last executing test programs: 1.528031482s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='ext4_allocate_inode\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0) 1.389458583s ago: executing program 4: socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c00000000000000000000000700000044180511"], 0x30}, 0x0) 1.34460173s ago: executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={0x0}, 0x10) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000e000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000026c0)={&(0x7f0000002640)='track_foreign_dirty\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f00000000c0), 0x12) 1.297956118s ago: executing program 4: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x4b}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000009002700000071106b000000000095000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0xb9, &(0x7f0000000200)=""/185, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x0, 0x0, 0xb4}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x8}, 0x8) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006110bd000000000095005b890b0e0000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x98, &(0x7f00000002c0)=""/152}, 0x90) recvmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}, {0x0}, {&(0x7f0000001140)=""/4055, 0xfd7}, {&(0x7f00000006c0)=""/235, 0xeb}, {0x0}, {&(0x7f0000000500)=""/211, 0xd3}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000000c0)=""/42, 0x2a}, {&(0x7f0000000d40)=""/226, 0xe2}, {&(0x7f0000000400)=""/23, 0x17}, {0x0}, {&(0x7f0000000940)=""/183, 0xb7}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f00000008c0)=""/42, 0x2a}, {&(0x7f0000000140)=""/59, 0x3b}, {0x0}, {&(0x7f0000003140)=""/4089, 0xff9}, {&(0x7f0000000f00)=""/202, 0xca}], 0x12}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000002000000006ee03d860008001200180100002020702500000000002020207b1a82ff00000000bfa100080000000000b70300000000318e0000850000009b090000000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) recvmsg$kcm(r4, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r4, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r4, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0xffffffff, [{0x0, 0x3}]}, @ptr]}}, 0x0, 0x3e}, 0x20) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x32600) 1.249154275s ago: executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1860b5ae66a15f947e4595c290d3fd08002000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085100000030000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x1a) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r3, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x0, 0x85, &(0x7f0000000540)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x48, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb7907081175f37538e486dd6372ce22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f008"], 0xfdef) write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[], 0xffbf) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x43400) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYRES8=r0, @ANYRES64=r1, @ANYRESOCT], 0x34100) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000000)=0x6, 0x12) perf_event_open(&(0x7f0000000680)={0x8, 0x80, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa15, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000809500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000280)={'wg2\x00', @random="bc06235ec6a6"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 1.143457302s ago: executing program 2: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000)="9fd775529e5ef72ad91df7ae1b4094479a5f43da48ec55df339c1b3423a783519701a46e826ca057", 0x28}], 0x1}, 0x20000810) 1.057069775s ago: executing program 2: r0 = socket$kcm(0x2, 0x200000000000003, 0x106) sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x7, 0x3, 0x0, [0x0, 0x0]}]}}}], 0x20}, 0x0) 1.016944922s ago: executing program 2: perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x10085, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x100000000}, 0x0, 0xca, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000680)=ANY=[@ANYRES8=r1, @ANYBLOB=';'], 0x12) 927.165675ms ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00', 0x4000}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89fb, &(0x7f0000000080)) 899.12237ms ago: executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xe, 0x4, &(0x7f0000000300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x31}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) 772.53463ms ago: executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xa00, &(0x7f00000001c0)=[{&(0x7f0000000300)="d8000000190081054e81f782db4cb904021d0800fe007c05e8fe55a10a001200020014260c600e12100015007f370401a8001000200002400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) 768.78815ms ago: executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ext4_es_lookup_extent_exit\x00'}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000000)="b9ff060000000000000014f00800", 0x0, 0x700, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xe, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r0, r1}, 0xc) 754.743892ms ago: executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x8, &(0x7f0000000400)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x67) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000480)={&(0x7f0000000100)=@in={0x2, 0x4e23, @broadcast}, 0x80, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x220}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000200), 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0x6}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000042a8000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='ext4_ext_remove_space_done\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='ext4_mark_inode_dirty\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4030582a, &(0x7f0000000040)) 707.11013ms ago: executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) write$cgroup_subtree(r3, 0x0, 0x8a80) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000540)='ext4_ext_convert_to_initialized_enter\x00', r4}, 0x10) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) ioctl$TUNSETOFFLOAD(r6, 0x541b, 0x2000ff00) 658.924037ms ago: executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000310081094e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a80016000400014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 587.651708ms ago: executing program 4: r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x18, 0x0, 0x0) 570.061021ms ago: executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000200e8fe55a1180015000600142603600e120900210000000401a8001600a400014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}, {&(0x7f00000001c0)}], 0x2}, 0x0) 513.84853ms ago: executing program 2: socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x400000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000013c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d649379071c33390e418ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea508000000a0c548552b571bed5647323c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ecec37e83efceefd7ca2533659edc8bef9cb85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e5a61561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a0600adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cd50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5631820420b75b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d9c8c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b969590631e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282b6caa2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae0533496b6d58da50ee80a6b9a7438978c5465113f668eb4484350048289d07dbef325d3221a7cb35f812f257941a9781e3214c2a3dcf89d99844b762a9cf17548c54fccad2c7ae8072b82e0880815daf966bd5343c1635e123f868a7167cfcff33320253af570f4ef9c0254afdd89ac3943562b530dd88da8a94013bbaf204bebc38055adc39f07f7c22711f4d1f6dcc928d1578a093c072e0b92babc76f47ee367e745a024a2278319d9a4d1378482b74c516647652bfb6e93002494a5cd74e2a9a4734487062437da23e1efa6ef7674108aaa3ffac859c3577c2637bb3bdc69bc365b1f20dba96b8acca62f3f80045318de0facf2ed44b814e842c2a520159bb6c320cec0910c0b8bd3d547bdfba2e0bb24d117ed0388afd37affbad2f9c77c9c1314a16ffe64f5e3744a2fffd7039670f5706e589a4c3868ffd08cd0e05023f4d8f95712207450e39a7550f42419bf30b31cac3fa1404e449c1cee0fff0d86a98dc9bf38a1e0b4fa5225da"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xf, 0x3, 0x2) socket$kcm(0x10, 0x2, 0x4) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004081) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000000c0)=r1, 0x4) sendmsg$kcm(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001400)='K', 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000000380)="be", 0x1}], 0x1}, 0x241) 484.535085ms ago: executing program 1: perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x10085, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x100000000}, 0x0, 0xca, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000680)=ANY=[@ANYRES8=r1, @ANYBLOB=';'], 0x12) 462.665548ms ago: executing program 4: ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x3}, {}, {}, {0x1, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x3}]}) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67bb}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000700)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f00000004c0)='\x02;\xdf\b\x00\x00\x9c\x00\x00\x00\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0x5d7d) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$kcm(0x2, 0x3, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x100, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x0, 0x7, 0x0, 0x1}, 0x48) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8b18, 0x0) recvmsg$kcm(r4, &(0x7f0000000400)={&(0x7f0000000200)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000280)=""/30, 0x1e}, {&(0x7f0000002500)=""/4096, 0x1000}, {&(0x7f00000008c0)=""/246, 0xf6}], 0x3, &(0x7f0000000300)=""/183, 0xb7}, 0x42) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000)) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000001340)=ANY=[@ANYBLOB="b40000000200000066000000000000bd0a0bff000000000095000000000000004bb5eea0a6ec9fcd4b0a008a8443f22702000000e63bde9e4a0587536a966992ae7011d6e6c03175717e9912e0dd1a59541f7cbb1548ee5bd627f5b0a8ec77bd6d5f7b543f9aafaabe53339b12fbbe7decc4aa61b8aad0359083bdd61543fbeee8d560bb4b5925fae801f4c91e31674b124a1b38000000bc4da4a9b3d5cc9e0000f6a7a729009973ff07000000000000ac79e5d84abbec7d96629490727375b853f6308a980fba61fbe0131f3c7a026d8f000008000000000000000b20d7ac2d5cd79add04b2f89d7989bf53bec908213d396edf24e9fc3cc004a1097fddc6bcee28ec2d3616689ab3f31f302003c0467844e000000000db0700bd694a09b253a1c6c7c138b3ec6ee9b83edcc55d3403acd5c50e27401aa306a7ab7069790da79b7ab45184caffff00009bab0609000000148d44c7e2e4d219cdd7ebeb51511d9df85a648b1b85f93cb6cd21f93d5ea3da2b31657c065d052d9b9ee00320def97ebac25b929b3c15e33be6e7d54e622b81d2f18d772fb5c58a936620ba1f5fbb48703ab211f442697edc165b449db2e3c221fbf270a6db414516949b97c200000096a1cbe81a38a23f03bd741a3e60c2e294f828e06f1b2cb70328f151f949e369efed52a28b87aae9d7d2800c8efe7f93c055ed4665dc0dc54df4fd4b2902b2f85adc9086d3f143a7b87d06838c6525cafdc01820a8912a131ff1f6acb9439f2d95a7461c84b0d9d033edc9da00c8a2b42e8adfeff69fce7a35f79748e3e5b235269310988a05bf7c4e4cef3d1aa550c83d6328eb0000008a7098bc3d014afe638a40948498faa261213bc20845526e05d6fd3ba5ca8f357df67c41a1748edacb31d38994544c3511ea1e8a448e66039425cfb03efb5d5eb81a306746adb8809ef969187763c00085e2dc146084f1570f087ceb400c265df2a6c93e3340762c9882626499a8a29c564464f2a7aee6a929f831c93d23005787d272b5eaf0c6e11a7f0f1f39f68df44f6bf2ebe448cbe850efd24bf7b96ad33abbd3a8b5814b5e0080d1a47ee604ccef20bda53c9ce06910568fc200eee12fc6ef2734a6e9af5132f0c507e277fd97f9b48c840697289d38e454467f4d2f94b2f76d06edd083dafefd76deb251b5818de9c27d0df6e7b8862fe42f6c453f551f35b6d76395a1d205f276ae628fbdb8081905a1d7c2805532d3387b88f2997e8ce41c5dca83659cfb7f3a1c7b2bec8a7575dc4241dde6c680ee9a27b197739f4ad86f3bad3e42d4954bef864586ad02c27858d63efc495bcfb6e30f30fedf536d63769a196fc3b472195d0a1a13ecf803136d751cefb0edb5794cab8681214b39f86d88f3aebea4d465ef05f975b09f264d6c8d8e3bb6ea7d21c6602bcc8f76f2546cccc074f55c22aa8b502968040000000000000047c8a50036dd268a1aeff951f5090492b5e941feb1d3785aafe1655876e5a36c40fb5afcfd1eb28952664982097836a4d1aa3de0c06bb7dc27cf1a546b6aa6ce9932f3c6a013bc3791da4d8a33680ba8f1334d75a43e991ebd4582d786ec05cdd3152d52ab15fc7595cbd339f730d2ec8e37e6c500c4c30280a6af9d6f62a22d9c5c275e7798c165545abfcd304243274db15924a136a0896d56576ed5de90b1bda90f4024b9a0b3b33f688db8e38f784ae3942aba874f95d10c47e2405ceb0438cc272133fac718a6553710e4ca97df646b21d03652c54eade2e99344e11a2671cf274d397650fba8fcfb7e51a926e37b3980a1732111175dd99b9d979042b3ea411a7b4f9081ae9b82974d5eb6fd4e4bcd9ce4f897dfba4e44777e6d02a896b650a66d9139696b9c6c36a33eb3adc092bf4586bfab34002f802bbfe6a7679c2020cc25e01f129bbe92a65961fa4438fa3d8feda2ac927743d2bce57ee39b671948576337535180aa754e035421cf1709bc1b5e46c35515fb1fcda637a6405e9b216d2ca09795c5d2f27665da5b17bcf0f387e6dd58202a3a1148e46e55ac7ea027eb3022eee4a000ca543ab566921e5db4f741a762ea705f942855a9fa30b912045f78ab1e3fdeada84bc8ac36dbd033e7eac7c621babbc3263098c9c47a1f505a8299b5715a455e834ddddc430f387cafa07bf915522f9a42e34eea5169b796320e892d27924045bcf56135684ca96ada82749371d5766c0d0cae8772f140eef001ca39dc28743f77b8724487a9b37ca66d20aef8a5236393fc20000000cbd3265c209761ed41a2e473fbd84ca9b67e3ceb58a4ce776bb774ee127628faba8702c0a73f8311d269429aaadf74c439404fc9f864e69807dfe2bae2bd4c498a10d4e17dddb1f7539bfeb392e22e7b93d0ecf66cd253a4062bbc8a4307f0e4360651dc7f8924ee7a89ab73dd7c11be13707482c369f02d7b6f242599f95dbfcb55bea158665231f8fe04ed87fb407fed1a8702e2486386f2ae6347231128be789186ff5651208c8b781f85d3fb51bd28b939a8bc88a471c36fa17fd04c3fbdbd3f7bf144b1466014a77c582aa0380e612cd101d557dd1e5b7bae3da3ea2659f66a3641eaa3b008b978e0a5f69671f52401892dba8a63c8f7eb280880dbdcee5d8e00d28cbe0de24c0c5a6b30f4642c4fe69db3b7432f2eb7ca282fbfe010ad6c33a73feef1cd517cedc2c0059e5636ae0fb3969ce7f64c6f4cffcc40ac1331f6b50d4f95c490edd75e8cdba278a602c8a200000000000000000000000091b39eb79b22cc47dde3760f3bd7377b35f4d41a46959070cddc4a9c340455f97ff0ea8c6adbff47a39269b2e90dffa1ec22d41f9da01ec44847a88334e106ff455f9ca2a0b2900591ceac1f0e823eaa22eba34d984dd6ca40444fe6a73317e9b60641d8c053deb3a065af44da9744f52c8a123acdc38a3d255ed68347b9f4e34663ed4c6db22deb72785210a546e42914dc6523e08797dc5746254aa5717bec4ac8144b2dd8531c4f3a7c53ce330a64b538e6f2cd92cbf9d86c207ab4f2a8d94c3d936541b1ac7d0d38440672567418064b1589e98ca17b21ed3a67ee69319756a3e35558f1d6083b570e6c3387036b8583e870334b4e393a5f7ce700000000000000000000000000000000cd089c885fa751c4f5a2ac51e099ad9607ef88c88ffdf9527405f5a4505147c773a30d8befd55ed7e53767984689be829581a224c2049dd6e71674b8cadec9785238e1bead1fdfbb47a4e9f0290dd275f5f40dcf82ea3e9a222b77b16cb1bd04d43b606fda6fa038262456bb0d2591810035423d965fe0e47caf3a288ec3ad0bbf1f00000000000000f45529963500000000b325436b4fc9a639d8af520e07431bf54ceff6d4667510f1570bb2283475a3569055f9144d69df84b378618d717570015a62146bd00a63a0c6b7a9df8cb36e98fcdf265cdb4e302999f548efc7206b30b747bc898e9df20ead67f46be64c1f5389315242b40e2e3cf055c791bbf66be50c0000000000000000703ed0464fbcba7dd1cca2dbbc1685d83adec9c080a01cac20fdf778cc26a009bb905a2e3300e85a44bace56636c46e3f7d71596e4a8b3aa8ea9813100a72b21691a11da10000000000044ef7b8639d3c1fbcc35036bc3da128aaed44acf5241894bf241496d03c27447083fa86bcffec564c23a25192c4e5d34504c2185ac020617c721ad969a6910d8107ca50afd077fbc7a08fd"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x21e, 0x10, &(0x7f00000002c0), 0x83419149c3b785d0}, 0x48) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x10, &(0x7f00000000c0)={@cgroup=r6, r5, 0x0, 0x0, r5}, 0x20) socket$kcm(0x29, 0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000007c0)=@o_path={&(0x7f0000000780)='./file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001300)={r7, 0xe0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz0\x00', 0x1ff) sendmsg$inet(r2, &(0x7f0000000440)={&(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x6c, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000400), 0x0, 0xd1ab}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000740)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000e80)={&(0x7f0000000480)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000d80)=[{&(0x7f0000000500)="26437f6c50394a0ad83e0b85067ffe55aebf", 0x12}, {&(0x7f0000000ac0)="ff63eeda760d5c78f74675cca185a6a6be693a2dcbb27430912706689b105c10471ada2a2d1a1ca6e6d024311a56024b14dc0f78c4e703d4872d0fcd42a330e26d47b24c251f4fd588f816970cd1523a35b41e85457261b5ded39a07f6d7548f8fac888b7bb60c576dfb5affa21c7efa071b10c26aface4ed9e74badaac2bef15d24093c84cda531151abe30c32c0b4741449f52c2e2e275e0b9c7a2fe9090dea4791ff4e16d2d7ef08b2eeceab7b74cd82399f1826e4965284c7f4190236aecb93d325d5a4bdd3ebee2", 0xca}, {&(0x7f0000000bc0)}, {&(0x7f0000000c80)="fe1629fb4c1c6771faf9816f799164ae931234649f93738d46009c0fd8f0bcbdabbf1cbfe7705edeef92e99f0906941781ce4738afdb1c907d6714fda7042689121fafcb06b14dd00f7a9e6bec5f25bf", 0x50}, {&(0x7f0000000d00)="9f3f05cf013f0390464720952f1a34e6b8221a8a1c817a5a63a628ec7782b01b5e0fc1292e733cbe21997755c386ea7c18fece7e036d8c02301aace7dca605d66a3447aef2eefca19da23526130cd154232944a0094ee60fec5a39c947f34add78abc6ce12e35e", 0x67}], 0x5, &(0x7f0000000e00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x24}}, @ip_tos_u8={{0x11}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0x48}, 0x4000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x3ff, 0x93, &(0x7f0000000580)=""/147, 0x0, 0x48, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000640)={0x0, 0x0, 0xfff}, 0x10, r8, 0x0, 0x0, &(0x7f00000006c0)=[0xffffffffffffffff], 0x0, 0x10, 0x3}, 0x90) bpf$ITER_CREATE(0x21, 0x0, 0x0) r9 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0xb, 0x0, 0x0, 0x1}, 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x890c, &(0x7f0000000000)) 408.849666ms ago: executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000004b00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 379.762911ms ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00', 0x4000}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89fb, &(0x7f0000000080)) 362.531983ms ago: executing program 3: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f00000002c0), &(0x7f00000003c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='ext4_free_inode\x00', r1}, 0x10) unlink(&(0x7f0000000140)='./cgroup\x00') 340.384207ms ago: executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0x16, 0x3, &(0x7f0000000080)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x92}}, &(0x7f0000000000)='GPL\x00'}, 0x90) 292.055644ms ago: executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0xffe6) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000003540)=""/4102, 0x1006}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020031000b02d25a806f8c6394f90a24fc600400040004000100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0x43451) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000180)={[{0x0, 'freezer'}]}, 0x9) write$cgroup_subtree(r5, &(0x7f0000000140)=ANY=[], 0xf) 279.541656ms ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='ext4_allocate_inode\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0) 253.257901ms ago: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) write$cgroup_subtree(r3, 0x0, 0x8a80) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000540)='ext4_ext_convert_to_initialized_enter\x00', r4}, 0x10) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) ioctl$TUNSETOFFLOAD(r6, 0x541b, 0x2000ff00) 163.760694ms ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r3}, 0x10) 146.045617ms ago: executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c03406910927c6b0b55b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfe79578e51bc53099e90f4580d760551b5b342f7cbdb9cd38bdb2209c676b2ac2deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f132020000002cbe7bc04b82d2789cb1b2b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c41146dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a42b359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780c70014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e506d1387b63112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece08ac772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2ef0ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a3f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099bdae7ed04935c2c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adeb988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ffa3c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe4a3ced846891180604b6dd2499d16d7d9158ffffff069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb0814040000007874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dbae3428d2129ecfce1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296c6a298c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f050000000000000026049fe86e09623524f390bf79b441b75fc790c58e273cd905deb28c13c1ed1c0d9cae846b03008cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc48f97496079654f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b4749c28eb5167e9936ed327fb237a56224e49d9ea956d1798571b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecf743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be182724d95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd0403a099f32468f1561f058960d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b656dc0e32384f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bbe3e8ef76f57a2d0e69115d33394e86e4b83c0f3c2a34635f3eee4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cd082027c641ec4355eb4acff90756d1a1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8cc3fe28bc3586844f5fecb92aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a5906002fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128ab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0afd9ae134400f70b5e6aefb7eee403502732df858a2ea033b6c91c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80ffb8f386bb79f5589829b6b0679b5d65a00000000000000e6ff00000000000000000000faff0000bab50bc8508a9644d3e7c328b0ff22035c8073f8c1f0e3da7339fc81d4ab3ef2857ef70a81d8a1628da28c942571880e22df7cabae56d5ff5e483c9c1f5a258b8f1f34cc300312f76a374a6e9b3f9dbd7f538a80b00f97e47895b3201c5126feca0888956a7d768198d9c2109ac508a47ebb99c539ef45af7d87b308117a9e321a3861bc42cf41942c31268a4020221d7b1622585094eddd83c7f4acdd7f5c23d8b730bf03118261edada8b8487a3b1b7548a4687a91f12bf70bb1df3bfe7d4b92ad6fcbf401efd6eb004cf20016ad8d1dad136dd856ffca238b39482811f9c8524bf182f1956a3d044423927df28880bbd11c06407220df8e1d1d483d947d990dc175803d765ca14a915a0040b641959ad3e776b4bb4852fea12983dc18b7404914a6137dc4a78f1e0d331c60a9019c21698cd18753491df962f496f2395563e9c3d7b1228d0e488cf7e50a29541aa757f2e2ee9ff4433d65db0de5a123d569e39dce481156cbec584c9a32a8e3b032fa003192c891d83119bc950abac9147b9fcb0acd9a207b5ceb7e8ed1d91c000000000000000000000000000000141258373281153fa27e586ea82650f070d8851ac9e7ac07b37a6479d4017b5b5af3ff4c91235df4f657d77e386a329aec4d766369c86b62b01ceb028c6fcf206883633cb143016b9f5351a45a8cb4ea110ba700000000000000883416b6eff6a793c71deb7d780c4f51d86ece127c0714144916f397d398ad2fe72b710b932c15c2369cb5d2d2f6ae420672c4a626195a891ac51825077fbc286aa3866bbf18a4a8b836ea8c90af0d5f0aff55b50bc18c27875ed2628b91224b7fa9fd10ccd7c1b1a92bac529df981a6d30100e68555553625c0e91a51000000000000000000fe030f85b294f3ea1fce314a9dcefbe3b64e83c35c5e95734786ca78315793cc0e6e776d2ec07c55cd89541ec25e074e840287011cab538d79e1569df321282071d49a4dc5fb2d7da1d05249d0e153fd04aca2", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x60000007, &(0x7f0000000100)="03ff03076844268cb89e14f00800fee0ffff00febabec44277fb86dd1402e000030c62079f4b4d2f87e5feca6aab055013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x5a0e}, 0x2c) 0s ago: executing program 0: r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x18, 0x0, 0x0) kernel console output (not intermixed with test programs): es leftover after parsing attributes in process `syz-executor.2'. [ 180.300940][ T27] audit: type=1804 audit(1718397437.065:2): pid=8589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1981173007/syzkaller.wJoEbK/440/memory.events" dev="sda1" ino=1960 res=1 errno=0 [ 180.380527][ T8585] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 180.393021][ T27] audit: type=1800 audit(1718397437.105:3): pid=8589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1960 res=0 errno=0 [ 180.416082][ T8593] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.0'. [ 180.965015][ T3582] Bluetooth: hci1: command 0x0406 tx timeout [ 180.971168][ T3582] Bluetooth: hci2: command 0x0406 tx timeout [ 180.979300][ T3583] Bluetooth: hci4: command 0x0406 tx timeout [ 180.986268][ T3583] Bluetooth: hci3: command 0x0406 tx timeout [ 180.995442][ T8627] tap0: tun_chr_ioctl cmd 10 [ 181.044859][ T8634] netlink: 181400 bytes leftover after parsing attributes in process `syz-executor.3'. [ 181.057295][ T8631] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 181.185601][ T8631] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 181.276572][ T8645] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. [ 181.433919][ T8656] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 181.617780][ T8668] tap0: tun_chr_ioctl cmd 10 [ 181.912460][ T8681] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. [ 181.984857][ T8689] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 182.764807][ T8725] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. [ 184.125835][ T8737] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 184.140265][ T8737] validate_nla: 12 callbacks suppressed [ 184.140282][ T8737] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 184.154960][ T8737] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.4'. [ 184.206938][ T27] audit: type=1804 audit(1718397440.985:4): pid=8741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2695662294/syzkaller.95N7gZ/461/memory.events" dev="sda1" ino=1955 res=1 errno=0 [ 184.318280][ T27] audit: type=1800 audit(1718397440.985:5): pid=8741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1955 res=0 errno=0 [ 187.519253][ T8777] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 187.534100][ T8777] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 187.545692][ T8777] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. [ 187.713615][ T8797] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 187.816042][ T8797] netlink: 128124 bytes leftover after parsing attributes in process `syz-executor.3'. [ 187.904745][ T8807] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 188.100497][ T8817] Zero length message leads to an empty skb [ 188.133159][ T8819] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 188.169960][ T8819] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 188.193065][ T8819] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.3'. [ 188.927561][ T8841] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 188.947644][ T8841] netlink: 128124 bytes leftover after parsing attributes in process `syz-executor.4'. [ 189.975130][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 190.897165][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 191.149290][ T8846] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 191.210753][ T8849] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 191.270693][ T8853] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 191.287062][ T8853] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 191.296306][ T8853] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.4'. [ 192.034542][ T8883] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 192.094689][ T8883] netlink: 128124 bytes leftover after parsing attributes in process `syz-executor.0'. [ 192.188380][ T8889] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 192.309480][ T8892] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 192.471769][ T8895] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.1'. [ 192.507989][ T8895] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 192.592842][ T8899] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 192.654027][ T8899] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 192.662241][ T8899] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.3'. [ 192.980925][ T8920] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 193.031524][ T8920] netlink: 128124 bytes leftover after parsing attributes in process `syz-executor.2'. [ 193.068502][ T8927] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 193.188874][ T8929] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 193.283445][ T8932] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.3'. [ 193.313210][ T8932] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 193.337970][ T8935] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 193.393891][ T8935] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 193.412535][ T8935] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.4'. [ 193.830253][ T8964] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 193.969959][ T3666] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 194.254151][ T1256] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.260485][ T1256] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.890790][ T3687] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 194.993197][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 195.209764][ T9003] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 195.916985][ T3666] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 196.335748][ T9056] __nla_validate_parse: 1 callbacks suppressed [ 196.335770][ T9056] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.3'. [ 197.000853][ T9090] device syzkaller0 entered promiscuous mode [ 197.028070][ T9092] syzkaller0: create flow: hash 1990683719 index 0 [ 197.168195][ T9089] syzkaller0 (unregistered): delete flow: hash 1990683719 index 0 [ 197.568177][ T9122] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.2'. [ 198.469118][ T9170] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 198.494500][ T9170] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.0'. [ 198.508302][ T9170] device dummy0 entered promiscuous mode [ 198.527931][ T9170] bridge0: port 3(dummy0) entered blocking state [ 198.542864][ T9170] bridge0: port 3(dummy0) entered disabled state [ 198.561432][ T9170] bridge0: port 3(dummy0) entered blocking state [ 198.567987][ T9170] bridge0: port 3(dummy0) entered forwarding state [ 199.412777][ T9202] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 199.435686][ T9202] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. [ 199.459420][ T9202] device dummy0 entered promiscuous mode [ 199.487898][ T9202] bridge0: port 3(dummy0) entered blocking state [ 199.530083][ T9202] bridge0: port 3(dummy0) entered disabled state [ 199.551616][ T9202] bridge0: port 3(dummy0) entered blocking state [ 199.558167][ T9202] bridge0: port 3(dummy0) entered forwarding state [ 199.899682][ T9230] syzkaller0: create flow: hash 1990683719 index 0 [ 199.952418][ T9221] device syzkaller0 entered promiscuous mode [ 200.404112][ T9220] syzkaller0 (unregistered): delete flow: hash 1990683719 index 0 [ 200.794853][ T9246] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 200.822366][ T9246] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. [ 200.847033][ T9246] device dummy0 entered promiscuous mode [ 200.864464][ T9246] bridge0: port 3(dummy0) entered blocking state [ 200.871851][ T9246] bridge0: port 3(dummy0) entered disabled state [ 200.925337][ T9246] bridge0: port 3(dummy0) entered blocking state [ 200.931791][ T9246] bridge0: port 3(dummy0) entered forwarding state [ 201.276385][ T9269] syzkaller0: create flow: hash 1990683719 index 0 [ 201.324784][ T9266] device syzkaller0 entered promiscuous mode [ 201.444888][ T9275] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 201.521052][ T9275] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 201.534677][ T9274] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 201.624157][ T9263] syzkaller0 (unregistered): delete flow: hash 1990683719 index 0 [ 201.868881][ T9296] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 201.908936][ T9296] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.2'. [ 201.951032][ T9296] device dummy0 entered promiscuous mode [ 201.966728][ T9296] bridge0: port 3(dummy0) entered blocking state [ 201.978438][ T9296] bridge0: port 3(dummy0) entered disabled state [ 202.001939][ T9296] bridge0: port 3(dummy0) entered blocking state [ 202.008468][ T9296] bridge0: port 3(dummy0) entered forwarding state [ 202.046935][ T9310] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 202.070278][ T9310] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 202.105956][ T9307] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 202.447341][ T9321] device syzkaller0 entered promiscuous mode [ 202.489459][ T9326] syzkaller0: create flow: hash 1990683719 index 0 [ 202.734174][ T9320] syzkaller0 (unregistered): delete flow: hash 1990683719 index 0 [ 203.381367][ T9378] bond0: (slave bond_slave_0): Releasing backup interface [ 203.479856][ T9386] validate_nla: 4 callbacks suppressed [ 203.479873][ T9386] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 203.501427][ T9387] syzkaller0: create flow: hash 1990683719 index 0 [ 203.512138][ T9379] device syzkaller0 entered promiscuous mode [ 203.521573][ T9386] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 203.539847][ T9383] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 203.757549][ T9402] netlink: 61211 bytes leftover after parsing attributes in process `syz-executor.2'. [ 203.805483][ T9376] syzkaller0 (unregistered): delete flow: hash 1990683719 index 0 [ 204.021567][ T9419] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 204.047337][ T9419] bond0: (slave bond_slave_0): Releasing backup interface [ 204.276737][ T9435] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 204.295035][ T9435] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 204.321142][ T9430] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 205.640785][ T9513] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.3'. [ 206.290508][ T9535] device syzkaller0 entered promiscuous mode [ 206.323080][ T9547] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.1'. [ 206.966619][ T9580] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 207.073403][ T9580] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.093052][ T9580] bond0: (slave team0): Enslaving as an active interface with an up link [ 207.497702][ T9620] netlink: 67 bytes leftover after parsing attributes in process `syz-executor.0'. [ 207.541472][ T9620] IPv6: NLM_F_CREATE should be specified when creating new route [ 207.571945][ T9620] IPv6: Can't replace route, no match found [ 207.593948][ T9624] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.4'. [ 207.694996][ T9630] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 208.091616][ T9661] netlink: 67 bytes leftover after parsing attributes in process `syz-executor.3'. [ 208.102084][ T9661] IPv6: NLM_F_CREATE should be specified when creating new route [ 208.138336][ T9661] IPv6: Can't replace route, no match found [ 208.170727][ T9663] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.4'. [ 208.953165][ T9702] netlink: 67 bytes leftover after parsing attributes in process `syz-executor.1'. [ 209.006716][ T9702] IPv6: NLM_F_CREATE should be specified when creating new route [ 209.040589][ T9702] IPv6: Can't replace route, no match found [ 209.116924][ T9706] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 209.207757][ T9708] device syzkaller0 entered promiscuous mode [ 209.269433][ T9706] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 209.401274][ T9713] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 209.648955][ T9740] netlink: 67 bytes leftover after parsing attributes in process `syz-executor.4'. [ 209.678967][ T9740] IPv6: NLM_F_CREATE should be specified when creating new route [ 209.692421][ T9740] IPv6: Can't replace route, no match found [ 210.244731][ T9762] device syzkaller0 entered promiscuous mode [ 211.577364][ T9856] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 211.624131][ T9856] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 211.678472][ T9858] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 211.736989][ T9860] 7Ս֕: renamed from syzkaller0 [ 212.203535][ T9895] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 212.229143][ T9895] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 212.257536][ T9902] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 212.397527][ T9908] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 212.436261][ T9908] netlink: 164 bytes leftover after parsing attributes in process `syz-executor.4'. [ 212.651567][ T9920] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 212.690393][ T9920] device syzkaller0 entered promiscuous mode [ 212.992890][ T9944] netlink: 164 bytes leftover after parsing attributes in process `syz-executor.2'. [ 213.158403][ T9951] 7Ս֕: renamed from syzkaller0 [ 213.372490][ T9952] device syzkaller0 entered promiscuous mode [ 213.519536][ T9966] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 213.546376][ T9966] device syzkaller0 entered promiscuous mode [ 213.687386][ T9977] netlink: 164 bytes leftover after parsing attributes in process `syz-executor.4'. [ 213.899552][ T9990] 7Ս֕: renamed from syzkaller0 [ 214.190314][T10006] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 214.233959][T10006] device syzkaller0 entered promiscuous mode [ 214.549693][T10018] validate_nla: 2 callbacks suppressed [ 214.549710][T10018] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 214.581544][T10018] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.1'. [ 215.036389][T10033] device syzkaller0 entered promiscuous mode [ 215.677983][T10070] netlink: 16098 bytes leftover after parsing attributes in process `syz-executor.4'. [ 215.769150][T10076] device syzkaller0 entered promiscuous mode [ 216.205652][T10088] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 216.214010][T10088] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.1'. [ 216.849554][T10104] netlink: 16098 bytes leftover after parsing attributes in process `syz-executor.4'. [ 217.201102][T10118] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 217.280223][T10118] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.1'. [ 217.347800][T10122] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'. [ 217.579574][T10126] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 217.965762][T10138] netlink: 16098 bytes leftover after parsing attributes in process `syz-executor.3'. [ 218.277968][T10156] device syzkaller0 entered promiscuous mode [ 218.320559][T10159] netlink: 121244 bytes leftover after parsing attributes in process `syz-executor.0'. [ 218.392789][T10162] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.2'. [ 219.008696][T10185] netlink: 9286 bytes leftover after parsing attributes in process `syz-executor.0'. [ 219.271975][T10193] netlink: 121244 bytes leftover after parsing attributes in process `syz-executor.2'. [ 219.317248][T10197] netlink: 'syz-executor.3': attribute type 49 has an invalid length. [ 219.456654][T10207] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. [ 219.592853][T10216] netlink: 14556 bytes leftover after parsing attributes in process `syz-executor.2'. [ 219.656687][T10220] netlink: 9286 bytes leftover after parsing attributes in process `syz-executor.0'. [ 219.755289][T10224] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 219.932148][T10232] netlink: 9286 bytes leftover after parsing attributes in process `syz-executor.4'. [ 220.119552][T10233] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 220.131051][T10242] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.4'. [ 220.343171][T10249] netlink: 14556 bytes leftover after parsing attributes in process `syz-executor.3'. [ 220.739681][T10269] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 220.884308][T10279] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 220.890135][T10279] pim6reg0: linktype set to 769 [ 220.920385][T10281] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 220.958944][T10282] netlink: 'syz-executor.0': attribute type 49 has an invalid length. [ 221.451195][T10300] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 221.597312][T10308] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 221.625236][T10308] pim6reg0: linktype set to 769 [ 221.905123][ T1046] device hsr_slave_0 left promiscuous mode [ 221.924093][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 222.012266][ T1046] device hsr_slave_1 left promiscuous mode [ 222.028508][ T1046] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.050323][ T1046] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.097979][ T1046] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.148077][ T1046] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.161501][ T1046] device bridge_slave_1 left promiscuous mode [ 222.184630][ T1046] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.189618][T10339] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 222.205881][ T1046] device bridge_slave_0 left promiscuous mode [ 222.212140][ T1046] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.267349][ T1046] device veth1_macvtap left promiscuous mode [ 222.285505][ T1046] device veth0_macvtap left promiscuous mode [ 222.291608][ T1046] device veth1_vlan left promiscuous mode [ 222.297793][ T1046] device veth0_vlan left promiscuous mode [ 222.310938][T10344] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 222.323798][T10344] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 222.596665][ T1046] team0 (unregistering): Port device team_slave_1 removed [ 222.613598][ T1046] team0 (unregistering): Port device team_slave_0 removed [ 222.643030][ T1046] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.668831][ T1046] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.788052][ T1046] bond0 (unregistering): Released all slaves [ 222.843627][T10319] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 223.037154][T10353] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 223.050641][T10353] pim6reg0: linktype set to 769 [ 223.901847][T10403] __nla_validate_parse: 5 callbacks suppressed [ 223.901864][T10403] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.2'. [ 224.183066][T10420] netlink: 39 bytes leftover after parsing attributes in process `syz-executor.4'. [ 224.330956][T10428] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 224.345555][T10428] pim6reg0: linktype set to 769 [ 224.522127][T10438] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.1'. [ 225.249560][T10470] device sit0 entered promiscuous mode [ 225.381565][T10480] netlink: 134268 bytes leftover after parsing attributes in process `syz-executor.2'. [ 226.026814][ T31] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 226.941907][ T31] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 227.318514][T10575] device sit0 entered promiscuous mode [ 227.784688][T10614] validate_nla: 5 callbacks suppressed [ 227.784704][T10614] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 227.823956][T10614] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.0'. [ 228.129398][T10634] netlink: 'syz-executor.1': attribute type 30 has an invalid length. [ 228.257147][T10643] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 228.276891][T10643] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.1'. [ 228.903548][T10677] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 228.954620][T10677] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.1'. [ 229.685126][T10720] device wlan0 entered promiscuous mode [ 229.800307][T10721] device sit0 entered promiscuous mode [ 229.986179][T10742] IPv6: NLM_F_REPLACE set, but no existing node found! [ 230.005646][T10742] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 230.041466][T10742] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.2'. [ 230.155848][T10742] device hsr_slave_0 left promiscuous mode [ 230.385291][T10766] netlink: 'syz-executor.0': attribute type 30 has an invalid length. [ 230.488990][T10776] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 230.523393][T10776] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 230.588117][T10777] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 230.605234][T10776] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 230.625173][T10785] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 230.770463][T10790] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.0'. [ 230.791626][T10792] IPv6: NLM_F_REPLACE set, but no existing node found! [ 230.825466][T10792] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.4'. [ 230.967067][T10792] device hsr_slave_0 left promiscuous mode [ 231.048406][T10809] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. [ 231.082598][T10809] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. [ 231.128068][T10816] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. [ 231.169954][T10809] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. [ 231.198181][T10809] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. [ 231.476663][ T3582] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 231.556547][T10840] IPv6: NLM_F_REPLACE set, but no existing node found! [ 231.565229][T10837] device wlan0 entered promiscuous mode [ 231.675407][T10840] device hsr_slave_0 left promiscuous mode [ 231.809217][T10857] IPv6: NLM_F_CREATE should be specified when creating new route [ 231.818131][T10857] IPv6: Can't replace route, no match found [ 232.001964][ T3582] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 232.289536][T10891] IPv6: NLM_F_CREATE should be specified when creating new route [ 232.340344][T10891] IPv6: Can't replace route, no match found [ 232.598742][T10911] device veth0 entered promiscuous mode [ 232.815405][T10927] validate_nla: 22 callbacks suppressed [ 232.815424][T10927] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 232.853258][T10927] IPv6: Can't replace route, no match found [ 232.896530][T10929] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 232.918578][T10929] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 233.072621][T10941] netlink: 'syz-executor.2': attribute type 16 has an invalid length. [ 233.203653][T10951] IPv6: NLM_F_REPLACE set, but no existing node found! [ 233.230531][T10951] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 233.348079][T10951] device hsr_slave_0 left promiscuous mode [ 233.583196][T10967] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 233.632408][T10967] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 234.075302][T10983] device syzkaller0 entered promiscuous mode [ 235.376290][T11036] device syzkaller0 entered promiscuous mode [ 236.311312][T11080] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 236.319704][T11080] __nla_validate_parse: 26 callbacks suppressed [ 236.319720][T11080] netlink: 14589 bytes leftover after parsing attributes in process `syz-executor.4'. [ 236.588585][T11092] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 236.605349][T11092] netlink: 24859 bytes leftover after parsing attributes in process `syz-executor.4'. [ 236.842722][T11098] device syzkaller0 entered promiscuous mode [ 236.927654][T11105] sctp: [Deprecated]: syz-executor.0 (pid 11105) Use of int in maxseg socket option. [ 236.927654][T11105] Use struct sctp_assoc_value instead [ 237.727812][T11141] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 237.736307][T11141] netlink: 14589 bytes leftover after parsing attributes in process `syz-executor.4'. [ 238.128270][T11159] device veth0 entered promiscuous mode [ 238.186823][T11163] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 238.210332][T11163] netlink: 24859 bytes leftover after parsing attributes in process `syz-executor.0'. [ 238.472714][T11175] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 238.490423][T11175] netlink: 14589 bytes leftover after parsing attributes in process `syz-executor.2'. [ 238.942603][T11192] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.2'. [ 239.107609][T11200] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 239.162173][T11200] netlink: 14589 bytes leftover after parsing attributes in process `syz-executor.3'. [ 239.814954][T11246] netlink: 'syz-executor.2': attribute type 13 has an invalid length. [ 239.837679][T11246] netlink: 24859 bytes leftover after parsing attributes in process `syz-executor.2'. [ 240.133531][T11259] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.2'. [ 240.960778][T11293] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.0'. [ 241.510336][T11324] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.4'. [ 241.730453][T11333] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 242.404180][ T48] Bluetooth: hci0: command 0x0406 tx timeout [ 242.617251][T11370] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 242.855110][T11380] device syzkaller0 entered promiscuous mode [ 243.574923][T11402] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 243.584633][T11404] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 243.628647][T11408] device veth0_vlan left promiscuous mode [ 243.647564][T11408] device veth0_vlan entered promiscuous mode [ 243.665884][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 244.141463][T11436] device syzkaller0 entered promiscuous mode [ 244.169403][T11438] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 244.364004][ T27] audit: type=1800 audit(1718397501.135:6): pid=11444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="memory.events" dev="sda1" ino=1961 res=0 errno=0 [ 245.159921][T11481] netlink: 192 bytes leftover after parsing attributes in process `syz-executor.3'. [ 245.984876][T11506] device veth0_vlan left promiscuous mode [ 246.026554][T11506] device veth0_vlan entered promiscuous mode [ 246.064698][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 246.086547][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 246.130243][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 246.178152][T11502] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 246.732249][T11543] netlink: 192 bytes leftover after parsing attributes in process `syz-executor.1'. [ 246.963005][T11547] device syzkaller0 entered promiscuous mode [ 247.391997][T11561] raw_sendmsg: syz-executor.2 forgot to set AF_INET. Fix it! [ 247.792675][ T27] audit: type=1800 audit(1718397504.565:7): pid=11571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.3" name="memory.events" dev="sda1" ino=1962 res=0 errno=0 [ 247.827747][T11573] device lo entered promiscuous mode [ 247.913488][T11581] netlink: 192 bytes leftover after parsing attributes in process `syz-executor.1'. [ 248.042590][T11585] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 248.081940][T11585] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 248.212237][T11579] device veth0_vlan left promiscuous mode [ 248.279105][T11579] device veth0_vlan entered promiscuous mode [ 248.533777][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 248.548489][T11593] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 248.589581][T11593] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.4'. [ 248.644799][T11593] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 249.146447][T11642] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 249.221732][T11642] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.2'. [ 249.264965][T11642] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 249.322441][T11643] device veth0_vlan left promiscuous mode [ 249.331288][T11643] device veth0_vlan entered promiscuous mode [ 249.348466][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 249.366297][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 249.389901][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 249.732534][T11665] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 249.781140][T11665] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 249.829156][T11668] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 250.199924][ T3583] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 250.772821][T11703] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 250.827525][T11694] device veth0_vlan left promiscuous mode [ 250.841762][T11694] device veth0_vlan entered promiscuous mode [ 250.850793][T11703] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 250.872251][T11707] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 250.897933][T11703] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 250.961220][T11711] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 250.978417][ T3583] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 251.149030][T11723] bridge0: port 3(veth0_to_bond) entered blocking state [ 251.166706][T11723] bridge0: port 3(veth0_to_bond) entered disabled state [ 251.176906][T11723] device veth0_to_bond entered promiscuous mode [ 251.269207][T11727] device veth0_to_bond left promiscuous mode [ 251.319766][T11727] bridge0: port 3(veth0_to_bond) entered disabled state [ 251.815095][T11742] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.1'. [ 251.854399][T11742] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 252.140238][ T3583] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 252.231002][T11754] device syzkaller0 entered promiscuous mode [ 252.881298][T11769] device veth0_vlan left promiscuous mode [ 252.938264][T11769] device veth0_vlan entered promiscuous mode [ 252.992055][T11779] IPv6: NLM_F_REPLACE set, but no existing node found! [ 253.034677][T11783] syz-executor.3[11783] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 253.034777][T11783] syz-executor.3[11783] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 253.165781][T11792] bridge0: port 4(veth0_to_bond) entered blocking state [ 253.322186][T11792] bridge0: port 4(veth0_to_bond) entered disabled state [ 253.343619][T11792] device veth0_to_bond entered promiscuous mode [ 253.382411][T11792] bridge0: port 4(veth0_to_bond) entered blocking state [ 253.390585][T11792] bridge0: port 4(veth0_to_bond) entered forwarding state [ 253.489952][T11797] device veth0_to_bond left promiscuous mode [ 253.527207][T11797] bridge0: port 4(veth0_to_bond) entered disabled state [ 253.757476][ T3583] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 253.985254][T11820] validate_nla: 13 callbacks suppressed [ 253.985272][T11820] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 254.241286][T11822] device veth0_vlan left promiscuous mode [ 254.269048][T11822] device veth0_vlan entered promiscuous mode [ 254.277485][T11820] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 254.303564][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 254.322073][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 254.339154][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 254.348859][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 254.364462][T11833] bridge0: port 4(veth0_to_bond) entered blocking state [ 254.392374][T11833] bridge0: port 4(veth0_to_bond) entered disabled state [ 254.437249][T11833] device veth0_to_bond entered promiscuous mode [ 254.476428][T11823] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 254.495410][T11837] device veth0_to_bond left promiscuous mode [ 254.551393][T11837] bridge0: port 4(veth0_to_bond) entered disabled state [ 254.574155][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 254.582863][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 254.591637][T11825] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 254.601833][T11831] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 254.780861][T11855] syz-executor.2[11855] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 254.780967][T11855] syz-executor.2[11855] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 255.159632][T11877] bridge0: port 4(veth0_to_bond) entered blocking state [ 255.194804][T11877] bridge0: port 4(veth0_to_bond) entered disabled state [ 255.236464][T11877] device veth0_to_bond entered promiscuous mode [ 255.262007][T11877] bridge0: port 4(veth0_to_bond) entered blocking state [ 255.270145][T11877] bridge0: port 4(veth0_to_bond) entered forwarding state [ 255.313305][T11886] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 255.347388][T11883] device veth0_to_bond left promiscuous mode [ 255.367759][T11883] bridge0: port 4(veth0_to_bond) entered disabled state [ 255.428858][T11886] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 255.473859][T11889] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 255.483739][T11892] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 255.532925][T11886] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 255.686913][ T1256] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.693443][ T1256] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.697181][T11903] syz-executor.3[11903] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 255.709846][T11903] syz-executor.3[11903] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 255.988784][T11922] bridge0: port 4(veth0_to_bond) entered blocking state [ 256.067494][T11922] bridge0: port 4(veth0_to_bond) entered disabled state [ 256.095246][T11922] device veth0_to_bond entered promiscuous mode [ 256.127746][T11928] netlink: 212852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 256.133205][T11922] bridge0: port 4(veth0_to_bond) entered blocking state [ 256.144558][T11922] bridge0: port 4(veth0_to_bond) entered forwarding state [ 256.264101][T11924] device veth0_to_bond left promiscuous mode [ 256.301214][T11924] bridge0: port 4(veth0_to_bond) entered disabled state [ 256.834710][T11943] syz-executor.4[11943] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 256.834808][T11943] syz-executor.4[11943] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 257.199556][T11961] bridge0: port 4(veth0_to_bond) entered blocking state [ 257.231848][T11961] bridge0: port 4(veth0_to_bond) entered disabled state [ 257.263291][T11961] device veth0_to_bond entered promiscuous mode [ 257.283722][T11961] bridge0: port 4(veth0_to_bond) entered blocking state [ 257.290847][T11961] bridge0: port 4(veth0_to_bond) entered forwarding state [ 257.321734][T11969] netlink: 212852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 257.331834][T11964] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.3'. [ 257.358126][T11962] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.3'. [ 257.384179][T11965] device veth0_to_bond left promiscuous mode [ 257.399164][T11965] bridge0: port 4(veth0_to_bond) entered disabled state [ 257.862776][T11975] device syzkaller0 entered promiscuous mode [ 257.968482][ T1046] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 258.676052][T12003] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.4'. [ 258.740838][T12006] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.4'. [ 258.872491][T12015] netlink: 212852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 258.993020][ T1046] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 259.097080][T12009] device veth0_vlan left promiscuous mode [ 259.132117][T12009] device veth0_vlan entered promiscuous mode [ 259.221937][T12023] validate_nla: 4 callbacks suppressed [ 259.221955][T12023] netlink: 'syz-executor.4': attribute type 22 has an invalid length. [ 259.252990][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 259.271875][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 259.294159][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 259.307733][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 259.327869][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 259.354503][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 259.404351][T12025] bridge0: port 4(veth0_to_bond) entered blocking state [ 259.424888][T12025] bridge0: port 4(veth0_to_bond) entered disabled state [ 259.432963][T12025] device veth0_to_bond entered promiscuous mode [ 259.500793][T12025] bridge0: port 4(veth0_to_bond) entered blocking state [ 259.508000][T12025] bridge0: port 4(veth0_to_bond) entered forwarding state [ 259.569511][T12030] device veth0_to_bond left promiscuous mode [ 259.644036][T12030] bridge0: port 4(veth0_to_bond) entered disabled state [ 259.819745][T12028] device syzkaller0 entered promiscuous mode [ 260.280851][T12059] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.1'. [ 260.310505][T12059] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.1'. [ 260.610721][T12074] device syzkaller0 entered promiscuous mode [ 260.816652][T12093] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.4'. [ 260.849812][T12093] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.4'. [ 262.096917][ T47] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 262.287019][T12132] device syzkaller0 entered promiscuous mode [ 263.813259][T12174] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.820980][T12174] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.179094][T12197] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 264.188805][T12197] __nla_validate_parse: 2 callbacks suppressed [ 264.188820][T12197] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.3'. [ 264.386612][T12206] bridge0: port 3(dummy0) entered disabled state [ 264.393150][T12206] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.400590][T12206] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.955770][T12237] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 264.981927][T12237] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.1'. [ 265.110633][T12250] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 265.125163][T12250] bridge0: port 4(macsec0) entered blocking state [ 265.131778][T12250] bridge0: port 4(macsec0) entered disabled state [ 265.146844][T12250] device macsec0 entered promiscuous mode [ 265.153228][T12250] bridge0: port 4(macsec0) entered blocking state [ 265.159818][T12250] bridge0: port 4(macsec0) entered forwarding state [ 265.442238][T12274] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 265.473343][T12274] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 265.484082][T12275] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 265.492180][T12275] netlink: 61967 bytes leftover after parsing attributes in process `syz-executor.1'. [ 265.642564][T12288] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 265.862222][T12301] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 265.882395][T12301] netlink: 61967 bytes leftover after parsing attributes in process `syz-executor.3'. [ 265.992804][T12313] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 266.011359][T12313] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.4'. [ 267.109977][T12372] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 267.991873][T12417] bridge0: port 3(dummy0) entered disabled state [ 267.998460][T12417] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.005959][T12417] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.416155][T12444] netlink: 14546 bytes leftover after parsing attributes in process `syz-executor.3'. [ 269.400203][T12474] netlink: 14546 bytes leftover after parsing attributes in process `syz-executor.3'. [ 269.679560][T12493] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 269.908673][T12509] netlink: 14546 bytes leftover after parsing attributes in process `syz-executor.1'. [ 269.947150][T12513] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.3'. [ 270.195949][T12533] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. [ 270.311140][T12531] Dead loop on virtual device ip6_vti0, fix it urgently! [ 270.347882][T12542] netlink: 14546 bytes leftover after parsing attributes in process `syz-executor.1'. [ 270.364576][T12545] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.3'. [ 270.381580][T12531] Dead loop on virtual device ip6_vti0, fix it urgently! [ 270.410907][T12531] Dead loop on virtual device ip6_vti0, fix it urgently! [ 270.672434][T12563] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.3'. [ 270.831603][T12573] netlink: 14546 bytes leftover after parsing attributes in process `syz-executor.2'. [ 270.857765][T12575] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.0'. [ 271.104802][T12590] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 271.162004][T12586] Dead loop on virtual device ip6_vti0, fix it urgently! [ 271.186219][T12586] Dead loop on virtual device ip6_vti0, fix it urgently! [ 271.188685][T12590] netlink: 1034 bytes leftover after parsing attributes in process `syz-executor.2'. [ 271.205885][T12586] Dead loop on virtual device ip6_vti0, fix it urgently! [ 271.503135][T12615] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 271.941034][T12630] Dead loop on virtual device ip6_vti0, fix it urgently! [ 271.990554][T12637] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 272.002201][T12630] Dead loop on virtual device ip6_vti0, fix it urgently! [ 272.029980][T12630] Dead loop on virtual device ip6_vti0, fix it urgently! [ 272.316248][T12652] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 272.666834][T12671] Dead loop on virtual device ip6_vti0, fix it urgently! [ 273.212170][T12699] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 275.304385][T12818] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 276.445288][T12859] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 276.461464][T12859] pim6reg0: linktype set to 258 [ 276.713543][ T3582] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 276.726108][ T3582] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 276.737041][ T3582] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 276.753312][ T3582] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 276.765675][ T3582] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 276.773068][ T3582] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 276.844793][T12872] net_ratelimit: 5 callbacks suppressed [ 276.844846][T12872] Dead loop on virtual device ip6_vti0, fix it urgently! [ 276.865156][T12872] Dead loop on virtual device ip6_vti0, fix it urgently! [ 277.226916][T12888] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 277.452987][T12897] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 277.460594][T12897] pim6reg0: linktype set to 258 [ 277.503299][ T9] tipc: Subscription rejected, illegal request [ 277.640791][T12867] chnl_net:caif_netlink_parms(): no params data found [ 277.791142][T12909] Dead loop on virtual device ip6_vti0, fix it urgently! [ 277.819518][T12909] Dead loop on virtual device ip6_vti0, fix it urgently! [ 277.837482][T12909] Dead loop on virtual device ip6_vti0, fix it urgently! [ 277.899477][T12867] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.913842][T12867] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.925051][T12867] device bridge_slave_0 entered promiscuous mode [ 277.940703][T12867] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.952090][T12867] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.967852][T12867] device bridge_slave_1 entered promiscuous mode [ 277.970368][T12909] syz-executor.3 (12909) used greatest stack depth: 18656 bytes left [ 278.017673][T12923] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 278.054954][T12867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.073885][T12867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.226120][T12928] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 278.236199][T12928] pim6reg0: linktype set to 258 [ 278.276318][T12867] team0: Port device team_slave_0 added [ 278.299787][T12867] team0: Port device team_slave_1 added [ 278.391134][T12867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.422562][T12867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.517124][T12867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.563205][T12867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.583560][T12867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.637233][T12867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.666335][T12943] tap0: tun_chr_ioctl cmd 1074025677 [ 278.671847][T12943] tap0: linktype set to 0 [ 278.724981][T12946] tap0: tun_chr_ioctl cmd 35108 [ 278.783074][T12867] device hsr_slave_0 entered promiscuous mode [ 278.798506][T12867] device hsr_slave_1 entered promiscuous mode [ 278.805836][T12867] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 278.813536][T12867] Cannot create hsr debugfs directory [ 278.819453][ T3582] Bluetooth: hci3: command tx timeout [ 278.986119][T12965] __nla_validate_parse: 5 callbacks suppressed [ 278.986136][T12965] netlink: 134780 bytes leftover after parsing attributes in process `syz-executor.4'. [ 279.782373][T12987] tap0: tun_chr_ioctl cmd 1074025677 [ 279.860496][T12987] tap0: linktype set to 0 [ 279.894113][T12989] tap0: tun_chr_ioctl cmd 35108 [ 279.964184][T12867] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.070377][T12867] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.187169][T12867] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.321069][T12867] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.787926][T13031] netlink: 134780 bytes leftover after parsing attributes in process `syz-executor.3'. [ 280.890600][ T3582] Bluetooth: hci3: command tx timeout [ 280.999889][T12867] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 281.074138][T12867] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 281.106422][T12867] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 281.131724][T12867] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 281.366221][T12867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.408927][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 281.431007][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 281.451849][T13056] netlink: 134780 bytes leftover after parsing attributes in process `syz-executor.3'. [ 281.465655][T12867] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.486881][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 281.496293][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 281.517099][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.524280][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.591151][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 281.600023][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 281.619446][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 281.639532][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.646727][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.664112][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 281.731229][T12867] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 281.758368][T12867] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 281.773411][T13068] tap0: tun_chr_ioctl cmd 1074025677 [ 281.796447][T13068] tap0: linktype set to 0 [ 281.804301][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 281.833367][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 281.854960][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 281.880376][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 281.889427][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 281.900080][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 281.909599][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 281.936117][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 281.955751][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 281.966132][T13071] tap0: tun_chr_ioctl cmd 35108 [ 282.022711][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 282.045346][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 282.387028][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 282.398196][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 282.422588][T12867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.495785][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 282.512537][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 282.562041][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 282.591561][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 282.609712][T12867] device veth0_vlan entered promiscuous mode [ 282.621687][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 282.637363][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 282.667399][T12867] device veth1_vlan entered promiscuous mode [ 282.699256][T13120] tap0: tun_chr_ioctl cmd 1074025677 [ 282.708974][T13120] tap0: linktype set to 0 [ 282.747033][T13120] tap0: tun_chr_ioctl cmd 35108 [ 282.758818][T12867] device veth0_macvtap entered promiscuous mode [ 282.775723][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 282.791294][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 282.800370][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 282.818769][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 282.855751][T12867] device veth1_macvtap entered promiscuous mode [ 282.871172][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 282.907007][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 282.951732][T12867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.963796][ T3582] Bluetooth: hci3: command tx timeout [ 282.989606][T12867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.006846][T12867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.021020][T12867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.038062][T12867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.059331][T12867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.070877][T12867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.088414][T12867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.100563][T12867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.126899][T12867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.149152][T12867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.212661][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 283.224526][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 283.255417][T12867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.296130][T12867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.313174][T12867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.333444][T12867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.359477][T12867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.416937][T12867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.428098][T12867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.447656][T12867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.462270][T12867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.480341][T12867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.492369][T12867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.508682][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 283.530241][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 283.703981][T13152] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 283.740157][T12867] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.753501][T12867] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.763059][T12867] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.781480][T12867] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.807479][T13152] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 283.833923][T13153] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 283.907877][T13152] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 283.942570][T13155] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 283.980068][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.020291][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.061127][ T2965] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 284.092587][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.111381][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.122333][ T2965] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 285.044492][ T3583] Bluetooth: hci3: command tx timeout [ 285.758839][T13227] Dead loop on virtual device ip6_vti0, fix it urgently! [ 285.798145][T13227] Dead loop on virtual device ip6_vti0, fix it urgently! [ 285.808084][T13227] Dead loop on virtual device ip6_vti0, fix it urgently! [ 287.063891][T13276] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 287.104671][T13276] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.4'. [ 288.608989][ T47] device hsr_slave_0 left promiscuous mode [ 288.633379][ T47] device hsr_slave_1 left promiscuous mode [ 288.658958][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.692188][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.714457][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.732400][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.759922][ T47] device macsec0 left promiscuous mode [ 288.776601][ T47] bridge0: port 4(macsec0) entered disabled state [ 288.789778][ T47] bridge0: port 3(dummy0) entered disabled state [ 288.819971][ T47] device bridge_slave_1 left promiscuous mode [ 288.843978][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.848216][ T27] audit: type=1804 audit(1718397545.625:8): pid=13353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2883219330/syzkaller.ZqbjCj/611/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 [ 288.885835][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.925946][ T47] device veth1_macvtap left promiscuous mode [ 288.937648][ T27] audit: type=1800 audit(1718397545.655:9): pid=13353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="cgroup.controllers" dev="sda1" ino=1961 res=0 errno=0 [ 288.960956][ T47] device veth1_vlan left promiscuous mode [ 288.978506][ T47] device veth0_vlan left promiscuous mode [ 289.527485][ T47] team0 (unregistering): Port device team_slave_1 removed [ 289.544591][ T47] team0 (unregistering): Port device team_slave_0 removed [ 289.560239][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.584457][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.675803][ T47] bond0 (unregistering): Released all slaves [ 289.819316][T13346] device syzkaller0 entered promiscuous mode [ 289.826803][T13364] device sit0 left promiscuous mode [ 290.124177][ T1046] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 290.195760][ T27] audit: type=1804 audit(1718397546.975:10): pid=13388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1981173007/syzkaller.wJoEbK/891/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 290.239747][ T27] audit: type=1800 audit(1718397546.975:11): pid=13388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="cgroup.controllers" dev="sda1" ino=1951 res=0 errno=0 [ 291.487050][ T27] audit: type=1804 audit(1718397548.265:12): pid=13426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2883219330/syzkaller.ZqbjCj/620/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 291.624546][ T27] audit: type=1800 audit(1718397548.295:13): pid=13426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="cgroup.controllers" dev="sda1" ino=1956 res=0 errno=0 [ 293.092597][ T3583] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 293.102219][ T3583] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 293.112190][ T3583] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 293.120091][ T3583] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 293.128187][ T3583] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 293.155494][ T3583] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 293.628698][ T27] audit: type=1804 audit(1718397550.405:14): pid=13498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1981173007/syzkaller.wJoEbK/900/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 293.655325][ T27] audit: type=1800 audit(1718397550.425:15): pid=13498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="cgroup.controllers" dev="sda1" ino=1960 res=0 errno=0 [ 294.046780][T13481] chnl_net:caif_netlink_parms(): no params data found [ 294.456430][T13481] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.463630][T13481] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.482863][T13481] device bridge_slave_0 entered promiscuous mode [ 294.516025][T13481] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.551054][T13481] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.584247][T13481] device bridge_slave_1 entered promiscuous mode [ 294.746630][T13481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.773044][T13481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.943304][T13481] team0: Port device team_slave_0 added [ 294.966679][T13481] team0: Port device team_slave_1 added [ 295.128968][T13481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.159430][T13481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.198603][T13481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.204020][ T3582] Bluetooth: hci4: command tx timeout [ 295.217543][T13481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.227040][T13481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.254031][T13481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.261101][T13556] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 295.293277][T13556] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 295.396702][ T47] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.416161][T13556] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 295.439868][T13556] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 295.526327][ T47] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.591696][T13481] device hsr_slave_0 entered promiscuous mode [ 295.601832][T13481] device hsr_slave_1 entered promiscuous mode [ 295.622630][T13481] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 295.636943][T13481] Cannot create hsr debugfs directory [ 295.660939][ T47] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.751131][ T47] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.584472][T13601] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.591990][T13601] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.600243][T13601] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.607826][T13601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.640502][T13601] device bridge0 entered promiscuous mode [ 296.752558][T13615] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 296.784547][T13615] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.0'. [ 296.911205][T13612] can: request_module (can-proto-0) failed. [ 297.215759][T13481] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 297.271201][T13481] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 297.293715][ T3582] Bluetooth: hci4: command tx timeout [ 297.491863][T13481] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 297.538677][T13481] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 297.582123][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 297.949201][ T47] device hsr_slave_1 left promiscuous mode [ 298.045339][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.069391][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.105891][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.139652][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.196218][ T47] bridge0: port 3(dummy0) entered disabled state [ 298.216865][ T47] device bridge_slave_1 left promiscuous mode [ 298.223218][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.267400][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.340140][ T47] device veth1_macvtap left promiscuous mode [ 298.341253][T13661] can: request_module (can-proto-0) failed. [ 298.352726][ T47] device veth0_macvtap left promiscuous mode [ 298.374117][ T47] device veth1_vlan left promiscuous mode [ 298.394180][ T47] device veth0_vlan left promiscuous mode [ 299.153653][ T47] team0 (unregistering): Port device team_slave_1 removed [ 299.211671][ T47] team0 (unregistering): Port device team_slave_0 removed [ 299.256599][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.290167][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.364025][ T3583] Bluetooth: hci4: command tx timeout [ 299.426899][ T47] bond0 (unregistering): Released all slaves [ 299.549823][T13665] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 299.561646][T13665] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.0'. [ 299.627233][T13481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.753728][T13481] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.829356][ T3638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 299.838263][ T3638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 299.952915][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 299.962512][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 299.971383][ T3616] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.978535][ T3616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.995394][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 300.004534][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 300.013015][ T3616] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.020170][ T3616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.152470][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 300.319592][T13706] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.327325][T13706] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.524561][T13706] device bridge0 left promiscuous mode [ 300.553069][T13707] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.560280][T13707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.567747][T13707] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.574986][T13707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.631066][T13707] device bridge0 entered promiscuous mode [ 300.663941][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 300.678064][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 300.722041][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 300.759368][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 300.771443][T13724] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 300.788192][T13724] netlink: 13435 bytes leftover after parsing attributes in process `syz-executor.0'. [ 300.791128][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 300.858801][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 300.890635][T13481] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 300.903921][T13481] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 300.930511][ T3638] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 300.958868][ T3638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 301.034599][ T3638] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 301.043234][ T3638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 301.095267][ T3638] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 301.166222][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 301.444531][ T3583] Bluetooth: hci4: command tx timeout [ 301.962172][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 301.975687][T13760] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 302.005824][T13760] netlink: 13435 bytes leftover after parsing attributes in process `syz-executor.2'. [ 302.005890][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 302.165803][T13768] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 302.186042][T13768] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.2'. [ 302.320008][T13481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.360005][T13766] can: request_module (can-proto-0) failed. [ 302.447777][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 302.474473][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 302.533028][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 302.558351][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 302.579985][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 302.595913][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 302.606679][T13481] device veth0_vlan entered promiscuous mode [ 302.652044][T13481] device veth1_vlan entered promiscuous mode [ 302.748876][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 302.761997][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 302.772407][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 302.781750][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 302.805028][T13784] netlink: 180 bytes leftover after parsing attributes in process `syz-executor.2'. [ 302.825772][T13788] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 302.834555][T13788] netlink: 13435 bytes leftover after parsing attributes in process `syz-executor.0'. [ 302.875281][T13481] device veth0_macvtap entered promiscuous mode [ 302.901212][T13481] device veth1_macvtap entered promiscuous mode [ 302.949610][T13481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.983589][T13481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.021518][T13481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.042167][T13481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.095486][T13481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.135310][T13481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.150253][T13481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.161324][T13481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.209120][T13481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.226380][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 303.255138][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 303.284987][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 303.298106][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 303.337217][T13481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.382342][T13481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.426773][T13481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.451109][T13799] can: request_module (can-proto-0) failed. [ 303.466966][T13481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.496425][T13481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.519377][T13481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.552787][T13481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.579834][T13481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.638116][T13481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.660199][T13802] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 303.689797][T13802] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.2'. [ 303.761995][T13481] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.803961][T13481] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.814338][T13481] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.833796][T13481] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.867992][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 303.885157][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 303.982452][T13818] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 304.008090][T13819] netlink: 180 bytes leftover after parsing attributes in process `syz-executor.3'. [ 304.014244][ T1046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.031354][T13818] netlink: 13435 bytes leftover after parsing attributes in process `syz-executor.0'. [ 304.063016][ T1046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.126395][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 304.155323][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.189537][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.219908][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 305.578641][T13908] netlink: 180 bytes leftover after parsing attributes in process `syz-executor.3'. [ 305.869149][T13915] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 305.916074][T13915] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.2'. [ 306.053999][T13912] can: request_module (can-proto-0) failed. [ 306.180391][T13922] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.3'. [ 306.440884][T13939] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 306.867470][T13972] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 308.580958][T14064] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 308.589345][T14064] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 308.602513][T14064] bond0: (slave ipvlan1): The slave device specified does not support setting the MAC address [ 308.633252][T14064] bond0: (slave ipvlan1): Error -95 calling set_mac_address [ 309.183438][T14099] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 309.223908][T14099] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 309.287547][T14099] bond0: (slave ipvlan1): The slave device specified does not support setting the MAC address [ 309.438438][T14099] bond0: (slave ipvlan1): Error -95 calling set_mac_address [ 309.581484][T14097] device veth1_macvtap left promiscuous mode [ 309.724270][T14101] device veth1_macvtap entered promiscuous mode [ 309.761309][T14101] device macsec0 entered promiscuous mode [ 310.200478][T14131] netlink: 'syz-executor.3': attribute type 28 has an invalid length. [ 310.395597][T14146] device veth1_macvtap left promiscuous mode [ 310.466499][T14146] device veth1_macvtap entered promiscuous mode [ 310.472826][T14146] device macsec0 entered promiscuous mode [ 310.649572][T14157] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.2'. [ 310.679226][T14161] netlink: 'syz-executor.0': attribute type 28 has an invalid length. [ 311.420834][T14186] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.0'. [ 312.112248][T14207] device veth1_macvtap left promiscuous mode [ 312.162944][T14207] device macsec0 left promiscuous mode [ 312.203159][T14207] device veth1_macvtap entered promiscuous mode [ 312.209729][T14207] device macsec0 entered promiscuous mode [ 312.822540][T14224] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. [ 313.829894][T14254] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 313.903844][T14254] netlink: 11594 bytes leftover after parsing attributes in process `syz-executor.3'. [ 313.956335][T14256] device veth1_macvtap left promiscuous mode [ 314.054019][T14259] device veth1_macvtap entered promiscuous mode [ 314.060360][T14259] device macsec0 entered promiscuous mode [ 314.093361][T14266] netlink: 'syz-executor.3': attribute type 28 has an invalid length. [ 315.192779][T14302] device veth1_macvtap left promiscuous mode [ 315.199263][T14302] device macsec0 left promiscuous mode [ 315.272701][T14302] device veth1_macvtap entered promiscuous mode [ 315.312906][T14302] device macsec0 entered promiscuous mode [ 315.863501][T14322] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 315.912431][T14322] netlink: 11594 bytes leftover after parsing attributes in process `syz-executor.3'. [ 316.662504][T14349] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 316.710692][T14344] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.3'. [ 316.742370][T14349] netlink: 127868 bytes leftover after parsing attributes in process `syz-executor.2'. [ 317.133087][ T1256] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.139477][ T1256] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.072219][T14387] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 318.123828][T14387] netlink: 127868 bytes leftover after parsing attributes in process `syz-executor.0'. [ 318.233428][T14394] netlink: 'syz-executor.1': attribute type 15 has an invalid length. [ 318.249800][T14394] netlink: 11594 bytes leftover after parsing attributes in process `syz-executor.1'. [ 318.265700][T14390] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.2'. [ 318.390295][T14403] netlink: 16178 bytes leftover after parsing attributes in process `syz-executor.1'. [ 318.418378][T14407] netlink: 14568 bytes leftover after parsing attributes in process `syz-executor.3'. [ 319.052515][T14429] netlink: 16255 bytes leftover after parsing attributes in process `syz-executor.2'. [ 319.567557][T14438] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.2'. [ 319.726621][T14445] netlink: 14568 bytes leftover after parsing attributes in process `syz-executor.4'. [ 320.322087][T14474] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 321.153994][ T1046] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 321.919042][T14543] __nla_validate_parse: 5 callbacks suppressed [ 321.919061][T14543] netlink: 14568 bytes leftover after parsing attributes in process `syz-executor.1'. [ 323.776098][T14611] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.4'. [ 324.208885][ T3582] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8 [ 324.905068][T14653] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.3'. [ 325.255691][T14671] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 325.360723][ T3582] Bluetooth: hci2: unexpected event 0x12 length: 15 > 8 [ 325.411582][T14678] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 325.436027][T14678] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.0'. [ 325.768071][T14693] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.2'. [ 326.266225][T14707] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 326.369732][ T3582] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8 [ 326.422092][T14717] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 326.447373][T14717] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.3'. [ 326.510980][ T3582] Bluetooth: hci3: unexpected event 0x31 length: 15 > 6 [ 326.603384][T14729] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 326.636687][T14729] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 326.783229][T14738] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 326.914546][ T3582] Bluetooth: hci1: unexpected event 0x12 length: 15 > 8 [ 326.949460][T14754] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 326.989119][T14754] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.0'. [ 327.226448][T14774] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 327.449110][T14790] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 327.473782][T14790] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.4'. [ 327.525984][ T3582] Bluetooth: hci2: unexpected event 0x12 length: 15 > 8 [ 328.136838][T14820] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 328.152492][T14820] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 328.210982][T14816] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.4'. [ 328.511382][ T3582] Bluetooth: hci2: unexpected event 0x31 length: 15 > 6 [ 328.612430][T14840] device syzkaller0 entered promiscuous mode [ 328.655101][T14845] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 328.674036][T14845] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 328.698726][T14845] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 328.722772][T14845] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 328.953527][T14857] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.3'. [ 329.360409][T14887] device syzkaller0 entered promiscuous mode [ 329.533814][T14903] device bond_slave_0 entered promiscuous mode [ 330.350609][T14946] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.358524][T14946] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.358926][ T3583] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 330.376945][ T3583] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 330.385501][ T3583] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 330.400689][ T3583] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 330.409674][ T3583] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 330.412853][T14946] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.424895][ T3583] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 330.444458][T14946] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.687970][ T47] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.828330][ T47] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.853325][T14965] validate_nla: 2 callbacks suppressed [ 330.853341][T14965] netlink: 'syz-executor.0': attribute type 16 has an invalid length. [ 330.880027][T14965] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.0'. [ 330.928684][ T47] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.038850][ T47] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.396990][T14947] chnl_net:caif_netlink_parms(): no params data found [ 331.526691][T14988] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 331.543912][T14988] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 331.569168][T14988] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 331.583835][T14988] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 331.851976][T14947] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.884435][T14947] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.895615][T14947] device bridge_slave_0 entered promiscuous mode [ 331.947186][T14947] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.960498][T14947] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.974252][T14947] device bridge_slave_1 entered promiscuous mode [ 332.149537][T15013] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 332.203129][T15013] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 332.223804][T15013] __nla_validate_parse: 1 callbacks suppressed [ 332.223820][T15013] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 332.278367][T14947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.311407][T14947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.342780][ T3687] tipc: Subscription rejected, illegal request [ 332.411905][T15024] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 332.432871][T15024] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.1'. [ 332.493753][ T3582] Bluetooth: hci2: command tx timeout [ 332.517594][T14947] team0: Port device team_slave_0 added [ 332.566871][T14947] team0: Port device team_slave_1 added [ 332.721078][T14947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.739481][T14947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.821366][T14947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.881489][T14947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.911020][T14947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.965337][ T9] tipc: Subscription rejected, illegal request [ 332.989220][T14947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.136907][T14947] device hsr_slave_0 entered promiscuous mode [ 333.162784][T14947] device hsr_slave_1 entered promiscuous mode [ 333.281639][ T47] device hsr_slave_1 left promiscuous mode [ 333.302196][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.317672][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.358340][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.377560][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.401495][ T47] device bridge_slave_1 left promiscuous mode [ 333.420993][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.448155][ T47] device bridge_slave_0 left promiscuous mode [ 333.464042][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.547609][ T47] device veth1_macvtap left promiscuous mode [ 333.557185][ T47] device veth0_macvtap left promiscuous mode [ 333.575896][ T47] device veth1_vlan left promiscuous mode [ 333.594094][ T47] device veth0_vlan left promiscuous mode [ 334.026822][ T47] team0 (unregistering): Port device team_slave_1 removed [ 334.081578][ T47] team0 (unregistering): Port device team_slave_0 removed [ 334.110612][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 334.266991][ T47] bond0 (unregistering): (slave team0): Releasing backup interface [ 334.302043][ T47] bond0 (unregistering): Released all slaves [ 334.352950][T15083] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 334.362026][T15083] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 334.370271][T15083] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 334.565579][ T3582] Bluetooth: hci2: command tx timeout [ 334.587518][ T1046] tipc: Subscription rejected, illegal request [ 335.211354][T15159] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 335.228312][T15159] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 335.245216][T15159] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 335.581030][T14947] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 335.641426][T14947] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 335.669995][T14947] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 335.727067][T14947] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 335.961463][ T3583] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 335.972044][ T3583] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 335.981122][ T3583] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 335.990098][ T3583] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 336.000172][ T3583] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 336.010916][ T3583] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 336.064654][T14947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.108033][T14947] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.115044][ T2965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 336.125834][ T2965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 336.157903][ T2965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 336.167373][ T2965] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 336.175936][ T2965] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.183053][ T2965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.190806][ T2965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 336.199831][ T2965] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 336.209277][ T2965] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.216527][ T2965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.224916][ T2965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 336.277232][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 336.289666][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 336.310690][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 336.329184][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 336.349914][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 336.371501][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 336.410513][T14947] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 336.440526][T14947] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 336.460578][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 336.469204][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 336.493810][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 336.515808][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 336.531238][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 336.584153][ T2965] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 336.643877][ T3582] Bluetooth: hci2: command tx timeout [ 337.072241][T15187] chnl_net:caif_netlink_parms(): no params data found [ 337.206158][T14947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.215668][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 337.223191][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 337.335395][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 337.348436][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 337.525683][T15187] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.532814][T15187] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.590419][T15187] device bridge_slave_0 entered promiscuous mode [ 337.632924][T14947] device veth0_vlan entered promiscuous mode [ 337.662803][ T2965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 337.698101][ T2965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 337.759488][T15187] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.772037][T15187] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.798589][T15187] device bridge_slave_1 entered promiscuous mode [ 337.823196][T14947] device veth1_vlan entered promiscuous mode [ 337.857103][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 337.874843][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 337.981185][T15187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.017806][T15187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.064614][T15266] tap0: tun_chr_ioctl cmd 1074025677 [ 338.084990][T15266] tap0: linktype set to 778 [ 338.094298][ T3582] Bluetooth: hci4: command tx timeout [ 338.094555][T14947] device veth0_macvtap entered promiscuous mode [ 338.183526][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 338.200122][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 338.250299][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 338.325244][T14947] device veth1_macvtap entered promiscuous mode [ 338.391449][T15187] team0: Port device team_slave_0 added [ 338.447589][T15187] team0: Port device team_slave_1 added [ 338.566588][T14947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.579711][ T3582] Bluetooth: hci3: unexpected event 0x35 length: 15 > 6 [ 338.584052][T14947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.651077][T14947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.688134][T14947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.724589][T14947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.729773][ T3582] Bluetooth: hci2: command tx timeout [ 338.753747][T14947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.780020][T14947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 338.796204][T15187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.814631][T15187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.848571][T15187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.868404][T15187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.877092][T15187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.939780][T15187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.974175][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 339.012939][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 339.065994][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 339.100210][T14947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.120989][T14947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.150153][T14947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.208305][T14947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.229467][T14947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.255797][T14947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.271251][T14947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.339497][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 339.357819][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 339.385189][T14947] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.407414][T14947] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.439415][T14947] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.475824][T14947] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.531587][T15314] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.2'. [ 339.639917][T15187] device hsr_slave_0 entered promiscuous mode [ 339.696145][T15187] device hsr_slave_1 entered promiscuous mode [ 339.712268][T15187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 339.730809][T15187] Cannot create hsr debugfs directory [ 339.784620][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.811698][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.918567][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 339.947835][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.961843][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.017866][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 340.127091][T15187] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.179886][ T3582] Bluetooth: hci4: command tx timeout [ 340.357864][T15187] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.426134][T15348] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.3'. [ 340.470068][T15187] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.622137][T15187] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.775287][T15368] netlink: 134780 bytes leftover after parsing attributes in process `syz-executor.4'. [ 340.803363][T15368] netlink: 43 bytes leftover after parsing attributes in process `syz-executor.4'. [ 340.899018][ T3582] Bluetooth: hci1: unexpected event 0x35 length: 15 > 6 [ 340.991526][T15374] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.4'. [ 341.142970][T15187] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 341.160429][T15187] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 341.173208][T15187] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 341.201547][T15187] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 341.419393][T15397] netlink: 134780 bytes leftover after parsing attributes in process `syz-executor.4'. [ 341.423836][T15187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.460154][ T3582] Bluetooth: hci3: unexpected event 0x35 length: 15 > 6 [ 341.465188][T15397] netlink: 43 bytes leftover after parsing attributes in process `syz-executor.4'. [ 341.509658][T15187] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.547828][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 341.558540][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 341.588969][T15403] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.0'. [ 341.631023][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 341.649801][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 341.666901][ T3618] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.674117][ T3618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.712418][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 341.721009][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 341.734518][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 341.743235][ T3020] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.750455][ T3020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.758583][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 341.790757][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 341.801043][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 341.811386][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 341.831053][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 341.856536][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 341.882200][T15187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 341.913075][T15187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 341.951778][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 341.960749][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 341.978089][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 341.994976][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 342.011413][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 342.122604][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 342.243313][T15430] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.2'. [ 342.254480][ T3582] Bluetooth: hci4: command tx timeout [ 342.312415][ T47] device hsr_slave_0 left promiscuous mode [ 342.319479][ T47] device hsr_slave_1 left promiscuous mode [ 342.436736][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.471534][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.491269][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.504248][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.519827][ T47] device bridge_slave_1 left promiscuous mode [ 342.527733][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.537967][ T47] device bridge_slave_0 left promiscuous mode [ 342.544774][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.561364][ T47] device veth1_macvtap left promiscuous mode [ 342.568152][ T47] device veth0_macvtap left promiscuous mode [ 342.574849][ T47] device veth1_vlan left promiscuous mode [ 342.580788][ T47] device veth0_vlan left promiscuous mode [ 342.795048][ T47] team0 (unregistering): Port device team_slave_1 removed [ 342.812548][ T47] team0 (unregistering): Port device team_slave_0 removed [ 342.830590][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 342.845645][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.908379][ T47] bond0 (unregistering): Released all slaves [ 343.247152][T15469] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.2'. [ 343.271003][ T3638] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 343.287713][ T3638] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 343.315799][T15187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.444747][ T3638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 343.469118][ T3638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 343.527537][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 343.541169][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 343.578800][T15187] device veth0_vlan entered promiscuous mode [ 343.624768][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 343.638982][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 343.662108][T15187] device veth1_vlan entered promiscuous mode [ 343.795202][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 343.803507][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 343.844685][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 343.864671][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 343.875764][T15187] device veth0_macvtap entered promiscuous mode [ 343.901417][T15187] device veth1_macvtap entered promiscuous mode [ 343.960345][T15187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.992597][T15187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.033865][T15187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.060683][T15187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.071211][T15187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.087198][T15187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.100152][T15187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.121122][T15187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.133285][T15187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.149830][T15187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.160762][T15187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.176460][T15187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.188482][T15187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.209739][T15187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.226577][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 344.242301][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 344.257100][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 344.267585][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 344.306336][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 344.323355][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 344.333878][ T3582] Bluetooth: hci4: command tx timeout [ 344.355525][T15187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.382430][T15187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.409099][T15187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.444947][T15187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.610753][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.628476][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.680930][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 344.750593][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.769864][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.813165][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 344.843389][T15517] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 344.856790][T15517] __nla_validate_parse: 1 callbacks suppressed [ 344.856845][T15517] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 345.021610][T15526] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.2'. [ 345.442028][T15548] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 345.476583][T15548] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.506897][T15548] bond0: (slave team0): Enslaving as an active interface with an up link [ 345.536545][T15553] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 345.564915][T15553] bond0: (slave team0): Releasing backup interface [ 345.644330][T15553] bridge0: port 4(team0) entered blocking state [ 345.662862][T15553] bridge0: port 4(team0) entered disabled state [ 345.703050][T15553] device team0 entered promiscuous mode [ 345.710207][T15553] device team_slave_0 entered promiscuous mode [ 345.729315][T15553] device team_slave_1 entered promiscuous mode [ 345.750205][T15559] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.0'. [ 346.225299][T15587] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.0'. [ 346.918206][T15621] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 346.933059][T15621] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 347.618249][T15665] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 347.656782][T15665] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 347.932660][T15688] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.3'. [ 347.980601][T15686] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 348.010852][T15686] device team0 left promiscuous mode [ 348.025868][T15686] device team_slave_0 left promiscuous mode [ 348.046739][T15686] device team_slave_1 left promiscuous mode [ 348.066150][T15686] bridge0: port 4(team0) entered disabled state [ 348.090307][T15686] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.115309][T15686] bond0: (slave team0): Enslaving as an active interface with an up link [ 348.154918][T15696] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 348.186979][T15696] bond0: (slave team0): Releasing backup interface [ 348.204579][T15696] bridge0: port 4(team0) entered blocking state [ 348.212145][T15696] bridge0: port 4(team0) entered disabled state [ 348.220103][T15696] device team0 entered promiscuous mode [ 348.227939][T15696] device team_slave_0 entered promiscuous mode [ 348.234978][T15696] device team_slave_1 entered promiscuous mode [ 348.562751][T15725] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.0'. [ 349.098667][T15747] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 349.199606][T15747] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.223044][T15747] bond0: (slave team0): Enslaving as an active interface with an up link [ 349.263925][T15750] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 349.337979][T15750] bond0: (slave team0): Releasing backup interface [ 349.591146][T15750] bridge0: port 4(team0) entered blocking state [ 349.602242][T15750] bridge0: port 4(team0) entered disabled state [ 349.610519][T15750] device team0 entered promiscuous mode [ 349.621733][T15750] device team_slave_0 entered promiscuous mode [ 349.628624][T15750] device team_slave_1 entered promiscuous mode [ 349.790848][T15750] syz-executor.2 (15750) used greatest stack depth: 17496 bytes left [ 349.946665][T15770] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 349.977211][T15770] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 350.416513][T15800] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 350.554315][T15800] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.570472][T15800] bond0: (slave team0): Enslaving as an active interface with an up link [ 350.592159][T15805] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 350.622661][T15805] bond0: (slave team0): Releasing backup interface [ 350.662954][T15805] bridge0: port 3(team0) entered blocking state [ 350.673874][T15805] bridge0: port 3(team0) entered disabled state [ 350.693567][T15805] device team0 entered promiscuous mode [ 350.710314][T15805] device team_slave_0 entered promiscuous mode [ 350.730265][T15805] device team_slave_1 entered promiscuous mode [ 350.888365][T15818] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 350.902308][T15818] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 351.539561][T15849] netlink: 4083 bytes leftover after parsing attributes in process `syz-executor.2'. [ 351.676166][T15848] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 351.706848][T15848] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 352.243592][T15887] netlink: 4083 bytes leftover after parsing attributes in process `syz-executor.2'. [ 352.639434][T15892] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 352.660182][T15892] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 353.303166][T15917] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 353.325705][T15917] netlink: 'syz-executor.2': attribute type 20 has an invalid length. [ 353.361743][T15917] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 353.478466][T15921] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 353.522721][T15921] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 355.139863][T15965] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 355.165677][T15965] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 355.193367][T15970] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 355.219231][T15965] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 355.261783][T15965] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 355.298564][T15965] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 355.311073][T15977] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 355.331309][T15977] netlink: 'syz-executor.4': attribute type 20 has an invalid length. [ 355.345077][T15977] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 355.353571][T15977] IPv6: NLM_F_CREATE should be specified when creating new route [ 355.648706][T15986] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 355.663624][T15986] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 357.423630][T16029] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 357.657104][T16038] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.697500][T16038] bond0: (slave team0): Enslaving as an active interface with an up link [ 357.974804][T16049] bond0: (slave team0): Releasing backup interface [ 358.630645][T16049] bridge0: port 3(team0) entered blocking state [ 358.674117][T16049] bridge0: port 3(team0) entered disabled state [ 358.685042][T16049] device team0 entered promiscuous mode [ 358.690657][T16049] device team_slave_0 entered promiscuous mode [ 358.709219][T16049] device team_slave_1 entered promiscuous mode [ 358.967660][T16073] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 360.730453][T16122] validate_nla: 15 callbacks suppressed [ 360.730473][T16122] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 360.752534][T16122] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 361.966759][T16156] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 361.991143][T16156] device ipvlan1 entered promiscuous mode [ 362.046263][T16156] team0: Device ipvlan1 failed to register rx_handler [ 362.136869][T16160] netlink: 65039 bytes leftover after parsing attributes in process `syz-executor.1'. [ 362.551088][T16195] netlink: 65039 bytes leftover after parsing attributes in process `syz-executor.0'. [ 362.759757][T16200] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 362.792506][T16200] team0: Device ipvlan1 failed to register rx_handler [ 362.976168][T16206] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 362.998337][T16206] IPv6: NLM_F_CREATE should be specified when creating new route [ 364.546042][T16240] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 364.562180][T16240] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 364.593018][T16240] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 364.639006][T16240] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 364.661074][ T27] audit: type=1800 audit(1718397621.435:16): pid=16249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1968 res=0 errno=0 [ 364.698712][T16240] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 364.715368][ T27] audit: type=1804 audit(1718397621.465:17): pid=16249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir687623057/syzkaller.P9vcP2/40/memory.events" dev="sda1" ino=1968 res=1 errno=0 [ 364.741308][T16240] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 364.818545][ T27] audit: type=1804 audit(1718397621.465:18): pid=16249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir687623057/syzkaller.P9vcP2/40/memory.events" dev="sda1" ino=1968 res=1 errno=0 [ 366.081968][T16277] device syzkaller0 entered promiscuous mode [ 367.122217][T16277] device wg2 entered promiscuous mode [ 368.141301][T16328] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 368.188010][T16328] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 368.250115][T16331] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.4'. [ 368.581612][T16340] netlink: 117604 bytes leftover after parsing attributes in process `syz-executor.4'. [ 368.645877][T16340] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 368.674981][T16343] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 369.144130][T16369] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 369.164506][T16369] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.0'. [ 369.309418][T16384] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.0'. [ 369.372604][T16386] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 369.663280][ T3582] Bluetooth: hci0: unexpected event 0x3b length: 15 > 10 [ 369.700409][T16405] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 369.748184][T16405] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 369.883208][T16418] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.1'. [ 369.921571][T16417] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 369.937396][T16417] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 369.989156][T16417] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 370.050141][T16421] device syzkaller0 entered promiscuous mode [ 370.069640][T16417] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 370.098929][T16417] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 370.136506][T16417] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 370.145690][ T3582] Bluetooth: hci1: unexpected event 0x3b length: 15 > 10 [ 370.221048][T16421] device wg2 left promiscuous mode [ 370.300605][T16428] device wg2 entered promiscuous mode [ 370.463081][T16443] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 370.492675][T16443] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.2'. [ 370.541167][T16449] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.1'. [ 370.654598][T16455] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 370.677239][ T3582] Bluetooth: hci4: unexpected event 0x3b length: 15 > 10 [ 371.100284][T16479] [ 371.109706][T16479] ====================================================== [ 371.116743][T16479] WARNING: possible circular locking dependency detected [ 371.123776][T16479] 6.1.93-syzkaller #0 Not tainted [ 371.128908][T16479] ------------------------------------------------------ [ 371.135909][T16479] syz-executor.3/16479 is trying to acquire lock: [ 371.142303][T16479] ffff8880b9935e90 (lock#10){+.+.}-{2:2}, at: __mmap_lock_do_trace_acquire_returned+0x84/0x670 [ 371.152840][T16479] [ 371.152840][T16479] but task is already holding lock: [ 371.160266][T16479] ffff8880b993aa18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 371.169726][T16479] [ 371.169726][T16479] which lock already depends on the new lock. [ 371.169726][T16479] [ 371.180279][T16479] [ 371.180279][T16479] the existing dependency chain (in reverse order) is: [ 371.189283][T16479] [ 371.189283][T16479] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 371.196563][T16479] lock_acquire+0x1f8/0x5a0 [ 371.201572][T16479] _raw_spin_lock_nested+0x2d/0x40 [ 371.207280][T16479] raw_spin_rq_lock_nested+0x26/0x140 [ 371.213183][T16479] task_fork_fair+0x5d/0x350 [ 371.218391][T16479] sched_cgroup_fork+0x374/0x400 [ 371.223834][T16479] copy_process+0x2442/0x4060 [ 371.229011][T16479] kernel_clone+0x222/0x920 [ 371.234029][T16479] user_mode_thread+0x12e/0x190 [ 371.239471][T16479] rest_init+0x23/0x300 [ 371.244150][T16479] start_kernel+0x0/0x53f [ 371.248992][T16479] start_kernel+0x496/0x53f [ 371.254037][T16479] secondary_startup_64_no_verify+0xcf/0xdb [ 371.260441][T16479] [ 371.260441][T16479] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 371.267738][T16479] lock_acquire+0x1f8/0x5a0 [ 371.272748][T16479] _raw_spin_lock_irqsave+0xd1/0x120 [ 371.278585][T16479] try_to_wake_up+0xad/0x12e0 [ 371.283768][T16479] rcu_read_unlock_special+0x3d2/0x540 [ 371.289768][T16479] __rcu_read_unlock+0x92/0x100 [ 371.295159][T16479] get_mem_cgroup_from_mm+0x19f/0x290 [ 371.301054][T16479] get_mm_memcg_path+0x1b/0x600 [ 371.306412][T16479] __mmap_lock_do_trace_acquire_returned+0x12f/0x670 [ 371.313589][T16479] lock_mm_and_find_vma+0x219/0x2e0 [ 371.319290][T16479] exc_page_fault+0x169/0x620 [ 371.324479][T16479] asm_exc_page_fault+0x22/0x30 [ 371.329841][T16479] copy_user_enhanced_fast_string+0xa/0x40 [ 371.336153][T16479] _copy_from_iter+0x2c2/0xff0 [ 371.341428][T16479] copy_page_from_iter+0x76/0x100 [ 371.346955][T16479] pipe_write+0x857/0x1af0 [ 371.351873][T16479] vfs_write+0x7ae/0xba0 [ 371.356615][T16479] ksys_write+0x19c/0x2c0 [ 371.361531][T16479] do_syscall_64+0x3b/0xb0 [ 371.366452][T16479] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 371.372856][T16479] [ 371.372856][T16479] -> #0 (lock#10){+.+.}-{2:2}: [ 371.379806][T16479] validate_chain+0x1661/0x5950 [ 371.385161][T16479] __lock_acquire+0x125b/0x1f80 [ 371.390515][T16479] lock_acquire+0x1f8/0x5a0 [ 371.395536][T16479] __mmap_lock_do_trace_acquire_returned+0x9d/0x670 [ 371.402637][T16479] stack_map_get_build_id_offset+0x99e/0x9c0 [ 371.409122][T16479] __bpf_get_stack+0x495/0x570 [ 371.414389][T16479] bpf_get_stack_raw_tp+0x1b2/0x220 [ 371.420273][T16479] bpf_prog_ec3b2eefa702d8d3+0x3a/0x3e [ 371.426254][T16479] bpf_trace_run2+0x1fd/0x410 [ 371.431441][T16479] trace_tlb_flush+0x151/0x1a0 [ 371.436797][T16479] switch_mm_irqs_off+0x84a/0xc20 [ 371.442324][T16479] __schedule+0x1140/0x4550 [ 371.447331][T16479] preempt_schedule_common+0x83/0xd0 [ 371.453129][T16479] preempt_schedule+0xd9/0xe0 [ 371.458311][T16479] preempt_schedule_thunk+0x16/0x18 [ 371.464010][T16479] _raw_spin_unlock+0x36/0x40 [ 371.469201][T16479] __text_poke+0x81a/0x9a0 [ 371.474120][T16479] text_poke_bp_batch+0x153/0x940 [ 371.479644][T16479] text_poke_finish+0x16/0x30 [ 371.484919][T16479] arch_jump_label_transform_apply+0x13/0x20 [ 371.491410][T16479] static_key_enable_cpuslocked+0x12e/0x250 [ 371.497819][T16479] static_key_enable+0x16/0x20 [ 371.503087][T16479] tracepoint_add_func+0x947/0x9d0 [ 371.508697][T16479] tracepoint_probe_register_prio_may_exist+0x11e/0x190 [ 371.516132][T16479] bpf_raw_tp_link_attach+0x456/0x6b0 [ 371.522100][T16479] bpf_raw_tracepoint_open+0x196/0x210 [ 371.528062][T16479] __sys_bpf+0x4a7/0x6c0 [ 371.532808][T16479] __x64_sys_bpf+0x78/0x90 [ 371.537728][T16479] do_syscall_64+0x3b/0xb0 [ 371.542738][T16479] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 371.549225][T16479] [ 371.549225][T16479] other info that might help us debug this: [ 371.549225][T16479] [ 371.559429][T16479] Chain exists of: [ 371.559429][T16479] lock#10 --> &p->pi_lock --> &rq->__lock [ 371.559429][T16479] [ 371.571077][T16479] Possible unsafe locking scenario: [ 371.571077][T16479] [ 371.578505][T16479] CPU0 CPU1 [ 371.583846][T16479] ---- ---- [ 371.589189][T16479] lock(&rq->__lock); [ 371.593262][T16479] lock(&p->pi_lock); [ 371.599853][T16479] lock(&rq->__lock); [ 371.606578][T16479] lock(lock#10); [ 371.610291][T16479] [ 371.610291][T16479] *** DEADLOCK *** [ 371.610291][T16479] [ 371.618501][T16479] 7 locks held by syz-executor.3/16479: [ 371.624024][T16479] #0: ffffffff8d171728 (tracepoints_mutex){+.+.}-{3:3}, at: tracepoint_probe_register_prio_may_exist+0xb7/0x190 [ 371.635927][T16479] #1: ffffffff8cfc80f0 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_enable+0xe/0x20 [ 371.645669][T16479] #2: ffffffff8d1c7348 (jump_label_mutex){+.+.}-{3:3}, at: static_key_enable_cpuslocked+0xcf/0x250 [ 371.656633][T16479] #3: ffffffff8cfdcfe8 (text_mutex){+.+.}-{3:3}, at: arch_jump_label_transform_apply+0xe/0x20 [ 371.666974][T16479] #4: ffff8880b993aa18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 371.676876][T16479] #5: ffffffff8d12acc0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x110/0x410 [ 371.686265][T16479] #6: ffff88807e6f4c58 (&mm->mmap_lock){++++}-{3:3}, at: stack_map_get_build_id_offset+0x232/0x9c0 [ 371.697034][T16479] [ 371.697034][T16479] stack backtrace: [ 371.702936][T16479] CPU: 1 PID: 16479 Comm: syz-executor.3 Not tainted 6.1.93-syzkaller #0 [ 371.711325][T16479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 371.721388][T16479] Call Trace: [ 371.724670][T16479] [ 371.727706][T16479] dump_stack_lvl+0x1e3/0x2cb [ 371.732384][T16479] ? nf_tcp_handle_invalid+0x642/0x642 [ 371.737842][T16479] ? print_circular_bug+0x12b/0x1a0 [ 371.743048][T16479] check_noncircular+0x2fa/0x3b0 [ 371.747967][T16479] ? perf_swevent_get_recursion_context+0xdf/0x150 [ 371.754552][T16479] ? add_chain_block+0x850/0x850 [ 371.759473][T16479] ? lockdep_lock+0x11f/0x2a0 [ 371.764143][T16479] ? trace_event_raw_event_lock+0x240/0x240 [ 371.770024][T16479] validate_chain+0x1661/0x5950 [ 371.774880][T16479] ? reacquire_held_locks+0x660/0x660 [ 371.780242][T16479] ? perf_trace_buf_alloc+0x12a/0x2e0 [ 371.785602][T16479] ? perf_swevent_get_recursion_context+0xdf/0x150 [ 371.792099][T16479] ? mark_lock+0x9a/0x340 [ 371.796419][T16479] __lock_acquire+0x125b/0x1f80 [ 371.801269][T16479] lock_acquire+0x1f8/0x5a0 [ 371.805759][T16479] ? __mmap_lock_do_trace_acquire_returned+0x84/0x670 [ 371.812509][T16479] ? trace_call_bpf+0xbe/0x6a0 [ 371.817277][T16479] ? __lock_acquire+0x1f80/0x1f80 [ 371.822308][T16479] ? read_lock_is_recursive+0x10/0x10 [ 371.827762][T16479] ? migrate_enable+0x1a2/0x290 [ 371.832702][T16479] ? exc_int3+0xa/0x70 [ 371.836756][T16479] ? asm_exc_int3+0x35/0x40 [ 371.841253][T16479] ? __mmap_lock_do_trace_acquire_returned+0x84/0x670 [ 371.848274][T16479] __mmap_lock_do_trace_acquire_returned+0x9d/0x670 [ 371.854859][T16479] ? __mmap_lock_do_trace_acquire_returned+0x84/0x670 [ 371.861620][T16479] ? stack_map_get_build_id_offset+0x982/0x9c0 [ 371.867776][T16479] stack_map_get_build_id_offset+0x99e/0x9c0 [ 371.873745][T16479] ? __lock_acquire+0x125b/0x1f80 [ 371.878795][T16479] ? __bpf_get_stackid+0x910/0x910 [ 371.883932][T16479] __bpf_get_stack+0x495/0x570 [ 371.888784][T16479] ? stack_map_get_build_id_offset+0x9c0/0x9c0 [ 371.894950][T16479] ? psi_task_switch+0x3a3/0x770 [ 371.899879][T16479] ? __cant_sleep+0x270/0x270 [ 371.904542][T16479] bpf_get_stack_raw_tp+0x1b2/0x220 [ 371.909765][T16479] bpf_prog_ec3b2eefa702d8d3+0x3a/0x3e [ 371.915217][T16479] bpf_trace_run2+0x1fd/0x410 [ 371.919908][T16479] ? bpf_trace_run2+0x110/0x410 [ 371.924765][T16479] ? bpf_trace_run1+0x3d0/0x3d0 [ 371.929606][T16479] ? __perf_event_task_sched_out+0xb19/0xc60 [ 371.935603][T16479] trace_tlb_flush+0x151/0x1a0 [ 371.940444][T16479] switch_mm_irqs_off+0x84a/0xc20 [ 371.945472][T16479] ? psi_task_switch+0x340/0x770 [ 371.950396][T16479] ? switch_mm+0x190/0x190 [ 371.954815][T16479] __schedule+0x1140/0x4550 [ 371.959305][T16479] ? perf_trace_run_bpf_submit+0x12c/0x1d0 [ 371.965109][T16479] ? perf_trace_lock+0x37f/0x440 [ 371.970057][T16479] ? __sched_text_start+0x8/0x8 [ 371.974906][T16479] ? preempt_schedule+0xd9/0xe0 [ 371.979785][T16479] preempt_schedule_common+0x83/0xd0 [ 371.985072][T16479] preempt_schedule+0xd9/0xe0 [ 371.989743][T16479] ? schedule_preempt_disabled+0x20/0x20 [ 371.995366][T16479] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 372.002052][T16479] ? lockdep_hardirqs_on+0x94/0x130 [ 372.007266][T16479] preempt_schedule_thunk+0x16/0x18 [ 372.012581][T16479] _raw_spin_unlock+0x36/0x40 [ 372.017256][T16479] ? stack_map_get_build_id_offset+0x23e/0x9c0 [ 372.023451][T16479] __text_poke+0x81a/0x9a0 [ 372.027982][T16479] ? stack_map_get_build_id_offset+0x23e/0x9c0 [ 372.034128][T16479] ? __text_poke+0x9a0/0x9a0 [ 372.038704][T16479] ? text_poke+0x90/0x90 [ 372.042946][T16479] ? read_lock_is_recursive+0x10/0x10 [ 372.048302][T16479] ? __mutex_trylock_common+0x17e/0x2e0 [ 372.053832][T16479] ? __might_sleep+0xb0/0xb0 [ 372.058407][T16479] ? trace_raw_output_contention_end+0xd0/0xd0 [ 372.064555][T16479] ? xdp_umem_create+0x89e/0xea0 [ 372.069575][T16479] ? stack_map_get_build_id_offset+0x23e/0x9c0 [ 372.075798][T16479] text_poke_bp_batch+0x153/0x940 [ 372.080836][T16479] ? arch_jump_label_transform_apply+0xe/0x20 [ 372.086903][T16479] ? text_poke_loc_init+0x680/0x680 [ 372.092097][T16479] ? arch_jump_label_transform_queue+0x7d/0xd0 [ 372.098262][T16479] text_poke_finish+0x16/0x30 [ 372.102924][T16479] arch_jump_label_transform_apply+0x13/0x20 [ 372.108982][T16479] static_key_enable_cpuslocked+0x12e/0x250 [ 372.114858][T16479] ? __bpf_trace_mmap_lock+0x30/0x30 [ 372.120124][T16479] static_key_enable+0x16/0x20 [ 372.124871][T16479] tracepoint_add_func+0x947/0x9d0 [ 372.129996][T16479] ? __bpf_trace_mmap_lock+0x30/0x30 [ 372.135288][T16479] tracepoint_probe_register_prio_may_exist+0x11e/0x190 [ 372.142227][T16479] ? acct_clear_integrals+0x30/0x30 [ 372.147502][T16479] ? __bpf_trace_mmap_lock+0x30/0x30 [ 372.152782][T16479] ? anon_inode_getfile+0xfb/0x180 [ 372.157986][T16479] ? bpf_probe_register+0x10f/0x1d0 [ 372.163178][T16479] bpf_raw_tp_link_attach+0x456/0x6b0 [ 372.168543][T16479] ? bpf_insn_prepare_dump+0x950/0x950 [ 372.174029][T16479] bpf_raw_tracepoint_open+0x196/0x210 [ 372.179504][T16479] __sys_bpf+0x4a7/0x6c0 [ 372.183738][T16479] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 372.189103][T16479] ? print_irqtrace_events+0x210/0x210 [ 372.194549][T16479] ? print_irqtrace_events+0x210/0x210 [ 372.200170][T16479] ? syscall_enter_from_user_mode+0x2e/0x230 [ 372.206132][T16479] ? lockdep_hardirqs_on+0x94/0x130 [ 372.211327][T16479] __x64_sys_bpf+0x78/0x90 [ 372.215733][T16479] do_syscall_64+0x3b/0xb0 [ 372.220243][T16479] ? clear_bhb_loop+0x45/0xa0 [ 372.224904][T16479] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 372.230870][T16479] RIP: 0033:0x7fea0f87cea9 [ 372.235464][T16479] Code: Unable to access opcode bytes at 0x7fea0f87ce7f. [ 372.242472][T16479] RSP: 002b:00007fea106e90c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 2024/06/14 20:40:29 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 372.250953][T16479] RAX: ffffffffffffffda RBX: 00007fea0f9b3f80 RCX: 00007fea0f87cea9 [ 372.258905][T16479] RDX: 0000000000000010 RSI: 0000000020000180 RDI: 0000000000000011 [ 372.266870][T16479] RBP: 00007fea0f8ebff4 R08: 0000000000000000 R09: 0000000000000000 [ 372.274821][T16479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 372.282842][T16479] R13: 000000000000000b R14: 00007fea0f9b3f80 R15: 00007ffee222c0a8 [ 372.290837][T16479]