last executing test programs: 8.645470901s ago: executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000480)) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) recvmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)=""/25, 0x19}, {0x0}], 0x2}, 0x18020) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000001c80)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'bridge_slave_0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='../\x00\x00\x00') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'wg2\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000040)={'wg2\x00', @link_local}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r3, 0xffffffffffffffff, 0x2}, 0xc) 8.496538723s ago: executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002220207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006000000850000000400000085000000d000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='jbd2_handle_stats\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) 8.414318346s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000100000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='ext4_allocate_inode\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x200000000000000) 8.328720688s ago: executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000002f000000b709000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000600)=r2, 0x4) 8.203939248s ago: executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x13, 0xe, &(0x7f00000021c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 8.041465862s ago: executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, &(0x7f00000002c0), 0x4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x0, 0x0, 0x0, 0x0, r0}, 0x48) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB], &(0x7f0000000440)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r2}, 0x10) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x90}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r6}, 0x10) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r7}, 0x8) close(r8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000400)={r8, r4, 0x4, r6}, 0x10) 1.377974381s ago: executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f3"], 0xfdef) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0xff, 0x3, 0xa}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) ioctl$SIOCSIFHWADDR(r1, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) 1.179258201s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.097530104s ago: executing program 2: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x3d, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfffffdef) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, 0x0, 0x0}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000e085000000040000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='ext4_mballoc_alloc\x00', r0}, 0x10) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) 1.070292518s ago: executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019008111e0020f060d8107040260000000000000000455a12a00090008000699e3ffffff14000500fe80817806000567b8b7b94002000009080016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x0) 1.024273985s ago: executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x100002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000e80)=ANY=[], 0x1a000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305829, &(0x7f0000000040)) write$cgroup_subtree(r0, 0x0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305839, &(0x7f0000000040)) 1.021433196s ago: executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x4, 0x0, &(0x7f0000001040)='GPL\x00', 0x0, 0x99, &(0x7f00000004c0)=""/153}, 0x90) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000002c0)=r0, 0x4) sendmsg$unix(r2, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_MAP_FREEZE(0x16, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000640)='syzkaller\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000000000007b1138000000000085100000b00000120500000095003300000000009500a505000000009e7b89fee93aa7a50da7e09bd284a6f45f8fc7b15037ec4bdba2"], 0x0, 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8993, &(0x7f0000000040)={'wg2\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000002c0), 0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r5) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="b9ff03076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 904.181353ms ago: executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffff7fff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.io_serviced\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40086607, 0x0) 892.683665ms ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) 803.798348ms ago: executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xffe6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x1b) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0xc028660f, &(0x7f00000005c0)=0x400000001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x43451) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) 778.486662ms ago: executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0x9, &(0x7f0000000000)=@raw=[@printk={@u, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x37}}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) 737.580838ms ago: executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x4, 0x4}]}, @typedef={0x0, 0x0, 0x0, 0x10, 0x4}, @volatile={0x0, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x5a}, 0x20) 728.69793ms ago: executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000208500000050000000850000000e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) 676.047638ms ago: executing program 4: close(0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'pim6reg\x00', 0x200}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pimreg0\x00', 0x20}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000180)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x3d, 0x0, 0x3, 0xfffffffc}, {0xac, 0x4, 0x0, 0x1}, {}, {}, {0x6, 0x0, 0x0, 0x3d1}]}) 604.721068ms ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x14}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000580)="ddb9547ed38704e9abaf9b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 427.232935ms ago: executing program 2: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18030000000000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 406.525778ms ago: executing program 1: bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000080)={r0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 306.519174ms ago: executing program 3: r0 = socket$kcm(0x15, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40010160) 303.294254ms ago: executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x13, &(0x7f0000000200)=r1, 0x4) 276.888988ms ago: executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x4, 0x0, &(0x7f0000001040)='GPL\x00', 0x0, 0x99, &(0x7f00000004c0)=""/153}, 0x90) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000002c0)=r0, 0x4) sendmsg$unix(r2, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_MAP_FREEZE(0x16, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000640)='syzkaller\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000000000007b1138000000000085100000b00000120500000095003300000000009500a505000000009e7b89fee93aa7a50da7e09bd284a6f45f8fc7b15037ec4bdba2"], 0x0, 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8993, &(0x7f0000000040)={'wg2\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000002c0), 0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r5) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="b9ff03076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 217.120517ms ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x12, 0x81, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 192.277801ms ago: executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x100002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000e80)=ANY=[], 0x1a000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305829, &(0x7f0000000040)) write$cgroup_subtree(r0, 0x0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305839, &(0x7f0000000040)) 135.759259ms ago: executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000007880)=[@ip_retopts={{0x24, 0x0, 0x7, {[@noop, @timestamp={0x44, 0x10, 0x8, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}], 0x28}, 0x0) 97.920436ms ago: executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x0, 0x0, 0x0, &(0x7f0000281ffc)='GPL\x00'}, 0x90) 0s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x22}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe80, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): k: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 115.274214][ T6042] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 115.334464][ T5925] device hsr_slave_0 entered promiscuous mode [ 115.410547][ T5925] device hsr_slave_1 entered promiscuous mode [ 115.574234][ T6053] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 115.655776][ T6053] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 115.665098][ T6057] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 115.934598][ T6065] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 116.085299][ T32] device hsr_slave_0 left promiscuous mode [ 116.107921][ T32] device hsr_slave_1 left promiscuous mode [ 116.162229][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.183725][ T32] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.254361][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.286167][ T48] Bluetooth: hci3: command tx timeout [ 116.291725][ T32] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.372408][ T32] device veth1_macvtap left promiscuous mode [ 116.396005][ T32] device veth0_macvtap left promiscuous mode [ 116.453789][ T32] device veth1_vlan left promiscuous mode [ 116.471906][ T32] device veth0_vlan left promiscuous mode [ 116.503801][ T6086] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.2'. [ 116.693801][ T6094] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 116.874925][ T32] team0 (unregistering): Port device team_slave_1 removed [ 116.891787][ T32] team0 (unregistering): Port device team_slave_0 removed [ 116.903629][ T32] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.919252][ T32] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.974953][ T32] bond0 (unregistering): Released all slaves [ 117.001448][ T6086] netlink: 6332 bytes leftover after parsing attributes in process `syz-executor.2'. [ 117.012061][ T6097] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'. [ 117.487377][ T6120] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 117.619639][ T6123] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.1'. [ 117.681778][ T6123] netlink: 6332 bytes leftover after parsing attributes in process `syz-executor.1'. [ 117.937144][ T5925] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 118.017089][ T5925] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 118.067261][ T5925] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 118.144286][ T5925] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 118.303583][ T6157] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 118.366080][ T48] Bluetooth: hci3: command tx timeout [ 118.643293][ T5925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.733065][ T5925] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.789834][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 118.802447][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 118.878573][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 118.900022][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 118.934982][ T3648] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.942169][ T3648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.972405][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 118.986150][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 118.998019][ T3648] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.005142][ T3648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.013232][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 119.070168][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 119.108586][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 119.158097][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 119.171002][ T6188] validate_nla: 14 callbacks suppressed [ 119.171019][ T6188] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 119.207114][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 119.215642][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 119.238308][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 119.289435][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 119.297742][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 119.306302][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 119.320253][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 119.332364][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 119.386722][ T5925] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 120.270119][ T5925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.315167][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 120.327561][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 120.431590][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 120.446192][ T48] Bluetooth: hci3: command tx timeout [ 120.451793][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 120.553404][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 120.574263][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 120.604440][ T5925] device veth0_vlan entered promiscuous mode [ 120.639831][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 120.666412][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 120.693791][ T5925] device veth1_vlan entered promiscuous mode [ 120.808059][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 120.817346][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 120.856123][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 120.899249][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 120.948231][ T5925] device veth0_macvtap entered promiscuous mode [ 120.978135][ T5925] device veth1_macvtap entered promiscuous mode [ 121.039364][ T5925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.075236][ T5925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.112725][ T5925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.141715][ T5925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.157875][ T5925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.189071][ T5925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.229700][ T5925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.281000][ T5925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.311101][ T5925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.354950][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 121.368789][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 121.402669][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 121.443161][ T5925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.479615][ T5925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.529971][ T5925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.562566][ T5925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.590822][ T5925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.610694][ T5925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.630725][ T6275] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 121.634128][ T5925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.665277][ T5925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.685540][ T5925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.716074][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 121.759067][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 121.803974][ T5925] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.836474][ T5925] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.863723][ T5925] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.935888][ T5925] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.259836][ T94] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.282100][ T94] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.373376][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 122.409186][ T1257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.461887][ T1257] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.515378][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 125.515255][ T6450] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 125.570362][ T6450] netlink: 16166 bytes leftover after parsing attributes in process `syz-executor.2'. [ 125.642429][ T6452] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 126.465500][ T6497] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 126.511331][ T6497] netlink: 16166 bytes leftover after parsing attributes in process `syz-executor.4'. [ 127.221352][ T6535] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 127.251097][ T6536] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 127.311295][ T6536] netlink: 16166 bytes leftover after parsing attributes in process `syz-executor.4'. [ 127.573576][ T6556] netlink: 4083 bytes leftover after parsing attributes in process `syz-executor.2'. [ 127.619345][ T6553] Zero length message leads to an empty skb [ 127.772615][ T6564] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 127.943778][ T6576] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 127.976091][ T6576] netlink: 16166 bytes leftover after parsing attributes in process `syz-executor.1'. [ 128.316771][ T6596] netlink: 4083 bytes leftover after parsing attributes in process `syz-executor.3'. [ 128.859193][ T6612] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 128.878150][ T6612] netlink: 16166 bytes leftover after parsing attributes in process `syz-executor.0'. [ 132.558242][ T6800] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 132.767925][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.774293][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.100977][ T6829] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 133.200486][ T6829] team0: Device veth0_macvtap failed to register rx_handler [ 133.643132][ T6847] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 133.689665][ T6847] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 133.727085][ T6850] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 133.753595][ T6850] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 133.829036][ T6847] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 133.895583][ T6860] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 134.765318][ T6890] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 134.813772][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 134.902900][ T6890] team0: Port device vlan0 added [ 135.005293][ T6897] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 135.562972][ T6923] netlink: 16178 bytes leftover after parsing attributes in process `syz-executor.1'. [ 136.181094][ T6954] netlink: 16178 bytes leftover after parsing attributes in process `syz-executor.2'. [ 136.236817][ T6955] team0: Device veth0_macvtap failed to register rx_handler [ 136.396162][ T6964] netlink: 192 bytes leftover after parsing attributes in process `syz-executor.0'. [ 136.995263][ T6988] netlink: 16178 bytes leftover after parsing attributes in process `syz-executor.0'. [ 137.187687][ T6993] netlink: 192 bytes leftover after parsing attributes in process `syz-executor.2'. [ 137.829243][ T7019] validate_nla: 8 callbacks suppressed [ 137.829259][ T7019] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 137.855028][ T7023] netlink: 16178 bytes leftover after parsing attributes in process `syz-executor.0'. [ 137.891718][ T7019] team0: Device veth0_macvtap failed to register rx_handler [ 138.014765][ T7028] netlink: 763 bytes leftover after parsing attributes in process `syz-executor.2'. [ 138.174699][ T7035] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 138.208370][ T7035] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 138.583065][ T7043] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 138.606752][ T7043] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 138.624699][ T7043] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 138.643772][ T7043] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 138.675015][ T7043] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 138.705599][ T7043] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 138.748689][ T7052] netlink: 16178 bytes leftover after parsing attributes in process `syz-executor.4'. [ 138.899666][ T7059] netlink: 763 bytes leftover after parsing attributes in process `syz-executor.3'. [ 140.175457][ T7109] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 140.222508][ T7109] team0: Device veth0_macvtap failed to register rx_handler [ 140.807780][ T7132] netlink: 763 bytes leftover after parsing attributes in process `syz-executor.3'. [ 141.771570][ T7170] netlink: 763 bytes leftover after parsing attributes in process `syz-executor.2'. [ 142.676072][ T3627] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.687261][ T3571] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 142.696479][ T3571] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 142.706443][ T3571] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 142.715168][ T3571] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 142.724368][ T3571] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 142.732318][ T3571] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 142.831434][ T3627] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.942338][ T3627] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.016546][ T3627] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.667338][ T7207] chnl_net:caif_netlink_parms(): no params data found [ 144.048969][ T7207] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.076106][ T7207] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.113472][ T7207] device bridge_slave_0 entered promiscuous mode [ 144.201216][ T7207] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.222561][ T7207] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.253505][ T7207] device bridge_slave_1 entered promiscuous mode [ 144.548634][ T7207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.589293][ T7207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.766202][ T3571] Bluetooth: hci1: command tx timeout [ 144.810769][ T7207] team0: Port device team_slave_0 added [ 144.939379][ T7207] team0: Port device team_slave_1 added [ 145.383149][ T7207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.411854][ T7207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.477257][ T7207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.511334][ T7207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.524888][ T7207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.583460][ T7207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.623505][ T7294] validate_nla: 18 callbacks suppressed [ 145.623521][ T7294] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 145.769168][ T7297] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 145.806533][ T7297] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 145.824975][ T7207] device hsr_slave_0 entered promiscuous mode [ 145.971455][ T7207] device hsr_slave_1 entered promiscuous mode [ 145.992808][ T7207] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.041451][ T7207] Cannot create hsr debugfs directory [ 146.324042][ T3627] device hsr_slave_0 left promiscuous mode [ 146.354161][ T3627] device hsr_slave_1 left promiscuous mode [ 146.387952][ T3627] batman_adv: batadv0: Removing interface: team0 [ 146.424213][ T3627] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.469873][ T3627] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.536270][ T3627] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.578609][ T3627] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.670223][ T3627] device veth1_macvtap left promiscuous mode [ 146.705252][ T3627] device veth0_macvtap left promiscuous mode [ 146.742487][ T3627] device veth1_vlan left promiscuous mode [ 146.779323][ T3627] device veth0_vlan left promiscuous mode [ 146.846831][ T3571] Bluetooth: hci1: command tx timeout [ 147.405290][ T3627] team0 (unregistering): Port device vlan0 removed [ 147.573356][ T3627] team0 (unregistering): Port device team_slave_1 removed [ 147.595331][ T3627] team0 (unregistering): Port device team_slave_0 removed [ 147.607496][ T3627] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.620192][ T3627] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.680550][ T3627] bond0 (unregistering): Released all slaves [ 147.703435][ T7345] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 147.737321][ T7355] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 147.769772][ T7355] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 148.131093][ T7372] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 148.580945][ T7378] device syzkaller0 entered promiscuous mode [ 148.878989][ T7395] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 148.926082][ T3571] Bluetooth: hci1: command tx timeout [ 148.945867][ T7207] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 149.000171][ T7207] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 149.068678][ T7207] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 149.121365][ T7207] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 149.492711][ T7207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.614401][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 149.636427][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 149.648863][ T7207] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.711852][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 149.729555][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 149.756810][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.763954][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.793569][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 149.816975][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 149.841482][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.848670][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.866006][ T7433] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 149.884503][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 149.920124][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 149.968371][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 150.131663][ T7429] device syzkaller0 entered promiscuous mode [ 150.171877][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 150.199882][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 150.224768][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 150.273135][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 150.312581][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 150.351915][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 150.384442][ T7207] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 150.450067][ T7207] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 150.556166][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 150.564133][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 150.610266][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 151.005899][ T3571] Bluetooth: hci1: command tx timeout [ 151.447755][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 151.475916][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 151.485182][ T7207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.577393][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 151.596465][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 151.655401][ T7207] device veth0_vlan entered promiscuous mode [ 151.716694][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 151.726344][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 151.856323][ T7207] device veth1_vlan entered promiscuous mode [ 151.867906][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 151.875722][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 151.884107][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 151.892531][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 151.970083][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 151.986935][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 152.006602][ T7207] device veth0_macvtap entered promiscuous mode [ 152.022498][ T7207] device veth1_macvtap entered promiscuous mode [ 152.074848][ T7207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.100121][ T7207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.139438][ T7207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.199334][ T7207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.238543][ T7207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.260904][ T7207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.316823][ T7207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.374622][ T7207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.424626][ T7207] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.621859][ T7494] device syzkaller0 entered promiscuous mode [ 152.727433][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 152.818855][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 152.843514][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 152.868643][ T7207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.952426][ T7207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.981678][ T7207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.050785][ T7207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.075997][ T7207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.105834][ T7207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.115743][ T7207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.141143][ T7207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.286776][ T7207] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.440645][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 153.486713][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 153.510098][ T7207] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.610243][ T7207] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.645969][ T7207] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.677340][ T7207] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.708689][ T7526] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. [ 153.920996][ T5042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.955065][ T5042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.094800][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 154.170106][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.220296][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.310337][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 154.473334][ T7552] device syzkaller0 entered promiscuous mode [ 155.930611][ T7599] sctp: [Deprecated]: syz-executor.1 (pid 7599) Use of int in maxseg socket option. [ 155.930611][ T7599] Use struct sctp_assoc_value instead [ 156.008444][ T7606] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. [ 157.146445][ T7652] sctp: [Deprecated]: syz-executor.2 (pid 7652) Use of int in maxseg socket option. [ 157.146445][ T7652] Use struct sctp_assoc_value instead [ 157.628151][ T7677] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 157.729564][ T7677] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 158.191392][ T7707] sctp: [Deprecated]: syz-executor.2 (pid 7707) Use of int in maxseg socket option. [ 158.191392][ T7707] Use struct sctp_assoc_value instead [ 158.874481][ T7725] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 158.903637][ T7725] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 159.124932][ T7744] sctp: [Deprecated]: syz-executor.2 (pid 7744) Use of int in maxseg socket option. [ 159.124932][ T7744] Use struct sctp_assoc_value instead [ 159.589632][ T7763] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.0'. [ 160.155226][ T7788] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 160.215855][ T7788] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 160.843610][ T7806] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.1'. [ 160.913686][ T7803] device syzkaller0 entered promiscuous mode [ 161.500723][ T7843] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.0'. [ 162.213260][ T7858] device syzkaller0 entered promiscuous mode [ 162.803739][ T7899] netlink: 202920 bytes leftover after parsing attributes in process `syz-executor.0'. [ 163.246631][ T7914] device syzkaller0 entered promiscuous mode [ 163.650028][ T7934] netlink: 202920 bytes leftover after parsing attributes in process `syz-executor.3'. [ 164.459765][ T7958] device syzkaller0 entered promiscuous mode [ 164.581421][ T7978] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 165.072372][ T8010] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 165.363919][ T8012] device syzkaller0 entered promiscuous mode [ 165.728554][ T8045] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 165.833136][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 166.284347][ T8063] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 166.308025][ T8064] device syzkaller0 entered promiscuous mode [ 166.850982][ T8099] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 166.861686][ T32] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 167.129630][ T8119] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 167.613607][ T8151] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 168.115572][ T8175] EXT4-fs warning (device sda1): verify_group_input:172: Reserved blocks too high (149) [ 168.747525][ T8187] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 168.975022][ T8204] EXT4-fs warning (device sda1): verify_group_input:172: Reserved blocks too high (149) [ 169.053325][ T8207] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 170.234841][ T8239] EXT4-fs warning (device sda1): verify_group_input:172: Reserved blocks too high (149) [ 170.566751][ T8254] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 170.751031][ T8269] EXT4-fs warning (device sda1): verify_group_input:172: Reserved blocks too high (149) [ 171.936314][ T8325] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 171.985098][ T8325] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 172.007537][ T8325] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.1'. [ 172.475359][ T8364] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 172.496966][ T8364] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 172.505070][ T8364] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.2'. [ 172.881248][ T8366] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 172.905922][ T8366] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 172.956308][ T8373] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 174.224950][ T8440] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 174.233949][ T8440] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 174.244853][ T8440] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.4'. [ 174.592074][ T8459] device syzkaller0 entered promiscuous mode [ 174.618846][ T8459] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 174.811127][ T8468] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 174.821764][ T8468] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 175.149524][ T8493] device syzkaller0 entered promiscuous mode [ 175.177491][ T8493] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 175.627071][ T8509] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 175.651453][ T8509] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 175.807042][ T48] Bluetooth: hci4: command 0x0406 tx timeout [ 175.810814][ T3571] Bluetooth: hci2: command 0x0406 tx timeout [ 175.942523][ T8526] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 175.997838][ T8526] netlink: 128124 bytes leftover after parsing attributes in process `syz-executor.1'. [ 176.055197][ T8528] device syzkaller0 entered promiscuous mode [ 176.092117][ T8528] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 176.709684][ T8550] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 179.062503][ T8647] validate_nla: 1 callbacks suppressed [ 179.062558][ T8647] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 179.082716][ T8660] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 179.094648][ T8660] netlink: 128124 bytes leftover after parsing attributes in process `syz-executor.1'. [ 179.109776][ T3571] Bluetooth: hci1: unexpected event 0x30 length: 15 > 3 [ 179.126017][ T8647] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 179.730214][ T8694] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 179.773178][ T8694] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 180.144282][ T8715] netlink: 'syz-executor.3': attribute type 33 has an invalid length. [ 180.169448][ T8715] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.3'. [ 180.504902][ T3571] Bluetooth: hci1: unexpected event 0x30 length: 15 > 3 [ 180.549399][ T8746] netlink: 'syz-executor.0': attribute type 33 has an invalid length. [ 180.570413][ T8746] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.0'. [ 180.996219][ T8777] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 181.037506][ T8777] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 181.066292][ T8782] netlink: 'syz-executor.2': attribute type 33 has an invalid length. [ 181.074750][ T8782] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.2'. [ 181.364168][ T8794] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 181.391019][ T8794] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 181.619652][ T8812] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 181.716551][ T8817] netlink: 'syz-executor.2': attribute type 33 has an invalid length. [ 182.034785][ T3571] Bluetooth: hci4: unexpected event 0x30 length: 15 > 3 [ 182.089784][ T3571] Bluetooth: hci0: Malformed HCI Event [ 183.147191][ T3575] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 183.157905][ T3575] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 183.165922][ T3575] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 183.175053][ T3575] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 183.186031][ T3575] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 183.193727][ T3575] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 183.327420][ T46] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.501283][ T46] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.810078][ T46] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.160802][ T3575] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 184.165272][ T46] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.549923][ T8863] chnl_net:caif_netlink_parms(): no params data found [ 184.958705][ T8863] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.982362][ T8863] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.996946][ T8863] device bridge_slave_0 entered promiscuous mode [ 185.085259][ T8863] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.101660][ T8863] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.172790][ T8863] device bridge_slave_1 entered promiscuous mode [ 185.192936][ T8944] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 185.239066][ T8944] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 185.269619][ T3575] Bluetooth: hci2: command tx timeout [ 185.383150][ T8863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.404332][ T8863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.436540][ T3575] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4 [ 185.580630][ T8863] team0: Port device team_slave_0 added [ 185.655684][ T8863] team0: Port device team_slave_1 added [ 185.812335][ T8863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.873098][ T8863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.925070][ T8863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.980002][ T8863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.017726][ T8863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.078005][ T8863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.095078][ T8965] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 186.120077][ T8965] __nla_validate_parse: 6 callbacks suppressed [ 186.120093][ T8965] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 186.217071][ T8863] device hsr_slave_0 entered promiscuous mode [ 186.231425][ T8863] device hsr_slave_1 entered promiscuous mode [ 186.243249][ T8863] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 186.251839][ T8863] Cannot create hsr debugfs directory [ 186.273462][ T3575] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 186.281903][ T46] device hsr_slave_0 left promiscuous mode [ 186.308571][ T46] device hsr_slave_1 left promiscuous mode [ 186.326531][ T46] batman_adv: batadv0: Removing interface: team0 [ 186.338082][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.361550][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.371488][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.395188][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.471613][ T46] device bridge_slave_1 left promiscuous mode [ 186.487471][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.545218][ T46] device bridge_slave_0 left promiscuous mode [ 186.561617][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.671053][ T46] device veth1_macvtap left promiscuous mode [ 186.702059][ T46] device veth1_vlan left promiscuous mode [ 186.714349][ T46] device veth0_vlan left promiscuous mode [ 186.973123][ T46] team0 (unregistering): Port device team_slave_1 removed [ 186.988582][ T46] team0 (unregistering): Port device team_slave_0 removed [ 186.999783][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.015524][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.074107][ T46] bond0 (unregistering): Released all slaves [ 187.313880][ T3575] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4 [ 187.336132][ T3575] Bluetooth: hci2: command tx timeout [ 187.376414][ T9006] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 187.393060][ T9006] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 187.442944][ T9016] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 187.471907][ T9016] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 188.251479][ T3575] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 188.263349][ T8863] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 188.361622][ T8863] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 188.427794][ T8863] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 188.493465][ T8863] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 190.662495][ T9103] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 190.687455][ T9103] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 191.056829][ T9117] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 191.334962][ T9129] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 191.438051][ T9129] team0: Port device vlan0 added [ 191.469232][ T3571] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 191.480244][ T3571] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 191.504019][ T3571] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 191.512218][ T3571] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 191.526324][ T3571] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 191.533609][ T3571] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 191.607351][ T9142] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 191.616242][ T9142] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 192.183078][ T9137] chnl_net:caif_netlink_parms(): no params data found [ 192.815882][ T9174] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 192.859352][ T9174] team0: Port device vlan0 added [ 192.881971][ T9137] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.913211][ T9137] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.952486][ T9137] device bridge_slave_0 entered promiscuous mode [ 192.992577][ T9137] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.006758][ T9137] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.014922][ T9137] device bridge_slave_1 entered promiscuous mode [ 193.201269][ T9137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.263865][ T9137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.479046][ T9200] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 193.504465][ T9200] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 193.559414][ T9200] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 193.577505][ T3575] Bluetooth: hci2: command tx timeout [ 193.633266][ T9137] team0: Port device team_slave_0 added [ 193.674736][ T9137] team0: Port device team_slave_1 added [ 194.006361][ T9137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.023060][ T9137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.116301][ T9137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.178485][ T9137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.186075][ T9137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.222165][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.228534][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.268004][ T9137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.359331][ T9137] device hsr_slave_0 entered promiscuous mode [ 194.371577][ T9137] device hsr_slave_1 entered promiscuous mode [ 194.422873][ T9137] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 194.430735][ T9137] Cannot create hsr debugfs directory [ 194.623317][ T9233] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 195.126382][ T46] device hsr_slave_0 left promiscuous mode [ 195.163611][ T46] device hsr_slave_1 left promiscuous mode [ 195.194151][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.233504][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.296365][ T46] device bridge_slave_1 left promiscuous mode [ 195.313172][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.356696][ T46] device bridge_slave_0 left promiscuous mode [ 195.363706][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.603131][ T46] team0 (unregistering): Port device team_slave_1 removed [ 195.645885][ T3575] Bluetooth: hci2: command tx timeout [ 195.656832][ T46] team0 (unregistering): Port device team_slave_0 removed [ 195.683905][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.701013][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.784040][ T46] bond0 (unregistering): Released all slaves [ 197.178719][ T3571] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 197.189888][ T3571] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 197.198421][ T3571] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 197.208965][ T3571] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 197.218832][ T3571] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 197.226547][ T3571] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 197.249360][ T9137] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 197.278516][ T9137] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 197.504581][ T9137] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 197.736170][ T3575] Bluetooth: hci2: command tx timeout [ 197.766629][ T9137] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 197.906245][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 198.075304][ T9137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.115003][ T3291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 198.123724][ T3291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 198.148106][ T9137] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.168375][ T3291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 198.186604][ T3291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 198.200394][ T3291] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.207692][ T3291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.247088][ T3291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 198.255173][ T3291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 198.276967][ T3291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 198.285430][ T3291] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.292580][ T3291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.341397][ T3291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 198.371536][ T3291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 198.502804][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 198.611596][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 198.666799][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 198.675627][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 198.684689][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 198.706526][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 198.759960][ T9295] chnl_net:caif_netlink_parms(): no params data found [ 198.796398][ T3291] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 199.114045][ T1257] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 199.172986][ T9137] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 199.194774][ T9137] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 199.215017][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 199.224533][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 199.246479][ T3575] Bluetooth: hci0: command tx timeout [ 199.504922][ T9341] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 199.544913][ T9295] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.563949][ T9295] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.585183][ T9295] device bridge_slave_0 entered promiscuous mode [ 199.630940][ T9295] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.673173][ T9295] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.708482][ T9295] device bridge_slave_1 entered promiscuous mode [ 199.795675][ T9295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.806433][ T3575] Bluetooth: hci2: command tx timeout [ 199.854514][ T3291] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 199.883296][ T3291] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 199.904234][ T9295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.945027][ T9137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.032951][ T9295] team0: Port device team_slave_0 added [ 200.057579][ T9295] team0: Port device team_slave_1 added [ 200.157036][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 200.167308][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 200.197924][ T9295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.204901][ T9295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.259116][ T9295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.291449][ T9137] device veth0_vlan entered promiscuous mode [ 200.304795][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 200.314098][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 200.323927][ T9295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.342167][ T9295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.374956][ T9295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.400690][ T9137] device veth1_vlan entered promiscuous mode [ 200.419888][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 200.431802][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 200.446682][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 200.501519][ T46] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.553610][ T3291] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 200.565085][ T3291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 200.574184][ T3291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 200.593822][ T9137] device veth0_macvtap entered promiscuous mode [ 200.607643][ T9295] device hsr_slave_0 entered promiscuous mode [ 200.616750][ T9295] device hsr_slave_1 entered promiscuous mode [ 200.623381][ T9295] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 200.632801][ T9295] Cannot create hsr debugfs directory [ 200.643666][ T46] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.659702][ T9137] device veth1_macvtap entered promiscuous mode [ 200.754942][ T46] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.773244][ T9137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.785084][ T9137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.805556][ T9137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.817261][ T9137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.833439][ T9137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.844526][ T9137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.864567][ T9137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.875578][ T9137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.893553][ T9137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.914800][ T3291] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 200.924437][ T3291] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 200.941255][ T3291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 200.955584][ T46] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.997703][ T9137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.022752][ T9137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.046174][ T9137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.084570][ T9137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.114619][ T9137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.132407][ T9137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.142583][ T9137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.161953][ T9137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.178441][ T9137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.190536][ T9417] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 201.219839][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 201.229270][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 201.240824][ T9137] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.250678][ T9137] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.260211][ T9137] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.269640][ T9137] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.326129][ T3575] Bluetooth: hci0: command tx timeout [ 201.469466][ T94] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.483419][ T94] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.535055][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 201.572100][ T1257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.606234][ T1257] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.651171][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 201.893908][ T9452] netlink: 'syz-executor.3': attribute type 39 has an invalid length. [ 202.192551][ T9465] IPv6: NLM_F_CREATE should be specified when creating new route [ 202.214179][ T9465] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. [ 202.426269][ T46] device hsr_slave_0 left promiscuous mode [ 202.448627][ T46] device hsr_slave_1 left promiscuous mode [ 202.480820][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.506978][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.577381][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.621628][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.706510][ T46] device bridge_slave_1 left promiscuous mode [ 202.718052][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.796612][ T46] device bridge_slave_0 left promiscuous mode [ 202.821324][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.871082][ T46] device veth1_macvtap left promiscuous mode [ 202.890453][ T46] device veth1_vlan left promiscuous mode [ 202.913690][ T46] device veth0_vlan left promiscuous mode [ 203.340317][ T46] team0 (unregistering): Port device vlan0 removed [ 203.390306][ T46] team0 (unregistering): Port device team_slave_1 removed [ 203.406329][ T3575] Bluetooth: hci0: command tx timeout [ 203.414439][ T46] team0 (unregistering): Port device team_slave_0 removed [ 203.429209][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.442406][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.501608][ T46] bond0 (unregistering): Released all slaves [ 203.570196][ T9486] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 203.596500][ T9501] IPv6: NLM_F_CREATE should be specified when creating new route [ 203.604299][ T9501] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.0'. [ 203.695471][ T9295] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 203.725015][ T9295] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 203.738037][ T9505] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 203.785960][ T9295] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 203.794113][ T9505] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 203.817721][ T9295] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 203.825592][ T9505] netlink: 181400 bytes leftover after parsing attributes in process `syz-executor.1'. [ 204.026931][ T9295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.069351][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 204.080852][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 204.102609][ T9295] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.132536][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 204.149647][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 204.174164][ T3617] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.181378][ T3617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.206841][ T9532] IPv6: NLM_F_CREATE should be specified when creating new route [ 204.228198][ T9532] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.3'. [ 204.268062][ T3291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 204.292302][ T3291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 204.309187][ T3291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 204.333411][ T3291] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.340626][ T3291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.373625][ T3291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 204.391469][ T9535] netlink: 'syz-executor.1': attribute type 39 has an invalid length. [ 204.451772][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 204.464193][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 204.497749][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 204.527037][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 204.546491][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 204.555304][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 204.592400][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 204.599564][ T9547] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 204.616497][ T9547] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 204.632306][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 204.635037][ T9547] netlink: 181400 bytes leftover after parsing attributes in process `syz-executor.2'. [ 204.640891][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 204.688995][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 205.224491][ T9581] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 205.302503][ T9581] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 205.369220][ T9584] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 205.389504][ T9584] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 205.419832][ T9584] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.1'. [ 205.463197][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 205.477843][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 205.496202][ T3575] Bluetooth: hci0: command tx timeout [ 205.511012][ T9295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.966868][ T9608] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 206.130155][ T9616] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 206.186283][ T9616] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 206.209889][ T9616] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.1'. [ 206.334739][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 206.354417][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 206.422482][ T9295] device veth0_vlan entered promiscuous mode [ 206.441281][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 206.456548][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 206.470847][ T9295] device veth1_vlan entered promiscuous mode [ 206.492414][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 206.510756][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 206.530966][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 206.617215][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 206.625368][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 206.703042][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 206.737523][ T9295] device veth0_macvtap entered promiscuous mode [ 206.811583][ T9295] device veth1_macvtap entered promiscuous mode [ 206.933887][ T9295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.002931][ T9295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.080420][ T9295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.125503][ T9295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.176922][ T9295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.221498][ T9295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.243828][ T9295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.357024][ T9295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.391497][ T9295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.420547][ T9295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.444971][ T9660] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 207.445048][ T9295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.454337][ T9660] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 207.476750][ T9660] netlink: 181400 bytes leftover after parsing attributes in process `syz-executor.3'. [ 207.494670][ T9295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.520972][ T9295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.551910][ T9295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.575826][ T9295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.585665][ T9295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.597102][ T9295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.617785][ T9295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.637975][ T9650] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.2'. [ 207.655093][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 207.687361][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 207.711301][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 207.730275][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 207.752417][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 207.772555][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 207.801146][ T9295] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.833666][ T9295] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.853373][ T9295] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.873676][ T9295] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.235507][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.262356][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.333364][ T1257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.342757][ T1257] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.355271][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 208.394330][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 208.870608][ T9702] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.1'. [ 209.671962][ T9767] validate_nla: 17 callbacks suppressed [ 209.671977][ T9767] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 209.763968][ T9773] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 209.802567][ T9776] EXT4-fs warning (device sda1): verify_group_input:180: Cannot read last block (2147745790) [ 209.876279][ T9773] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 209.904191][ T9777] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 209.944310][ T9782] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 209.957439][ T9783] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 210.528269][ T9816] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 210.571245][ T9816] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 210.616332][ T9825] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 210.648798][ T9816] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 210.679310][ T9829] EXT4-fs warning (device sda1): verify_group_input:180: Cannot read last block (2147745790) [ 213.866934][T10048] netlink: 129384 bytes leftover after parsing attributes in process `syz-executor.2'. [ 213.897385][T10048] openvswitch: netlink: Message has 4 unknown bytes. [ 214.079827][ T3575] Bluetooth: hci2: unexpected event 0x23 length: 15 > 13 [ 214.361745][T10081] netlink: 129384 bytes leftover after parsing attributes in process `syz-executor.2'. [ 214.413581][T10081] openvswitch: netlink: Message has 4 unknown bytes. [ 214.527895][ T3575] Bluetooth: hci4: unexpected event 0x23 length: 15 > 13 [ 214.682658][T10103] netlink: 164 bytes leftover after parsing attributes in process `syz-executor.0'. [ 215.065668][ T3575] Bluetooth: hci4: unexpected event 0x23 length: 15 > 13 [ 215.563401][T10140] netlink: 164 bytes leftover after parsing attributes in process `syz-executor.2'. [ 215.591254][T10146] netlink: 129384 bytes leftover after parsing attributes in process `syz-executor.4'. [ 215.603035][T10146] openvswitch: netlink: Message has 4 unknown bytes. [ 215.795298][T10153] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 216.179396][T10174] netlink: 164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 216.209045][T10178] netlink: 180 bytes leftover after parsing attributes in process `syz-executor.3'. [ 216.538104][T10188] device syzkaller0 entered promiscuous mode [ 216.703852][T10208] netlink: 164 bytes leftover after parsing attributes in process `syz-executor.4'. [ 216.800204][T10211] validate_nla: 6 callbacks suppressed [ 216.800249][T10211] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 216.843423][T10211] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.3'. [ 217.071096][ T3575] Bluetooth: hci0: unexpected event 0x23 length: 15 > 13 [ 217.262032][T10234] device syzkaller0 entered promiscuous mode [ 218.153220][T10275] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 218.174714][T10274] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 218.688660][T10308] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 219.619832][T10344] device syzkaller0 entered promiscuous mode [ 219.874254][T10363] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 221.155262][T10442] netlink: 'syz-executor.1': attribute type 39 has an invalid length. [ 221.181397][T10442] device veth0_macvtap left promiscuous mode [ 221.362867][ T32] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.410226][T10450] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 221.464317][ T32] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.507865][ T3571] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 221.521633][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 221.530557][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 221.540354][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 221.548396][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 221.556950][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 221.583929][T10452] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 221.625060][ T32] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.773127][ T32] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.806659][ T46] wlan1: Trigger new scan to find an IBSS to join [ 222.087624][T10478] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 222.212015][T10455] chnl_net:caif_netlink_parms(): no params data found [ 222.245481][T10490] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 222.399198][T10498] __nla_validate_parse: 5 callbacks suppressed [ 222.399215][T10498] netlink: 14546 bytes leftover after parsing attributes in process `syz-executor.3'. [ 222.482571][T10492] device syzkaller0 entered promiscuous mode [ 222.556397][T10455] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.576445][T10455] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.591833][T10455] device bridge_slave_0 entered promiscuous mode [ 222.655684][T10455] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.664056][T10455] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.682434][T10455] device bridge_slave_1 entered promiscuous mode [ 222.772919][T10455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.827827][T10455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.911074][T10455] team0: Port device team_slave_0 added [ 223.034986][T10455] team0: Port device team_slave_1 added [ 223.053738][T10535] netlink: 14546 bytes leftover after parsing attributes in process `syz-executor.0'. [ 223.169037][T10455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.184648][T10455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.244076][T10455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.364903][ T32] device hsr_slave_0 left promiscuous mode [ 223.396831][ T32] device hsr_slave_1 left promiscuous mode [ 223.426568][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.434012][ T32] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.468691][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.486863][ T32] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.498103][ T32] device bridge_slave_1 left promiscuous mode [ 223.504369][ T32] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.519070][ T32] device bridge_slave_0 left promiscuous mode [ 223.525554][ T32] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.542581][ T32] device veth1_macvtap left promiscuous mode [ 223.549001][ T32] device veth0_macvtap left promiscuous mode [ 223.555215][ T32] device veth1_vlan left promiscuous mode [ 223.561749][ T32] device veth0_vlan left promiscuous mode [ 223.646848][ T3575] Bluetooth: hci0: command tx timeout [ 223.743528][ T32] team0 (unregistering): Port device team_slave_1 removed [ 223.757775][ T32] team0 (unregistering): Port device team_slave_0 removed [ 223.771950][ T32] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.785108][ T32] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.849793][ T32] bond0 (unregistering): Released all slaves [ 223.903907][T10455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.911127][T10455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.938286][T10455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.954481][T10570] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 223.966903][T10569] netlink: 14546 bytes leftover after parsing attributes in process `syz-executor.2'. [ 223.984691][T10572] tap0: tun_chr_ioctl cmd 1074025672 [ 223.990277][T10572] tap0: ignored: set checksum enabled [ 224.108071][T10455] device hsr_slave_0 entered promiscuous mode [ 224.127843][T10455] device hsr_slave_1 entered promiscuous mode [ 224.156464][T10455] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 224.164062][T10455] Cannot create hsr debugfs directory [ 224.246352][T10591] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. [ 224.524532][T10604] netlink: 14546 bytes leftover after parsing attributes in process `syz-executor.0'. [ 224.732858][T10616] tap0: tun_chr_ioctl cmd 1074025672 [ 224.751423][T10616] tap0: ignored: set checksum enabled [ 224.846394][ T3627] wlan1: Trigger new scan to find an IBSS to join [ 224.852939][ T3627] wlan1: Trigger new scan to find an IBSS to join [ 224.897908][T10455] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 224.941086][T10455] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 224.971898][T10455] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 225.004700][T10455] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 225.096936][T10630] netlink: 129384 bytes leftover after parsing attributes in process `syz-executor.3'. [ 225.144198][T10630] netlink: del zone limit has 4 unknown bytes [ 225.321330][T10455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.384713][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 225.401932][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 225.432558][T10455] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.472283][T10644] tap0: tun_chr_ioctl cmd 1074025672 [ 225.488534][T10644] tap0: ignored: set checksum enabled [ 225.494057][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 225.528737][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 225.548699][ T152] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.555960][ T152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.579462][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 225.591639][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 225.602929][ T152] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.610076][ T152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.629135][T10646] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 225.646683][T10646] device ipvlan1 entered promiscuous mode [ 225.663045][T10646] team0: Device ipvlan1 failed to register rx_handler [ 225.707148][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 225.722424][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 225.737546][ T3575] Bluetooth: hci0: command tx timeout [ 225.743899][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 225.766743][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 225.824777][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 225.854874][T10653] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 225.882861][T10653] netlink: 'syz-executor.2': attribute type 17 has an invalid length. [ 225.906422][T10653] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.2'. [ 225.934110][T10656] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 225.966064][T10656] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 225.969911][T10664] netlink: 129384 bytes leftover after parsing attributes in process `syz-executor.0'. [ 225.999286][T10455] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 226.016118][T10664] netlink: del zone limit has 4 unknown bytes [ 226.032176][T10455] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 226.080531][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 226.094251][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 226.113922][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 226.125124][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 226.141653][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 226.151337][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 226.178761][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 226.202034][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 226.283710][T10660] device syzkaller0 entered promiscuous mode [ 226.387563][T10682] syz-executor.1[10682] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 226.387657][T10682] syz-executor.1[10682] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 226.432226][T10682] syz-executor.1[10682] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 226.471909][T10682] syz-executor.1[10682] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 226.581740][T10691] EXT4-fs warning (device sda1): ext4_group_extend:1870: can't shrink FS - resize aborted [ 226.840326][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 226.859015][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 226.893293][T10455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.594706][T10722] __nla_validate_parse: 2 callbacks suppressed [ 227.594723][T10722] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 227.704191][T10725] netlink: 'syz-executor.3': attribute type 39 has an invalid length. [ 227.734943][T10725] netlink: 'syz-executor.3': attribute type 17 has an invalid length. [ 227.768047][T10725] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.3'. [ 227.781647][T10727] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 227.805879][T10727] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 227.821393][ T3575] Bluetooth: hci0: command tx timeout [ 227.860063][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 227.877459][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 227.884678][T10733] syz-executor.0[10733] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 227.885619][T10733] syz-executor.0[10733] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 227.902180][T10733] syz-executor.0[10733] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 227.908882][T10731] netlink: 16255 bytes leftover after parsing attributes in process `syz-executor.2'. [ 227.914918][T10733] syz-executor.0[10733] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 227.955979][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 228.003619][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 228.023729][T10455] device veth0_vlan entered promiscuous mode [ 228.039524][T10735] netlink: 64951 bytes leftover after parsing attributes in process `syz-executor.3'. [ 228.058677][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 228.069515][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 228.095480][T10455] device veth1_vlan entered promiscuous mode [ 228.185034][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 228.201638][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 228.228006][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 228.253809][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 228.280760][T10455] device veth0_macvtap entered promiscuous mode [ 228.290418][T10748] EXT4-fs warning (device sda1): ext4_group_extend:1870: can't shrink FS - resize aborted [ 228.309656][T10455] device veth1_macvtap entered promiscuous mode [ 228.333814][T10750] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 228.349461][T10455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.380234][T10455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.400705][T10455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.417344][T10455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.431820][T10455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.477610][T10455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.496475][T10455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.515652][T10455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.543886][T10455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.571757][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 228.582289][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 228.595440][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 228.621945][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 228.654749][T10455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.684315][T10455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.720954][T10455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.742381][T10455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.762159][T10455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.788050][T10455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.808186][T10455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.819257][T10455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.831000][T10455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.838763][T10758] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 228.852320][T10758] netlink: 'syz-executor.2': attribute type 17 has an invalid length. [ 228.861882][T10758] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.2'. [ 228.873004][T10760] netlink: 16255 bytes leftover after parsing attributes in process `syz-executor.3'. [ 228.906662][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 228.939369][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 228.973769][T10455] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.999368][T10455] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.010763][T10455] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.028267][T10455] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.051175][T10766] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 229.060031][T10766] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.2'. [ 229.074524][T10766] device dummy0 entered promiscuous mode [ 229.082728][T10766] bridge0: port 3(dummy0) entered blocking state [ 229.090499][T10766] bridge0: port 3(dummy0) entered disabled state [ 229.099152][T10766] bridge0: port 3(dummy0) entered blocking state [ 229.105622][T10766] bridge0: port 3(dummy0) entered forwarding state [ 229.113533][T10768] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 229.128860][T10768] device ipvlan1 entered promiscuous mode [ 229.143730][T10768] team0: Device ipvlan1 failed to register rx_handler [ 229.362022][T10782] syz-executor.3[10782] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 229.362113][T10782] syz-executor.3[10782] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 229.389711][T10780] device syzkaller0 entered promiscuous mode [ 229.415921][ T5042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.448212][ T5042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.691689][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 229.790610][T10793] delete_channel: no stack [ 229.795152][T10793] delete_channel: no stack [ 229.805983][ T46] wlan1: Trigger new scan to find an IBSS to join [ 229.807839][ T5042] wlan1: Trigger new scan to find an IBSS to join [ 229.844602][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.867117][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.885865][ T3575] Bluetooth: hci0: command tx timeout [ 230.140685][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 230.177308][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 230.616281][T10825] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 230.625130][T10825] device dummy0 entered promiscuous mode [ 231.064496][ T32] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 232.329306][ T1257] wlan1: Creating new IBSS network, BSSID 96:e0:ad:20:18:ef [ 232.337301][ T11] wlan1: Creating new IBSS network, BSSID c6:20:13:25:34:cf [ 232.425914][T10810] syz-executor.4 (10810) used greatest stack depth: 18568 bytes left [ 232.644348][T10847] __nla_validate_parse: 5 callbacks suppressed [ 232.644367][T10847] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.4'. [ 232.660805][T10851] delete_channel: no stack [ 232.665322][T10851] delete_channel: no stack [ 232.890189][T10859] device syzkaller0 entered promiscuous mode [ 233.250473][T10884] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.1'. [ 233.866085][T10907] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 234.230645][T10921] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.3'. [ 234.335956][T10925] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.3'. [ 235.753428][T10992] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 237.245955][ T48] Bluetooth: hci3: command 0x0406 tx timeout [ 238.443298][T11077] netlink: 'syz-executor.3': attribute type 22 has an invalid length. [ 238.462011][T11077] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 239.263345][T11109] netlink: 'syz-executor.0': attribute type 22 has an invalid length. [ 239.315899][T11109] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 239.626014][T11133] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 239.655066][T11133] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 239.701775][T11142] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 239.728613][T11141] netlink: 'syz-executor.1': attribute type 22 has an invalid length. [ 239.747278][T11141] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 239.764801][T11133] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 239.779029][T11133] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 239.829267][T11133] mac80211_hwsim hwsim15 : renamed from wlan1 [ 240.030206][T11162] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 240.054924][T11162] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 240.080686][T11162] device team0 entered promiscuous mode [ 240.092012][T11162] device team_slave_0 entered promiscuous mode [ 240.111055][T11169] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 240.114142][T11162] device team_slave_1 entered promiscuous mode [ 240.124099][T11169] netlink: 128124 bytes leftover after parsing attributes in process `syz-executor.4'. [ 240.140783][T11162] bridge0: port 3(team0) entered blocking state [ 240.164394][T11162] bridge0: port 3(team0) entered disabled state [ 240.181977][T11162] bridge0: port 3(team0) entered blocking state [ 240.188396][T11162] bridge0: port 3(team0) entered forwarding state [ 240.563882][T11198] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.2'. [ 240.595663][T11198] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 240.712591][T11206] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 240.767619][T11206] netlink: 128124 bytes leftover after parsing attributes in process `syz-executor.4'. [ 241.228138][T11235] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.2'. [ 241.237488][T11235] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 241.444078][T11246] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 241.472569][T11246] device team0 entered promiscuous mode [ 241.489335][T11246] device team_slave_0 entered promiscuous mode [ 241.502705][T11246] device team_slave_1 entered promiscuous mode [ 241.530321][T11246] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 241.734732][T11263] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 242.112200][T11290] bridge0: port 3(team0) entered blocking state [ 242.119719][T11290] bridge0: port 3(team0) entered disabled state [ 242.152729][T11290] device team0 entered promiscuous mode [ 242.166640][T11290] device team_slave_0 entered promiscuous mode [ 242.182447][T11290] device team_slave_1 entered promiscuous mode [ 242.212733][T11290] bridge0: port 3(team0) entered blocking state [ 242.219559][T11290] bridge0: port 3(team0) entered forwarding state [ 242.839277][T11309] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 243.237306][T11341] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 243.746565][T11371] bridge0: port 3(gretap0) entered blocking state [ 243.753115][T11371] bridge0: port 3(gretap0) entered disabled state [ 243.784795][T11371] device gretap0 entered promiscuous mode [ 243.791217][T11371] bridge0: port 3(gretap0) entered blocking state [ 243.797799][T11371] bridge0: port 3(gretap0) entered forwarding state [ 244.379997][T11412] bridge0: port 4(team0) entered blocking state [ 244.398049][T11412] bridge0: port 4(team0) entered disabled state [ 244.435564][T11412] device team0 entered promiscuous mode [ 244.452404][T11412] device team_slave_0 entered promiscuous mode [ 244.466416][T11412] device team_slave_1 entered promiscuous mode [ 244.478974][T11412] device vlan0 entered promiscuous mode [ 244.494151][T11412] bridge0: port 4(team0) entered blocking state [ 244.500910][T11412] bridge0: port 4(team0) entered forwarding state [ 244.631307][T11429] __nla_validate_parse: 7 callbacks suppressed [ 244.631331][T11429] netlink: 134780 bytes leftover after parsing attributes in process `syz-executor.2'. [ 244.654689][T11429] validate_nla: 34 callbacks suppressed [ 244.654707][T11429] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 245.203363][T11467] bridge0: port 4(gretap0) entered blocking state [ 245.218589][T11467] bridge0: port 4(gretap0) entered disabled state [ 245.233030][T11467] device gretap0 entered promiscuous mode [ 245.241656][T11467] bridge0: port 4(gretap0) entered blocking state [ 245.248212][T11467] bridge0: port 4(gretap0) entered forwarding state [ 245.739024][T11491] netlink: 196 bytes leftover after parsing attributes in process `syz-executor.1'. [ 246.666964][T11522] netlink: 196 bytes leftover after parsing attributes in process `syz-executor.0'. [ 246.691871][T11526] netlink: 134780 bytes leftover after parsing attributes in process `syz-executor.2'. [ 246.719957][T11526] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 246.777520][T11531] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 246.812824][T11531] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 246.848263][T11531] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 246.886251][T11539] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 246.913398][T11531] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 247.150278][T11563] netlink: 196 bytes leftover after parsing attributes in process `syz-executor.0'. [ 247.474150][ T3571] Bluetooth: hci1: unexpected event 0x14 length: 15 > 6 [ 247.580831][T11598] netlink: 196 bytes leftover after parsing attributes in process `syz-executor.2'. [ 247.995433][ T3571] Bluetooth: hci0: unexpected event 0x14 length: 15 > 6 [ 248.523720][ T3571] Bluetooth: hci1: unexpected event 0x14 length: 15 > 6 [ 248.702982][T11666] device syzkaller0 entered promiscuous mode [ 249.870006][ T3571] Bluetooth: hci0: unexpected event 0x14 length: 15 > 6 [ 250.155613][T11727] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 250.217012][T11727] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 250.225252][T11727] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 250.245594][T11732] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 250.259730][T11732] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.0'. [ 250.633626][ T3571] Bluetooth: hci0: unexpected event 0x14 length: 15 > 6 [ 250.785007][ T26] audit: type=1804 audit(1718626068.527:7): pid=11756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1577450702/syzkaller.KUlDXj/398/memory.events" dev="sda1" ino=1953 res=1 errno=0 [ 250.863540][T11764] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 250.882764][T11764] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 250.947651][T11767] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 250.971240][T11767] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 250.989743][T11767] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 251.467476][T11793] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 251.516070][T11793] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.2'. [ 251.552662][ T26] audit: type=1804 audit(1718626069.297:8): pid=11796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1857077737/syzkaller.MZSjBH/488/memory.events" dev="sda1" ino=1957 res=1 errno=0 [ 252.676625][ T26] audit: type=1804 audit(1718626070.427:9): pid=11825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1577450702/syzkaller.KUlDXj/404/memory.events" dev="sda1" ino=1961 res=1 errno=0 [ 252.758862][T11829] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 252.777686][ T5042] wlan1: Trigger new scan to find an IBSS to join [ 252.786671][T11829] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 253.095566][ T26] audit: type=1804 audit(1718626070.837:10): pid=11858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1577450702/syzkaller.KUlDXj/408/memory.events" dev="sda1" ino=1957 res=1 errno=0 [ 253.824493][T11913] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 253.858291][T11915] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 253.866600][T11915] netlink: 13435 bytes leftover after parsing attributes in process `syz-executor.4'. [ 254.766826][ T1257] wlan1: Trigger new scan to find an IBSS to join [ 255.656087][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.662401][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.815992][ T46] wlan1: Trigger new scan to find an IBSS to join [ 255.934108][T11985] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 256.001051][T11988] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 256.734344][ T5042] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.803040][ T3575] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 256.811769][ T3575] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 256.819513][ T3575] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 256.829118][ T3575] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 256.839021][ T3575] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 256.861424][ T3575] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 256.991265][ T5042] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.142235][ T5042] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.195875][T12024] validate_nla: 1 callbacks suppressed [ 257.195891][T12024] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 257.256290][ T5042] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.280627][T12030] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 257.581025][T12015] chnl_net:caif_netlink_parms(): no params data found [ 257.810392][ T46] wlan1: Trigger new scan to find an IBSS to join [ 257.825200][T12015] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.844995][T12015] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.855282][T12015] device bridge_slave_0 entered promiscuous mode [ 257.889346][T12015] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.903331][T12015] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.912495][T12015] device bridge_slave_1 entered promiscuous mode [ 257.937802][T12061] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 258.033313][T12015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.055557][T12015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.107964][T12015] team0: Port device team_slave_0 added [ 258.115674][T12015] team0: Port device team_slave_1 added [ 258.193653][T12015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.207605][T12015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.278823][T12015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.325692][ T5042] bridge0: port 4(gretap0) entered disabled state [ 258.347263][ T5042] device gretap0 left promiscuous mode [ 258.366612][ T5042] bridge0: port 4(gretap0) entered disabled state [ 258.416753][T12015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.423716][T12015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.558214][T12015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.729738][T12015] device hsr_slave_0 entered promiscuous mode [ 258.757685][T12015] device hsr_slave_1 entered promiscuous mode [ 258.808219][T12015] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 258.846272][ T3627] wlan1: Trigger new scan to find an IBSS to join [ 258.858593][T12015] Cannot create hsr debugfs directory [ 258.926267][ T3571] Bluetooth: hci2: command tx timeout [ 258.952436][ T3571] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 258.962084][T12084] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 258.979053][T12083] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 259.170614][ T5042] device hsr_slave_0 left promiscuous mode [ 259.178404][ T5042] device hsr_slave_1 left promiscuous mode [ 259.184908][ T5042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.201233][ T5042] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.213058][ T5042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.240769][ T5042] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.261943][ T5042] device team0 left promiscuous mode [ 259.271027][ T5042] device team_slave_0 left promiscuous mode [ 259.290028][ T5042] device team_slave_1 left promiscuous mode [ 259.300200][ T5042] bridge0: port 3(team0) entered disabled state [ 259.312618][ T5042] device bridge_slave_1 left promiscuous mode [ 259.322516][ T5042] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.336573][ T5042] device bridge_slave_0 left promiscuous mode [ 259.342845][ T5042] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.375121][ T5042] device veth1_macvtap left promiscuous mode [ 259.385015][ T5042] device veth1_vlan left promiscuous mode [ 259.391494][ T5042] device veth0_vlan left promiscuous mode [ 259.693288][ T5042] team0 (unregistering): Port device team_slave_1 removed [ 259.709939][ T5042] team0 (unregistering): Port device team_slave_0 removed [ 259.733323][ T5042] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.751966][ T5042] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.806165][ T11] wlan1: Trigger new scan to find an IBSS to join [ 259.837206][ T5042] bond0 (unregistering): Released all slaves [ 259.902161][T12108] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 260.034273][T12118] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 260.495590][T12015] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 260.536324][T12015] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 260.556594][T12015] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 260.587279][T12015] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 260.794429][T12015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.822776][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 260.844313][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 260.865130][T12015] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.891077][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 260.908739][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 260.917539][ T3617] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.924648][ T3617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.941640][T12163] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.0'. [ 260.951555][T12161] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 261.016038][ T3571] Bluetooth: hci2: command tx timeout [ 261.037850][ T3291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 261.046739][ T3291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 261.107866][ T3291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 261.151761][ T3291] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.158973][ T3291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.196139][ T3291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 261.242062][ T3291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 261.277944][ T3291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 261.323855][ T3291] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 261.366928][T12172] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 261.411053][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 261.427916][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 261.479522][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 261.524832][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 261.568907][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 261.613353][T12015] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 261.697939][T12015] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 261.721890][ T3291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 261.754277][ T3291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 261.806192][ T94] wlan1: Trigger new scan to find an IBSS to join [ 261.939489][T12192] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 261.951872][T12192] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.2'. [ 262.343329][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 262.386778][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 262.398847][T12015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.467940][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 262.479909][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 262.512816][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 262.546914][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 262.568261][T12015] device veth0_vlan entered promiscuous mode [ 262.633820][T12228] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 262.696565][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 262.710982][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 262.735639][T12015] device veth1_vlan entered promiscuous mode [ 262.764929][ T94] wlan1: Creating new IBSS network, BSSID aa:2d:85:29:36:f8 [ 262.792533][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 262.807073][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 262.832967][T12015] device veth0_macvtap entered promiscuous mode [ 262.861796][ T94] wlan1: Trigger new scan to find an IBSS to join [ 262.869461][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 262.884054][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 262.911257][T12015] device veth1_macvtap entered promiscuous mode [ 262.974109][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 263.003871][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 263.034704][T12015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.073711][T12015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.085917][ T3571] Bluetooth: hci2: command tx timeout [ 263.094734][T12015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.153075][T12015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.173918][T12015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.188339][T12015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.200341][T12015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.211253][T12015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.232486][T12015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.251910][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 263.272754][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 263.294355][T12249] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 263.341714][T12015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.366196][T12015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.392312][T12015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.417652][T12015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.429278][T12015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.440070][T12015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.442612][T12266] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 263.452023][T12015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.468816][T12015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.505403][T12266] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.0'. [ 263.507982][T12015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.563616][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 263.576987][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 263.611694][T12015] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.635837][T12015] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.644566][T12015] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.675764][T12015] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.772692][T12267] device syzkaller0 entered promiscuous mode [ 263.847743][ T94] wlan1: Creating new IBSS network, BSSID e2:ab:1c:3e:b6:47 [ 264.013091][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.039509][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.097993][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 264.133276][ T3634] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.165014][ T3634] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.182811][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 264.277043][T12301] Â: renamed from pim6reg1 [ 264.663029][T12317] device syzkaller0 entered promiscuous mode [ 264.711212][ T94] tipc: Subscription rejected, illegal request [ 264.879589][T12349] Â: renamed from pim6reg1 [ 264.912587][T12352] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 265.178131][ T3571] Bluetooth: hci2: command tx timeout [ 265.545326][T12384] device syzkaller0 entered promiscuous mode [ 265.653448][T12394] Â: renamed from pim6reg1 [ 265.860647][T12417] €Â: renamed from wg2 [ 265.871239][ T3634] tipc: Subscription rejected, illegal request [ 266.247598][T12446] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 266.334289][ T1257] tipc: Subscription rejected, illegal request [ 266.350486][T12452] €Â: renamed from wg2 [ 266.613710][T12475] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 266.776944][T12487] €Â: renamed from wg2 [ 267.060301][T12510] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 267.426773][T12521] device syzkaller0 entered promiscuous mode [ 267.590203][ T3634] tipc: Subscription rejected, illegal request [ 267.966087][ T3571] Bluetooth: hci1: command 0x0406 tx timeout [ 268.032442][ T3634] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.312239][T12564] device syzkaller0 entered promiscuous mode [ 268.358889][ T3571] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 268.370079][ T3571] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 268.379416][ T3571] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 268.391577][ T3571] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 268.399504][ T3571] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 268.405341][ T3634] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.417971][ T3571] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 268.538603][ T3634] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.707897][ T3634] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.265549][T12578] chnl_net:caif_netlink_parms(): no params data found [ 269.505677][T12578] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.524697][T12578] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.543677][T12578] device bridge_slave_0 entered promiscuous mode [ 269.568787][T12578] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.595951][T12578] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.604102][T12578] device bridge_slave_1 entered promiscuous mode [ 269.699119][T12578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.757758][T12578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.901030][T12578] team0: Port device team_slave_0 added [ 269.928714][T12578] team0: Port device team_slave_1 added [ 270.057552][T12578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.064541][T12578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.110764][T12578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.161576][T12578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.175112][T12578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.219151][T12578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.347319][T12578] device hsr_slave_0 entered promiscuous mode [ 270.376308][T12578] device hsr_slave_1 entered promiscuous mode [ 270.405593][T12578] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 270.428658][T12578] Cannot create hsr debugfs directory [ 270.446078][ T3575] Bluetooth: hci3: command tx timeout [ 270.728580][T12686] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 270.857091][ T3634] bridge0: port 3(gretap0) entered disabled state [ 270.874564][ T3634] device gretap0 left promiscuous mode [ 270.896113][ T3634] bridge0: port 3(gretap0) entered disabled state [ 271.196910][T12717] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 271.379155][ T3634] device hsr_slave_0 left promiscuous mode [ 271.388396][ T3634] device hsr_slave_1 left promiscuous mode [ 271.408011][ T3634] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.425931][ T3634] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.462182][ T3634] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.477775][ T3634] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.539002][ T3634] device bridge_slave_1 left promiscuous mode [ 271.545257][ T3634] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.602761][ T3634] device bridge_slave_0 left promiscuous mode [ 271.616819][ T3634] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.728567][ T3634] device veth1_macvtap left promiscuous mode [ 271.734661][ T3634] device veth1_vlan left promiscuous mode [ 271.746374][ T3634] device veth0_vlan left promiscuous mode [ 272.361726][ T3634] team0 (unregistering): Port device team_slave_1 removed [ 272.378796][ T3634] team0 (unregistering): Port device team_slave_0 removed [ 272.393891][ T3634] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 272.410132][ T3634] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 272.523782][ T3634] bond0 (unregistering): Released all slaves [ 272.535801][ T3575] Bluetooth: hci3: command tx timeout [ 272.703762][T12748] device syzkaller0 entered promiscuous mode [ 272.866301][T12578] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 272.896098][T12578] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 272.917049][T12578] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 272.956689][T12578] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 273.141697][T12578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.209071][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 273.226511][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 273.246902][T12578] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.286589][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 273.295333][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 273.344967][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.352113][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.418597][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 273.428159][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 273.443565][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 273.462340][ T3616] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.469549][ T3616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.509219][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 273.532262][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 273.592660][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 273.602518][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 273.621953][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 273.646664][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 273.672413][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 273.698070][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 273.720700][T12578] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 273.753363][T12578] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 273.782985][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 273.800587][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 273.831713][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 274.304619][T12578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.349652][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 274.372129][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 274.389782][T12811] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.4'. [ 274.460814][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 274.470247][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 274.511946][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 274.531691][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 274.565190][T12578] device veth0_vlan entered promiscuous mode [ 274.594376][ T3291] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 274.605863][ T3575] Bluetooth: hci3: command tx timeout [ 274.616595][ T3291] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 274.628883][T12578] device veth1_vlan entered promiscuous mode [ 274.695341][ T3291] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 274.706581][ T3291] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 274.714894][ T3291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 274.724057][ T3291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 274.749660][T12578] device veth0_macvtap entered promiscuous mode [ 274.786872][ T3291] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 274.975623][T12578] device veth1_macvtap entered promiscuous mode [ 275.021817][T12578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.062811][T12578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.107824][T12578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.132432][T12578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.163024][T12578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.194154][T12578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.234547][T12578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.275829][T12578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.298142][T12578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.330477][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 275.340412][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 275.361435][T12578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.370698][T12846] [ 275.374191][T12846] ====================================================== [ 275.381210][T12846] WARNING: possible circular locking dependency detected [ 275.388216][T12578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.388223][T12846] 6.1.94-syzkaller #0 Not tainted [ 275.388233][T12846] ------------------------------------------------------ [ 275.410015][T12846] syz-executor.2/12846 is trying to acquire lock: [ 275.416435][T12846] ffff88807d2265d8 (&sighand->siglock){..-.}-{2:2}, at: __lock_task_sighand+0x145/0x2d0 [ 275.423471][T12578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.426203][T12846] [ 275.426203][T12846] but task is already holding lock: [ 275.426209][T12846] ffff8880b9835e90 (lock#10){+.+.}-{2:2}, at: __mmap_lock_do_trace_acquire_returned+0x84/0x670 [ 275.426257][T12846] [ 275.426257][T12846] which lock already depends on the new lock. [ 275.426257][T12846] [ 275.426262][T12846] [ 275.426262][T12846] the existing dependency chain (in reverse order) is: [ 275.426267][T12846] [ 275.426267][T12846] -> #3 (lock#10){+.+.}-{2:2}: [ 275.426301][T12846] lock_acquire+0x1f8/0x5a0 [ 275.458274][T12578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.464699][T12846] __mmap_lock_do_trace_acquire_returned+0x9d/0x670 [ 275.464725][T12846] stack_map_get_build_id_offset+0x99e/0x9c0 [ 275.505855][T12578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.509069][T12846] __bpf_get_stack+0x495/0x570 [ 275.524776][T12846] bpf_get_stack_raw_tp+0x1b2/0x220 [ 275.529249][T12578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.530489][T12846] 0xffffffffa00008f6 [ 275.530515][T12846] bpf_trace_run2+0x1fd/0x410 [ 275.540744][T12578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.544760][T12846] trace_tlb_flush+0x151/0x1a0 [ 275.561711][T12578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.565595][T12846] switch_mm_irqs_off+0x84a/0xc20 [ 275.578748][T12578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.580886][T12846] __schedule+0x1140/0x4550 [ 275.593155][T12846] preempt_schedule_common+0x83/0xd0 [ 275.595959][ T3291] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 275.598956][T12846] preempt_schedule+0xd9/0xe0 [ 275.598974][T12846] preempt_schedule_thunk+0x16/0x18 [ 275.598995][T12846] _raw_spin_unlock+0x36/0x40 [ 275.618123][ T3291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 275.623001][T12846] __text_poke+0x81a/0x9a0 [ 275.635977][T12846] text_poke_bp_batch+0x153/0x940 [ 275.641516][T12846] text_poke_finish+0x16/0x30 [ 275.646706][T12846] arch_jump_label_transform_apply+0x13/0x20 [ 275.653278][T12846] static_key_enable_cpuslocked+0x12e/0x250 [ 275.659698][T12846] static_key_enable+0x16/0x20 [ 275.664969][T12846] tracepoint_add_func+0x947/0x9d0 [ 275.670672][T12846] tracepoint_probe_register_prio_may_exist+0x11e/0x190 [ 275.678123][T12846] bpf_raw_tp_link_attach+0x456/0x6b0 [ 275.684028][T12846] bpf_raw_tracepoint_open+0x196/0x210 [ 275.690008][T12846] __sys_bpf+0x4a7/0x6c0 [ 275.694769][T12846] __x64_sys_bpf+0x78/0x90 [ 275.699700][T12846] do_syscall_64+0x3b/0xb0 [ 275.704641][T12846] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 275.711057][T12846] [ 275.711057][T12846] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 275.718344][T12846] lock_acquire+0x1f8/0x5a0 [ 275.723373][T12846] _raw_spin_lock_nested+0x2d/0x40 [ 275.729092][T12846] raw_spin_rq_lock_nested+0x26/0x140 [ 275.734978][T12846] task_fork_fair+0x5d/0x350 [ 275.740088][T12846] sched_cgroup_fork+0x374/0x400 [ 275.745543][T12846] copy_process+0x2442/0x4060 [ 275.750726][T12846] kernel_clone+0x222/0x920 [ 275.755740][T12846] user_mode_thread+0x12e/0x190 [ 275.761110][T12846] rest_init+0x23/0x300 [ 275.765783][T12846] start_kernel+0x0/0x53f [ 275.770622][T12846] start_kernel+0x496/0x53f [ 275.775631][T12846] secondary_startup_64_no_verify+0xcf/0xdb [ 275.782033][T12846] [ 275.782033][T12846] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 275.789310][T12846] lock_acquire+0x1f8/0x5a0 [ 275.794320][T12846] _raw_spin_lock_irqsave+0xd1/0x120 [ 275.800108][T12846] try_to_wake_up+0xad/0x12e0 [ 275.805288][T12846] complete_signal+0x796/0xbd0 [ 275.810557][T12846] __send_signal_locked+0xb1a/0xdc0 [ 275.816266][T12846] do_notify_parent+0xe2b/0x1100 [ 275.821713][T12846] do_exit+0x172e/0x26a0 [ 275.826461][T12846] do_group_exit+0x202/0x2b0 [ 275.831555][T12846] __x64_sys_exit_group+0x3b/0x40 [ 275.837082][T12846] do_syscall_64+0x3b/0xb0 [ 275.842003][T12846] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 275.848403][T12846] [ 275.848403][T12846] -> #0 (&sighand->siglock){..-.}-{2:2}: [ 275.856201][T12846] validate_chain+0x1661/0x5950 [ 275.861561][T12846] __lock_acquire+0x125b/0x1f80 [ 275.866919][T12846] lock_acquire+0x1f8/0x5a0 [ 275.871926][T12846] _raw_spin_lock_irqsave+0xd1/0x120 [ 275.877715][T12846] __lock_task_sighand+0x145/0x2d0 [ 275.883328][T12846] group_send_sig_info+0x26c/0x300 [ 275.888945][T12846] bpf_send_signal_common+0x2d8/0x420 [ 275.894821][T12846] bpf_send_signal+0x15/0x20 [ 275.899914][T12846] bpf_prog_9fbc3d1d47c9b36c+0x1a/0x21 [ 275.905876][T12846] bpf_trace_run4+0x253/0x470 [ 275.911054][T12846] __mmap_lock_do_trace_acquire_returned+0x5e3/0x670 [ 275.918233][T12846] lock_mm_and_find_vma+0x219/0x2e0 [ 275.923935][T12846] exc_page_fault+0x169/0x620 [ 275.929113][T12846] asm_exc_page_fault+0x22/0x30 [ 275.934467][T12846] [ 275.934467][T12846] other info that might help us debug this: [ 275.934467][T12846] [ 275.944689][T12846] Chain exists of: [ 275.944689][T12846] &sighand->siglock --> &rq->__lock --> lock#10 [ 275.944689][T12846] [ 275.956839][T12846] Possible unsafe locking scenario: [ 275.956839][T12846] [ 275.964271][T12846] CPU0 CPU1 [ 275.969614][T12846] ---- ---- [ 275.974961][T12846] lock(lock#10); [ 275.978667][T12846] lock(&rq->__lock); [ 275.985237][T12846] lock(lock#10); [ 275.991466][T12846] lock(&sighand->siglock); [ 275.996037][T12846] [ 275.996037][T12846] *** DEADLOCK *** [ 275.996037][T12846] [ 276.004160][T12846] 5 locks held by syz-executor.2/12846: [ 276.009680][T12846] #0: ffff88801a3ebd58 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2e0 [ 276.019582][T12846] #1: ffff8880b9835e90 (lock#10){+.+.}-{2:2}, at: __mmap_lock_do_trace_acquire_returned+0x84/0x670 [ 276.030353][T12846] #2: ffffffff8d12acc0 (rcu_read_lock){....}-{1:2}, at: get_mm_memcg_path+0xb1/0x600 [ 276.039900][T12846] #3: ffffffff8d12acc0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run4+0x16a/0x470 [ 276.049274][T12846] #4: ffffffff8d12acc0 (rcu_read_lock){....}-{1:2}, at: __lock_task_sighand+0x25/0x2d0 [ 276.058999][T12846] [ 276.058999][T12846] stack backtrace: [ 276.064873][T12846] CPU: 0 PID: 12846 Comm: syz-executor.2 Not tainted 6.1.94-syzkaller #0 [ 276.073264][T12846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 276.083313][T12846] Call Trace: [ 276.086574][T12846] [ 276.089487][T12846] dump_stack_lvl+0x1e3/0x2cb [ 276.094158][T12846] ? nf_tcp_handle_invalid+0x642/0x642 [ 276.099608][T12846] ? print_circular_bug+0x12b/0x1a0 [ 276.104791][T12846] check_noncircular+0x2fa/0x3b0 [ 276.109713][T12846] ? add_chain_block+0x850/0x850 [ 276.114725][T12846] ? lockdep_lock+0x11f/0x2a0 [ 276.119391][T12846] ? _find_first_zero_bit+0xd0/0x100 [ 276.124663][T12846] validate_chain+0x1661/0x5950 [ 276.129507][T12846] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 276.135476][T12846] ? reacquire_held_locks+0x660/0x660 [ 276.140840][T12846] ? mark_lock+0x9a/0x340 [ 276.145157][T12846] ? validate_chain+0x112/0x5950 [ 276.150088][T12846] ? reacquire_held_locks+0x660/0x660 [ 276.155451][T12846] ? mark_lock+0x9a/0x340 [ 276.159770][T12846] ? reacquire_held_locks+0x660/0x660 [ 276.165141][T12846] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 276.171109][T12846] ? mark_lock+0x9a/0x340 [ 276.175426][T12846] __lock_acquire+0x125b/0x1f80 [ 276.180271][T12846] lock_acquire+0x1f8/0x5a0 [ 276.184760][T12846] ? __lock_task_sighand+0x145/0x2d0 [ 276.190034][T12846] ? read_lock_is_recursive+0x10/0x10 [ 276.195396][T12846] ? read_lock_is_recursive+0x10/0x10 [ 276.200758][T12846] ? _raw_spin_lock_irqsave+0xac/0x120 [ 276.206206][T12846] _raw_spin_lock_irqsave+0xd1/0x120 [ 276.211485][T12846] ? __lock_task_sighand+0x145/0x2d0 [ 276.216756][T12846] ? _raw_spin_lock+0x40/0x40 [ 276.221421][T12846] __lock_task_sighand+0x145/0x2d0 [ 276.226520][T12846] ? __lock_task_sighand+0x25/0x2d0 [ 276.231704][T12846] group_send_sig_info+0x26c/0x300 [ 276.236803][T12846] ? lockdep_assert_task_sighand_held+0x2b0/0x2b0 [ 276.243206][T12846] bpf_send_signal_common+0x2d8/0x420 [ 276.248568][T12846] ? trace_bpf_trace_printk+0x250/0x250 [ 276.254101][T12846] ? bpf_trace_run4+0x16a/0x470 [ 276.258936][T12846] bpf_send_signal+0x15/0x20 [ 276.263507][T12846] bpf_prog_9fbc3d1d47c9b36c+0x1a/0x21 [ 276.268951][T12846] bpf_trace_run4+0x253/0x470 [ 276.273613][T12846] ? bpf_trace_run3+0x440/0x440 [ 276.278447][T12846] ? get_mm_memcg_path+0x36c/0x600 [ 276.283539][T12846] ? get_mm_memcg_path+0x4e6/0x600 [ 276.288634][T12846] __mmap_lock_do_trace_acquire_returned+0x5e3/0x670 [ 276.295292][T12846] ? __mmap_lock_do_trace_acquire_returned+0x84/0x670 [ 276.302056][T12846] lock_mm_and_find_vma+0x219/0x2e0 [ 276.307243][T12846] exc_page_fault+0x169/0x620 [ 276.311907][T12846] asm_exc_page_fault+0x22/0x30 [ 276.316747][T12846] RIP: 0033:0x7fa7d642afe6 [ 276.321146][T12846] Code: 00 00 00 90 48 8b 0d 11 a7 cb 00 4c 63 05 fa a6 cb 00 48 8b 15 fb a6 cb 00 49 01 c8 48 39 ca 72 18 48 8d 42 04 4c 39 c0 73 0f <48> 89 3a 48 83 c2 08 48 89 15 dc a6 cb 00 c3 50 48 8d 35 66 e4 0a [ 276.340733][T12846] RSP: 002b:00007ffcadfe5448 EFLAGS: 00010287 [ 276.346786][T12846] RAX: 0000001b2c23c000 RBX: 00007fa7d5dff008 RCX: 0000001b2c220000 [ 276.354739][T12846] RDX: 0000001b2c23bffc RSI: 00000000000007b5 RDI: ffffffff81bd47b2 [ 276.362695][T12846] RBP: 000000000000009f R08: 0000001b2c820000 R09: 00000000813da7b5 [ 276.370648][T12846] R10: 0000000000000000 R11: 0000000081bd47b2 R12: ffffffff81bd4d68 2024/06/17 12:08:14 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 276.378602][T12846] R13: 000000000000100f R14: ffffffff81bd47b2 R15: 00007fa7d65b4018 [ 276.386559][T12846] ? release_pages+0xf12/0x2b40 [ 276.391396][T12846] ? release_pages+0x14c8/0x2b40 [ 276.396317][T12846] ? release_pages+0xf12/0x2b40 [ 276.401152][T12846] Connection to 10.128.1.57 closed by remote host.