last executing test programs: 1.919042762s ago: executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@base={0x16, 0x0, 0xb161}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r3, &(0x7f00000000c0), 0x2, 0x0) 1.709239571s ago: executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x5, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(r4) 1.674182812s ago: executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffe00}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) 1.294167713s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='global_dirty_state\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40001) 1.184429706s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x45, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='ext4_es_insert_delayed_block\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_pid(r2, &(0x7f0000000980), 0x12) 1.149474875s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x45, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='ext4_es_insert_delayed_block\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_pid(r2, &(0x7f0000000980), 0x12) 1.077140551s ago: executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r0, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x4, &(0x7f0000000080)=@raw=[@jmp={0x5, 0x1, 0x3, 0x6, 0x0, 0x10, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xcc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], &(0x7f00000001c0)='GPL\x00', 0x7fff, 0xcc, &(0x7f0000000280)=""/204, 0x41100, 0xa, '\x00', r1, 0x25, r0, 0x8, &(0x7f0000000400)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000440)=[{0x5, 0x2, 0x3, 0x2}, {0x0, 0x1, 0x9, 0x4}, {0x4, 0x1, 0xa, 0xf}, {0x1, 0x4, 0x4, 0x2}, {0x1, 0x4, 0xa, 0x7}], 0x10, 0x1}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x293d, 0x5}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='percpu_alloc_percpu\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000008c0)=@base={0x9, 0x16, 0xb3, 0x7f}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_da_write_pages\x00', r6}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r7, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) 1.046795893s ago: executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, 0x0) write$cgroup_devices(r0, 0x0, 0xffdd) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48) 1.044134804s ago: executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@base={0x16, 0x0, 0xb161}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r3, &(0x7f00000000c0), 0x2, 0x0) 1.006626538s ago: executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffe00}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) 918.751841ms ago: executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x1c, 0x4, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 909.169833ms ago: executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffe00}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) 869.255127ms ago: executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) 777.091272ms ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_request_inode\x00'}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_request_inode\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 596.510595ms ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r3}, 0x10) 570.000996ms ago: executing program 0: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18010000000020e6ffffff00000f000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 541.274401ms ago: executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={r1, 0x2, 0x6}, 0xfffffffffffffdd9) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r2, &(0x7f00000007c0), &(0x7f00000000c0)=""/79}, 0x20) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 504.176227ms ago: executing program 2: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 420.59123ms ago: executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000000c0)='wg0\x00', 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 397.437921ms ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='jbd2_checkpoint\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='jbd2_checkpoint\x00', r3}, 0x10) ioctl$TUNSETOFFLOAD(r1, 0x40086607, 0x20001412) 318.070662ms ago: executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x81, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='ext4_mballoc_prealloc\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x2000) 274.700848ms ago: executing program 0: socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0x42, 0x4, 0x370, 0xffffffff, 0xc8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x5, 0x0, {[{{@ip={@broadcast, @private, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00'}, 0x74000002, 0xa0, 0xc8, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@addrtype={{0x30}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x287, 0x140, 0x168, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'wg0\x00', {}, 'ipvlan1\x00', {}, 0x0, 0x3}}, @common=@unspec=@physdev={{0x68}, {'bridge_slave_0\x00', {}, 'ip6erspan0\x00', {}, 0x0, 0x1b}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) 208.281007ms ago: executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x9, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000240), &(0x7f0000000980)=@tcp}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r2, &(0x7f0000000400), 0x0}, 0x20) 172.291682ms ago: executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r2}, 0x10) ioctl$TUNSETLINK(r0, 0x8905, 0x2000fcc6) 169.242112ms ago: executing program 4: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x8, 0x4, 0x4, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 77.612054ms ago: executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00'}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r4) 76.946878ms ago: executing program 0: bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a40000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x0, 0x3, 0x0, &(0x7f0000281ffc)='GPL\x00'}, 0x90) 51.268599ms ago: executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x34, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}}, 0x0) 6.162595ms ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='mm_page_free_batched\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0x12) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 0s ago: executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): 2442][ T5162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.711311][ T5111] veth1_vlan: entered promiscuous mode [ 57.760722][ T5121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.836473][ T5111] veth0_macvtap: entered promiscuous mode [ 57.863009][ T5109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.877486][ T5111] veth1_macvtap: entered promiscuous mode [ 57.917399][ T5111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.932202][ T5112] veth0_vlan: entered promiscuous mode [ 57.978057][ T5111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.998283][ T5111] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.011986][ T5111] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.021545][ T5111] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.037123][ T5111] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.070125][ T5112] veth1_vlan: entered promiscuous mode [ 58.172920][ T5109] veth0_vlan: entered promiscuous mode [ 58.239094][ T5121] veth0_vlan: entered promiscuous mode [ 58.254599][ T5109] veth1_vlan: entered promiscuous mode [ 58.271624][ T5121] veth1_vlan: entered promiscuous mode [ 58.286872][ T5112] veth0_macvtap: entered promiscuous mode [ 58.329748][ T5112] veth1_macvtap: entered promiscuous mode [ 58.368681][ T1851] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.380598][ T1851] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.403445][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.415970][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.428124][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.463436][ T5109] veth0_macvtap: entered promiscuous mode [ 58.488462][ T5110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.501099][ T5109] veth1_macvtap: entered promiscuous mode [ 58.508617][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.521008][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.534102][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.551012][ T5112] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.559978][ T5112] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.568947][ T5112] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.577959][ T5112] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.603318][ T5121] veth0_macvtap: entered promiscuous mode [ 58.612301][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.613277][ T5121] veth1_macvtap: entered promiscuous mode [ 58.629076][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.762631][ T1851] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.776085][ T5110] veth0_vlan: entered promiscuous mode [ 58.788713][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.801839][ T1851] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.811644][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.843841][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.868317][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.880461][ T5121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.899295][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.912045][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.935621][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.951089][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.962710][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.975362][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.988245][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.999606][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.012176][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.022765][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.033283][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.045689][ T5121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.067260][ T5110] veth1_vlan: entered promiscuous mode [ 59.076915][ T5121] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.086794][ T5121] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.098049][ T5121] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.106974][ T5121] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.129075][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.139801][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.149829][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.160345][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.170640][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.181331][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.192372][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.235724][ T5109] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.253178][ T5109] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.253911][ T5124] Bluetooth: hci3: command tx timeout [ 59.262707][ T5109] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.283107][ T5109] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.303437][ T1851] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.312341][ T1851] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.324223][ T5120] Bluetooth: hci4: command tx timeout [ 59.324240][ T5123] Bluetooth: hci1: command tx timeout [ 59.329716][ T5120] Bluetooth: hci2: command tx timeout [ 59.341515][ T5124] Bluetooth: hci0: command tx timeout [ 59.360141][ T5197] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET) [ 59.431722][ T5110] veth0_macvtap: entered promiscuous mode [ 59.470250][ T5110] veth1_macvtap: entered promiscuous mode [ 59.552460][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.568178][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.587129][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.597766][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.607713][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.618433][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.629281][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.639853][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.660229][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.691839][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.703188][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.725023][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.737592][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.747707][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.762682][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.772756][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.783255][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.805419][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.844812][ T1851] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.852671][ T1851] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.863063][ T929] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.877226][ T929] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.893001][ T5199] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 59.961713][ T5110] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.989465][ T5110] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.017225][ T5110] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.026164][ T5110] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.081988][ T25] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.090366][ T25] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.113466][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.153573][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.245505][ T5214] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 60.269071][ T5214] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.1'. [ 60.298373][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.317994][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.472275][ T1851] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.498684][ T1851] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.508065][ T5223] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 60.530722][ T5223] netlink: 'syz-executor.0': attribute type 15 has an invalid length. [ 60.570631][ T5218] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 60.581847][ T5218] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. [ 60.628003][ T5226] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 61.325706][ T5124] Bluetooth: hci3: command tx timeout [ 61.403872][ T5120] Bluetooth: hci2: command tx timeout [ 61.404196][ T5118] Bluetooth: hci4: command tx timeout [ 61.409308][ T5124] Bluetooth: hci0: command tx timeout [ 61.415039][ T5123] Bluetooth: hci1: command tx timeout [ 61.466262][ T5252] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 61.721494][ T5256] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.0'. [ 62.071760][ T5261] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 62.093788][ T5261] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.3'. [ 62.143995][ T5265] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 62.246261][ T5265] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 62.261136][ T5264] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 62.275456][ T5264] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. [ 62.529200][ T5278] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 62.548128][ T5278] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.3'. [ 62.575559][ T5279] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 62.662854][ T5284] netlink: 'syz-executor.1': attribute type 15 has an invalid length. [ 62.905711][ T5297] Zero length message leads to an empty skb [ 63.511601][ T5320] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 64.799938][ T5371] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.078237][ T5380] __nla_validate_parse: 21 callbacks suppressed [ 65.078256][ T5380] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.4'. [ 65.245203][ T5386] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.1'. [ 65.296111][ T5387] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.4'. [ 65.345118][ T5391] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 65.425309][ T5386] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.1'. [ 65.439164][ T5387] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.4'. [ 65.498080][ T5394] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.0'. [ 65.682299][ T5394] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.0'. [ 65.747504][ T5400] syzkaller0: entered promiscuous mode [ 65.789853][ T5400] syzkaller0: entered allmulticast mode [ 65.906442][ T5400] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 65.931501][ T45] IPVS: starting estimator thread 0... [ 66.043956][ T5411] IPVS: using max 19 ests per chain, 45600 per kthread [ 66.259881][ T5423] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.3'. [ 67.110881][ T5427] validate_nla: 11 callbacks suppressed [ 67.110930][ T5427] netlink: 'syz-executor.0': attribute type 15 has an invalid length. [ 67.127137][ T5428] netlink: 'syz-executor.2': attribute type 15 has an invalid length. [ 67.557722][ T784] IPVS: starting estimator thread 0... [ 67.665251][ T5451] IPVS: using max 22 ests per chain, 52800 per kthread [ 67.907483][ T5461] syzkaller0: entered promiscuous mode [ 67.913113][ T5461] syzkaller0: entered allmulticast mode [ 67.920963][ T5467] netlink: 'syz-executor.2': attribute type 15 has an invalid length. [ 67.942261][ T5470] netlink: 'syz-executor.1': attribute type 15 has an invalid length. [ 68.875374][ T5480] xt_l2tp: missing protocol rule (udp|l2tpip) [ 68.918788][ T5124] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.929034][ T5124] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.939364][ T5124] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.956932][ T5124] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.965386][ T5124] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 68.977663][ T5124] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.499898][ T5487] tipc: Enabling of bearer rejected, failed to enable media [ 69.680798][ T5110] syz-executor.3 (5110) used greatest stack depth: 17272 bytes left [ 69.770766][ T5498] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 69.793420][ T1851] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.881069][ T5499] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 69.907402][ T1851] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.932386][ T5506] netlink: 'syz-executor.0': attribute type 15 has an invalid length. [ 70.006617][ T1851] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.042580][ T5503] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 70.145921][ T1851] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.209393][ T5482] chnl_net:caif_netlink_parms(): no params data found [ 70.336771][ T5521] syzkaller0: entered promiscuous mode [ 70.344042][ T5521] syzkaller0: entered allmulticast mode [ 70.373554][ T9] IPVS: starting estimator thread 0... [ 70.463850][ T5528] IPVS: using max 18 ests per chain, 43200 per kthread [ 70.476801][ T5533] xt_l2tp: missing protocol rule (udp|l2tpip) [ 70.491868][ T5523] tipc: Enabling of bearer rejected, failed to enable media [ 70.502588][ T5482] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.520439][ T5482] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.530309][ T5482] bridge_slave_0: entered allmulticast mode [ 70.544444][ T5482] bridge_slave_0: entered promiscuous mode [ 70.562655][ T5482] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.588169][ T5482] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.601711][ T5482] bridge_slave_1: entered allmulticast mode [ 70.609209][ T5482] bridge_slave_1: entered promiscuous mode [ 70.629457][ T5524] __nla_validate_parse: 14 callbacks suppressed [ 70.629591][ T5524] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 70.650900][ T5536] tipc: Enabling of bearer rejected, failed to enable media [ 70.798907][ T5482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.815036][ T1851] bridge_slave_1: left allmulticast mode [ 70.822457][ T1851] bridge_slave_1: left promiscuous mode [ 70.836579][ T1851] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.856234][ T1851] bridge_slave_0: left allmulticast mode [ 70.868196][ T1851] bridge_slave_0: left promiscuous mode [ 70.878651][ T1851] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.007140][ T5123] Bluetooth: hci2: command tx timeout [ 71.218531][ T1851] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 71.232221][ T1851] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.242962][ T1851] bond0 (unregistering): Released all slaves [ 71.265584][ T5482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.335075][ T5544] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 71.436382][ T5549] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 71.463800][ T5549] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.4'. [ 71.654416][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.661135][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.696388][ T5482] team0: Port device team_slave_0 added [ 72.720829][ T5482] team0: Port device team_slave_1 added [ 72.763076][ T5554] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 72.788146][ T5554] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.1'. [ 72.858596][ T5482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.883800][ T5482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.910178][ T5482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.930283][ T5482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.938370][ T5482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.970595][ T5482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.996254][ T5571] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 73.005947][ T5571] netlink: 'syz-executor.2': attribute type 15 has an invalid length. [ 73.059543][ T5557] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 73.075497][ T5557] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.1'. [ 73.085791][ T5123] Bluetooth: hci2: command tx timeout [ 73.103355][ T5482] hsr_slave_0: entered promiscuous mode [ 73.118162][ T5482] hsr_slave_1: entered promiscuous mode [ 73.134790][ T5482] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.143445][ T5482] Cannot create hsr debugfs directory [ 73.168284][ T5569] tipc: Enabling of bearer rejected, failed to enable media [ 73.300352][ T5574] tipc: Enabling of bearer rejected, failed to enable media [ 73.435564][ T5582] xt_l2tp: missing protocol rule (udp|l2tpip) [ 73.455865][ T1851] hsr_slave_0: left promiscuous mode [ 73.473197][ T1851] hsr_slave_1: left promiscuous mode [ 73.488803][ T1851] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.498817][ T1851] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.509593][ T1851] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.518030][ T1851] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.538399][ T1851] veth1_macvtap: left promiscuous mode [ 73.544276][ T1851] veth0_macvtap: left promiscuous mode [ 73.552995][ T1851] veth1_vlan: left promiscuous mode [ 73.559959][ T1851] veth0_vlan: left promiscuous mode [ 74.195948][ T1851] team0 (unregistering): Port device team_slave_1 removed [ 74.248821][ T1851] team0 (unregistering): Port device team_slave_0 removed [ 74.581821][ T5594] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 74.600779][ T5595] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 74.655772][ T5592] syzkaller0: entered promiscuous mode [ 74.661303][ T5592] syzkaller0: entered allmulticast mode [ 74.672225][ T5602] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 74.774559][ T5604] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 74.801562][ T5604] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.1'. [ 75.167065][ T5123] Bluetooth: hci2: command tx timeout [ 75.897674][ T5613] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 75.938224][ T5612] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 75.969092][ T5612] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.4'. [ 76.023911][ T5614] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 76.031443][ T1851] IPVS: stop unused estimator thread 0... [ 76.033570][ T5614] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.4'. [ 76.133696][ T5622] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 76.146029][ T5622] netlink: 'syz-executor.0': attribute type 15 has an invalid length. [ 76.167518][ T5619] tipc: Enabling of bearer rejected, failed to enable media [ 76.195261][ T5621] tipc: Enabling of bearer rejected, failed to enable media [ 76.323917][ T5630] xt_l2tp: missing protocol rule (udp|l2tpip) [ 76.448304][ T5482] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.467580][ T5482] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.491630][ T5632] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 76.521899][ T5482] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.539958][ T5482] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.653362][ T5635] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 76.755632][ T5642] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 76.764711][ T5640] syzkaller0: entered promiscuous mode [ 76.765066][ T930] cfg80211: failed to load regulatory.db [ 76.770925][ T5640] syzkaller0: entered allmulticast mode [ 76.786048][ T5642] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.1'. [ 76.908279][ T5482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.934819][ T5640] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 76.961908][ T5646] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 76.978255][ T5482] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.990562][ T5646] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.1'. [ 77.045357][ T784] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.052930][ T784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.064378][ T784] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.071516][ T784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.243793][ T5123] Bluetooth: hci2: command tx timeout [ 78.068977][ T5654] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 78.118571][ T5649] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 78.160754][ T5649] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.1'. [ 78.564191][ T5681] xt_l2tp: missing protocol rule (udp|l2tpip) [ 78.580312][ T5666] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 78.639061][ T5670] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 78.672668][ T5679] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 78.690270][ T5679] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 78.772535][ T5482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.888153][ T5687] syzkaller0: entered promiscuous mode [ 78.901046][ T5687] syzkaller0: entered allmulticast mode [ 78.981009][ T5482] veth0_vlan: entered promiscuous mode [ 79.003905][ T5482] veth1_vlan: entered promiscuous mode [ 79.055813][ T5687] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 79.072964][ T5482] veth0_macvtap: entered promiscuous mode [ 79.102895][ T5694] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 79.469836][ T5701] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 79.478241][ T5701] netlink: 9344 bytes leftover after parsing attributes in process `syz-executor.1'. [ 79.491444][ T5701] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 79.771636][ T5706] Bluetooth: MGMT ver 1.22 [ 80.244416][ T5482] veth1_macvtap: entered promiscuous mode [ 80.282222][ T5482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.332664][ T5482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.356008][ T5482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.384109][ T5482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.403812][ T5482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.422941][ T5482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.439304][ T5482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.480089][ T5482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.505463][ T5482] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.627288][ T5482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.642433][ T5482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.652656][ T5482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.663545][ T5482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.675693][ T5482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.686730][ T5482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.696937][ T5482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.710726][ T5482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.729286][ T5482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.758074][ T5482] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.767997][ T5482] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.787356][ T5482] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.800832][ T5482] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.060126][ T1101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.082356][ T1101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.145508][ T930] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.160845][ T930] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.395798][ T5737] __nla_validate_parse: 1 callbacks suppressed [ 81.395816][ T5737] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 81.422230][ T5737] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 81.804007][ T5123] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 81.811245][ T5123] Bluetooth: hci0: command 0x0401 tx timeout [ 83.469191][ T5786] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 83.492874][ T5786] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 83.509814][ T5787] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 83.522740][ T5787] netlink: 'syz-executor.2': attribute type 15 has an invalid length. [ 83.538730][ T29] audit: type=1800 audit(1717281246.358:2): pid=5789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1966 res=0 errno=0 [ 84.444283][ T5124] Bluetooth: hci0: command 0x0401 tx timeout [ 84.450427][ T5123] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 85.834023][ T29] audit: type=1800 audit(1717281248.658:3): pid=5832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1968 res=0 errno=0 [ 86.063460][ T5836] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 86.099971][ T5836] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 86.653952][ T29] audit: type=1800 audit(1717281249.468:4): pid=5843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1965 res=0 errno=0 [ 86.696041][ T5845] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 86.705761][ T5845] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 87.754197][ T29] audit: type=1800 audit(1717281250.578:5): pid=5863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1929 res=0 errno=0 [ 88.773937][ T5123] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 88.780113][ T5124] Bluetooth: hci0: command 0x0401 tx timeout [ 88.896078][ T5123] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.909084][ T5123] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.920065][ T5123] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.940416][ T5123] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.955767][ T5123] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 88.964124][ T5123] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.097251][ T1101] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.155684][ T29] audit: type=1800 audit(1717281251.978:6): pid=5896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1959 res=0 errno=0 [ 89.254278][ T1101] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.418631][ T29] audit: type=1800 audit(1717281252.238:7): pid=5900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1941 res=0 errno=0 [ 89.446798][ T1101] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.519986][ T5904] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 89.539487][ T5904] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 89.637654][ T1101] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.788183][ T29] audit: type=1800 audit(1717281252.608:8): pid=5915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1957 res=0 errno=0 [ 89.967659][ T1101] bridge_slave_1: left allmulticast mode [ 89.973316][ T1101] bridge_slave_1: left promiscuous mode [ 89.979364][ T1101] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.988537][ T1101] bridge_slave_0: left allmulticast mode [ 89.995471][ T1101] bridge_slave_0: left promiscuous mode [ 90.003784][ T1101] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.503939][ T29] audit: type=1800 audit(1717281253.318:9): pid=5939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1961 res=0 errno=0 [ 90.661618][ T1101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.685378][ T1101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.712973][ T1101] bond0 (unregistering): Released all slaves [ 90.744671][ T1101] bond1 (unregistering): Released all slaves [ 90.977247][ T5893] chnl_net:caif_netlink_parms(): no params data found [ 91.014164][ T5123] Bluetooth: hci4: command tx timeout [ 91.350865][ T29] audit: type=1800 audit(1717281254.168:10): pid=5959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1961 res=0 errno=0 [ 91.521220][ T5965] xt_TCPMSS: Only works on TCP SYN packets [ 91.538280][ T5965] Bluetooth: MGMT ver 1.22 [ 91.644225][ T5893] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.651379][ T5893] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.678722][ T5893] bridge_slave_0: entered allmulticast mode [ 91.696892][ T5893] bridge_slave_0: entered promiscuous mode [ 91.748572][ T5893] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.770910][ T5893] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.802316][ T5893] bridge_slave_1: entered allmulticast mode [ 91.830352][ T5893] bridge_slave_1: entered promiscuous mode [ 92.020470][ T5893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.065378][ T5893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.088101][ T5970] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 92.177000][ T5970] batman_adv: batadv0: Adding interface: team0 [ 92.205131][ T5970] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.261110][ T5970] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 92.387146][ T5975] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.0'. [ 92.428009][ T5973] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 92.558034][ T5893] team0: Port device team_slave_0 added [ 92.633139][ T5985] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 92.643316][ T5985] netlink: 'syz-executor.2': attribute type 15 has an invalid length. [ 92.666346][ T5893] team0: Port device team_slave_1 added [ 92.798470][ T5893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.807991][ T5893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.834606][ T5893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.857362][ T1101] hsr_slave_0: left promiscuous mode [ 92.864922][ T1101] hsr_slave_1: left promiscuous mode [ 92.884418][ T1101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.891854][ T1101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.900139][ T1101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.908885][ T1101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.931303][ T1101] veth1_macvtap: left promiscuous mode [ 92.936935][ T1101] veth0_macvtap: left promiscuous mode [ 92.942481][ T1101] veth1_vlan: left promiscuous mode [ 92.947882][ T1101] veth0_vlan: left promiscuous mode [ 92.975346][ T29] audit: type=1800 audit(1717281255.798:11): pid=6001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1951 res=0 errno=0 [ 93.084214][ T5123] Bluetooth: hci4: command tx timeout [ 93.402369][ T1101] team0 (unregistering): Port device team_slave_1 removed [ 93.447241][ T1101] team0 (unregistering): Port device team_slave_0 removed [ 93.788880][ T5893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.796281][ T5893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.826969][ T5893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.961778][ T5893] hsr_slave_0: entered promiscuous mode [ 93.996462][ T5893] hsr_slave_1: entered promiscuous mode [ 94.009402][ T5893] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.020013][ T5893] Cannot create hsr debugfs directory [ 94.071382][ T6016] gretap0: entered promiscuous mode [ 94.091761][ T6016] gretap0: left promiscuous mode [ 94.280112][ T6027] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 94.307729][ T6027] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.2'. [ 94.474152][ T1101] IPVS: stop unused estimator thread 0... [ 94.977405][ T6053] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 95.004993][ T6053] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.3'. [ 95.043152][ T5893] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.069386][ T6057] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 95.079719][ T5893] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.101170][ T5893] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.129884][ T5893] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.168781][ T6057] bridge0: entered promiscuous mode [ 95.176234][ T5123] Bluetooth: hci4: command tx timeout [ 95.192748][ T6057] bridge0: left promiscuous mode [ 95.270796][ T6065] ip6gretap0: entered promiscuous mode [ 95.279963][ T6065] ip6gretap0: left promiscuous mode [ 95.362070][ T29] audit: type=1804 audit(1717281258.178:12): pid=6068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2909292800/syzkaller.JncgNv/73/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 95.499425][ T5893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.561607][ T5893] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.602831][ T930] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.610139][ T930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.650862][ T930] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.658054][ T930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.723449][ T6083] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 95.748882][ T6083] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.3'. [ 95.755636][ T29] audit: type=1804 audit(1717281258.578:13): pid=6079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3590825101/syzkaller.OumN9F/55/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 95.789126][ T5893] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.942186][ T6079] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 14 (only 8 groups) [ 96.053918][ T5893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.253993][ T29] audit: type=1804 audit(1717281259.068:14): pid=6104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2909292800/syzkaller.JncgNv/78/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0 [ 96.608032][ T5893] veth0_vlan: entered promiscuous mode [ 96.639147][ T5893] veth1_vlan: entered promiscuous mode [ 96.698127][ T5893] veth0_macvtap: entered promiscuous mode [ 96.727503][ T5893] veth1_macvtap: entered promiscuous mode [ 96.742693][ T6121] warning: `syz-executor.0' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 96.774354][ T5893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.800023][ T5893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.812110][ T5893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.822677][ T5893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.835012][ T5893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.847141][ T5893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.857148][ T5893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.867763][ T5893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.879570][ T5893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.905776][ T5893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.920373][ T5893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.932156][ T5893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.942797][ T5893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.954724][ T5893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.966363][ T5893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.976393][ T5893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.987038][ T5893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.998914][ T5893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.021414][ T5893] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.031938][ T5893] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.048668][ T5893] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.062665][ T5893] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.213481][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.240528][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.253995][ T5123] Bluetooth: hci4: command tx timeout [ 97.322764][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.363634][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.542343][ T5124] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.562422][ T5124] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.591525][ T5124] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.605927][ T5124] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.613870][ T5124] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 97.621907][ T5124] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.647915][ T6131] __nla_validate_parse: 3 callbacks suppressed [ 97.647930][ T6131] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 97.677154][ T6131] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 97.685067][ T29] audit: type=1804 audit(1717281260.498:15): pid=6136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2909292800/syzkaller.JncgNv/82/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 [ 97.722110][ T6133] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 97.784691][ T6139] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.0'. [ 97.823106][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.848381][ T6142] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan1, syncid = 0, id = 0 [ 97.958101][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.116842][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.219943][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.445172][ T29] audit: type=1804 audit(1717281261.248:16): pid=6171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3474540356/syzkaller.mFhJWF/1/cgroup.controllers" dev="sda1" ino=1949 res=1 errno=0 [ 98.631512][ T6128] chnl_net:caif_netlink_parms(): no params data found [ 98.657210][ T11] bridge_slave_1: left allmulticast mode [ 98.668940][ T11] bridge_slave_1: left promiscuous mode [ 98.680808][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.702859][ T11] bridge_slave_0: left allmulticast mode [ 98.712265][ T11] bridge_slave_0: left promiscuous mode [ 98.725178][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.027689][ T5124] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 99.036790][ T5124] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 99.045109][ T5124] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 99.060303][ T5124] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 99.068384][ T5124] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 99.075972][ T5124] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 99.361412][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.372636][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.383261][ T11] bond0 (unregistering): Released all slaves [ 99.644235][ T5124] Bluetooth: hci2: command tx timeout [ 99.712393][ T6197] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 99.736628][ T6197] netlink: 'syz-executor.1': attribute type 15 has an invalid length. [ 99.800789][ T6128] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.808604][ T6128] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.816111][ T6128] bridge_slave_0: entered allmulticast mode [ 99.827211][ T6128] bridge_slave_0: entered promiscuous mode [ 99.859165][ T6128] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.871816][ T6128] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.880397][ T6128] bridge_slave_1: entered allmulticast mode [ 99.896962][ T6128] bridge_slave_1: entered promiscuous mode [ 99.973529][ T6207] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 100.012998][ T11] hsr_slave_0: left promiscuous mode [ 100.028735][ T11] hsr_slave_1: left promiscuous mode [ 100.038386][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.059577][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.068323][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.083266][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.127260][ T11] veth1_macvtap: left promiscuous mode [ 100.132827][ T11] veth0_macvtap: left promiscuous mode [ 100.138525][ T11] veth1_vlan: left promiscuous mode [ 100.143945][ T11] veth0_vlan: left promiscuous mode [ 100.652222][ T11] team0 (unregistering): Port device team_slave_1 removed [ 100.709867][ T11] team0 (unregistering): Port device team_slave_0 removed [ 101.048006][ T6128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.106177][ T6128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.165474][ T5124] Bluetooth: hci3: command tx timeout [ 101.213463][ T6128] team0: Port device team_slave_0 added [ 101.242922][ T6128] team0: Port device team_slave_1 added [ 101.318717][ T6224] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 101.518801][ T6128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.533682][ T6128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.561815][ T6128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.580183][ T6128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.599288][ T6128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.638374][ T6128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.651390][ T6245] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 101.660992][ T6245] netlink: 'syz-executor.0': attribute type 15 has an invalid length. [ 101.729089][ T5124] Bluetooth: hci2: command tx timeout [ 101.754604][ T6176] chnl_net:caif_netlink_parms(): no params data found [ 101.932897][ T6128] hsr_slave_0: entered promiscuous mode [ 101.943458][ T6128] hsr_slave_1: entered promiscuous mode [ 101.952289][ T6128] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.960285][ T6128] Cannot create hsr debugfs directory [ 102.068910][ T6176] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.080504][ T6176] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.087855][ T6176] bridge_slave_0: entered allmulticast mode [ 102.095391][ T6176] bridge_slave_0: entered promiscuous mode [ 102.104361][ T6176] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.111661][ T6176] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.119072][ T6176] bridge_slave_1: entered allmulticast mode [ 102.128231][ T6176] bridge_slave_1: entered promiscuous mode [ 102.177342][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.240206][ T6176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.281053][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.306037][ T6176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.405999][ T6176] team0: Port device team_slave_0 added [ 102.432942][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.532460][ T6176] team0: Port device team_slave_1 added [ 102.602813][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.744562][ T6176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.751714][ T6176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.812136][ T6176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.845194][ T6176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.852164][ T6176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.878370][ T6176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.048876][ T6176] hsr_slave_0: entered promiscuous mode [ 103.062295][ T6176] hsr_slave_1: entered promiscuous mode [ 103.069159][ T6176] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.077182][ T6176] Cannot create hsr debugfs directory [ 103.115215][ T6285] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 103.142116][ T6285] netlink: 'syz-executor.0': attribute type 15 has an invalid length. [ 103.162945][ T11] bridge_slave_1: left allmulticast mode [ 103.170285][ T11] bridge_slave_1: left promiscuous mode [ 103.176467][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.187009][ T11] bridge_slave_0: left allmulticast mode [ 103.200056][ T11] bridge_slave_0: left promiscuous mode [ 103.206084][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.244510][ T5124] Bluetooth: hci3: command tx timeout [ 103.612984][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.628530][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.639165][ T11] bond0 (unregistering): Released all slaves [ 103.811935][ T5124] Bluetooth: hci2: command tx timeout [ 103.927853][ T6128] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 104.005353][ T6128] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 104.022630][ T6128] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 104.128031][ T6128] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 104.439181][ T11] hsr_slave_0: left promiscuous mode [ 104.470877][ T11] hsr_slave_1: left promiscuous mode [ 104.481590][ T11] batman_adv: batadv0: Removing interface: team0 [ 104.494732][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.510049][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.527987][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.550757][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.591502][ T11] veth1_macvtap: left promiscuous mode [ 104.600649][ T11] veth0_macvtap: left promiscuous mode [ 104.610955][ T11] veth1_vlan: left promiscuous mode [ 104.630442][ T11] veth0_vlan: left promiscuous mode [ 105.199138][ T11] team0 (unregistering): Port device team_slave_1 removed [ 105.231580][ T11] team0 (unregistering): Port device team_slave_0 removed [ 105.323834][ T5124] Bluetooth: hci3: command tx timeout [ 105.550487][ T6326] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 105.560038][ T6326] netlink: 'syz-executor.1': attribute type 15 has an invalid length. [ 105.690887][ T6128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.747969][ T6128] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.785922][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.793082][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.867520][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.874722][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.887855][ T5124] Bluetooth: hci2: command tx timeout [ 105.969310][ T6176] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 106.010566][ T6176] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 106.062284][ T6176] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 106.096442][ T6176] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 106.200453][ T6343] pimreg: entered allmulticast mode [ 106.281075][ T6343] pimreg: left allmulticast mode [ 106.382365][ T6176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.433058][ T6176] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.462486][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.469658][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.482459][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.489661][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.630045][ T6128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.756726][ T6128] veth0_vlan: entered promiscuous mode [ 106.790849][ T6128] veth1_vlan: entered promiscuous mode [ 106.864465][ T6128] veth0_macvtap: entered promiscuous mode [ 106.880561][ T6128] veth1_macvtap: entered promiscuous mode [ 106.908180][ T6128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.928405][ T6128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.941653][ T6128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.957577][ T6128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.969636][ T6128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.980365][ T6128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.997519][ T6128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.007716][ T6370] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 107.019817][ T6370] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 107.040021][ T6128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.053459][ T6128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.070754][ T6128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.091918][ T6128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.102021][ T6128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.118398][ T6128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.135283][ T6128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.160775][ T6128] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.170533][ T6128] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.182440][ T6128] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.201648][ T6128] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.233141][ T6176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.414029][ T5124] Bluetooth: hci3: command tx timeout [ 107.430357][ T1059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.459023][ T1059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.481952][ T6176] veth0_vlan: entered promiscuous mode [ 107.517387][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.531422][ T6176] veth1_vlan: entered promiscuous mode [ 107.541334][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.586605][ T6176] veth0_macvtap: entered promiscuous mode [ 107.599460][ T6176] veth1_macvtap: entered promiscuous mode [ 107.633544][ T6378] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.3'. [ 107.636937][ T6176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.658799][ T6176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.670035][ T6176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.680840][ T6176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.691097][ T6176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.701569][ T6176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.711769][ T6176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.722473][ T6176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.744585][ T6176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.763199][ T6176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.774380][ T6176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.784289][ T6176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.795396][ T6176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.805689][ T6176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.822832][ T6176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.832761][ T6176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.843375][ T6176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.858218][ T6176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.874172][ T6176] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.882855][ T6176] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.891917][ T6176] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.901353][ T6176] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.991175][ T1851] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.006219][ T1851] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.024988][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.032828][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.798168][ T6416] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 114.812235][ T6416] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 114.844032][ T6417] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 114.867570][ T6417] netlink: 'syz-executor.2': attribute type 15 has an invalid length. [ 115.767827][ T6448] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 115.780831][ T6448] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 115.942702][ T6448] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.979108][ T6448] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.995752][ T6448] bond0 (unregistering): Released all slaves [ 116.209112][ T6457] Driver unsupported XDP return value 0 on prog (id 172) dev N/A, expect packet loss! [ 116.271477][ T6463] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 116.330891][ T6463] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 116.474574][ T6477] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 116.486138][ T6477] netlink: 'syz-executor.1': attribute type 15 has an invalid length. [ 116.496493][ T6478] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 116.507888][ T6478] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 116.674560][ T6487] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 117.861942][ T6520] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 117.893532][ T6520] netlink: 'syz-executor.0': attribute type 15 has an invalid length. [ 118.008104][ T6525] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 118.021454][ T6525] netlink: 'syz-executor.2': attribute type 15 has an invalid length. [ 118.420177][ T6537] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 118.460172][ T6537] sysfs: cannot create duplicate filename '/class/ieee80211/ü !' [ 118.477732][ T6537] CPU: 1 PID: 6537 Comm: syz-executor.4 Not tainted 6.10.0-rc1-syzkaller-00104-gd8ec19857b09 #0 [ 118.488172][ T6537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 118.498230][ T6537] Call Trace: [ 118.501505][ T6537] [ 118.504436][ T6537] dump_stack_lvl+0x241/0x360 [ 118.509162][ T6537] ? __pfx_dump_stack_lvl+0x10/0x10 [ 118.514386][ T6537] ? __pfx__printk+0x10/0x10 [ 118.518993][ T6537] ? sysfs_warn_dup+0x51/0xa0 [ 118.523679][ T6537] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 118.529079][ T6537] sysfs_warn_dup+0x8e/0xa0 [ 118.533614][ T6537] sysfs_do_create_link_sd+0xbe/0x110 [ 118.539003][ T6537] device_add_class_symlinks+0x1c5/0x250 [ 118.544655][ T6537] device_add+0x553/0xbf0 [ 118.549005][ T6537] wiphy_register+0x1d3f/0x2b30 [ 118.553878][ T6537] ? __pfx_wiphy_register+0x10/0x10 [ 118.559070][ T6537] ? minstrel_ht_alloc+0x72b/0x860 [ 118.564184][ T6537] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 118.570251][ T6537] ieee80211_register_hw+0x3098/0x3d80 [ 118.575716][ T6537] ? ieee80211_register_hw+0x1181/0x3d80 [ 118.581350][ T6537] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 118.587162][ T6537] ? __asan_memset+0x23/0x50 [ 118.591745][ T6537] ? __hrtimer_init+0x170/0x250 [ 118.596597][ T6537] mac80211_hwsim_new_radio+0x2597/0x44c0 [ 118.602331][ T6537] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 118.608394][ T6537] ? kmalloc_node_track_caller_noprof+0x242/0x440 [ 118.614831][ T6537] ? kstrndup+0x5c/0xb0 [ 118.618995][ T6537] ? __asan_memcpy+0x40/0x70 [ 118.623589][ T6537] hwsim_new_radio_nl+0xe4c/0x21d0 [ 118.628714][ T6537] ? __pfx___nla_validate_parse+0x10/0x10 [ 118.634432][ T6537] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 118.640001][ T6537] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 118.646339][ T6537] genl_rcv_msg+0xb14/0xec0 [ 118.650845][ T6537] ? mark_lock+0x9a/0x350 [ 118.655181][ T6537] ? __pfx_genl_rcv_msg+0x10/0x10 [ 118.660228][ T6537] ? __pfx_lock_acquire+0x10/0x10 [ 118.665246][ T6537] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 118.670785][ T6537] ? __pfx___might_resched+0x10/0x10 [ 118.676078][ T6537] netlink_rcv_skb+0x1e3/0x430 [ 118.680838][ T6537] ? __pfx_genl_rcv_msg+0x10/0x10 [ 118.685866][ T6537] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 118.691158][ T6537] ? __netlink_deliver_tap+0x77e/0x7c0 [ 118.696623][ T6537] genl_rcv+0x28/0x40 [ 118.700600][ T6537] netlink_unicast+0x7ea/0x980 [ 118.705375][ T6537] ? __pfx_netlink_unicast+0x10/0x10 [ 118.710657][ T6537] ? __virt_addr_valid+0x183/0x520 [ 118.715774][ T6537] ? __check_object_size+0x49c/0x900 [ 118.721056][ T6537] ? bpf_lsm_netlink_send+0x9/0x10 [ 118.726168][ T6537] netlink_sendmsg+0x8db/0xcb0 [ 118.730937][ T6537] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.736217][ T6537] ? __import_iovec+0x536/0x820 [ 118.741251][ T6537] ? aa_sock_msg_perm+0x91/0x160 [ 118.746203][ T6537] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 118.751485][ T6537] ? security_socket_sendmsg+0x87/0xb0 [ 118.756944][ T6537] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.762225][ T6537] __sock_sendmsg+0x221/0x270 [ 118.766910][ T6537] ____sys_sendmsg+0x525/0x7d0 [ 118.771686][ T6537] ? __pfx_____sys_sendmsg+0x10/0x10 [ 118.776986][ T6537] __sys_sendmsg+0x2b0/0x3a0 [ 118.781573][ T6537] ? __pfx___sys_sendmsg+0x10/0x10 [ 118.786731][ T6537] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 118.793054][ T6537] ? do_syscall_64+0x100/0x230 [ 118.797816][ T6537] ? do_syscall_64+0xb6/0x230 [ 118.802494][ T6537] do_syscall_64+0xf3/0x230 [ 118.806996][ T6537] ? clear_bhb_loop+0x35/0x90 [ 118.811672][ T6537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.817570][ T6537] RIP: 0033:0x7fb52947cee9 [ 118.821993][ T6537] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 118.841590][ T6537] RSP: 002b:00007fb52a2af0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.849998][ T6537] RAX: ffffffffffffffda RBX: 00007fb5295b3fa0 RCX: 00007fb52947cee9 [ 118.857961][ T6537] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000005 [ 118.865922][ T6537] RBP: 00007fb5294c947f R08: 0000000000000000 R09: 0000000000000000 [ 118.873882][ T6537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.881839][ T6537] R13: 000000000000000b R14: 00007fb5295b3fa0 R15: 00007ffd5803aa78 [ 118.889825][ T6537] [ 119.544168][ T6579] netlink: 'syz-executor.2': attribute type 15 has an invalid length. [ 119.748875][ T6584] debugfs: Directory 'ü !' with parent 'ieee80211' already present! [ 120.229835][ T6601] __nla_validate_parse: 2 callbacks suppressed [ 120.229882][ T6601] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 120.253992][ T6601] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 120.946903][ T6630] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 120.984112][ T6630] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 121.100697][ T6634] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 121.126862][ T6634] sysfs: cannot create duplicate filename '/class/ieee80211/ü !' [ 121.138755][ T6634] CPU: 0 PID: 6634 Comm: syz-executor.4 Not tainted 6.10.0-rc1-syzkaller-00104-gd8ec19857b09 #0 [ 121.149211][ T6634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 121.159284][ T6634] Call Trace: [ 121.162576][ T6634] [ 121.165522][ T6634] dump_stack_lvl+0x241/0x360 [ 121.170230][ T6634] ? __pfx_dump_stack_lvl+0x10/0x10 [ 121.175450][ T6634] ? __pfx__printk+0x10/0x10 [ 121.180066][ T6634] ? sysfs_warn_dup+0x51/0xa0 [ 121.184769][ T6634] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 121.190177][ T6634] sysfs_warn_dup+0x8e/0xa0 [ 121.194709][ T6634] sysfs_do_create_link_sd+0xbe/0x110 [ 121.200110][ T6634] device_add_class_symlinks+0x1c5/0x250 [ 121.205773][ T6634] device_add+0x553/0xbf0 [ 121.210136][ T6634] wiphy_register+0x1d3f/0x2b30 [ 121.215034][ T6634] ? __pfx_wiphy_register+0x10/0x10 [ 121.220256][ T6634] ? minstrel_ht_alloc+0x72b/0x860 [ 121.225394][ T6634] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 121.231492][ T6634] ieee80211_register_hw+0x3098/0x3d80 [ 121.236991][ T6634] ? ieee80211_register_hw+0x1181/0x3d80 [ 121.242647][ T6634] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 121.248486][ T6634] ? __asan_memset+0x23/0x50 [ 121.253101][ T6634] ? __hrtimer_init+0x170/0x250 [ 121.257983][ T6634] mac80211_hwsim_new_radio+0x2597/0x44c0 [ 121.263739][ T6634] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 121.269812][ T6634] ? kmalloc_node_track_caller_noprof+0x242/0x440 [ 121.276235][ T6634] ? kstrndup+0x5c/0xb0 [ 121.280394][ T6634] ? __asan_memcpy+0x40/0x70 [ 121.284979][ T6634] hwsim_new_radio_nl+0xe4c/0x21d0 [ 121.290093][ T6634] ? __pfx___nla_validate_parse+0x10/0x10 [ 121.295813][ T6634] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 121.301383][ T6634] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 121.307716][ T6634] genl_rcv_msg+0xb14/0xec0 [ 121.312211][ T6634] ? mark_lock+0x9a/0x350 [ 121.316545][ T6634] ? __pfx_genl_rcv_msg+0x10/0x10 [ 121.321586][ T6634] ? __pfx_lock_acquire+0x10/0x10 [ 121.326601][ T6634] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 121.332141][ T6634] ? __pfx___might_resched+0x10/0x10 [ 121.337430][ T6634] netlink_rcv_skb+0x1e3/0x430 [ 121.342185][ T6634] ? __pfx_genl_rcv_msg+0x10/0x10 [ 121.347207][ T6634] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 121.352495][ T6634] ? __netlink_deliver_tap+0x77e/0x7c0 [ 121.357956][ T6634] genl_rcv+0x28/0x40 [ 121.361934][ T6634] netlink_unicast+0x7ea/0x980 [ 121.366705][ T6634] ? __pfx_netlink_unicast+0x10/0x10 [ 121.371998][ T6634] ? __virt_addr_valid+0x183/0x520 [ 121.377124][ T6634] ? __check_object_size+0x49c/0x900 [ 121.382405][ T6634] ? bpf_lsm_netlink_send+0x9/0x10 [ 121.387516][ T6634] netlink_sendmsg+0x8db/0xcb0 [ 121.392284][ T6634] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.397563][ T6634] ? __import_iovec+0x536/0x820 [ 121.402404][ T6634] ? aa_sock_msg_perm+0x91/0x160 [ 121.407335][ T6634] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 121.412609][ T6634] ? security_socket_sendmsg+0x87/0xb0 [ 121.418065][ T6634] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.423338][ T6634] __sock_sendmsg+0x221/0x270 [ 121.428012][ T6634] ____sys_sendmsg+0x525/0x7d0 [ 121.432781][ T6634] ? __pfx_____sys_sendmsg+0x10/0x10 [ 121.438078][ T6634] __sys_sendmsg+0x2b0/0x3a0 [ 121.442660][ T6634] ? __pfx___sys_sendmsg+0x10/0x10 [ 121.447808][ T6634] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 121.454131][ T6634] ? do_syscall_64+0x100/0x230 [ 121.458901][ T6634] ? do_syscall_64+0xb6/0x230 [ 121.463579][ T6634] do_syscall_64+0xf3/0x230 [ 121.468077][ T6634] ? clear_bhb_loop+0x35/0x90 [ 121.472752][ T6634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.478637][ T6634] RIP: 0033:0x7fb52947cee9 [ 121.483042][ T6634] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 121.502651][ T6634] RSP: 002b:00007fb52a2af0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.511067][ T6634] RAX: ffffffffffffffda RBX: 00007fb5295b3fa0 RCX: 00007fb52947cee9 [ 121.519030][ T6634] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000005 [ 121.526992][ T6634] RBP: 00007fb5294c947f R08: 0000000000000000 R09: 0000000000000000 [ 121.534952][ T6634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.542913][ T6634] R13: 000000000000000b R14: 00007fb5295b3fa0 R15: 00007ffd5803aa78 [ 121.550890][ T6634] [ 122.361638][ T6666] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 122.379779][ T6666] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 122.405563][ T6668] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 122.416826][ T6668] netlink: 'syz-executor.1': attribute type 15 has an invalid length. [ 122.531979][ T6675] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 122.558120][ T6675] netlink: 'syz-executor.2': attribute type 15 has an invalid length. [ 122.942812][ T6683] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 123.023857][ T6686] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 123.309203][ T6686] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.317875][ T6686] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.657945][ T6686] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.695958][ T6686] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.909978][ T6686] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.926510][ T6686] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.960792][ T6686] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.973753][ T6686] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.090596][ T6692] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 124.142756][ T6692] veth3: entered promiscuous mode [ 124.148704][ T6692] veth3: entered allmulticast mode [ 124.162064][ T6695] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 124.174695][ T6695] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 124.182866][ T6695] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. [ 124.205278][ T6699] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 124.239197][ T6699] vlan2: entered promiscuous mode [ 124.253053][ T6699] dummy0: entered promiscuous mode [ 124.260745][ T6699] dummy0: left promiscuous mode [ 124.593092][ T6743] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 124.664904][ T6748] netlink: 'syz-executor.2': attribute type 15 has an invalid length. [ 125.310989][ T6761] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 125.338863][ T6761] bond1: entered promiscuous mode [ 125.346949][ T6763] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 125.379703][ T6761] bond1: (slave ip6gretap1): making interface the new active one [ 125.394161][ T6761] ip6gretap1: entered promiscuous mode [ 125.407360][ T6761] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 125.441666][ T6767] __nla_validate_parse: 3 callbacks suppressed [ 125.441683][ T6767] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 125.460835][ T6767] bond1: entered allmulticast mode [ 125.466136][ T6767] ip6gretap1: entered allmulticast mode [ 125.473543][ T6767] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.577601][ T6773] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 125.641715][ T6774] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 125.669796][ T6774] ipvlan1: entered promiscuous mode [ 125.678642][ T6774] ipvlan1: entered allmulticast mode [ 125.694166][ T6774] veth0_vlan: entered allmulticast mode [ 126.129273][ T6798] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 126.139157][ T6798] netlink: 'syz-executor.2': attribute type 15 has an invalid length. [ 126.237326][ T6805] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 126.263405][ T6805] bond1: entered promiscuous mode [ 126.300737][ T6805] bond1: (slave ip6gretap1): making interface the new active one [ 126.310313][ T6805] ip6gretap1: entered promiscuous mode [ 126.319426][ T6805] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 126.349765][ T6805] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 126.361242][ T6805] bond1: entered allmulticast mode [ 126.366495][ T6805] ip6gretap1: entered allmulticast mode [ 126.373076][ T6805] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.665839][ T6818] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 126.865037][ T6826] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 126.889583][ T6826] bond1: entered promiscuous mode [ 126.917254][ T6826] bond1: (slave ip6gretap1): making interface the new active one [ 126.925190][ T6826] ip6gretap1: entered promiscuous mode [ 126.931899][ T6826] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 126.955342][ T6826] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 126.965702][ T6826] bond1: entered allmulticast mode [ 126.970844][ T6826] ip6gretap1: entered allmulticast mode [ 126.977556][ T6826] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.664034][ T6859] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 127.680137][ T6859] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 128.284498][ T6877] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 128.354512][ T6881] IPv6: sit1: Disabled Multicast RS [ 128.919858][ T6905] ɶƣ0GC¦: entered promiscuous mode [ 129.185556][ T6915] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 129.199260][ T6915] netlink: 'syz-executor.2': attribute type 15 has an invalid length. [ 129.351948][ T6920] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 130.174265][ T6949] x_tables: eb_tables: quota.0 match: invalid size 24 (kernel) != (user) 0 [ 130.453140][ T6971] __nla_validate_parse: 3 callbacks suppressed [ 130.453159][ T6971] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 130.534213][ T6978] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 130.577959][ T6978] netlink: 'syz-executor.2': attribute type 15 has an invalid length. [ 130.878537][ T6999] dummy0: entered promiscuous mode [ 130.896990][ T6999] dummy0: left promiscuous mode [ 131.021406][ T7005] x_tables: eb_tables: quota.0 match: invalid size 24 (kernel) != (user) 0 [ 131.175165][ T7013] ɶƣ0GC¦: entered promiscuous mode [ 131.363995][ T7023] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 131.604730][ T7039] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 131.729635][ T7045] openvswitch: ɶƣ0GC¦: Dropping previously announced user features [ 131.816331][ T7056] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 131.862041][ T7056] netlink: 'syz-executor.2': attribute type 15 has an invalid length. [ 132.352251][ T7089] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 132.521106][ T7099] syzkaller0: entered promiscuous mode [ 132.533409][ T7099] syzkaller0: entered allmulticast mode [ 132.697664][ T7105] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.707519][ T7105] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.716608][ T7105] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.725458][ T7105] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.764029][ T7112] syzkaller0: entered promiscuous mode [ 132.769539][ T7112] syzkaller0: entered allmulticast mode [ 132.826665][ T7114] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 133.088079][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.095941][ T7133] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 133.105401][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.130522][ T7133] netlink: 'syz-executor.0': attribute type 15 has an invalid length. [ 133.423155][ T7143] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 133.747530][ T5123] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 133.756959][ T5123] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 133.772651][ T5123] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 133.781050][ T5123] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 133.796131][ T5123] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 133.803478][ T5123] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 133.976963][ T1851] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.112152][ T1851] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.256815][ T1851] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.433496][ T1851] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.463283][ T7159] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 134.723333][ T7151] chnl_net:caif_netlink_parms(): no params data found [ 134.819101][ T1851] bridge_slave_1: left allmulticast mode [ 134.829300][ T1851] bridge_slave_1: left promiscuous mode [ 134.835481][ T1851] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.853488][ T1851] bridge_slave_0: left allmulticast mode [ 134.859381][ T1851] bridge_slave_0: left promiscuous mode [ 134.872043][ T1851] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.031286][ T1851] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 135.039997][ T1851] ip6gretap1 (unregistering): left promiscuous mode [ 135.056009][ T1851] ip6gretap1 (unregistering): left allmulticast mode [ 135.486593][ T1851] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.499217][ T1851] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.510979][ T1851] bond0 (unregistering): Released all slaves [ 135.595837][ T1851] bond1 (unregistering): Released all slaves [ 135.627385][ T7175] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 135.747141][ T1851] ɶƣ0GC¦: left promiscuous mode [ 135.895416][ T5123] Bluetooth: hci4: command tx timeout [ 135.902658][ T7195] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 135.955870][ T7195] netlink: 'syz-executor.1': attribute type 15 has an invalid length. [ 135.990810][ T7151] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.999795][ T7151] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.028806][ T7151] bridge_slave_0: entered allmulticast mode [ 136.044942][ T7151] bridge_slave_0: entered promiscuous mode [ 136.080681][ T7151] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.090076][ T7151] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.107613][ T7151] bridge_slave_1: entered allmulticast mode [ 136.134282][ T7151] bridge_slave_1: entered promiscuous mode [ 136.218680][ T7209] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 136.335315][ T7151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.373378][ T7151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.522357][ T7151] team0: Port device team_slave_0 added [ 136.545846][ T7151] team0: Port device team_slave_1 added [ 136.588271][ T1851] hsr_slave_0: left promiscuous mode [ 136.596544][ T1851] hsr_slave_1: left promiscuous mode [ 136.603448][ T1851] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.632557][ T1851] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.666109][ T1851] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.678257][ T1851] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.747509][ T1851] veth1_macvtap: left promiscuous mode [ 136.764237][ T1851] veth0_macvtap: left promiscuous mode [ 136.770284][ T1851] veth1_vlan: left promiscuous mode [ 136.782813][ T1851] veth0_vlan: left promiscuous mode [ 137.248728][ T1851] team0 (unregistering): Port device team_slave_1 removed [ 137.286122][ T1851] team0 (unregistering): Port device team_slave_0 removed [ 137.642113][ T7151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.658516][ T7151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.692028][ T7151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.750464][ T7245] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 137.760925][ T7244] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 137.839193][ T7151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.847038][ T7151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.875427][ T7151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.909110][ T7258] Cannot find add_set index 0 as target [ 137.963824][ T5123] Bluetooth: hci4: command tx timeout [ 138.201718][ T7151] hsr_slave_0: entered promiscuous mode [ 138.217038][ T7151] hsr_slave_1: entered promiscuous mode [ 138.225729][ T7151] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 138.241813][ T7151] Cannot create hsr debugfs directory [ 138.247768][ T7265] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 138.259432][ T7265] netlink: 'syz-executor.1': attribute type 15 has an invalid length. [ 139.066067][ T7151] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 139.099858][ T7151] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 139.124643][ T7151] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 139.143962][ T7151] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 139.362875][ T7323] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 139.412972][ T7151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.434291][ T7327] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 139.497370][ T7330] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 139.573048][ T7151] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.610077][ T6709] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.617296][ T6709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.676875][ T6712] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.684086][ T6712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.054316][ T5123] Bluetooth: hci4: command tx timeout [ 140.128722][ T7151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.388191][ T7376] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 140.424826][ T7376] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 140.817286][ T7403] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 140.825757][ T7151] veth0_vlan: entered promiscuous mode [ 140.834790][ T7403] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 140.855483][ T7151] veth1_vlan: entered promiscuous mode [ 140.967906][ T7151] veth0_macvtap: entered promiscuous mode [ 140.989452][ T7151] veth1_macvtap: entered promiscuous mode [ 141.021121][ T7408] pim6reg1: entered promiscuous mode [ 141.034328][ T7408] pim6reg1: entered allmulticast mode [ 141.128240][ T7151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.146869][ T7151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.158134][ T7151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.169576][ T7151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.180598][ T7151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.191771][ T7151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.206425][ T7151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.236012][ T7151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.263629][ T7151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.273475][ T7151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.286343][ T7151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.304650][ T7151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.323593][ T7151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.357113][ T7151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.402391][ T7151] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.430913][ T7151] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.452125][ T7151] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.470056][ T7151] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.650324][ T1851] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.680318][ T1851] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.738398][ T6719] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.761136][ T6719] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.070639][ T7461] pim6reg1: entered promiscuous mode [ 142.085493][ T7461] pim6reg1: entered allmulticast mode [ 142.127686][ T5123] Bluetooth: hci4: command tx timeout [ 142.158020][ T7466] team0: entered promiscuous mode [ 142.167227][ T7466] team_slave_0: entered promiscuous mode [ 142.173330][ T7466] team_slave_1: entered promiscuous mode [ 142.181313][ T7466] dummy0: entered promiscuous mode [ 142.384135][ T7472] bridge0: port 3(vlan2) entered blocking state [ 142.406042][ T7472] bridge0: port 3(vlan2) entered disabled state [ 142.412609][ T7472] vlan2: entered allmulticast mode [ 142.421970][ T7472] vlan2: left allmulticast mode [ 142.476164][ T7480] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 142.729487][ T7492] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 142.773227][ T7499] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 142.794279][ T7499] netlink: 'syz-executor.1': attribute type 15 has an invalid length. [ 142.839768][ T7498] pim6reg1: entered promiscuous mode [ 142.850089][ T7498] pim6reg1: entered allmulticast mode [ 142.964544][ T7506] trusted_key: syz-executor.0 sent an empty control message without MSG_MORE. [ 143.020168][ T7508] netlink: 'syz-executor.3': attribute type 39 has an invalid length. [ 143.115724][ T7510] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 143.137857][ T7510] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.4'. [ 143.338807][ T7523] team0: entered promiscuous mode [ 143.348106][ T7523] team_slave_0: entered promiscuous mode [ 143.361868][ T7523] team_slave_1: entered promiscuous mode [ 143.380651][ T7523] dummy0: entered promiscuous mode [ 143.391671][ T7529] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 143.407646][ T7523] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 143.415710][ T7523] Cannot create hsr debugfs directory [ 143.960461][ T7555] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 144.421185][ T7573] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 144.440680][ T7573] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 144.668165][ T7577] bridge0: port 3(vlan2) entered blocking state [ 144.677043][ T7577] bridge0: port 3(vlan2) entered disabled state [ 144.688350][ T7577] vlan2: entered allmulticast mode [ 144.706958][ T7577] vlan2: left allmulticast mode [ 144.796825][ T7583] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 145.021442][ T7590] team0: entered promiscuous mode [ 145.040088][ T7590] team_slave_0: entered promiscuous mode [ 145.052269][ T7590] team_slave_1: entered promiscuous mode [ 145.070532][ T7590] dummy0: entered promiscuous mode [ 145.083259][ T7590] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 145.093186][ T7590] Cannot create hsr debugfs directory [ 145.269778][ T7607] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 145.389449][ T7613] bridge0: port 3(vlan2) entered blocking state [ 145.396293][ T7613] bridge0: port 3(vlan2) entered disabled state [ 145.405323][ T7613] vlan2: entered allmulticast mode [ 145.417365][ T7613] vlan2: left allmulticast mode [ 145.443859][ T7616] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 145.775160][ T7635] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 146.395410][ T7662] __nla_validate_parse: 2 callbacks suppressed [ 146.395430][ T7662] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 146.907170][ T7694] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 147.162559][ T7706] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 147.173935][ T7706] netlink: 'syz-executor.2': attribute type 15 has an invalid length. [ 147.482911][ T7724] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 147.598663][ T7727] tipc: Started in network mode [ 147.603845][ T7727] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 147.611472][ T7727] tipc: Enabled bearer , priority 0 [ 147.670863][ T7731] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 147.944820][ T7746] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 147.974719][ T7748] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 148.444851][ T7777] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 148.522397][ T7782] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 148.550524][ T7785] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 148.610702][ T7782] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 148.643481][ T7789] bridge0: port 3(geneve1) entered blocking state [ 148.657329][ T7789] bridge0: port 3(geneve1) entered disabled state [ 148.665088][ T7789] geneve1: entered allmulticast mode [ 148.678106][ T7789] geneve1: entered promiscuous mode [ 148.686511][ T7789] bridge0: port 3(geneve1) entered blocking state [ 148.693315][ T7789] bridge0: port 3(geneve1) entered forwarding state [ 148.724986][ T929] tipc: Node number set to 10463914 [ 148.759326][ T7789] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 149.128732][ T7811] Bluetooth: MGMT ver 1.22 [ 149.340462][ T7824] bridge0: port 3(vlan2) entered blocking state [ 149.356297][ T7824] bridge0: port 3(vlan2) entered disabled state [ 149.366773][ T7824] vlan2: entered allmulticast mode [ 149.378594][ T7824] vlan2: left allmulticast mode [ 149.392599][ T7830] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 149.730718][ T7847] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 149.762391][ T7847] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 149.793716][ T7847] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 149.932513][ T7861] bridge0: port 3(geneve1) entered blocking state [ 149.947942][ T7861] bridge0: port 3(geneve1) entered disabled state [ 149.964206][ T7861] geneve1: entered allmulticast mode [ 149.977777][ T7861] geneve1: entered promiscuous mode [ 149.996464][ T7861] bridge0: port 3(geneve1) entered blocking state [ 150.003030][ T7861] bridge0: port 3(geneve1) entered forwarding state [ 150.052556][ T7868] bridge0: port 3(vlan2) entered blocking state [ 150.080494][ T7868] bridge0: port 3(vlan2) entered disabled state [ 150.089632][ T7868] vlan2: entered allmulticast mode [ 150.109121][ T7868] vlan2: left allmulticast mode [ 150.144818][ T7875] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 150.423089][ T7895] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 150.432475][ T7895] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 150.446997][ T7895] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 150.499053][ T7891] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 150.630430][ T7906] bridge0: port 3(geneve1) entered blocking state [ 150.640104][ T7906] bridge0: port 3(geneve1) entered disabled state [ 150.649115][ T7906] geneve1: entered allmulticast mode [ 150.665087][ T7906] geneve1: entered promiscuous mode [ 150.727856][ T7913] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 151.198367][ T7937] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 151.259278][ T7943] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 151.407964][ T7948] __nla_validate_parse: 17 callbacks suppressed [ 151.407983][ T7948] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 151.422678][ T7905] syz-executor.1 (7905) used greatest stack depth: 15184 bytes left [ 151.682948][ T7967] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 151.763401][ T7970] bridge0: port 3(geneve1) entered blocking state [ 151.785828][ T7970] bridge0: port 3(geneve1) entered disabled state [ 151.792483][ T7970] geneve1: entered allmulticast mode [ 151.822661][ T7970] geneve1: entered promiscuous mode [ 151.837679][ T7970] bridge0: port 3(geneve1) entered blocking state [ 151.844256][ T7970] bridge0: port 3(geneve1) entered forwarding state [ 151.877974][ T7976] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 151.923837][ T7970] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 152.285794][ T8000] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 152.536126][ T8008] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 153.128172][ T8044] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 153.235011][ T8051] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 153.569327][ T8073] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 153.616963][ T8075] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 153.811115][ T8083] bridge0: port 3(geneve1) entered blocking state [ 153.838447][ T8083] bridge0: port 3(geneve1) entered disabled state [ 153.853687][ T8083] geneve1: entered allmulticast mode [ 153.872174][ T8083] geneve1: entered promiscuous mode [ 153.887254][ T8083] bridge0: port 3(geneve1) entered blocking state [ 153.893939][ T8083] bridge0: port 3(geneve1) entered forwarding state [ 153.999918][ T8083] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 154.238009][ T8099] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 154.342619][ T8109] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 154.928282][ T8141] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 155.102789][ T8150] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 155.693530][ T8181] bridge0: port 4(macvlan0) entered blocking state [ 155.713877][ T8181] bridge0: port 4(macvlan0) entered disabled state [ 155.733309][ T8181] macvlan0: entered allmulticast mode [ 155.750424][ T8181] veth1_vlan: entered allmulticast mode [ 155.775073][ T8181] macvlan0: entered promiscuous mode [ 155.794079][ T8181] bridge0: port 4(macvlan0) entered blocking state [ 155.800746][ T8181] bridge0: port 4(macvlan0) entered forwarding state [ 156.044771][ T8202] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 156.436597][ T8225] __nla_validate_parse: 9 callbacks suppressed [ 156.436622][ T8225] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 156.503141][ T8230] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 156.618879][ T8238] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 157.114998][ T8257] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 157.207328][ T8260] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 157.236777][ T8260] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 157.309551][ T8260] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 157.383066][ T8272] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.3'. [ 157.501798][ T8277] bridge0: port 4(macvlan0) entered blocking state [ 157.513149][ T8277] bridge0: port 4(macvlan0) entered disabled state [ 157.522150][ T8277] macvlan0: entered allmulticast mode [ 157.553394][ T8277] veth1_vlan: entered allmulticast mode [ 157.578693][ T8277] macvlan0: left allmulticast mode [ 157.597269][ T8277] veth1_vlan: left allmulticast mode [ 157.610507][ T8275] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 157.777720][ T8290] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 157.884296][ T8294] dummy0: entered promiscuous mode [ 157.912421][ T8294] dummy0: left promiscuous mode [ 158.247799][ T8319] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 158.327212][ T8323] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 158.374949][ T8323] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 158.420973][ T8323] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 158.570820][ T8329] bridge0: port 4(vlan2) entered blocking state [ 158.577552][ T8329] bridge0: port 4(vlan2) entered disabled state [ 158.584260][ T8329] vlan2: entered allmulticast mode [ 158.597662][ T8329] vlan2: left allmulticast mode [ 159.027278][ T8358] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 159.111429][ T8354] bridge0: port 4(vlan2) entered blocking state [ 159.140746][ T8354] bridge0: port 4(vlan2) entered disabled state [ 159.165560][ T8354] vlan2: entered allmulticast mode [ 159.196730][ T8354] vlan2: left allmulticast mode [ 159.615872][ T8391] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 159.699969][ T8396] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 159.742263][ T8396] ipvlan2: entered promiscuous mode [ 159.753797][ T8396] ipvlan2: entered allmulticast mode [ 159.768487][ T8396] vxlan0: entered allmulticast mode [ 159.942325][ T8406] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 160.187641][ T8418] bridge0: port 4(vlan2) entered blocking state [ 160.204551][ T8418] bridge0: port 4(vlan2) entered disabled state [ 160.220195][ T8418] vlan2: entered allmulticast mode [ 160.261513][ T8418] vlan2: left allmulticast mode [ 160.491075][ T8435] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 160.512671][ T8435] ipvlan2: entered promiscuous mode [ 160.518192][ T8435] ipvlan2: entered allmulticast mode [ 160.529518][ T8435] hsr1: entered allmulticast mode [ 160.539019][ T8435] team0: entered allmulticast mode [ 160.551602][ T8435] team_slave_0: entered allmulticast mode [ 160.559108][ T8435] team_slave_1: entered allmulticast mode [ 160.571571][ T8435] dummy0: entered allmulticast mode [ 160.695355][ T8449] team0: entered promiscuous mode [ 160.700679][ T8449] team_slave_0: entered promiscuous mode [ 160.710995][ T8449] team_slave_1: entered promiscuous mode [ 160.719805][ T8449] dummy0: entered promiscuous mode [ 160.728699][ T8449] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 160.745857][ T8449] Cannot create hsr debugfs directory [ 160.966249][ T8464] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 161.357327][ T8484] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 161.559057][ T8499] __nla_validate_parse: 14 callbacks suppressed [ 161.559084][ T8499] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.3'. [ 161.581639][ T8501] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 161.603843][ T8504] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 161.637073][ T8504] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 161.715022][ T8511] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 161.983920][ T8524] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 162.089022][ T8533] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 162.237004][ T8537] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 162.244713][ T8535] bridge0: port 4(vlan2) entered blocking state [ 162.249545][ T8537] netlink: 240 bytes leftover after parsing attributes in process `syz-executor.2'. [ 162.253790][ T8535] bridge0: port 4(vlan2) entered disabled state [ 162.267453][ T8539] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.0'. [ 162.279079][ T8535] vlan2: entered allmulticast mode [ 162.286617][ T8535] vlan2: left allmulticast mode [ 162.426982][ T8539] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 162.472743][ T8549] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 162.655133][ T8562] bridge0: port 4(vlan2) entered blocking state [ 162.683223][ T8562] bridge0: port 4(vlan2) entered disabled state [ 162.701361][ T8562] vlan2: entered allmulticast mode [ 162.721721][ T8562] vlan2: left allmulticast mode [ 162.762749][ T8568] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 162.861042][ T8575] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.4'. [ 162.956010][ T8587] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 162.986758][ T8587] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 163.004569][ T8588] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 163.286120][ T8606] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.0'. [ 163.456154][ T8606] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 163.544579][ T8622] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 164.339722][ T8668] net_ratelimit: 1 callbacks suppressed [ 164.339740][ T8668] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 164.615570][ T8682] team0: entered promiscuous mode [ 164.633065][ T8682] team_slave_0: entered promiscuous mode [ 164.647682][ T8682] team_slave_1: entered promiscuous mode [ 164.671111][ T8682] dummy0: entered promiscuous mode [ 164.695535][ T8682] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 164.720198][ T8682] Cannot create hsr debugfs directory [ 164.731883][ T8682] hsr1: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 164.732590][ T8695] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 164.753373][ T8682] hsr1: Slave B (dummy0) is not up; please bring it up to get a fully working HSR network [ 165.166869][ T8712] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 165.751349][ T8748] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 165.958954][ T8758] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 166.247964][ T8773] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 166.665885][ T8785] __nla_validate_parse: 15 callbacks suppressed [ 166.665904][ T8785] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.2'. [ 166.776383][ T8785] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 166.826229][ T8785] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 166.869996][ T8789] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.3'. [ 167.036665][ T8802] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 167.042701][ T8803] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 167.302858][ T8812] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 167.596670][ T8822] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 167.623642][ T8822] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 168.074324][ T8836] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.0'. [ 168.089466][ T8836] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 168.098425][ T8836] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 168.437255][ T8840] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 168.546032][ T8846] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.3'. [ 168.625032][ T8851] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 168.626316][ T8846] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 169.298406][ T8879] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 169.437138][ T8886] netlink: 'syz-executor.2': attribute type 15 has an invalid length. [ 169.976067][ T8905] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 170.493951][ T8931] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 170.931236][ T8960] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 171.392207][ T8985] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 171.611088][ T8996] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 171.871453][ T9006] __nla_validate_parse: 11 callbacks suppressed [ 171.871474][ T9006] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.0'. [ 171.945138][ T9009] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.3'. [ 172.101294][ T9017] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 172.180485][ T9026] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 172.353899][ T9037] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 172.645717][ T9048] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 172.715826][ T9053] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 172.726228][ T9053] netlink: 'syz-executor.2': attribute type 15 has an invalid length. [ 172.750477][ T9054] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 172.800708][ T9054] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 173.304945][ T9068] netlink: 136 bytes leftover after parsing attributes in process `syz-executor.1'. [ 173.433774][ T9072] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.3'. [ 173.650310][ T9086] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 173.923306][ T9099] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.3'. [ 174.035858][ T9105] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 174.184576][ T9116] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 174.201132][ T9116] netlink: 'syz-executor.1': attribute type 15 has an invalid length. [ 174.225825][ T9115] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 174.299707][ T9115] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 174.816893][ T9142] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.0'. [ 174.905366][ T9150] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 175.579173][ T9185] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 175.738372][ T9192] bond0: entered promiscuous mode [ 175.743463][ T9192] bond_slave_0: entered promiscuous mode [ 175.766124][ T9192] bond_slave_1: entered promiscuous mode [ 176.029316][ T9216] syz-executor.0[9216] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 176.029464][ T9216] syz-executor.0[9216] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 176.100195][ T9221] ip_vti0: entered promiscuous mode [ 176.124240][ T5124] Bluetooth: hci1: command 0x0406 tx timeout [ 176.127921][ T9221] vlan2: entered promiscuous mode [ 176.158522][ T9221] ip_vti0: left promiscuous mode [ 176.203320][ T9223] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 176.674405][ T9253] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 176.794681][ T9260] xt_CT: You must specify a L4 protocol and not use inversions on it [ 176.972971][ T9273] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'. [ 177.005278][ T9270] --map-set only usable from mangle table [ 177.194480][ T9282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.232293][ T9283] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 177.474112][ T9291] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 177.778314][ T9302] --map-set only usable from mangle table [ 177.980244][ T9309] syz-executor.3[9309] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 177.980386][ T9309] syz-executor.3[9309] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 179.489530][ T9374] --map-set only usable from mangle table [ 179.956597][ T9383] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 180.111451][ T9389] IPVS: sh: UDP 224.0.0.1:0 - no destination available [ 180.417736][ T9397] bridge0: port 4(wlan1) entered blocking state [ 180.460666][ T9397] bridge0: port 4(wlan1) entered disabled state [ 180.503676][ T9397] mac80211_hwsim hwsim37 wlan1: entered allmulticast mode [ 180.522348][ T9397] mac80211_hwsim hwsim37 wlan1: entered promiscuous mode [ 180.536942][ T9397] bridge0: port 4(wlan1) entered blocking state [ 180.543366][ T9397] bridge0: port 4(wlan1) entered forwarding state [ 180.651650][ T9419] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 181.256482][ T930] bridge0: port 4(wlan1) entered disabled state [ 181.778398][ T9448] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 182.101982][ T9458] pimreg: entered allmulticast mode [ 182.136052][ T9463] pimreg: left allmulticast mode [ 182.822472][ T9496] pimreg: entered allmulticast mode [ 182.873097][ T9496] pimreg: left allmulticast mode [ 183.170767][ T9518] xt_bpf: check failed: parse error [ 183.207221][ T9520] vlan3: entered promiscuous mode [ 183.212291][ T9520] gretap0: entered promiscuous mode [ 183.238351][ T9520] gretap0: left promiscuous mode [ 183.381891][ T9529] xt_bpf: check failed: parse error [ 183.394627][ T9531] EXT4-fs warning (device sda1): ext4_group_extend:1861: can't shrink FS - resize aborted [ 183.998126][ T9559] gretap0: entered promiscuous mode [ 184.010567][ T9559] vlan3: entered promiscuous mode [ 184.018913][ T9559] gretap0: left promiscuous mode [ 184.740501][ T9598] gretap0: entered promiscuous mode [ 184.746362][ T9598] vlan3: entered promiscuous mode [ 184.753442][ T9598] gretap0: left promiscuous mode [ 185.454569][ T9625] pim6reg1: entered promiscuous mode [ 185.480527][ T9625] pim6reg1: entered allmulticast mode [ 185.577400][ T9629] veth0_vlan: entered allmulticast mode [ 185.806631][ T9631] veth0_vlan: left promiscuous mode [ 185.826860][ T9631] veth0_vlan: entered promiscuous mode [ 185.972323][ T9639] syz-executor.1[9639] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 185.972472][ T9639] syz-executor.1[9639] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 186.578796][ T9663] sit0: entered allmulticast mode [ 186.685504][ T9666] veth0_vlan: entered allmulticast mode [ 186.712791][ T9668] veth0_vlan: left promiscuous mode [ 186.727074][ T9668] veth0_vlan: entered promiscuous mode [ 186.748220][ T9667] veth0_vlan: left promiscuous mode [ 186.770720][ T9667] veth0_vlan: entered promiscuous mode [ 186.810311][ T9663] sit0: entered promiscuous mode [ 187.286757][ T9695] veth0_vlan: entered allmulticast mode [ 187.366892][ T9698] sit0: entered allmulticast mode [ 187.394827][ T9700] veth0_vlan: entered allmulticast mode [ 187.439857][ T9695] veth0_vlan: left promiscuous mode [ 187.502791][ T9695] veth0_vlan: entered promiscuous mode [ 187.527768][ T9698] sit0: entered promiscuous mode [ 187.597305][ T6719] tipc: Resetting bearer [ 187.633333][ T9700] veth0_vlan: left promiscuous mode [ 187.646217][ T9700] veth0_vlan: entered promiscuous mode [ 187.691284][ T6719] bridge0: port 4(macvlan0) entered disabled state [ 187.719238][ T9709] syz-executor.0[9709] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.719546][ T9709] syz-executor.0[9709] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.781020][ T6719] bridge0: port 4(macvlan0) entered blocking state [ 187.799388][ T6719] bridge0: port 4(macvlan0) entered forwarding state [ 187.802648][ T9713] IPVS: sh: UDP 224.0.0.1:0 - no destination available [ 187.840481][ T9709] wg2: entered promiscuous mode [ 187.849071][ T9709] wg2: entered allmulticast mode [ 187.912769][ T9711] gretap0: entered promiscuous mode [ 187.922778][ T9711] vlan3: entered promiscuous mode [ 187.934451][ T9711] gretap0: left promiscuous mode [ 188.198961][ T7151] [ 188.201332][ T7151] ====================================================== [ 188.208360][ T7151] WARNING: possible circular locking dependency detected [ 188.215399][ T7151] 6.10.0-rc1-syzkaller-00104-gd8ec19857b09 #0 Not tainted [ 188.222509][ T7151] ------------------------------------------------------ [ 188.229519][ T7151] syz-executor.4/7151 is trying to acquire lock: [ 188.235827][ T7151] ffff88807aac3798 (&sighand->siglock){-.-.}-{2:2}, at: __lock_task_sighand+0x149/0x2d0 [ 188.245575][ T7151] [ 188.245575][ T7151] but task is already holding lock: [ 188.252927][ T7151] ffff8880b9538828 (lock#10){+.+.}-{2:2}, at: __mmap_lock_do_trace_acquire_returned+0x8f/0x630 [ 188.263284][ T7151] [ 188.263284][ T7151] which lock already depends on the new lock. [ 188.263284][ T7151] [ 188.273678][ T7151] [ 188.273678][ T7151] the existing dependency chain (in reverse order) is: [ 188.282679][ T7151] [ 188.282679][ T7151] -> #2 (lock#10){+.+.}-{2:2}: [ 188.289626][ T7151] lock_acquire+0x1ed/0x550 [ 188.294642][ T7151] __mmap_lock_do_trace_acquire_returned+0xa8/0x630 [ 188.301741][ T7151] stack_map_get_build_id_offset+0x9af/0x9d0 [ 188.308320][ T7151] __bpf_get_stack+0x4ad/0x5a0 [ 188.313595][ T7151] bpf_get_stack_raw_tp+0x1a3/0x240 [ 188.319303][ T7151] 0xffffffffa00006f2 [ 188.323792][ T7151] bpf_trace_run2+0x2ec/0x540 [ 188.328982][ T7151] trace_tlb_flush+0x118/0x140 [ 188.334261][ T7151] switch_mm_irqs_off+0x7cb/0xae0 [ 188.339798][ T7151] __schedule+0x1066/0x4a20 [ 188.344812][ T7151] schedule+0x14b/0x320 [ 188.349480][ T7151] do_nanosleep+0x197/0x600 [ 188.354512][ T7151] hrtimer_nanosleep+0x227/0x470 [ 188.359968][ T7151] __se_sys_clock_nanosleep+0x32b/0x3c0 [ 188.366071][ T7151] do_syscall_64+0xf3/0x230 [ 188.371082][ T7151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.377486][ T7151] [ 188.377486][ T7151] -> #1 (&rq->__lock){-.-.}-{2:2}: [ 188.384773][ T7151] lock_acquire+0x1ed/0x550 [ 188.389786][ T7151] _raw_spin_lock_nested+0x31/0x40 [ 188.395408][ T7151] raw_spin_rq_lock_nested+0x2a/0x140 [ 188.401292][ T7151] sched_mm_cid_exit_signals+0x17b/0x4b0 [ 188.407436][ T7151] exit_signals+0x2a1/0x5c0 [ 188.412450][ T7151] do_exit+0x6b4/0x27e0 [ 188.417113][ T7151] __pfx___ia32_sys_exit+0x0/0x10 [ 188.422648][ T7151] do_syscall_64+0xf3/0x230 [ 188.427658][ T7151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.434061][ T7151] [ 188.434061][ T7151] -> #0 (&sighand->siglock){-.-.}-{2:2}: [ 188.441867][ T7151] validate_chain+0x18e0/0x5900 [ 188.447232][ T7151] __lock_acquire+0x1346/0x1fd0 [ 188.452599][ T7151] lock_acquire+0x1ed/0x550 [ 188.457611][ T7151] _raw_spin_lock_irqsave+0xd5/0x120 [ 188.463404][ T7151] __lock_task_sighand+0x149/0x2d0 [ 188.469025][ T7151] group_send_sig_info+0x274/0x310 [ 188.474651][ T7151] bpf_send_signal_common+0x2dd/0x430 [ 188.480531][ T7151] bpf_send_signal_thread+0x16/0x20 [ 188.486238][ T7151] bpf_prog_7aab9edbcd54ca16+0x22/0x27 [ 188.492204][ T7151] bpf_trace_run4+0x334/0x590 [ 188.497480][ T7151] __mmap_lock_do_trace_acquire_returned+0x5c8/0x630 [ 188.504664][ T7151] lock_mm_and_find_vma+0x213/0x2f0 [ 188.510375][ T7151] exc_page_fault+0x1bf/0x8c0 [ 188.515556][ T7151] asm_exc_page_fault+0x26/0x30 [ 188.520921][ T7151] rep_movs_alternative+0x4a/0x70 [ 188.526550][ T7151] _copy_to_iter+0x26b/0x1960 [ 188.531737][ T7151] copy_page_to_iter+0xb1/0x160 [ 188.537096][ T7151] pipe_read+0x59c/0x13e0 [ 188.541937][ T7151] vfs_read+0x9c4/0xbd0 [ 188.546604][ T7151] ksys_read+0x1a0/0x2c0 [ 188.551354][ T7151] do_syscall_64+0xf3/0x230 [ 188.556417][ T7151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.562838][ T7151] [ 188.562838][ T7151] other info that might help us debug this: [ 188.562838][ T7151] [ 188.573059][ T7151] Chain exists of: [ 188.573059][ T7151] &sighand->siglock --> &rq->__lock --> lock#10 [ 188.573059][ T7151] [ 188.585230][ T7151] Possible unsafe locking scenario: [ 188.585230][ T7151] [ 188.592667][ T7151] CPU0 CPU1 [ 188.598019][ T7151] ---- ---- [ 188.603391][ T7151] lock(lock#10); [ 188.607121][ T7151] lock(&rq->__lock); [ 188.613703][ T7151] lock(lock#10); [ 188.619945][ T7151] lock(&sighand->siglock); [ 188.624529][ T7151] [ 188.624529][ T7151] *** DEADLOCK *** [ 188.624529][ T7151] [ 188.632660][ T7151] 6 locks held by syz-executor.4/7151: [ 188.638101][ T7151] #0: ffff88807a130868 (&pipe->mutex){+.+.}-{3:3}, at: pipe_read+0x12a/0x13e0 [ 188.647063][ T7151] #1: ffff88802d804d98 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 188.656979][ T7151] #2: ffff8880b9538828 (lock#10){+.+.}-{2:2}, at: __mmap_lock_do_trace_acquire_returned+0x8f/0x630 [ 188.667767][ T7151] #3: ffffffff8e333f60 (rcu_read_lock){....}-{1:2}, at: get_mm_memcg_path+0xb1/0x600 [ 188.677332][ T7151] #4: ffffffff8e333f60 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run4+0x244/0x590 [ 188.686725][ T7151] #5: ffffffff8e333f60 (rcu_read_lock){....}-{1:2}, at: __lock_task_sighand+0x29/0x2d0 [ 188.696461][ T7151] [ 188.696461][ T7151] stack backtrace: [ 188.702334][ T7151] CPU: 1 PID: 7151 Comm: syz-executor.4 Not tainted 6.10.0-rc1-syzkaller-00104-gd8ec19857b09 #0 [ 188.712734][ T7151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 188.722863][ T7151] Call Trace: [ 188.726134][ T7151] [ 188.729055][ T7151] dump_stack_lvl+0x241/0x360 [ 188.733726][ T7151] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.738914][ T7151] ? print_circular_bug+0x130/0x1a0 [ 188.744103][ T7151] check_noncircular+0x36a/0x4a0 [ 188.749046][ T7151] ? kernel_text_address+0xa7/0xe0 [ 188.754172][ T7151] ? __pfx_check_noncircular+0x10/0x10 [ 188.759631][ T7151] ? lockdep_lock+0x123/0x2b0 [ 188.764306][ T7151] validate_chain+0x18e0/0x5900 [ 188.769152][ T7151] ? __lock_acquire+0x1346/0x1fd0 [ 188.774178][ T7151] ? __pfx_validate_chain+0x10/0x10 [ 188.779371][ T7151] ? __pfx_validate_chain+0x10/0x10 [ 188.784646][ T7151] ? __pfx_validate_chain+0x10/0x10 [ 188.789834][ T7151] ? validate_chain+0x11e/0x5900 [ 188.794760][ T7151] ? page_ext_put+0x97/0xc0 [ 188.799253][ T7151] ? __set_page_owner+0x671/0x800 [ 188.804268][ T7151] ? __pfx_validate_chain+0x10/0x10 [ 188.809458][ T7151] ? __pfx_validate_chain+0x10/0x10 [ 188.814645][ T7151] ? page_ext_get+0x1d6/0x2a0 [ 188.819315][ T7151] ? mark_lock+0x9a/0x350 [ 188.823632][ T7151] ? __pfx_validate_chain+0x10/0x10 [ 188.828819][ T7151] __lock_acquire+0x1346/0x1fd0 [ 188.833666][ T7151] lock_acquire+0x1ed/0x550 [ 188.838160][ T7151] ? __lock_task_sighand+0x149/0x2d0 [ 188.843439][ T7151] ? __pfx_lock_acquire+0x10/0x10 [ 188.848455][ T7151] ? __pfx_lock_acquire+0x10/0x10 [ 188.853472][ T7151] _raw_spin_lock_irqsave+0xd5/0x120 [ 188.858751][ T7151] ? __lock_task_sighand+0x149/0x2d0 [ 188.864027][ T7151] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 188.869912][ T7151] __lock_task_sighand+0x149/0x2d0 [ 188.875012][ T7151] ? __lock_task_sighand+0x29/0x2d0 [ 188.880199][ T7151] group_send_sig_info+0x274/0x310 [ 188.885302][ T7151] ? __pfx_group_send_sig_info+0x10/0x10 [ 188.890932][ T7151] bpf_send_signal_common+0x2dd/0x430 [ 188.896293][ T7151] ? __pfx_bpf_send_signal_common+0x10/0x10 [ 188.902177][ T7151] ? bpf_trace_run4+0x244/0x590 [ 188.907020][ T7151] bpf_send_signal_thread+0x16/0x20 [ 188.912208][ T7151] bpf_prog_7aab9edbcd54ca16+0x22/0x27 [ 188.917651][ T7151] bpf_trace_run4+0x334/0x590 [ 188.922324][ T7151] ? __pfx_bpf_trace_run4+0x10/0x10 [ 188.927521][ T7151] ? get_mm_memcg_path+0x36c/0x600 [ 188.932621][ T7151] ? get_mm_memcg_path+0x4e6/0x600 [ 188.937726][ T7151] __mmap_lock_do_trace_acquire_returned+0x5c8/0x630 [ 188.944389][ T7151] ? __mmap_lock_do_trace_acquire_returned+0x8f/0x630 [ 188.951138][ T7151] lock_mm_and_find_vma+0x213/0x2f0 [ 188.956331][ T7151] exc_page_fault+0x1bf/0x8c0 [ 188.960998][ T7151] asm_exc_page_fault+0x26/0x30 [ 188.965840][ T7151] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 188.971641][ T7151] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 188.991231][ T7151] RSP: 0018:ffffc90002f2f8b8 EFLAGS: 00050246 [ 188.997287][ T7151] RAX: ffffffff84ace301 RBX: 0000000000000040 RCX: 0000000000000040 [ 189.005248][ T7151] RDX: 0000000000000000 RSI: ffff8880652b5000 RDI: 00007fa6167b0020 [ 189.013211][ T7151] RBP: ffffc90002f2fa38 R08: ffff8880652b503f R09: 1ffff1100ca56a07 [ 189.021172][ T7151] R10: dffffc0000000000 R11: ffffed100ca56a08 R12: 1ffff920005e5faf [ 189.029133][ T7151] R13: 00007fa6167b0020 R14: ffffc90002f2fd78 R15: ffff8880652b5000 [ 189.037099][ T7151] ? _copy_to_iter+0x241/0x1960 [ 189.041953][ T7151] _copy_to_iter+0x26b/0x1960 [ 189.046621][ T7151] ? trace_contention_end+0x3c/0x120 [ 189.051895][ T7151] ? __mutex_lock+0x2ef/0xd70 [ 189.056567][ T7151] ? __pfx_lock_release+0x10/0x10 [ 189.061582][ T7151] ? __pfx__copy_to_iter+0x10/0x10 [ 189.066686][ T7151] ? pipe_read+0x12a/0x13e0 [ 189.071183][ T7151] ? __pfx___mutex_lock+0x10/0x10 [ 189.076199][ T7151] ? aa_file_perm+0x137/0xf60 [ 189.080864][ T7151] ? page_copy_sane+0x46/0x260 [ 189.085616][ T7151] copy_page_to_iter+0xb1/0x160 [ 189.090459][ T7151] pipe_read+0x59c/0x13e0 [ 189.094790][ T7151] ? __pfx_pipe_read+0x10/0x10 [ 189.099544][ T7151] ? common_file_perm+0x1a6/0x210 [ 189.104556][ T7151] ? bpf_lsm_file_permission+0x9/0x10 [ 189.109915][ T7151] ? security_file_permission+0x7f/0xa0 [ 189.115544][ T7151] vfs_read+0x9c4/0xbd0 [ 189.119686][ T7151] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 189.126006][ T7151] ? __pfx_vfs_read+0x10/0x10 [ 189.130674][ T7151] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 189.136643][ T7151] ksys_read+0x1a0/0x2c0 [ 189.140877][ T7151] ? __pfx_ksys_read+0x10/0x10 [ 189.145631][ T7151] ? do_syscall_64+0x100/0x230 [ 189.150385][ T7151] ? do_syscall_64+0xb6/0x230 [ 189.155054][ T7151] do_syscall_64+0xf3/0x230 [ 189.159544][ T7151] ? clear_bhb_loop+0x35/0x90 [ 189.164213][ T7151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.170097][ T7151] RIP: 0033:0x7fa61667bb8c [ 189.174498][ T7151] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 59 81 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 af 81 02 00 48 [ 189.194093][ T7151] RSP: 002b:00007ffd55537330 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 2024/06/01 22:35:52 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 189.202495][ T7151] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fa61667bb8c [ 189.210455][ T7151] RDX: 0000000000000040 RSI: 00007fa6167b0020 RDI: 00000000000000f9 [ 189.218420][ T7151] RBP: 00007ffd555373bc R08: 0000000000000000 R09: 0079746972756365 [ 189.226378][ T7151] R10: 00007fa6167846a0 R11: 0000000000000246 R12: 0000000000000032 [ 189.234518][ T7151] R13: 000000000002dec4 R14: 000000000002de79 R15: 0000000000000005 [ 189.242482][ T7151]