$SIOCSIFHWADDR(r3, 0x8916, &(0x7f0000000000)={'wg0\x00', @random="0200ff7fffff"}) 1.54328845s ago: executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="b40500000000080061107f000000000007000000000000009500000000000000bb54bcc31e727cb4e6fcd9b993e59a30945f188b0d1e204f19425a60305cb4eb957b535fe88eea065cac382762aa8448001de6b0edcbd02a"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x1, 0x90c}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xca}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYRES8=r1], 0x12) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x0, 0x40, 0x6, 0x8}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x0, 0x4, 0x9, 0x0, r5}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x5, 0x7, &(0x7f00000000c0)=ANY=[@ANYRES32=r6, @ANYBLOB="002e81213776000000000059ff47576839200000860000000500004f"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='ext4_ext_remove_space_done\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000a80)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) write$cgroup_int(r7, &(0x7f00000002c0), 0x12) ioctl$SIOCSIFHWADDR(r7, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x8}}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 1.41389926s ago: executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc0185879, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c80)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f0000000a80)='syzkaller\x00', 0x400, 0xfd, &(0x7f0000000ac0)=""/253, 0x41000, 0x9, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000bc0)={0x1, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x30664, 0xffffffffffffffff, 0x3, &(0x7f0000000c00)=[r1, r1, r1, r0], &(0x7f0000000c40)=[{0x5, 0x2, 0x10}, {0x2, 0x5, 0x6, 0x5}, {0x4, 0x5, 0x7, 0x7}], 0x10, 0xb2c1}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40086602, &(0x7f0000000180)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0xffe6) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="0763707573751400000000000009"], 0x17) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x1, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5, 0x6, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x40c000) 1.28562835s ago: executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1d, 0x0, 0x3}, {}]}) 1.152548441s ago: executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0xffffffffffffff97, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b35d25a806f8c6394f90824fc602f0000000a740200119852bc8777d9aabd29eb053582c137153e", 0x33fe0}], 0x1}, 0x0) 1.135999733s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x9, 0x8, &(0x7f0000000140)=@framed={{}, [@alu={0x6, 0x0, 0x3, 0x0, 0x0, 0x3}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x3}, @alu={0x4}, @exit], {0x95, 0x2}}, &(0x7f0000000100)='GPL\x00'}, 0x80) 1.079155982s ago: executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)) mkdirat$cgroup(r0, &(0x7f00000004c0)='syz0\x00', 0x1ff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001740)={&(0x7f0000001580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000007000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x6}}, &(0x7f00000000c0)='GPL\x00', 0x5, 0xca, &(0x7f0000000100)=""/202, 0x0, 0x0, '\x00', 0x0, 0x1b, r1, 0x8, 0x0, 0x0, 0x18, 0x0, 0x236}, 0x80) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000780)="f4000900062b2f25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) 991.633676ms ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x17, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000070000000095000020000000004892885b469ea53342268f28345b78ae09bdfa2e076980b06ecfd61be4fc691995bb8b4d2197387d6a093e4da5dac67f05f1aed6"], 0x0, 0xffff0001, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f80)={0x0, 0x11, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x65928, 0x0, 0x0, 0x0, 0x4}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @map_fd={0x18, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e00)={0x0, 0x7ff}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40), 0x0, 0x10, 0x3f}, 0x90) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000100)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x400}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) openat$cgroup_ro(r0, &(0x7f00000003c0)='cgroup.events\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={r1, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000880)=[0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0], 0x0, 0xed, &(0x7f00000009c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000a00), &(0x7f0000000a40), 0x8, 0x41, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x4, 0x9, 0xc00}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x20}, 0xc) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0xc, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000740), &(0x7f00000007c0), 0xc2a, r2}, 0x38) 853.581467ms ago: executing program 3: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, 0x0}, 0x0) 819.182562ms ago: executing program 4: bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 808.644584ms ago: executing program 1: bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000300), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, 0x0, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x0, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/46}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='rpm_return_int\x00', r1}, 0x10) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = socket$kcm(0x2, 0xa, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r4, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"}) ioctl$SIOCSIFHWADDR(r3, 0x8916, &(0x7f0000000000)={'wg0\x00', @random="0200ff7fffff"}) 700.099581ms ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x0, 0x8, 0x80, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xd}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000380)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffca8}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r3, &(0x7f0000000780)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x9, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000001000000000000000000000085000000a000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000040)='mm_lru_insertion\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) 694.354512ms ago: executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115000100fc00142603600e12080005007a010401a80016002000044004000008035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) 633.557122ms ago: executing program 1: r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x29, &(0x7f00000001c0), 0x4b) sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10, 0x0}, 0x0) 544.733105ms ago: executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="b9ff03076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xe) 492.119983ms ago: executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1d, 0x0, 0x3}, {}]}) 482.080695ms ago: executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@fwd={0x3}, @func={0x1, 0x0, 0x0, 0xc, 0x3}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x2}]}, {0x0, [0x61, 0x0, 0x2e]}}, &(0x7f0000000180)=""/179, 0x41, 0xb3, 0x1}, 0x20) 424.723164ms ago: executing program 0: bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_lsm={0x9, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x4}, [@initr0, @jmp={0x7, 0x1, 0xc, 0x0, 0x4}]}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f00000005c0)='memory.swap.current\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xc, 0x6, &(0x7f0000000980)=ANY=[@ANYBLOB="18020879b33e000000000000000000000000000018130000", @ANYRES32, @ANYBLOB="000000000000000085000000260000009500"], &(0x7f0000000040)='GPL\x00', 0x4, 0xd0, &(0x7f00000003c0)=""/208}, 0x90) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000300)=[{0x0}], 0x1}, 0x0) 372.739142ms ago: executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=""/115, 0x73}, {&(0x7f00000016c0)=""/4110, 0x1047}, {&(0x7f0000000540)=""/164, 0xa4}], 0x3}, 0x0) recvmsg$kcm(r0, &(0x7f0000002a80)={0x0, 0x0, 0x0}, 0x0) 314.460831ms ago: executing program 0: close(0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000200)=0x7fff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x3, 0x3, 0x1c10a1, 0x0, 0x30}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x0, 0x9, 0x1}, 0x48) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000480)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='percpu_free_percpu\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000200)='percpu_free_percpu\x00', r1}, 0x10) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x4, 0x7fe4, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r3, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=[{0x30, 0x0, 0x0, "f984fde379a50221171b54e4422cb5e1368c4ab1ce0a80eecf"}, {0x10}, {0xe10, 0x0, 0x0, "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"}], 0xe50}, 0x0) 232.510053ms ago: executing program 0: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)) mkdirat$cgroup(r0, &(0x7f00000004c0)='syz0\x00', 0x1ff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001740)={&(0x7f0000001580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000007000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x6}}, &(0x7f00000000c0)='GPL\x00', 0x5, 0xca, &(0x7f0000000100)=""/202, 0x0, 0x0, '\x00', 0x0, 0x1b, r1, 0x8, 0x0, 0x0, 0x18, 0x0, 0x236}, 0x80) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000780)="f4000900062b2f25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) 189.60722ms ago: executing program 3: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000026000b05d25a806c8c6f94f90a24fc60", 0x14}], 0x1}, 0x0) 185.966711ms ago: executing program 4: bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 119.194211ms ago: executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="180000007600a921059f317a9dab00000000000000010000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 105.519323ms ago: executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="b40500000000080061107f000000000007000000000000009500000000000000bb54bcc31e727cb4e6fcd9b993e59a30945f188b0d1e204f19425a60305cb4eb957b535fe88eea065cac382762aa8448001de6b0edcbd02a"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x1, 0x90c}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xca}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYRES8=r1], 0x12) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x0, 0x40, 0x6, 0x8}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x0, 0x4, 0x9, 0x0, r5}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x5, 0x7, &(0x7f00000000c0)=ANY=[@ANYRES32=r6, @ANYBLOB="002e81213776000000000059ff47576839200000860000000500004f"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='ext4_ext_remove_space_done\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000a80)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) write$cgroup_int(r7, &(0x7f00000002c0), 0x12) ioctl$SIOCSIFHWADDR(r7, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x8}}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 105.114593ms ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x7a}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 80.600757ms ago: executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115000100fc00142603600e12080005007a010401a80016002000044004000008035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) 27.523375ms ago: executing program 1: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x3, 0x0, &(0x7f0000000000)="b9ff06", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 17.603367ms ago: executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x8933, &(0x7f0000000000)={r0}) 0s ago: executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='.'}, 0x30) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) kernel console output (not intermixed with test programs): DDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.333352][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.342322][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.350759][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.359249][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.367643][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.385561][ T3566] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.405397][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.413729][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.439283][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.448503][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.472973][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.490443][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.498996][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.510676][ T152] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.517713][ T152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.526157][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.547896][ T3579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.558897][ T3567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.593156][ T3579] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.608275][ T3567] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.616331][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.627500][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.640803][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.647885][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.655731][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.663351][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.671100][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.678666][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.714708][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.724038][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.733704][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.742545][ T3614] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.749625][ T3614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.757358][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.767302][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.775908][ T3614] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.783023][ T3614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.790741][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.799402][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.807954][ T3614] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.815011][ T3614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.822800][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.831759][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.839973][ T3614] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.847097][ T3614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.854598][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.891994][ T3568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.909854][ T3568] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.929377][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.938435][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.946533][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.955119][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.963663][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.972798][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.981872][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.990096][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.999059][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.007880][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.016314][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.024508][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.033198][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.041761][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.050123][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.058566][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.066164][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.073965][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.084673][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.102111][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.110410][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.118236][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.126993][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.135879][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.144381][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.152803][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.161527][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.169795][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.178109][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.185549][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.193425][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.216033][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.229639][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.238327][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.246951][ T3611] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.254067][ T3611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.261637][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.269751][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.278016][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.286654][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.295210][ T3611] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.302311][ T3611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.310700][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.326682][ T3566] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.338049][ T3566] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.348318][ T3565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.371309][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.379614][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.388288][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.396947][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.407895][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.416527][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.425065][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.434087][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.442908][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.451504][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.460032][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.473374][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.481507][ T48] Bluetooth: hci0: command tx timeout [ 57.482037][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.486895][ T48] Bluetooth: hci4: command tx timeout [ 57.499175][ T3568] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.500060][ T3574] Bluetooth: hci3: command tx timeout [ 57.510593][ T3583] Bluetooth: hci1: command tx timeout [ 57.515933][ T3574] Bluetooth: hci2: command tx timeout [ 57.526519][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.537100][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.550624][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.559041][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.608239][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.622671][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.704570][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.713447][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.744595][ T3565] device veth0_vlan entered promiscuous mode [ 57.753507][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.771342][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.784540][ T3565] device veth1_vlan entered promiscuous mode [ 57.862273][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.880755][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.888835][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.926099][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.951403][ T3565] device veth0_macvtap entered promiscuous mode [ 57.981352][ T3565] device veth1_macvtap entered promiscuous mode [ 58.003078][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.011929][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.039340][ T3565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.062102][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.069513][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.080982][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.089739][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.098519][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.105960][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.116724][ T3565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.134190][ T3567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.149562][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.158460][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.167723][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.175515][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.185906][ T3566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.198406][ T3568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.223811][ T3579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.232861][ T3565] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.242415][ T3565] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.251816][ T3565] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.261030][ T3565] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.280012][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.287982][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.301780][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.310810][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.359191][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.368814][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.413887][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.429553][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.444339][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.455247][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.469158][ T3579] device veth0_vlan entered promiscuous mode [ 58.479022][ T3567] device veth0_vlan entered promiscuous mode [ 58.488583][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.499821][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.513662][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.524223][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.545947][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.557370][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.571775][ T3579] device veth1_vlan entered promiscuous mode [ 58.586334][ T3567] device veth1_vlan entered promiscuous mode [ 58.608489][ T3568] device veth0_vlan entered promiscuous mode [ 58.642816][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.643873][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.651404][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.667509][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.671963][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.675834][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.691510][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.699519][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.707792][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.716794][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.725411][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.733486][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.741352][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.775490][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.784267][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.792887][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.802101][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.817731][ T3568] device veth1_vlan entered promiscuous mode [ 58.828366][ T3579] device veth0_macvtap entered promiscuous mode [ 58.839052][ T3579] device veth1_macvtap entered promiscuous mode [ 58.854778][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.863337][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.879285][ T3568] device veth0_macvtap entered promiscuous mode [ 58.888936][ T3567] device veth0_macvtap entered promiscuous mode [ 58.896278][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.904373][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.912948][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.921290][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.929132][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.937212][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.945398][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.953627][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.961570][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.969817][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.981724][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.989414][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.997529][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.018582][ T3579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.035423][ T3579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.046591][ T3579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.056356][ T3568] device veth1_macvtap entered promiscuous mode [ 59.064647][ T3566] device veth0_vlan entered promiscuous mode [ 59.076302][ T3566] device veth1_vlan entered promiscuous mode [ 59.085056][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.093445][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.101728][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.110119][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.122598][ T3579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.138671][ T3579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.155016][ T3579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.165122][ T3567] device veth1_macvtap entered promiscuous mode [ 59.188142][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.199592][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.215197][ T3568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.228459][ T3568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.255791][ T3568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.266626][ T3568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.278775][ T3568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.280693][ C1] hrtimer: interrupt took 27161 ns [ 59.293414][ T3579] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.302675][ T3579] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.311483][ T3579] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.322685][ T3579] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.349426][ T3566] device veth0_macvtap entered promiscuous mode [ 59.359386][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.368604][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.378035][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.398223][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.408940][ T3568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.425518][ T3568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.435723][ T3568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.446409][ T3568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.457889][ T3568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.467444][ T3567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.478000][ T3567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.504117][ T3567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.519056][ T3567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.529070][ T3567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.539686][ T3567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.553405][ T3567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.560838][ T48] Bluetooth: hci2: command tx timeout [ 59.570781][ T3574] Bluetooth: hci4: command tx timeout [ 59.570861][ T48] Bluetooth: hci1: command tx timeout [ 59.576178][ T3574] Bluetooth: hci3: command tx timeout [ 59.576209][ T3574] Bluetooth: hci0: command tx timeout [ 59.594067][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.608623][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.618658][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.646138][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.657829][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.692011][ T3655] bridge0: port 3(bond0) entered blocking state [ 59.698809][ T3655] bridge0: port 3(bond0) entered disabled state [ 59.706769][ T3655] device bond0 entered promiscuous mode [ 59.712819][ T3655] device bond_slave_0 entered promiscuous mode [ 59.719088][ T3655] device bond_slave_1 entered promiscuous mode [ 59.728310][ T3655] bridge0: port 3(bond0) entered blocking state [ 59.734815][ T3655] bridge0: port 3(bond0) entered forwarding state [ 59.744537][ T3567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.755425][ T3567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.765289][ T3567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.775867][ T3567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.785930][ T3567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.796541][ T3567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.808991][ T3567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.817955][ T3566] device veth1_macvtap entered promiscuous mode [ 59.849359][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.858842][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.868118][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.879326][ T3567] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.893444][ T3567] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.902559][ T3567] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.912020][ T3567] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.926483][ T3568] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.936565][ T3568] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.945340][ T3568] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.959658][ T3568] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.984247][ T3566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.012122][ T3566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.033168][ T3566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.059986][ T3566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.069930][ T3566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.080505][ T3566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.090385][ T3566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.100922][ T3566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.113791][ T3566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.157948][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.166792][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.182265][ T3566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.199620][ T3566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.227854][ T3566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.238475][ T3566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.248580][ T3566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.259333][ T3566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.270902][ T3566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.284246][ T3566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.295637][ T3566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.306865][ T3566] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.316185][ T3566] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.325106][ T3566] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.334183][ T3566] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.351498][ T3664] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 60.359859][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.371025][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.397687][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.411685][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.485374][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.496575][ T3668] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 60.550730][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.558672][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.586975][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.621027][ T3627] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.622971][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.635085][ T3627] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.648783][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.702143][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.753935][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.781576][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.785456][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.789530][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.838788][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.841406][ T3625] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.882066][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.883825][ T3625] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.898113][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.900684][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.962316][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.978459][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.998674][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.594877][ T3694] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 61.644149][ T48] Bluetooth: hci0: command tx timeout [ 61.649682][ T48] Bluetooth: hci1: command tx timeout [ 61.655146][ T48] Bluetooth: hci3: command tx timeout [ 61.661636][ T48] Bluetooth: hci4: command tx timeout [ 61.664092][ T3574] Bluetooth: hci2: command tx timeout [ 61.998166][ T3698] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 62.260789][ T3707] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 62.269428][ T3707] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.2'. [ 62.411339][ T3714] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 62.420325][ T3714] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.3'. [ 62.600192][ T3714] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.3'. [ 62.851252][ T3736] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 63.916143][ T3758] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 63.938162][ T3758] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.1'. [ 64.167852][ T3763] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 64.210379][ T3763] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.4'. [ 64.255509][ T3763] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.4'. [ 65.370116][ T3804] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 65.460477][ T3804] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.3'. [ 65.719020][ T3811] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 65.791458][ T3814] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.4'. [ 65.837252][ T3811] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.4'. [ 66.502512][ T3854] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 66.516112][ T3854] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.2'. [ 66.753472][ T3864] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 67.184030][ T3883] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 67.221479][ T3883] netlink: 'syz-executor.0': attribute type 19 has an invalid length. [ 67.470024][ T3892] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 67.479333][ T3875] syz-executor.2 (3875) used greatest stack depth: 18840 bytes left [ 67.543420][ T3892] __nla_validate_parse: 3 callbacks suppressed [ 67.543465][ T3892] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.0'. [ 67.691015][ T3906] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 67.707336][ T3906] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.4'. [ 67.779027][ T3906] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.4'. [ 67.919280][ T3915] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 67.940907][ T3918] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 67.946726][ T3915] netlink: 199848 bytes leftover after parsing attributes in process `syz-executor.3'. [ 67.949214][ T3918] netlink: 'syz-executor.0': attribute type 19 has an invalid length. [ 67.982982][ T3918] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.0'. [ 68.659741][ T3940] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 68.683843][ T3940] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.2'. [ 68.768359][ T3945] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 68.814109][ T3945] netlink: 'syz-executor.1': attribute type 19 has an invalid length. [ 68.829337][ T3945] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 68.953165][ T3949] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.0'. [ 68.984352][ T3948] netlink: 199848 bytes leftover after parsing attributes in process `syz-executor.3'. [ 69.009274][ T3952] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.0'. [ 69.682492][ T3988] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 70.397790][ T4016] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 70.838701][ T4023] validate_nla: 8 callbacks suppressed [ 70.838717][ T4023] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 71.163283][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.180742][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.328786][ T4044] tc_dump_action: action bad kind [ 71.503234][ T4054] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 71.789447][ T4056] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 72.287812][ T4079] tc_dump_action: action bad kind [ 72.354069][ T4083] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 72.582475][ T4092] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 72.599918][ T4092] __nla_validate_parse: 10 callbacks suppressed [ 72.599960][ T4092] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.1'. [ 72.814315][ T4101] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 72.860397][ T4101] netlink: 199848 bytes leftover after parsing attributes in process `syz-executor.2'. [ 73.041623][ T4111] tc_dump_action: action bad kind [ 73.433547][ T4128] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 73.493991][ T4128] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.0'. [ 73.627995][ T4134] netlink: 16410 bytes leftover after parsing attributes in process `syz-executor.1'. [ 74.212397][ T4157] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 74.412733][ T4164] netlink: 16410 bytes leftover after parsing attributes in process `syz-executor.3'. [ 74.664805][ T4172] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 74.731645][ T4172] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.0'. [ 74.827399][ T4179] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.2'. [ 75.018503][ T4177] netlink: 'syz-executor.3': attribute type 39 has an invalid length. [ 75.037271][ T4177] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 75.072232][ T4177] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.3'. [ 75.150779][ T4177] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 75.175056][ T4181] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 75.183467][ T4181] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 75.206083][ T4181] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 75.214777][ T4181] netlink: 12374 bytes leftover after parsing attributes in process `syz-executor.2'. [ 75.255452][ T4183] tc_dump_action: action bad kind [ 75.424274][ T4196] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 76.035022][ T4216] validate_nla: 1 callbacks suppressed [ 76.035039][ T4216] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 76.089701][ T4216] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 76.120851][ T4216] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 76.281834][ T14] cfg80211: failed to load regulatory.db [ 77.246060][ T3574] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.254422][ T3574] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.292026][ T3574] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.311093][ T3574] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.318819][ T3574] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.340676][ T3574] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.379049][ T4249] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.683998][ T4249] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.855311][ T4249] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.985730][ T4249] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.096879][ T3582] Bluetooth: hci1: unexpected event 0x03 length: 15 > 11 [ 78.110062][ T4279] __nla_validate_parse: 2 callbacks suppressed [ 78.110076][ T4279] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 78.294286][ T4287] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 78.304498][ T4287] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 78.313368][ T4287] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.4'. [ 78.329960][ T4287] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 78.693640][ T4307] Illegal XDP return value 1988493840 on prog (id 181) dev N/A, expect packet loss! [ 78.840024][ T4253] chnl_net:caif_netlink_parms(): no params data found [ 79.092154][ T4329] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 79.134373][ T4253] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.147273][ T4253] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.183912][ T4253] device bridge_slave_0 entered promiscuous mode [ 79.255408][ T4253] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.284531][ T4253] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.301436][ T4253] device bridge_slave_1 entered promiscuous mode [ 79.343854][ T4340] raw_sendmsg: syz-executor.1 forgot to set AF_INET. Fix it! [ 79.400641][ T3582] Bluetooth: hci2: command tx timeout [ 79.529225][ T4253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.597491][ T4253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.762819][ T4253] team0: Port device team_slave_0 added [ 79.795249][ T4253] team0: Port device team_slave_1 added [ 79.942319][ T4253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.955019][ T4253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.000864][ T4253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.304064][ T4253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.313867][ T4253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.359072][ T4253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.587232][ T4253] device hsr_slave_0 entered promiscuous mode [ 80.650999][ T4253] device hsr_slave_1 entered promiscuous mode [ 80.667166][ T4253] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.676712][ T4253] Cannot create hsr debugfs directory [ 81.431390][ T4249] device hsr_slave_0 left promiscuous mode [ 81.480804][ T3582] Bluetooth: hci2: command tx timeout [ 81.530511][ T4249] device hsr_slave_1 left promiscuous mode [ 81.613794][ T4249] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.654564][ T4249] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.673641][ T4249] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.718373][ T4249] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.762589][ T4249] device bridge_slave_1 left promiscuous mode [ 81.769910][ T4249] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.817492][ T4249] device bridge_slave_0 left promiscuous mode [ 81.834703][ T4249] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.921109][ T4249] device veth1_macvtap left promiscuous mode [ 81.924766][ T4434] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 81.927374][ T4249] device veth0_macvtap left promiscuous mode [ 81.937304][ T4434] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.4'. [ 81.986969][ T4249] device veth1_vlan left promiscuous mode [ 81.999925][ T4249] device veth0_vlan left promiscuous mode [ 82.463641][ T4249] team0 (unregistering): Port device team_slave_1 removed [ 82.479847][ T4249] team0 (unregistering): Port device team_slave_0 removed [ 82.494911][ T4249] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.524343][ T4249] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.606884][ T4249] bond0 (unregistering): Released all slaves [ 83.467455][ T4485] netlink: 212904 bytes leftover after parsing attributes in process `syz-executor.3'. [ 83.560473][ T3582] Bluetooth: hci2: command tx timeout [ 83.672985][ T4494] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 83.719646][ T4494] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.3'. [ 84.029360][ T4253] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.069267][ T4253] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.135857][ T4253] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.197446][ T4253] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.681915][ T4253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.708791][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.729810][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.769808][ T4253] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.790431][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.821428][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.844865][ T3620] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.852013][ T3620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.071402][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.092741][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.116379][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.144540][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.151700][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.210784][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.219393][ T3582] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.227945][ T3582] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.236489][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.245171][ T3582] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.253583][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.262365][ T3582] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.270062][ T3582] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.277600][ T3582] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.285420][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.296638][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.386891][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.409084][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.436882][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.457469][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.488098][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.510984][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.519585][ T4524] bridge0: port 3(bond0) entered blocking state [ 85.533648][ T4524] bridge0: port 3(bond0) entered disabled state [ 85.546249][ T4524] device bond0 entered promiscuous mode [ 85.554223][ T4524] device bond_slave_0 entered promiscuous mode [ 85.564171][ T4524] device bond_slave_1 entered promiscuous mode [ 85.573514][ T4524] bridge0: port 3(bond0) entered blocking state [ 85.579871][ T4524] bridge0: port 3(bond0) entered forwarding state [ 85.598753][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.626919][ T4526] device bond0 left promiscuous mode [ 85.635003][ T4526] device bond_slave_0 left promiscuous mode [ 85.640504][ T3582] Bluetooth: hci2: command tx timeout [ 85.648051][ T4526] device bond_slave_1 left promiscuous mode [ 85.659742][ T4526] bridge0: port 3(bond0) entered disabled state [ 86.195229][ T4531] chnl_net:caif_netlink_parms(): no params data found [ 86.486712][ T4253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.495009][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.508296][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.607811][ T4531] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.635670][ T4531] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.667422][ T4531] device bridge_slave_0 entered promiscuous mode [ 86.752379][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.798972][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.892247][ T4531] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.902976][ T4531] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.926315][ T4531] device bridge_slave_1 entered promiscuous mode [ 86.942115][ T4253] device veth0_vlan entered promiscuous mode [ 86.949779][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.966309][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.978599][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.989883][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.114103][ T4253] device veth1_vlan entered promiscuous mode [ 87.184220][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.205624][ T4531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.263369][ T4531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.320607][ T3574] Bluetooth: hci3: command tx timeout [ 87.375949][ T4531] team0: Port device team_slave_0 added [ 87.384174][ T4531] team0: Port device team_slave_1 added [ 87.432662][ T4531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.439653][ T4531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.510492][ T4531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.538449][ T4531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.566762][ T4531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.607326][ T4531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.638686][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.662707][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.683095][ T4253] device veth0_macvtap entered promiscuous mode [ 87.722407][ T4249] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.787773][ T4253] device veth1_macvtap entered promiscuous mode [ 87.839041][ T4249] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.878897][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.890889][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.901389][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.912208][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.936739][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.968721][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.978856][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.989623][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.006066][ T4253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.025924][ T4531] device hsr_slave_0 entered promiscuous mode [ 88.044478][ T4531] device hsr_slave_1 entered promiscuous mode [ 88.057480][ T4531] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.089921][ T4531] Cannot create hsr debugfs directory [ 88.312490][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.346541][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.582971][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.660746][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.742452][ T4249] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.770197][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.796826][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.840460][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.867028][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.890481][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.901178][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.920356][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.940268][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.961749][ T4253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.997289][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.006429][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.025905][ T4249] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.044665][ T4253] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.065722][ T4253] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.083218][ T4253] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.110259][ T4253] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.396091][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.411950][ T3574] Bluetooth: hci3: command tx timeout [ 89.413002][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.473293][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.537736][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.588669][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.658339][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.350450][ T4531] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.373198][ T4531] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.400812][ T4531] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.428554][ T4531] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.942318][ T4531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.297621][ T4531] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.309039][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 91.317228][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.325425][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 91.334272][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 91.361186][ T152] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.368283][ T152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.424771][ T4713] bridge0: port 3(bond0) entered blocking state [ 91.459113][ T4713] bridge0: port 3(bond0) entered disabled state [ 91.485457][ T4713] device bond0 entered promiscuous mode [ 91.491277][ T3582] Bluetooth: hci3: command tx timeout [ 91.525329][ T4713] device bond_slave_0 entered promiscuous mode [ 91.551842][ T4713] device bond_slave_1 entered promiscuous mode [ 91.572858][ T4713] bridge0: port 3(bond0) entered blocking state [ 91.579692][ T4713] bridge0: port 3(bond0) entered forwarding state [ 91.597604][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 91.711321][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 91.781570][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 91.861158][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.868266][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.876238][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 91.891819][ T4718] device bond0 left promiscuous mode [ 91.897126][ T4718] device bond_slave_0 left promiscuous mode [ 91.908463][ T4718] device bond_slave_1 left promiscuous mode [ 91.916948][ T4718] bridge0: port 3(bond0) entered disabled state [ 91.996980][ T4249] device hsr_slave_0 left promiscuous mode [ 92.005981][ T4249] device hsr_slave_1 left promiscuous mode [ 92.020649][ T4249] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.039879][ T4249] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.070152][ T4249] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.099781][ T4249] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.130634][ T4249] device bridge_slave_1 left promiscuous mode [ 92.148340][ T4249] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.184885][ T4249] device bridge_slave_0 left promiscuous mode [ 92.205134][ T4249] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.245731][ T4249] device veth1_macvtap left promiscuous mode [ 92.267689][ T4249] device veth0_macvtap left promiscuous mode [ 92.274563][ T4249] device veth1_vlan left promiscuous mode [ 92.281202][ T4249] device veth0_vlan left promiscuous mode [ 92.504078][ T4746] ref_ctr_offset mismatch. inode: 0x7a7 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 92.589682][ T4748] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 92.612275][ T4249] team0 (unregistering): Port device team_slave_1 removed [ 92.626806][ T4249] team0 (unregistering): Port device team_slave_0 removed [ 92.637772][ T4249] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.652054][ T4249] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.705293][ T4249] bond0 (unregistering): Released all slaves [ 92.747158][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 92.755952][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 92.764767][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 92.808316][ T4735] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 92.814423][ T4735] syzkaller0: linktype set to 0 [ 92.854049][ T4732] device syzkaller0 entered promiscuous mode [ 92.868152][ T4748] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 92.893778][ T3586] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 92.912465][ T3586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 92.932194][ T3586] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.013608][ T4749] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 93.023299][ T4750] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 93.035783][ T4761] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 93.047438][ T4761] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.1'. [ 93.066006][ T4761] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 93.089104][ T4531] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 93.100325][ T4531] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.142989][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 93.160817][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 93.181324][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 93.197581][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 93.221916][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 93.265993][ T4770] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 93.318165][ T4774] bridge0: port 3(bond0) entered blocking state [ 93.366503][ T4774] bridge0: port 3(bond0) entered disabled state [ 93.418303][ T4774] device bond0 entered promiscuous mode [ 93.446300][ T4774] device bond_slave_0 entered promiscuous mode [ 93.453092][ T4774] device bond_slave_1 entered promiscuous mode [ 93.459881][ T4774] bridge0: port 3(bond0) entered blocking state [ 93.466271][ T4774] bridge0: port 3(bond0) entered forwarding state [ 93.514894][ T4778] device bond0 left promiscuous mode [ 93.530353][ T4778] device bond_slave_0 left promiscuous mode [ 93.536402][ T4778] device bond_slave_1 left promiscuous mode [ 93.560489][ T3574] Bluetooth: hci3: command tx timeout [ 93.604821][ T4778] bridge0: port 3(bond0) entered disabled state [ 94.050040][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 94.126858][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 94.195227][ T4531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.217733][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 94.241305][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 94.304880][ T4531] device veth0_vlan entered promiscuous mode [ 94.353043][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 94.372587][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 94.431092][ T4531] device veth1_vlan entered promiscuous mode [ 94.473837][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 94.489625][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 94.528263][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 94.559441][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 94.602053][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 94.640666][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 94.652224][ T4531] device veth0_macvtap entered promiscuous mode [ 94.682612][ T4531] device veth1_macvtap entered promiscuous mode [ 94.712458][ T4531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.740310][ T4531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.756712][ T4531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.793554][ T4531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.824009][ T4531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.870294][ T4531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.915066][ T4531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.937454][ T4531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.959264][ T4531] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.984953][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 95.016959][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 95.075609][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 95.127423][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 95.192573][ T4531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.230153][ T4531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.270288][ T4531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.400153][ T4531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.491885][ T4531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.630465][ T4531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.781835][ T4531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.890433][ T4531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.001504][ T4531] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.022630][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 96.053357][ T4840] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 96.083951][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 96.127178][ T4531] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.180540][ T4531] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.189263][ T4531] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.228782][ T4531] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.239406][ T4845] ref_ctr_offset mismatch. inode: 0x799 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 96.301261][ T4840] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 96.320733][ T4842] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 96.370574][ T4844] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 96.428941][ T3627] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.445862][ T3627] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.472701][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 96.583263][ T3627] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.591967][ T4856] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.2'. [ 96.673750][ T4856] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 96.690595][ T3627] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.737651][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 97.417077][ T4874] device bond0 left promiscuous mode [ 97.450082][ T4874] device bond_slave_0 left promiscuous mode [ 97.466742][ T4874] device bond_slave_1 left promiscuous mode [ 97.479937][ T4874] bridge0: port 3(bond0) entered disabled state [ 97.847877][ T4898] device batadv0 entered promiscuous mode [ 98.903997][ T4923] validate_nla: 5 callbacks suppressed [ 98.904011][ T4923] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 98.939703][ T4921] bridge0: port 3(bond0) entered blocking state [ 98.956737][ T4921] bridge0: port 3(bond0) entered disabled state [ 99.001739][ T4921] device bond0 entered promiscuous mode [ 99.018882][ T4921] device bond_slave_0 entered promiscuous mode [ 99.046973][ T4921] device bond_slave_1 entered promiscuous mode [ 99.060980][ T4921] bridge0: port 3(bond0) entered blocking state [ 99.067316][ T4921] bridge0: port 3(bond0) entered forwarding state [ 99.087163][ T4923] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 99.147679][ T4927] device bond0 left promiscuous mode [ 99.185762][ T4927] device bond_slave_0 left promiscuous mode [ 99.200501][ T4927] device bond_slave_1 left promiscuous mode [ 99.211300][ T4927] bridge0: port 3(bond0) entered disabled state [ 99.224861][ T4924] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 99.234850][ T4926] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 101.039382][ T5000] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. [ 101.505312][ T5017] netlink: 180 bytes leftover after parsing attributes in process `syz-executor.0'. [ 102.947890][ T5066] netlink: 180 bytes leftover after parsing attributes in process `syz-executor.3'. [ 104.364642][ T5104] netlink: 180 bytes leftover after parsing attributes in process `syz-executor.4'. [ 105.814810][ T5157] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 105.832302][ T5157] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.2'. [ 105.854288][ T5157] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 105.869750][ T5157] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 105.882586][ T5155] netlink: 180 bytes leftover after parsing attributes in process `syz-executor.0'. [ 106.029513][ T26] audit: type=1804 audit(1718490112.856:2): pid=5167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1453451969/syzkaller.bnZu4W/134/memory.events" dev="sda1" ino=1951 res=1 errno=0 [ 106.380046][ T5187] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 106.401538][ T5187] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.1'. [ 106.434350][ T5187] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 106.453554][ T5187] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. [ 106.488151][ T5192] tun0: tun_chr_ioctl cmd 1074025675 [ 106.524721][ T5192] tun0: persist enabled [ 106.532516][ T26] audit: type=1804 audit(1718490113.366:3): pid=5199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1453451969/syzkaller.bnZu4W/137/memory.events" dev="sda1" ino=1964 res=1 errno=0 [ 106.541705][ T5192] tun0: tun_chr_ioctl cmd 1074025675 [ 106.575026][ T5192] tun0: persist disabled [ 106.953370][ T26] audit: type=1804 audit(1718490113.786:4): pid=5223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2444389450/syzkaller.wlJDra/31/memory.events" dev="sda1" ino=1952 res=1 errno=0 [ 106.971174][ T5226] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 106.999628][ T5226] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.4'. [ 107.747213][ T26] audit: type=1804 audit(1718490114.576:5): pid=5253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2057942902/syzkaller.eJBv7o/147/memory.events" dev="sda1" ino=1955 res=1 errno=0 [ 108.229003][ T26] audit: type=1804 audit(1718490115.056:6): pid=5283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2057942902/syzkaller.eJBv7o/150/memory.events" dev="sda1" ino=1955 res=1 errno=0 [ 108.238717][ T5280] tun0: tun_chr_ioctl cmd 1074025675 [ 108.287321][ T5280] tun0: persist enabled [ 108.309102][ T5287] tun0: tun_chr_ioctl cmd 1074025675 [ 108.318798][ T5287] tun0: persist disabled [ 109.915280][ T26] audit: type=1804 audit(1718490116.746:7): pid=5367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2057942902/syzkaller.eJBv7o/156/memory.events" dev="sda1" ino=1956 res=1 errno=0 [ 110.314607][ T5382] tun0: tun_chr_ioctl cmd 1074025675 [ 110.345165][ T5382] tun0: persist enabled [ 110.375994][ T5382] tun0: tun_chr_ioctl cmd 1074025675 [ 110.384052][ T5382] tun0: persist disabled [ 112.015001][ T5490] tun0: tun_chr_ioctl cmd 1074025675 [ 112.047692][ T5490] tun0: persist enabled [ 112.063660][ T5490] tun0: tun_chr_ioctl cmd 1074025675 [ 112.096421][ T5490] tun0: persist disabled [ 112.414410][ T5510] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 113.005992][ T5530] tun0: tun_chr_ioctl cmd 1074025675 [ 113.053951][ T5530] tun0: persist enabled [ 113.063648][ T5536] tun0: tun_chr_ioctl cmd 1074025675 [ 113.068965][ T5536] tun0: persist disabled [ 113.927100][ T5585] tun0: tun_chr_ioctl cmd 1074025675 [ 113.945504][ T5585] tun0: persist enabled [ 113.971503][ T5585] tun0: tun_chr_ioctl cmd 1074025675 [ 113.990831][ T5585] tun0: persist disabled [ 114.423589][ T5618] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 114.465296][ T5618] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. [ 114.508196][ T5618] device team0 entered promiscuous mode [ 114.540377][ T5618] device team_slave_0 entered promiscuous mode [ 114.554782][ T5618] device team_slave_1 entered promiscuous mode [ 114.568838][ T5618] bridge0: port 3(team0) entered blocking state [ 114.596656][ T5618] bridge0: port 3(team0) entered disabled state [ 114.622120][ T5618] bridge0: port 3(team0) entered blocking state [ 114.628739][ T5618] bridge0: port 3(team0) entered forwarding state [ 115.116061][ T5655] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 115.143648][ T5655] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. [ 115.160813][ T5655] device team0 entered promiscuous mode [ 115.181183][ T5655] device team_slave_0 entered promiscuous mode [ 115.200546][ T5655] device team_slave_1 entered promiscuous mode [ 115.231288][ T5655] bridge0: port 3(team0) entered blocking state [ 115.265808][ T5655] bridge0: port 3(team0) entered disabled state [ 115.308631][ T5655] bridge0: port 3(team0) entered blocking state [ 115.315183][ T5655] bridge0: port 3(team0) entered forwarding state [ 115.513979][ T5668] pim6reg0: tun_chr_ioctl cmd 1074025678 [ 115.529893][ T5668] pim6reg0: group set to 0 [ 118.001068][ T5763] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 118.020497][ T5763] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.3'. [ 118.029765][ T5763] device team0 entered promiscuous mode [ 118.076726][ T5763] device team_slave_0 entered promiscuous mode [ 118.128372][ T5763] device team_slave_1 entered promiscuous mode [ 118.140948][ T5763] bridge0: port 3(team0) entered blocking state [ 118.157839][ T5763] bridge0: port 3(team0) entered disabled state [ 118.188614][ T5763] bridge0: port 3(team0) entered blocking state [ 118.195103][ T5763] bridge0: port 3(team0) entered forwarding state [ 118.313411][ T5769] tun0: tun_chr_ioctl cmd 1074025675 [ 118.322060][ T5769] tun0: persist enabled [ 118.331931][ T5769] tun0: tun_chr_ioctl cmd 1074025675 [ 118.360544][ T5769] tun0: persist disabled [ 118.787657][ T5799] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 118.804436][ T5799] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.3'. [ 119.260119][ T5810] tun0: tun_chr_ioctl cmd 1074025675 [ 119.294090][ T5810] tun0: persist enabled [ 119.321466][ T5816] tun0: tun_chr_ioctl cmd 1074025675 [ 119.356451][ T5816] tun0: persist disabled [ 120.087426][ T5832] pim6reg0: tun_chr_ioctl cmd 1074025678 [ 120.096706][ T5832] pim6reg0: group set to 0 [ 120.777056][ T26] audit: type=1804 audit(1718490127.606:8): pid=5860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2641042298/syzkaller.dpwKlr/199/memory.events" dev="sda1" ino=1944 res=1 errno=0 [ 120.863659][ T5859] tun0: tun_chr_ioctl cmd 1074025675 [ 120.907818][ T5859] tun0: persist enabled [ 120.923810][ T5863] tun0: tun_chr_ioctl cmd 1074025675 [ 120.939533][ T26] audit: type=1800 audit(1718490127.636:9): pid=5860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="memory.events" dev="sda1" ino=1944 res=0 errno=0 [ 120.970669][ T5863] tun0: persist disabled [ 121.268675][ T5878] pim6reg0: tun_chr_ioctl cmd 1074025678 [ 121.286900][ T5878] pim6reg0: group set to 0 [ 121.560168][ T5895] tun0: tun_chr_ioctl cmd 1074025675 [ 121.569459][ T5895] tun0: persist enabled [ 121.582984][ T5895] tun0: tun_chr_ioctl cmd 1074025675 [ 121.598824][ T5895] tun0: persist disabled [ 121.837980][ T5911] pim6reg0: tun_chr_ioctl cmd 1074025678 [ 121.847767][ T5911] pim6reg0: group set to 0 [ 124.867384][ T6025] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 124.921750][ T6025] netlink: 13435 bytes leftover after parsing attributes in process `syz-executor.3'. [ 125.193709][ T26] audit: type=1804 audit(1718490132.026:10): pid=6027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2444389450/syzkaller.wlJDra/120/memory.events" dev="sda1" ino=1951 res=1 errno=0 [ 125.332814][ T26] audit: type=1800 audit(1718490132.106:11): pid=6027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.3" name="memory.events" dev="sda1" ino=1951 res=0 errno=0 [ 125.972161][ T26] audit: type=1804 audit(1718490132.806:12): pid=6062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir699570522/syzkaller.WtaGGi/136/memory.events" dev="sda1" ino=1956 res=1 errno=0 [ 126.016195][ T26] audit: type=1800 audit(1718490132.826:13): pid=6062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.2" name="memory.events" dev="sda1" ino=1956 res=0 errno=0 [ 126.307232][ T6082] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 126.319655][ T6082] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 126.329972][ T6082] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 126.344603][ T6082] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 126.355130][ T6082] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 126.627604][ T26] audit: type=1804 audit(1718490133.456:14): pid=6096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2057942902/syzkaller.eJBv7o/227/memory.events" dev="sda1" ino=1938 res=1 errno=0 [ 126.732310][ T26] audit: type=1800 audit(1718490133.516:15): pid=6096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="memory.events" dev="sda1" ino=1938 res=0 errno=0 [ 126.786225][ T3582] Bluetooth: hci1: unexpected event 0x32 length: 15 > 9 [ 127.288131][ T6140] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 127.307055][ T6140] netlink: 13435 bytes leftover after parsing attributes in process `syz-executor.2'. [ 127.398821][ T3582] Bluetooth: hci4: unexpected event 0x32 length: 15 > 9 [ 127.709386][ T6147] device syzkaller0 entered promiscuous mode [ 128.336317][ T6202] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 128.352255][ T6204] syz-executor.4[6204] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 128.352352][ T6204] syz-executor.4[6204] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 128.366110][ T6202] netlink: 13435 bytes leftover after parsing attributes in process `syz-executor.1'. [ 128.366147][ T6201] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 128.589550][ T6201] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 128.598903][ T6215] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.0'. [ 128.646749][ T6211] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.0'. [ 128.973212][ T6242] syz-executor.1[6242] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 128.973301][ T6242] syz-executor.1[6242] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 129.253702][ T6258] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.4'. [ 129.366922][ T6254] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.4'. [ 129.906386][ T6283] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 129.944292][ T6283] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 129.970905][ T6291] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 130.006705][ T6283] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 130.031301][ T6283] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 130.239227][ T6294] device syzkaller0 entered promiscuous mode [ 132.611992][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.618318][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.017312][ T6443] syz-executor.0[6443] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 133.017405][ T6443] syz-executor.0[6443] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.895822][ T6453] device syzkaller0 entered promiscuous mode [ 135.947680][ T6471] device batadv0 entered promiscuous mode [ 136.081790][ T6482] syz-executor.1[6482] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.081877][ T6482] syz-executor.1[6482] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.402559][ T6499] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 137.033230][ T3574] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 137.043691][ T3574] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 137.051477][ T3574] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 137.059622][ T3574] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 137.067467][ T3574] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 137.075016][ T3574] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 137.194772][ T46] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.473537][ T46] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.623972][ T46] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.739303][ T46] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.796594][ T6516] chnl_net:caif_netlink_parms(): no params data found [ 137.830079][ T6543] device batadv0 entered promiscuous mode [ 137.900703][ T6551] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 138.031179][ T6550] can: request_module (can-proto-0) failed. [ 138.164028][ T6516] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.187541][ T6516] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.197626][ T6516] device bridge_slave_0 entered promiscuous mode [ 138.207300][ T6516] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.214911][ T6516] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.223466][ T6516] device bridge_slave_1 entered promiscuous mode [ 138.295293][ T6516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.431425][ T6516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.536243][ T6516] team0: Port device team_slave_0 added [ 138.583322][ T6516] team0: Port device team_slave_1 added [ 138.615046][ T6583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.687280][ T6589] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 138.730767][ T6516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.743609][ T6516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.787501][ T6516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.835873][ T6516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.854733][ T6516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.884418][ T6516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.988245][ T6601] syz-executor.0[6601] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 138.988346][ T6601] syz-executor.0[6601] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 138.996095][ T6592] can: request_module (can-proto-0) failed. [ 139.154712][ T6516] device hsr_slave_0 entered promiscuous mode [ 139.161533][ T3574] Bluetooth: hci1: command tx timeout [ 139.214084][ T6516] device hsr_slave_1 entered promiscuous mode [ 139.257899][ T6516] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.306377][ T6516] Cannot create hsr debugfs directory [ 140.099375][ T6639] can: request_module (can-proto-0) failed. [ 140.128479][ T6649] device batadv0 entered promiscuous mode [ 140.173755][ T46] device hsr_slave_0 left promiscuous mode [ 140.189312][ T46] device hsr_slave_1 left promiscuous mode [ 140.211775][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.229382][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.252663][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.260780][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.270957][ T46] bridge0: port 3(team0) entered disabled state [ 140.289115][ T46] device bridge_slave_1 left promiscuous mode [ 140.297051][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.351004][ T46] device bridge_slave_0 left promiscuous mode [ 140.367466][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.404526][ T46] device veth1_macvtap left promiscuous mode [ 140.410947][ T46] device veth0_macvtap left promiscuous mode [ 140.417210][ T46] device veth1_vlan left promiscuous mode [ 140.428301][ T46] device veth0_vlan left promiscuous mode [ 140.709588][ T46] device team_slave_1 left promiscuous mode [ 140.727570][ T46] team0 (unregistering): Port device team_slave_1 removed [ 140.748215][ T46] device team_slave_0 left promiscuous mode [ 140.776319][ T46] team0 (unregistering): Port device team_slave_0 removed [ 140.800417][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.820544][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.927004][ T46] bond0 (unregistering): Released all slaves [ 141.020482][ T6667] bridge0: port 4(bond0) entered blocking state [ 141.051792][ T6667] bridge0: port 4(bond0) entered disabled state [ 141.069821][ T6667] device bond0 entered promiscuous mode [ 141.090382][ T6667] device bond_slave_0 entered promiscuous mode [ 141.120043][ T6667] device bond_slave_1 entered promiscuous mode [ 141.157202][ T6667] device wlan1 entered promiscuous mode [ 141.167604][ T6667] bridge0: port 4(bond0) entered blocking state [ 141.173982][ T6667] bridge0: port 4(bond0) entered forwarding state [ 141.240576][ T3574] Bluetooth: hci1: command tx timeout [ 141.246842][ T6669] device bond0 left promiscuous mode [ 141.280351][ T6669] device bond_slave_0 left promiscuous mode [ 141.331280][ T6669] device bond_slave_1 left promiscuous mode [ 141.337297][ T6669] device wlan1 left promiscuous mode [ 141.354951][ T6669] bridge0: port 4(bond0) entered disabled state [ 141.397888][ T6699] netlink: 16186 bytes leftover after parsing attributes in process `syz-executor.2'. [ 141.544693][ T6703] syz-executor.2[6703] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 141.544784][ T6703] syz-executor.2[6703] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 141.631867][ T6516] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 141.682447][ T6516] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 141.709871][ T6516] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 141.774015][ T6516] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 142.093694][ T6516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.131884][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 142.140143][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 142.193791][ T6516] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.241183][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 142.249831][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 142.305166][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.312305][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.313886][ T6740] syz-executor.3[6740] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.319579][ T6740] syz-executor.3[6740] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.371300][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 142.421019][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 142.446898][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 142.476046][ T935] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.483177][ T935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.516282][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 142.669354][ T6516] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 142.679786][ T6516] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 142.707573][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 142.726630][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 142.744704][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 142.846032][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 142.873744][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 142.896779][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 143.143935][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 143.154240][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 143.163255][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 143.184404][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 143.193235][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 143.320375][ T3574] Bluetooth: hci1: command tx timeout [ 143.860969][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 143.869901][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 143.905511][ T6516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.139185][ T6804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.672329][ T6826] bridge0: port 4(bond0) entered blocking state [ 144.700392][ T6826] bridge0: port 4(bond0) entered disabled state [ 144.733239][ T6826] device bond0 entered promiscuous mode [ 144.738808][ T6826] device bond_slave_0 entered promiscuous mode [ 144.797159][ T6826] device bond_slave_1 entered promiscuous mode [ 144.819865][ T6826] device wlan1 entered promiscuous mode [ 144.849477][ T6826] bridge0: port 4(bond0) entered blocking state [ 144.855856][ T6826] bridge0: port 4(bond0) entered forwarding state [ 144.960551][ T6829] device bond0 left promiscuous mode [ 144.965913][ T6829] device bond_slave_0 left promiscuous mode [ 144.988530][ T6829] device bond_slave_1 left promiscuous mode [ 145.008761][ T6829] device wlan1 left promiscuous mode [ 145.026794][ T6829] bridge0: port 4(bond0) entered disabled state [ 145.059878][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 145.075618][ T3582] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 145.084225][ T3582] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 145.091973][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 145.101063][ T3582] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 145.109541][ T3582] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 145.117016][ T3582] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 145.129245][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 145.150938][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 145.159190][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 145.167926][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 145.177305][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 145.198383][ T6516] device veth0_vlan entered promiscuous mode [ 145.216884][ T6516] device veth1_vlan entered promiscuous mode [ 145.344066][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 145.362467][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 145.385438][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 145.400683][ T3582] Bluetooth: hci1: command tx timeout [ 145.406441][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 145.438335][ T6516] device veth0_macvtap entered promiscuous mode [ 145.484982][ T6516] device veth1_macvtap entered promiscuous mode [ 145.581809][ T6516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.589003][ T6841] can: request_module (can-proto-0) failed. [ 145.620510][ T6516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.725870][ T6516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.765271][ T6516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.790296][ T6516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.825411][ T6516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.850325][ T6516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.888713][ T6516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.911968][ T6516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.013347][ T3586] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 146.031332][ T3586] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 146.039499][ T3586] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 146.049916][ T3586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 146.065476][ T6516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.086049][ T6516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.099460][ T6516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.112416][ T6516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.130352][ T6516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.147011][ T6516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.157283][ T6516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.173842][ T6516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.187798][ T6516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.233580][ T46] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.256619][ T6836] chnl_net:caif_netlink_parms(): no params data found [ 146.285353][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 146.301356][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 146.316071][ T6516] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.332669][ T6516] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.348024][ T6516] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.358189][ T6516] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.415883][ T46] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.568310][ T46] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.619757][ T6836] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.641253][ T6836] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.661700][ T6836] device bridge_slave_0 entered promiscuous mode [ 146.670158][ T6836] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.677835][ T6836] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.687611][ T6836] device bridge_slave_1 entered promiscuous mode [ 146.879302][ T46] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.932406][ T6836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.965445][ T3627] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.987869][ T3627] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.996429][ T6836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.033267][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 147.122861][ T4249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.126112][ T6836] team0: Port device team_slave_0 added [ 147.143480][ T4249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.153990][ T6836] team0: Port device team_slave_1 added [ 147.160614][ T3582] Bluetooth: hci0: command tx timeout [ 147.240957][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 147.303169][ T6836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.310177][ T6836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.379452][ T6836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.440750][ T6836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.447713][ T6836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.487320][ T6836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.630185][ T6836] device hsr_slave_0 entered promiscuous mode [ 147.647035][ T6836] device hsr_slave_1 entered promiscuous mode [ 147.660205][ T6836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 147.685867][ T6836] Cannot create hsr debugfs directory [ 148.300936][ T6972] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 148.565136][ T6836] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 148.593898][ T6836] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 148.617777][ T6836] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 148.671220][ T46] device hsr_slave_0 left promiscuous mode [ 148.685142][ T46] device hsr_slave_1 left promiscuous mode [ 148.700017][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.722765][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.744358][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.768849][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.796167][ T46] bridge0: port 3(team0) entered disabled state [ 148.819714][ T46] device bridge_slave_1 left promiscuous mode [ 148.843830][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.897541][ T46] device bridge_slave_0 left promiscuous mode [ 148.904538][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.932276][ T46] device veth1_macvtap left promiscuous mode [ 148.939345][ T46] device veth0_macvtap left promiscuous mode [ 148.947829][ T46] device veth1_vlan left promiscuous mode [ 148.954865][ T46] device veth0_vlan left promiscuous mode [ 149.176418][ T46] device team_slave_1 left promiscuous mode [ 149.189054][ T46] team0 (unregistering): Port device team_slave_1 removed [ 149.209951][ T46] device team_slave_0 left promiscuous mode [ 149.216738][ T46] team0 (unregistering): Port device team_slave_0 removed [ 149.228051][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.243870][ T3582] Bluetooth: hci0: command tx timeout [ 149.289349][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.426610][ T46] bond0 (unregistering): Released all slaves [ 149.476035][ T6836] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 149.493962][ T7008] bridge0: port 3(bond0) entered blocking state [ 149.520816][ T7008] bridge0: port 3(bond0) entered disabled state [ 149.548429][ T7008] device bond0 entered promiscuous mode [ 149.559798][ T7008] device bond_slave_0 entered promiscuous mode [ 149.566505][ T7008] device bond_slave_1 entered promiscuous mode [ 149.574962][ T7008] bridge0: port 3(bond0) entered blocking state [ 149.581328][ T7008] bridge0: port 3(bond0) entered forwarding state [ 149.859698][ T7011] device bond0 left promiscuous mode [ 149.878534][ T7011] device bond_slave_0 left promiscuous mode [ 149.886978][ T7011] device bond_slave_1 left promiscuous mode [ 149.893421][ T7011] bridge0: port 3(bond0) entered disabled state [ 150.047889][ T7035] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 150.089803][ T6836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.118202][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 150.130856][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 150.157160][ T6836] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.188808][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 150.207716][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 150.233885][ T3615] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.241122][ T3615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.304072][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 150.315677][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 150.351026][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 150.387197][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.394341][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.448303][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 150.483221][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 150.523166][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 150.543369][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 150.561603][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 150.590718][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 150.619699][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 150.639675][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 150.670965][ T6836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 150.692878][ T6836] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 150.704910][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 150.720198][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 150.756921][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 150.846933][ T7077] bond0: (slave wlan1): Error: Slave device does not support XDP [ 151.249820][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 151.263108][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 151.299123][ T6836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.320606][ T3582] Bluetooth: hci0: command tx timeout [ 151.385478][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 151.411635][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 151.468179][ T6836] device veth0_vlan entered promiscuous mode [ 151.543983][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 151.571964][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 151.615196][ T6836] device veth1_vlan entered promiscuous mode [ 151.655332][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 151.679171][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 151.699453][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 151.907104][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 151.937193][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 151.996898][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 152.028250][ T6836] device veth0_macvtap entered promiscuous mode [ 152.169040][ T6836] device veth1_macvtap entered promiscuous mode [ 152.317193][ T6836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.390322][ T6836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.420514][ T6836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.458547][ T6836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.481890][ T6836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.498502][ T6836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.510064][ T6836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.528148][ T6836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.562753][ T6836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.612372][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 152.624162][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 152.648807][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 152.686341][ T6836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.718328][ T6836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.729940][ T6836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.740806][ T6836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.767680][ T6836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.796748][ T6836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.827778][ T6836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.843775][ T6836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.856638][ T6836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.884457][ T7159] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 152.900606][ T7159] netlink: 61951 bytes leftover after parsing attributes in process `syz-executor.3'. [ 152.915555][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 152.933912][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 152.965422][ T6836] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.979724][ T6836] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.005567][ T6836] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.036797][ T6836] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.165820][ T7170] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 153.200596][ T7170] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 153.220869][ T7170] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 153.282096][ T7175] netlink: 65039 bytes leftover after parsing attributes in process `syz-executor.3'. [ 153.400356][ T3582] Bluetooth: hci0: command tx timeout [ 153.429040][ T3673] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.463772][ T3673] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.499802][ T4249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.509850][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 153.531053][ T4249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.548975][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 154.146627][ T7202] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 154.171556][ T7202] netlink: 61951 bytes leftover after parsing attributes in process `syz-executor.1'. [ 154.304961][ T7196] device syzkaller0 entered promiscuous mode [ 154.375784][ T7216] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 154.386289][ T7216] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 154.403421][ T7216] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 154.420434][ T7222] bridge0: port 3(bond0) entered blocking state [ 154.490702][ T7222] bridge0: port 3(bond0) entered disabled state [ 154.516852][ T7222] device bond0 entered promiscuous mode [ 154.534843][ T7222] device bond_slave_0 entered promiscuous mode [ 154.553802][ T7222] device bond_slave_1 entered promiscuous mode [ 154.573175][ T7222] bridge0: port 3(bond0) entered blocking state [ 154.579536][ T7222] bridge0: port 3(bond0) entered forwarding state [ 154.640117][ T7223] device bond0 left promiscuous mode [ 154.665025][ T7223] device bond_slave_0 left promiscuous mode [ 154.695974][ T7223] device bond_slave_1 left promiscuous mode [ 154.711571][ T7223] bridge0: port 3(bond0) entered disabled state [ 155.031578][ T7254] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 155.058163][ T7254] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 155.081599][ T7254] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 156.034291][ T7277] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 156.044256][ T7277] IPv6: NLM_F_CREATE should be specified when creating new route [ 156.054773][ T7277] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 156.062379][ T7277] IPv6: NLM_F_CREATE should be set when creating new route [ 156.069759][ T7277] IPv6: NLM_F_CREATE should be set when creating new route [ 156.077027][ T7277] IPv6: NLM_F_CREATE should be set when creating new route [ 156.189473][ T7287] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 156.214210][ T7287] netlink: 61951 bytes leftover after parsing attributes in process `syz-executor.1'. [ 156.271910][ T7285] netlink: 65039 bytes leftover after parsing attributes in process `syz-executor.4'. [ 156.338177][ T7293] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 156.462173][ T7296] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.473034][ T7296] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.634360][ T7301] : renamed from bridge0 [ 156.729625][ T7307] bridge0: port 3(bond0) entered blocking state [ 156.736266][ T7307] bridge0: port 3(bond0) entered disabled state [ 156.747878][ T7307] device bond0 entered promiscuous mode [ 156.754183][ T7307] device bond_slave_0 entered promiscuous mode [ 156.783251][ T7307] device bond_slave_1 entered promiscuous mode [ 156.790130][ T7307] bridge0: port 3(bond0) entered blocking state [ 156.796497][ T7307] bridge0: port 3(bond0) entered forwarding state [ 156.868345][ T7310] device bond0 left promiscuous mode [ 156.889779][ T7310] device bond_slave_0 left promiscuous mode [ 156.929039][ T7310] device bond_slave_1 left promiscuous mode [ 156.987659][ T7310] bridge0: port 3(bond0) entered disabled state [ 157.128115][ T7337] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 157.206016][ T7340] IPv6: NLM_F_CREATE should be specified when creating new route [ 157.231671][ T7340] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 157.238943][ T7340] IPv6: NLM_F_CREATE should be set when creating new route [ 157.246289][ T7340] IPv6: NLM_F_CREATE should be set when creating new route [ 157.253554][ T7340] IPv6: NLM_F_CREATE should be set when creating new route [ 157.441925][ T7347] netlink: 65039 bytes leftover after parsing attributes in process `syz-executor.4'. [ 158.093111][ T7378] validate_nla: 5 callbacks suppressed [ 158.093127][ T7378] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 158.117741][ T7378] IPv6: NLM_F_CREATE should be specified when creating new route [ 158.135798][ T7378] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 158.143090][ T7378] IPv6: NLM_F_CREATE should be set when creating new route [ 158.150393][ T7378] IPv6: NLM_F_CREATE should be set when creating new route [ 158.157621][ T7378] IPv6: NLM_F_CREATE should be set when creating new route [ 158.269659][ T7386] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.277777][ T7386] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.336502][ T7389] : renamed from bridge0 [ 158.456469][ T7403] bridge0: port 3(bond0) entered blocking state [ 158.468629][ T7403] bridge0: port 3(bond0) entered disabled state [ 158.478806][ T7403] device bond0 entered promiscuous mode [ 158.492244][ T7403] device bond_slave_0 entered promiscuous mode [ 158.558578][ T7403] device bond_slave_1 entered promiscuous mode [ 158.581197][ T7403] bridge0: port 3(bond0) entered blocking state [ 158.587527][ T7403] bridge0: port 3(bond0) entered forwarding state [ 158.659797][ T7411] device bond0 left promiscuous mode [ 158.686974][ T7411] device bond_slave_0 left promiscuous mode [ 158.705138][ T7411] device bond_slave_1 left promiscuous mode [ 158.734132][ T7411] bridge0: port 3(bond0) entered disabled state [ 159.696914][ T7436] bridge0: port 3(team0) entered disabled state [ 159.703456][ T7436] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.710897][ T7436] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.780035][ T7415] device syzkaller0 entered promiscuous mode [ 159.793914][ T7437] : renamed from bridge0 [ 160.463352][ T7489] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.0'. [ 160.830040][ T7501] netlink: 65039 bytes leftover after parsing attributes in process `syz-executor.0'. [ 161.206636][ T7522] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.1'. [ 161.669637][ T7543] netlink: 65039 bytes leftover after parsing attributes in process `syz-executor.2'. [ 162.774199][ T7592] device vxcan1 entered promiscuous mode [ 162.780031][ T7592] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 162.984878][ T7603] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.1'. [ 163.966465][ T7648] netlink: 65039 bytes leftover after parsing attributes in process `syz-executor.1'. [ 164.702421][ T7686] netlink: 16186 bytes leftover after parsing attributes in process `syz-executor.1'. [ 165.086246][ T7703] netlink: 65039 bytes leftover after parsing attributes in process `syz-executor.0'. [ 165.114329][ T7709] netlink: 16186 bytes leftover after parsing attributes in process `syz-executor.1'. [ 165.357005][ T7723] netlink: 64535 bytes leftover after parsing attributes in process `syz-executor.4'. [ 166.485278][ T7788] netlink: 16186 bytes leftover after parsing attributes in process `syz-executor.3'. [ 167.435306][ T7833] netlink: 65039 bytes leftover after parsing attributes in process `syz-executor.2'. [ 168.815045][ T7897] netlink: 65039 bytes leftover after parsing attributes in process `syz-executor.3'. [ 169.650151][ T7942] netlink: 65039 bytes leftover after parsing attributes in process `syz-executor.4'. [ 169.792829][ T7949] device lo entered promiscuous mode [ 170.733395][ T7988] device lo entered promiscuous mode [ 170.915257][ T8003] netlink: 65039 bytes leftover after parsing attributes in process `syz-executor.4'. [ 172.620654][ T8110] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 172.641002][ T8110] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 173.566875][ T8151] netlink: 65043 bytes leftover after parsing attributes in process `syz-executor.0'. [ 173.576565][ T8150] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 256 (only 8 groups) [ 174.251726][ T8165] device pim6reg1 entered promiscuous mode [ 174.426229][ T8191] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 256 (only 8 groups) [ 174.662607][ T8200] netlink: 65043 bytes leftover after parsing attributes in process `syz-executor.2'. [ 174.879289][ T8218] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 174.900414][ T8218] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 174.987600][ T8228] netlink: 65043 bytes leftover after parsing attributes in process `syz-executor.3'. [ 175.640428][ T3574] Bluetooth: hci4: command 0x0406 tx timeout [ 175.985441][ T8292] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 176.020339][ T8292] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 176.243343][ T8308] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 256 (only 8 groups) [ 176.289425][ T8313] device pim6reg1 entered promiscuous mode [ 176.703843][ T8328] netlink: 14568 bytes leftover after parsing attributes in process `syz-executor.3'. [ 176.938751][ T8348] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 176.957989][ T8348] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 179.019679][ T8436] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 179.303794][ T8440] device pim6reg1 entered promiscuous mode [ 179.995453][ T8489] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 180.009577][ T8489] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 181.226319][ T8523] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 181.247969][ T8523] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 181.752640][ T8542] device pim6reg1 entered promiscuous mode [ 182.077773][ T8567] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 182.094971][ T8567] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 182.394308][ T8574] device sit0 entered promiscuous mode [ 184.417439][ T8628] device sit0 entered promiscuous mode [ 185.261075][ T8654] device pim6reg1 entered promiscuous mode [ 185.569774][ T8660] IPv6: NLM_F_CREATE should be specified when creating new route [ 186.396772][ T8687] device sit0 left promiscuous mode [ 186.477441][ T8688] device sit0 entered promiscuous mode [ 187.308044][ T8696] IPv6: NLM_F_CREATE should be specified when creating new route [ 187.323891][ T8696] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'. [ 188.483950][ T8729] device pim6reg1 entered promiscuous mode [ 191.133760][ T8809] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.2'. [ 191.583439][ T8826] device pim6reg1 entered promiscuous mode [ 192.866664][ T8876] device pim6reg1 entered promiscuous mode [ 192.876929][ T3574] Bluetooth: hci2: unexpected event 0x16 length: 15 > 6 [ 192.892063][ T8891] netlink: 35347 bytes leftover after parsing attributes in process `syz-executor.1'. [ 194.076156][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.082544][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.606836][ T8927] device sit0 left promiscuous mode [ 196.685613][ T8938] device sit0 entered promiscuous mode [ 196.876046][ T8948] netlink: 35347 bytes leftover after parsing attributes in process `syz-executor.4'. [ 196.984187][ T3574] Bluetooth: hci4: unexpected event 0x16 length: 15 > 6 [ 197.365725][ T8963] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.2'. [ 197.752656][ T8966] device pim6reg1 entered promiscuous mode [ 199.041782][ T3574] Bluetooth: hci3: unexpected event 0x16 length: 15 > 6 [ 201.243841][ T3582] Bluetooth: hci2: command 0x0406 tx timeout [ 203.412280][ T9093] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 203.432333][ T9093] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 203.476684][ T9093] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 204.035628][ T9121] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 204.070603][ T9121] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 204.118006][ T9124] device pim6reg1 entered promiscuous mode [ 204.390315][ T9127] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 205.778581][ T9164] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 205.788776][ T9164] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 205.812277][ T9164] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 206.984431][ T9191] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 209.291858][ T9275] syz-executor.3 uses obsolete (PF_INET,SOCK_PACKET) [ 209.371218][ T9275] Y4`Ҙ: renamed from lo [ 210.000654][ T9310] Y4`Ҙ: renamed from lo [ 211.224417][ T9347] netlink: 4083 bytes leftover after parsing attributes in process `syz-executor.1'. [ 211.492493][ T3574] Bluetooth: hci3: command 0x0406 tx timeout [ 211.514396][ T9358] device lo left promiscuous mode [ 211.598365][ T9358] Y4`Ҙ: renamed from lo [ 215.538859][ T9488] validate_nla: 5 callbacks suppressed [ 215.538874][ T9488] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 215.578139][ T9488] netlink: 61951 bytes leftover after parsing attributes in process `syz-executor.2'. [ 216.023313][ T9500] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 217.175099][ T9526] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 217.200570][ T9525] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 217.208672][ T9525] netlink: 61951 bytes leftover after parsing attributes in process `syz-executor.2'. [ 217.211619][ T9526] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.4'. [ 217.348121][ T9530] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 217.406171][ T9534] sctp: [Deprecated]: syz-executor.3 (pid 9534) Use of int in max_burst socket option deprecated. [ 217.406171][ T9534] Use struct sctp_assoc_value instead [ 218.273452][ T9557] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 218.305608][ T9557] netlink: 61951 bytes leftover after parsing attributes in process `syz-executor.4'. [ 218.321211][ T9563] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 218.685412][ T9590] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 218.694114][ T9590] netlink: 61951 bytes leftover after parsing attributes in process `syz-executor.0'. [ 219.789070][ T9671] sctp: [Deprecated]: syz-executor.1 (pid 9671) Use of int in max_burst socket option deprecated. [ 219.789070][ T9671] Use struct sctp_assoc_value instead [ 220.867796][ T26] audit: type=1804 audit(1718490227.696:16): pid=9706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1514712221/syzkaller.IwqtAU/240/memory.events" dev="sda1" ino=1968 res=1 errno=0 [ 221.101863][ T26] audit: type=1800 audit(1718490227.706:17): pid=9706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1968 res=0 errno=0 [ 221.124147][ T26] audit: type=1804 audit(1718490227.756:18): pid=9706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1514712221/syzkaller.IwqtAU/240/memory.events" dev="sda1" ino=1968 res=1 errno=0 [ 221.156247][ T26] audit: type=1800 audit(1718490227.756:19): pid=9706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1968 res=0 errno=0 [ 221.517176][ T9729] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. [ 222.376759][ T9760] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. [ 223.820364][ T9812] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.3'. [ 224.737538][ T9838] syz-executor.3[9838] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 224.737629][ T9838] syz-executor.3[9838] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 224.994775][ T9854] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. [ 225.196873][ T9865] Dead loop on virtual device ip6_vti0, fix it urgently! [ 225.293205][ T9874] syz-executor.3[9874] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 225.293303][ T9874] syz-executor.3[9874] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 225.878839][ T9904] syz-executor.3[9904] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 225.901841][ T9904] syz-executor.3[9904] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 225.942535][ T9902] Dead loop on virtual device ip6_vti0, fix it urgently! [ 226.607125][ T9934] netlink: 134780 bytes leftover after parsing attributes in process `syz-executor.0'. [ 226.677622][ T9934] tc_dump_action: action bad kind [ 226.892099][ T3574] Bluetooth: hci4: unexpected event 0x01 length: 15 > 1 [ 226.921285][ T9948] device syzkaller0 entered promiscuous mode [ 227.306503][ T9977] netlink: 134780 bytes leftover after parsing attributes in process `syz-executor.1'. [ 227.411936][ T9981] Dead loop on virtual device ip6_vti0, fix it urgently! [ 227.420054][ T9977] tc_dump_action: action bad kind [ 227.779505][ T9993] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 227.817467][ T9993] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 227.981364][ T9998] device syzkaller0 entered promiscuous mode [ 228.036810][T10010] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 228.155667][T10010] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 228.171839][T10013] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 228.192163][T10010] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 228.218413][T10016] Dead loop on virtual device ip6_vti0, fix it urgently! [ 228.245063][T10014] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 228.327174][ T3574] Bluetooth: hci2: unexpected event 0x01 length: 15 > 1 [ 228.327318][T10028] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 228.375613][T10028] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 228.380423][T10032] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 228.396698][T10032] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 228.405109][T10032] CPU: 0 PID: 10032 Comm: syz-executor.1 Not tainted 6.1.93-syzkaller #0 [ 228.413506][T10032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 228.423550][T10032] RIP: 0010:dev_map_enqueue+0x2d/0x340 [ 228.429023][T10032] Code: 41 56 41 55 41 54 53 48 83 ec 10 49 89 d5 49 89 f7 48 89 fd 49 bc 00 00 00 00 00 fc ff df e8 6a 65 df ff 48 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 ef e8 24 e5 36 00 4c 8b 75 00 48 83 c5 [ 228.448620][T10032] RSP: 0018:ffffc900049076c0 EFLAGS: 00010246 [ 228.454688][T10032] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000040000 [ 228.462650][T10032] RDX: ffffc90014ebe000 RSI: 0000000000000148 RDI: 0000000000000149 [ 228.470611][T10032] RBP: 0000000000000000 R08: ffffffff888aa573 R09: ffffffff888aa48b [ 228.478571][T10032] R10: 0000000000000004 R11: ffff88801b69d940 R12: dffffc0000000000 [ 228.486530][T10032] R13: ffff8880780d6000 R14: ffff8880b9839298 R15: ffff8880646f7070 [ 228.494488][T10032] FS: 00007f2e398df6c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 228.503406][T10032] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 228.509973][T10032] CR2: 0000001b2e225000 CR3: 000000007c0c4000 CR4: 00000000003506f0 [ 228.517947][T10032] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 228.525909][T10032] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 228.533872][T10032] Call Trace: [ 228.537138][T10032] [ 228.540053][T10032] ? __die_body+0x5e/0xa0 [ 228.544374][T10032] ? die_addr+0x95/0xc0 [ 228.548522][T10032] ? exc_general_protection+0x3ae/0x590 [ 228.554070][T10032] ? asm_exc_general_protection+0x22/0x30 [ 228.559783][T10032] ? xdp_do_redirect_frame+0x21b/0x660 [ 228.565234][T10032] ? xdp_do_redirect_frame+0x303/0x660 [ 228.570681][T10032] ? dev_map_enqueue+0x2d/0x340 [ 228.575520][T10032] xdp_do_redirect_frame+0x323/0x660 [ 228.580797][T10032] bpf_test_run_xdp_live+0xbf4/0x1ea0 [ 228.586158][T10032] ? stack_trace_save+0x113/0x1c0 [ 228.591179][T10032] ? __lock_acquire+0x125b/0x1f80 [ 228.596199][T10032] ? bpf_test_run_xdp_live+0x75c/0x1ea0 [ 228.601729][T10032] ? xdp_convert_md_to_buff+0x330/0x330 [ 228.607271][T10032] ? __might_fault+0xa1/0x110 [ 228.611936][T10032] ? __might_sleep+0xb0/0xb0 [ 228.616513][T10032] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 228.622744][T10032] ? __might_fault+0xa1/0x110 [ 228.627406][T10032] ? __might_fault+0xbd/0x110 [ 228.632069][T10032] ? _copy_from_user+0x109/0x170 [ 228.636987][T10032] ? bpf_test_init+0x15a/0x180 [ 228.641737][T10032] ? xdp_convert_md_to_buff+0x5b/0x330 [ 228.647183][T10032] bpf_prog_test_run_xdp+0x7d1/0x1130 [ 228.652549][T10032] ? dev_put+0x80/0x80 [ 228.656608][T10032] ? dev_put+0x80/0x80 [ 228.660664][T10032] bpf_prog_test_run+0x32f/0x3a0 [ 228.665594][T10032] __sys_bpf+0x3eb/0x6c0 [ 228.669825][T10032] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 228.675189][T10032] ? print_irqtrace_events+0x210/0x210 [ 228.680636][T10032] ? print_irqtrace_events+0x210/0x210 [ 228.686087][T10032] ? syscall_enter_from_user_mode+0x2e/0x230 [ 228.692054][T10032] ? lockdep_hardirqs_on+0x94/0x130 [ 228.697238][T10032] __x64_sys_bpf+0x78/0x90 [ 228.701647][T10032] do_syscall_64+0x3b/0xb0 [ 228.706052][T10032] ? clear_bhb_loop+0x45/0xa0 [ 228.710721][T10032] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 228.716605][T10032] RIP: 0033:0x7f2e38a7cea9 [ 228.721013][T10032] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 228.740599][T10032] RSP: 002b:00007f2e398df0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 228.748998][T10032] RAX: ffffffffffffffda RBX: 00007f2e38bb3f80 RCX: 00007f2e38a7cea9 [ 228.756960][T10032] RDX: 0000000000000050 RSI: 0000000020000240 RDI: 000000000000000a [ 228.764914][T10032] RBP: 00007f2e38aebff4 R08: 0000000000000000 R09: 0000000000000000 [ 228.772865][T10032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.780816][T10032] R13: 000000000000000b R14: 00007f2e38bb3f80 R15: 00007fff4b87f0d8 [ 228.788778][T10032] [ 228.791777][T10032] Modules linked in: [ 228.795738][T10032] ---[ end trace 0000000000000000 ]--- [ 228.801207][T10032] RIP: 0010:dev_map_enqueue+0x2d/0x340 [ 228.806676][T10032] Code: 41 56 41 55 41 54 53 48 83 ec 10 49 89 d5 49 89 f7 48 89 fd 49 bc 00 00 00 00 00 fc ff df e8 6a 65 df ff 48 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 ef e8 24 e5 36 00 4c 8b 75 00 48 83 c5 2024/06/15 22:23:55 SYZFATAL: failed to send *flatrpc.ExecutorMessageRawT: write tcp 10.128.1.149:43602->10.128.0.163:30024: write: broken pipe [ 228.826304][T10032] RSP: 0018:ffffc900049076c0 EFLAGS: 00010246 [ 228.832388][T10032] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000040000 [ 228.840376][T10032] RDX: ffffc90014ebe000 RSI: 0000000000000148 RDI: 0000000000000149 [ 228.848354][T10032] RBP: 0000000000000000 R08: ffffffff888aa573 R09: ffffffff888aa48b [ 228.856358][T10032] R10: 0000000000000004 R11: ffff88801b69d940 R12: dffffc0000000000 [ 228.864370][T10032] R13: ffff8880780d6000 R14: ffff8880b9839298 R15: ffff8880646f7070 [ 228.872384][T10032] FS: 00007f2e398df6c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 228.881352][T10032] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 228.887946][T10032] CR2: 0000001b2e225000 CR3: 000000007c0c4000 CR4: 00000000003506f0 [ 228.895955][T10032] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 228.903955][T10032] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 228.911973][T10032] Kernel panic - not syncing: Fatal exception in interrupt [ 228.919378][T10032] Kernel Offset: disabled [ 228.923689][T10032] Rebooting in 86400 seconds..