last executing test programs: 13.028911933s ago: executing program 2 (id=5717): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0xf}, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2c00}}, &(0x7f0000000600)='GPL\x00', 0x6, 0x66, &(0x7f00000006c0)=""/102, 0x41100, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) 12.587858088s ago: executing program 2 (id=5720): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x1, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00'}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) 11.355725018s ago: executing program 1 (id=5723): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x801}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r6, 0x18000000000002a0, 0xe40, 0x2, &(0x7f00000002c0)="f6eb094549002060009b8538a4ba07", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="09000000070000000080000001", @ANYRES16=0x0, @ANYRES64=r1, @ANYRES64=r2, @ANYRES64=r2, @ANYRES16=r3, @ANYBLOB="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", @ANYBLOB="6ea12a17c05b64ed510827a5d0e94f19da4c4d5cb93cf038c1943ee693fe0016928305e958aab0fa65ba0f54cb60330dec49a9a732365183d8e1744b971eb46b995c2d3647d610633bd1c5284aabfb0d3d4db9e96b4ca3d80142e8acc1ca65e0d4d04f4fc0fd53dc56b510dc988a21216420256887cef6828bc56d0d29451ac4eed4b77683fc906a3d0d851767a7d8e33829e1ce3c9a469deef89d8fee6ffd871a9fcb695acddff17c4e5e4f583039581dd24bd7b7b1acd193f082a4a7b4c46c202262fc5d5ae6fba6e0d6e0fc2d8ca93ad8593cc0286fe87065765d2ec5c4a5c3c336b34563a8d1f4366210def00250d95d31fa8462326a", @ANYRESDEC=r2], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r7}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x18) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r9, 0xffffffffffffffff, 0x4, r8}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="36f71f958cd1928222039f67cd94", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.737322131s ago: executing program 2 (id=5725): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00'}, 0x10) r0 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000005c0)=r0, 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1, 0x12) 8.547509306s ago: executing program 1 (id=5727): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e00)={{r0}, &(0x7f0000000d80), 0x0}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0xb701, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r7, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 8.546845926s ago: executing program 2 (id=5729): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='kfree\x00', r1}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 8.314544905s ago: executing program 2 (id=5731): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f0000000040)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_page_alloc\x00', r3}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x43001000, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x5126880b685bb119) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x86, 0x1, 0x0, 0x0, 0x0, 0x4000, 0xa120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x302a0, 0x100000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r2, 0x0, 0x275a, 0x0) 7.088788314s ago: executing program 1 (id=5734): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x8, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_clone(0x180080000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)="15f23d99893f99484808f9f806") bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x1d, &(0x7f00000001c0), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5.162999501s ago: executing program 1 (id=5739): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$inet(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x20000000) 4.873586094s ago: executing program 1 (id=5741): ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000040)=0x1) 4.656876342s ago: executing program 1 (id=5742): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2020, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x4}, 0x2020, 0x0, 0x0, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x1ffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x7, 0x4, 0x80, 0xe, 0x28}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x18000000000002a0, 0x7ee, 0x0, &(0x7f0000000e80)="b9e403c6631e39495aa05dc7cf1c", 0x0, 0x7ab, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000740)=0xffffffffffffffff, 0x4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x13, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18670000010000000000000008000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000a12aa500000018000000040000000000000007000000180000000900000000000000060000008b52b3df147274f271c17e9a376b5ea26846dfd4be89687b051170b5a260dc122b"], &(0x7f0000000500)='GPL\x00', 0xffff, 0x7d, &(0x7f0000000600)=""/125, 0x41000, 0x47, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000007c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x4, 0x2, 0x3, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000980)=[r1, r0, r5, r2], 0x0, 0x10, 0x5}, 0x94) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a80)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0900000005000000fd090000840000000000000020dfb16ad205b30b36214f53ab5729f3334b974dc1fc8d017d0018e833a1f9566197cd5c06d5a387e0fa97f48b20892c1e967971b272fe420239edbd1af1414bdb91d43d9f85de3096d31af02f9f6cbead4bcdd565cef70fe7b90aa0e7d8504ffb430754bd61e4f5028ccccf408a41a4fd66c61571eb9cf8a22f6e3bfd0ec2", @ANYRES32, @ANYBLOB="feffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xd56}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) 3.827350409s ago: executing program 0 (id=5744): bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x8982, 0x20000500) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x0) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00'}, 0x10) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x4e}, 0x28) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000840)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB, @ANYRES64], 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="2d63707520a2fbfdbd963e6d6d64aa34d4236f3a28a3c4cecafd11885981b6388708f0789613"], 0x5) close(r7) 2.428211653s ago: executing program 0 (id=5747): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x8, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004f000000050000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x6, 0xd8, &(0x7f0000000180)=""/216}, 0x94) 2.34668276s ago: executing program 0 (id=5748): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x8, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_clone(0x180080000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)="15f23d99893f99484808f9f806") bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x1d, &(0x7f00000001c0), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.346398569s ago: executing program 3 (id=5749): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x18, 0x7fe2, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000980)}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000280)={r1, &(0x7f00000001c0), 0x0}, 0x20) 2.175726153s ago: executing program 3 (id=5750): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000040)=0x1) 1.439247763s ago: executing program 3 (id=5751): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 919.273096ms ago: executing program 0 (id=5752): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) bpf$PROG_BIND_MAP(0x23, 0x0, 0xfffffc4b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 805.445604ms ago: executing program 3 (id=5753): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x7, 0x4, 0x18, 0xa042, 0x0, 0xffffffffffffffff, 0x401}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000f40)={r0, 0x0, 0x0}, 0x20) 725.358241ms ago: executing program 3 (id=5754): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000000180)=@abs={0x1, 0x5c, 0x1}, 0x6e, 0x0}, 0x20000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000002c7b0af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180)) 558.775014ms ago: executing program 0 (id=5755): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0xd, &(0x7f00000000c0), 0x4f) socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="37008adda8aa000004000000", @ANYRES32, @ANYRES64=0x0], 0x20) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r2}, 0x18) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) write$cgroup_int(r3, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$kcm(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r5, 0x110, 0x6, 0x0, 0x19) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0, @ANYRES32], 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0xffffffffffffffff, 0x80000001, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x90}, 0x94) 8.367869ms ago: executing program 2 (id=5756): bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x8982, 0x20000500) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x0) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00'}, 0x10) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x4e}, 0x28) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000840)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB, @ANYRES64], 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="2d63707520a2fbfdbd963e6d6d64aa34d4236f3a28a3c4cecafd11885981b6388708f0789613"], 0x5) close(r7) 8.069339ms ago: executing program 3 (id=5757): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000200000000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) syz_clone(0x42160110, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=5764): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000009d000000010001000900000001"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001400)={{r0}, &(0x7f0000001380), &(0x7f00000013c0)='%pB \x00'}, 0x20) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0xfffffffffffffe00) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000238f00000000000000fcffffff950000000000000098bf911d8de05bc604e349ce8b34614067850cc90912eea53724b53dd6d9ebb3bffae83fb7b08803c23d56394eaa02e5399c38715bde20e9b0340a"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000713265c486de", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00'}, 0x10) socketpair(0x3, 0xa, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[], 0x48) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000200)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe, 0x2, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r3, 0x0, 0x8000000000000}, 0x9) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850020000000000018100000", @ANYRES32, @ANYBLOB="1700000000000000950000000000000045"], 0x0}, 0x90) kernel console output (not intermixed with test programs): B all_unreclaimable? no [ 186.541712][ T8738] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 186.607085][ T8738] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 186.632998][ T8738] Node 0 DMA32 free:1501992kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:21508kB inactive_anon:0kB active_file:4048kB inactive_file:158012kB unevictable:1536kB writepending:644kB present:3129332kB managed:2589592kB mlocked:0kB bounce:0kB free_pcp:14572kB local_pcp:6724kB free_cma:0kB [ 186.743168][ T8738] lowmem_reserve[]: 0 0 1 1 1 [ 186.755325][ T8738] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 186.789907][ T8738] lowmem_reserve[]: 0 0 0 0 0 [ 186.794904][ T8738] Node 1 Normal free:3891528kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:23416kB local_pcp:12984kB free_cma:0kB [ 186.882698][ T8738] lowmem_reserve[]: 0 0 0 0 0 [ 186.901882][ T8738] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 186.941703][ T8738] Node 0 DMA32: 24*4kB (UM) 715*8kB (U) 545*16kB (UME) 229*32kB (UME) 77*64kB (UME) 31*128kB (UME) 17*256kB (UM) 7*512kB (UME) 3*1024kB (UM) 3*2048kB (UME) 355*4096kB (M) = 1501992kB [ 186.969054][ T8738] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 186.984766][ T8738] Node 1 Normal: 202*4kB (UME) 38*8kB (UME) 23*16kB (UME) 24*32kB (UME) 12*64kB (UE) 7*128kB (UME) 2*256kB (UE) 2*512kB (UM) 1*1024kB (E) 1*2048kB (E) 948*4096kB (M) = 3891528kB [ 187.008996][ T8738] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 187.041172][ T8738] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 187.076262][ T8738] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 187.112514][ T8738] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 187.165865][ T8738] 42257 total pagecache pages [ 187.176023][ T8738] 0 pages in swap cache [ 187.205951][ T8738] Free swap = 124996kB [ 187.218780][ T8738] Total swap = 124996kB [ 187.237093][ T8738] 2097051 pages RAM [ 187.241360][ T8738] 0 pages HighMem/MovableOnly [ 187.246065][ T8738] 416139 pages reserved [ 187.273928][ T8738] 0 pages cma reserved [ 188.931212][ T8812] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1295'. [ 192.351756][ T8890] netlink: 'syz.3.1330': attribute type 64 has an invalid length. [ 192.922728][ T8907] netlink: 'syz.3.1341': attribute type 10 has an invalid length. [ 193.042669][ T5793] Bluetooth: hci1: unexpected event 0x1c length: 15 > 5 [ 194.186877][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.214109][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.835520][ T8953] netlink: 'syz.0.1360': attribute type 10 has an invalid length. [ 195.502138][ T8968] netlink: 'syz.1.1367': attribute type 17 has an invalid length. [ 195.511055][ T8968] netlink: 'syz.1.1367': attribute type 16 has an invalid length. [ 195.521136][ T8968] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1367'. [ 195.916233][ T8980] netlink: 'syz.3.1372': attribute type 10 has an invalid length. [ 196.257417][ T5104] Bluetooth: hci1: command 0x0406 tx timeout [ 196.266731][ T5104] Bluetooth: hci0: command 0x0406 tx timeout [ 198.673419][ T9052] netlink: 'syz.0.1402': attribute type 10 has an invalid length. [ 198.710262][ T48] tipc: Subscription rejected, illegal request [ 199.868653][ T9084] netlink: 'syz.1.1415': attribute type 10 has an invalid length. [ 199.998382][ T9088] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1417'. [ 200.110538][ T9084] team0: Port device wlan1 removed [ 200.270557][ T9084] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 202.770701][ T5793] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8 [ 203.274199][ T9167] netlink: 'syz.1.1449': attribute type 10 has an invalid length. [ 204.034665][ T9190] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1460'. [ 204.373996][ T9196] netlink: 'syz.3.1464': attribute type 10 has an invalid length. [ 204.609140][ T9200] netlink: 71 bytes leftover after parsing attributes in process `syz.2.1466'. [ 205.785114][ T5793] Bluetooth: hci1: unexpected event 0x12 length: 15 > 8 [ 205.911429][ T9240] netlink: 'syz.1.1483': attribute type 10 has an invalid length. [ 207.503242][ T5793] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8 [ 210.380944][ T9346] netlink: 'syz.2.1528': attribute type 10 has an invalid length. [ 214.244258][ T9483] netlink: 'syz.1.1586': attribute type 10 has an invalid length. [ 215.155244][ T9513] netlink: 'syz.1.1599': attribute type 10 has an invalid length. [ 215.923021][ T9544] netlink: 'syz.1.1610': attribute type 10 has an invalid length. [ 216.088543][ T5793] Bluetooth: hci1: unexpected event 0x12 length: 15 > 8 [ 217.510443][ T9604] netlink: 'syz.1.1634': attribute type 10 has an invalid length. [ 217.595428][ T5793] Bluetooth: hci1: unexpected event 0x12 length: 15 > 8 [ 218.683172][ T9647] netlink: 'syz.2.1654': attribute type 10 has an invalid length. [ 219.099610][ T5793] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8 [ 219.460546][ T9671] netlink: 'syz.1.1664': attribute type 10 has an invalid length. [ 220.581105][ T9703] netlink: 'syz.0.1676': attribute type 10 has an invalid length. [ 221.561104][ T9736] netlink: 'syz.2.1689': attribute type 10 has an invalid length. [ 222.567660][ T9776] netlink: 'syz.1.1704': attribute type 10 has an invalid length. [ 222.851283][ T9787] syzkaller0: create flow: hash 152456363 index 1 [ 223.150481][ T9781] syzkaller0: delete flow: hash 152456363 index 1 [ 225.958775][ T9849] netlink: 'syz.3.1735': attribute type 10 has an invalid length. [ 228.604106][ T5793] Bluetooth: hci1: unexpected event 0x12 length: 15 > 8 [ 228.877611][ T9971] netlink: 'syz.2.1789': attribute type 10 has an invalid length. [ 229.637880][T10000] netlink: 'syz.2.1803': attribute type 10 has an invalid length. [ 229.658014][T10000] batman_adv: batadv0: Adding interface: team0 [ 229.674462][T10000] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.736745][T10000] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 230.204122][ T5793] Bluetooth: hci1: unexpected event 0x12 length: 15 > 8 [ 232.248848][ T5793] Bluetooth: hci1: unexpected event 0x16 length: 15 > 6 [ 235.490727][T10227] netlink: 'syz.2.1910': attribute type 10 has an invalid length. [ 235.619138][T10236] netlink: 'syz.3.1914': attribute type 10 has an invalid length. [ 235.668489][T10236] batman_adv: batadv0: Adding interface: team0 [ 235.696818][T10236] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.735476][T10236] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 236.092569][ T5793] Bluetooth: hci0: unexpected event 0x14 length: 15 > 6 [ 236.790035][T10281] wg2: entered promiscuous mode [ 236.803379][T10281] wg2: entered allmulticast mode [ 236.869881][ T5793] Bluetooth: hci1: unexpected event 0x14 length: 15 > 6 [ 237.175529][T10294] netlink: 'syz.3.1939': attribute type 10 has an invalid length. [ 238.567369][T10348] syzkaller0: left promiscuous mode [ 238.572658][T10348] syzkaller0: left allmulticast mode [ 241.230616][ T5793] Bluetooth: hci1: unexpected event 0x12 length: 15 > 8 [ 246.374502][T10550] netlink: 192440 bytes leftover after parsing attributes in process `syz.3.2055'. [ 246.405129][T10550] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 247.734523][T10591] netlink: 'syz.1.2073': attribute type 28 has an invalid length. [ 248.858917][T10619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2085'. [ 248.876530][T10619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2085'. [ 248.894821][T10619] netlink: 33 bytes leftover after parsing attributes in process `syz.2.2085'. [ 248.922611][T10619] bridge_slave_0: entered allmulticast mode [ 248.936435][T10619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2085'. [ 248.954994][T10619] netlink: 33 bytes leftover after parsing attributes in process `syz.2.2085'. [ 254.552909][T10677] netlink: 'syz.1.2107': attribute type 1 has an invalid length. [ 254.571481][T10677] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.2107'. [ 254.751776][T10681] netlink: 'syz.3.2110': attribute type 10 has an invalid length. [ 255.622585][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.629733][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.259397][T10716] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2123'. [ 258.126203][T10716] bond0 (unregistering): (slave 30): Releasing backup interface [ 258.154531][T10716] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.183880][T10716] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 258.194871][T10716] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 258.205162][T10716] bond0 (unregistering): Released all slaves [ 258.235027][T10738] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2129'. [ 259.277896][T10772] netlink: 'syz.2.2144': attribute type 10 has an invalid length. [ 260.474437][T10802] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2157'. [ 260.733762][T10802] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.772421][T10802] bond_slave_0: left promiscuous mode [ 260.797977][T10802] bond_slave_0: left allmulticast mode [ 260.881461][T10802] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.915121][T10802] bond_slave_1: left promiscuous mode [ 260.928689][T10802] bond_slave_1: left allmulticast mode [ 261.002188][T10802] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 261.034297][T10802] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 261.058780][T10802] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 261.087751][T10802] bond0 (unregistering): Released all slaves [ 261.125047][T10810] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2159'. [ 261.457480][T10827] netlink: 'syz.2.2165': attribute type 10 has an invalid length. [ 262.128234][T10854] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2177'. [ 264.278397][T10908] netlink: 'syz.2.2196': attribute type 10 has an invalid length. [ 264.497143][T10918] syzkaller0: left promiscuous mode [ 264.508184][T10918] syzkaller0: left allmulticast mode [ 265.373755][T10934] netlink: 'syz.3.2209': attribute type 10 has an invalid length. [ 265.969809][T10956] netlink: 'syz.3.2219': attribute type 29 has an invalid length. [ 265.985870][T10956] netlink: 'syz.3.2219': attribute type 29 has an invalid length. [ 265.998291][T10956] netlink: 'syz.3.2219': attribute type 29 has an invalid length. [ 266.256126][T10963] netlink: 'syz.3.2221': attribute type 10 has an invalid length. [ 267.207598][T10994] netlink: 'syz.0.2235': attribute type 10 has an invalid length. [ 267.598590][T11010] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2241'. [ 268.122793][T11024] netlink: 'syz.0.2249': attribute type 10 has an invalid length. [ 268.374695][ T5793] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 269.077289][T11057] netlink: 'syz.1.2262': attribute type 10 has an invalid length. [ 269.198510][T11057] team0: Port device geneve1 added [ 269.218286][T11059] netlink: 'syz.2.2264': attribute type 10 has an invalid length. [ 269.492117][T11070] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2268'. [ 270.102530][T11086] netlink: 'syz.0.2277': attribute type 10 has an invalid length. [ 270.254374][T11095] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2281'. [ 270.294551][ T5793] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 270.975455][T11113] netlink: 'syz.1.2285': attribute type 10 has an invalid length. [ 271.086268][T11113] veth1_vlan: entered allmulticast mode [ 271.181065][T11113] team0: Device veth1_vlan failed to register rx_handler [ 271.366015][T11122] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2291'. [ 272.001443][T11140] netlink: 'syz.0.2297': attribute type 10 has an invalid length. [ 272.021210][T11144] netlink: 'syz.2.2300': attribute type 29 has an invalid length. [ 272.909229][T11140] team0: Port device geneve1 added [ 272.922324][T11144] netlink: 'syz.2.2300': attribute type 29 has an invalid length. [ 273.184643][T11160] netlink: 'syz.2.2307': attribute type 10 has an invalid length. [ 273.513281][T11173] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2312'. [ 273.882748][T11184] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2317'. [ 274.251465][T11189] netlink: 'syz.1.2320': attribute type 10 has an invalid length. [ 274.590063][ T5794] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 274.602332][ T5794] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 274.610602][ T5794] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 274.626277][ T5794] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 274.633937][ T5794] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 274.643844][ T5794] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 274.870611][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.161490][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.182151][T11210] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2327'. [ 275.341625][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.822550][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.130400][T11225] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2331'. [ 276.215488][T11198] chnl_net:caif_netlink_parms(): no params data found [ 276.588528][T11198] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.595811][T11198] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.613634][T11198] bridge_slave_0: entered allmulticast mode [ 276.625217][T11198] bridge_slave_0: entered promiscuous mode [ 276.648087][T11242] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2336'. [ 276.678168][T11198] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.692216][T11198] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.699869][T11198] bridge_slave_1: entered allmulticast mode [ 276.718006][T11198] bridge_slave_1: entered promiscuous mode [ 276.736936][ T5794] Bluetooth: hci1: command tx timeout [ 277.044883][T11198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.071194][T11257] netlink: 'syz.2.2338': attribute type 10 has an invalid length. [ 277.083989][T11260] netlink: 'syz.3.2340': attribute type 10 has an invalid length. [ 277.104533][T11260] veth1_vlan: entered allmulticast mode [ 277.168427][T11260] team0: Device veth1_vlan failed to register rx_handler [ 277.289239][T11198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.503476][T11198] team0: Port device team_slave_0 added [ 277.573235][T11198] team0: Port device team_slave_1 added [ 277.665662][T11198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.689702][T11198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.715934][T11198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.778790][T11198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.791552][T11198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.825034][T11198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.899979][T11276] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2350'. [ 277.995232][T11279] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2342'. [ 278.183975][T11198] hsr_slave_0: entered promiscuous mode [ 278.209804][T11198] hsr_slave_1: entered promiscuous mode [ 278.234385][T11198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 278.264758][T11198] Cannot create hsr debugfs directory [ 278.816806][ T5794] Bluetooth: hci1: command tx timeout [ 278.856057][T11303] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2347'. [ 279.077004][ T12] bond0: (slave wlan1): Releasing backup interface [ 279.146926][T11313] wg2: entered promiscuous mode [ 279.156787][T11313] wg2: entered allmulticast mode [ 279.383580][T11318] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2353'. [ 279.566133][ T12] hsr_slave_0: left promiscuous mode [ 279.578631][ T12] hsr_slave_1: left promiscuous mode [ 279.585748][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.612330][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.626457][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.635949][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.861527][ T12] veth1_macvtap: left promiscuous mode [ 279.877004][ T12] veth0_macvtap: left promiscuous mode [ 279.882740][ T12] veth1_vlan: left promiscuous mode [ 279.902810][ T12] veth0_vlan: left promiscuous mode [ 280.896902][ T5794] Bluetooth: hci1: command tx timeout [ 282.202129][ T12] team0 (unregistering): Port device geneve1 removed [ 282.543148][ T12] team0 (unregistering): Port device team_slave_1 removed [ 282.595114][ T12] team0 (unregistering): Port device team_slave_0 removed [ 282.641686][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.677627][ T12] bond0 (unregistering): (slave 30): Releasing backup interface [ 282.977431][ T5794] Bluetooth: hci1: command tx timeout [ 283.059478][ T12] bond0 (unregistering): Released all slaves [ 283.614724][T11198] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 283.626500][T11198] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 283.637950][T11198] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 283.648672][T11198] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 283.763126][T11198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.811270][T11198] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.833732][ T992] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.840939][ T992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.854969][ T992] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.862655][ T992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.169419][T11198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.252396][T11198] veth0_vlan: entered promiscuous mode [ 284.282449][T11198] veth1_vlan: entered promiscuous mode [ 284.329278][T11198] veth0_macvtap: entered promiscuous mode [ 284.345680][T11198] veth1_macvtap: entered promiscuous mode [ 284.370294][T11198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.381804][T11198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.395107][T11198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.408310][T11198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.429291][T11198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.440498][T11198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.458230][T11198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.481258][T11198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.496799][T11198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.513225][T11198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.526262][T11198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.536318][T11198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.547197][T11198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.558689][T11198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.576261][T11198] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.590412][T11198] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.600758][T11198] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.614393][T11198] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.737601][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.745578][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.805783][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.815551][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.059251][T11389] syzkaller0: entered promiscuous mode [ 285.065987][T11389] syzkaller0: entered allmulticast mode [ 285.742118][T11407] netlink: 'syz.0.2358': attribute type 10 has an invalid length. [ 285.990913][T11407] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 286.040300][T11427] syzkaller0: entered promiscuous mode [ 286.045859][T11427] syzkaller0: entered allmulticast mode [ 286.982871][T11455] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2372'. [ 287.796383][T11480] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2379'. [ 288.201336][ T5793] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 288.213027][ T5793] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 288.221814][ T5793] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 288.232004][ T5793] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 288.240206][ T5793] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 288.248513][ T5793] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 288.402408][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.549821][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.083000][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.191083][T11517] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2385'. [ 289.874907][T11494] chnl_net:caif_netlink_parms(): no params data found [ 290.032636][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.083945][T11534] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2389'. [ 290.337476][ T5793] Bluetooth: hci2: command tx timeout [ 290.499745][T11494] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.536224][T11494] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.568761][T11494] bridge_slave_0: entered allmulticast mode [ 290.575423][T11494] bridge_slave_0: entered promiscuous mode [ 290.588463][T11494] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.595840][T11494] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.616167][T11494] bridge_slave_1: entered allmulticast mode [ 290.625778][T11494] bridge_slave_1: entered promiscuous mode [ 290.811628][T11494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.895844][T11494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.237272][T11494] team0: Port device team_slave_0 added [ 291.253409][T11494] team0: Port device team_slave_1 added [ 291.369456][T11565] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 291.440763][T11569] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 291.537763][T11494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.544877][T11494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.631566][T11494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.753681][T11494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.785344][T11494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.849232][T11494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.096058][T11594] netlink: 'syz.2.2405': attribute type 10 has an invalid length. [ 292.135681][T11494] hsr_slave_0: entered promiscuous mode [ 292.156339][T11494] hsr_slave_1: entered promiscuous mode [ 292.164011][T11494] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 292.176999][T11494] Cannot create hsr debugfs directory [ 292.416873][ T5793] Bluetooth: hci2: command tx timeout [ 292.753555][T11614] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2413'. [ 292.773015][T11614] openvswitch: netlink: Flow actions attr not present in new flow. [ 293.343747][ T12] hsr_slave_0: left promiscuous mode [ 293.392353][ T12] hsr_slave_1: left promiscuous mode [ 293.412445][ T12] batman_adv: batadv0: Removing interface: team0 [ 293.436308][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.446131][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.497819][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.513686][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.551912][ T12] veth1_macvtap: left promiscuous mode [ 293.564532][ T12] veth0_macvtap: left promiscuous mode [ 293.580797][ T12] veth0_vlan: left promiscuous mode [ 294.267510][ T12] team0 (unregistering): Port device team_slave_1 removed [ 294.310262][ T12] team0 (unregistering): Port device team_slave_0 removed [ 294.498853][ T5793] Bluetooth: hci2: command tx timeout [ 294.688019][T11632] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2416'. [ 294.725513][T11643] netlink: 'syz.2.2417': attribute type 10 has an invalid length. [ 295.422696][T11494] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 295.480181][T11494] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 295.525575][T11494] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 295.575033][T11494] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 295.701830][T11682] netlink: 'syz.2.2431': attribute type 10 has an invalid length. [ 295.964603][T11494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.097072][T11494] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.142690][ T992] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.149969][ T992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.189073][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.196296][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.614780][ T5793] Bluetooth: hci2: command tx timeout [ 296.686988][T11719] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2440'. [ 296.775197][T11723] netlink: 'syz.1.2441': attribute type 10 has an invalid length. [ 297.229524][T11494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.384756][T11494] veth0_vlan: entered promiscuous mode [ 297.403215][T11494] veth1_vlan: entered promiscuous mode [ 297.512645][T11494] veth0_macvtap: entered promiscuous mode [ 297.535946][T11494] veth1_macvtap: entered promiscuous mode [ 297.600903][T11494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.622199][T11494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.656639][T11494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.679244][T11494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.699580][T11494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.715952][T11494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.746459][T11494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.799502][T11494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.850238][T11494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.883900][T11494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.943484][T11494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.973873][T11494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.996653][T11494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.018451][T11494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.055453][T11494] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.085306][T11494] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.128692][T11494] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.156816][T11494] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.201460][T11765] netlink: 'syz.1.2451': attribute type 10 has an invalid length. [ 298.519442][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.534866][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.578424][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.586315][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.658713][T11781] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2455'. [ 299.647252][T11781] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.698291][T11781] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.896283][T11781] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 299.976234][ T5794] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 299.987187][ T5794] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 299.995357][ T5794] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 300.015103][T11781] bond0 (unregistering): Released all slaves [ 300.027005][ T5794] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 300.046790][ T5794] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 300.057433][ T5794] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 300.652094][ T4862] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.670617][T11821] netlink: 'syz.0.2466': attribute type 10 has an invalid length. [ 300.678825][T11829] netlink: 'syz.1.2468': attribute type 10 has an invalid length. [ 300.766030][T11829] team0: Device veth0_vlan failed to register rx_handler [ 300.911917][ T4862] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.004887][ T4862] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.183675][ T4862] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.325188][T11848] netlink: 'syz.0.2472': attribute type 10 has an invalid length. [ 301.367363][T11848] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2472'. [ 301.405782][T11848] batman_adv: batadv0: Adding interface: virt_wifi0 [ 301.426641][T11848] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.455146][T11848] batman_adv: batadv0: Interface activated: virt_wifi0 [ 301.478172][T11851] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2477'. [ 301.802294][T11851] bond0 (unregistering): (slave 30): Releasing backup interface [ 301.830445][T11851] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 301.844065][T11851] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 301.860522][T11851] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 301.869382][T11851] bond0 (unregistering): Released all slaves [ 301.896696][T11813] chnl_net:caif_netlink_parms(): no params data found [ 301.916425][T11858] netlink: 'syz.0.2480': attribute type 10 has an invalid length. [ 301.961607][T11858] team0: Port device macvlan1 added [ 301.970402][T11862] bridge_slave_1: left allmulticast mode [ 301.976152][T11862] bridge_slave_1: left promiscuous mode [ 301.989573][T11862] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.000297][T11862] bridge_slave_0: left allmulticast mode [ 302.006073][T11862] bridge_slave_0: left promiscuous mode [ 302.012787][T11862] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.096722][ T5794] Bluetooth: hci0: command tx timeout [ 302.349040][T11867] netlink: 'syz.1.2484': attribute type 10 has an invalid length. [ 302.377323][T11813] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.384753][T11813] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.392100][T11813] bridge_slave_0: entered allmulticast mode [ 302.399794][T11813] bridge_slave_0: entered promiscuous mode [ 302.411359][T11813] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.421090][T11813] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.428378][T11813] bridge_slave_1: entered allmulticast mode [ 302.435878][T11813] bridge_slave_1: entered promiscuous mode [ 302.771547][T11813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.919812][T11813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.169417][T11813] team0: Port device team_slave_0 added [ 303.312795][T11813] team0: Port device team_slave_1 added [ 303.616155][T11903] netlink: 'syz.0.2495': attribute type 10 has an invalid length. [ 303.630081][T11903] veth0_vlan: entered allmulticast mode [ 303.715113][T11903] veth0_vlan: left promiscuous mode [ 303.731405][T11903] veth0_vlan: entered promiscuous mode [ 303.749263][T11903] team0: Device veth0_vlan failed to register rx_handler [ 303.817423][T11813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.830219][T11813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.883417][T11813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.900354][T11813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.907634][T11813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.934284][T11813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.968450][T11906] netlink: 'syz.1.2494': attribute type 10 has an invalid length. [ 304.120268][T11813] hsr_slave_0: entered promiscuous mode [ 304.140086][T11813] hsr_slave_1: entered promiscuous mode [ 304.152358][T11813] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 304.162423][T11813] Cannot create hsr debugfs directory [ 304.178484][ T5794] Bluetooth: hci0: command tx timeout [ 304.223436][T11914] netlink: 'syz.1.2496': attribute type 10 has an invalid length. [ 304.251662][T11914] team0: Port device macvlan1 added [ 304.803342][T11934] netlink: 'syz.3.2505': attribute type 10 has an invalid length. [ 304.822376][T11934] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2505'. [ 304.846480][T11934] batman_adv: batadv0: Adding interface: virt_wifi0 [ 304.853740][T11934] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.887169][T11934] batman_adv: batadv0: Interface activated: virt_wifi0 [ 304.895898][T11935] netlink: 'syz.1.2504': attribute type 10 has an invalid length. [ 305.117387][ T4862] hsr_slave_0: left promiscuous mode [ 305.145480][ T4862] hsr_slave_1: left promiscuous mode [ 305.155790][ T4862] batman_adv: batadv0: Removing interface: team0 [ 305.175842][ T4862] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.216672][ T4862] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.323358][ T4862] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.366970][ T4862] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.476979][ T4862] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 305.487087][ T4862] batman_adv: batadv0: Removing interface: hsr_slave_1 [ 305.554810][ T4862] veth1_macvtap: left promiscuous mode [ 305.560647][ T4862] veth0_macvtap: left promiscuous mode [ 305.566457][ T4862] veth1_vlan: left promiscuous mode [ 305.582397][ T4862] veth0_vlan: left promiscuous mode [ 306.267186][ T5794] Bluetooth: hci0: command tx timeout [ 307.584366][ T4862] team0 (unregistering): Port device team_slave_1 removed [ 307.625492][ T4862] team0 (unregistering): Port device team_slave_0 removed [ 308.087564][T11959] wg2: entered promiscuous mode [ 308.092501][T11959] wg2: entered allmulticast mode [ 308.277126][T11970] netlink: 'syz.0.2520': attribute type 10 has an invalid length. [ 308.339211][ T5794] Bluetooth: hci0: command tx timeout [ 308.363971][T11970] veth0_vlan: left promiscuous mode [ 308.382248][T11970] veth0_vlan: entered promiscuous mode [ 308.415374][T11970] team0: Device veth0_vlan failed to register rx_handler [ 308.982409][T11985] netlink: 'syz.1.2519': attribute type 10 has an invalid length. [ 310.104929][T11813] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 310.155066][T11813] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 310.179418][T11813] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 310.224651][T11813] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 310.522734][T11813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.670272][T11813] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.764242][ T992] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.771674][ T992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.803312][ T992] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.810602][ T992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.847047][T12032] netlink: 'syz.1.2529': attribute type 10 has an invalid length. [ 311.146315][T12054] netlink: 'syz.1.2534': attribute type 10 has an invalid length. [ 311.288918][T12054] team0: Device veth0_vlan failed to register rx_handler [ 311.629679][T12054] syz.1.2534 (12054) used greatest stack depth: 18352 bytes left [ 311.898181][T11813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.289612][T11813] veth0_vlan: entered promiscuous mode [ 312.343953][T11813] veth1_vlan: entered promiscuous mode [ 312.405879][T11813] veth0_macvtap: entered promiscuous mode [ 312.452634][T11813] veth1_macvtap: entered promiscuous mode [ 312.522497][T11813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.553797][T11813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.606640][T11813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.636623][T11813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.646503][T11813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.663359][T11813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.698443][T11813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 312.772049][T11813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.808776][T11813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.838863][T11813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.854919][T11813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.879907][T11813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.948009][T11813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.998953][T11813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.013097][T12110] bridge_slave_1: left allmulticast mode [ 313.031196][T12110] bridge_slave_1: left promiscuous mode [ 313.052036][T12110] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.118476][T12110] bridge_slave_0: left allmulticast mode [ 313.124203][T12110] bridge_slave_0: left promiscuous mode [ 313.137774][T12110] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.331551][T11813] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.377381][T11813] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.386147][T11813] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.426637][T11813] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.658543][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.692328][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.775330][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.798438][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.032123][T12155] delete_channel: no stack [ 315.767406][ T5793] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 315.778971][ T5793] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 315.788059][ T5793] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 315.803329][ T5793] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 315.812508][ T5793] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 315.821584][ T5793] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 316.581262][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.764264][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.911289][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.955527][T12196] Ÿë: port 1(syz_tun) entered blocking state [ 316.963479][T12196] Ÿë: port 1(syz_tun) entered disabled state [ 316.970514][T12196] syz_tun: entered allmulticast mode [ 316.979197][T12196] syz_tun: entered promiscuous mode [ 317.025017][ T12] team0: Port device netdevsim0 removed [ 317.045701][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.067166][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.073512][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.381487][T12208] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 317.400840][T12208] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 317.472371][T12215] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.2575'. [ 317.739442][T12178] chnl_net:caif_netlink_parms(): no params data found [ 317.857512][ T5793] Bluetooth: hci3: command tx timeout [ 318.089183][T12178] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.096457][T12178] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.126903][T12178] bridge_slave_0: entered allmulticast mode [ 318.133683][T12178] bridge_slave_0: entered promiscuous mode [ 318.153746][T12178] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.166880][T12178] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.174724][T12178] bridge_slave_1: entered allmulticast mode [ 318.188279][T12178] bridge_slave_1: entered promiscuous mode [ 318.319798][T12178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.359407][T12178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.465971][T12244] Ÿë: port 1(syz_tun) entered blocking state [ 318.480004][T12244] Ÿë: port 1(syz_tun) entered disabled state [ 318.486482][T12244] syz_tun: entered allmulticast mode [ 318.495888][T12244] syz_tun: entered promiscuous mode [ 318.529011][T12178] team0: Port device team_slave_0 added [ 318.551578][T12178] team0: Port device team_slave_1 added [ 318.595572][T12178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.609942][T12178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.684762][T12178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.710475][T12178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.718201][T12178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.757049][T12178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.978385][T12178] hsr_slave_0: entered promiscuous mode [ 318.985486][T12178] hsr_slave_1: entered promiscuous mode [ 318.997198][T12254] netlink: 'syz.0.2590': attribute type 29 has an invalid length. [ 319.037962][T12254] netlink: 'syz.0.2590': attribute type 29 has an invalid length. [ 319.939951][ T5793] Bluetooth: hci3: command tx timeout [ 320.338547][T12178] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 320.445913][T12178] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 320.472998][T12178] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 320.662664][T12178] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 321.566932][T12322] netlink: 'syz.0.2608': attribute type 10 has an invalid length. [ 321.606951][T12322] veth0_vlan: left promiscuous mode [ 321.628975][T12322] veth0_vlan: entered promiscuous mode [ 321.665916][T12322] team0: Device veth0_vlan failed to register rx_handler [ 321.811841][T12178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.825148][ T12] vlan0: left allmulticast mode [ 321.841342][ T12] vlan0: left promiscuous mode [ 321.857375][ T12] À: port 1(vlan0) entered disabled state [ 321.982502][ T12] hsr_slave_0: left promiscuous mode [ 322.017704][ T12] hsr_slave_1: left promiscuous mode [ 322.019164][ T5793] Bluetooth: hci3: command tx timeout [ 322.029675][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.049870][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.059190][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.154112][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.267687][ T12] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 322.287241][ T12] batman_adv: batadv0: Removing interface: hsr_slave_1 [ 324.097830][ T5793] Bluetooth: hci3: command tx timeout [ 324.697585][ T12] team0 (unregistering): Port device geneve1 removed [ 324.732266][ T12] team0 (unregistering): Port device macvlan1 removed [ 324.979922][ T12] team0 (unregistering): Port device team_slave_1 removed [ 325.019463][ T12] team0 (unregistering): Port device team_slave_0 removed [ 325.436756][T12369] netlink: 'syz.0.2623': attribute type 10 has an invalid length. [ 325.545177][T12178] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.619920][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.627156][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.668502][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.675657][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.695342][T12371] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 325.702652][T12371] IPv6: NLM_F_CREATE should be set when creating new route [ 325.710027][T12371] IPv6: NLM_F_CREATE should be set when creating new route [ 325.717495][T12371] IPv6: NLM_F_CREATE should be set when creating new route [ 326.409803][T12178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.594374][T12178] veth0_vlan: entered promiscuous mode [ 326.652203][T12178] veth1_vlan: entered promiscuous mode [ 326.791685][T12178] veth0_macvtap: entered promiscuous mode [ 326.798858][T12403] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2636'. [ 326.811961][T12178] veth1_macvtap: entered promiscuous mode [ 326.852960][T12178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.869192][T12178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.879857][T12178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.891261][T12178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.902109][T12178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.913176][T12178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.939204][T12178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.949290][T12403] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2636'. [ 326.963957][T12404] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2636'. [ 326.979506][T12178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.010269][T12178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.033382][T12178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.049243][T12178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.061917][T12178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.115342][T12178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.138606][T12178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.158263][T12178] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.174475][T12178] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.183497][T12178] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.194237][T12178] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.416944][T12416] delete_channel: no stack [ 327.445619][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.463021][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.525249][ T1134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.576885][ T1134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.178768][T12428] netlink: 'syz.1.2558': attribute type 10 has an invalid length. [ 328.651235][T12428] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 329.970611][T12469] netlink: 'syz.0.2660': attribute type 10 has an invalid length. [ 330.831068][T12494] delete_channel: no stack [ 330.952829][T12496] netlink: 'syz.0.2674': attribute type 10 has an invalid length. [ 331.999928][T12525] netlink: 'syz.0.2687': attribute type 10 has an invalid length. [ 333.525492][T12556] netlink: 'syz.2.2697': attribute type 1 has an invalid length. [ 333.613230][T12556] netlink: 'syz.2.2697': attribute type 4 has an invalid length. [ 333.688576][T12556] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2697'. [ 335.894161][T12617] netlink: 'syz.1.2717': attribute type 16 has an invalid length. [ 335.921828][T12617] netlink: 'syz.1.2717': attribute type 30 has an invalid length. [ 339.303918][T12668] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2739'. [ 339.786079][T12679] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2741'. [ 339.864471][T12673] netlink: 5175 bytes leftover after parsing attributes in process `syz.3.2741'. [ 341.202677][T12687] delete_channel: no stack [ 341.896938][T12718] netlink: 'syz.2.2755': attribute type 10 has an invalid length. [ 342.296402][T12718] team0: Port device geneve1 added [ 343.376219][T12750] netlink: 5175 bytes leftover after parsing attributes in process `syz.2.2767'. [ 343.541417][T12748] delete_channel: no stack [ 344.283055][T12767] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2776'. [ 344.313332][T12767] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 346.487811][T12795] delete_channel: no stack [ 346.701848][T12807] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2791'. [ 346.756851][T12807] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 348.355046][T12856] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2808'. [ 348.499571][T12856] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 348.732114][T12858] netlink: 'syz.3.2810': attribute type 10 has an invalid length. [ 349.123475][T12858] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.169339][T12858] bond0: (slave team0): Enslaving as an active interface with an up link [ 349.188790][T12867] netlink: 'syz.2.2815': attribute type 25 has an invalid length. [ 349.420705][T12876] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2821'. [ 350.450117][T12902] netlink: 'syz.0.2832': attribute type 10 has an invalid length. [ 351.802492][T12937] syzkaller0: create flow: hash 1332178272 index 1 [ 351.848419][T12943] delete_channel: no stack [ 351.859455][T12940] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2847'. [ 352.533821][T12934] syzkaller0: delete flow: hash 1332178272 index 1 [ 355.609600][T12956] bridge_slave_1: left allmulticast mode [ 355.615278][T12956] bridge_slave_1: left promiscuous mode [ 355.621847][T12956] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.632453][T12956] bridge_slave_0: left allmulticast mode [ 355.638571][T12956] bridge_slave_0: left promiscuous mode [ 355.644348][T12956] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.776754][T12976] netlink: 'syz.2.2858': attribute type 10 has an invalid length. [ 355.832690][T12976] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.865853][T12976] bond0: (slave team0): Enslaving as an active interface with an up link [ 355.954510][T12989] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 355.961058][T12989] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 356.143297][T12994] netlink: 208092 bytes leftover after parsing attributes in process `syz.3.2866'. [ 358.124507][T13028] macsec0: entered promiscuous mode [ 358.152606][T13028] macsec0: entered allmulticast mode [ 358.174365][T13028] veth1_macvtap: entered allmulticast mode [ 359.542466][T13056] delete_channel: no stack [ 359.555789][T13057] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2889'. [ 359.716265][T13056] delete_channel: no stack [ 359.753933][T13054] tap0: tun_chr_ioctl cmd 1074025677 [ 359.796252][T13054] tap0: linktype set to 270 [ 359.805509][T13054] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.2889'. [ 359.834294][T13054] openvswitch: netlink: Key type 4535 is out of range max 32 [ 360.846334][T13100] netlink: set zone limit has 8 unknown bytes [ 361.154619][T13109] Â: renamed from pim6reg1 [ 361.317445][T13112] Ÿë: port 1(syz_tun) entered blocking state [ 361.336172][T13112] Ÿë: port 1(syz_tun) entered disabled state [ 361.344870][T13112] syz_tun: entered allmulticast mode [ 361.357281][T13112] syz_tun: entered promiscuous mode [ 362.222510][T13123] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2915'. [ 362.273132][T13129] tap0: tun_chr_ioctl cmd 1074025677 [ 362.301795][T13123] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.2915'. [ 362.372469][T13129] tap0: linktype set to 270 [ 362.398160][T13123] openvswitch: netlink: Key type 4535 is out of range max 32 [ 362.434720][T13133] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2919'. [ 362.685617][T13137] vxcan1: entered allmulticast mode [ 363.078779][T13148] bridge_slave_1: left allmulticast mode [ 363.089942][T13148] bridge_slave_1: left promiscuous mode [ 363.096203][T13148] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.138843][T13148] bridge_slave_0: left allmulticast mode [ 363.144553][T13148] bridge_slave_0: left promiscuous mode [ 363.151178][T13148] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.350136][T13161] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.2930'. [ 363.396938][T13161] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 363.405697][T13161] openvswitch: netlink: Message has 8454 unknown bytes. [ 363.740992][T13170] wg2: entered promiscuous mode [ 363.745932][T13170] wg2: entered allmulticast mode [ 364.329551][T13189] netlink: 'syz.2.2938': attribute type 39 has an invalid length. [ 364.940043][T13199] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2942'. [ 365.417868][T13199] openvswitch: netlink: Tunnel attr 10552 out of range max 16 [ 366.033951][ T5793] Bluetooth: hci3: unexpected event 0x12 length: 15 > 8 [ 367.929664][ T5793] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8 [ 368.207965][T13268] bond_slave_1: mtu less than device minimum [ 370.256730][T13316] netlink: 'syz.1.2986': attribute type 16 has an invalid length. [ 370.316718][T13316] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2986'. [ 370.336312][T13316] bridge_slave_0: entered allmulticast mode [ 370.606203][ T5793] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8 [ 371.701830][ T5793] Bluetooth: hci1: unexpected event 0x12 length: 15 > 8 [ 376.525963][T13510] netlink: 'syz.3.3064': attribute type 29 has an invalid length. [ 378.503690][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.519125][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.796636][T13510] netlink: 'syz.3.3064': attribute type 29 has an invalid length. [ 379.143181][T13547] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3081'. [ 379.198103][T13544] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3081'. [ 379.659774][T13567] netlink: 'syz.1.3090': attribute type 29 has an invalid length. [ 379.706962][T13567] netlink: 'syz.1.3090': attribute type 29 has an invalid length. [ 379.717908][T13567] netlink: 'syz.1.3090': attribute type 29 has an invalid length. [ 379.732261][T13567] netlink: 'syz.1.3090': attribute type 29 has an invalid length. [ 380.949339][T13620] netlink: 'syz.1.3115': attribute type 29 has an invalid length. [ 381.053561][T13620] netlink: 'syz.1.3115': attribute type 29 has an invalid length. [ 381.116780][T13623] netlink: 'syz.1.3115': attribute type 29 has an invalid length. [ 381.330409][T13635] macvtap0: refused to change device tx_queue_len [ 383.198229][T13718] macvtap0: refused to change device tx_queue_len [ 383.445203][T13728] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.3165'. [ 384.192608][ T5158] udevd[5158]: worker [11559] terminated by signal 33 (Unknown signal 33) [ 384.224164][ T5158] udevd[5158]: worker [11559] failed while handling '/devices/virtual/block/loop2' [ 384.399590][T13749] syzkaller0: entered promiscuous mode [ 384.405221][T13749] syzkaller0: entered allmulticast mode [ 384.760998][T13759] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3179'. [ 385.210562][T13777] syzkaller0: entered promiscuous mode [ 385.216134][T13777] syzkaller0: entered allmulticast mode [ 386.685928][T13834] Ÿë: port 1(syz_tun) entered blocking state [ 386.698684][T13834] Ÿë: port 1(syz_tun) entered disabled state [ 386.705183][T13834] syz_tun: entered allmulticast mode [ 386.722950][T13834] syz_tun: entered promiscuous mode [ 388.084726][T13875] netlink: 'syz.2.3225': attribute type 10 has an invalid length. [ 388.113777][T13875] netlink: 'syz.2.3225': attribute type 16 has an invalid length. [ 388.134671][T13875] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3225'. [ 388.166629][T13880] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3228'. [ 388.179802][T13880] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3228'. [ 389.596140][ T5793] Bluetooth: hci3: unexpected event 0x12 length: 15 > 8 [ 390.998908][ T5793] Bluetooth: hci1: unexpected event 0x12 length: 15 > 8 [ 391.394694][T13987] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3266'. [ 391.648471][T13993] syzkaller0: entered promiscuous mode [ 391.653987][T13993] syzkaller0: entered allmulticast mode [ 394.336196][T14035] syz.0.3285[14035] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 394.336319][T14035] syz.0.3285[14035] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 394.495036][T14042] netlink: 137592 bytes leftover after parsing attributes in process `syz.1.3286'. [ 394.673901][T14047] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3288'. [ 395.345622][T14078] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3299'. [ 395.372925][T14078] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3299'. [ 395.404884][T14072] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3299'. [ 395.423315][T14078] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3299'. [ 395.670465][T14095] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3308'. [ 395.706948][T14095] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3308'. [ 395.728402][T14092] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3308'. [ 399.027586][T14163] syzkaller0: entered promiscuous mode [ 399.033140][T14163] syzkaller0: entered allmulticast mode [ 399.282555][T14158] netlink: 137592 bytes leftover after parsing attributes in process `syz.3.3333'. [ 401.063545][ T5794] Bluetooth: hci1: command 0x0406 tx timeout [ 402.087413][T14198] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3350'. [ 402.387638][ T5793] Bluetooth: hci3: unexpected event 0x10 length: 15 > 1 [ 402.388849][ T5793] Bluetooth: hci3: hardware error 0x0f [ 402.991778][T14225] syzkaller0: entered promiscuous mode [ 403.009790][T14225] syzkaller0: entered allmulticast mode [ 403.026794][T14228] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3362'. [ 403.904729][ T5794] Bluetooth: hci3: unexpected event 0x10 length: 15 > 1 [ 404.502739][ T5793] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 404.517846][ T5793] Bluetooth: hci3: hardware error 0x0f [ 405.813127][T14270] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3374'. [ 405.918446][ T5794] Bluetooth: hci2: unexpected event 0x0f length: 15 > 4 [ 406.579510][ T5793] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 406.728668][T14296] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3386'. [ 407.176910][ T5793] Bluetooth: hci1: unexpected event 0x12 length: 15 > 8 [ 407.769144][T14323] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3397'. [ 407.892117][T14327] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 407.922538][T14327] syzkaller0: entered promiscuous mode [ 407.931508][T14327] syzkaller0: entered allmulticast mode [ 409.523020][T14340] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3403'. [ 409.954436][ T5793] Bluetooth: hci1: unexpected event 0x12 length: 15 > 8 [ 409.972162][T14351] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3408'. [ 410.597100][T14384] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3422'. [ 410.969922][T14400] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.3430'. [ 411.308182][ T5793] Bluetooth: hci2: command 0x0406 tx timeout [ 411.367775][ T5794] Bluetooth: hci2: unexpected event 0x12 length: 15 > 8 [ 412.379553][T14442] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.3448'. [ 413.237588][T14475] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 413.267482][T14475] syzkaller0: entered promiscuous mode [ 413.273241][T14475] syzkaller0: entered allmulticast mode [ 415.152843][T14484] IPv6: Can't replace route, no match found [ 415.582465][ T5794] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8 [ 415.815227][T14522] netlink: 149476 bytes leftover after parsing attributes in process `syz.3.3481'. [ 416.510330][T14530] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 416.561317][T14530] syzkaller0: entered promiscuous mode [ 416.583876][T14530] syzkaller0: entered allmulticast mode [ 419.176285][T14571] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3502'. [ 419.802802][T14597] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3514'. [ 420.853235][T14614] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 420.891064][T14614] syzkaller0: entered promiscuous mode [ 420.896872][T14614] syzkaller0: entered allmulticast mode [ 423.168927][T14651] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3534'. [ 423.729474][T14681] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3545'. [ 424.266254][T14705] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3556'. [ 425.214347][T14728] netlink: 149476 bytes leftover after parsing attributes in process `syz.0.3564'. [ 425.542662][T14734] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3568'. [ 426.073815][T14754] netlink: 149476 bytes leftover after parsing attributes in process `syz.0.3577'. [ 426.097383][T14759] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3579'. [ 426.428395][T14768] netlink: 'syz.1.3580': attribute type 1 has an invalid length. [ 426.825768][ T5793] Bluetooth: hci0: command 0x0406 tx timeout [ 428.500611][T14837] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3611'. [ 429.250003][T14865] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3623'. [ 429.881186][T14888] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3634'. [ 430.530108][T14901] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 430.586779][T14901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.671968][T14901] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.742391][T14901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.927276][T14915] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3644'. [ 431.533455][T14932] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3652'. [ 431.689785][T14936] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3655'. [ 432.122435][T14962] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3666'. [ 432.194694][T14964] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3668'. [ 432.210586][T14964] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3668'. [ 432.223890][T14964] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3668'. [ 432.244074][T14964] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3668'. [ 432.542838][T14982] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3676'. [ 432.905218][T14999] netlink: 'syz.1.3684': attribute type 10 has an invalid length. [ 436.971381][T15171] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.985749][T15171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 437.324136][T15171] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 437.332049][T15171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.819556][T15195] __nla_validate_parse: 3 callbacks suppressed [ 437.819573][T15195] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3770'. [ 439.941867][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.951369][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.926659][ T5794] Bluetooth: hci1: unexpected event 0x09 length: 15 > 3 [ 444.039528][T15436] netlink: 'syz.1.3875': attribute type 2 has an invalid length. [ 444.086844][T15436] netlink: 'syz.1.3875': attribute type 1 has an invalid length. [ 445.897700][T15507] netlink: 'syz.0.3906': attribute type 2 has an invalid length. [ 445.915243][T15507] netlink: 'syz.0.3906': attribute type 1 has an invalid length. [ 446.601314][T15540] netlink: 'syz.2.3922': attribute type 2 has an invalid length. [ 446.609638][T15540] netlink: 'syz.2.3922': attribute type 1 has an invalid length. [ 448.556777][ T5794] Bluetooth: hci1: unexpected event 0x1c length: 15 > 5 [ 450.694474][ T5794] Bluetooth: hci2: unexpected event 0x1c length: 15 > 5 [ 451.668423][ T5794] Bluetooth: hci2: unexpected event 0x1c length: 15 > 5 [ 453.159643][ T5794] Bluetooth: hci2: unexpected event 0x1c length: 15 > 5 [ 454.789594][T15820] netlink: 'syz.1.4040': attribute type 2 has an invalid length. [ 454.804976][T15820] netlink: 'syz.1.4040': attribute type 1 has an invalid length. [ 456.063520][ T5794] Bluetooth: hci2: unexpected event 0x1c length: 15 > 5 [ 456.435470][ T5794] Bluetooth: hci0: unexpected event 0x1c length: 15 > 5 [ 457.550617][ T5794] Bluetooth: hci1: unexpected event 0x1c length: 15 > 5 [ 458.197728][ T5794] Bluetooth: hci1: unexpected event 0x1c length: 15 > 5 [ 458.412747][T15943] netlink: 'syz.0.4091': attribute type 2 has an invalid length. [ 458.449642][T15943] netlink: 'syz.0.4091': attribute type 1 has an invalid length. [ 459.746550][ T5794] Bluetooth: hci1: unexpected event 0x1c length: 15 > 5 [ 461.978491][ T5794] Bluetooth: hci2: unexpected event 0x1c length: 15 > 5 [ 462.629221][T16129] Ÿë: port 2(erspan0) entered blocking state [ 462.642792][T16129] Ÿë: port 2(erspan0) entered disabled state [ 462.649684][T16129] erspan0: entered allmulticast mode [ 462.659122][T16129] erspan0: entered promiscuous mode [ 462.757882][T16133] netlink: 'syz.3.4174': attribute type 2 has an invalid length. [ 462.765688][T16133] netlink: 'syz.3.4174': attribute type 1 has an invalid length. [ 463.339762][T16158] netlink: 'syz.1.4185': attribute type 2 has an invalid length. [ 463.351454][T16158] netlink: 'syz.1.4185': attribute type 1 has an invalid length. [ 467.196642][T16301] netlink: 'syz.2.4241': attribute type 2 has an invalid length. [ 467.204603][T16301] netlink: 'syz.2.4241': attribute type 1 has an invalid length. [ 468.293304][T16323] syzkaller0: entered promiscuous mode [ 468.309187][T16323] syzkaller0: entered allmulticast mode [ 468.377889][T16331] netlink: 'syz.0.4253': attribute type 2 has an invalid length. [ 468.385804][T16331] netlink: 'syz.0.4253': attribute type 1 has an invalid length. [ 468.641757][ T5794] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 469.829431][T16359] netlink: 'syz.2.4265': attribute type 2 has an invalid length. [ 469.846628][T16359] netlink: 'syz.2.4265': attribute type 1 has an invalid length. [ 470.812237][T16380] netlink: 'syz.3.4275': attribute type 2 has an invalid length. [ 470.836628][T16380] netlink: 'syz.3.4275': attribute type 1 has an invalid length. [ 471.642876][T16345] Ÿë: port 3(veth0_to_bridge) entered blocking state [ 471.651224][T16345] Ÿë: port 3(veth0_to_bridge) entered disabled state [ 471.661060][T16345] veth0_to_bridge: entered allmulticast mode [ 471.669260][T16345] veth0_to_bridge: entered promiscuous mode [ 471.791579][T16401] netlink: 'syz.0.4284': attribute type 2 has an invalid length. [ 471.807920][T16401] netlink: 'syz.0.4284': attribute type 1 has an invalid length. [ 472.503214][T16424] netlink: 'syz.3.4294': attribute type 2 has an invalid length. [ 472.511349][T16424] netlink: 'syz.3.4294': attribute type 1 has an invalid length. [ 473.153936][T16448] Ÿë: port 2(veth0_to_bridge) entered blocking state [ 473.167193][T16448] Ÿë: port 2(veth0_to_bridge) entered disabled state [ 473.174963][T16448] veth0_to_bridge: entered allmulticast mode [ 473.190209][T16448] veth0_to_bridge: entered promiscuous mode [ 473.494248][T16460] netlink: 'syz.3.4308': attribute type 2 has an invalid length. [ 473.516068][T16460] netlink: 'syz.3.4308': attribute type 1 has an invalid length. [ 473.807335][ T5794] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 474.677566][T16494] netlink: 'syz.0.4324': attribute type 21 has an invalid length. [ 474.712492][T16494] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4324'. [ 474.757521][T16501] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4326'. [ 474.790901][T16502] netlink: 'syz.2.4327': attribute type 2 has an invalid length. [ 474.817740][T16502] netlink: 'syz.2.4327': attribute type 1 has an invalid length. [ 475.403210][T16528] netlink: 'syz.3.4338': attribute type 2 has an invalid length. [ 475.414219][T16528] netlink: 'syz.3.4338': attribute type 1 has an invalid length. [ 475.845627][T16546] netlink: 'syz.3.4347': attribute type 2 has an invalid length. [ 475.854128][T16546] netlink: 'syz.3.4347': attribute type 1 has an invalid length. [ 476.067201][T16551] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4349'. [ 477.119098][T16586] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4363'. [ 479.622684][T16649] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4391'. [ 479.945260][ T5794] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 480.252724][T16676] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4402'. [ 481.086812][T16706] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4413'. [ 481.551177][ T5794] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 483.033416][ T5794] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 483.138304][T16794] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4450'. [ 484.148455][T16826] Ÿë: port 2(erspan0) entered blocking state [ 484.155382][T16826] Ÿë: port 2(erspan0) entered disabled state [ 484.162208][T16826] erspan0: entered allmulticast mode [ 484.169897][T16826] erspan0: entered promiscuous mode [ 485.089166][T16856] Ÿë: port 2(erspan0) entered blocking state [ 485.095531][T16856] Ÿë: port 2(erspan0) entered disabled state [ 485.117178][T16856] erspan0: entered allmulticast mode [ 485.126699][T16856] erspan0: entered promiscuous mode [ 486.334413][T16915] netlink: 'syz.0.4503': attribute type 39 has an invalid length. [ 486.577983][T16927] Ÿë: port 3(erspan0) entered blocking state [ 486.584777][T16927] Ÿë: port 3(erspan0) entered disabled state [ 486.603748][T16927] erspan0: entered allmulticast mode [ 486.612763][T16927] erspan0: entered promiscuous mode [ 486.897334][ T5794] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 488.141941][T16992] netlink: 176 bytes leftover after parsing attributes in process `syz.2.4536'. [ 488.185719][ T5794] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 488.287072][T17001] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4541'. [ 489.020754][ T5793] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 489.032476][ T5793] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 489.041417][ T5793] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 489.053101][ T5793] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 489.077242][ T5793] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 489.086054][ T5793] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 489.089484][T11494] syz_tun (unregistering): left allmulticast mode [ 489.116562][T11494] syz_tun (unregistering): left promiscuous mode [ 489.123112][T11494] Ÿë: port 1(syz_tun) entered disabled state [ 489.179271][T17022] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4550'. [ 489.288195][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.430982][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.550303][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.559643][T17040] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4558'. [ 489.574126][T17040] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4558'. [ 489.576629][ T5794] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 489.589191][T17040] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4558'. [ 489.679249][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.732220][T17015] chnl_net:caif_netlink_parms(): no params data found [ 489.836355][T17015] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.843882][T17015] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.853161][T17015] bridge_slave_0: entered allmulticast mode [ 489.862064][T17015] bridge_slave_0: entered promiscuous mode [ 489.871383][T17015] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.878679][T17015] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.885826][T17015] bridge_slave_1: entered allmulticast mode [ 489.892599][T17015] bridge_slave_1: entered promiscuous mode [ 489.962906][T17015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.020553][T17015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 490.104277][T17015] team0: Port device team_slave_0 added [ 490.144166][T17015] team0: Port device team_slave_1 added [ 490.170223][T17015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.177971][T17015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.204223][T17015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 490.236245][T17015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 490.243501][T17015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.269619][T17015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 490.320128][T17015] hsr_slave_0: entered promiscuous mode [ 490.328624][T17015] hsr_slave_1: entered promiscuous mode [ 490.335144][T17015] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 490.343858][T17015] Cannot create hsr debugfs directory [ 490.659558][ T12] erspan0 (unregistering): left allmulticast mode [ 490.681600][ T12] erspan0 (unregistering): left promiscuous mode [ 490.700528][ T12] Ÿë: port 2(erspan0) entered disabled state [ 490.865227][T17065] netlink: 'syz.1.4566': attribute type 39 has an invalid length. [ 490.954548][ T5794] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 491.137521][ T5794] Bluetooth: hci2: command tx timeout [ 491.521702][T17015] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 491.545207][T17015] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 491.571228][T17015] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 491.606861][ T12] hsr_slave_0: left promiscuous mode [ 491.626772][ T12] hsr_slave_1: left promiscuous mode [ 491.639036][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 491.653855][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 491.662580][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 491.674630][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 491.689707][ T12] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 491.702026][ T12] batman_adv: batadv0: Removing interface: virt_wifi0 [ 491.750789][ T12] veth1_macvtap: left allmulticast mode [ 491.767030][ T12] veth1_macvtap: left promiscuous mode [ 491.772642][ T12] veth0_macvtap: left promiscuous mode [ 491.784723][ T12] veth1_vlan: left promiscuous mode [ 491.800453][ T12] veth0_vlan: left promiscuous mode [ 492.512388][ T12] team0 (unregistering): Port device team_slave_1 removed [ 492.549242][ T12] team0 (unregistering): Port device team_slave_0 removed [ 492.590943][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 492.635061][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 492.919136][ T12] bond0 (unregistering): (slave team0): Releasing backup interface [ 493.029557][ T12] bond0 (unregistering): Released all slaves [ 493.062684][T17015] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 493.076852][T17102] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4581'. [ 493.216693][ T5794] Bluetooth: hci2: command tx timeout [ 493.368751][T17015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 493.415921][T17015] 8021q: adding VLAN 0 to HW filter on device team0 [ 493.447911][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.455073][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 493.497607][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.504944][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 494.194289][T17137] netlink: 'syz.0.4590': attribute type 12 has an invalid length. [ 494.203895][T17137] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4590'. [ 494.255456][T17015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 494.365001][T17015] veth0_vlan: entered promiscuous mode [ 494.392260][T17015] veth1_vlan: entered promiscuous mode [ 494.507152][T17015] veth0_macvtap: entered promiscuous mode [ 494.528147][T17015] veth1_macvtap: entered promiscuous mode [ 494.572436][T17015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.587824][T17015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.601401][T17015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 494.622402][T17015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.634131][T17015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.648077][T17015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 494.678025][T17015] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.700897][T17015] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.717108][T17015] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.736502][T17015] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.884025][ T992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.900015][ T992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.929552][ T5794] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 495.033333][ T1134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.086970][ T1134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.136974][T17161] 9Iæ–G: renamed from syzkaller0 [ 495.297012][ T5794] Bluetooth: hci2: command tx timeout [ 495.511992][T17167] netlink: 'syz.1.4603': attribute type 12 has an invalid length. [ 495.520484][T17167] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4603'. [ 495.963748][T17182] netlink: 'syz.3.4609': attribute type 25 has an invalid length. [ 496.000649][T17182] netlink: 'syz.3.4609': attribute type 28 has an invalid length. [ 496.524616][ T5793] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 496.534395][ T5793] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 496.546784][T11198] syz_tun (unregistering): left allmulticast mode [ 496.553474][T11198] syz_tun (unregistering): left promiscuous mode [ 496.560503][T11198] Ÿë: port 1(syz_tun) entered disabled state [ 496.570779][ T5793] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 496.585002][ T5793] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 496.595004][ T5793] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 496.602959][ T5793] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 496.933645][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.059530][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.198850][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.342066][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.369546][T17228] netlink: 'syz.3.4629': attribute type 25 has an invalid length. [ 497.378506][T17228] netlink: 'syz.3.4629': attribute type 28 has an invalid length. [ 497.386658][ T5793] Bluetooth: hci2: command tx timeout [ 497.763746][T17197] chnl_net:caif_netlink_parms(): no params data found [ 498.709497][ T5793] Bluetooth: hci1: command tx timeout [ 498.733186][T17197] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.771507][T17197] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.798964][T17197] bridge_slave_0: entered allmulticast mode [ 498.805660][T17197] bridge_slave_0: entered promiscuous mode [ 498.869062][T17197] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.876255][T17197] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.887571][T17197] bridge_slave_1: entered allmulticast mode [ 498.899110][T17197] bridge_slave_1: entered promiscuous mode [ 499.099296][ T11] erspan0 (unregistering): left allmulticast mode [ 499.105802][ T11] erspan0 (unregistering): left promiscuous mode [ 499.126749][ T11] Ÿë: port 2(erspan0) entered disabled state [ 499.160517][T17197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.183422][T17197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 499.274602][T17284] netlink: 'syz.3.4649': attribute type 39 has an invalid length. [ 500.071931][T17197] team0: Port device team_slave_0 added [ 500.101429][T17197] team0: Port device team_slave_1 added [ 500.241688][T17197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 500.248955][T17197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.277795][T17197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 500.294561][T17197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 500.301730][T17197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.334793][T17197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 500.477268][T17197] hsr_slave_0: entered promiscuous mode [ 500.484578][T17197] hsr_slave_1: entered promiscuous mode [ 500.492362][T17197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 500.500469][T17197] Cannot create hsr debugfs directory [ 500.577174][ T11] veth0_to_bridge: left allmulticast mode [ 500.589518][ T11] veth0_to_bridge: left promiscuous mode [ 500.601346][ T11] Ÿë: port 3(veth0_to_bridge) entered disabled state [ 500.622514][ T11] hsr_slave_0: left promiscuous mode [ 500.629111][ T11] hsr_slave_1: left promiscuous mode [ 500.635106][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 500.642682][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 500.650938][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 500.660356][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 500.668058][ T11] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 500.675287][ T11] batman_adv: batadv0: Removing interface: virt_wifi0 [ 500.692557][ T11] veth1_macvtap: left promiscuous mode [ 500.698161][ T11] veth0_macvtap: left promiscuous mode [ 500.703671][ T11] veth1_vlan: left promiscuous mode [ 500.736727][ T5793] Bluetooth: hci1: command tx timeout [ 500.930485][ T11] team0 (unregistering): Port device macvlan1 removed [ 501.315712][ T11] team0 (unregistering): Port device team_slave_1 removed [ 501.375513][ T11] team0 (unregistering): Port device team_slave_0 removed [ 501.397436][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.405048][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.976519][T17307] netlink: 'syz.3.4658': attribute type 39 has an invalid length. [ 502.720257][T17197] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 502.757150][T17197] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 502.769141][T17197] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 502.793913][T17197] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 502.816610][ T5793] Bluetooth: hci1: command tx timeout [ 502.879790][T17339] netlink: 'syz.2.4672': attribute type 39 has an invalid length. [ 502.943739][T17339] syz_tun (unregistering): left allmulticast mode [ 502.951542][T17339] syz_tun (unregistering): left promiscuous mode [ 502.958722][T17339] Ÿë: port 1(syz_tun) entered disabled state [ 503.061453][T17197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 503.085874][T17197] 8021q: adding VLAN 0 to HW filter on device team0 [ 503.107847][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.115136][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 503.148299][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.155417][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 503.254594][T17197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 503.413283][T17359] netlink: 'syz.2.4677': attribute type 39 has an invalid length. [ 503.866265][T17197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 504.028574][T17197] veth0_vlan: entered promiscuous mode [ 504.075577][T17197] veth1_vlan: entered promiscuous mode [ 504.198187][T17197] veth0_macvtap: entered promiscuous mode [ 504.214598][T17197] veth1_macvtap: entered promiscuous mode [ 504.251531][T17197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 504.272384][T17197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.298275][T17197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 504.326030][T17197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 504.359332][T17197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.387238][T17197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 504.410488][T17197] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.430195][T17197] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.456600][T17197] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.475190][T17197] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.515857][T17394] netlink: 'syz.1.4690': attribute type 39 has an invalid length. [ 504.806711][ T4862] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.814580][ T4862] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.883355][ T1134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.894385][ T1134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.902336][ T5793] Bluetooth: hci1: command tx timeout [ 505.649363][T17418] netlink: 'syz.1.4699': attribute type 39 has an invalid length. [ 505.750350][T17418] syz_tun (unregistering): left allmulticast mode [ 505.761145][T17418] syz_tun (unregistering): left promiscuous mode [ 505.767950][T17418] Ÿë: port 1(syz_tun) entered disabled state [ 505.795782][T17421] netlink: 'syz.0.4701': attribute type 39 has an invalid length. [ 506.086141][T17428] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4705'. [ 506.169232][T17430] pim6reg1: entered promiscuous mode [ 506.175206][T17430] pim6reg1: entered allmulticast mode [ 507.198541][T17450] bond_slave_1: mtu less than device minimum [ 507.314895][T17452] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4714'. [ 509.259619][T17483] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4727'. [ 509.494935][T17489] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4737'. [ 512.044966][T17527] syz.1.4744[17527] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 512.045121][T17527] syz.1.4744[17527] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 512.971770][T17516] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4740'. [ 513.395866][T17538] netlink: 'syz.2.4748': attribute type 39 has an invalid length. [ 514.474031][ T5793] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 514.572358][T17557] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4755'. [ 515.301285][T17566] netlink: 'syz.1.4758': attribute type 39 has an invalid length. [ 516.259525][T17584] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4765'. [ 517.373237][T17605] netlink: 'syz.0.4772': attribute type 39 has an invalid length. [ 517.548946][T17609] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4775'. [ 518.271765][T17634] netlink: 'syz.3.4785': attribute type 39 has an invalid length. [ 518.334499][T17640] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4787'. [ 518.957549][T17664] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4797'. [ 519.112302][T17671] netlink: 'syz.3.4800': attribute type 39 has an invalid length. [ 519.709032][T17692] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4809'. [ 520.418326][T17702] netlink: 'syz.3.4813': attribute type 39 has an invalid length. [ 521.485155][T17726] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4824'. [ 522.119133][T17752] pim6reg1: entered promiscuous mode [ 522.124643][T17752] pim6reg1: entered allmulticast mode [ 522.211326][T17753] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4834'. [ 523.589468][T17778] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4844'. [ 524.200896][T17801] netlink: 'syz.1.4854': attribute type 12 has an invalid length. [ 524.236498][T17801] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4854'. [ 525.857962][T17831] netlink: 'syz.3.4866': attribute type 12 has an invalid length. [ 525.882791][T17831] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4866'. [ 526.166198][T17841] veth1_macvtap: left promiscuous mode [ 526.188557][T17841] macsec0: entered allmulticast mode [ 528.389685][T17871] pim6reg1: entered promiscuous mode [ 528.417648][T17871] pim6reg1: entered allmulticast mode [ 528.425261][T17873] pim6reg1: entered promiscuous mode [ 528.435671][T17873] pim6reg1: entered allmulticast mode [ 530.062838][T17904] pim6reg1: entered allmulticast mode [ 530.275540][T17907] pim6reg1: left allmulticast mode [ 533.199043][T17948] netlink: 'syz.3.4914': attribute type 12 has an invalid length. [ 533.240574][T17948] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4914'. [ 533.314693][ T5794] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 533.328293][ T5794] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 533.338360][ T5794] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 533.365243][ T5794] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 533.373317][ T5794] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 533.386231][ T5794] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 533.956307][T17949] chnl_net:caif_netlink_parms(): no params data found [ 535.090810][T17949] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.238382][T17949] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.411387][T17949] bridge_slave_0: entered allmulticast mode [ 535.463397][ T5793] Bluetooth: hci0: command tx timeout [ 535.489668][T17949] bridge_slave_0: entered promiscuous mode [ 535.582383][T17966] veth0_vlan: entered allmulticast mode [ 536.257560][T17949] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.264826][T17949] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.282074][T17949] bridge_slave_1: entered allmulticast mode [ 536.424188][T17949] bridge_slave_1: entered promiscuous mode [ 537.546954][ T5793] Bluetooth: hci0: command tx timeout [ 537.579318][T17949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 537.593158][T17949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 538.048051][T17984] netlink: 'syz.0.4923': attribute type 12 has an invalid length. [ 538.055965][T17984] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4923'. [ 538.217091][T17949] team0: Port device team_slave_0 added [ 538.894382][T17949] team0: Port device team_slave_1 added [ 538.905414][ T5793] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 539.023606][T17949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 539.038287][T17949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 539.065671][T17949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 539.108516][T17949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 539.115526][T17949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 539.142056][T17949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 539.438549][T17949] hsr_slave_0: entered promiscuous mode [ 539.445146][T17949] hsr_slave_1: entered promiscuous mode [ 539.452516][T17949] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 539.460437][T17949] Cannot create hsr debugfs directory [ 539.616759][ T5793] Bluetooth: hci0: command tx timeout [ 540.541118][T17949] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.947864][T17949] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.151140][T17949] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.406908][T17949] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.421556][T18006] netlink: 'syz.0.4931': attribute type 12 has an invalid length. [ 541.431833][T18006] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4931'. [ 541.696919][ T5793] Bluetooth: hci0: command tx timeout [ 543.012186][T17949] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 543.082429][T17949] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 543.119220][T17949] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 543.172405][T17949] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 543.378161][ T5793] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 543.849890][T17949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 543.928547][T17949] 8021q: adding VLAN 0 to HW filter on device team0 [ 543.968894][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.976043][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 543.996334][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.003577][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 545.132273][T17949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 545.203303][T17949] veth0_vlan: entered promiscuous mode [ 545.234949][T17949] veth1_vlan: entered promiscuous mode [ 545.293133][T17949] veth0_macvtap: entered promiscuous mode [ 545.321823][T17949] veth1_macvtap: entered promiscuous mode [ 545.362271][T17949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.379352][T17949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.392556][T17949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.408268][T17949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.441305][T17949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 545.479044][T17949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.499652][T17949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.527662][T17949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.556078][T17949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.581387][T17949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 545.637913][T17949] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.647925][T17949] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.658720][T17949] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.678313][T17949] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.982735][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.000301][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.098823][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.129181][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.497654][T18068] netlink: 'syz.1.4949': attribute type 39 has an invalid length. [ 547.353563][T18081] netlink: 'syz.0.4954': attribute type 12 has an invalid length. [ 547.392054][T18081] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4954'. [ 547.837204][ T5793] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 548.481802][T18102] netlink: 'syz.1.4961': attribute type 39 has an invalid length. [ 548.897148][T18110] netlink: 'syz.1.4964': attribute type 12 has an invalid length. [ 548.905022][T18110] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4964'. [ 549.980367][T18138] netlink: 'syz.1.4973': attribute type 39 has an invalid length. [ 550.379737][T18148] netlink: 'syz.1.4976': attribute type 12 has an invalid length. [ 550.415906][T18148] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4976'. [ 551.608749][T18168] netlink: 'syz.0.4985': attribute type 39 has an invalid length. [ 552.545355][T18199] netlink: 'syz.3.4997': attribute type 39 has an invalid length. [ 552.722810][T18207] wg2: entered promiscuous mode [ 552.728259][T18207] wg2: entered allmulticast mode [ 553.512696][T18229] netlink: 'syz.1.5008': attribute type 39 has an invalid length. [ 554.432682][T18255] netlink: 'syz.2.5019': attribute type 39 has an invalid length. [ 556.055398][T18297] netlink: 'syz.0.5034': attribute type 39 has an invalid length. [ 556.940206][T18321] wg2: left promiscuous mode [ 556.944885][T18321] wg2: left allmulticast mode [ 557.026971][T18321] wg2: entered promiscuous mode [ 557.031992][T18321] wg2: entered allmulticast mode [ 557.328434][T18335] netlink: 'syz.3.5048': attribute type 39 has an invalid length. [ 558.497276][T18368] netlink: 'syz.3.5061': attribute type 39 has an invalid length. [ 559.799205][T18379] syzkaller0: entered promiscuous mode [ 559.830814][T18379] syzkaller0: entered allmulticast mode [ 562.821103][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.831005][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.472766][T18403] netlink: 'syz.1.5073': attribute type 39 has an invalid length. [ 565.523103][T18431] netlink: 'syz.1.5084': attribute type 39 has an invalid length. [ 567.094776][T18463] netlink: 'syz.0.5095': attribute type 39 has an invalid length. [ 578.810664][T18588] netlink: 'syz.0.5141': attribute type 39 has an invalid length. [ 581.337231][T18615] netlink: 'syz.3.5151': attribute type 39 has an invalid length. [ 583.184716][T18642] netlink: 'syz.3.5162': attribute type 39 has an invalid length. [ 586.672053][T18680] netlink: 'syz.3.5175': attribute type 39 has an invalid length. [ 589.851925][T18711] netlink: 'syz.1.5186': attribute type 39 has an invalid length. [ 591.391135][T18732] wg2: left promiscuous mode [ 591.395815][T18732] wg2: left allmulticast mode [ 591.630773][T18732] wg2: entered promiscuous mode [ 591.635710][T18732] wg2: entered allmulticast mode [ 592.078403][T18742] netlink: 'syz.2.5199': attribute type 39 has an invalid length. [ 592.775512][T18769] bridge0: entered promiscuous mode [ 592.782938][T18769] bridge0: entered allmulticast mode [ 593.272971][T18782] netlink: 'syz.1.5215': attribute type 39 has an invalid length. [ 594.092317][T18802] veth0_vlan: entered allmulticast mode [ 594.265629][T18802] veth0_vlan: left promiscuous mode [ 594.288563][T18802] veth0_vlan: entered promiscuous mode [ 595.935383][T18824] netlink: 'syz.1.5226': attribute type 39 has an invalid length. [ 598.264540][T18850] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.303094][T18850] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.399275][T18850] bridge0: entered allmulticast mode [ 598.559388][T18851] bridge_slave_1: left allmulticast mode [ 598.565115][T18851] bridge_slave_1: left promiscuous mode [ 598.677547][T18851] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.704061][T18851] bridge_slave_0: left allmulticast mode [ 598.714201][T18851] bridge_slave_0: left promiscuous mode [ 598.720469][T18851] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.352750][T18897] sit0: entered allmulticast mode [ 603.382725][T18899] sit0: entered promiscuous mode [ 605.799485][ T12] erspan0 (unregistering): left allmulticast mode [ 605.916480][ T12] erspan0 (unregistering): left promiscuous mode [ 605.995702][ T12] Ÿë: port 2(erspan0) entered disabled state [ 606.106936][T18932] pim6reg1: entered promiscuous mode [ 606.134190][T18932] pim6reg1: entered allmulticast mode [ 607.135227][T18942] sit0: entered allmulticast mode [ 607.233021][T18943] sit0: entered promiscuous mode [ 607.663944][T18949] netlink: 'syz.0.5279': attribute type 39 has an invalid length. [ 608.644431][ T12] hsr_slave_0: left promiscuous mode [ 608.656065][ T12] hsr_slave_1: left promiscuous mode [ 608.704205][ T12] veth1_macvtap: left promiscuous mode [ 608.720194][ T12] veth0_macvtap: left promiscuous mode [ 608.728519][ T12] veth1_vlan: left promiscuous mode [ 608.734036][ T12] veth0_vlan: left promiscuous mode [ 609.394953][ T12] team0 (unregistering): Port device geneve1 removed [ 611.553333][ T12] team0 (unregistering): Port device team_slave_1 removed [ 611.749926][ T12] team0 (unregistering): Port device team_slave_0 removed [ 611.873736][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 611.924205][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 612.208801][ T12] bond0 (unregistering): (slave team0): Releasing backup interface [ 612.326096][ T12] bond0 (unregistering): Released all slaves [ 612.513677][T18993] netlink: 'syz.1.5284': attribute type 39 has an invalid length. [ 614.015078][T19018] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 614.048440][ T42] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.049293][T19018] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 614.068241][T19018] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 614.091296][T19015] sit0: entered allmulticast mode [ 614.096822][T19018] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 614.106631][T19018] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 614.114147][T19018] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 614.204832][T19021] sit0: entered promiscuous mode [ 614.889369][ T42] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.910257][T19031] netlink: 'syz.3.5296': attribute type 39 has an invalid length. [ 615.010810][ T42] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.150887][ T42] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.129853][ T5793] Bluetooth: hci2: command 0x0406 tx timeout [ 616.186994][ T5793] Bluetooth: hci3: command tx timeout [ 616.340507][T19016] chnl_net:caif_netlink_parms(): no params data found [ 616.578861][T19016] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.586150][T19016] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.593415][T19016] bridge_slave_0: entered allmulticast mode [ 616.600271][T19016] bridge_slave_0: entered promiscuous mode [ 616.658125][T19016] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.665713][T19016] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.674610][T19016] bridge_slave_1: entered allmulticast mode [ 616.684701][T19016] bridge_slave_1: entered promiscuous mode [ 616.818857][T19016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 616.879628][T19016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 617.014449][T19016] team0: Port device team_slave_0 added [ 617.059737][T19016] team0: Port device team_slave_1 added [ 617.181367][ T42] erspan0 (unregistering): left allmulticast mode [ 617.188509][ T42] erspan0 (unregistering): left promiscuous mode [ 617.195665][ T42] Ÿë: port 3(erspan0) entered disabled state [ 617.215919][T19016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 617.227162][T19016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 617.262176][T19016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 617.284478][T19016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 617.303684][T19016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 617.348439][T19016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 617.549573][T19016] hsr_slave_0: entered promiscuous mode [ 617.557167][T19016] hsr_slave_1: entered promiscuous mode [ 617.597324][T19016] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 617.616489][T19016] Cannot create hsr debugfs directory [ 617.879668][ T42] bond0: (slave wlan1): Releasing backup interface [ 618.276550][ T5794] Bluetooth: hci3: command tx timeout [ 618.335140][T19071] pim6reg1: entered promiscuous mode [ 618.340918][T19071] pim6reg1: entered allmulticast mode [ 618.392914][T19070] netlink: 'syz.0.5306': attribute type 39 has an invalid length. [ 618.500882][ T42] veth0_to_bridge: left allmulticast mode [ 618.526543][ T42] veth0_to_bridge: left promiscuous mode [ 618.542702][ T42] Ÿë: port 2(veth0_to_bridge) entered disabled state [ 618.721188][ T42] hsr_slave_0: left promiscuous mode [ 618.808557][ T42] hsr_slave_1: left promiscuous mode [ 619.305230][ T42] veth1_macvtap: left promiscuous mode [ 619.339413][ T42] veth0_macvtap: left promiscuous mode [ 619.390998][ T42] veth1_vlan: left promiscuous mode [ 620.135030][ T42] team0 (unregistering): Port device team_slave_1 removed [ 620.173694][ T42] team0 (unregistering): Port device team_slave_0 removed [ 620.215567][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 620.261822][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 620.358433][ T5793] Bluetooth: hci3: command tx timeout [ 620.637680][ T42] bond0 (unregistering): Released all slaves [ 621.276919][ T5793] Bluetooth: hci1: command 0x0406 tx timeout [ 622.258883][T19016] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 622.279929][T19016] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 622.295302][T19016] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 622.317565][T19016] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 622.416691][ T5794] Bluetooth: hci3: command tx timeout [ 622.446338][T19016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 622.490061][T19016] 8021q: adding VLAN 0 to HW filter on device team0 [ 622.522052][ T992] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.529301][ T992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 622.554871][ T992] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.562136][ T992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 623.277480][T19119] netlink: 'syz.3.5316': attribute type 39 has an invalid length. [ 623.385793][T19016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 623.526336][T19016] veth0_vlan: entered promiscuous mode [ 623.565189][T19016] veth1_vlan: entered promiscuous mode [ 623.659564][T19016] veth0_macvtap: entered promiscuous mode [ 623.694054][T19016] veth1_macvtap: entered promiscuous mode [ 623.754373][T19016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 623.789771][T19016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.841636][T19016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 623.874999][T19016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.899250][T19016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 623.942430][T19016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.985369][T19016] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 624.053713][T19016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 624.145053][T19016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.348970][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.355363][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.369182][T19016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 624.440087][T19016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.566684][T19016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 624.666246][T19016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.718099][T19016] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 624.754439][T19016] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.776666][T19016] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.795750][T19016] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.816686][T19016] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.923878][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 624.934690][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.960304][T19146] netlink: 'syz.3.5327': attribute type 39 has an invalid length. [ 624.987604][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.005907][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.414124][T19151] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.422257][T19151] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.466354][T19151] bridge0: left promiscuous mode [ 625.580341][T19151] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.587765][T19151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 625.595594][T19151] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.603018][T19151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 625.647289][T19151] bridge0: entered promiscuous mode [ 625.769142][T19156] syz.1.5329[19156] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 625.769282][T19156] syz.1.5329[19156] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 627.033051][T19172] pim6reg1: entered promiscuous mode [ 627.117507][T19172] pim6reg1: entered allmulticast mode [ 628.002258][T19193] syzkaller0: entered promiscuous mode [ 634.185850][T19256] pim6reg1: entered promiscuous mode [ 634.206465][T19256] pim6reg1: entered allmulticast mode [ 636.410123][T19283] veth1_macvtap: left promiscuous mode [ 636.465803][T19283] veth1_macvtap: entered promiscuous mode [ 636.477135][T19283] macsec0: entered promiscuous mode [ 636.482532][T19283] macsec0: entered allmulticast mode [ 636.499437][T19283] veth1_macvtap: entered allmulticast mode [ 641.665928][T19339] netlink: 'syz.3.5399': attribute type 39 has an invalid length. [ 641.715211][T19347] pim6reg1: entered promiscuous mode [ 641.721911][T19347] pim6reg1: entered allmulticast mode [ 642.730472][T19364] bridge0: port 3(hsr_slave_1) entered blocking state [ 642.750391][T19364] bridge0: port 3(hsr_slave_1) entered disabled state [ 642.772054][T19364] hsr_slave_1: entered allmulticast mode [ 642.790359][T19364] hsr_slave_1: left allmulticast mode [ 644.138210][T19380] bond_slave_1: mtu less than device minimum [ 647.899165][T19427] veth0_vlan: entered allmulticast mode [ 650.398909][T19467] veth0_vlan: left promiscuous mode [ 650.553877][T19467] veth0_vlan: entered promiscuous mode [ 656.675677][T19513] pim6reg1: entered promiscuous mode [ 656.681195][T19513] pim6reg1: entered allmulticast mode [ 657.066651][ T5793] Bluetooth: hci0: command 0x0406 tx timeout [ 663.158649][T19593] pim6reg1: entered promiscuous mode [ 663.164127][T19593] pim6reg1: entered allmulticast mode [ 663.494957][T19597] veth0_vlan: left promiscuous mode [ 663.625677][T19597] veth0_vlan: entered promiscuous mode [ 666.233176][T19637] netlink: 'syz.2.5502': attribute type 39 has an invalid length. [ 674.285517][T19741] syzkaller0: entered promiscuous mode [ 674.338011][T19741] syzkaller0: entered allmulticast mode [ 677.412111][T19775] bridge0: port 3(gretap0) entered blocking state [ 677.421851][T19775] bridge0: port 3(gretap0) entered disabled state [ 677.443400][T19775] gretap0: entered allmulticast mode [ 677.456708][T19775] gretap0: entered promiscuous mode [ 677.463529][T19775] bridge0: port 3(gretap0) entered blocking state [ 677.470163][T19775] bridge0: port 3(gretap0) entered forwarding state [ 677.737322][T19785] pim6reg1: entered promiscuous mode [ 677.887129][T19785] pim6reg1: entered allmulticast mode [ 677.917499][T19787] veth0_vlan: entered allmulticast mode [ 679.426955][T19796] syzkaller0: entered promiscuous mode [ 679.437781][T19796] syzkaller0: entered allmulticast mode [ 679.536587][T19804] bond_slave_1: mtu less than device minimum [ 683.428255][T19835] wg2: entered promiscuous mode [ 683.433186][T19835] wg2: entered allmulticast mode [ 684.675008][T19850] syzkaller0: entered promiscuous mode [ 684.691459][T19850] syzkaller0: entered allmulticast mode [ 685.875660][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.886531][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.744445][T19875] syzkaller0: entered promiscuous mode [ 688.771495][T19875] syzkaller0: entered allmulticast mode [ 689.033959][T19882] pim6reg1: entered promiscuous mode [ 689.046526][T19882] pim6reg1: entered allmulticast mode [ 693.925272][T19927] wg2: entered promiscuous mode [ 693.931823][T19927] wg2: entered allmulticast mode [ 696.704066][T19943] netlink: 'syz.1.5602': attribute type 39 has an invalid length. [ 698.304104][T19960] syzkaller0: entered promiscuous mode [ 698.310251][T19960] syzkaller0: entered allmulticast mode [ 698.530215][T19963] wg2: entered promiscuous mode [ 698.546792][T19963] wg2: entered allmulticast mode [ 701.479781][T19982] netlink: 'syz.0.5616': attribute type 39 has an invalid length. [ 701.636342][T19996] wg2: left promiscuous mode [ 701.643389][T19996] wg2: left allmulticast mode [ 701.760595][T19996] wg2: entered promiscuous mode [ 701.765529][T19996] wg2: entered allmulticast mode [ 702.156729][T20005] veth1_macvtap: left promiscuous mode [ 702.271567][T20005] macsec0: entered promiscuous mode [ 702.869767][T20015] netlink: 'syz.0.5630': attribute type 39 has an invalid length. [ 703.271012][ T5794] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 703.528789][T20024] sit0: left promiscuous mode [ 704.033415][T20027] sit0: entered promiscuous mode [ 705.240508][T20053] netlink: 'syz.0.5643': attribute type 39 has an invalid length. [ 705.801317][ T5794] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 708.806114][T20086] netlink: 'syz.0.5653': attribute type 39 has an invalid length. [ 709.236276][T20091] veth1_macvtap: left promiscuous mode [ 709.256444][T20091] macsec0: entered promiscuous mode [ 709.763570][ T5794] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 710.636092][T20115] netlink: 'syz.2.5664': attribute type 39 has an invalid length. [ 711.276416][T20123] macsec0: entered promiscuous mode [ 711.303913][T20123] macsec0: left allmulticast mode [ 711.837267][T20130] syzkaller0: entered promiscuous mode [ 711.855253][T20130] syzkaller0: entered allmulticast mode [ 711.981881][ T5794] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 717.669538][ T5794] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 719.408614][T20176] syzkaller0: entered promiscuous mode [ 719.488423][T20183] sit0: left promiscuous mode [ 719.572904][T20184] sit0: entered promiscuous mode [ 721.768412][ T5794] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 722.441440][T20210] sit0: left promiscuous mode [ 722.589211][T20211] sit0: entered promiscuous mode [ 728.054850][ T5794] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 733.602894][T20267] syzkaller0: entered promiscuous mode [ 735.335289][T20278] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.342735][T20278] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.353417][T20278] bridge0: entered allmulticast mode [ 735.374749][T20280] bridge_slave_1: left allmulticast mode [ 735.380912][T20280] bridge_slave_1: left promiscuous mode [ 735.392734][T20280] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.402653][T20280] bridge_slave_0: left allmulticast mode [ 735.409310][T20280] bridge_slave_0: left promiscuous mode [ 735.415098][T20280] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.479953][T20283] netlink: 'syz.0.5724': attribute type 39 has an invalid length. [ 737.979859][T20312] netlink: 'syz.0.5735': attribute type 39 has an invalid length. [ 739.056515][ T5793] Bluetooth: hci3: command 0x0406 tx timeout [ 741.353897][T20343] netlink: 'syz.3.5745': attribute type 39 has an invalid length. [ 743.747070][T20372] netlink: 'syz.0.5755': attribute type 39 has an invalid length. [ 744.256944][T20378] [ 744.259337][T20378] ============================================ [ 744.265504][T20378] WARNING: possible recursive locking detected [ 744.271705][T20378] syzkaller #0 Not tainted [ 744.276117][T20378] -------------------------------------------- [ 744.282261][T20378] syz.0.5764/20378 is trying to acquire lock: [ 744.288411][T20378] ffff888057057238 (&trie->lock){..-.}-{2:2}, at: trie_delete_elem+0x96/0x6a0 [ 744.297301][T20378] [ 744.297301][T20378] but task is already holding lock: [ 744.304663][T20378] ffff888057051238 (&trie->lock){..-.}-{2:2}, at: trie_update_elem+0xca/0xea0 [ 744.313634][T20378] [ 744.313634][T20378] other info that might help us debug this: [ 744.321876][T20378] Possible unsafe locking scenario: [ 744.321876][T20378] [ 744.329418][T20378] CPU0 [ 744.332699][T20378] ---- [ 744.335977][T20378] lock(&trie->lock); [ 744.340056][T20378] lock(&trie->lock); [ 744.344125][T20378] [ 744.344125][T20378] *** DEADLOCK *** [ 744.344125][T20378] [ 744.352285][T20378] May be due to missing lock nesting notation [ 744.352285][T20378] [ 744.360622][T20378] 3 locks held by syz.0.5764/20378: [ 744.365826][T20378] #0: ffffffff8cd2fbe0 (rcu_read_lock){....}-{1:2}, at: bpf_map_update_value+0x41d/0x720 [ 744.375864][T20378] #1: ffff888057051238 (&trie->lock){..-.}-{2:2}, at: trie_update_elem+0xca/0xea0 [ 744.385191][T20378] #2: ffffffff8cd2fbe0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run4+0xfd/0x420 [ 744.394507][T20378] [ 744.394507][T20378] stack backtrace: [ 744.400392][T20378] CPU: 0 PID: 20378 Comm: syz.0.5764 Not tainted syzkaller #0 [ 744.407851][T20378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 744.417914][T20378] Call Trace: [ 744.421191][T20378] [ 744.424128][T20378] dump_stack_lvl+0x16c/0x230 [ 744.428817][T20378] ? show_regs_print_info+0x20/0x20 [ 744.434023][T20378] ? print_deadlock_bug+0x435/0x5d0 [ 744.439227][T20378] __lock_acquire+0x5d40/0x7c80 [ 744.444084][T20378] ? mark_lock+0x94/0x320 [ 744.448416][T20378] ? verify_lock_unused+0x140/0x140 [ 744.453613][T20378] ? __lock_acquire+0x1260/0x7c80 [ 744.458648][T20378] lock_acquire+0x197/0x410 [ 744.463158][T20378] ? trie_delete_elem+0x96/0x6a0 [ 744.468102][T20378] ? verify_lock_unused+0x140/0x140 [ 744.473299][T20378] ? read_lock_is_recursive+0x20/0x20 [ 744.478680][T20378] _raw_spin_lock_irqsave+0xa8/0xf0 [ 744.483883][T20378] ? trie_delete_elem+0x96/0x6a0 [ 744.488827][T20378] ? _raw_spin_lock+0x40/0x40 [ 744.493514][T20378] trie_delete_elem+0x96/0x6a0 [ 744.498287][T20378] ? __cant_sleep+0x210/0x210 [ 744.502976][T20378] bpf_prog_39f3f2bc571bf26f+0x4d/0x51 [ 744.508452][T20378] bpf_trace_run4+0x1f9/0x420 [ 744.513306][T20378] ? bpf_trace_run4+0xfd/0x420 [ 744.518073][T20378] ? bpf_trace_run3+0x400/0x400 [ 744.523013][T20378] ? percpu_ref_put+0xef/0x180 [ 744.527782][T20378] ? __memcg_kmem_charge_page+0x264/0x380 [ 744.533512][T20378] __alloc_pages+0x429/0x460 [ 744.538118][T20378] ? zone_statistics+0x170/0x170 [ 744.543071][T20378] ? bpf_map_get_memcg+0x4e/0x4e0 [ 744.548105][T20378] ? __lock_acquire+0x7c80/0x7c80 [ 744.553133][T20378] ? __rwlock_init+0x150/0x150 [ 744.557919][T20378] __kmalloc_large_node+0x8c/0x1e0 [ 744.563045][T20378] ? bpf_map_kmalloc_node+0xbc/0x1b0 [ 744.568338][T20378] __kmalloc_node+0x10f/0x230 [ 744.573022][T20378] ? _raw_spin_lock+0x40/0x40 [ 744.577708][T20378] bpf_map_kmalloc_node+0xbc/0x1b0 [ 744.582828][T20378] trie_update_elem+0x166/0xea0 [ 744.587691][T20378] ? asm_exc_page_fault+0x26/0x30 [ 744.592726][T20378] bpf_map_update_value+0x660/0x720 [ 744.597934][T20378] map_update_elem+0x57b/0x700 [ 744.602711][T20378] __sys_bpf+0x652/0x800 [ 744.606955][T20378] ? bpf_link_show_fdinfo+0x350/0x350 [ 744.612334][T20378] ? lock_chain_count+0x20/0x20 [ 744.617192][T20378] __x64_sys_bpf+0x7c/0x90 [ 744.621609][T20378] do_syscall_64+0x55/0xb0 [ 744.626034][T20378] ? clear_bhb_loop+0x40/0x90 [ 744.630714][T20378] ? clear_bhb_loop+0x40/0x90 [ 744.635477][T20378] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 744.641381][T20378] RIP: 0033:0x7f152798ebe9 [ 744.645886][T20378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 744.665500][T20378] RSP: 002b:00007f152872b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 744.673940][T20378] RAX: ffffffffffffffda RBX: 00007f1527bc5fa0 RCX: 00007f152798ebe9 [ 744.681927][T20378] RDX: 0000000000000020 RSI: 0000200000001400 RDI: 0000000000000002 [ 744.689913][T20378] RBP: 00007f1527a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 744.697893][T20378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 744.705873][T20378] R13: 00007f1527bc6038 R14: 00007f1527bc5fa0 R15: 00007ffe2cd0ac88 [ 744.713858][T20378] [ 747.142112][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.148427][ T1289] ieee802154 phy1 wpan1: encryption failed: -22