last executing test programs: 4m29.204289977s ago: executing program 2 (id=6177): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'macvlan0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000300)=""/225) 4m28.983015226s ago: executing program 2 (id=6181): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1541, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'ip6gre0\x00', 0x84aebfbd6349b7f2}) 4m28.805474524s ago: executing program 2 (id=6184): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x840) 4m28.548810565s ago: executing program 2 (id=6191): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@enum64={0x4, 0x1, 0x0, 0x13, 0x1, 0x1, [{0x1, 0x10005, 0x5}]}]}, {0x0, [0x2e, 0x5f, 0x5f, 0x5f]}}, 0x0, 0x36, 0x0, 0x9}, 0x28) 4m28.451458999s ago: executing program 2 (id=6192): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x72}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 4m28.332673074s ago: executing program 2 (id=6197): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000300), 0x12) write$cgroup_freezer_state(r1, 0x0, 0x0) 4m13.003942264s ago: executing program 32 (id=6197): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000300), 0x12) write$cgroup_freezer_state(r1, 0x0, 0x0) 9.562635338s ago: executing program 3 (id=8645): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x0, 0x200000000}, 0x101001, 0x7, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffbff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x104000, 0x2, 0xfffffffe, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000014006b04000000d86e6c1d0002887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab5", 0x40}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4085}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x541b, &(0x7f0000000040)={'ip6gretap0\x00', @local}) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x4008804) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000540)={0x1, 0x80, 0x4, 0x3, 0x7, 0x5, 0x0, 0x9, 0x80020, 0x9, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x5, @perf_bp={&(0x7f0000000340), 0xd}, 0x10005, 0x9, 0xffffff98, 0x4, 0x7, 0x6, 0x9, 0x0, 0x3ff}) r5 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89ef, 0x0) perf_event_open$cgroup(&(0x7f00000006c0)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x6fe0}, 0xa0, 0x2, 0x7fffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003440)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x3, &(0x7f0000003ac0), 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0300000004"], 0x48) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc5d, 0x0, 0x0, 0x0, 0x0, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000079105f0000000000e4ae8762530f395c4753b7efe0e405000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019007b29e00212ba0d8105040a601100fe02040b067c55a1bc001400090006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 9.217491064s ago: executing program 3 (id=8652): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ceb71c0010ec90db133c22a690ae7080000000000040875b0089"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=@raw=[@func, @map_fd, @exit, @jmp={0x5, 0x0, 0x4}], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) 8.939982805s ago: executing program 3 (id=8655): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.743367774s ago: executing program 3 (id=8658): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0x9}, 0x80, 0x0}, 0x4008001) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xa, 0x13, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008500000051000000186500000c00000000000000020000009500000000000000bf91000000000000b7020000000000008500000085000000b700000000000000"], &(0x7f0000000240)='syzkaller\x00', 0xb, 0x0, &(0x7f0000000500), 0x41000, 0x20, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x8a0}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000680)=[0x1], &(0x7f00000006c0)=[{0x4, 0x3}], 0x10, 0x8}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0xb, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe2f}, 0x80) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000000c0)=0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r3}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 7.520523917s ago: executing program 3 (id=8661): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x21, 0x2, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000000000000000001000850000009b0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0xb0}, 0x40000002) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 6.155682605s ago: executing program 3 (id=8670): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0x9}, 0x80, 0x0}, 0x4008001) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xa, 0x13, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008500000051000000186500000c00000000000000020000009500000000000000bf91000000000000b7020000000000008500000085000000b700000000000000"], &(0x7f0000000240)='syzkaller\x00', 0xb, 0x0, &(0x7f0000000500), 0x41000, 0x20, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x8a0}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000680)=[0x1], &(0x7f00000006c0)=[{0x4, 0x3}], 0x10, 0x8}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0xb, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe2f}, 0x80) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000000c0)=0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r3}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 4.954605667s ago: executing program 1 (id=8679): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x4, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xf, 0x4, 0x2, 0xdc, 0x7, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xd, 0xffffffffffffffff, 0x9) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_clone(0x14112000, &(0x7f0000000280)="3f4dc3abb9b528cd490c740eb667a3ceea393659598614c6ffad985df1dfc2112c515e88473f33ce6921ba14c2c42efd4af3ee172854db54fa971a3bc773bb7453170f0c5a3616bbfd689669c239457dd9137ea9fc1f46c6f2e1ee117d07abbe075844e17a7c464992b7ddecebd6ad2ce6b9b7641d7011fc5fc417389eb335069debf840bc5176f122fc725d9138af0354efe217d886115970f9d4f946b150030b848f7cf4d593350da2e0", 0xab, &(0x7f0000000040), &(0x7f0000000340), &(0x7f0000000380)) perf_event_open(&(0x7f0000000180)={0x2, 0xa0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, r1, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000080)) 4.523918635s ago: executing program 0 (id=8682): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xb, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.295440245s ago: executing program 0 (id=8684): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000002200)=""/275, 0x113}, {&(0x7f0000000600)=""/245, 0xf5}, {&(0x7f0000000f00)=""/4042, 0xfca}, {&(0x7f0000000500)=""/190, 0xbe}, {&(0x7f00000007c0)=""/252, 0xfc}, {&(0x7f0000001f00)=""/208, 0xd0}, {&(0x7f0000000940)=""/198, 0xc6}, {&(0x7f00000000c0)=""/20, 0x14}, {&(0x7f0000000700)=""/102, 0x66}], 0x9}, 0x40012100) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0xa, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x10000) 4.156205031s ago: executing program 4 (id=8685): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x9, 0x7, 0xdd, 0xa, 0x80, 0xffffffffffffffff, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x20, 0x61, 0x11, 0x6c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 4.000981858s ago: executing program 4 (id=8686): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0x9}, 0x80, 0x0}, 0x4008001) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xa, 0x13, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008500000051000000186500000c00000000000000020000009500000000000000bf91000000000000b7020000000000008500000085000000b700000000000000"], &(0x7f0000000240)='syzkaller\x00', 0xb, 0x0, &(0x7f0000000500), 0x41000, 0x20, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x8a0}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000680)=[0x1], &(0x7f00000006c0)=[{0x4, 0x3}], 0x10, 0x8}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0xb, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe2f}, 0x80) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f00000000c0)=0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r4}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 3.859137504s ago: executing program 1 (id=8689): bpf$MAP_CREATE(0x1101000000000000, &(0x7f00000005c0)=ANY=[@ANYBLOB="0500000080000000001a0000f700"], 0x50) 2.962775962s ago: executing program 1 (id=8691): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000008}, 0x18000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000001280), 0x4) sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0x2}], 0x1}, 0x20000801) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) 2.911280385s ago: executing program 0 (id=8693): r0 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_procfs$namespace(r0, &(0x7f00000001c0)='ns/cgroup\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000000000000000000000009500160000000000e2bac15d3b6641a215f099e26603a050337b2ccc70a9f928ba3c529bb6e7365e7e246317380f5884d79663e7fcaa89795d7b10e88378c33265a7af06040e3d0bbc6a5864dfa023c6ac1da574242785bbb4ece12b11da52496875e1e384042aad63a3094bf3bc0e40a79960f9f1610940e67e30611d9873d1e6cb9c4cce44c999c49ff52a6400192fd021d7158438d7686a6f66778022c93c544189b684754e7e0f77a4f498609e53104c8aa70632fcc58c757bbc06f6472622dce2729d7296959ce003ec84acd015e352484c42fc29e5aea62fb7977813f7"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900), 0x0, 0x0, 0x0, 0x6000}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES32=r4, @ANYBLOB], 0x10) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0xd6, 0x4, 0x1}, 0x50) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x72bd1de2ad10b2b3, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8940, &(0x7f0000000080)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002240), &(0x7f0000002300), 0x8001, r5}, 0x38) 2.816517589s ago: executing program 4 (id=8694): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xb, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.519420251s ago: executing program 4 (id=8695): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) 2.212707835s ago: executing program 5 (id=8697): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) 2.134578008s ago: executing program 4 (id=8698): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x2000000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="0600000004000000060000000006"], 0x50) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x62a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000100), 0x200df000, r0, 0x0, 0x80000fffe}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) 1.999057834s ago: executing program 5 (id=8699): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x4, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xf, 0x4, 0x2, 0xdc, 0x7, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xd, 0xffffffffffffffff, 0x9) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_clone(0x14112000, &(0x7f0000000280)="3f4dc3abb9b528cd490c740eb667a3ceea393659598614c6ffad985df1dfc2112c515e88473f33ce6921ba14c2c42efd4af3ee172854db54fa971a3bc773bb7453170f0c5a3616bbfd689669c239457dd9137ea9fc1f46c6f2e1ee117d07abbe075844e17a7c464992b7ddecebd6ad2ce6b9b7641d7011fc5fc417389eb335069debf840bc5176f122fc725d9138af0354efe217d886115970f9d4f946b150030b848f7cf4d593350da2e0", 0xab, &(0x7f0000000040), &(0x7f0000000340), &(0x7f0000000380)) perf_event_open(&(0x7f0000000180)={0x2, 0xa0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, r1, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000080)) 1.706503016s ago: executing program 1 (id=8700): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ceb71c0010ec90db133c22a690ae7080000000000040875b0089"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=@raw=[@func, @map_fd, @exit, @jmp={0x5, 0x0, 0x4}], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 1.286827454s ago: executing program 0 (id=8701): bpf$MAP_CREATE(0x1101000000000000, 0x0, 0x50) 1.285036584s ago: executing program 1 (id=8702): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000002200)=""/275, 0x113}, {&(0x7f0000000600)=""/245, 0xf5}, {&(0x7f0000000f00)=""/4042, 0xfca}, {&(0x7f0000000500)=""/190, 0xbe}, {&(0x7f00000007c0)=""/252, 0xfc}, {&(0x7f0000001f00)=""/208, 0xd0}, {&(0x7f0000000940)=""/198, 0xc6}, {&(0x7f00000000c0)=""/20, 0x14}, {&(0x7f0000000700)=""/102, 0x66}], 0x9}, 0x40012100) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0xa, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x10000) 1.263114235s ago: executing program 4 (id=8703): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) 1.16291918s ago: executing program 0 (id=8704): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0x9}, 0x80, 0x0}, 0x4008001) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xa, 0x13, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008500000051000000186500000c00000000000000020000009500000000000000bf91000000000000b7020000000000008500000085000000b700000000000000"], &(0x7f0000000240)='syzkaller\x00', 0xb, 0x0, &(0x7f0000000500), 0x41000, 0x20, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x8a0}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000680)=[0x1], &(0x7f00000006c0)=[{0x4, 0x3}], 0x10, 0x8}, 0x94) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0xb, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe2f}, 0x80) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000000c0)=0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 269.515199ms ago: executing program 5 (id=8705): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xb, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 238.02445ms ago: executing program 1 (id=8706): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pimreg0\x00', 0x1}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000b40), &(0x7f0000000000)=""/6, 0x2}, 0x20) close(r0) 189.796542ms ago: executing program 0 (id=8707): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) 95.364656ms ago: executing program 5 (id=8708): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) 44.523118ms ago: executing program 5 (id=8709): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x20, 0x61, 0x11, 0x6c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 0s ago: executing program 5 (id=8710): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000004"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x6, 0xfd, 0x0, 0x0, 0x0, 0xc, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffdd) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001000000", @ANYRES32], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000016000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x49, &(0x7f0000000180), 0x4) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff52, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): veth0_to_bridge: link becomes ready [ 849.358180][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 849.380926][ T4355] bridge0: port 1(bridge_slave_0) entered blocking state [ 849.388132][ T4355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 849.446835][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 849.465209][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 849.494395][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 849.525958][ T4355] bridge0: port 2(bridge_slave_1) entered blocking state [ 849.533103][ T4355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 849.582543][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 849.627527][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 849.665652][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 849.687378][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 849.714058][T18766] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 849.756929][T18766] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 849.782686][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 849.791470][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 849.800644][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 849.810972][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 849.832021][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 849.844888][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 849.853863][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 849.896515][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 850.568923][T10444] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 850.587908][T10444] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 850.605440][T18291] Bluetooth: hci0: command 0x0419 tx timeout [ 850.680417][T18766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 851.776539][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 851.788784][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 851.836446][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 851.855951][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 851.883816][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 851.915600][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 851.953173][T18766] device veth0_vlan entered promiscuous mode [ 851.993219][T18766] device veth1_vlan entered promiscuous mode [ 852.048731][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 852.085715][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 852.097227][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 852.126764][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 852.146063][T18766] device veth0_macvtap entered promiscuous mode [ 852.177353][T18766] device veth1_macvtap entered promiscuous mode [ 852.220399][T18766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 852.252858][T18766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 852.286238][T18766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 852.303885][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 852.340776][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 852.376324][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 852.403891][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 852.429375][T18766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 852.454824][T18766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 852.493620][T18766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 852.530111][T18766] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.570483][T18766] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.585216][T18766] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.594240][T18766] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.630364][T10444] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 852.656342][T10444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 852.833842][ T4339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 852.851703][ T4339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 852.892544][T10444] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 852.909433][T17666] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 852.944854][T17666] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 852.954959][T10444] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 853.947544][ T4282] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 853.958176][ T4282] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 853.967552][ T4282] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 853.978533][ T4281] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 853.994447][ T4281] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 854.008820][ T4281] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 854.658327][T19298] chnl_net:caif_netlink_parms(): no params data found [ 854.772598][ T4355] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.946688][ T4355] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.133838][ T4355] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.289764][ T4355] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.357271][T19298] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.364405][T19298] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.430437][T19298] device bridge_slave_0 entered promiscuous mode [ 855.462042][T19298] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.489567][T19298] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.516075][T19298] device bridge_slave_1 entered promiscuous mode [ 855.669827][T19298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 855.714337][T19298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 855.864668][T19298] team0: Port device team_slave_0 added [ 856.007493][T19298] team0: Port device team_slave_1 added [ 856.055170][T18291] Bluetooth: hci2: command 0x0409 tx timeout [ 856.140838][T19298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 856.157401][T19298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 856.245912][T19298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 856.279889][T19298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 856.294927][T19298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 856.372273][T19298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 856.609891][T19298] device hsr_slave_0 entered promiscuous mode [ 856.627268][T19298] device hsr_slave_1 entered promiscuous mode [ 856.644932][T19298] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 856.652541][T19298] Cannot create hsr debugfs directory [ 857.809385][T19483] tap0: tun_chr_ioctl cmd 1074025677 [ 857.837807][T19483] tap0: linktype set to 270 [ 857.978087][ T4355] device veth0_macvtap left promiscuous mode [ 857.997206][ T4355] device veth0_vlan left promiscuous mode [ 858.125262][T18291] Bluetooth: hci2: command 0x041b tx timeout [ 858.426863][ T4355] team0 (unregistering): Port device geneve1 removed [ 858.886318][ T4355] team0 (unregistering): Port device virt_wifi0 removed [ 859.487800][ T4355] team0 (unregistering): Port device team_slave_1 removed [ 859.590896][ T4355] team0 (unregistering): Port device team_slave_0 removed [ 859.704042][ T4355] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 859.832617][ T4355] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 860.205202][T18291] Bluetooth: hci2: command 0x040f tx timeout [ 860.896597][ T4355] bond0 (unregistering): Released all slaves [ 861.158209][T19298] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 861.239813][T19298] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 861.284167][T19298] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 861.353832][T19298] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 861.781845][T19298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 861.821442][T17666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 861.849858][T17666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 861.903106][T19298] 8021q: adding VLAN 0 to HW filter on device team0 [ 861.925630][T19697] syzkaller0: tun_chr_ioctl cmd 1074025678 [ 861.946083][T19697] syzkaller0: group set to 0 [ 861.953481][T17667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 861.988814][T17667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 862.025766][T17667] bridge0: port 1(bridge_slave_0) entered blocking state [ 862.032909][T17667] bridge0: port 1(bridge_slave_0) entered forwarding state [ 862.124726][T17667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 862.133288][T17667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 862.187191][T17667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 862.213725][T17667] bridge0: port 2(bridge_slave_1) entered blocking state [ 862.220934][T17667] bridge0: port 2(bridge_slave_1) entered forwarding state [ 862.270755][T17667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 862.284955][T18291] Bluetooth: hci2: command 0x0419 tx timeout [ 862.314670][T17667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 862.376137][T17667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 862.411969][T17667] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 862.435975][T17667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 862.476819][T17667] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 862.521754][T19298] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 862.566508][T19298] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 862.651003][T17667] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 862.665661][T17667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 862.699224][T17667] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 862.725916][T17667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 862.763865][T17667] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 862.815416][T17667] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 863.588559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 863.620866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 863.673927][T19298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 863.777249][T17666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 863.823743][T17666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 863.926584][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 863.960995][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 864.027163][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 864.057675][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 864.185353][T19298] device veth0_vlan entered promiscuous mode [ 864.208175][T19298] device veth1_vlan entered promiscuous mode [ 864.307534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 864.347939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 864.379316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 864.403585][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 864.432310][T19298] device veth0_macvtap entered promiscuous mode [ 864.461489][T19298] device veth1_macvtap entered promiscuous mode [ 864.533983][T19298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 864.570891][T19298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.588245][T19298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 864.624924][T19298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.660634][T19298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 864.689019][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 864.717987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 864.742581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 864.771314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 864.803505][T19298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 864.831482][T19298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.881796][T19298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 864.911563][T19298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.946219][T19298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 864.957494][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 864.977068][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 865.010821][T19298] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.045894][T19298] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.054652][T19298] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.073617][T19298] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.290040][T10444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 865.312941][T10444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 865.369113][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 865.393479][T10444] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 865.415318][T10444] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 865.443815][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 866.330994][ T4282] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 866.341175][ T4282] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 866.350775][ T4282] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 866.363532][ T4281] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 866.385426][ T4281] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 866.393071][ T4281] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 866.592974][T17666] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.739726][T17666] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.940169][T17666] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.129623][T17666] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.213045][T19870] chnl_net:caif_netlink_parms(): no params data found [ 867.624265][T19870] bridge0: port 1(bridge_slave_0) entered blocking state [ 867.649119][T19870] bridge0: port 1(bridge_slave_0) entered disabled state [ 867.681775][T19870] device bridge_slave_0 entered promiscuous mode [ 867.758022][T19870] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.771789][T19870] bridge0: port 2(bridge_slave_1) entered disabled state [ 867.806708][T19870] device bridge_slave_1 entered promiscuous mode [ 868.269612][T19870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 868.321673][T19870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 868.445242][T18291] Bluetooth: hci3: command 0x0409 tx timeout [ 868.639025][T19870] team0: Port device team_slave_0 added [ 868.654072][T19870] team0: Port device team_slave_1 added [ 868.874410][T19870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 868.899005][T19870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 868.998643][T19870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 869.180523][T19870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 869.194928][T19870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 869.318764][T19870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 869.598275][T19870] device hsr_slave_0 entered promiscuous mode [ 869.614137][T19870] device hsr_slave_1 entered promiscuous mode [ 869.639853][T19870] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 869.664927][T19870] Cannot create hsr debugfs directory [ 870.047919][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.054408][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.525701][T18291] Bluetooth: hci3: command 0x041b tx timeout [ 870.918013][ T3637] udevd[3637]: worker [20020] terminated by signal 33 (Unknown signal 33) [ 870.984949][ T3637] udevd[3637]: worker [20020] failed while handling '/devices/virtual/net/lapb6' [ 871.015508][ T3637] udevd[3637]: worker [18348] terminated by signal 33 (Unknown signal 33) [ 871.024106][ T3637] udevd[3637]: worker [18348] failed while handling '/devices/virtual/block/loop2' [ 871.095368][T17666] device veth0_macvtap left promiscuous mode [ 871.102755][T17666] device veth1_vlan left promiscuous mode [ 871.121839][T17666] device veth0_vlan left promiscuous mode [ 871.559513][T17666] team0 (unregistering): Port device geneve1 removed [ 872.018448][T17666] team0 (unregistering): Port device virt_wifi0 removed [ 872.331471][T17666] team0 (unregistering): Port device team_slave_1 removed [ 872.429190][T17666] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 872.480589][T17666] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 872.611774][T18291] Bluetooth: hci3: command 0x040f tx timeout [ 873.121252][T17666] bond0 (unregistering): Released all slaves [ 873.461475][T19870] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 873.483679][T19870] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 873.509315][T19870] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 873.543480][T19870] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 873.783455][T19870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 873.819434][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 873.829885][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 873.846602][T19870] 8021q: adding VLAN 0 to HW filter on device team0 [ 873.918366][T10444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 873.936582][T10444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 873.967022][T10444] bridge0: port 1(bridge_slave_0) entered blocking state [ 873.974215][T10444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 874.005345][T10444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 874.038137][T10444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 874.053981][T10444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 874.087930][T10444] bridge0: port 2(bridge_slave_1) entered blocking state [ 874.095126][T10444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 874.151284][T10444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 874.191310][T10444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 874.279129][T19870] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 874.348508][T19870] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 874.377034][T10444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 874.391636][T10444] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 874.402599][T10444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 874.418069][T10444] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 874.430674][T10444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 874.440827][T10444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 874.454603][T10444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 874.468109][T10444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 874.477923][T10444] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 874.489991][T10444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 874.685486][T18291] Bluetooth: hci3: command 0x0419 tx timeout [ 875.449494][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 875.495061][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 875.509563][T19870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 875.578217][T17666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 875.618955][T17666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 875.716766][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 875.739444][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 875.783892][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 875.819462][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 875.862960][T19870] device veth0_vlan entered promiscuous mode [ 875.901201][T19870] device veth1_vlan entered promiscuous mode [ 876.059048][T19870] device veth0_macvtap entered promiscuous mode [ 876.091594][T10444] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 876.118961][T10444] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 876.155453][T10444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 876.187185][T10444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 876.226512][T10444] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 876.267438][T19870] device veth1_macvtap entered promiscuous mode [ 876.356236][T19870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 876.398131][T19870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.450437][T19870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 876.491244][T19870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.526473][T19870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 876.564998][T19870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.612920][T19870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 876.656692][T17666] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 876.669066][T17666] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 876.696934][T17666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 876.748692][T19870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 876.784848][T19870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.794714][T19870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 876.850748][T19870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.898235][T19870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 876.936213][T19870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.996987][T19870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 877.006295][T17666] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 877.043989][T17666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 877.108419][T19870] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.158831][T19870] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.186461][T19870] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.204847][T19870] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.431900][T10444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 877.455122][T10444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 877.522020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 877.530012][ T4360] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 877.548258][ T4360] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 877.592223][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 879.080758][T18291] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 879.091192][T18291] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 879.103930][T18291] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 879.113020][T18291] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 879.121027][T18291] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 879.135825][T18291] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 879.520755][T20356] chnl_net:caif_netlink_parms(): no params data found [ 879.748690][T10444] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.907800][T10444] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.980609][T20356] bridge0: port 1(bridge_slave_0) entered blocking state [ 880.002912][T20356] bridge0: port 1(bridge_slave_0) entered disabled state [ 880.034581][T20356] device bridge_slave_0 entered promiscuous mode [ 880.121524][T10444] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.168142][T20356] bridge0: port 2(bridge_slave_1) entered blocking state [ 880.214008][T20356] bridge0: port 2(bridge_slave_1) entered disabled state [ 880.249808][T20356] device bridge_slave_1 entered promiscuous mode [ 881.165051][ T4281] Bluetooth: hci1: command 0x0409 tx timeout [ 883.250812][ T4281] Bluetooth: hci1: command 0x041b tx timeout [ 884.471351][T10444] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.487684][T20356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 884.522010][T20356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 884.662765][T20356] team0: Port device team_slave_0 added [ 884.697624][T20356] team0: Port device team_slave_1 added [ 884.714443][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 884.734235][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 884.743290][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 884.752318][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 884.761323][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 884.770333][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 884.779326][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 884.788312][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 884.797314][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 884.806292][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 884.862457][T20492] netlink: 'syz.4.5942': attribute type 10 has an invalid length. [ 884.915903][T20492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 884.928008][T20492] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 884.978540][T20496] netlink: 'syz.4.5942': attribute type 10 has an invalid length. [ 884.995131][T20496] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5942'. [ 885.005532][T20496] device batadv0 entered promiscuous mode [ 885.032727][T20496] bond0: (slave batadv0): Releasing backup interface [ 885.059251][T20496] bridge0: port 3(batadv0) entered blocking state [ 885.078226][T20496] bridge0: port 3(batadv0) entered disabled state [ 885.235226][T20356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 885.242226][T20356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 885.324881][ T4281] Bluetooth: hci1: command 0x040f tx timeout [ 885.352081][T20356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 885.459824][T17667] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 885.460302][T20356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 885.469403][T17667] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 885.529035][T20356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 885.580427][T20356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 885.980083][T20356] device hsr_slave_0 entered promiscuous mode [ 886.053452][T20356] device hsr_slave_1 entered promiscuous mode [ 886.075390][T20356] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 886.083035][T20356] Cannot create hsr debugfs directory [ 886.235326][T10444] device ip6gretap0 left promiscuous mode [ 886.242296][T10444] …: port 1(ip6gretap0) entered disabled state [ 887.101150][T20577] netlink: 'syz.3.5977': attribute type 10 has an invalid length. [ 887.162238][T20577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 887.206413][T20577] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 887.295862][T20581] netlink: 'syz.3.5977': attribute type 10 has an invalid length. [ 887.340246][T20581] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5977'. [ 887.380487][T20581] device batadv0 entered promiscuous mode [ 887.404869][ T4281] Bluetooth: hci1: command 0x0419 tx timeout [ 887.510139][T20581] bond0: (slave batadv0): Releasing backup interface [ 887.579994][T20581] bridge0: port 3(batadv0) entered blocking state [ 887.600442][T20581] bridge0: port 3(batadv0) entered disabled state [ 887.788747][ T33] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 887.798098][ T33] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 889.008507][T10444] device veth1_vlan left promiscuous mode [ 889.534164][T10444] team0 (unregistering): Port device geneve1 removed [ 890.517860][T10444] team0 (unregistering): Port device team_slave_1 removed [ 890.627379][T10444] team0 (unregistering): Port device team_slave_0 removed [ 890.729370][T10444] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 890.843905][T10444] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 891.429887][T10444] bond0 (unregistering): Released all slaves [ 891.481800][T20715] device wg2 entered promiscuous mode [ 891.658575][T20356] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 891.719852][T20356] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 891.754694][T20356] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 891.838226][T20356] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 892.220548][T20356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 892.273098][T17666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 892.290340][T17666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 892.361753][T20356] 8021q: adding VLAN 0 to HW filter on device team0 [ 892.435344][T17666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 892.469223][T17666] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 892.507813][T17666] bridge0: port 1(bridge_slave_0) entered blocking state [ 892.514994][T17666] bridge0: port 1(bridge_slave_0) entered forwarding state [ 892.598936][T17666] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 892.658659][T17666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 892.705628][T17666] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 892.760165][T17666] bridge0: port 2(bridge_slave_1) entered blocking state [ 892.767360][T17666] bridge0: port 2(bridge_slave_1) entered forwarding state [ 892.981222][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 892.994105][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 893.021547][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 893.049091][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 893.067252][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 893.084267][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 893.121915][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 893.162663][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 893.202229][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 893.242830][T20356] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 893.280750][T20356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 893.312807][T10445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 893.339712][T10445] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 894.213216][T10445] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 894.230524][T10445] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 894.271788][T20356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 894.366555][T10444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 894.379172][T10444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 894.499525][T10445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 894.519997][T10445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 894.571533][T20356] device veth0_vlan entered promiscuous mode [ 894.590912][T10445] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 894.626109][T10445] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 894.656704][T20356] device veth1_vlan entered promiscuous mode [ 894.699238][T10445] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 894.825225][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 894.847977][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 894.882255][T20356] device veth0_macvtap entered promiscuous mode [ 894.911081][T20356] device veth1_macvtap entered promiscuous mode [ 894.960682][T20356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 895.002406][T20356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.054584][T20356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 895.114915][T20356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.154566][T20356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 895.175611][T20356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.234805][T20356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 895.280000][T20356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.321754][T20356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 895.384015][T17667] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 895.416785][T17667] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 895.441816][T17667] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 895.473871][T17667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 895.521975][T20356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 895.545696][T20356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.590254][T20356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 895.611394][T20356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.630060][T20356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 895.684840][T20356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.714803][T20356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 895.752558][T20356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.784528][T20356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 895.838713][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 895.866965][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 895.902778][T20356] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.954875][T20356] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.982011][T20356] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.019502][T20356] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.098963][T20896] netlink: 'syz.0.6091': attribute type 10 has an invalid length. [ 896.211015][T20896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 896.240750][T20896] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 896.706422][T10445] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 896.748351][T10445] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 896.786455][ T4355] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 896.794536][ T4355] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 896.810381][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 896.858490][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 897.333826][T20938] netlink: 'syz.0.6106': attribute type 10 has an invalid length. [ 897.462084][T20944] netlink: 'syz.3.6109': attribute type 10 has an invalid length. [ 897.500855][T20944] device batadv0 left promiscuous mode [ 897.522341][T20944] bridge0: port 3(batadv0) entered disabled state [ 897.549100][T20944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 897.559785][T20944] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 897.631380][T20945] netlink: 'syz.3.6109': attribute type 10 has an invalid length. [ 897.655148][T20945] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6109'. [ 897.674784][T20945] device batadv0 entered promiscuous mode [ 897.698503][T20945] bond0: (slave batadv0): Releasing backup interface [ 897.723601][T20945] bridge0: port 3(batadv0) entered blocking state [ 897.752180][T20945] bridge0: port 3(batadv0) entered disabled state [ 898.095607][T17666] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 898.104939][T17666] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 898.735636][T21000] syz.0.6136[21000] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 898.735733][T21000] syz.0.6136[21000] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 900.388004][T21077] netlink: 'syz.4.6171': attribute type 10 has an invalid length. [ 900.413115][T21077] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6171'. [ 901.149831][T21109] netlink: 'syz.2.6184': attribute type 10 has an invalid length. [ 901.166941][T21109] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6184'. [ 901.182425][T21109] device batadv0 entered promiscuous mode [ 901.190329][T21109] bridge0: port 3(batadv0) entered blocking state [ 901.197006][T21109] bridge0: port 3(batadv0) entered disabled state [ 901.204416][T21109] bridge0: port 3(batadv0) entered blocking state [ 901.211040][T21109] bridge0: port 3(batadv0) entered forwarding state [ 901.569821][ T4339] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 901.579171][ T4339] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 902.420961][T21164] netlink: 'syz.3.6211': attribute type 10 has an invalid length. [ 902.437469][T21164] team0: Device dummy0 is up. Set it down before adding it as a team port [ 903.667750][T21214] netlink: 'syz.4.6234': attribute type 10 has an invalid length. [ 903.682020][T21214] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6234'. [ 904.351354][T21244] netlink: 'syz.3.6248': attribute type 10 has an invalid length. [ 904.377111][T21244] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6248'. [ 904.937534][T21273] netlink: 'syz.3.6263': attribute type 10 has an invalid length. [ 904.945771][T21273] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6263'. [ 905.453957][T21301] netlink: 'syz.0.6276': attribute type 10 has an invalid length. [ 905.479873][T21301] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6276'. [ 905.499429][T21301] device batadv0 entered promiscuous mode [ 905.530132][T21301] bond0: (slave batadv0): Releasing backup interface [ 905.561099][T21301] bridge0: port 3(batadv0) entered blocking state [ 905.592693][T21301] bridge0: port 3(batadv0) entered disabled state [ 905.621175][T21305] netlink: 'syz.3.6280': attribute type 39 has an invalid length. [ 905.641797][T21305] device veth0_macvtap left promiscuous mode [ 905.725082][T17667] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 905.734385][T17667] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 906.387123][T21337] netlink: 'syz.3.6294': attribute type 10 has an invalid length. [ 906.404533][T21337] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.414144][T21337] bridge0: port 1(bridge_slave_0) entered disabled state [ 906.516612][T21337] bridge0: port 2(bridge_slave_1) entered blocking state [ 906.524259][T21337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 906.533631][T21337] bridge0: port 1(bridge_slave_0) entered blocking state [ 906.541311][T21337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 906.587919][T21337] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 906.600391][T21344] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6294'. [ 906.897030][T21360] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6305'. [ 906.974845][T21360] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6305'. [ 906.985009][T21364] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6305'. [ 907.027495][T21360] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6305'. [ 907.092644][T21368] netlink: 196 bytes leftover after parsing attributes in process `syz.4.6308'. [ 907.266760][T21373] device syzkaller0 entered promiscuous mode [ 907.727936][T21392] netlink: 'syz.3.6318': attribute type 1 has an invalid length. [ 909.908079][T21421] netlink: 'syz.0.6331': attribute type 1 has an invalid length. [ 909.916552][T21421] __nla_validate_parse: 1 callbacks suppressed [ 909.916678][T21421] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.6331'. [ 910.095952][T21429] netlink: 'syz.0.6334': attribute type 10 has an invalid length. [ 910.239219][T21429] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 910.446111][T21442] netlink: 'syz.0.6340': attribute type 4 has an invalid length. [ 910.454506][T21442] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6340'. [ 911.237333][T21458] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.6355'. [ 911.240921][T21460] netlink: 'syz.1.6344': attribute type 1 has an invalid length. [ 911.288217][T21460] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.6344'. [ 911.543084][T21471] netlink: 'syz.1.6349': attribute type 10 has an invalid length. [ 911.557402][T21471] bridge0: port 2(bridge_slave_1) entered disabled state [ 911.566518][T21471] bridge0: port 1(bridge_slave_0) entered disabled state [ 911.637538][T21471] bridge0: port 2(bridge_slave_1) entered blocking state [ 911.645086][T21471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 911.653345][T21471] bridge0: port 1(bridge_slave_0) entered blocking state [ 911.660801][T21471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 911.709178][T21471] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 911.891663][T21481] netlink: 'syz.4.6356': attribute type 39 has an invalid length. [ 912.161629][T21492] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.6360'. [ 912.458967][T21505] netlink: 'syz.3.6366': attribute type 10 has an invalid length. [ 912.483320][T21505] bridge0: port 2(bridge_slave_1) entered disabled state [ 912.490595][T21505] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.584566][T21510] netlink: 'syz.1.6368': attribute type 4 has an invalid length. [ 912.593074][T21510] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6368'. [ 912.837832][T21519] netlink: 176 bytes leftover after parsing attributes in process `syz.4.6371'. [ 912.874122][T21521] device wg2 left promiscuous mode [ 912.938528][T21521] device wg2 entered promiscuous mode [ 912.974563][T21523] netlink: 830 bytes leftover after parsing attributes in process `syz.4.6373'. [ 912.984212][T21523] device bond_slave_0 entered promiscuous mode [ 912.990786][T21523] device bond_slave_1 entered promiscuous mode [ 913.124425][T21529] netlink: 'syz.4.6376': attribute type 40 has an invalid length. [ 913.182516][T21529] bridge0: port 2(bridge_slave_1) entered disabled state [ 913.308636][T21538] netlink: 'syz.0.6379': attribute type 21 has an invalid length. [ 913.316702][T21538] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6379'. [ 913.458687][T21544] netlink: 'syz.4.6381': attribute type 10 has an invalid length. [ 913.471307][T21544] bridge0: port 1(bridge_slave_0) entered disabled state [ 913.499930][T21544] bridge0: port 1(bridge_slave_0) entered blocking state [ 913.507121][T21544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 913.517063][T21544] device bridge0 entered promiscuous mode [ 913.523478][T21544] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 913.650767][T21549] netlink: 'syz.3.6383': attribute type 4 has an invalid length. [ 913.660473][T21549] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6383'. [ 914.788797][T21587] netlink: 'syz.3.6400': attribute type 4 has an invalid length. [ 914.962375][T21593] netlink: 'syz.4.6403': attribute type 10 has an invalid length. [ 914.982618][T21593] __nla_validate_parse: 1 callbacks suppressed [ 914.982634][T21593] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6403'. [ 915.188075][T21599] device syzkaller0 entered promiscuous mode [ 915.232617][T21604] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6416'. [ 915.268437][T21603] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 915.402563][T21612] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6408'. [ 917.103517][ T4282] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 917.136973][ T4282] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 917.152195][ T4282] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 917.173726][ T4282] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 917.182485][T18291] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 917.189902][T18291] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 917.900692][T21612] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6408'. [ 917.910149][T21617] validate_nla: 2 callbacks suppressed [ 917.910162][T21617] netlink: 'syz.1.6411': attribute type 10 has an invalid length. [ 917.924103][T21617] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6411'. [ 917.933323][T21617] device team0 entered promiscuous mode [ 917.940004][T21617] device team_slave_0 entered promiscuous mode [ 917.948211][T21617] device team_slave_1 entered promiscuous mode [ 917.955115][T21617] bridge0: port 3(team0) entered blocking state [ 917.961529][T21617] bridge0: port 3(team0) entered disabled state [ 917.970157][T21617] bridge0: port 3(team0) entered blocking state [ 917.976558][T21617] bridge0: port 3(team0) entered forwarding state [ 918.310565][T21636] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.6419'. [ 918.436536][T21620] chnl_net:caif_netlink_parms(): no params data found [ 918.676901][T21649] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 918.707291][T21649] net_ratelimit: 250 callbacks suppressed [ 918.707338][T21649] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 918.760817][T21651] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.785875][T21620] bridge0: port 1(bridge_slave_0) entered blocking state [ 918.805552][T21620] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.814277][T21620] device bridge_slave_0 entered promiscuous mode [ 918.835749][T21620] bridge0: port 2(bridge_slave_1) entered blocking state [ 918.843031][T21620] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.851525][T21620] device bridge_slave_1 entered promiscuous mode [ 918.902455][T21656] device syzkaller0 entered promiscuous mode [ 919.036943][T21620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 919.221116][T21670] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.6429'. [ 919.245993][ T4281] Bluetooth: hci4: command 0x0409 tx timeout [ 919.261286][T21620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 921.326900][ T4281] Bluetooth: hci4: command 0x041b tx timeout [ 921.415625][T21662] netlink: 'syz.1.6426': attribute type 10 has an invalid length. [ 921.426430][T21662] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 921.476026][T21620] team0: Port device team_slave_0 added [ 921.501618][T21687] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 921.526653][T21687] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 921.549034][T21620] team0: Port device team_slave_1 added [ 921.621815][T21620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 921.673006][T21620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 921.754860][T21620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 921.780222][T21692] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.812566][T21620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 921.820892][T21620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 921.848601][T21620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 921.862794][T21700] netlink: 'syz.4.6445': attribute type 39 has an invalid length. [ 921.874210][T21700] device veth0_macvtap left promiscuous mode [ 922.057661][T21620] device hsr_slave_0 entered promiscuous mode [ 922.087696][T21620] device hsr_slave_1 entered promiscuous mode [ 922.118509][T21620] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 922.155006][T21620] Cannot create hsr debugfs directory [ 922.681625][T21620] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 922.715911][T21620] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 922.764423][T21620] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 922.797637][T21620] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 923.092636][T21717] netlink: 'syz.4.6448': attribute type 41 has an invalid length. [ 923.101825][T21717] netlink: 'syz.4.6448': attribute type 4 has an invalid length. [ 923.109955][T21717] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6448'. [ 923.130550][T21721] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.6450'. [ 923.144855][T21717] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 923.261935][T21620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 923.270922][T21721] netlink: 'syz.1.6450': attribute type 10 has an invalid length. [ 923.308764][T21721] batman_adv: batadv0: Adding interface: netdevsim0 [ 923.320384][T21721] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 923.355253][T21721] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 923.386583][T21717] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6448'. [ 923.405026][ T4281] Bluetooth: hci4: command 0x040f tx timeout [ 923.431287][T17666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 923.450715][T17666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 923.500367][T21620] 8021q: adding VLAN 0 to HW filter on device team0 [ 923.536308][T10444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 923.555641][T10444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 923.564157][T10444] bridge0: port 1(bridge_slave_0) entered blocking state [ 923.571307][T10444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 923.621971][T10444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 923.636558][T10444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 923.649661][T10444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 923.659424][T10444] bridge0: port 2(bridge_slave_1) entered blocking state [ 923.666579][T10444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 923.676002][T10444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 923.710701][T10444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 923.732286][T10444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 923.743794][T10444] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 923.754119][T10444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 923.764630][T10444] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 923.777176][T10444] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 923.790585][T21741] netlink: 'syz.1.6458': attribute type 39 has an invalid length. [ 923.800820][T21741] device veth0_macvtap left promiscuous mode [ 923.863190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 923.876890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 923.912931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 923.929239][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 923.956155][T21620] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 924.696622][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 924.704165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 924.747498][T21620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 925.485194][ T4281] Bluetooth: hci4: command 0x0419 tx timeout [ 925.530129][T21771] netlink: 'syz.3.6467': attribute type 41 has an invalid length. [ 925.538285][T21771] netlink: 'syz.3.6467': attribute type 4 has an invalid length. [ 925.546486][T21771] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6467'. [ 925.589950][T21771] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 925.712534][T21778] netlink: 'syz.1.6468': attribute type 39 has an invalid length. [ 925.722479][T21781] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.6469'. [ 925.750205][T21771] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6467'. [ 925.794040][T21781] netlink: 'syz.0.6469': attribute type 10 has an invalid length. [ 925.885658][T21781] batman_adv: batadv0: Adding interface: netdevsim0 [ 925.898371][T21781] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 925.926494][T21781] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 925.955169][T21785] netlink: 'syz.1.6480': attribute type 39 has an invalid length. [ 925.998808][T17666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 926.041261][T17666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 926.134361][T17666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 926.158029][T17666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 926.175447][T17666] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 926.185570][T17666] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 926.224602][T21620] device veth0_vlan entered promiscuous mode [ 926.256353][T21792] netlink: 'syz.3.6474': attribute type 10 has an invalid length. [ 926.414284][T21792] team0: Device veth1_vlan failed to register rx_handler [ 926.576700][T21788] device syzkaller0 entered promiscuous mode [ 926.601623][T21620] device veth1_vlan entered promiscuous mode [ 929.421460][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 929.430123][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 929.438339][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 929.447813][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 929.459186][T21819] netlink: 'syz.4.6483': attribute type 39 has an invalid length. [ 929.507358][T21620] device veth0_macvtap entered promiscuous mode [ 929.540559][T21620] device veth1_macvtap entered promiscuous mode [ 929.587745][T21620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 929.614569][T21620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 929.639549][T21620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 929.663249][T21620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 929.663674][T21823] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.6484'. [ 929.673577][T21620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 929.693026][T21620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 929.703064][T21620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 929.713666][T21620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 929.725284][T21620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 929.738068][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 929.752321][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 929.769315][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 929.780119][T21620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 929.791412][T21620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 929.802072][T21620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 929.812820][T21620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 929.822931][T21620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 929.833644][T21620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 929.843517][T21620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 929.854647][T21620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 929.864531][T21620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 929.875091][T21620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 929.887701][T21620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 929.895313][T21823] netlink: 'syz.3.6484': attribute type 10 has an invalid length. [ 929.918150][T21823] batman_adv: batadv0: Adding interface: netdevsim0 [ 929.925368][T21823] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 929.951847][T21823] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 929.965467][T10444] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 929.974066][T10444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 929.985551][T21620] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.997852][T21620] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.007478][T21620] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.055477][T21620] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.229545][ T4339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 930.247458][ T4339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 930.282055][T10444] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 930.320585][T10444] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 930.339622][T10444] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 930.363798][T21837] netlink: 'syz.1.6489': attribute type 41 has an invalid length. [ 930.376500][T21837] netlink: 'syz.1.6489': attribute type 4 has an invalid length. [ 930.384410][T21837] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6489'. [ 930.422313][T21837] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 930.472664][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 930.506757][T21837] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6489'. [ 930.852294][T21858] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.6497'. [ 930.927652][T21858] netlink: 'syz.5.6497': attribute type 10 has an invalid length. [ 930.985488][T21858] batman_adv: batadv0: Adding interface: netdevsim0 [ 931.020252][T21858] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 931.094998][T21858] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 931.487494][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.493881][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.862861][T21942] netlink: 'syz.4.6537': attribute type 4 has an invalid length. [ 932.894020][T21942] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6537'. [ 933.477815][T21972] netlink: 'syz.4.6552': attribute type 4 has an invalid length. [ 933.520492][T21972] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6552'. [ 934.519320][T22010] device syzkaller0 entered promiscuous mode [ 941.686225][T22052] netlink: 'syz.3.6591': attribute type 39 has an invalid length. [ 942.532440][T22209] netlink: 'syz.0.6668': attribute type 39 has an invalid length. [ 942.557719][T22209] device veth0_macvtap left promiscuous mode [ 943.278617][T22220] device syzkaller0 entered promiscuous mode [ 943.805009][ T4281] Bluetooth: hci5: command 0x0406 tx timeout [ 948.991389][T22274] netlink: 'syz.5.6696': attribute type 39 has an invalid length. [ 949.003223][T22274] device veth0_macvtap left promiscuous mode [ 949.144027][T22364] netlink: 'syz.0.6740': attribute type 10 has an invalid length. [ 949.161489][T22364] device batadv0 left promiscuous mode [ 949.205340][T22364] bridge0: port 3(batadv0) entered disabled state [ 949.268884][T22364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 949.319198][T22364] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 950.822713][T22435] netlink: 'syz.3.6775': attribute type 39 has an invalid length. [ 950.899423][T22441] netlink: 'syz.1.6779': attribute type 10 has an invalid length. [ 950.939861][T22441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 950.980374][T22441] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 951.661397][T22478] netlink: 'syz.3.6794': attribute type 10 has an invalid length. [ 951.680964][T22478] device batadv0 left promiscuous mode [ 951.686697][T22478] bridge0: port 3(batadv0) entered disabled state [ 951.771450][T22478] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 951.811622][T22478] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 952.467184][T22521] netlink: 'syz.5.6815': attribute type 10 has an invalid length. [ 952.506891][T22521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 952.546251][T22521] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 953.069598][T22552] netlink: 'syz.0.6831': attribute type 10 has an invalid length. [ 953.240975][T22560] netlink: 'syz.3.6833': attribute type 39 has an invalid length. [ 953.834467][T22588] netlink: 'syz.0.6846': attribute type 10 has an invalid length. [ 954.401230][T22610] netlink: 'syz.0.6859': attribute type 10 has an invalid length. [ 955.230718][T22645] netlink: 'syz.4.6872': attribute type 10 has an invalid length. [ 955.249319][T22645] device batadv0 left promiscuous mode [ 955.257411][T22645] bridge0: port 3(batadv0) entered disabled state [ 955.275201][T22645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 955.288562][T22645] device batadv0 entered promiscuous mode [ 955.317731][T22645] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 956.122124][T22676] netlink: 'syz.5.6887': attribute type 10 has an invalid length. [ 957.295611][T22709] netlink: 'syz.3.6901': attribute type 10 has an invalid length. [ 957.902289][T22736] netlink: 'syz.0.6914': attribute type 10 has an invalid length. [ 958.743877][T22765] netlink: 'syz.5.6927': attribute type 10 has an invalid length. [ 959.705366][T22796] netlink: 'syz.1.6940': attribute type 10 has an invalid length. [ 959.741064][T22797] netlink: 'syz.0.6941': attribute type 39 has an invalid length. [ 960.430213][T22820] netlink: 'syz.1.6952': attribute type 39 has an invalid length. [ 961.309375][T22848] netlink: 'syz.3.6965': attribute type 39 has an invalid length. [ 965.722805][T22883] netlink: 'syz.1.6981': attribute type 10 has an invalid length. [ 966.433573][T22981] netlink: 'syz.5.7029': attribute type 10 has an invalid length. [ 966.965473][T23001] netlink: 'syz.1.7038': attribute type 39 has an invalid length. [ 967.735953][T23034] netlink: 'syz.1.7052': attribute type 39 has an invalid length. [ 968.575807][T23065] netlink: 'syz.0.7067': attribute type 39 has an invalid length. [ 969.281399][T23093] netlink: 'syz.5.7082': attribute type 39 has an invalid length. [ 969.411843][T18291] Bluetooth: hci0: command 0x0406 tx timeout [ 970.139378][T23121] netlink: 'syz.1.7097': attribute type 39 has an invalid length. [ 979.645015][ T4281] Bluetooth: hci2: command 0x0406 tx timeout [ 980.904403][T23350] netlink: 'syz.3.7209': attribute type 39 has an invalid length. [ 981.990601][T23527] tap0: tun_chr_ioctl cmd 2147767520 [ 982.918427][T23578] dvmrp1: tun_chr_ioctl cmd 1074025680 [ 982.939350][T23578] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 982.945373][T23578] dvmrp1: ignored: set checksum disabled [ 989.885054][ T4281] Bluetooth: hci3: command 0x0406 tx timeout [ 992.935012][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.941365][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.282507][T23894] syz.0.7458[23894] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 994.282601][T23894] syz.0.7458[23894] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 995.091764][T23894] device veth0_vlan left promiscuous mode [ 995.257841][T23894] device veth0_vlan entered promiscuous mode [ 995.276240][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 995.320376][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 995.346419][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 998.327252][T23976] device veth0_vlan left promiscuous mode [ 998.334270][T23976] device veth0_vlan entered promiscuous mode [ 1002.888106][T24075] netlink: 'syz.4.7512': attribute type 39 has an invalid length. [ 1005.101982][T24117] netlink: 'syz.5.7526': attribute type 39 has an invalid length. [ 1005.265054][T18291] Bluetooth: hci1: command 0x0406 tx timeout [ 1007.715471][T24154] netlink: 'syz.5.7538': attribute type 39 has an invalid length. [ 1008.080223][T24167] netlink: 'syz.0.7554': attribute type 39 has an invalid length. [ 1009.409621][T24186] device veth0_vlan left promiscuous mode [ 1009.425849][T24186] device veth0_vlan entered promiscuous mode [ 1010.036865][T24207] netlink: 'syz.1.7558': attribute type 39 has an invalid length. [ 1013.596450][T24255] netlink: 'syz.1.7571': attribute type 39 has an invalid length. [ 1017.566726][T24299] netlink: 'syz.0.7585': attribute type 39 has an invalid length. [ 1020.530236][T24330] netlink: 'syz.1.7598': attribute type 39 has an invalid length. [ 1021.796311][T24349] device veth1_macvtap left promiscuous mode [ 1021.802423][T24349] device macsec0 entered promiscuous mode [ 1022.261315][T24361] netlink: 'syz.4.7611': attribute type 39 has an invalid length. [ 1022.492543][T24376] syz.1.7616[24376] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1022.492635][T24376] syz.1.7616[24376] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1022.570612][T24372] device veth0_vlan left promiscuous mode [ 1023.064786][T24372] device veth0_vlan entered promiscuous mode [ 1023.822851][T24405] netlink: 'syz.3.7628': attribute type 39 has an invalid length. [ 1024.651748][T24436] netlink: 'syz.3.7642': attribute type 39 has an invalid length. [ 1025.417623][T24466] tap0: tun_chr_ioctl cmd 1074025677 [ 1025.423116][T24466] tap0: linktype set to 769 [ 1025.716252][T24475] netlink: 'syz.1.7655': attribute type 39 has an invalid length. [ 1026.366612][T24500] device veth0_vlan left promiscuous mode [ 1026.455590][T24500] device veth0_vlan entered promiscuous mode [ 1026.464225][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1026.483541][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1026.534581][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1026.612130][T24505] netlink: 'syz.3.7671': attribute type 39 has an invalid length. [ 1027.303983][T24531] device veth0_vlan left promiscuous mode [ 1027.358788][T24531] device veth0_vlan entered promiscuous mode [ 1027.514970][T24544] netlink: 'syz.0.7688': attribute type 39 has an invalid length. [ 1028.480822][T24583] netlink: 'syz.4.7707': attribute type 39 has an invalid length. [ 1029.416401][T24619] netlink: 'syz.4.7723': attribute type 39 has an invalid length. [ 1029.432878][T24615] device veth0_vlan left promiscuous mode [ 1029.451014][T24615] device veth0_vlan entered promiscuous mode [ 1030.146327][T24647] netlink: 'syz.1.7736': attribute type 39 has an invalid length. [ 1030.406692][T24653] device veth0_vlan left promiscuous mode [ 1030.439403][T24653] device veth0_vlan entered promiscuous mode [ 1030.486849][T10445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1030.501252][T10445] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1030.526024][T10445] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1031.284607][T24686] ÿÿÿÿÿÿ: renamed from vlan1 [ 1031.300760][T24684] pim6reg0: tun_chr_ioctl cmd 2147767517 [ 1033.286161][T24765] netlink: 'syz.3.7788': attribute type 39 has an invalid length. [ 1034.055840][T24795] device veth0_vlan left promiscuous mode [ 1034.250214][T24795] device veth0_vlan entered promiscuous mode [ 1034.296618][T24801] netlink: 'syz.1.7804': attribute type 39 has an invalid length. [ 1034.527993][T24807] pimreg: tun_chr_ioctl cmd 2147767520 [ 1035.211859][T24829] netlink: 'syz.3.7818': attribute type 39 has an invalid length. [ 1035.351639][T24834] device veth0_vlan left promiscuous mode [ 1035.384646][T24834] device veth0_vlan entered promiscuous mode [ 1035.417555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1035.436151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1035.466683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): ÿÿÿÿÿÿ: link becomes ready [ 1036.801481][T24873] device veth0_vlan left promiscuous mode [ 1036.815596][T24873] device veth0_vlan entered promiscuous mode [ 1036.825887][T17666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1036.853995][T17666] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1036.885672][T17666] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1037.570145][T24894] netlink: 'syz.0.7846': attribute type 39 has an invalid length. [ 1038.799596][T24929] netlink: 'syz.4.7859': attribute type 39 has an invalid length. [ 1039.349738][T24939] device wg2 entered promiscuous mode [ 1040.362344][T18291] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1040.372908][T18291] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1040.381147][T18291] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1040.389727][T18291] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1040.398150][T18291] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1040.406446][T18291] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1040.533093][T10444] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.592385][T24969] netlink: 'syz.4.7874': attribute type 39 has an invalid length. [ 1040.801936][T10444] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.085077][ T4281] Bluetooth: hci4: command 0x0406 tx timeout [ 1041.134607][T10444] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.201200][T24962] chnl_net:caif_netlink_parms(): no params data found [ 1041.318244][T10444] batman_adv: batadv0: Removing interface: netdevsim0 [ 1041.709135][T25001] netlink: 'syz.1.7884': attribute type 39 has an invalid length. [ 1041.797537][T24997] bridge0: port 2(bridge_slave_1) entered disabled state [ 1041.805045][T24997] bridge0: port 1(bridge_slave_0) entered disabled state [ 1041.904361][T25002] device bridge_slave_1 left promiscuous mode [ 1041.926458][T25002] bridge0: port 2(bridge_slave_1) entered disabled state [ 1041.961945][T25002] device bridge_slave_0 left promiscuous mode [ 1041.969941][T25002] bridge0: port 1(bridge_slave_0) entered disabled state [ 1042.094016][T24962] bridge0: port 1(bridge_slave_0) entered blocking state [ 1042.108721][T24962] bridge0: port 1(bridge_slave_0) entered disabled state [ 1042.137304][T24962] device bridge_slave_0 entered promiscuous mode [ 1042.167791][T24962] bridge0: port 2(bridge_slave_1) entered blocking state [ 1042.188770][T24962] bridge0: port 2(bridge_slave_1) entered disabled state [ 1042.215121][T24962] device bridge_slave_1 entered promiscuous mode [ 1042.426257][T24962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1042.444928][ T4282] Bluetooth: hci5: command 0x0409 tx timeout [ 1042.528665][T24962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1042.911740][T24962] team0: Port device team_slave_0 added [ 1043.030300][T24962] team0: Port device team_slave_1 added [ 1043.268850][T24962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1043.284928][T24962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1043.351221][T24962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1043.523301][T24962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1043.538048][T24962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1043.592513][T24962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1043.631954][T25045] netlink: 'syz.5.7902': attribute type 39 has an invalid length. [ 1043.913753][T24962] device hsr_slave_0 entered promiscuous mode [ 1043.963191][T24962] device hsr_slave_1 entered promiscuous mode [ 1043.985132][T24962] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1043.992743][T24962] Cannot create hsr debugfs directory [ 1044.486331][T25070] netlink: 'syz.1.7914': attribute type 39 has an invalid length. [ 1044.525028][ T4282] Bluetooth: hci5: command 0x041b tx timeout [ 1045.697247][T10444] device hsr_slave_0 left promiscuous mode [ 1045.725774][T10444] device hsr_slave_1 left promiscuous mode [ 1045.745497][T10444] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1045.753033][T10444] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1045.768538][T10444] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1045.776491][T10444] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1045.815840][T10444] device bridge_slave_1 left promiscuous mode [ 1045.823417][T10444] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.837284][T10444] device bridge_slave_0 left promiscuous mode [ 1045.843681][T10444] bridge0: port 1(bridge_slave_0) entered disabled state [ 1045.876281][T10444] device veth1_macvtap left promiscuous mode [ 1045.882503][T10444] device veth1_vlan left promiscuous mode [ 1045.889829][T10444] device veth0_vlan left promiscuous mode [ 1046.493306][T10444] team0 (unregistering): Port device team_slave_1 removed [ 1046.543434][T10444] team0 (unregistering): Port device team_slave_0 removed [ 1046.590816][T10444] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1046.604998][ T4282] Bluetooth: hci5: command 0x040f tx timeout [ 1046.640529][T10444] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1046.849246][T10444] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1047.141674][T10444] bond0 (unregistering): Released all slaves [ 1047.234853][T25099] netlink: 'syz.1.7925': attribute type 39 has an invalid length. [ 1047.811641][T24962] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1048.616863][T24962] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1048.635505][T24962] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1048.684928][ T4281] Bluetooth: hci5: command 0x0419 tx timeout [ 1048.694946][T24962] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1048.740447][T25130] netlink: 'syz.3.7937': attribute type 39 has an invalid length. [ 1049.080137][T24962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1049.156871][T25151] netlink: 'syz.3.7944': attribute type 3 has an invalid length. [ 1049.159806][T24962] 8021q: adding VLAN 0 to HW filter on device team0 [ 1049.164641][T25151] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7944'. [ 1049.223385][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1049.240399][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1049.335781][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1049.359270][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1049.386139][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 1049.393275][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1049.432832][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1049.464161][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1049.485235][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 1049.492436][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1049.505550][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1049.515560][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1049.529607][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1049.561848][T25167] netlink: 'syz.5.7950': attribute type 39 has an invalid length. [ 1049.599038][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1049.626568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1049.669401][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1049.709743][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1049.741258][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1049.791616][T24962] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1049.845709][T24962] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1049.901587][T10445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1049.941416][T10445] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1049.968386][T10445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1050.016566][T10445] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1050.051137][T10445] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1050.386982][T25198] netlink: 'syz.1.7965': attribute type 39 has an invalid length. [ 1050.514867][T25205] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1050.521676][T25205] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1050.804324][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1050.852156][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1050.863735][T24962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1050.908918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1050.921585][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1050.987133][T10444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1051.021139][T10444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1051.056362][T10444] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1051.080610][T10444] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1051.102891][T24962] device veth0_vlan entered promiscuous mode [ 1051.172781][T24962] device veth1_vlan entered promiscuous mode [ 1051.297597][T10444] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1051.311534][T10444] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1051.361272][T10444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1051.398249][T10444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1051.449155][T24962] device veth0_macvtap entered promiscuous mode [ 1051.501377][T24962] device veth1_macvtap entered promiscuous mode [ 1051.614709][T24962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1051.646315][T24962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.661676][T24962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1051.678761][T24962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.689839][T24962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1051.747659][T24962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.773472][T24962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1051.786812][T24962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.806630][T24962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1051.827529][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1051.843806][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1051.861424][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1051.900177][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1051.932172][T24962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1051.953323][T24962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.981217][T24962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1052.012145][T24962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1052.040089][T24962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1052.072171][T24962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1052.102670][T24962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1052.147554][T24962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1052.165883][T24962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1052.177122][T24962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1052.196141][T24962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1052.203707][T25271] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1052.210345][T25271] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1052.225664][T17666] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1052.235282][T17666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1052.250320][T24962] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.266139][T24962] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.285138][T24962] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.294254][T24962] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.470770][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1052.499364][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1052.531801][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1052.586065][T17666] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1052.594201][T17666] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1052.659655][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1054.369280][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.375695][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.860675][T25363] netlink: 'syz.1.8028': attribute type 39 has an invalid length. [ 1055.832748][T25397] netlink: 'syz.3.8043': attribute type 39 has an invalid length. [ 1056.925067][T25419] netlink: 'syz.3.8063': attribute type 39 has an invalid length. [ 1057.960005][T25450] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.8062'. [ 1058.384000][T25458] netlink: 'syz.5.8068': attribute type 39 has an invalid length. [ 1059.177136][T25488] netlink: 'syz.1.8085': attribute type 39 has an invalid length. [ 1060.920886][T25526] ÿÿÿÿÿÿ: renamed from vlan1 [ 1067.663477][ T4282] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1067.674095][ T4282] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1067.689932][ T4282] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1067.706979][ T4282] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1067.718057][ T4282] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1067.731932][ T4282] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1067.797671][T10445] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.048055][T10445] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.141263][T10445] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.241103][T10445] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.667854][T25678] chnl_net:caif_netlink_parms(): no params data found [ 1069.097206][T25678] bridge0: port 1(bridge_slave_0) entered blocking state [ 1069.104544][T25678] bridge0: port 1(bridge_slave_0) entered disabled state [ 1069.113338][T25678] device bridge_slave_0 entered promiscuous mode [ 1069.129118][T25678] bridge0: port 2(bridge_slave_1) entered blocking state [ 1069.232601][T25678] bridge0: port 2(bridge_slave_1) entered disabled state [ 1069.265049][T25678] device bridge_slave_1 entered promiscuous mode [ 1069.813633][ T4281] Bluetooth: hci0: command 0x0409 tx timeout [ 1070.217608][T25678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1070.332948][T25678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1070.513514][T25678] team0: Port device team_slave_0 added [ 1070.621215][T25678] team0: Port device team_slave_1 added [ 1070.874599][T25678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1070.883910][T25678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1070.959156][T25678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1071.042507][T25678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1071.061026][T25678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1071.099508][T25678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1071.900793][ T4281] Bluetooth: hci0: command 0x041b tx timeout [ 1071.941909][T25678] device hsr_slave_0 entered promiscuous mode [ 1071.977818][T25678] device hsr_slave_1 entered promiscuous mode [ 1073.967166][ T4282] Bluetooth: hci0: command 0x040f tx timeout [ 1076.044955][ T4281] Bluetooth: hci0: command 0x0419 tx timeout [ 1076.575627][T10445] device hsr_slave_0 left promiscuous mode [ 1076.799553][T10445] device hsr_slave_1 left promiscuous mode [ 1076.810468][T10445] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1076.839500][T10445] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1076.899422][T10445] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1076.910346][T10445] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1076.935423][T10445] device bridge_slave_1 left promiscuous mode [ 1076.941788][T10445] bridge0: port 2(bridge_slave_1) entered disabled state [ 1076.993537][T10445] device bridge_slave_0 left promiscuous mode [ 1077.000482][T10445] bridge0: port 1(bridge_slave_0) entered disabled state [ 1077.058331][T10445] device veth1_vlan left promiscuous mode [ 1077.064423][T10445] device veth0_vlan left promiscuous mode [ 1077.091152][T10445] device bridge0 left promiscuous mode [ 1077.541399][T10445] team0 (unregistering): Port device team_slave_1 removed [ 1077.590318][T10445] team0 (unregistering): Port device team_slave_0 removed [ 1077.638368][T10445] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1077.690899][T10445] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1077.891607][T10445] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1078.164400][T10445] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1078.173150][T10445] bond0 (unregistering): Released all slaves [ 1080.631183][T25678] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1080.662816][T25678] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1080.703008][T25678] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1080.731269][T25678] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1080.829743][T25830] device pim6reg1 entered promiscuous mode [ 1081.005015][T25678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1081.076959][T25678] 8021q: adding VLAN 0 to HW filter on device team0 [ 1081.110908][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1081.141874][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1081.199563][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1081.240459][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1081.265524][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1081.272647][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1081.305413][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1081.350098][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1081.363952][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1081.392605][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1081.400312][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1081.590190][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1081.628142][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1081.735462][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1081.799400][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1081.816245][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1081.830934][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1081.842022][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1081.858062][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1081.871739][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1081.890269][T25678] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1081.906006][T25678] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1082.076461][T25867] ÿÿÿÿÿÿ: renamed from vlan1 [ 1082.096593][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1082.120393][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1082.703828][T25882] device wg2 entered promiscuous mode [ 1083.387241][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1083.422578][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1083.459196][T25678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1085.561812][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1085.630777][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1085.722402][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1085.743427][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1085.807401][T25678] device veth0_vlan entered promiscuous mode [ 1085.833428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1085.860151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1085.888920][T25678] device veth1_vlan entered promiscuous mode [ 1086.062125][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1086.073384][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1086.090319][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1086.111754][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1086.152332][T25678] device veth0_macvtap entered promiscuous mode [ 1086.185941][T25678] device veth1_macvtap entered promiscuous mode [ 1086.229421][T25678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1086.375894][T25678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1086.418962][T25678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1086.430420][T25678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1086.440687][T25678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1086.453160][T25678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1086.463411][T25678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1086.503395][T25678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1086.518385][T25678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1086.533917][T25678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1086.569496][T25678] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1086.648326][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1086.729747][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1086.751287][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1086.783199][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1086.808732][T25678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1086.871529][T25678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1086.913577][T25678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1086.994785][T25678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1087.027000][T25678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1087.057538][T25678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1087.133464][T25678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1087.191151][T25678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1087.347648][T25678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1087.485661][T25678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1087.557514][T25678] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1087.613653][T25678] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.675217][T25678] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.722870][T25678] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.784897][T25678] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.850608][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1087.881609][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1088.140577][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1088.167312][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1088.215238][T10444] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1088.242394][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1088.263987][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1088.285033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1089.335027][T25991] device veth0_vlan left promiscuous mode [ 1089.341525][T25991] device veth0_vlan entered promiscuous mode [ 1089.422722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1089.456969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1089.505081][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1099.921878][T26041] device veth0_vlan left promiscuous mode [ 1099.928501][T26041] device veth0_vlan entered promiscuous mode [ 1099.937554][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1099.969891][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1099.995993][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): ÿÿÿÿÿÿ: link becomes ready [ 1100.732171][T26088] ÿÿÿÿÿÿ: renamed from vlan1 [ 1103.194877][T26134] ÿÿÿÿÿÿ: renamed from vlan1 [ 1103.453344][T26141] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.8308'. [ 1103.475937][T26141] netlink: zone id is out of range [ 1103.986351][T26158] netlink: 'syz.4.8314': attribute type 29 has an invalid length. [ 1103.994583][T26158] netlink: 'syz.4.8314': attribute type 29 has an invalid length. [ 1104.035327][T26159] netlink: 'syz.4.8314': attribute type 29 has an invalid length. [ 1104.052605][T26158] netlink: 'syz.4.8314': attribute type 29 has an invalid length. [ 1104.254711][T26161] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1104.261238][T26161] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1106.734941][T26198] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1106.741838][T26198] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1108.066314][T26215] device veth0_vlan left promiscuous mode [ 1108.093041][T26215] device veth0_vlan entered promiscuous mode [ 1108.152933][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1108.169131][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1108.196754][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): ÿÿÿÿÿÿ: link becomes ready [ 1109.760967][T26231] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1109.767446][T26231] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1112.747560][T26276] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1112.754035][T26276] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1115.807661][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.814474][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.446248][T26301] netlink: 'syz.1.8368': attribute type 11 has an invalid length. [ 1116.499102][T26301] netlink: 168 bytes leftover after parsing attributes in process `syz.1.8368'. [ 1117.385066][T26315] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1117.392506][T26315] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1117.471980][T26318] netlink: 'syz.3.8382': attribute type 10 has an invalid length. [ 1117.509693][T26318] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8382'. [ 1117.573528][T26318] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1118.722419][T26332] device veth0_vlan left promiscuous mode [ 1118.731006][T26332] device veth0_vlan entered promiscuous mode [ 1118.748601][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1118.784186][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1118.853444][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): ÿÿÿÿÿÿ: link becomes ready [ 1119.353536][T26345] netlink: 'syz.3.8386': attribute type 10 has an invalid length. [ 1120.032885][T26345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1120.076918][T26345] team0: Port device bond0 added [ 1120.611759][T26372] netlink: 'syz.0.8394': attribute type 29 has an invalid length. [ 1120.655138][T26372] netlink: 'syz.0.8394': attribute type 29 has an invalid length. [ 1120.792785][T26372] netlink: 'syz.0.8394': attribute type 29 has an invalid length. [ 1120.875247][T26376] netlink: 'syz.0.8394': attribute type 29 has an invalid length. [ 1121.318474][T26391] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1121.324973][T26391] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1121.610043][T26393] netlink: 'syz.0.8404': attribute type 10 has an invalid length. [ 1121.847228][T26393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1121.882171][T26393] team0: Port device bond0 added [ 1123.369968][T26439] netlink: 'syz.3.8419': attribute type 2 has an invalid length. [ 1123.421713][T26439] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8419'. [ 1124.616684][T26461] netlink: 'syz.4.8427': attribute type 10 has an invalid length. [ 1125.062490][T26461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1125.199032][T26461] team0: Port device bond0 added [ 1126.099053][T26477] netlink: 'syz.3.8433': attribute type 39 has an invalid length. [ 1128.754124][T26517] netlink: 'syz.5.8450': attribute type 10 has an invalid length. [ 1129.037100][T26517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1129.111160][T26517] team0: Port device bond0 added [ 1129.121475][ T4282] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 1132.426615][T26550] netlink: 'syz.0.8474': attribute type 10 has an invalid length. [ 1133.267102][T26570] netlink: 'syz.1.8470': attribute type 2 has an invalid length. [ 1133.302838][T26570] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8470'. [ 1135.037678][T26609] netlink: 'syz.0.8487': attribute type 39 has an invalid length. [ 1136.058591][T26637] netlink: 'syz.4.8500': attribute type 2 has an invalid length. [ 1136.122402][T26637] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8500'. [ 1141.671102][T26735] netlink: 'syz.1.8538': attribute type 2 has an invalid length. [ 1141.702450][T26735] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8538'. [ 1143.770109][T26773] netlink: 'syz.4.8554': attribute type 2 has an invalid length. [ 1143.854558][T26773] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8554'. [ 1145.344617][T26808] netlink: 'syz.0.8568': attribute type 2 has an invalid length. [ 1145.394820][T26808] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8568'. [ 1146.143250][ T4281] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1146.152494][ T4281] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1146.160773][ T4281] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1146.170873][ T4281] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1146.185067][ T4281] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1146.192400][ T4281] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1146.417438][ T33] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1147.466837][ T33] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1147.526243][T26855] netlink: 'syz.4.8589': attribute type 11 has an invalid length. [ 1147.540151][T26855] netlink: 168 bytes leftover after parsing attributes in process `syz.4.8589'. [ 1147.695000][ T33] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1147.822679][ T33] batman_adv: batadv0: Removing interface: netdevsim0 [ 1147.850189][ T33] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1148.215844][T26831] chnl_net:caif_netlink_parms(): no params data found [ 1148.290968][ T4281] Bluetooth: hci2: command 0x0409 tx timeout [ 1148.967787][T26831] bridge0: port 1(bridge_slave_0) entered blocking state [ 1149.004957][T26831] bridge0: port 1(bridge_slave_0) entered disabled state [ 1149.013083][T26831] device bridge_slave_0 entered promiscuous mode [ 1149.236333][T26831] bridge0: port 2(bridge_slave_1) entered blocking state [ 1149.243477][T26831] bridge0: port 2(bridge_slave_1) entered disabled state [ 1149.262224][T26831] device bridge_slave_1 entered promiscuous mode [ 1150.365376][ T4281] Bluetooth: hci2: command 0x041b tx timeout [ 1152.423308][T26831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1152.445161][ T4281] Bluetooth: hci2: command 0x040f tx timeout [ 1152.491450][T26831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1152.619331][T26831] team0: Port device team_slave_0 added [ 1152.640524][T26831] team0: Port device team_slave_1 added [ 1152.855817][T26831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1152.862809][T26831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1152.961062][T26831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1153.045578][T26831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1153.052568][T26831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1153.151685][T26831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1153.695714][T26831] device hsr_slave_0 entered promiscuous mode [ 1153.754195][T26831] device hsr_slave_1 entered promiscuous mode [ 1153.778013][T26831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1153.804288][T26831] Cannot create hsr debugfs directory [ 1154.530233][ T4281] Bluetooth: hci2: command 0x0419 tx timeout [ 1157.402973][ T33] device hsr_slave_0 left promiscuous mode [ 1157.415726][ T33] device hsr_slave_1 left promiscuous mode [ 1157.428103][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1157.436347][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1157.444159][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1157.472359][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1157.487987][ T33] bridge0: port 3(team0) entered disabled state [ 1157.505765][ T33] device bridge_slave_1 left promiscuous mode [ 1157.512108][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 1157.520672][ T33] device bridge_slave_0 left promiscuous mode [ 1157.527255][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 1157.547811][ T33] device veth1_macvtap left promiscuous mode [ 1157.553924][ T33] device veth1_vlan left promiscuous mode [ 1157.559938][ T33] device veth0_vlan left promiscuous mode [ 1157.998799][ T33] device team_slave_1 left promiscuous mode [ 1158.007247][ T33] team0 (unregistering): Port device team_slave_1 removed [ 1158.055371][ T33] device team_slave_0 left promiscuous mode [ 1158.063691][ T33] team0 (unregistering): Port device team_slave_0 removed [ 1158.112370][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1158.157060][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1158.350370][ T33] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1158.624119][ T33] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1158.632839][ T33] bond0 (unregistering): Released all slaves [ 1158.751221][T26967] netlink: 'syz.0.8634': attribute type 11 has an invalid length. [ 1158.773664][T26967] netlink: 168 bytes leftover after parsing attributes in process `syz.0.8634'. [ 1160.220499][T26831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1160.271012][T26831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1160.312107][T26831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1160.357100][T26831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1160.370904][T26996] netlink: 'syz.0.8647': attribute type 11 has an invalid length. [ 1160.391802][T26996] netlink: 199816 bytes leftover after parsing attributes in process `syz.0.8647'. [ 1160.423323][T26995] netlink: 'syz.3.8645': attribute type 20 has an invalid length. [ 1160.592621][T26831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1160.651085][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1160.668893][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1160.701590][T26831] 8021q: adding VLAN 0 to HW filter on device team0 [ 1160.770322][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1160.791105][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1160.815370][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1160.822503][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1160.861242][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1160.911498][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1160.965467][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1160.972612][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1161.077638][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1161.250464][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1161.315450][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1161.392310][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1161.626460][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1161.695849][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1161.745085][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1161.795212][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1161.871367][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1161.915715][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1161.959547][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1162.007686][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1162.072331][T26831] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1162.721304][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1162.733433][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1162.755532][T26831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1162.791608][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1162.801515][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1162.835700][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1162.856962][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1162.876889][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1162.900191][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1162.937228][T26831] device veth0_vlan entered promiscuous mode [ 1162.992065][T26831] device veth1_vlan entered promiscuous mode [ 1163.065903][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1163.078771][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1163.098550][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1163.159015][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1163.182638][T26831] device veth0_macvtap entered promiscuous mode [ 1163.214456][T26831] device veth1_macvtap entered promiscuous mode [ 1163.257641][T26831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1163.277966][T26831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1163.295795][T26831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1163.307307][T26831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1163.329795][T26831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1163.347229][T26831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1163.363839][T26831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1163.375656][T26831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1163.386042][T26831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1163.397011][T26831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1163.452728][T26831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1163.474674][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1163.484642][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1163.500741][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1163.517003][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1163.547722][T26831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1163.584790][T26831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1163.608384][T26831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1163.639396][T26831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1163.688784][T26831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1163.705488][T26831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1163.748085][T26831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1163.766675][T26831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1163.780747][T26831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1163.824873][T26831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1163.892789][T26831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1163.900513][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1163.935433][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1163.976370][ T4282] Bluetooth: hci5: command 0x0406 tx timeout [ 1163.987194][T26831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1164.050597][T26831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1164.113232][T26831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1164.133193][T26831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1164.278857][ T4355] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1164.315455][ T4355] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1164.369114][ T4360] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1164.382543][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1164.419061][ T4360] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1164.471459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1165.481867][T10445] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.504247][ T4281] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1165.517587][ T4281] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1165.528304][ T4281] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1165.538842][ T4281] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1165.552818][T18291] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1165.564286][ T4281] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1165.586580][T10445] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.679140][T10445] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.762686][T10445] batman_adv: batadv0: Removing interface: netdevsim0 [ 1166.150098][T27091] chnl_net:caif_netlink_parms(): no params data found [ 1166.776551][T27091] bridge0: port 1(bridge_slave_0) entered blocking state [ 1166.795881][T27091] bridge0: port 1(bridge_slave_0) entered disabled state [ 1166.804425][T27091] device bridge_slave_0 entered promiscuous mode [ 1166.902200][T27091] bridge0: port 2(bridge_slave_1) entered blocking state [ 1166.910566][T27091] bridge0: port 2(bridge_slave_1) entered disabled state [ 1166.929156][T27091] device bridge_slave_1 entered promiscuous mode [ 1167.219446][T27091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1167.363005][T27091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1167.569249][T27091] team0: Port device team_slave_0 added [ 1167.594128][T27091] team0: Port device team_slave_1 added [ 1167.645065][ T4281] Bluetooth: hci3: command 0x0409 tx timeout [ 1167.817536][T27091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1167.842729][T27091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1167.962977][T27091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1168.219957][T27091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1168.231520][T27091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1168.321974][T27091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1168.611383][T27091] device hsr_slave_0 entered promiscuous mode [ 1168.618491][T27091] device hsr_slave_1 entered promiscuous mode [ 1168.625785][T27091] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1168.633677][T27091] Cannot create hsr debugfs directory [ 1168.670882][T10445] device hsr_slave_0 left promiscuous mode [ 1168.683972][T10445] device hsr_slave_1 left promiscuous mode [ 1168.692281][T10445] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1168.710998][T10445] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1168.721407][T10445] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1168.737599][T10445] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1168.759439][T10445] device bridge_slave_1 left promiscuous mode [ 1168.770379][T10445] bridge0: port 2(bridge_slave_1) entered disabled state [ 1168.794222][T10445] device bridge_slave_0 left promiscuous mode [ 1168.812146][T10445] bridge0: port 1(bridge_slave_0) entered disabled state [ 1168.874571][T10445] device veth1_macvtap left promiscuous mode [ 1169.728940][ T4281] Bluetooth: hci3: command 0x041b tx timeout [ 1170.687766][T10445] team0 (unregistering): Port device team_slave_1 removed [ 1171.448577][T10445] team0 (unregistering): Port device team_slave_0 removed [ 1171.810805][ T4281] Bluetooth: hci3: command 0x040f tx timeout [ 1172.387792][T10445] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1172.873139][T10445] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1172.924209][T27166] ------------[ cut here ]------------ [ 1172.930242][T27166] WARNING: CPU: 0 PID: 27166 at kernel/events/core.c:6592 perf_pending_task+0x358/0x470 [ 1172.940183][T27166] Modules linked in: [ 1172.944106][T27166] CPU: 0 PID: 27166 Comm: syz.5.8710 Not tainted syzkaller #0 [ 1172.952051][T27166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1172.962406][T27166] RIP: 0010:perf_pending_task+0x358/0x470 [ 1172.968178][T27166] Code: ff 84 db 75 14 e8 b8 d1 da ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 a4 d1 da ff e8 f7 7b 5a ff eb e5 e8 98 d1 da ff <0f> 0b e9 f3 fe ff ff e8 8c d1 da ff 48 c7 c7 d0 03 bc 8c 4c 89 f6 [ 1172.987848][T27166] RSP: 0018:ffffc9000377f900 EFLAGS: 00010293 [ 1172.993935][T27166] RAX: ffffffff81a604c8 RBX: ffff888056adcc58 RCX: ffff88802c228000 [ 1173.002059][T27166] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1173.010172][T27166] RBP: 0000000000000001 R08: dffffc0000000000 R09: ffffed1005845141 [ 1173.018198][T27166] R10: ffffed1005845141 R11: 1ffff11005845140 R12: ffff88802c228000 [ 1173.026225][T27166] R13: ffff88805758d560 R14: ffff888056adca20 R15: 1ffff1100ad5b944 [ 1173.034222][T27166] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1173.043207][T27166] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1173.049840][T27166] CR2: 0000000000000000 CR3: 0000000047b3a000 CR4: 00000000003506f0 [ 1173.057862][T27166] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1173.065869][T27166] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1173.073865][T27166] Call Trace: [ 1173.077180][T27166] [ 1173.080122][T27166] task_work_run+0x1ca/0x250 [ 1173.084838][T27166] ? task_work_cancel+0x230/0x230 [ 1173.089881][T27166] ? do_raw_spin_unlock+0x11d/0x230 [ 1173.095174][T27166] do_exit+0x93e/0x2400 [ 1173.099449][T27166] ? lock_chain_count+0x20/0x20 [ 1173.104327][T27166] ? put_task_struct+0x80/0x80 [ 1173.109150][T27166] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1173.115441][T27166] ? lockdep_hardirqs_on+0x94/0x140 [ 1173.120682][T27166] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1173.127073][T27166] do_group_exit+0x217/0x2d0 [ 1173.131687][T27166] get_signal+0x1272/0x1350 [ 1173.136261][T27166] arch_do_signal_or_restart+0xb7/0x1240 [ 1173.142016][T27166] ? rcu_read_unlock_special+0x500/0x500 [ 1173.147743][T27166] ? preempt_schedule_irq+0xd0/0x150 [ 1173.153114][T27166] ? get_sigframe_size+0x10/0x10 [ 1173.158120][T27166] ? exit_to_user_mode_loop+0x3b/0x110 [ 1173.163660][T27166] exit_to_user_mode_loop+0x70/0x110 [ 1173.168998][T27166] exit_to_user_mode_prepare+0xee/0x180 [ 1173.174557][T27166] syscall_exit_to_user_mode+0x16/0x40 [ 1173.180061][T27166] do_syscall_64+0x58/0xa0 [ 1173.184576][T27166] ? clear_bhb_loop+0x60/0xb0 [ 1173.189290][T27166] ? clear_bhb_loop+0x60/0xb0 [ 1173.193983][T27166] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1173.199926][T27166] RIP: 0033:0x7fcf357865e7 [ 1173.204369][T27166] Code: Unable to access opcode bytes at 0x7fcf357865bd. [ 1173.211437][T27166] RSP: 002b:00007fcf3663fc48 EFLAGS: 00000206 ORIG_RAX: 0000000000000027 [ 1173.219918][T27166] RAX: 0000000000000465 RBX: 00007fcf3663fdb0 RCX: 00007fcf357865e7 [ 1173.227955][T27166] RDX: 00007fcf3663fc80 RSI: 00007fcf3663fdb0 RDI: 0000000000000021 [ 1173.236007][T27166] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1173.244001][T27166] R10: 00000000ffffffff R11: 0000000000000206 R12: 0000000000000073 [ 1173.252030][T27166] R13: 00007fcf36640eb0 R14: 9999999999999999 R15: 0000000000000000 [ 1173.260068][T27166] [ 1173.263115][T27166] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1173.270402][T27166] CPU: 0 PID: 27166 Comm: syz.5.8710 Not tainted syzkaller #0 [ 1173.277870][T27166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1173.287940][T27166] Call Trace: [ 1173.291231][T27166] [ 1173.294173][T27166] dump_stack_lvl+0x168/0x22e [ 1173.298871][T27166] ? memcpy+0x3c/0x60 [ 1173.302972][T27166] ? show_regs_print_info+0x12/0x12 [ 1173.308179][T27166] ? load_image+0x3b0/0x3b0 [ 1173.312708][T27166] panic+0x2c9/0x710 [ 1173.316599][T27166] ? bpf_jit_dump+0xd0/0xd0 [ 1173.321103][T27166] __warn+0x2f8/0x4f0 [ 1173.325079][T27166] ? perf_pending_task+0x358/0x470 [ 1173.330186][T27166] ? perf_pending_task+0x358/0x470 [ 1173.335286][T27166] report_bug+0x2ba/0x4f0 [ 1173.339627][T27166] ? perf_pending_task+0x358/0x470 [ 1173.344732][T27166] handle_bug+0x3a/0x70 [ 1173.348882][T27166] exc_invalid_op+0x16/0x40 [ 1173.353377][T27166] asm_exc_invalid_op+0x16/0x20 [ 1173.358219][T27166] RIP: 0010:perf_pending_task+0x358/0x470 [ 1173.363930][T27166] Code: ff 84 db 75 14 e8 b8 d1 da ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 a4 d1 da ff e8 f7 7b 5a ff eb e5 e8 98 d1 da ff <0f> 0b e9 f3 fe ff ff e8 8c d1 da ff 48 c7 c7 d0 03 bc 8c 4c 89 f6 [ 1173.383529][T27166] RSP: 0018:ffffc9000377f900 EFLAGS: 00010293 [ 1173.389585][T27166] RAX: ffffffff81a604c8 RBX: ffff888056adcc58 RCX: ffff88802c228000 [ 1173.397546][T27166] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1173.405504][T27166] RBP: 0000000000000001 R08: dffffc0000000000 R09: ffffed1005845141 [ 1173.413463][T27166] R10: ffffed1005845141 R11: 1ffff11005845140 R12: ffff88802c228000 [ 1173.421420][T27166] R13: ffff88805758d560 R14: ffff888056adca20 R15: 1ffff1100ad5b944 [ 1173.429406][T27166] ? perf_pending_task+0x358/0x470 [ 1173.434538][T27166] task_work_run+0x1ca/0x250 [ 1173.439132][T27166] ? task_work_cancel+0x230/0x230 [ 1173.444152][T27166] ? do_raw_spin_unlock+0x11d/0x230 [ 1173.449349][T27166] do_exit+0x93e/0x2400 [ 1173.453500][T27166] ? lock_chain_count+0x20/0x20 [ 1173.458343][T27166] ? put_task_struct+0x80/0x80 [ 1173.463098][T27166] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1173.469257][T27166] ? lockdep_hardirqs_on+0x94/0x140 [ 1173.474453][T27166] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1173.480599][T27166] do_group_exit+0x217/0x2d0 [ 1173.485185][T27166] get_signal+0x1272/0x1350 [ 1173.489691][T27166] arch_do_signal_or_restart+0xb7/0x1240 [ 1173.495321][T27166] ? rcu_read_unlock_special+0x500/0x500 [ 1173.500939][T27166] ? preempt_schedule_irq+0xd0/0x150 [ 1173.506219][T27166] ? get_sigframe_size+0x10/0x10 [ 1173.511160][T27166] ? exit_to_user_mode_loop+0x3b/0x110 [ 1173.516616][T27166] exit_to_user_mode_loop+0x70/0x110 [ 1173.521892][T27166] exit_to_user_mode_prepare+0xee/0x180 [ 1173.527438][T27166] syscall_exit_to_user_mode+0x16/0x40 [ 1173.532889][T27166] do_syscall_64+0x58/0xa0 [ 1173.537297][T27166] ? clear_bhb_loop+0x60/0xb0 [ 1173.541963][T27166] ? clear_bhb_loop+0x60/0xb0 [ 1173.546631][T27166] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1173.552514][T27166] RIP: 0033:0x7fcf357865e7 [ 1173.556918][T27166] Code: Unable to access opcode bytes at 0x7fcf357865bd. [ 1173.563921][T27166] RSP: 002b:00007fcf3663fc48 EFLAGS: 00000206 ORIG_RAX: 0000000000000027 [ 1173.572322][T27166] RAX: 0000000000000465 RBX: 00007fcf3663fdb0 RCX: 00007fcf357865e7 [ 1173.580282][T27166] RDX: 00007fcf3663fc80 RSI: 00007fcf3663fdb0 RDI: 0000000000000021 [ 1173.588243][T27166] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1173.596199][T27166] R10: 00000000ffffffff R11: 0000000000000206 R12: 0000000000000073 [ 1173.604162][T27166] R13: 00007fcf36640eb0 R14: 9999999999999999 R15: 0000000000000000 [ 1173.612134][T27166] [ 1173.615379][T27166] Kernel Offset: disabled [ 1173.619698][T27166] Rebooting in 86400 seconds..