last executing test programs: 38.168167356s ago: executing program 3 (id=778): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x7, &(0x7f0000000000)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xee, &(0x7f0000000080)=""/238}, 0x94) 37.980894823s ago: executing program 3 (id=781): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000400000000000e1ff95000000000000002ba76bb3019c1341056bd8174b79603123751c4e345c652fbc1626cca2a2ad75806150ae0209e62751ee00aa19ce670d25010000020000040000009fc404000000c788b277beee1cbf9b0a4def23d410f6accd3641110bec4e90a6341965dac05c04683712a0b09ec39e9ef8f6e396ad200e011ea665c45a3449abe802f5ab3e89cf40b8580218ce740068720000074e468eea3fcfcf498278a315f5b87e1c26433a8acd715f5888b2007f00000000000000000100000000000000010015d60605000053350000000034a70c2ab40c7cf5691db43a5c00000000000000f030007ce2c6f800000000000000e75a89faff01218087560cce39bf405f1e846c1242000000000040cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bef5d7d617da7a6520655a805608df4d431623c850af895abba14f6fbd7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf050000008600a62e96b7cb8e52cbdc2ba9d580609e31c30879d6fce424c2208af6c3784a1975fa657de38a3a32e4fd67ce446adb431d07db79241aca1dd9ba02453bbb5ee8babe1745e645f091231b986e952afdac972f342c6f184777d05d988d6edc71df0100000013a38300cabf2b554380ad215c789bef4cc574109b8df8d9a9db669557b3809d8c396d2c0361629d1822f722ec23812770d72cd00100000078a75dea785be550dbb420287e0789b8c7044f563a1f68d4efe895fdbc463f747c08f4010586903500000000000000e800000000000000000000000000000000000000003ddf4aa4b1c8b8a0ae6fb5425f1d581961471cdb51f8940290e99ccff4123f955267fe4a75c11448741f064fc7ce7e62ee4df874e086287547d4099aeec9f1538ee25a2a5ccf4a9b604e88e12ff25184d4e3c6f7f623559435b2c505fb711300000000040000000000000000000000000000e67ccc02148a4fc43021cce9f24f4b2f9492c32e7a92a557ac2b44b84e88bbf7a49789906d923e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd029406000000433f5c899119ec0c0acef5385c5a2720caeb68f1e9c05b0591d89467ded84da092dea262e51811e2d7fa515722516bd5ef6c8c4966e5937562a5648a696ad3a042a7097ddefe0671a5767014b09ddbf69b78f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb32879d326497e21e041254f06bd7f3a067e147e82e841dba3867da8bfbc101d3960e07d282f483e7b49991be06b950ccd48f4e49833f3c4a02bbd06c84680549f9eb16682ecb722e8ffaca907a3eaaebfc8e0a47c0076d7cc9d32b3cc96aa751d890881c3c33bd91f6ecf45ab3f12f816318346f9b883427b9190024edc1eddd68f34ce3bfedb5fe5d7beae4d3ca561e37570587783f9673e7ab17f5a09efc1114777d2707d2996961203aedff1c52108d9c0d51dc30209872ec602af42eb29d54a37be0fdfdcd74c2d859a566ee5c30677173a2592a4617ae08bec07422d52d2ba7271550a5c20e3a8d1c8c8fd3025ff00607b2249ae9a18391e01b21b36169790b8e96f7955754b6b01a75165d3573d1dec5cf1b08b6115b43203a5654cce2277eb4c02ef4817b4cb989ac178895810eff7b697f2dc9b308aa2460e3cb85cdc4833571a62bf310700000000000000cc7f923284230ada8c756096a66119d4b6b2f159585c3cf8e7bfdd619e294b1d21cd491b8cfd4a253856e485fe29c6ad177a9fb078ca905782b9ed3c30675b89a784bb8031cac0de95178a5acff029a0f0fe972df22b20afe95fba722056f94ab15f1cf605c33df627311f1b614684d77549"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xf, 0x0, &(0x7f0000000fc0)="cc9ff4088b00"/15, 0xfffffffffffffffd, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 37.680151032s ago: executing program 3 (id=787): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2, r0}, 0xc) 37.520428927s ago: executing program 3 (id=790): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000006300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 37.380159081s ago: executing program 3 (id=794): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000007100000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0x1d) 37.132402319s ago: executing program 3 (id=797): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x42, 0x6, 0x8, 0x4, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000", @ANYRES32=r0], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) 22.094002115s ago: executing program 32 (id=797): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x42, 0x6, 0x8, 0x4, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000", @ANYRES32=r0], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) 1.92899927s ago: executing program 1 (id=1173): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socketpair(0x1, 0x1, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.59385742s ago: executing program 0 (id=1179): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0xffffffff, 0x0, 0xb}, {0x10000002, 0xfffffffe, 0x4, 0x9}], 0x10, 0xd5}, 0x94) close(0x3) r1 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000300)="df535c78", 0x4}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x8}, 0x48) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000), 0x8) 1.558623222s ago: executing program 2 (id=1180): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{}, 0x0, &(0x7f0000000040)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.445709195s ago: executing program 1 (id=1183): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="ceaa00000000000071101a000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r2, r0, 0x0, r2}, 0x10) 1.396551947s ago: executing program 0 (id=1184): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x8}, 0xc02, 0x1, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x2a, 0x2, 0x0) close(r0) 1.228965721s ago: executing program 2 (id=1186): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000041ffffff0000000008000000911172000000000095"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) 1.207753612s ago: executing program 1 (id=1187): r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0xd54c, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0x43, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r0}) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000000)={r0}) 1.144448704s ago: executing program 0 (id=1188): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x239, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)="30a0", 0x2}], 0x1}, 0x4040001) recvmsg$unix(r0, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x40012141) recvmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000500)=""/117, 0x75}], 0x1}, 0x40000060) 1.102578826s ago: executing program 4 (id=1189): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000012002f8c35093f974b21b92e0a", 0x11}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1310000016"], 0xfe33) 1.013908029s ago: executing program 2 (id=1190): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1efa}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x1}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e502000000000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0xa, 0x1, 0x106) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0x17, &(0x7f0000000080)=r5, 0x4) 896.308632ms ago: executing program 0 (id=1191): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)}, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="b702000010000000bfa300000000000007030000f0ffffff7a0af0ff0000000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87867c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b2314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f86bb47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8dd63d4b77b206000000000000e254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad91935a6ddfa8f90e79321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f3813e2c25a61ec45c3af9948f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469600241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c12e28ef97d9ebd9c77f1774cf4683c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f011000000f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497a6103876843ee04ed9ff002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd1304202274f20675eb781925440578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e9338c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b96508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e25c89b552d7fcd116bce9c764c714c9402c21d1aac59efb28d4f91652f6000000000000000320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a575939206d0c0f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000ff0ffd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536607a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8000000edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db76cf059f40fa2640b6bfb74dd35391b8fa18479da9f4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847db97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ccfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000000000000000000003ba34b611569a451564d3a5400f9097ffe7a37e765be352be71ee24250d6828562c7e24cb763062d6000c409de6a6135eae8a00000000008d797190a26c933f933aff5c521eeb7a84a62d148a846e74e76b515b6b8be29e8b69310fa130cf6d6b74f33205d3cc218ca554ed8085ae044f5bf2e89a0000bde05c114e7a020fc1a5fd3eeeb822008b2d7d1cc062b51b0aca4956b557e51a1385cc572b0074b0950fb1437de2590bf99ec7ceb69e1fe2465fce099c992d57b804a22e148ae3411523814aee03ee2df877edfabf4aa94f07c6fdd127e57a8bf7975f2e606c25a299980a6e52fcf7849d45bb38573fbba8afef1aa7a24c805f7aee3e39a3000000000000000000000000000000000000878f88c4742ac490951c36c610a0d266588ec6a0bd300cf160b5a5d9e9fafa49ecc8430832d795e727b7fc2b76e7fc4141fdbb82f45d3cdd3fb8d4b443ab4954fdf5c1b9a6ab3e457f098329307ccb0a1989b6c37509692e952e7244f48bc12569ff8eb30d0f887b85b5ef44fb9a7571319190be0c226ed72f346cc4aa071ae0c72fa8bd00d5590c4f4ba65d0c8e1f4870fe3c414681e41b40163eb1aa2a7429a2208cd6e69c7d959e87da3fd0101159a03ab7fe78881ee7a1ee7a2edff75fb18a181e0c54352be2b7a5b5273198291c28d9141deeb3cdba5d414ae4b0000000000000000000000000009eacd83458d8a606be71970497a4fd4ca3b48ca482ab3804e2fac216b3ba613608b1a465456a33fd08491d337d73"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xc}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xcc, 0x5, 0x3f, 0x7, 0x0, 0xfffffffffffffffc, 0x9d6d1, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_bp={0x0, 0xb}, 0x603f, 0xce4a, 0xfffffff8, 0x0, 0x7e, 0x10000, 0x200, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xf, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080)) 759.807076ms ago: executing program 4 (id=1192): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0xffffffff, 0x0, 0xb}, {0x10000002, 0xfffffffe, 0x4, 0x9}], 0x10, 0xd5}, 0x94) close(0x3) r1 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000), 0x10) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000300)="df535c78", 0x4}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x8}, 0x48) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000), 0x8) 584.405522ms ago: executing program 2 (id=1193): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x11, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000feffffffb7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a7000000850000000700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 492.546275ms ago: executing program 0 (id=1194): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 492.322195ms ago: executing program 1 (id=1195): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="ceaa00000000000071101a000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r2, r0, 0x0, r2}, 0x10) 454.600416ms ago: executing program 4 (id=1196): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xb, 0x4, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, [@generic={0x71, 0x1, 0x1, 0x78}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa98}, 0x94) 350.570929ms ago: executing program 4 (id=1197): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000a000000080000000000000c05"], 0x0, 0x42, 0x0, 0x1, 0x3}, 0x28) 284.489161ms ago: executing program 2 (id=1198): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) 207.343313ms ago: executing program 1 (id=1199): r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x32, 0x0, 0x47) 200.745484ms ago: executing program 4 (id=1200): perf_event_open(0x0, 0xffffffffffffffff, 0x800000000000000, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000012002f8c35093f974b21b92e0a", 0x11}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1310000016"], 0xfe33) 175.383824ms ago: executing program 0 (id=1201): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1efa}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x1}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e502000000000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0xa, 0x1, 0x106) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0x17, &(0x7f0000000080)=r5, 0x4) 24.465769ms ago: executing program 2 (id=1202): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x9549, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_bp={0x0, 0xd}, 0x11eea, 0x4, 0x0, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x40000020}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 24.327479ms ago: executing program 1 (id=1203): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x400000}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r0, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r2, &(0x7f0000000040), 0x0}, 0x20) 0s ago: executing program 4 (id=1204): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0xffffffff, 0x0, 0xb}, {0x10000002, 0xfffffffe, 0x4, 0x9}], 0x10, 0xd5}, 0x94) close(0x3) r1 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000), 0x10) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000300)="df535c78", 0x4}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x8}, 0x48) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000), 0x8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.16' (ED25519) to the list of known hosts. [ 74.073969][ T5758] cgroup: Unknown subsys name 'net' [ 74.209616][ T5758] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.586655][ T5758] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.376785][ T5776] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.386812][ T5776] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.395250][ T5776] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.403335][ T5776] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.404097][ T5780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.410971][ T5776] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.419044][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.425157][ T5776] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.434299][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.446502][ T5776] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.447006][ T5780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.464702][ T5776] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.465911][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.480055][ T5780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.488959][ T5780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.496993][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.497938][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.504963][ T5780] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.511631][ T5776] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.523938][ T5780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.526500][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.546834][ T5776] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.555632][ T5776] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.567514][ T5784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.961542][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 78.034816][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 78.050707][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 78.104818][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 78.190100][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.197889][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.205466][ T5773] bridge_slave_0: entered allmulticast mode [ 78.212157][ T5773] bridge_slave_0: entered promiscuous mode [ 78.229885][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.237066][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.244248][ T5772] bridge_slave_0: entered allmulticast mode [ 78.251211][ T5772] bridge_slave_0: entered promiscuous mode [ 78.265577][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.272697][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.280872][ T5773] bridge_slave_1: entered allmulticast mode [ 78.287938][ T5773] bridge_slave_1: entered promiscuous mode [ 78.299092][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.306300][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.313477][ T5772] bridge_slave_1: entered allmulticast mode [ 78.320098][ T5772] bridge_slave_1: entered promiscuous mode [ 78.386388][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.393721][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.400969][ T5771] bridge_slave_0: entered allmulticast mode [ 78.408062][ T5771] bridge_slave_0: entered promiscuous mode [ 78.420352][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.427617][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.434803][ T5771] bridge_slave_1: entered allmulticast mode [ 78.441579][ T5771] bridge_slave_1: entered promiscuous mode [ 78.450625][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.462161][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.473426][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.518878][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.539237][ T5772] team0: Port device team_slave_0 added [ 78.575275][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.585938][ T5772] team0: Port device team_slave_1 added [ 78.594581][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.603962][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.611093][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.618993][ T5770] bridge_slave_0: entered allmulticast mode [ 78.626020][ T5770] bridge_slave_0: entered promiscuous mode [ 78.637801][ T5773] team0: Port device team_slave_0 added [ 78.654489][ T5773] team0: Port device team_slave_1 added [ 78.667972][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.677363][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.684750][ T5770] bridge_slave_1: entered allmulticast mode [ 78.691386][ T5770] bridge_slave_1: entered promiscuous mode [ 78.745790][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.752756][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.779043][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.800152][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.807218][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.835160][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.848976][ T5771] team0: Port device team_slave_0 added [ 78.857615][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.869430][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.879404][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.886443][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.915454][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.947728][ T5771] team0: Port device team_slave_1 added [ 78.974836][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.981802][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.008172][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.055120][ T5770] team0: Port device team_slave_0 added [ 79.074850][ T5772] hsr_slave_0: entered promiscuous mode [ 79.081309][ T5772] hsr_slave_1: entered promiscuous mode [ 79.099415][ T5770] team0: Port device team_slave_1 added [ 79.108517][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.117144][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.143143][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.156335][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.163637][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.189807][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.259211][ T5773] hsr_slave_0: entered promiscuous mode [ 79.265413][ T5773] hsr_slave_1: entered promiscuous mode [ 79.271409][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.279335][ T5773] Cannot create hsr debugfs directory [ 79.285498][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.292439][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.318805][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.331508][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.338714][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.369373][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.455297][ T5771] hsr_slave_0: entered promiscuous mode [ 79.461528][ T5771] hsr_slave_1: entered promiscuous mode [ 79.468063][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.475935][ T5771] Cannot create hsr debugfs directory [ 79.570737][ T5770] hsr_slave_0: entered promiscuous mode [ 79.577037][ T5770] hsr_slave_1: entered promiscuous mode [ 79.583034][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.590727][ T5770] Cannot create hsr debugfs directory [ 79.594289][ T51] Bluetooth: hci1: command tx timeout [ 79.601733][ T51] Bluetooth: hci3: command tx timeout [ 79.607968][ T5774] Bluetooth: hci0: command tx timeout [ 79.613968][ T5784] Bluetooth: hci2: command tx timeout [ 79.815482][ T5772] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.848030][ T5772] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.857387][ T5772] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.884484][ T5772] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.930355][ T5771] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.975316][ T5771] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.989783][ T5771] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.000552][ T5771] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.057637][ T5773] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.070349][ T5773] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.081441][ T5773] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.092936][ T5773] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.172704][ T5770] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.195771][ T5770] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.206360][ T5770] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.225521][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.233049][ T5770] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.296583][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.343383][ T4591] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.350727][ T4591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.362873][ T4591] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.370051][ T4591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.428553][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.452758][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.507592][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.527091][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.534208][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.550838][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.561764][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.571571][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.578751][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.598973][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.606161][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.626763][ T4480] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.633931][ T4480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.679736][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.766723][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.773888][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.792782][ T4591] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.800023][ T4591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.813896][ T5771] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.929439][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.032478][ T5772] veth0_vlan: entered promiscuous mode [ 81.077592][ T5772] veth1_vlan: entered promiscuous mode [ 81.148228][ T5772] veth0_macvtap: entered promiscuous mode [ 81.177940][ T5772] veth1_macvtap: entered promiscuous mode [ 81.246764][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.277445][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.302338][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.319434][ T5772] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.331798][ T5772] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.344085][ T5772] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.352803][ T5772] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.389822][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.441812][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.519413][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.532504][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.590588][ T4480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.599159][ T5773] veth0_vlan: entered promiscuous mode [ 81.607750][ T4480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.609889][ T5771] veth0_vlan: entered promiscuous mode [ 81.649144][ T5773] veth1_vlan: entered promiscuous mode [ 81.666593][ T5771] veth1_vlan: entered promiscuous mode [ 81.683373][ T51] Bluetooth: hci3: command tx timeout [ 81.688818][ T51] Bluetooth: hci0: command tx timeout [ 81.694295][ T5774] Bluetooth: hci2: command tx timeout [ 81.699697][ T5774] Bluetooth: hci1: command tx timeout [ 81.710872][ T5770] veth0_vlan: entered promiscuous mode [ 81.782943][ T5773] veth0_macvtap: entered promiscuous mode [ 81.821667][ T5773] veth1_macvtap: entered promiscuous mode [ 81.841968][ T5771] veth0_macvtap: entered promiscuous mode [ 81.868215][ T5770] veth1_vlan: entered promiscuous mode [ 81.910977][ T5771] veth1_macvtap: entered promiscuous mode [ 81.976703][ T5836] syzkaller0: entered promiscuous mode [ 81.982301][ T5836] syzkaller0: entered allmulticast mode [ 82.001065][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.033937][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.055046][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.090462][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.108704][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.119775][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.134892][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.148923][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.181545][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.197281][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.211178][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.251830][ T5773] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.265743][ T5773] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.276936][ T5773] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.287204][ T5773] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.310831][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.324085][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.335256][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.346163][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.358177][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.303432][ T5771] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.312165][ T5771] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.322777][ T5771] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.332059][ T5771] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.352068][ T5770] veth0_macvtap: entered promiscuous mode [ 83.369611][ T5770] veth1_macvtap: entered promiscuous mode [ 83.448616][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.466918][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.478862][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.492291][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.502831][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.516565][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.528836][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.540105][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.550629][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.561352][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.572048][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.582074][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.587484][ C1] hrtimer: interrupt took 35378 ns [ 83.593057][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.609203][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.626390][ T5770] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.641540][ T5770] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.650722][ T5770] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.663276][ T5770] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.711931][ T4591] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.731346][ T4591] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.771282][ T4591] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.791689][ T5774] Bluetooth: hci1: command tx timeout [ 83.796207][ T4591] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.797169][ T5784] Bluetooth: hci0: command tx timeout [ 83.804621][ T51] Bluetooth: hci2: command tx timeout [ 83.809747][ T5784] Bluetooth: hci3: command tx timeout [ 84.980177][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.994281][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.077920][ T4480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.097314][ T4480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.120612][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.153481][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.227699][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.248289][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.841562][ T5776] Bluetooth: hci1: command tx timeout [ 85.843875][ T51] Bluetooth: hci0: command tx timeout [ 85.847138][ T5776] Bluetooth: hci3: command tx timeout [ 85.858007][ T5784] Bluetooth: hci2: command tx timeout [ 85.874427][ T5861] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2'. [ 86.812296][ T1213] cfg80211: failed to load regulatory.db [ 86.950530][ T5879] syzkaller0: entered promiscuous mode [ 86.958763][ T5879] syzkaller0: entered allmulticast mode [ 87.878691][ T5893] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13'. [ 89.824951][ T5912] syz.1.19[5912] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.825078][ T5912] syz.1.19[5912] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.671495][ T5925] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.21'. [ 91.189136][ T5931] netlink: 'syz.1.23': attribute type 3 has an invalid length. [ 91.247545][ T5931] netlink: 132 bytes leftover after parsing attributes in process `syz.1.23'. [ 91.327098][ T5938] netlink: 206164 bytes leftover after parsing attributes in process `syz.3.25'. [ 92.553948][ T5949] syzkaller0: entered promiscuous mode [ 92.559561][ T5949] syzkaller0: entered allmulticast mode [ 92.594309][ T5953] netlink: 'syz.0.36': attribute type 11 has an invalid length. [ 92.613376][ T5953] netlink: 168 bytes leftover after parsing attributes in process `syz.0.36'. [ 95.330003][ T5968] netlink: 'syz.1.32': attribute type 10 has an invalid length. [ 95.386794][ T5968] team0: Port device wlan1 added [ 95.946253][ T5984] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.34'. [ 96.138288][ T5980] netlink: 'syz.2.44': attribute type 10 has an invalid length. [ 96.155832][ T5980] netlink: 2 bytes leftover after parsing attributes in process `syz.2.44'. [ 96.168007][ T5980] hsr0: entered promiscuous mode [ 96.175515][ T5980] bridge0: port 3(hsr0) entered blocking state [ 96.182846][ T5980] bridge0: port 3(hsr0) entered disabled state [ 96.191164][ T5980] hsr0: entered allmulticast mode [ 96.209722][ T5980] hsr_slave_0: entered allmulticast mode [ 96.216078][ T5980] hsr_slave_1: entered allmulticast mode [ 96.311859][ T5980] bridge0: port 3(hsr0) entered blocking state [ 96.319982][ T5980] bridge0: port 3(hsr0) entered forwarding state [ 96.970772][ T6008] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.39'. [ 97.852219][ T6032] netlink: 60 bytes leftover after parsing attributes in process `syz.2.48'. [ 98.107661][ T5773] cgroup: fork rejected by pids controller in /syz0 [ 98.541265][ T6042] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.49'. [ 98.679971][ T6041] syzkaller0: entered promiscuous mode [ 98.755771][ T6041] syzkaller0: entered allmulticast mode [ 99.657629][ T5776] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 99.670968][ T5776] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 99.682751][ T5776] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 99.696181][ T5776] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 99.711509][ T5776] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 99.719083][ T5776] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 100.381718][ T6068] netlink: 'syz.1.61': attribute type 33 has an invalid length. [ 100.393464][ T6068] netlink: 'syz.1.61': attribute type 3 has an invalid length. [ 100.407811][ T6068] netlink: 153952 bytes leftover after parsing attributes in process `syz.1.61'. [ 101.754950][ T5784] Bluetooth: hci3: command tx timeout [ 102.036563][ T6040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.220359][ T6081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.508257][ T6057] chnl_net:caif_netlink_parms(): no params data found [ 102.630971][ T4480] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.764602][ T4480] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.829711][ T6096] netlink: 'syz.3.67': attribute type 10 has an invalid length. [ 102.852484][ T6096] netlink: 40 bytes leftover after parsing attributes in process `syz.3.67'. [ 102.901660][ T6096] batman_adv: batadv0: Adding interface: veth0_vlan [ 102.913730][ T6096] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.961009][ T6096] batman_adv: batadv0: Interface activated: veth0_vlan [ 103.061599][ T6103] Zero length message leads to an empty skb [ 103.087773][ T4480] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.368081][ T6103] netlink: 'syz.2.68': attribute type 10 has an invalid length. [ 103.377860][ T6103] netlink: 40 bytes leftover after parsing attributes in process `syz.2.68'. [ 103.419849][ T6103] batman_adv: batadv0: Adding interface: vlan1 [ 103.429441][ T6103] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.458304][ T6103] batman_adv: batadv0: Interface activated: vlan1 [ 103.584551][ T4480] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.663740][ T6057] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.671062][ T6057] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.681830][ T6103] syz.2.68 (6103) used greatest stack depth: 19656 bytes left [ 103.689954][ T6057] bridge_slave_0: entered allmulticast mode [ 103.702535][ T6057] bridge_slave_0: entered promiscuous mode [ 103.734003][ T6057] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.753703][ T6057] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.771690][ T6057] bridge_slave_1: entered allmulticast mode [ 103.781779][ T6057] bridge_slave_1: entered promiscuous mode [ 103.833844][ T5784] Bluetooth: hci3: command tx timeout [ 103.866161][ T6057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.945817][ T6057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.067313][ T6057] team0: Port device team_slave_0 added [ 104.096667][ T6057] team0: Port device team_slave_1 added [ 104.162844][ T6057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.203271][ T6057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.229977][ T6118] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 104.270666][ T6057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.291817][ T6057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.309128][ T6057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.373854][ T6057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.601523][ T6118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.72'. [ 104.610981][ T6123] netlink: 'syz.3.72': attribute type 10 has an invalid length. [ 104.706671][ T6123] team0: Port device wlan1 added [ 104.733385][ T6117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.894682][ T6057] hsr_slave_0: entered promiscuous mode [ 104.910891][ T6057] hsr_slave_1: entered promiscuous mode [ 104.932825][ T6057] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.947355][ T6140] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.75'. [ 104.951494][ T6057] Cannot create hsr debugfs directory [ 104.973973][ T6140] netlink: zone id is out of range [ 104.979129][ T6140] netlink: zone id is out of range [ 104.997870][ T6140] netlink: zone id is out of range [ 105.008693][ T6140] netlink: zone id is out of range [ 105.024515][ T6135] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 105.055565][ T6140] netlink: zone id is out of range [ 105.060721][ T6140] netlink: zone id is out of range [ 105.090678][ T6135] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 105.093032][ T6140] netlink: zone id is out of range [ 105.140739][ T6140] netlink: zone id is out of range [ 105.163328][ T6140] netlink: zone id is out of range [ 105.468011][ T6153] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.79'. [ 105.522535][ T6153] netlink: 6320 bytes leftover after parsing attributes in process `syz.1.79'. [ 105.913789][ T5784] Bluetooth: hci3: command tx timeout [ 106.006109][ T6162] netlink: 'syz.3.81': attribute type 41 has an invalid length. [ 107.093343][ T6189] netlink: 132 bytes leftover after parsing attributes in process `syz.2.85'. [ 107.793802][ T4480] hsr_slave_0: left promiscuous mode [ 107.836582][ T4480] hsr_slave_1: left promiscuous mode [ 107.932469][ T4480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.951543][ T4480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.993336][ T5784] Bluetooth: hci3: command tx timeout [ 108.016544][ T4480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.063270][ T4480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.086410][ T4480] bridge_slave_1: left allmulticast mode [ 108.113457][ T4480] bridge_slave_1: left promiscuous mode [ 108.120328][ T4480] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.147138][ T4480] bridge_slave_0: left allmulticast mode [ 108.152822][ T4480] bridge_slave_0: left promiscuous mode [ 108.165283][ T4480] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.315366][ T4480] veth1_macvtap: left promiscuous mode [ 108.321390][ T4480] veth0_macvtap: left promiscuous mode [ 108.355063][ T4480] veth1_vlan: left promiscuous mode [ 108.360759][ T4480] veth0_vlan: left promiscuous mode [ 109.892314][ T4480] team0 (unregistering): Port device team_slave_1 removed [ 109.969972][ T4480] team0 (unregistering): Port device team_slave_0 removed [ 110.041854][ T4480] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.108459][ T4480] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.592721][ T4480] bond0 (unregistering): Released all slaves [ 110.696009][ T6057] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 110.707076][ T6204] netlink: 'syz.3.88': attribute type 21 has an invalid length. [ 110.723459][ T6204] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.88'. [ 110.814616][ T6057] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 110.836989][ T6057] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 110.847418][ T6221] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 110.862805][ T6057] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 110.975462][ T6223] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.92'. [ 111.208197][ T6057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.319961][ T6057] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.348473][ T3464] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.356226][ T3464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.376592][ T3464] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.383784][ T3464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.312241][ T6057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.442326][ T6274] netlink: 10 bytes leftover after parsing attributes in process `syz.3.101'. [ 112.503595][ T6274] netlink: 10 bytes leftover after parsing attributes in process `syz.3.101'. [ 112.545922][ T6057] veth0_vlan: entered promiscuous mode [ 112.610380][ T6057] veth1_vlan: entered promiscuous mode [ 112.735713][ T6287] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.103'. [ 112.741266][ T6057] veth0_macvtap: entered promiscuous mode [ 112.846732][ T6057] veth1_macvtap: entered promiscuous mode [ 112.953890][ T6057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.004101][ T6057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.070218][ T6057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.118821][ T6057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.136121][ T6057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.153834][ T6057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.173571][ T6057] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.216737][ T6057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.239359][ T6057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.262488][ T6057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.287020][ T6057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.309382][ T6057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.334630][ T6057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.361509][ T6057] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.388621][ T6057] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.407999][ T6057] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.425820][ T6057] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.442886][ T6057] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.270830][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.296469][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.344510][ T6318] netlink: 'syz.3.107': attribute type 10 has an invalid length. [ 114.436517][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.481691][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.642332][ T6334] netlink: 'syz.2.111': attribute type 2 has an invalid length. [ 114.681308][ T6334] netlink: 'syz.2.111': attribute type 8 has an invalid length. [ 114.698892][ T6334] netlink: 132 bytes leftover after parsing attributes in process `syz.2.111'. [ 115.520639][ T6360] warning: `syz.2.115' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 115.563115][ T6360] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.115'. [ 116.084640][ T6371] syz.2.119 uses obsolete (PF_INET,SOCK_PACKET) [ 116.462781][ T6379] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.122'. [ 116.518014][ T6379] bridge_slave_1: default FDB implementation only supports local addresses [ 116.568680][ T6387] IPv6: Can't replace route, no match found [ 116.717750][ T6391] netlink: 'syz.3.126': attribute type 39 has an invalid length. [ 117.210118][ T6411] netlink: 'syz.1.130': attribute type 10 has an invalid length. [ 118.883755][ T6417] Driver unsupported XDP return value 0 on prog (id 154) dev N/A, expect packet loss! [ 119.025386][ T6411] veth0_vlan: left promiscuous mode [ 119.060089][ T6411] veth0_vlan: entered promiscuous mode [ 119.102956][ T6411] team0: Device veth0_vlan failed to register rx_handler [ 120.873741][ T6421] netlink: 'syz.2.132': attribute type 21 has an invalid length. [ 120.881656][ T6421] netlink: 'syz.2.132': attribute type 6 has an invalid length. [ 120.927195][ T6421] netlink: 132 bytes leftover after parsing attributes in process `syz.2.132'. [ 120.965187][ T6411] syz.1.130 (6411) used greatest stack depth: 19528 bytes left [ 121.043710][ T6428] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 121.086620][ T6428] syzkaller0: entered promiscuous mode [ 121.092167][ T6428] syzkaller0: entered allmulticast mode [ 121.708709][ T6451] netlink: 168 bytes leftover after parsing attributes in process `syz.3.140'. [ 121.731446][ T6452] netlink: 'syz.3.140': attribute type 10 has an invalid length. [ 121.820988][ T6452] team0: Port device macvlan0 added [ 123.657351][ T6477] sctp: [Deprecated]: syz.1.144 (pid 6477) Use of struct sctp_assoc_value in delayed_ack socket option. [ 123.657351][ T6477] Use struct sctp_sack_info instead [ 124.172155][ T6497] netlink: 'syz.0.150': attribute type 3 has an invalid length. [ 124.181056][ T6497] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.150'. [ 124.217562][ T6495] netlink: 'syz.2.151': attribute type 10 has an invalid length. [ 124.278391][ T6495] batman_adv: batadv0: Adding interface: netdevsim0 [ 124.297722][ T6495] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.343906][ T6495] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 124.660060][ T6506] netlink: 'syz.0.153': attribute type 10 has an invalid length. [ 124.668740][ T6506] netlink: 2 bytes leftover after parsing attributes in process `syz.0.153'. [ 124.678255][ T6506] hsr0: entered promiscuous mode [ 124.683958][ T6506] bridge0: port 3(hsr0) entered blocking state [ 124.690385][ T6506] bridge0: port 3(hsr0) entered disabled state [ 124.697362][ T6506] hsr0: entered allmulticast mode [ 124.702512][ T6506] hsr_slave_0: entered allmulticast mode [ 124.743611][ T6506] hsr_slave_1: entered allmulticast mode [ 124.778144][ T6506] bridge0: port 3(hsr0) entered blocking state [ 124.784534][ T6506] bridge0: port 3(hsr0) entered forwarding state [ 127.560601][ T6548] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.165'. [ 127.925424][ T6556] netlink: 830 bytes leftover after parsing attributes in process `syz.0.169'. [ 129.271469][ T6577] syzkaller0: entered promiscuous mode [ 129.289017][ T6577] syzkaller0: entered allmulticast mode [ 129.299763][ T6584] netlink: 'syz.0.177': attribute type 10 has an invalid length. [ 129.342152][ T6584] team0: Device ipvlan1 failed to register rx_handler [ 129.513365][ T6582] tap0: tun_chr_ioctl cmd 1074025692 [ 132.817946][ T6627] netlink: 207496 bytes leftover after parsing attributes in process `syz.1.185'. [ 132.880675][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.891088][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.803423][ T6660] netlink: 'syz.3.194': attribute type 2 has an invalid length. [ 134.830122][ T6660] netlink: 'syz.3.194': attribute type 8 has an invalid length. [ 134.864937][ T6660] netlink: 132 bytes leftover after parsing attributes in process `syz.3.194'. [ 135.472500][ T6677] netlink: 'syz.3.199': attribute type 10 has an invalid length. [ 135.520483][ T6677] netlink: 40 bytes leftover after parsing attributes in process `syz.3.199'. [ 135.533818][ T6677] team0: entered promiscuous mode [ 135.539941][ T6677] team_slave_0: entered promiscuous mode [ 135.559674][ T6677] team_slave_1: entered promiscuous mode [ 135.585523][ T6677] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 135.602949][ T6677] macvlan0: entered promiscuous mode [ 135.619498][ T6677] team0: entered allmulticast mode [ 135.628372][ T6677] team_slave_0: entered allmulticast mode [ 135.641373][ T6677] team_slave_1: entered allmulticast mode [ 135.653377][ T6677] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 135.662260][ T6677] macvlan0: entered allmulticast mode [ 135.670539][ T6677] veth1_vlan: entered allmulticast mode [ 135.679954][ T6677] bridge0: port 3(team0) entered blocking state [ 135.696449][ T6677] bridge0: port 3(team0) entered disabled state [ 135.710918][ T6677] bridge0: port 3(team0) entered blocking state [ 135.717398][ T6677] bridge0: port 3(team0) entered forwarding state [ 136.307380][ T6697] sctp: [Deprecated]: syz.2.204 (pid 6697) Use of struct sctp_assoc_value in delayed_ack socket option. [ 136.307380][ T6697] Use struct sctp_sack_info instead [ 137.363513][ T6730] netlink: 132 bytes leftover after parsing attributes in process `syz.0.212'. [ 139.435529][ T6772] netlink: 826 bytes leftover after parsing attributes in process `syz.3.224'. [ 140.245939][ T6786] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.228'. [ 140.318070][ T6777] netlink: 'syz.1.225': attribute type 10 has an invalid length. [ 140.363354][ T6777] netlink: 2 bytes leftover after parsing attributes in process `syz.1.225'. [ 140.424705][ T6777] hsr0: entered promiscuous mode [ 140.452519][ T6777] bridge0: port 3(hsr0) entered blocking state [ 140.509739][ T6777] bridge0: port 3(hsr0) entered disabled state [ 140.545838][ T6777] hsr0: entered allmulticast mode [ 140.597446][ T6777] hsr_slave_0: entered allmulticast mode [ 140.639284][ T6777] hsr_slave_1: entered allmulticast mode [ 140.728061][ T6777] bridge0: port 3(hsr0) entered blocking state [ 140.734428][ T6777] bridge0: port 3(hsr0) entered forwarding state [ 141.146074][ T6804] pim6reg1: entered promiscuous mode [ 141.151428][ T6804] pim6reg1: entered allmulticast mode [ 141.184497][ T6806] : renamed from ip6gretap0 (while UP) [ 141.767949][ T6821] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.238'. [ 141.787684][ T6821] bridge_slave_1: default FDB implementation only supports local addresses [ 143.652002][ T6856] netlink: 'syz.1.247': attribute type 8 has an invalid length. [ 144.579078][ T6892] netlink: 'syz.0.252': attribute type 5 has an invalid length. [ 144.972144][ T6897] netlink: 132 bytes leftover after parsing attributes in process `syz.2.254'. [ 147.352164][ T6941] ±ÿÿÿÿa–ïD: renamed from lo (while UP) [ 149.109440][ T6972] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.271'. [ 150.277228][ T6989] netlink: 'syz.2.274': attribute type 1 has an invalid length. [ 150.429809][ T6989] netlink: 'syz.2.274': attribute type 2 has an invalid length. [ 150.518112][ T6989] netlink: 'syz.2.274': attribute type 2 has an invalid length. [ 150.628424][ T6989] netlink: 'syz.2.274': attribute type 3 has an invalid length. [ 150.705781][ T6989] netlink: 'syz.2.274': attribute type 4 has an invalid length. [ 150.822808][ T6989] netlink: 'syz.2.274': attribute type 5 has an invalid length. [ 151.043363][ T6989] netlink: 'syz.2.274': attribute type 6 has an invalid length. [ 151.083323][ T6989] netlink: 'syz.2.274': attribute type 7 has an invalid length. [ 151.091105][ T6989] netlink: 'syz.2.274': attribute type 9 has an invalid length. [ 151.184282][ T6989] netlink: 'syz.2.274': attribute type 10 has an invalid length. [ 151.224970][ T6989] netlink: 126304 bytes leftover after parsing attributes in process `syz.2.274'. [ 153.524929][ T7001] tun0: tun_chr_ioctl cmd 1074025677 [ 153.543578][ T7001] tun0: linktype set to 1 [ 153.610743][ T7006] ipvlan0: entered promiscuous mode [ 153.619256][ T7006] ipvlan0: entered allmulticast mode [ 153.644167][ T7006] veth0_vlan: entered allmulticast mode [ 154.217264][ T7021] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.283'. [ 154.480780][ T7027] netlink: 40 bytes leftover after parsing attributes in process `syz.2.285'. [ 154.709127][ T7031] netlink: 164 bytes leftover after parsing attributes in process `syz.0.286'. [ 155.145959][ T5784] Bluetooth: hci2: ISO packet for unknown connection handle 62 [ 155.486711][ T7049] netlink: 128 bytes leftover after parsing attributes in process `syz.1.295'. [ 155.538657][ T7049] A link change request failed with some changes committed already. Interface 26±ÿÿÿÿa–ïD may have been left with an inconsistent configuration, please check. [ 155.769268][ T5784] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 156.156971][ T7074] validate_nla: 5 callbacks suppressed [ 156.157002][ T7074] netlink: 'syz.1.302': attribute type 3 has an invalid length. [ 156.225064][ T7074] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.302'. [ 157.059239][ T7097] netlink: 'syz.0.308': attribute type 10 has an invalid length. [ 157.574874][ T7108] netlink: 'syz.1.310': attribute type 3 has an invalid length. [ 157.582565][ T7108] netlink: 132 bytes leftover after parsing attributes in process `syz.1.310'. [ 157.986474][ T7114] C: renamed from team_slave_0 (while UP) [ 158.119804][ T7114] netlink: 'syz.2.313': attribute type 3 has an invalid length. [ 158.148222][ T7114] netlink: 'syz.2.313': attribute type 1 has an invalid length. [ 158.180642][ T7114] netlink: 116 bytes leftover after parsing attributes in process `syz.2.313'. [ 158.202573][ T7114] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 158.272693][ T7123] netlink: 763 bytes leftover after parsing attributes in process `syz.1.318'. [ 158.785735][ T7142] netlink: 168 bytes leftover after parsing attributes in process `syz.0.322'. [ 158.969687][ T7146] netlink: 168 bytes leftover after parsing attributes in process `syz.0.322'. [ 159.870376][ T7167] netlink: 128 bytes leftover after parsing attributes in process `syz.1.328'. [ 159.918234][ T7167] A link change request failed with some changes committed already. Interface 26±ÿÿÿÿa–ïD may have been left with an inconsistent configuration, please check. [ 159.995744][ T7165] netlink: 'syz.0.329': attribute type 7 has an invalid length. [ 160.639023][ T7182] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.333'. [ 163.465335][ T7182] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 165.059111][ T7225] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.342'. [ 165.117789][ T5784] Bluetooth: hci2: unexpected event 0x04 length: 151 > 10 [ 166.946263][ T7258] IPv6: Can't replace route, no match found [ 166.952611][ T7256] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.352'. [ 167.193437][ T5784] Bluetooth: hci2: command tx timeout [ 167.453808][ T7275] netlink: 'syz.2.356': attribute type 27 has an invalid length. [ 167.647585][ T7281] netlink: 'syz.1.358': attribute type 12 has an invalid length. [ 167.663596][ T7281] netlink: 'syz.1.358': attribute type 11 has an invalid length. [ 167.671554][ T7281] netlink: 188816 bytes leftover after parsing attributes in process `syz.1.358'. [ 167.942561][ T7294] lo: entered allmulticast mode [ 168.012689][ T7295] lo: entered promiscuous mode [ 168.043265][ T7295] lo: left allmulticast mode [ 168.629811][ T7318] netlink: 'syz.2.372': attribute type 29 has an invalid length. [ 168.660204][ T7318] netlink: 'syz.2.372': attribute type 29 has an invalid length. [ 168.686224][ T7324] netlink: 'syz.2.372': attribute type 29 has an invalid length. [ 168.725264][ T7318] netlink: 'syz.2.372': attribute type 29 has an invalid length. [ 168.916574][ T7330] netlink: 'syz.3.374': attribute type 1 has an invalid length. [ 168.944396][ T7330] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.374'. [ 169.282487][ T7342] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.377'. [ 169.363086][ T7342] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.377'. [ 169.451152][ T7342] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.377'. [ 170.925245][ T7366] netlink: 'syz.1.384': attribute type 21 has an invalid length. [ 173.290342][ T7430] netlink: 'syz.2.403': attribute type 10 has an invalid length. [ 173.325148][ T7432] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.404'. [ 173.345556][ T7432] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 173.378997][ T7430] bond0: (slave bond_slave_0): Releasing backup interface [ 173.483715][ T7434] netlink: 'syz.1.406': attribute type 27 has an invalid length. [ 173.537913][ T7434] netlink: 'syz.1.406': attribute type 4 has an invalid length. [ 173.581144][ T7434] netlink: 152 bytes leftover after parsing attributes in process `syz.1.406'. [ 173.722209][ T7440] netlink: 'syz.3.407': attribute type 2 has an invalid length. [ 173.733398][ T7440] netlink: 'syz.3.407': attribute type 8 has an invalid length. [ 173.741253][ T7440] netlink: 132 bytes leftover after parsing attributes in process `syz.3.407'. [ 174.087181][ T7446] netlink: 'syz.1.408': attribute type 46 has an invalid length. [ 174.200594][ T7446] netlink: 'syz.1.408': attribute type 46 has an invalid length. [ 175.072711][ T7456] netlink: 'syz.2.411': attribute type 1 has an invalid length. [ 175.173334][ T7456] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.411'. [ 175.517835][ T7470] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.415'. [ 175.935628][ T7478] netlink: 10 bytes leftover after parsing attributes in process `syz.1.416'. [ 176.663774][ T7502] netlink: set zone limit has 8 unknown bytes [ 178.937123][ T7531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.043615][ T7531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.328211][ T7531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.363750][ T7531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.426854][ T7531] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 179.472241][ T7531] batman_adv: batadv0: Removing interface: veth0_vlan [ 179.803336][ T7535] netlink: 'syz.2.432': attribute type 2 has an invalid length. [ 179.836633][ T7535] netlink: 119 bytes leftover after parsing attributes in process `syz.2.432'. [ 181.540475][ T7548] netlink: 76 bytes leftover after parsing attributes in process `syz.1.436'. [ 182.053559][ T7567] netlink: 'syz.3.440': attribute type 15 has an invalid length. [ 182.102195][ T7567] netlink: 'syz.3.440': attribute type 7 has an invalid length. [ 182.121138][ T7569] can: request_module (can-proto-5) failed. [ 182.314075][ T7567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.440'. [ 183.357114][ T7594] netlink: 'syz.0.447': attribute type 64 has an invalid length. [ 183.841856][ T7597] netlink: 'syz.3.448': attribute type 10 has an invalid length. [ 183.927376][ T7597] netlink: 55 bytes leftover after parsing attributes in process `syz.3.448'. [ 184.111434][ T7599] syz.0.449 (7599) used greatest stack depth: 19240 bytes left [ 184.169532][ T7611] netlink: 48 bytes leftover after parsing attributes in process `syz.2.453'. [ 184.206825][ T7611] netlink: 48 bytes leftover after parsing attributes in process `syz.2.453'. [ 184.703052][ T7622] netlink: 'syz.2.458': attribute type 17 has an invalid length. [ 186.461887][ T7666] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.472'. [ 186.590516][ T7667] netlink: 168 bytes leftover after parsing attributes in process `syz.3.470'. [ 188.612138][ T7701] netlink: 'syz.0.481': attribute type 29 has an invalid length. [ 188.697367][ T7701] netlink: 'syz.0.481': attribute type 29 has an invalid length. [ 188.784241][ T7705] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 188.803819][ T7702] netlink: 'syz.0.481': attribute type 29 has an invalid length. [ 188.823686][ T7706] netlink: 'syz.0.481': attribute type 29 has an invalid length. [ 189.837375][ T7731] netlink: 'syz.1.489': attribute type 29 has an invalid length. [ 189.863699][ T7731] netlink: 'syz.1.489': attribute type 29 has an invalid length. [ 189.914978][ T7731] netlink: 'syz.1.489': attribute type 29 has an invalid length. [ 192.113530][ T7763] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.499'. [ 194.329503][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.346485][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.831097][ T7780] netlink: 40 bytes leftover after parsing attributes in process `syz.2.505'. [ 195.846626][ T7780] netlink: 40 bytes leftover after parsing attributes in process `syz.2.505'. [ 195.882803][ T7780] netlink: 40 bytes leftover after parsing attributes in process `syz.2.505'. [ 195.915548][ T7780] netlink: 40 bytes leftover after parsing attributes in process `syz.2.505'. [ 196.230658][ T7795] tun0: tun_chr_ioctl cmd 35296 [ 196.668118][ T7811] netlink: 'syz.3.515': attribute type 21 has an invalid length. [ 196.928137][ T7818] netlink: 'syz.3.517': attribute type 1 has an invalid length. [ 197.049587][ T7825] netlink: 'syz.3.519': attribute type 29 has an invalid length. [ 197.069540][ T7824] netlink: 'syz.0.516': attribute type 12 has an invalid length. [ 197.078159][ T7825] netlink: 'syz.3.519': attribute type 29 has an invalid length. [ 197.087479][ T7825] netlink: 'syz.3.519': attribute type 29 has an invalid length. [ 197.111610][ T7825] netlink: 'syz.3.519': attribute type 29 has an invalid length. [ 197.143738][ T7825] netlink: 'syz.3.519': attribute type 29 has an invalid length. [ 197.152817][ T7824] netlink: 'syz.0.516': attribute type 11 has an invalid length. [ 197.221923][ T7824] netlink: 188816 bytes leftover after parsing attributes in process `syz.0.516'. [ 198.001316][ T7850] netlink: 12 bytes leftover after parsing attributes in process `syz.2.526'. [ 198.500576][ T7858] netlink: 'syz.3.529': attribute type 9 has an invalid length. [ 198.518841][ T7858] netlink: 49779 bytes leftover after parsing attributes in process `syz.3.529'. [ 198.558019][ T7856] netlink: 'syz.3.529': attribute type 9 has an invalid length. [ 198.622598][ T7856] netlink: 49779 bytes leftover after parsing attributes in process `syz.3.529'. [ 199.180952][ T7881] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.536'. [ 199.192167][ T7882] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.536'. [ 199.775913][ T7887] netlink: 44 bytes leftover after parsing attributes in process `syz.2.538'. [ 201.515920][ T5780] Bluetooth: hci1: command 0x0406 tx timeout [ 201.521975][ T5780] Bluetooth: hci2: command 0x0406 tx timeout [ 201.528114][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 202.381328][ T7895] netlink: 826 bytes leftover after parsing attributes in process `syz.0.540'. [ 202.394524][ T7897] validate_nla: 1 callbacks suppressed [ 202.394537][ T7897] netlink: 'syz.3.541': attribute type 49 has an invalid length. [ 203.179979][ T7929] netlink: 'syz.0.550': attribute type 10 has an invalid length. [ 203.229634][ T7929] team0: Device wg1 is of different type [ 203.328736][ T7935] netlink: 'syz.2.551': attribute type 13 has an invalid length. [ 203.346032][ T7935] netlink: 160 bytes leftover after parsing attributes in process `syz.2.551'. [ 203.398187][ T7935] erspan0: refused to change device tx_queue_len [ 203.418426][ T7935] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 203.624704][ T7950] netlink: 132 bytes leftover after parsing attributes in process `syz.0.553'. [ 203.649976][ T7948] netlink: 132 bytes leftover after parsing attributes in process `syz.0.553'. [ 204.306958][ T7971] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.562'. [ 204.330023][ T7967] netlink: 'syz.3.560': attribute type 29 has an invalid length. [ 204.377294][ T7967] netlink: 'syz.3.560': attribute type 29 has an invalid length. [ 204.428169][ T7969] netlink: 'syz.3.560': attribute type 29 has an invalid length. [ 204.472455][ T7973] netlink: 'syz.3.560': attribute type 29 has an invalid length. [ 205.549299][ T8002] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.572'. [ 205.595856][ T8002] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.572'. [ 206.012148][ T8011] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.576'. [ 206.016919][ T8008] netlink: 10 bytes leftover after parsing attributes in process `syz.2.574'. [ 206.077052][ T8011] netlink: 4548 bytes leftover after parsing attributes in process `syz.3.576'. [ 206.132649][ T8011] netlink: 'syz.3.576': attribute type 1 has an invalid length. [ 207.061989][ T8046] netlink: 'syz.2.582': attribute type 3 has an invalid length. [ 207.096839][ T8046] netlink: 'syz.2.582': attribute type 1 has an invalid length. [ 207.127814][ T8046] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 208.008479][ T8063] validate_nla: 1 callbacks suppressed [ 208.008495][ T8063] netlink: 'syz.3.588': attribute type 13 has an invalid length. [ 208.042302][ T8063] __nla_validate_parse: 1 callbacks suppressed [ 208.042317][ T8063] netlink: 160 bytes leftover after parsing attributes in process `syz.3.588'. [ 208.101110][ T8063] erspan0: refused to change device tx_queue_len [ 208.123399][ T8063] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 208.357430][ T8066] netlink: 'syz.0.587': attribute type 1 has an invalid length. [ 208.455058][ T8066] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.587'. [ 208.773068][ T8076] netlink: 'syz.1.589': attribute type 12 has an invalid length. [ 208.929526][ T8076] netlink: 14585 bytes leftover after parsing attributes in process `syz.1.589'. [ 209.223050][ T8079] netlink: 'syz.2.593': attribute type 3 has an invalid length. [ 209.304125][ T8079] netlink: 'syz.2.593': attribute type 8 has an invalid length. [ 209.312141][ T8079] netlink: 'syz.2.593': attribute type 6 has an invalid length. [ 209.413411][ T8079] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.593'. [ 211.524679][ T8091] netlink: 132 bytes leftover after parsing attributes in process `syz.3.595'. [ 211.830138][ T8094] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.596'. [ 212.055617][ T8101] netlink: 'syz.3.597': attribute type 21 has an invalid length. [ 213.179957][ T8125] netlink: 'syz.3.606': attribute type 3 has an invalid length. [ 213.210581][ T8125] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.606'. [ 213.368461][ T8127] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.605'. [ 214.954783][ T8141] netlink: 'syz.3.610': attribute type 10 has an invalid length. [ 214.963240][ T8145] netlink: 44 bytes leftover after parsing attributes in process `syz.1.609'. [ 215.038829][ T8144] netlink: 'syz.3.610': attribute type 9 has an invalid length. [ 215.093593][ T8144] netlink: 184904 bytes leftover after parsing attributes in process `syz.3.610'. [ 215.242306][ T8141] team0: Device hsr_slave_0 failed to register rx_handler [ 215.655763][ T8141] syz.3.610 (8141) used greatest stack depth: 18576 bytes left [ 216.271507][ T8159] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.613'. [ 216.713363][ T8161] can: request_module (can-proto-5) failed. [ 216.813332][ T8179] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.617'. [ 216.822617][ T8179] openvswitch: netlink: Key type 4112 is out of range max 32 [ 216.952627][ T8179] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.617'. [ 217.073349][ T8179] openvswitch: netlink: Key type 4112 is out of range max 32 [ 217.165024][ T8179] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.617'. [ 217.245814][ T8179] openvswitch: netlink: Key type 4112 is out of range max 32 [ 217.264870][ T8179] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.617'. [ 217.330753][ T8179] openvswitch: netlink: Key type 4112 is out of range max 32 [ 217.349244][ T8179] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.617'. [ 217.384924][ T8179] openvswitch: netlink: Key type 4112 is out of range max 32 [ 217.409873][ T8179] openvswitch: netlink: Key type 4112 is out of range max 32 [ 217.451663][ T8179] openvswitch: netlink: Key type 4112 is out of range max 32 [ 217.519114][ T8179] openvswitch: netlink: Key type 4112 is out of range max 32 [ 217.911364][ T8185] veth0_macvtap: left promiscuous mode [ 222.002998][ T5774] Bluetooth: hci3: command 0x0406 tx timeout [ 223.297116][ T8233] netlink: 'syz.1.633': attribute type 13 has an invalid length. [ 223.330755][ T8233] __nla_validate_parse: 4 callbacks suppressed [ 223.330780][ T8233] netlink: 172 bytes leftover after parsing attributes in process `syz.1.633'. [ 224.308678][ T8240] netlink: 'syz.1.637': attribute type 10 has an invalid length. [ 224.356497][ T8240] netlink: 2 bytes leftover after parsing attributes in process `syz.1.637'. [ 225.540377][ T8259] sctp: [Deprecated]: syz.3.641 (pid 8259) Use of int in max_burst socket option deprecated. [ 225.540377][ T8259] Use struct sctp_assoc_value instead [ 226.544737][ T8274] sock: sock_set_timeout: `syz.3.646' (pid 8274) tries to set negative timeout [ 227.232264][ T8290] netlink: 128 bytes leftover after parsing attributes in process `syz.1.650'. [ 227.306234][ T8290] A link change request failed with some changes committed already. Interface 26±ÿÿÿÿa–ïD may have been left with an inconsistent configuration, please check. [ 228.030158][ T8303] netlink: 'syz.0.652': attribute type 10 has an invalid length. [ 228.190154][ T8308] netlink: 60 bytes leftover after parsing attributes in process `syz.3.655'. [ 228.193073][ T8303] team0: Port device dummy0 added [ 228.294497][ T8308] netlink: 60 bytes leftover after parsing attributes in process `syz.3.655'. [ 228.383387][ T8310] netlink: 60 bytes leftover after parsing attributes in process `syz.3.655'. [ 228.421253][ T8308] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.655'. [ 228.479627][ T8311] netlink: 60 bytes leftover after parsing attributes in process `syz.3.655'. [ 229.103580][ T8317] netlink: 128 bytes leftover after parsing attributes in process `syz.3.657'. [ 229.196161][ T8317] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 229.367621][ T8318] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.657'. [ 231.179668][ T8334] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.233545][ T8334] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.341806][ T8334] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.421667][ T8334] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.128910][ T8355] netlink: 132 bytes leftover after parsing attributes in process `syz.1.666'. [ 233.253181][ T8361] netlink: 703 bytes leftover after parsing attributes in process `syz.0.668'. [ 234.316830][ T8372] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.670'. [ 234.480905][ T8374] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.670'. [ 235.245936][ T8386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.674'. [ 236.343814][ T8388] netlink: 60 bytes leftover after parsing attributes in process `syz.2.673'. [ 236.352824][ T8388] netlink: 60 bytes leftover after parsing attributes in process `syz.2.673'. [ 237.526712][ T8407] netlink: 'syz.2.679': attribute type 4 has an invalid length. [ 237.598313][ T8407] netlink: 168 bytes leftover after parsing attributes in process `syz.2.679'. [ 238.492267][ T8415] netlink: 'syz.2.681': attribute type 2 has an invalid length. [ 238.513762][ T8415] netlink: 132 bytes leftover after parsing attributes in process `syz.2.681'. [ 239.260749][ T8436] sit0: entered allmulticast mode [ 239.345572][ T8440] sit0: entered promiscuous mode [ 240.044722][ T8453] netlink: 'syz.3.690': attribute type 10 has an invalid length. [ 242.980001][ T8453] bridge0: port 3(team0) entered disabled state [ 242.986926][ T8453] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.995301][ T8453] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.046725][ T8453] bridge0: port 3(team0) entered blocking state [ 243.053248][ T8453] bridge0: port 3(team0) entered forwarding state [ 243.060002][ T8453] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.067273][ T8453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.074829][ T8453] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.082048][ T8453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.172181][ T8453] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 244.436986][ T8498] netlink: 'syz.1.700': attribute type 19 has an invalid length. [ 245.704752][ T8531] syz.3.710 (8531) used obsolete PPPIOCDETACH ioctl [ 245.743733][ T8531] netlink: 144 bytes leftover after parsing attributes in process `syz.3.710'. [ 246.253338][ T8558] netlink: 60 bytes leftover after parsing attributes in process `syz.1.716'. [ 246.296851][ T8558] netlink: 60 bytes leftover after parsing attributes in process `syz.1.716'. [ 246.329289][ T8559] netlink: 60 bytes leftover after parsing attributes in process `syz.1.716'. [ 246.362642][ T8558] netlink: 60 bytes leftover after parsing attributes in process `syz.1.716'. [ 246.388935][ T8559] netlink: 60 bytes leftover after parsing attributes in process `syz.1.716'. [ 247.736890][ T8594] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 253.374230][ T8612] syzkaller0: entered promiscuous mode [ 253.434729][ T8612] syzkaller0: entered allmulticast mode [ 255.765143][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.771488][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.147017][ T5776] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 260.310048][ T8877] tap0: tun_chr_ioctl cmd 1074025677 [ 260.320055][ T8877] tap0: linktype set to 519 [ 260.537873][ T8887] netlink: 'syz.2.859': attribute type 29 has an invalid length. [ 260.548920][ T8888] netlink: 'syz.1.860': attribute type 29 has an invalid length. [ 260.557276][ T8887] netlink: 'syz.2.859': attribute type 29 has an invalid length. [ 260.568170][ T8887] netlink: 'syz.2.859': attribute type 29 has an invalid length. [ 260.576548][ T8888] netlink: 'syz.1.860': attribute type 29 has an invalid length. [ 260.589387][ T8888] netlink: 'syz.1.860': attribute type 29 has an invalid length. [ 260.597674][ T8887] netlink: 'syz.2.859': attribute type 29 has an invalid length. [ 260.615158][ T8888] netlink: 'syz.1.860': attribute type 29 has an invalid length. [ 260.788546][ T8895] netlink: 'syz.1.863': attribute type 21 has an invalid length. [ 262.946678][ T8929] netlink: 'syz.1.878': attribute type 29 has an invalid length. [ 265.006246][ T8981] macvlan0: entered promiscuous mode [ 265.013316][ T8981] macvlan0: entered allmulticast mode [ 265.030864][ T8981] veth1_vlan: entered allmulticast mode [ 265.045594][ T8981] team0: Device macvlan0 is up. Set it down before adding it as a team port [ 267.848168][ T9059] validate_nla: 3 callbacks suppressed [ 267.848185][ T9059] netlink: 'syz.0.937': attribute type 10 has an invalid length. [ 269.230396][ T9101] netlink: 'syz.2.955': attribute type 29 has an invalid length. [ 269.239890][ T9101] netlink: 'syz.2.955': attribute type 29 has an invalid length. [ 269.250831][ T9101] netlink: 'syz.2.955': attribute type 29 has an invalid length. [ 269.558578][ T9105] netlink: 'syz.1.957': attribute type 29 has an invalid length. [ 269.576329][ T9105] netlink: 'syz.1.957': attribute type 29 has an invalid length. [ 269.623523][ T9105] netlink: 'syz.1.957': attribute type 29 has an invalid length. [ 271.589197][ T5774] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 271.598326][ T5774] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 271.609523][ T5774] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 271.618789][ T5774] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 271.629928][ T5774] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 271.637422][ T5774] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 271.926722][ T9167] chnl_net:caif_netlink_parms(): no params data found [ 272.087854][ T9167] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.095381][ T9167] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.116156][ T9167] bridge_slave_0: entered allmulticast mode [ 272.144016][ T9167] bridge_slave_0: entered promiscuous mode [ 272.165926][ T9167] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.175955][ T9167] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.216340][ T9167] bridge_slave_1: entered allmulticast mode [ 272.255076][ T9167] bridge_slave_1: entered promiscuous mode [ 272.319141][ T9167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.349045][ T9167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.438257][ T9167] team0: Port device team_slave_0 added [ 272.452625][ T9167] team0: Port device team_slave_1 added [ 272.512992][ T9167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.520279][ T9167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.555488][ T9167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.571693][ T9167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.581323][ T9167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.614481][ T9167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.673485][ T5774] Bluetooth: hci4: command tx timeout [ 275.208129][ T9167] hsr_slave_0: entered promiscuous mode [ 275.247420][ T9167] hsr_slave_1: entered promiscuous mode [ 275.260028][ T9167] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 275.278972][ T9167] Cannot create hsr debugfs directory [ 275.753346][ T5774] Bluetooth: hci4: command tx timeout [ 275.828733][ T9167] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 276.189082][ T9167] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 276.420200][ T9167] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 276.481060][ T9167] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 276.569621][ T9213] netlink: 'syz.0.1007': attribute type 21 has an invalid length. [ 276.586074][ T9213] netlink: 'syz.0.1007': attribute type 5 has an invalid length. [ 276.687201][ T9167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.734140][ T9167] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.753707][ T6881] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.760881][ T6881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.853046][ T6880] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.860297][ T6880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.183204][ T9230] sctp: [Deprecated]: syz.2.1011 (pid 9230) Use of struct sctp_assoc_value in delayed_ack socket option. [ 277.183204][ T9230] Use struct sctp_sack_info instead [ 277.584866][ T9167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.833178][ T5774] Bluetooth: hci4: command tx timeout [ 278.296249][ T9167] veth0_vlan: entered promiscuous mode [ 278.337571][ T9167] veth1_vlan: entered promiscuous mode [ 278.362865][ T9263] sctp: [Deprecated]: syz.0.1022 (pid 9263) Use of struct sctp_assoc_value in delayed_ack socket option. [ 278.362865][ T9263] Use struct sctp_sack_info instead [ 278.411195][ T9167] veth0_macvtap: entered promiscuous mode [ 278.428593][ T9167] veth1_macvtap: entered promiscuous mode [ 278.458968][ T9167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.480330][ T9167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.492170][ T9167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.515124][ T9167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.535033][ T9167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.548043][ T9167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.558868][ T9167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.569416][ T9167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.580744][ T9167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.593504][ T9167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.620766][ T9167] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.636899][ T9167] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.651416][ T9167] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.665463][ T9167] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.831998][ T6876] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.854141][ T6876] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.927676][ T6876] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.942859][ T6876] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.470056][ T9289] sctp: [Deprecated]: syz.4.1032 (pid 9289) Use of struct sctp_assoc_value in delayed_ack socket option. [ 279.470056][ T9289] Use struct sctp_sack_info instead [ 279.913334][ T5774] Bluetooth: hci4: command tx timeout [ 280.283160][ T9325] sctp: [Deprecated]: syz.2.1049 (pid 9325) Use of struct sctp_assoc_value in delayed_ack socket option. [ 280.283160][ T9325] Use struct sctp_sack_info instead [ 280.996541][ T9351] sctp: [Deprecated]: syz.1.1062 (pid 9351) Use of struct sctp_assoc_value in delayed_ack socket option. [ 280.996541][ T9351] Use struct sctp_sack_info instead [ 281.349225][ T9362] netlink: 3819 bytes leftover after parsing attributes in process `syz.1.1066'. [ 281.641536][ T9374] sctp: [Deprecated]: syz.1.1071 (pid 9374) Use of struct sctp_assoc_value in delayed_ack socket option. [ 281.641536][ T9374] Use struct sctp_sack_info instead [ 282.409564][ T9389] netlink: 3819 bytes leftover after parsing attributes in process `syz.4.1077'. [ 282.807265][ T9399] sctp: [Deprecated]: syz.2.1080 (pid 9399) Use of struct sctp_assoc_value in delayed_ack socket option. [ 282.807265][ T9399] Use struct sctp_sack_info instead [ 283.562248][ T9418] netlink: 'syz.0.1088': attribute type 29 has an invalid length. [ 284.800158][ T9418] netlink: 'syz.0.1088': attribute type 29 has an invalid length. [ 284.952427][ T9427] netlink: 3819 bytes leftover after parsing attributes in process `syz.0.1089'. [ 284.992693][ T9429] sctp: [Deprecated]: syz.2.1091 (pid 9429) Use of struct sctp_assoc_value in delayed_ack socket option. [ 284.992693][ T9429] Use struct sctp_sack_info instead [ 285.652194][ T9453] sctp: [Deprecated]: syz.4.1103 (pid 9453) Use of struct sctp_assoc_value in delayed_ack socket option. [ 285.652194][ T9453] Use struct sctp_sack_info instead [ 286.251668][ T9475] sctp: [Deprecated]: syz.4.1113 (pid 9475) Use of struct sctp_assoc_value in delayed_ack socket option. [ 286.251668][ T9475] Use struct sctp_sack_info instead [ 286.360778][ T9481] netlink: 539 bytes leftover after parsing attributes in process `syz.0.1112'. [ 286.479377][ T9487] netlink: 'syz.2.1117': attribute type 29 has an invalid length. [ 286.495890][ T9487] netlink: 'syz.2.1117': attribute type 29 has an invalid length. [ 286.514648][ T9487] netlink: 'syz.2.1117': attribute type 29 has an invalid length. [ 286.527401][ T9487] netlink: 'syz.2.1117': attribute type 29 has an invalid length. [ 286.851147][ T9501] sctp: [Deprecated]: syz.2.1124 (pid 9501) Use of struct sctp_assoc_value in delayed_ack socket option. [ 286.851147][ T9501] Use struct sctp_sack_info instead [ 287.617353][ T9522] sctp: [Deprecated]: syz.0.1134 (pid 9522) Use of struct sctp_assoc_value in delayed_ack socket option. [ 287.617353][ T9522] Use struct sctp_sack_info instead [ 289.478927][ T9549] sctp: [Deprecated]: syz.1.1143 (pid 9549) Use of struct sctp_assoc_value in delayed_ack socket option. [ 289.478927][ T9549] Use struct sctp_sack_info instead [ 289.592527][ T6876] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.731525][ T6876] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.937265][ T9564] netlink: 'syz.4.1153': attribute type 10 has an invalid length. [ 289.945670][ T9564] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1153'. [ 289.958870][ T9564] dummy0: entered promiscuous mode [ 289.964974][ T9564] dummy0: entered allmulticast mode [ 289.972820][ T9564] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 290.038529][ T6876] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.126928][ T6876] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.189274][ T9572] netlink: 'syz.4.1156': attribute type 2 has an invalid length. [ 290.203338][ T9572] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.1156'. [ 290.826107][ T9597] netlink: 4091 bytes leftover after parsing attributes in process `syz.4.1166'. [ 290.926617][ T9599] sctp: [Deprecated]: syz.2.1167 (pid 9599) Use of struct sctp_assoc_value in delayed_ack socket option. [ 290.926617][ T9599] Use struct sctp_sack_info instead [ 291.551690][ T9633] netlink: 4091 bytes leftover after parsing attributes in process `syz.2.1178'. [ 291.700265][ T9635] sctp: [Deprecated]: syz.0.1179 (pid 9635) Use of struct sctp_assoc_value in delayed_ack socket option. [ 291.700265][ T9635] Use struct sctp_sack_info instead [ 292.202655][ T9660] netlink: 4091 bytes leftover after parsing attributes in process `syz.4.1189'. [ 292.613672][ T9670] sctp: [Deprecated]: syz.4.1192 (pid 9670) Use of struct sctp_assoc_value in delayed_ack socket option. [ 292.613672][ T9670] Use struct sctp_sack_info instead [ 292.988394][ T9688] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1198'. [ 293.075359][ T9692] netlink: 4091 bytes leftover after parsing attributes in process `syz.4.1200'. [ 293.233841][ T6876] [ 293.236212][ T6876] ====================================================== [ 293.243233][ T6876] WARNING: possible circular locking dependency detected [ 293.250270][ T6876] syzkaller #0 Not tainted [ 293.254683][ T6876] ------------------------------------------------------ [ 293.256429][ T9704] sctp: [Deprecated]: syz.4.1204 (pid 9704) Use of struct sctp_assoc_value in delayed_ack socket option. [ 293.256429][ T9704] Use struct sctp_sack_info instead [ 293.261683][ T6876] kworker/u4:29/6876 is trying to acquire lock: [ 293.261693][ T6876] ffff88807c394d80 (team->team_lock_key#3){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0 [ 293.293741][ T6876] [ 293.293741][ T6876] but task is already holding lock: [ 293.301110][ T6876] ffff8880251f0768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690 [ 293.311486][ T6876] [ 293.311486][ T6876] which lock already depends on the new lock. [ 293.311486][ T6876] [ 293.321885][ T6876] [ 293.321885][ T6876] the existing dependency chain (in reverse order) is: [ 293.330889][ T6876] [ 293.330889][ T6876] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 293.338612][ T6876] __mutex_lock+0x136/0xcc0 [ 293.343632][ T6876] ieee80211_open+0x144/0x200 [ 293.348828][ T6876] __dev_open+0x2cb/0x430 [ 293.353674][ T6876] dev_open+0xab/0x190 [ 293.358254][ T6876] team_add_slave+0x75f/0x29a0 [ 293.363530][ T6876] do_setlink+0xdfe/0x4130 [ 293.368460][ T6876] rtnl_newlink+0x17da/0x20a0 [ 293.373645][ T6876] rtnetlink_rcv_msg+0x869/0xfa0 [ 293.379091][ T6876] netlink_rcv_skb+0x241/0x4d0 [ 293.384364][ T6876] netlink_unicast+0x751/0x8d0 [ 293.389637][ T6876] netlink_sendmsg+0x8d0/0xbf0 [ 293.394910][ T6876] ____sys_sendmsg+0x5ba/0x960 [ 293.400185][ T6876] ___sys_sendmsg+0x2a6/0x360 [ 293.405371][ T6876] __se_sys_sendmsg+0x1c2/0x2b0 [ 293.410733][ T6876] do_syscall_64+0x55/0xb0 [ 293.415664][ T6876] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 293.422070][ T6876] [ 293.422070][ T6876] -> #0 (team->team_lock_key#3){+.+.}-{3:3}: [ 293.430234][ T6876] __lock_acquire+0x2df1/0x7d40 [ 293.435593][ T6876] lock_acquire+0x19e/0x420 [ 293.440606][ T6876] __mutex_lock+0x136/0xcc0 [ 293.445617][ T6876] team_del_slave+0x32/0x1c0 [ 293.450717][ T6876] team_device_event+0x28d/0xa20 [ 293.456169][ T6876] notifier_call_chain+0x197/0x380 [ 293.461792][ T6876] unregister_netdevice_many_notify+0x100d/0x1900 [ 293.468719][ T6876] unregister_netdevice_queue+0x32c/0x370 [ 293.474952][ T6876] _cfg80211_unregister_wdev+0x16b/0x580 [ 293.481101][ T6876] ieee80211_remove_interfaces+0x49e/0x690 [ 293.487421][ T6876] ieee80211_unregister_hw+0x5d/0x2a0 [ 293.493303][ T6876] mac80211_hwsim_del_radio+0x289/0x480 [ 293.499362][ T6876] hwsim_exit_net+0x58d/0x650 [ 293.504556][ T6876] cleanup_net+0x70a/0xbb0 [ 293.509482][ T6876] process_scheduled_works+0xa5d/0x15d0 [ 293.515542][ T6876] worker_thread+0xa55/0xfc0 [ 293.520646][ T6876] kthread+0x2fa/0x390 [ 293.525220][ T6876] ret_from_fork+0x48/0x80 [ 293.530173][ T6876] ret_from_fork_asm+0x11/0x20 [ 293.535449][ T6876] [ 293.535449][ T6876] other info that might help us debug this: [ 293.535449][ T6876] [ 293.545660][ T6876] Possible unsafe locking scenario: [ 293.545660][ T6876] [ 293.553096][ T6876] CPU0 CPU1 [ 293.558451][ T6876] ---- ---- [ 293.563801][ T6876] lock(&rdev->wiphy.mtx); [ 293.568295][ T6876] lock(team->team_lock_key#3); [ 293.575742][ T6876] lock(&rdev->wiphy.mtx); [ 293.582751][ T6876] lock(team->team_lock_key#3); [ 293.587687][ T6876] [ 293.587687][ T6876] *** DEADLOCK *** [ 293.587687][ T6876] [ 293.595815][ T6876] 5 locks held by kworker/u4:29/6876: [ 293.601171][ T6876] #0: ffff88801a254938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 293.612042][ T6876] #1: ffffc90003a47d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 293.622565][ T6876] #2: ffffffff8e3b9990 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0 [ 293.631951][ T6876] #3: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 293.641771][ T6876] #4: ffff8880251f0768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690 [ 293.652552][ T6876] [ 293.652552][ T6876] stack backtrace: [ 293.658442][ T6876] CPU: 1 PID: 6876 Comm: kworker/u4:29 Not tainted syzkaller #0 [ 293.666059][ T6876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 293.676103][ T6876] Workqueue: netns cleanup_net [ 293.680875][ T6876] Call Trace: [ 293.684148][ T6876] [ 293.687067][ T6876] dump_stack_lvl+0x18c/0x250 [ 293.691737][ T6876] ? load_image+0x420/0x420 [ 293.696234][ T6876] ? show_regs_print_info+0x20/0x20 [ 293.701428][ T6876] ? print_circular_bug+0x12b/0x1a0 [ 293.706621][ T6876] check_noncircular+0x2fc/0x400 [ 293.711556][ T6876] ? print_deadlock_bug+0x5d0/0x5d0 [ 293.716743][ T6876] ? lockdep_lock+0xf5/0x230 [ 293.721321][ T6876] ? __lock_acquire+0x1273/0x7d40 [ 293.726334][ T6876] ? _find_first_zero_bit+0xd3/0x100 [ 293.731609][ T6876] __lock_acquire+0x2df1/0x7d40 [ 293.736459][ T6876] ? verify_lock_unused+0x140/0x140 [ 293.741648][ T6876] ? verify_lock_unused+0x140/0x140 [ 293.746839][ T6876] lock_acquire+0x19e/0x420 [ 293.751334][ T6876] ? team_del_slave+0x32/0x1c0 [ 293.756091][ T6876] ? __might_sleep+0xe0/0xe0 [ 293.760672][ T6876] ? read_lock_is_recursive+0x20/0x20 [ 293.766040][ T6876] __mutex_lock+0x136/0xcc0 [ 293.770539][ T6876] ? team_del_slave+0x32/0x1c0 [ 293.775293][ T6876] ? __lock_acquire+0x7d40/0x7d40 [ 293.780303][ T6876] ? rcu_is_watching+0x15/0xb0 [ 293.785063][ T6876] ? trace_contention_end+0x39/0xe0 [ 293.790250][ T6876] ? __mutex_lock+0x315/0xcc0 [ 293.794916][ T6876] ? team_del_slave+0x32/0x1c0 [ 293.799669][ T6876] ? mutex_lock_nested+0x20/0x20 [ 293.804595][ T6876] ? bond_netdev_event+0xeb/0xf20 [ 293.809606][ T6876] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 293.815232][ T6876] team_del_slave+0x32/0x1c0 [ 293.819816][ T6876] team_device_event+0x28d/0xa20 [ 293.824745][ T6876] notifier_call_chain+0x197/0x380 [ 293.829853][ T6876] unregister_netdevice_many_notify+0x100d/0x1900 [ 293.836261][ T6876] ? lock_chain_count+0x20/0x20 [ 293.841105][ T6876] ? unregister_netdevice_many+0x20/0x20 [ 293.846731][ T6876] ? kernfs_remove_by_name_ns+0x117/0x150 [ 293.852445][ T6876] ? __lock_acquire+0x7d40/0x7d40 [ 293.857463][ T6876] unregister_netdevice_queue+0x32c/0x370 [ 293.863178][ T6876] ? list_netdevice+0x730/0x730 [ 293.868021][ T6876] ? kernfs_remove_by_name_ns+0x117/0x150 [ 293.873733][ T6876] _cfg80211_unregister_wdev+0x16b/0x580 [ 293.879363][ T6876] ieee80211_remove_interfaces+0x49e/0x690 [ 293.885166][ T6876] ? ieee80211_do_stop+0x1e20/0x1e20 [ 293.890475][ T6876] ? rcu_is_watching+0x15/0xb0 [ 293.895355][ T6876] ieee80211_unregister_hw+0x5d/0x2a0 [ 293.900735][ T6876] mac80211_hwsim_del_radio+0x289/0x480 [ 293.906298][ T6876] ? rhashtable_remove_fast+0xc00/0xc00 [ 293.911865][ T6876] hwsim_exit_net+0x58d/0x650 [ 293.916551][ T6876] ? hwsim_init_net+0x90/0x90 [ 293.921240][ T6876] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 293.927065][ T6876] cleanup_net+0x70a/0xbb0 [ 293.931482][ T6876] ? ops_free_list+0x3b0/0x3b0 [ 293.936254][ T6876] ? _raw_spin_unlock_irq+0x23/0x50 [ 293.941468][ T6876] ? process_scheduled_works+0x96f/0x15d0 [ 293.947195][ T6876] ? process_scheduled_works+0x96f/0x15d0 [ 293.952914][ T6876] process_scheduled_works+0xa5d/0x15d0 [ 293.958474][ T6876] ? worker_attach_to_pool+0x380/0x380 [ 293.963934][ T6876] ? assign_work+0x3d2/0x5d0 [ 293.968526][ T6876] worker_thread+0xa55/0xfc0 [ 293.973125][ T6876] kthread+0x2fa/0x390 [ 293.977187][ T6876] ? pr_cont_work+0x560/0x560 [ 293.981856][ T6876] ? kthread_blkcg+0xd0/0xd0 [ 293.986437][ T6876] ret_from_fork+0x48/0x80 [ 293.990845][ T6876] ? kthread_blkcg+0xd0/0xd0 [ 293.995422][ T6876] ret_from_fork_asm+0x11/0x20 [ 294.000182][ T6876] [ 294.020681][ T6876] mac80211_hwsim hwsim7 wlan1 (unregistering): left promiscuous mode [ 294.028866][ T6876] mac80211_hwsim hwsim7 wlan1 (unregistering): left allmulticast mode [ 294.084866][ T6876] team0: Port device wlan1 removed [ 294.229631][ T6876] hsr_slave_0: left promiscuous mode [ 294.242351][ T6876] hsr_slave_1: left promiscuous mode [ 294.251936][ T6876] bridge0: port 3(team0) entered disabled state [ 294.259782][ T6876] bridge_slave_1: left allmulticast mode [ 294.266432][ T6876] bridge_slave_1: left promiscuous mode [ 294.272720][ T6876] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.281270][ T6876] bridge_slave_0: left promiscuous mode [ 294.287978][ T6876] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.299970][ T6876] veth1_macvtap: left promiscuous mode [ 294.306443][ T6876] veth0_macvtap: left promiscuous mode [ 294.312102][ T6876] veth1_vlan: left allmulticast mode [ 294.318714][ T6876] veth1_vlan: left promiscuous mode [ 294.326164][ T6876] veth0_vlan: left promiscuous mode [ 294.470168][ T6876] macvlan0 (unregistering): left promiscuous mode [ 294.476946][ T6876] macvlan0 (unregistering): left allmulticast mode [ 294.484408][ T6876] team0 (unregistering): Port device macvlan0 removed [ 294.570982][ T6876] team_slave_1 (unregistering): left promiscuous mode [ 294.578001][ T6876] team_slave_1 (unregistering): left allmulticast mode [ 294.590703][ T6876] team0 (unregistering): Port device team_slave_1 removed [ 294.613225][ T6876] team_slave_0 (unregistering): left promiscuous mode [ 294.620000][ T6876] team_slave_0 (unregistering): left allmulticast mode [ 294.627467][ T6876] team0 (unregistering): Port device team_slave_0 removed [ 294.651277][ T6876] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 294.678032][ T6876] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 294.757542][ T6876] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 294.766035][ T6876] bond0 (unregistering): Released all slaves