last executing test programs: 1m28.494345783s ago: executing program 2 (id=4683): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x24}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x13, 0xf, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x7d}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) mkdir(0x0, 0x10d) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xb}, 0x0, 0x0, 0x3, 0x0, 0x80000000, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e0000000400000004"], 0x50) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 1m27.968933774s ago: executing program 2 (id=4685): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f00000006c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000680)='GPL\x00'}, 0x94) 1m27.754749457s ago: executing program 2 (id=4689): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) close(r1) 1m27.523954529s ago: executing program 2 (id=4691): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) 1m27.374582778s ago: executing program 2 (id=4693): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xfc, 0x0, 0xcb, 0x0, 0x7, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, @perf_config_ext={0xfffffffffffffffc, 0x7fff}, 0x10000, 0xc8, 0xffd, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x200000000401}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000fffe80000000000000101000007f0c08000000000000000071273fa7b49301641184a907c5"], 0xfdef) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x1, &(0x7f0000000100)=@raw=[@exit], 0x0, 0x6}, 0x94) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000), 0xfdef) 1m27.208323248s ago: executing program 2 (id=4697): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x100000000000, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="050000000400000044030000040000", @ANYRES32=0x1, @ANYBLOB="0000000000400000000000000000008000000000", @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, &(0x7f0000000180)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd7, &(0x7f0000000380)=[{}], 0x8, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xf7, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYRES64=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', r2, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x1, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2, 0xffffffffffffffff, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x701a00, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r4}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r5}, 0x38) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2, 0x80000, 0x3, &(0x7f0000000280)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000300), 0x6e, 0x0, 0x300}, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.net/syz0\x00', 0x200002, 0x0) 1m11.805838632s ago: executing program 32 (id=4697): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x100000000000, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="050000000400000044030000040000", @ANYRES32=0x1, @ANYBLOB="0000000000400000000000000000008000000000", @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, &(0x7f0000000180)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd7, &(0x7f0000000380)=[{}], 0x8, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xf7, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYRES64=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', r2, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x1, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2, 0xffffffffffffffff, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x701a00, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r4}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r5}, 0x38) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2, 0x80000, 0x3, &(0x7f0000000280)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000300), 0x6e, 0x0, 0x300}, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.net/syz0\x00', 0x200002, 0x0) 28.851541966s ago: executing program 1 (id=4871): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x81, 0x0, 0x4, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x2}, 0x8080, 0x5, 0x0, 0x0, 0xed}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0x0, 0x8}, 0x14085, 0x0, 0xfffffffe, 0x9, 0x400000, 0x10001}, 0x0, 0xffffffffffffffff, r0, 0x8) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x600, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x200, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x2e}, 0x28) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xb0000}, 0x805, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ec0)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0xc, 0xa5, &(0x7f0000000cc0)=""/165, 0x40f00, 0x4, '\x00', 0x0, 0x1b, r1, 0x8, &(0x7f0000000280)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000d80)={0x0, 0xd, 0x49, 0x200}, 0x10, 0x0, 0x0, 0xa, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000e00)=[{0x0, 0x3, 0x2, 0x7}, {0x4, 0x1, 0x8, 0x6}, {0x1, 0x2}, {0x2, 0x5, 0xd, 0x6}, {0x2, 0x3, 0x10, 0x4}, {0x3, 0x4, 0x5, 0x8}, {0x0, 0x1, 0x5, 0x5}, {0x0, 0x2, 0x9, 0x7}, {0x5, 0x4, 0x10, 0x6}, {0x5, 0x4, 0x7, 0x7}], 0x10, 0x3}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe69, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r5, &(0x7f0000000000), 0x2a979d) 28.043081262s ago: executing program 1 (id=4879): r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) 27.808524316s ago: executing program 1 (id=4882): bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, 0x0, 0x37, 0x0, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x75e}}, &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), &(0x7f00000002c0), 0x10, 0x5bb}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x3, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r2, 0x0, 0xe, 0x0, &(0x7f0000000540)="c1dfb080cd21d308098e00008100", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 27.003555213s ago: executing program 1 (id=4896): bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, 0x0, 0x37, 0x0, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x75e}}, &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), &(0x7f00000002c0), 0x10, 0x5bb}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x3, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r2, 0x0, 0xe, 0x0, &(0x7f0000000540)="c1dfb080cd21d308098e00008100", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 26.514328771s ago: executing program 1 (id=4888): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0xffffffcf, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000140), 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0100000004000000060000000b00000000000000", @ANYRES32, @ANYBLOB="0000010000000000000000000000000000000000f6c8c2a9fa1460abaf766479744e2e10fa8ff16649d4799a6767166c5c7f96033d4377e0e636c65d1611fa911dcb01498bfa37d2dd3acb0d5035b9b3aac8c1a1a40bb8a8b7181ad5c889d445a282dfbb6be0920d88a63c19b0b367083281903535cf0dcb3e1c6452c8fcdaa696c8898c4b0a4d7b57b745c7693f7f36c2ca0ddf120b198a48", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000083850000000400000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r6}, 0xc) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_pid(r8, &(0x7f00000001c0), 0x12) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="2b70696473206aa4af"], 0x6) socket$kcm(0x2, 0x1, 0x84) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000040) 26.344386161s ago: executing program 1 (id=4890): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) 10.534014638s ago: executing program 33 (id=4890): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) 7.053251921s ago: executing program 5 (id=4975): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"/1426], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0002, 0xf0, 0xffffff87, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) 6.872643021s ago: executing program 3 (id=4978): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000040000000800000006"], 0x48) 6.690709781s ago: executing program 3 (id=4980): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380)=r2, 0x4) bpf$LINK_DETACH(0x22, &(0x7f00000002c0)=r3, 0x4) bpf$LINK_DETACH(0x22, &(0x7f00000001c0)=r3, 0x4) 6.628833355s ago: executing program 5 (id=4981): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000541000000000000070000006b1134000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.54081591s ago: executing program 5 (id=4983): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x800, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}, 0x20, 0x9, 0x4, 0x9, 0x1ff, 0x0, 0x0, 0x0, 0x5fc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa9, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"/371, @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYBLOB], 0x230}, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90124fc60100c020000000400053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) 6.452727645s ago: executing program 3 (id=4985): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000300)=r5) write$cgroup_devices(r4, 0x0, 0xffdd) 6.160695962s ago: executing program 5 (id=4988): close(0x3) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff, 0x164c}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x22, 0xa, 0x80e083, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'batadv_slave_1\x00', 0x6032}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000006300"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r2}, 0x8) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xc54c295c) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x1) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_int(r0, &(0x7f0000000240)=0x2, 0x12) 3.467164449s ago: executing program 3 (id=4996): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="050000000800000032490000c200000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000006c0), 0xca, r0}, 0x38) 3.225431503s ago: executing program 3 (id=4999): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4}, 0xc00, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x406, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000540)="f4000900062b2f25fe80000000000000dc8b2b8b816937dcef1258850f238466cc00007a000000ad6e91880b", 0x2c}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1400000004000000040000000200020000000000", @ANYBLOB='\x00\x00\x00', @ANYRESHEX=0x0, @ANYBLOB='.'], 0x50) socket$kcm(0x29, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r3}, 0x8) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e9900", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) 3.088359361s ago: executing program 4 (id=5000): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x6, 0x7, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.002032495s ago: executing program 0 (id=5002): bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, 0x0, 0x37, 0x0, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x75e}}, &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), &(0x7f00000002c0), 0x10, 0x5bb}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x3, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r1, 0x0, 0xe, 0x0, &(0x7f0000000540)="c1dfb080cd21d308098e00008100", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.818915646s ago: executing program 4 (id=5003): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x7, &(0x7f0000000640)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.818711717s ago: executing program 0 (id=5004): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380)=r2, 0x4) bpf$LINK_DETACH(0x22, &(0x7f00000002c0)=r3, 0x4) bpf$LINK_DETACH(0x22, &(0x7f00000001c0)=r3, 0x4) 2.725645462s ago: executing program 0 (id=5006): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000300)=r5) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000"], 0xffdd) 2.662095215s ago: executing program 4 (id=5007): r0 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000180)=r0, 0x12) write$cgroup_pid(r4, &(0x7f00000005c0)=r2, 0x12) socketpair$unix(0x1, 0x5, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x1, 0x12) 2.427410719s ago: executing program 4 (id=5008): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x81, 0x0, 0x4, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x2}, 0x8080, 0x5, 0x0, 0x0, 0xed}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0x0, 0x8}, 0x14085, 0x0, 0xfffffffe, 0x9, 0x400000, 0x10001}, 0x0, 0xffffffffffffffff, r0, 0x8) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x600, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x200, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x2e}, 0x28) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xb0000}, 0x805, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ec0)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0xc, 0xa5, &(0x7f0000000cc0)=""/165, 0x40f00, 0x4, '\x00', 0x0, 0x1b, r1, 0x8, &(0x7f0000000280)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000d80)={0x0, 0xd, 0x49, 0x200}, 0x10, 0x0, 0x0, 0xa, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000e00)=[{0x0, 0x3, 0x2, 0x7}, {0x4, 0x1, 0x8, 0x6}, {0x1, 0x2}, {0x2, 0x5, 0xd, 0x6}, {0x2, 0x3, 0x10, 0x4}, {0x3, 0x4, 0x5, 0x8}, {0x0, 0x1, 0x5, 0x5}, {0x0, 0x2, 0x9, 0x7}, {0x5, 0x4, 0x10, 0x6}, {0x5, 0x4, 0x7, 0x7}], 0x10, 0x3}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r3) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r6, &(0x7f0000000000), 0x2a979d) 501.210431ms ago: executing program 5 (id=5009): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="050000000800000032490000c200000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000006c0), 0xca, r0}, 0x38) 500.753291ms ago: executing program 3 (id=5010): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x800, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}, 0x20, 0x9, 0x4, 0x9, 0x1ff, 0x0, 0x0, 0x0, 0x5fc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa9, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"/371, @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYBLOB], 0x230}, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90124fc60100c020000000400053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)}, 0x0) 500.642021ms ago: executing program 4 (id=5011): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f8ffffff0000000000000000850000003600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 428.031975ms ago: executing program 0 (id=5012): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) 236.808476ms ago: executing program 0 (id=5013): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) 187.200719ms ago: executing program 4 (id=5014): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 91.625405ms ago: executing program 0 (id=5015): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380)=r2, 0x4) bpf$LINK_DETACH(0x22, &(0x7f00000002c0)=r3, 0x4) bpf$LINK_DETACH(0x22, &(0x7f00000001c0)=r3, 0x4) 0s ago: executing program 5 (id=5016): bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, 0x0, 0x37, 0x0, 0x0, 0x1}, 0x28) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x75e}}, &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), &(0x7f00000002c0), 0x10, 0x5bb}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x3, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r2, 0x0, 0xe, 0x0, &(0x7f0000000540)="c1dfb080cd21d308098e00008100", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): .1.2309'. [ 374.654541][T10558] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2309'. [ 374.683939][T10558] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2309'. [ 374.718911][T10558] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2309'. [ 374.854517][T10564] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2313'. [ 376.351035][T10596] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2328'. [ 376.653668][T10608] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2333'. [ 377.080276][T10622] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2342'. [ 378.594660][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.601040][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.718152][T10688] device syzkaller0 entered promiscuous mode [ 382.382533][T10770] device syzkaller0 entered promiscuous mode [ 384.794274][T10798] netlink: 'syz.3.2418': attribute type 10 has an invalid length. [ 385.390155][T10835] device syzkaller0 entered promiscuous mode [ 387.599253][T10887] netlink: 'syz.0.2459': attribute type 11 has an invalid length. [ 387.619533][T10887] __nla_validate_parse: 2 callbacks suppressed [ 387.619548][T10887] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2459'. [ 387.665059][T10887] netlink: 'syz.0.2459': attribute type 10 has an invalid length. [ 387.684598][T10886] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 387.855743][T10899] device syzkaller0 entered promiscuous mode [ 388.356537][T10930] netlink: 'syz.1.2478': attribute type 11 has an invalid length. [ 388.366629][T10930] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2478'. [ 388.478654][T10936] Illegal XDP return value 4294967294 on prog (id 917) dev N/A, expect packet loss! [ 389.163789][T10929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 390.303904][T10927] netlink: 'syz.0.2477': attribute type 39 has an invalid length. [ 390.311793][T10930] netlink: 'syz.1.2478': attribute type 10 has an invalid length. [ 390.321104][T10935] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2480'. [ 390.549261][T10973] device sit0 left promiscuous mode [ 390.801195][T10978] netlink: 'syz.0.2500': attribute type 10 has an invalid length. [ 390.943666][T10976] device sit0 entered promiscuous mode [ 391.117046][T10992] netlink: 'syz.0.2506': attribute type 11 has an invalid length. [ 391.135294][T10992] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2506'. [ 391.437346][T10992] netlink: 'syz.0.2506': attribute type 10 has an invalid length. [ 391.450872][T10991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.734775][T11019] netlink: 'syz.1.2516': attribute type 10 has an invalid length. [ 391.927383][T10997] device syzkaller0 entered promiscuous mode [ 391.950139][T11026] device sit0 left promiscuous mode [ 392.316974][T11030] netlink: 'syz.3.2520': attribute type 21 has an invalid length. [ 392.336178][T11030] netlink: 'syz.3.2520': attribute type 11 has an invalid length. [ 392.380544][T11031] device sit0 entered promiscuous mode [ 392.993430][T11040] netlink: 'syz.0.2526': attribute type 11 has an invalid length. [ 393.013929][T11040] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2526'. [ 393.793658][T11039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 394.882074][T11040] netlink: 'syz.0.2526': attribute type 10 has an invalid length. [ 394.903918][T11057] netlink: 'syz.2.2531': attribute type 10 has an invalid length. [ 395.345766][T11078] device sit0 left promiscuous mode [ 396.111484][T11093] netlink: 'syz.3.2546': attribute type 11 has an invalid length. [ 396.188844][T11093] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2546'. [ 396.326731][T11083] device syzkaller0 entered promiscuous mode [ 396.863879][T11090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 397.974213][T11093] netlink: 'syz.3.2546': attribute type 10 has an invalid length. [ 397.982363][T11098] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2558'. [ 398.009255][T11111] netlink: 'syz.4.2550': attribute type 10 has an invalid length. [ 398.672032][T11140] netlink: 'syz.4.2562': attribute type 11 has an invalid length. [ 398.726024][T11138] device syzkaller0 entered promiscuous mode [ 398.763952][T11140] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2562'. [ 398.777820][T11143] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2565'. [ 399.406781][T11139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 401.196927][T11144] netlink: 'syz.4.2562': attribute type 10 has an invalid length. [ 401.205507][T11149] netlink: 'syz.1.2567': attribute type 10 has an invalid length. [ 401.215064][T11172] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2577'. [ 401.835389][T11211] netlink: 'syz.3.2595': attribute type 10 has an invalid length. [ 402.144851][T11217] device syzkaller0 entered promiscuous mode [ 402.350163][T11222] device syzkaller0 entered promiscuous mode [ 406.054881][T11251] netlink: 'syz.1.2611': attribute type 10 has an invalid length. [ 406.072910][T11264] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2617'. [ 406.293830][T11282] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.2624'. [ 406.595484][T11300] netlink: 'syz.4.2632': attribute type 10 has an invalid length. [ 406.633346][T11303] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2633'. [ 406.698245][T11306] netlink: 'syz.0.2634': attribute type 11 has an invalid length. [ 406.726315][T11306] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2634'. [ 406.750903][T11309] netlink: 'syz.0.2634': attribute type 10 has an invalid length. [ 406.778551][T11305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 407.073294][T11325] device sit0 entered promiscuous mode [ 407.274501][T11334] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2646'. [ 407.474488][T11341] netlink: 'syz.4.2648': attribute type 10 has an invalid length. [ 407.492310][T11345] netlink: 'syz.0.2650': attribute type 11 has an invalid length. [ 407.510736][T11345] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2650'. [ 407.536797][T11345] netlink: 'syz.0.2650': attribute type 10 has an invalid length. [ 407.547341][T11344] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 407.949205][T11367] device sit0 entered promiscuous mode [ 408.209072][T11369] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2661'. [ 408.564870][T11374] device sit0 left promiscuous mode [ 408.955870][T11376] device sit0 entered promiscuous mode [ 409.161519][T11389] netlink: 'syz.1.2667': attribute type 10 has an invalid length. [ 409.330769][ T4268] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 409.340913][ T4268] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 409.349142][ T4268] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 409.365502][ T4268] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 409.374912][ T47] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 409.382258][ T47] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 409.501264][T11402] netlink: 'syz.4.2669': attribute type 11 has an invalid length. [ 409.532652][T11402] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2669'. [ 409.542562][T11407] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2674'. [ 409.642421][T11402] netlink: 'syz.4.2669': attribute type 10 has an invalid length. [ 409.689224][T11401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 409.808079][T11416] device sit0 left promiscuous mode [ 410.380529][T11417] device sit0 entered promiscuous mode [ 410.757201][ T4347] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.932266][ T4347] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.976896][T11393] chnl_net:caif_netlink_parms(): no params data found [ 411.058113][T11446] netlink: 'syz.4.2690': attribute type 11 has an invalid length. [ 411.067880][ T4347] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.095508][T11446] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2690'. [ 411.197954][T11446] netlink: 'syz.4.2690': attribute type 10 has an invalid length. [ 411.247803][T11443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 411.291602][ T4347] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.431318][T11458] device sit0 left promiscuous mode [ 411.474261][ T4281] Bluetooth: hci1: command 0x0409 tx timeout [ 412.064638][T11462] device sit0 entered promiscuous mode [ 412.328925][T11393] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.338685][T11393] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.352056][T11393] device bridge_slave_0 entered promiscuous mode [ 412.414428][T11393] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.421553][T11393] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.464623][T11393] device bridge_slave_1 entered promiscuous mode [ 412.582214][T11393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.751979][T11393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.771783][T11487] netlink: 'syz.2.2707': attribute type 10 has an invalid length. [ 412.947849][T11393] team0: Port device team_slave_0 added [ 413.552897][ T4281] Bluetooth: hci1: command 0x041b tx timeout [ 413.804542][T11501] device sit0 left promiscuous mode [ 413.838463][T11393] team0: Port device team_slave_1 added [ 413.920732][T11511] device sit0 entered promiscuous mode [ 414.251577][T11393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.293684][T11393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.345181][T11393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.420174][T11393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.433306][T11393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.523372][T11393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.613934][T11549] netlink: 'syz.3.2722': attribute type 10 has an invalid length. [ 414.728655][T11558] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2725'. [ 414.918556][T11393] device hsr_slave_0 entered promiscuous mode [ 414.983805][T11393] device hsr_slave_1 entered promiscuous mode [ 415.004780][T11393] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 415.050982][T11393] Cannot create hsr debugfs directory [ 415.361312][T11595] netlink: 'syz.1.2737': attribute type 11 has an invalid length. [ 415.374321][T11595] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2737'. [ 415.412343][ T4347] team0: Port device wlan1 removed [ 415.488713][T11571] device syzkaller0 entered promiscuous mode [ 415.505434][T11595] netlink: 'syz.1.2737': attribute type 10 has an invalid length. [ 415.523787][T11594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.632937][ T4281] Bluetooth: hci1: command 0x040f tx timeout [ 416.336634][T11631] netlink: 'syz.4.2750': attribute type 11 has an invalid length. [ 416.350777][T11631] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2750'. [ 417.152169][T11629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 417.712825][ T4281] Bluetooth: hci1: command 0x0419 tx timeout [ 417.839554][T11631] netlink: 'syz.4.2750': attribute type 10 has an invalid length. [ 417.927846][ T4347] device hsr_slave_0 left promiscuous mode [ 417.956151][ T4347] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.975804][ T4347] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.060366][ T4347] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 418.099816][ T4347] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.186024][ T4347] device veth1_macvtap left promiscuous mode [ 418.212284][ T4347] device veth0_macvtap left promiscuous mode [ 418.231268][ T4347] device veth1_vlan left promiscuous mode [ 418.668544][ T4347] team0 (unregistering): Port device macvlan0 removed [ 418.864538][ T4347] team0 (unregistering): Port device team_slave_1 removed [ 419.204513][T11675] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2766'. [ 419.337483][T11682] netlink: 'syz.1.2768': attribute type 11 has an invalid length. [ 419.354009][T11682] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2768'. [ 419.425769][T11682] netlink: 'syz.1.2768': attribute type 10 has an invalid length. [ 419.436292][T11681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 420.052517][T11713] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2782'. [ 420.252907][T11723] device sit0 left promiscuous mode [ 420.552020][T11726] device sit0 entered promiscuous mode [ 421.124800][T11393] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 421.190367][T11754] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2794'. [ 421.267292][T11393] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 421.306534][T11393] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 421.375147][T11393] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 421.680704][T11785] device sit0 left promiscuous mode [ 421.801710][T11393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.861931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 421.871902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 421.883634][T11393] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.899831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 421.924794][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 421.976937][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.984177][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.022715][T11786] device sit0 entered promiscuous mode [ 422.530685][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 422.554713][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 422.596656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 422.637499][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.644725][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.701170][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 422.715272][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 422.755149][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 422.784130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 422.808157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 422.873880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 422.944047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 423.004060][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 423.050484][T11393] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 423.075856][T11393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 423.087275][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 423.096752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 423.125038][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 423.227598][T11840] device sit0 left promiscuous mode [ 423.518882][T11844] device sit0 entered promiscuous mode [ 424.595779][T11888] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2843'. [ 424.874192][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 424.881699][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 424.919610][T11393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.011504][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 425.049106][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 425.138055][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 425.156171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 425.204079][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 425.216927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 425.235872][T11393] device veth0_vlan entered promiscuous mode [ 425.244950][T11910] netlink: 'syz.1.2853': attribute type 10 has an invalid length. [ 425.301128][T11393] device veth1_vlan entered promiscuous mode [ 425.397027][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 425.438284][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 425.466913][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 425.486750][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 425.530295][T11921] netlink: 'syz.3.2856': attribute type 11 has an invalid length. [ 425.555973][T11393] device veth0_macvtap entered promiscuous mode [ 425.576761][T11393] device veth1_macvtap entered promiscuous mode [ 425.590969][T11921] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2856'. [ 425.595145][T11931] netlink: 'syz.3.2856': attribute type 10 has an invalid length. [ 425.698298][T11920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 425.700973][T11393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 425.749390][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 425.761364][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 425.815487][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 425.836370][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 425.885026][T11393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 425.945770][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 425.974156][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 425.986891][T11393] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.002976][T11393] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.030301][T11393] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.049026][T11393] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.248152][ T4347] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.298901][ T4347] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.334836][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 426.405024][ T4350] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.440506][ T4350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.494343][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 427.951219][ T4268] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 427.977656][ T4268] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 427.986450][ T4268] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 427.996053][ T4268] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 427.996466][ T4559] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.022853][ T4268] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 428.030145][ T4268] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 428.171365][T12044] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2900'. [ 428.440329][ T4559] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.481697][T12050] device sit0 entered promiscuous mode [ 428.532699][T12058] netlink: 'syz.1.2907': attribute type 10 has an invalid length. [ 428.678878][ T4559] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.882240][ T4559] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.984020][T12080] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2915'. [ 429.444200][T12104] netlink: 'syz.3.2923': attribute type 10 has an invalid length. [ 429.686799][T12031] chnl_net:caif_netlink_parms(): no params data found [ 430.113824][ T4268] Bluetooth: hci4: command 0x0409 tx timeout [ 430.142370][T12130] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2933'. [ 430.591476][T12157] netlink: 'syz.0.2944': attribute type 10 has an invalid length. [ 430.634496][T12157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.655063][T12157] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 430.740053][T12031] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.760978][T12031] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.834268][T12031] device bridge_slave_0 entered promiscuous mode [ 430.961220][T12031] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.980882][T12031] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.030759][T12184] netlink: 'syz.3.2950': attribute type 11 has an invalid length. [ 431.035857][T12031] device bridge_slave_1 entered promiscuous mode [ 431.070159][T12184] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2950'. [ 431.127322][T12184] netlink: 'syz.3.2950': attribute type 10 has an invalid length. [ 431.163305][T12181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 431.165002][T12031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.233688][T12031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.294183][T12173] device syzkaller0 entered promiscuous mode [ 431.640159][ T4559] team0: Port device wlan1 removed [ 432.210600][ T4268] Bluetooth: hci4: command 0x041b tx timeout [ 433.421659][T12031] team0: Port device team_slave_0 added [ 433.430674][T12212] netlink: 'syz.4.2957': attribute type 10 has an invalid length. [ 433.485125][T12031] team0: Port device team_slave_1 added [ 433.586102][T12235] netlink: 'syz.1.2964': attribute type 11 has an invalid length. [ 433.622091][T12235] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2964'. [ 433.808086][T12237] netlink: 'syz.1.2964': attribute type 10 has an invalid length. [ 433.818271][T12232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.836038][T12031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.861683][T12031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.917985][T12031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.034042][T12246] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.056073][T12031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.077578][T12031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.222820][T12031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.273117][ T4281] Bluetooth: hci4: command 0x040f tx timeout [ 434.416335][ T4559] device hsr_slave_0 left promiscuous mode [ 434.490927][ T4559] device veth1_macvtap left promiscuous mode [ 434.514784][ T4559] device veth0_macvtap left promiscuous mode [ 434.550224][ T4559] device veth1_vlan left promiscuous mode [ 434.565577][ T4559] device veth0_vlan left promiscuous mode [ 434.994754][ T4559] team0 (unregistering): Port device macvlan0 removed [ 435.193104][ T4559] team0 (unregistering): Port device team_slave_1 removed [ 435.228450][ T4559] team0 (unregistering): Port device team_slave_0 removed [ 435.263423][ T4559] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 435.300795][ T4559] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 435.339661][ T4559] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 435.520784][ T4559] bond0 (unregistering): Released all slaves [ 435.625199][T12264] device syzkaller0 entered promiscuous mode [ 435.635778][T12292] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2980'. [ 435.730667][T12297] netlink: 'syz.1.2982': attribute type 11 has an invalid length. [ 435.760125][T12297] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2982'. [ 436.354060][ T4268] Bluetooth: hci4: command 0x0419 tx timeout [ 436.549738][T12296] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 437.987066][T12297] netlink: 'syz.1.2982': attribute type 10 has an invalid length. [ 438.014603][T12031] device hsr_slave_0 entered promiscuous mode [ 438.021588][T12031] device hsr_slave_1 entered promiscuous mode [ 438.062787][T12031] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 438.070396][T12031] Cannot create hsr debugfs directory [ 438.148944][T12317] netlink: 'syz.1.2991': attribute type 10 has an invalid length. [ 438.211588][T12322] device sit0 left promiscuous mode [ 438.727377][T12325] device sit0 entered promiscuous mode [ 439.213930][T12346] netlink: 'syz.0.3000': attribute type 11 has an invalid length. [ 439.236493][T12346] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3000'. [ 439.278475][T12346] netlink: 'syz.0.3000': attribute type 10 has an invalid length. [ 439.325590][T12346] team0: Port device wlan1 added [ 439.365700][T12345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 440.072204][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.078661][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.133759][T12378] device sit0 left promiscuous mode [ 441.217707][T12381] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.236724][T12383] device bridge_slave_1 left promiscuous mode [ 441.253312][T12383] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.348546][T12383] device bridge_slave_0 left promiscuous mode [ 441.354892][T12383] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.447200][T12386] device sit0 entered promiscuous mode [ 443.247839][T12439] device sit0 left promiscuous mode [ 443.641434][ T4281] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 443.706798][T12457] netlink: 'syz.0.3037': attribute type 10 has an invalid length. [ 443.723563][T12451] device sit0 entered promiscuous mode [ 443.814611][T12031] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 444.135120][T12031] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 444.162446][T12031] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 444.233137][T12031] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 444.314938][T12480] netlink: 'syz.0.3043': attribute type 11 has an invalid length. [ 444.333511][T12480] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3043'. [ 444.399593][T12491] netlink: 'syz.0.3043': attribute type 10 has an invalid length. [ 444.483591][T12477] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 444.816645][T12031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.955318][T12514] device sit0 left promiscuous mode [ 445.182233][T12031] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.230073][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 445.243589][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 445.251545][T12516] netlink: 'syz.1.3053': attribute type 10 has an invalid length. [ 445.353170][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 445.395082][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 445.460352][ T4347] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.467548][ T4347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.533005][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 445.569044][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 445.587612][ T4347] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.594822][ T4347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.609323][T12535] netlink: 'syz.4.3058': attribute type 11 has an invalid length. [ 445.612943][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 445.637721][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 445.695000][T12535] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3058'. [ 445.744971][T12520] device sit0 entered promiscuous mode [ 445.843469][T12532] netlink: 'syz.4.3058': attribute type 10 has an invalid length. [ 445.859685][T12531] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 445.883618][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 445.892512][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 445.957490][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 445.985496][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 446.049278][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 446.089695][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 446.162428][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 446.223405][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 446.263275][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 446.388615][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 446.429433][T12031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 446.930821][T12577] device syzkaller0 entered promiscuous mode [ 447.265125][T12597] netlink: 'syz.0.3077': attribute type 10 has an invalid length. [ 447.278076][T12600] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3078'. [ 449.383374][T12636] netlink: 'syz.1.3091': attribute type 10 has an invalid length. [ 449.425298][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 449.455250][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 449.532619][T12031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 449.643568][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 449.665988][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 449.748066][T12653] device sit0 left promiscuous mode [ 450.002839][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 450.011212][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 450.053841][T12660] device sit0 entered promiscuous mode [ 450.114717][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 450.128113][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 450.159337][T12031] device veth0_vlan entered promiscuous mode [ 450.233940][T12031] device veth1_vlan entered promiscuous mode [ 450.293749][T12672] netlink: 'syz.1.3104': attribute type 10 has an invalid length. [ 450.375117][T12031] device veth0_macvtap entered promiscuous mode [ 450.405156][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 450.424206][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 450.500162][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 450.543507][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 450.573633][T12031] device veth1_macvtap entered promiscuous mode [ 450.594567][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 450.681893][T12031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.719388][T12031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.746111][T12031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.758237][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 450.793773][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 450.818784][T12031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.839633][T12031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.862723][T12031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 450.939238][T12698] netlink: 'syz.0.3111': attribute type 11 has an invalid length. [ 450.956180][T12698] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3111'. [ 450.971359][T12679] device syzkaller0 entered promiscuous mode [ 450.980643][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 450.989860][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 451.001209][T12031] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.010992][T12031] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.020298][T12031] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.029746][T12031] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.040654][T12698] netlink: 'syz.0.3111': attribute type 10 has an invalid length. [ 451.050006][T12697] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 453.139811][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.175681][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.223853][T12734] netlink: 'syz.0.3123': attribute type 10 has an invalid length. [ 453.231881][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 453.239968][T12730] netlink: 'syz.0.3123': attribute type 11 has an invalid length. [ 453.272903][T12730] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3123'. [ 453.293896][T12728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 453.318674][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.347450][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.368823][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 453.803394][T12756] device syzkaller0 entered promiscuous mode [ 454.244121][T12771] netlink: 'syz.0.3138': attribute type 11 has an invalid length. [ 454.261193][T12771] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3138'. [ 454.368453][ T4268] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 454.386575][ T4268] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 454.394827][ T4268] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 454.409921][ T4268] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 454.424392][ T4268] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 454.433064][ T4268] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 455.013529][T12770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 455.670514][T12766] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3135'. [ 455.780790][T12759] device syzkaller0 entered promiscuous mode [ 455.810856][T12771] netlink: 'syz.0.3138': attribute type 10 has an invalid length. [ 456.016119][T12781] netlink: 'syz.2.3142': attribute type 10 has an invalid length. [ 456.038874][T12781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.056261][T12781] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 456.098512][ T4347] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.523046][ T4281] Bluetooth: hci0: command 0x0409 tx timeout [ 456.626543][T12809] netlink: 'syz.4.3153': attribute type 11 has an invalid length. [ 456.634996][T12809] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3153'. [ 457.423610][T12808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 457.820493][T12798] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3149'. [ 457.830283][T12809] netlink: 'syz.4.3153': attribute type 10 has an invalid length. [ 457.886574][ T4347] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.149636][ T4347] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.222402][T12824] netlink: 'syz.0.3159': attribute type 10 has an invalid length. [ 458.396703][T12835] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3164'. [ 458.444875][T12839] netlink: 'syz.2.3167': attribute type 11 has an invalid length. [ 458.448283][T12837] device syzkaller0 entered promiscuous mode [ 458.455563][T12839] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3167'. [ 458.479191][T12772] chnl_net:caif_netlink_parms(): no params data found [ 458.516360][T12839] netlink: 'syz.2.3167': attribute type 10 has an invalid length. [ 458.551695][T12839] team0: Port device wlan1 added [ 458.560455][T12838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.603411][ T4281] Bluetooth: hci0: command 0x041b tx timeout [ 458.644003][T12841] device syzkaller0 entered promiscuous mode [ 460.686811][ T4281] Bluetooth: hci0: command 0x040f tx timeout [ 461.953379][T12851] device sit0 left promiscuous mode [ 461.978197][T12858] device sit0 entered promiscuous mode [ 462.107968][T12874] netlink: 'syz.0.3179': attribute type 11 has an invalid length. [ 462.117085][T12874] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3179'. [ 462.129122][T12864] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.184325][T12873] netlink: 'syz.0.3179': attribute type 10 has an invalid length. [ 462.204429][T12872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 462.253653][T12772] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.260842][T12772] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.347217][T12772] device bridge_slave_0 entered promiscuous mode [ 462.394916][T12772] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.416014][T12772] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.473738][T12772] device bridge_slave_1 entered promiscuous mode [ 462.624466][T12891] device syzkaller0 entered promiscuous mode [ 462.752848][ T4281] Bluetooth: hci0: command 0x0419 tx timeout [ 462.913409][T12913] netlink: 'syz.2.3193': attribute type 11 has an invalid length. [ 462.921247][T12913] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3193'. [ 463.699135][T12912] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 464.389959][T12772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.473732][T12913] netlink: 'syz.2.3193': attribute type 10 has an invalid length. [ 464.555260][T12898] device syzkaller0 entered promiscuous mode [ 464.663698][T12772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.274982][T12937] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.421750][T12772] team0: Port device team_slave_0 added [ 466.502489][T12950] netlink: 'syz.3.3206': attribute type 11 has an invalid length. [ 466.511921][T12950] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3206'. [ 466.526978][T12772] team0: Port device team_slave_1 added [ 466.756632][T12952] device syzkaller0 entered promiscuous mode [ 466.912013][T12950] netlink: 'syz.3.3206': attribute type 10 has an invalid length. [ 466.956961][T12772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.964552][T12949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 466.979131][T12772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.073888][T12772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.781431][T12772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.797036][T12772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.851522][T12772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.997716][T12983] device syzkaller0 entered promiscuous mode [ 469.161149][T13009] netlink: 'syz.0.3223': attribute type 11 has an invalid length. [ 469.174654][T13009] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3223'. [ 469.997860][T13008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 470.674935][T13007] netlink: 'syz.4.3222': attribute type 10 has an invalid length. [ 470.682983][T13009] netlink: 'syz.0.3223': attribute type 10 has an invalid length. [ 470.796425][T12772] device hsr_slave_0 entered promiscuous mode [ 470.812030][T12772] device hsr_slave_1 entered promiscuous mode [ 470.863195][T12772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 470.878377][T12772] Cannot create hsr debugfs directory [ 471.016445][T13023] device syzkaller0 entered promiscuous mode [ 473.230201][ T4347] device wlan1 left promiscuous mode [ 473.250923][ T4347] team0: Port device wlan1 removed [ 473.294107][T13060] netlink: 'syz.2.3236': attribute type 10 has an invalid length. [ 473.324766][T13073] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3242'. [ 473.928074][ T4347] device hsr_slave_0 left promiscuous mode [ 473.977757][ T4347] device veth1_macvtap left promiscuous mode [ 473.991538][ T4347] device veth0_macvtap left promiscuous mode [ 474.013620][ T4347] device veth1_vlan left promiscuous mode [ 474.658869][ T4347] device team_slave_1 left promiscuous mode [ 474.667305][ T4347] team0 (unregistering): Port device team_slave_1 removed [ 474.752693][ T4347] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 474.789090][ T4347] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 474.828383][ T4347] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 475.013910][ T4347] bond0 (unregistering): Released all slaves [ 475.104160][T13086] device syzkaller0 entered promiscuous mode [ 475.112854][T13113] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3254'. [ 475.494268][T13132] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3259'. [ 476.698261][T13124] netlink: 'syz.4.3256': attribute type 10 has an invalid length. [ 476.729963][T13132] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3259'. [ 477.049506][T13146] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3264'. [ 477.083009][T13149] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3266'. [ 477.293129][T13151] device syzkaller0 entered promiscuous mode [ 478.755687][T12772] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 478.804873][T13170] netlink: 'syz.3.3274': attribute type 10 has an invalid length. [ 478.939394][T13167] device syzkaller0 entered promiscuous mode [ 479.206542][T13191] netlink: 'syz.2.3282': attribute type 11 has an invalid length. [ 479.214622][T13191] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3282'. [ 480.028196][T13190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 480.552246][T12772] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 480.561447][T13180] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3279'. [ 480.571152][T13191] netlink: 'syz.2.3282': attribute type 10 has an invalid length. [ 480.603738][T12772] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 480.683754][T12772] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 480.809945][T13198] device syzkaller0 entered promiscuous mode [ 480.851698][T13205] netlink: 'syz.3.3287': attribute type 10 has an invalid length. [ 481.306440][T13229] netlink: 'syz.4.3296': attribute type 11 has an invalid length. [ 481.314855][T13229] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3296'. [ 482.129970][T13228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 482.442756][T13227] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3295'. [ 482.452258][T13229] netlink: 'syz.4.3296': attribute type 10 has an invalid length. [ 482.703275][T12772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.710863][T13240] device sit0 left promiscuous mode [ 482.878776][T12772] 8021q: adding VLAN 0 to HW filter on device team0 [ 483.019115][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 483.036340][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 483.078175][T13248] device sit0 entered promiscuous mode [ 483.150089][T13253] netlink: 'syz.4.3304': attribute type 29 has an invalid length. [ 483.184497][T13253] netlink: 'syz.4.3304': attribute type 29 has an invalid length. [ 483.211613][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 483.236897][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 483.258842][ T4347] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.266063][ T4347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 483.293962][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 483.320795][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 483.363940][ T4347] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.371130][ T4347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 483.479300][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 483.526513][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 483.567554][T13258] netlink: 'syz.4.3304': attribute type 29 has an invalid length. [ 483.584009][T13267] netlink: 'syz.0.3307': attribute type 10 has an invalid length. [ 483.599637][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 483.618942][T13274] netlink: 'syz.2.3309': attribute type 11 has an invalid length. [ 483.627086][T13274] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3309'. [ 483.643185][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 483.680171][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 483.706622][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 483.736549][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 483.757444][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 483.771372][T13274] netlink: 'syz.2.3309': attribute type 10 has an invalid length. [ 483.780582][T13278] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3310'. [ 483.796420][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 483.797558][T13273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 483.819228][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 483.842456][T12772] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 483.857673][T12772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 483.884680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 483.894394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 484.411620][T13307] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3322'. [ 484.466791][T13308] netlink: 'syz.4.3320': attribute type 10 has an invalid length. [ 484.601130][T13316] netlink: 'syz.2.3324': attribute type 11 has an invalid length. [ 484.649770][T13316] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3324'. [ 484.679954][T13316] netlink: 'syz.2.3324': attribute type 10 has an invalid length. [ 484.714577][T13315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 484.942929][T13334] netlink: 'syz.2.3338': attribute type 11 has an invalid length. [ 484.959408][T13334] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3338'. [ 485.006105][T13334] netlink: 'syz.2.3338': attribute type 10 has an invalid length. [ 485.014904][T13333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 485.050874][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 485.064010][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 485.080137][T12772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 485.185342][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 485.221037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 485.331534][T13348] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3334'. [ 485.351373][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 485.373812][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 485.425811][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 485.473597][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 485.501999][T12772] device veth0_vlan entered promiscuous mode [ 485.521623][T13358] netlink: 'syz.0.3337': attribute type 10 has an invalid length. [ 485.568516][T12772] device veth1_vlan entered promiscuous mode [ 485.711489][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 485.733729][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 485.758001][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 485.770952][T13372] netlink: 'syz.2.3344': attribute type 11 has an invalid length. [ 485.782650][T13372] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3344'. [ 485.803415][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 485.837065][T12772] device veth0_macvtap entered promiscuous mode [ 485.862367][T13371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 485.867691][T12772] device veth1_macvtap entered promiscuous mode [ 485.940463][T12772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.989110][T12772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.001020][T12772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 486.022140][T12772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.034353][T12772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 486.041742][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 486.108701][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 486.137644][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 486.226831][T12772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 486.275654][T12772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.305771][T12772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 486.345116][T12772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.366712][T12772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 486.387001][T13386] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3348'. [ 486.425744][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 486.448584][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 486.471861][T12772] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.491133][T12772] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.531630][T12772] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.555401][T12772] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.727260][T13414] device sit0 left promiscuous mode [ 487.166138][T13401] device syzkaller0 entered promiscuous mode [ 487.319205][ T4559] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.340496][ T4559] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.984307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 489.005016][T13448] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3366'. [ 489.042423][ T4559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.064629][ T4559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.130042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 489.531659][T13480] device sit0 entered promiscuous mode [ 489.785886][T13492] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3379'. [ 490.388889][T13518] device sit0 left promiscuous mode [ 490.976980][T13534] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3393'. [ 491.065829][T13518] device sit0 entered promiscuous mode [ 491.843978][T13581] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3414'. [ 492.108815][T13588] validate_nla: 1 callbacks suppressed [ 492.108832][T13588] netlink: 'syz.1.3417': attribute type 10 has an invalid length. [ 492.178906][T13588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.204449][T13588] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 492.627729][T13612] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3426'. [ 493.053502][T13626] netlink: 'syz.1.3433': attribute type 10 has an invalid length. [ 493.120960][ T4268] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 493.130338][ T4268] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 493.138853][ T4268] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 493.157266][ T47] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 493.173959][ T47] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 493.184484][ T47] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 493.280967][ T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.356488][ T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.543801][T13648] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3439'. [ 493.686368][ T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.890798][T13669] netlink: 'syz.2.3448': attribute type 10 has an invalid length. [ 494.027343][ T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.317544][T13681] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3453'. [ 494.471901][T13698] netlink: 'syz.2.3460': attribute type 11 has an invalid length. [ 494.522701][T13700] netlink: 'syz.2.3460': attribute type 10 has an invalid length. [ 494.534854][T13698] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3460'. [ 494.562341][T13697] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 494.633856][T13701] device syzkaller0 entered promiscuous mode [ 494.860780][T13632] chnl_net:caif_netlink_parms(): no params data found [ 495.232725][ T47] Bluetooth: hci3: command 0x0409 tx timeout [ 495.438937][T13743] netlink: 'syz.0.3474': attribute type 11 has an invalid length. [ 495.448231][T13743] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3474'. [ 496.240134][T13742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 497.215752][T13737] tap0: tun_chr_ioctl cmd 1074812117 [ 497.226262][T13743] netlink: 'syz.0.3474': attribute type 10 has an invalid length. [ 497.312778][ T47] Bluetooth: hci3: command 0x041b tx timeout [ 497.792420][T13802] netlink: 'syz.1.3490': attribute type 11 has an invalid length. [ 497.829526][T13632] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.836973][T13802] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3490'. [ 497.921140][T13632] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.938739][T13632] device bridge_slave_0 entered promiscuous mode [ 497.985351][T13632] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.020822][T13632] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.068633][T13632] device bridge_slave_1 entered promiscuous mode [ 498.092814][T13807] netlink: 'syz.1.3490': attribute type 10 has an invalid length. [ 498.148066][T13807] team0: Port device wlan1 added [ 498.181934][T13799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 498.313324][T13797] device syzkaller0 entered promiscuous mode [ 498.629182][T13632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 498.953120][T13854] netlink: 'syz.0.3508': attribute type 11 has an invalid length. [ 498.982791][T13854] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3508'. [ 499.395096][ T47] Bluetooth: hci3: command 0x040f tx timeout [ 499.770355][T13853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 501.478594][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.485812][ T47] Bluetooth: hci3: command 0x0419 tx timeout [ 501.486214][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.506890][T13632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 501.528491][T13854] netlink: 'syz.0.3508': attribute type 10 has an invalid length. [ 501.548737][T13901] netlink: 'syz.4.3528': attribute type 10 has an invalid length. [ 501.660979][T13632] team0: Port device team_slave_0 added [ 501.778816][T13632] team0: Port device team_slave_1 added [ 502.028299][T13945] netlink: 'syz.2.3547': attribute type 11 has an invalid length. [ 502.037413][T13945] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3547'. [ 502.078002][ T52] team0: Port device wlan1 removed [ 502.149260][T13632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.169390][T13632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 502.236448][T13632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.278541][T13945] netlink: 'syz.2.3547': attribute type 10 has an invalid length. [ 502.288783][T13944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 502.314786][T13632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 502.340336][T13632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 502.373927][T13632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 502.560275][T13951] device syzkaller0 entered promiscuous mode [ 502.582203][T13962] netlink: 'syz.4.3550': attribute type 10 has an invalid length. [ 502.658021][ T52] device hsr_slave_0 left promiscuous mode [ 502.787555][ T52] device veth1_macvtap left promiscuous mode [ 502.832335][ T52] device veth0_macvtap left promiscuous mode [ 502.865282][ T52] device veth1_vlan left promiscuous mode [ 504.211269][ T52] team0 (unregistering): Port device team_slave_1 removed [ 504.269169][ T52] team0 (unregistering): Port device C removed [ 504.324408][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 504.380049][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 504.623676][ T52] bond0 (unregistering): Released all slaves [ 504.699541][T13632] device hsr_slave_0 entered promiscuous mode [ 504.706650][T13632] device hsr_slave_1 entered promiscuous mode [ 504.730949][T13989] device syzkaller0 entered promiscuous mode [ 504.738013][T14003] device sit0 left promiscuous mode [ 504.763817][T14007] device sit0 entered promiscuous mode [ 508.051206][T14053] device wlan1 entered promiscuous mode [ 508.268829][T14073] netlink: 'syz.2.3593': attribute type 11 has an invalid length. [ 508.302854][T14073] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3593'. [ 508.341392][T14073] netlink: 'syz.2.3593': attribute type 10 has an invalid length. [ 508.357519][T14073] device wlan1 left promiscuous mode [ 508.408342][T14072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 509.374131][T14115] device sit0 left promiscuous mode [ 509.701577][T14093] device syzkaller0 entered promiscuous mode [ 509.944840][T14124] device sit0 entered promiscuous mode [ 512.097825][T14132] device syzkaller0 entered promiscuous mode [ 513.473238][T14163] device sit0 left promiscuous mode [ 513.509122][T14166] device sit0 entered promiscuous mode [ 513.708929][T13632] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 513.756843][T13632] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 513.836863][T13632] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 513.890137][T13632] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 514.618009][T13632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.697554][T13632] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.787905][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 514.819255][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 514.870062][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 514.907941][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 514.953115][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.960322][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 514.987999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 515.014963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 515.027119][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 515.036219][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.043369][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.109382][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 515.229707][T14200] device syzkaller0 entered promiscuous mode [ 517.275085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 517.283911][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 517.292994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 517.301351][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 517.319969][T14246] tap0: tun_chr_ioctl cmd 1074025677 [ 517.325876][T14246] tap0: linktype set to 260 [ 517.358028][T14249] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.394305][T14242] device syzkaller0 entered promiscuous mode [ 517.416427][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 517.426262][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 517.435975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 517.458023][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 519.304113][T13632] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 519.323777][T13632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 519.336326][T13822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 519.367316][T13822] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 519.548137][T14306] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3665'. [ 520.017558][T14326] device syzkaller0 entered promiscuous mode [ 520.231363][T14333] tap0: tun_chr_ioctl cmd 1074025677 [ 520.241316][T14333] tap0: linktype set to 260 [ 520.253813][T14343] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3678'. [ 522.310915][T14333] device bridge_slave_0 entered promiscuous mode [ 522.330892][T13632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 522.347551][T14376] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3691'. [ 522.367380][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 522.440386][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 522.523299][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 522.596151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 522.689032][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 522.714796][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 522.800034][T13632] device veth0_vlan entered promiscuous mode [ 522.824731][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 522.873577][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 522.948790][T13632] device veth1_vlan entered promiscuous mode [ 523.066414][T14399] device syzkaller0 entered promiscuous mode [ 524.803158][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 524.811257][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 524.819525][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 524.828001][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 524.838869][T14416] tap0: tun_chr_ioctl cmd 1074025677 [ 524.853636][T14416] tap0: linktype set to 260 [ 524.901716][T13632] device veth0_macvtap entered promiscuous mode [ 524.923526][T13632] device veth1_macvtap entered promiscuous mode [ 525.008176][T13632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.072176][T13632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.125277][T13632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.146161][T13632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.169092][T13632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.179822][T13632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.220119][T13632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 525.268827][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 525.283781][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 525.314821][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 525.390568][T13632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.405960][T13632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.423657][T13632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.434731][T13632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.444985][T13632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.463072][T13632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.477728][T13632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 525.494359][T13632] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.503233][T13632] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.522591][T13632] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.531329][T13632] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.560977][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 525.575749][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 525.754164][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.793232][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.846748][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 525.887408][ T4347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.918016][ T4347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.961732][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 526.096351][T14450] device syzkaller0 entered promiscuous mode [ 526.680889][T14471] netlink: 'syz.1.3730': attribute type 11 has an invalid length. [ 526.692010][T14471] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3730'. [ 526.992248][ T47] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 527.015334][ T47] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 527.036148][ T47] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 527.046110][ T4268] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 527.061631][ T47] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 527.069138][ T47] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 527.490319][T14470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 528.309180][T14471] netlink: 'syz.1.3730': attribute type 10 has an invalid length. [ 528.324266][T14474] tap0: tun_chr_ioctl cmd 1074025677 [ 528.329900][T14474] tap0: linktype set to 260 [ 528.419140][T14477] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.794951][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.992083][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.031234][T14502] device syzkaller0 entered promiscuous mode [ 529.162919][ T4281] Bluetooth: hci2: command 0x0409 tx timeout [ 529.172021][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.276551][T14512] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 529.534573][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.033773][T14480] chnl_net:caif_netlink_parms(): no params data found [ 531.232831][ T4281] Bluetooth: hci2: command 0x041b tx timeout [ 531.391478][T14549] tap0: tun_chr_ioctl cmd 1074025675 [ 531.413253][T14549] tap0: persist enabled [ 531.505897][T14557] tap0: tun_chr_ioctl cmd 1074025675 [ 531.511242][T14557] tap0: persist enabled [ 531.683612][T14480] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.690802][T14480] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.725301][T14480] device bridge_slave_0 entered promiscuous mode [ 531.952011][T14480] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.010725][T14480] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.086165][T14480] device bridge_slave_1 entered promiscuous mode [ 532.404035][T14480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 532.612515][T14480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 532.796349][T14480] team0: Port device team_slave_0 added [ 532.907845][T14480] team0: Port device team_slave_1 added [ 533.051378][T14480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 533.070025][T14480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 533.103392][T14480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 533.183098][T14480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 533.190930][T14480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 533.327807][ T47] Bluetooth: hci2: command 0x040f tx timeout [ 533.340764][T14480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 533.784277][T14480] device hsr_slave_0 entered promiscuous mode [ 533.809554][T14480] device hsr_slave_1 entered promiscuous mode [ 533.837500][T14480] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 533.867229][T14480] Cannot create hsr debugfs directory [ 533.916426][T14649] device sit0 entered promiscuous mode [ 534.042183][ T52] team0: Port device wlan1 removed [ 534.272779][ T47] Bluetooth: hci1: command 0x0406 tx timeout [ 534.605837][T14662] device syzkaller0 entered promiscuous mode [ 534.662846][ T52] device hsr_slave_0 left promiscuous mode [ 534.742977][ T52] device veth1_macvtap left promiscuous mode [ 534.781422][ T52] device veth0_macvtap left promiscuous mode [ 534.793275][ T52] device veth1_vlan left promiscuous mode [ 534.805900][ T52] device veth0_vlan left promiscuous mode [ 535.310405][ T52] team0 (unregistering): Port device macvlan0 removed [ 535.395255][ T47] Bluetooth: hci2: command 0x0419 tx timeout [ 535.858476][ T52] team0 (unregistering): Port device team_slave_1 removed [ 535.938526][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 535.991717][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 536.035928][ T52] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 536.356130][ T52] bond0 (unregistering): Released all slaves [ 538.738156][T14746] netlink: 'syz.2.3830': attribute type 11 has an invalid length. [ 538.749796][T14746] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3830'. [ 538.790471][T14746] netlink: 'syz.2.3830': attribute type 10 has an invalid length. [ 538.803563][T14745] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 539.226470][T14757] device syzkaller0 entered promiscuous mode [ 541.569744][T14480] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 541.664972][T14793] netlink: 'syz.2.3841': attribute type 11 has an invalid length. [ 541.673539][T14480] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 541.713657][T14793] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3841'. [ 541.758048][T14797] netlink: 'syz.2.3841': attribute type 10 has an invalid length. [ 541.768382][T14792] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 541.812348][T14480] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 541.837901][T14480] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 543.927546][T14831] device syzkaller0 entered promiscuous mode [ 543.935092][T14841] netlink: 'syz.2.3855': attribute type 11 has an invalid length. [ 543.966557][T14841] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3855'. [ 544.747621][T14839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 545.400939][T14841] netlink: 'syz.2.3855': attribute type 10 has an invalid length. [ 545.509354][T14849] netlink: 'syz.0.3867': attribute type 11 has an invalid length. [ 545.532111][T14849] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3867'. [ 545.600875][T14849] netlink: 'syz.0.3867': attribute type 10 has an invalid length. [ 545.625375][T14847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 545.631985][T14480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 545.773672][T13822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 545.788643][T13822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 545.860697][T14480] 8021q: adding VLAN 0 to HW filter on device team0 [ 545.888397][T13822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 545.900421][T13822] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 545.966923][T13822] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.974148][T13822] bridge0: port 1(bridge_slave_0) entered forwarding state [ 545.983178][T13822] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 545.996894][T14867] device sit0 entered promiscuous mode [ 546.101316][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 546.189429][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 546.245132][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.252307][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 546.314466][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 546.409740][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 546.485402][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 546.562155][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 546.579777][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 546.598761][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 546.622192][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 546.666863][T14480] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 546.691303][T14480] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 546.762210][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 546.779904][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 546.788683][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 546.803599][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 546.812050][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 547.011085][T14910] netlink: 'syz.2.3874': attribute type 11 has an invalid length. [ 547.032302][T14910] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3874'. [ 547.811124][T14909] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 548.536509][T14888] device syzkaller0 entered promiscuous mode [ 548.547107][T14910] netlink: 'syz.2.3874': attribute type 10 has an invalid length. [ 548.658925][T14924] netlink: 'syz.0.3886': attribute type 11 has an invalid length. [ 548.691249][T14924] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3886'. [ 549.485997][T14922] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.952471][T14924] netlink: 'syz.0.3886': attribute type 10 has an invalid length. [ 550.981409][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 551.042846][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 551.056516][T14480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 551.552162][T14998] device syzkaller0 entered promiscuous mode [ 552.226819][T15024] netlink: 'syz.0.3898': attribute type 11 has an invalid length. [ 552.250020][T15024] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3898'. [ 553.028575][T15023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 553.717493][T15024] netlink: 'syz.0.3898': attribute type 10 has an invalid length. [ 554.005800][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 554.041096][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 554.555940][T15079] netlink: 'syz.3.3912': attribute type 11 has an invalid length. [ 554.564109][T15079] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3912'. [ 554.756238][ T4281] Bluetooth: hci4: command 0x0406 tx timeout [ 555.342884][T15078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 555.706252][T15079] netlink: 'syz.3.3912': attribute type 10 has an invalid length. [ 555.726987][T15079] team0: Port device wlan1 added [ 555.757241][T14480] device veth0_vlan entered promiscuous mode [ 555.821889][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 555.840834][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 555.892446][T14480] device veth1_vlan entered promiscuous mode [ 555.935915][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 555.963056][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 555.980989][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 556.148315][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 556.194412][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 556.260640][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 556.294999][T14480] device veth0_macvtap entered promiscuous mode [ 556.341297][T14480] device veth1_macvtap entered promiscuous mode [ 556.390459][T15105] device syzkaller0 entered promiscuous mode [ 558.080739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 558.090538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 558.121029][T14480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 558.196270][T14480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.217527][T14480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 558.232418][T14480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.242790][T14480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 558.264298][T14480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.265469][T15129] netlink: 'syz.0.3927': attribute type 11 has an invalid length. [ 558.277122][T14480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 558.292195][T15129] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3927'. [ 558.292919][T14480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.339386][T14480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 558.352329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 558.376024][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 558.385774][T15129] netlink: 'syz.0.3927': attribute type 10 has an invalid length. [ 558.414425][T15128] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 558.418117][T14480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 558.446075][T14480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.502149][T14480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 558.513389][T14480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.525127][T14480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 558.536473][T14480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.546624][T14480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 558.572073][T14480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.588650][T14480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 558.661290][T14480] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.715319][T14480] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.767546][T14480] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.823386][T14480] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.873397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 558.882259][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 558.962199][T15156] device syzkaller0 entered promiscuous mode [ 562.471185][ T4347] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.487405][ T4347] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.552438][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 562.613960][T15178] netlink: 'syz.2.3945': attribute type 11 has an invalid length. [ 562.628150][T15178] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3945'. [ 562.648572][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.667128][T15178] netlink: 'syz.2.3945': attribute type 10 has an invalid length. [ 562.680065][T15177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 562.711431][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.745795][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 562.915006][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.921342][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.372485][T15204] device syzkaller0 entered promiscuous mode [ 564.312652][T15230] netlink: 'syz.0.3963': attribute type 11 has an invalid length. [ 564.321794][T15230] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3963'. [ 565.155283][T15229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.920873][T15230] netlink: 'syz.0.3963': attribute type 10 has an invalid length. [ 566.961038][T15246] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 567.006740][T15246] device syzkaller0 entered promiscuous mode [ 567.825703][T15279] netlink: 'syz.4.3980': attribute type 11 has an invalid length. [ 567.870695][T15279] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3980'. [ 568.579453][T15277] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 570.103226][T15279] netlink: 'syz.4.3980': attribute type 10 has an invalid length. [ 570.122301][T15279] team0: Port device wlan1 added [ 571.015964][T15330] netlink: 'syz.3.3998': attribute type 11 has an invalid length. [ 571.040974][T15330] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3998'. [ 571.130012][T15330] netlink: 'syz.3.3998': attribute type 10 has an invalid length. [ 571.253824][T15329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 571.462323][T15347] device wlan1 entered promiscuous mode [ 572.813010][T15380] netlink: 'syz.4.4017': attribute type 11 has an invalid length. [ 572.832388][T15380] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4017'. [ 572.937342][T15380] netlink: 'syz.4.4017': attribute type 10 has an invalid length. [ 573.090031][T15378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 574.267375][T15417] device syzkaller0 entered promiscuous mode [ 574.444619][T15427] netlink: 'syz.3.4035': attribute type 11 has an invalid length. [ 574.462650][T15427] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4035'. [ 575.555362][T15426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 577.884281][T15427] netlink: 'syz.3.4035': attribute type 10 has an invalid length. [ 578.692287][T15474] netlink: 'syz.4.4050': attribute type 11 has an invalid length. [ 578.774185][T15474] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4050'. [ 578.892269][T15475] netlink: 'syz.4.4050': attribute type 10 has an invalid length. [ 578.929901][T15473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 580.011900][T15505] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len [ 580.096246][T15509] netlink: 'syz.0.4065': attribute type 11 has an invalid length. [ 580.115852][T15509] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4065'. [ 580.205930][T15509] netlink: 'syz.0.4065': attribute type 10 has an invalid length. [ 580.219972][T15509] device wlan1 left promiscuous mode [ 580.274253][T15508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 580.362668][ T47] Bluetooth: hci0: command 0x0406 tx timeout [ 582.391138][T15555] netlink: 'syz.3.4082': attribute type 11 has an invalid length. [ 582.402353][T15555] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4082'. [ 583.170433][T15554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 583.383237][T15541] device syzkaller0 entered promiscuous mode [ 583.390021][T15555] netlink: 'syz.3.4082': attribute type 10 has an invalid length. [ 585.820648][T15583] device syzkaller0 entered promiscuous mode [ 585.986990][T15591] device syzkaller0 entered promiscuous mode [ 585.989113][T15593] netlink: 'syz.0.4095': attribute type 11 has an invalid length. [ 586.001629][T15593] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4095'. [ 586.809710][T15592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 587.395258][T15593] netlink: 'syz.0.4095': attribute type 10 has an invalid length. [ 589.827052][T15626] netlink: 'syz.0.4106': attribute type 11 has an invalid length. [ 589.863788][T15626] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4106'. [ 589.881946][T15626] netlink: 'syz.0.4106': attribute type 10 has an invalid length. [ 589.907138][T15625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 590.507182][T15634] device syzkaller0 entered promiscuous mode [ 591.112367][T15670] netlink: 'syz.1.4118': attribute type 11 has an invalid length. [ 591.120446][T15670] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4118'. [ 591.922313][T15669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 592.367466][T15655] device syzkaller0 entered promiscuous mode [ 592.375262][T15670] netlink: 'syz.1.4118': attribute type 10 has an invalid length. [ 594.754940][T15698] device syzkaller0 entered promiscuous mode [ 596.335329][T15708] netlink: 'syz.3.4132': attribute type 11 has an invalid length. [ 596.383701][T15708] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4132'. [ 596.406411][T15709] netlink: 'syz.3.4132': attribute type 10 has an invalid length. [ 596.472661][T15707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 596.551765][T15711] device syzkaller0 entered promiscuous mode [ 598.816091][T15726] device syzkaller0 entered promiscuous mode [ 600.475898][T15750] device sit0 entered promiscuous mode [ 600.719358][T15761] netlink: 'syz.3.4149': attribute type 11 has an invalid length. [ 600.727424][T15761] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4149'. [ 600.798813][T15761] netlink: 'syz.3.4149': attribute type 10 has an invalid length. [ 600.852130][T15760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 601.410677][T15770] device syzkaller0 entered promiscuous mode [ 605.129499][T15824] device syzkaller0 entered promiscuous mode [ 607.239287][ T4281] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 607.727199][T15884] device syzkaller0 entered promiscuous mode [ 609.497372][T15894] device syzkaller0 entered promiscuous mode [ 611.578457][T15924] netlink: 'syz.3.4210': attribute type 11 has an invalid length. [ 611.593673][T15924] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4210'. [ 611.755542][T15931] device syzkaller0 entered promiscuous mode [ 611.763253][T15924] netlink: 'syz.3.4210': attribute type 10 has an invalid length. [ 611.778025][T15923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 614.213766][T15963] netlink: 'syz.2.4227': attribute type 11 has an invalid length. [ 614.233140][T15963] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4227'. [ 614.281265][T15963] netlink: 'syz.2.4227': attribute type 10 has an invalid length. [ 614.331069][T15962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 614.743843][T15980] device syzkaller0 entered promiscuous mode [ 614.876887][T15984] device syzkaller0 entered promiscuous mode [ 616.193627][ T4281] Bluetooth: hci3: command 0x0406 tx timeout [ 618.265554][T16022] netlink: 'syz.3.4243': attribute type 11 has an invalid length. [ 618.274763][T16022] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4243'. [ 619.089742][T16021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 619.656764][T16022] netlink: 'syz.3.4243': attribute type 10 has an invalid length. [ 619.972363][T16024] device syzkaller0 entered promiscuous mode [ 620.489547][T16049] netlink: 'syz.4.4256': attribute type 11 has an invalid length. [ 620.506095][T16049] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4256'. [ 621.258874][T16048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 621.909732][T16049] netlink: 'syz.4.4256': attribute type 10 has an invalid length. [ 622.092413][T16057] device syzkaller0 entered promiscuous mode [ 624.373278][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.379614][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.776060][T16121] netlink: 'syz.2.4281': attribute type 11 has an invalid length. [ 624.791366][T16121] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4281'. [ 624.846031][T16121] netlink: 'syz.2.4281': attribute type 10 has an invalid length. [ 624.863048][T16120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 624.983792][T16126] device sit0 entered promiscuous mode [ 625.421177][T16143] device syzkaller0 entered promiscuous mode [ 625.516235][T16133] device syzkaller0 entered promiscuous mode [ 628.913206][T16173] netlink: 'syz.2.4298': attribute type 11 has an invalid length. [ 628.941399][T16173] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4298'. [ 628.983085][T16173] netlink: 'syz.2.4298': attribute type 10 has an invalid length. [ 629.013007][T16172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 629.340078][T16181] device syzkaller0 entered promiscuous mode [ 629.694432][T16189] device syzkaller0 entered promiscuous mode [ 632.053768][T16216] netlink: 'syz.2.4312': attribute type 11 has an invalid length. [ 632.061769][T16216] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4312'. [ 632.879222][T16215] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 633.673423][T16216] netlink: 'syz.2.4312': attribute type 10 has an invalid length. [ 634.602114][T16255] netlink: 'syz.4.4325': attribute type 11 has an invalid length. [ 634.673377][T16255] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4325'. [ 634.958380][T16255] netlink: 'syz.4.4325': attribute type 10 has an invalid length. [ 634.969085][T16253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 637.273124][T16307] netlink: 'syz.3.4348': attribute type 11 has an invalid length. [ 637.293392][T16307] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4348'. [ 637.353594][T16315] netlink: 'syz.3.4348': attribute type 10 has an invalid length. [ 637.423017][T16306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 639.918702][T16349] netlink: 'syz.1.4366': attribute type 11 has an invalid length. [ 639.948343][T16349] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4366'. [ 639.975513][T16349] netlink: 'syz.1.4366': attribute type 10 has an invalid length. [ 640.002279][T16348] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 641.173078][T16390] netlink: 'syz.1.4379': attribute type 11 has an invalid length. [ 641.181121][T16390] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4379'. [ 641.980598][T16389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 642.572727][T16390] netlink: 'syz.1.4379': attribute type 10 has an invalid length. [ 645.252091][T16410] device syzkaller0 entered promiscuous mode [ 645.267081][T16429] netlink: 'syz.2.4393': attribute type 11 has an invalid length. [ 645.287885][T16429] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4393'. [ 646.092012][T16428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 646.969933][T16429] netlink: 'syz.2.4393': attribute type 10 has an invalid length. [ 647.791836][T16480] netlink: 'syz.0.4411': attribute type 11 has an invalid length. [ 647.828971][T16480] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4411'. [ 648.564121][T16479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 649.304132][T16480] netlink: 'syz.0.4411': attribute type 10 has an invalid length. [ 650.291609][T16521] netlink: 'syz.2.4426': attribute type 11 has an invalid length. [ 650.301985][T16521] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4426'. [ 651.062405][T16520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 652.032860][ T47] Bluetooth: hci2: command 0x0406 tx timeout [ 652.703932][T16521] netlink: 'syz.2.4426': attribute type 10 has an invalid length. [ 653.035282][T16551] netlink: 'syz.3.4447': attribute type 10 has an invalid length. [ 653.541907][T16573] device syzkaller0 entered promiscuous mode [ 655.741395][T16587] device syzkaller0 entered promiscuous mode [ 655.754429][T16603] netlink: 'syz.3.4457': attribute type 10 has an invalid length. [ 658.746304][T16638] netlink: 'syz.2.4472': attribute type 10 has an invalid length. [ 659.315763][T16640] bridge0: port 3(ip6gretap0) entered blocking state [ 659.389435][T16640] bridge0: port 3(ip6gretap0) entered disabled state [ 659.503649][T16640] device ip6gretap0 entered promiscuous mode [ 659.544328][T16640] bridge0: port 3(ip6gretap0) entered blocking state [ 659.551403][T16640] bridge0: port 3(ip6gretap0) entered forwarding state [ 659.780777][T16659] netlink: 'syz.2.4478': attribute type 10 has an invalid length. [ 660.285719][T16656] device syzkaller0 entered promiscuous mode [ 664.562050][T16677] device syzkaller0 entered promiscuous mode [ 664.581637][T16686] netlink: 'syz.2.4485': attribute type 10 has an invalid length. [ 666.776151][T16697] netlink: 'syz.0.4499': attribute type 10 has an invalid length. [ 666.892196][T16724] netlink: 'syz.0.4494': attribute type 10 has an invalid length. [ 667.267116][T16731] device syzkaller0 entered promiscuous mode [ 667.641536][T16739] device syzkaller0 entered promiscuous mode [ 671.492215][T16760] netlink: 'syz.3.4505': attribute type 10 has an invalid length. [ 671.816876][T16773] device syzkaller0 entered promiscuous mode [ 671.898503][T16776] netlink: 'syz.2.4511': attribute type 10 has an invalid length. [ 676.631155][T16787] device syzkaller0 entered promiscuous mode [ 676.711502][T16807] device syzkaller0 entered promiscuous mode [ 680.668699][T16835] bridge0: port 3(ip6gretap0) entered blocking state [ 680.678637][T16835] bridge0: port 3(ip6gretap0) entered disabled state [ 680.689765][T16835] device ip6gretap0 entered promiscuous mode [ 680.697864][T16835] bridge0: port 3(ip6gretap0) entered blocking state [ 680.704917][T16835] bridge0: port 3(ip6gretap0) entered forwarding state [ 680.885129][T16844] netlink: 'syz.0.4528': attribute type 10 has an invalid length. [ 681.351082][T16852] device syzkaller0 entered promiscuous mode [ 683.185629][T16864] netlink: 'syz.2.4534': attribute type 10 has an invalid length. [ 685.152175][T16895] netlink: 'syz.2.4542': attribute type 10 has an invalid length. [ 685.568445][T16909] netlink: 'syz.0.4548': attribute type 10 has an invalid length. [ 685.694888][T16914] device syzkaller0 entered promiscuous mode [ 685.796848][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.803224][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.806388][T16924] device syzkaller0 entered promiscuous mode [ 689.363616][T16941] netlink: 'syz.3.4557': attribute type 10 has an invalid length. [ 689.487005][T16941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 689.542405][T16941] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 689.563659][T16943] bridge0: port 3(ip6gretap0) entered blocking state [ 689.574841][T16943] bridge0: port 3(ip6gretap0) entered disabled state [ 689.598548][T16943] device ip6gretap0 entered promiscuous mode [ 689.935871][T16958] netlink: 'syz.1.4564': attribute type 10 has an invalid length. [ 690.712201][T16985] device syzkaller0 entered promiscuous mode [ 691.458275][T16993] netlink: 'syz.2.4576': attribute type 10 has an invalid length. [ 693.060393][T17008] netlink: 'syz.4.4582': attribute type 10 has an invalid length. [ 694.034041][T17011] device syzkaller0 entered promiscuous mode [ 694.575751][T17043] netlink: 'syz.3.4592': attribute type 10 has an invalid length. [ 694.591712][T17048] netlink: 'syz.1.4593': attribute type 10 has an invalid length. [ 694.639830][T17037] device syzkaller0 entered promiscuous mode [ 696.379014][T17055] device syzkaller0 entered promiscuous mode [ 700.592191][T17091] netlink: 'syz.1.4605': attribute type 10 has an invalid length. [ 701.785990][T17123] netlink: 'syz.0.4616': attribute type 10 has an invalid length. [ 702.078728][T17132] device syzkaller0 entered promiscuous mode [ 702.503954][T17145] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.512086][T17145] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.654612][T17152] device bridge_slave_1 left promiscuous mode [ 702.676557][T17152] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.778348][T17152] device bridge_slave_0 left promiscuous mode [ 702.850292][T17152] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.700155][T17156] device syzkaller0 entered promiscuous mode [ 706.509553][T17181] device syzkaller0 entered promiscuous mode [ 708.447410][T17194] netlink: 'syz.1.4632': attribute type 10 has an invalid length. [ 708.566990][T17214] netlink: 'syz.1.4638': attribute type 10 has an invalid length. [ 709.985341][T17246] netlink: 'syz.4.4648': attribute type 10 has an invalid length. [ 711.038492][T17268] device syzkaller0 entered promiscuous mode [ 713.797887][T17299] netlink: 'syz.2.4664': attribute type 10 has an invalid length. [ 713.808955][T17307] pimreg1: tun_chr_ioctl cmd 1074025677 [ 713.820282][T17307] pimreg1: linktype set to 772 [ 714.386883][T17322] bridge0: port 3(ip6gretap0) entered disabled state [ 714.393973][T17322] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.646415][T17323] device ip6gretap0 left promiscuous mode [ 714.682121][T17323] bridge0: port 3(ip6gretap0) entered disabled state [ 714.803666][T17323] device bridge_slave_1 left promiscuous mode [ 714.809912][T17323] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.857419][T17323] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.103621][T17357] device syzkaller0 entered promiscuous mode [ 717.219853][T17363] device ip6gretap0 left promiscuous mode [ 717.231079][T17363] bridge0: port 3(ip6gretap0) entered disabled state [ 717.288027][T17363] device bridge_slave_1 left promiscuous mode [ 717.296413][T17363] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.318368][T17363] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.516786][T17366] netlink: 'syz.4.4677': attribute type 10 has an invalid length. [ 718.134280][T17387] ref_ctr_offset mismatch. inode: 0x365 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 721.226565][T17415] netlink: 'syz.4.4699': attribute type 10 has an invalid length. [ 722.072066][T17436] ref_ctr_offset mismatch. inode: 0x676 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 722.263394][T17439] device syzkaller0 entered promiscuous mode [ 724.125816][T17452] device syzkaller0 entered promiscuous mode [ 727.036612][T17464] netlink: 'syz.0.4714': attribute type 10 has an invalid length. [ 727.326176][T17493] device syzkaller0 entered promiscuous mode [ 727.468679][T17495] ref_ctr_offset mismatch. inode: 0x8f5 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 734.171635][ T47] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 734.179709][ T47] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 734.188491][ T47] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 734.210374][ T47] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 734.219495][ T47] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 734.227860][ T47] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 735.166627][T17566] device syzkaller0 entered promiscuous mode [ 736.279716][ T4281] Bluetooth: hci5: command 0x0409 tx timeout [ 738.162734][T17544] chnl_net:caif_netlink_parms(): no params data found [ 738.352679][ T47] Bluetooth: hci5: command 0x041b tx timeout [ 738.962788][T17544] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.038373][T17544] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.103653][T17544] device bridge_slave_0 entered promiscuous mode [ 739.330349][ T5365] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.036577][T17544] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.185277][T17544] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.433431][ T4281] Bluetooth: hci5: command 0x040f tx timeout [ 740.533979][T17544] device bridge_slave_1 entered promiscuous mode [ 740.789641][ T5365] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.879177][T17544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 741.043183][ T5365] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.094638][T17544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 741.129688][T17602] netlink: 'syz.1.4749': attribute type 10 has an invalid length. [ 741.186122][ T5365] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.399959][T17544] team0: Port device team_slave_0 added [ 741.508730][T17544] team0: Port device team_slave_1 added [ 741.701702][T17544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 741.770433][T17544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 741.954644][T17544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 742.316476][T17544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 742.330202][T17544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 742.512613][ T47] Bluetooth: hci5: command 0x0419 tx timeout [ 742.531156][T17544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 743.002689][T17544] device hsr_slave_0 entered promiscuous mode [ 743.031219][T17544] device hsr_slave_1 entered promiscuous mode [ 743.044057][T17544] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 743.053509][T17544] Cannot create hsr debugfs directory [ 743.824167][T17646] netlink: 'syz.4.4760': attribute type 10 has an invalid length. [ 744.096488][T17544] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 744.165039][T17544] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 744.287470][T17544] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 744.340281][T17544] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 744.958914][ T5365] team0: Port device wlan1 removed [ 745.038996][T17690] netlink: 'syz.1.4773': attribute type 10 has an invalid length. [ 745.836130][ T5365] device hsr_slave_0 left promiscuous mode [ 745.904376][ T5365] device hsr_slave_1 left promiscuous mode [ 745.927250][ T5365] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 745.949285][ T5365] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 745.995653][ T5365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 746.043693][ T5365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 746.224740][ T5365] device veth1_macvtap left promiscuous mode [ 746.232817][ T5365] device veth0_macvtap left promiscuous mode [ 746.258914][ T5365] device veth1_vlan left promiscuous mode [ 746.285427][ T5365] device veth0_vlan left promiscuous mode [ 747.238176][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.245744][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.487699][ T5365] team0 (unregistering): Port device team_slave_1 removed [ 747.524024][ T5365] team0 (unregistering): Port device team_slave_0 removed [ 747.564790][ T5365] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 747.606300][ T5365] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 747.799190][ T5365] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 747.869984][ T5365] bond0 (unregistering): Released all slaves [ 747.910737][T17544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 748.000236][T17725] device syzkaller0 entered promiscuous mode [ 748.031019][T17736] netlink: 'syz.3.4785': attribute type 10 has an invalid length. [ 750.658397][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 750.683177][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 750.693234][T17544] 8021q: adding VLAN 0 to HW filter on device team0 [ 750.771175][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 750.800508][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 750.883212][ T4350] bridge0: port 1(bridge_slave_0) entered blocking state [ 750.890361][ T4350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 750.924524][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 750.971212][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 751.014346][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 751.037756][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.044948][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 751.061086][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 751.091489][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 751.115281][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 751.125949][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 751.139656][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 751.149028][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 751.158272][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 751.169194][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 751.188070][T17544] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 751.200064][T17544] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 751.229695][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 751.239498][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 751.248930][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 751.620205][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 751.631062][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 751.680563][T17544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 753.149271][T17804] netlink: 'syz.3.4796': attribute type 10 has an invalid length. [ 754.116376][T17816] device syzkaller0 entered promiscuous mode [ 757.170778][T17844] device syzkaller0 entered promiscuous mode [ 758.821723][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 758.832266][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 758.877041][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 758.898847][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 758.941386][T17544] device veth0_vlan entered promiscuous mode [ 758.982674][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 759.023728][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 759.102017][T17544] device veth1_vlan entered promiscuous mode [ 759.174666][T17544] device veth0_macvtap entered promiscuous mode [ 759.200697][T17544] device veth1_macvtap entered promiscuous mode [ 759.209254][T17871] netlink: 'syz.0.4810': attribute type 11 has an invalid length. [ 759.219425][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 759.232907][T17871] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4810'. [ 759.342024][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 759.381536][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 759.427441][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 759.453478][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 759.489853][T17871] netlink: 'syz.0.4810': attribute type 10 has an invalid length. [ 759.508407][T17870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 759.530075][T17544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 759.560654][T17544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.611269][T17544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 759.651795][T17544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.679368][T17544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 759.692402][T17544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.712505][T17544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 759.732480][T17544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.750716][T17544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 759.759001][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 759.775519][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 759.789514][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 759.809386][T17544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 759.830498][T17544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.850711][T17544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 759.884732][T17544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.912550][T17544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 759.932510][T17544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.958977][T17544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 759.982471][T17544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 760.130773][T17899] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 760.133148][T17544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 760.293674][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 760.306171][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 760.348130][T17544] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.420411][T17544] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.442678][T17544] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.451422][T17544] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.828121][T17907] device syzkaller0 entered promiscuous mode [ 760.861916][T17905] device syzkaller0 entered promiscuous mode [ 764.418630][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 764.450510][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 764.488313][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 764.545968][T17930] netlink: 'syz.4.4825': attribute type 11 has an invalid length. [ 764.555623][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 764.630924][T17930] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4825'. [ 764.632788][T17933] netlink: 'syz.4.4825': attribute type 10 has an invalid length. [ 764.640346][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 764.793353][T17929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 764.871429][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 768.449180][T17954] device syzkaller0 entered promiscuous mode [ 770.747977][T18006] netlink: 'syz.0.4841': attribute type 11 has an invalid length. [ 770.766266][T18006] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4841'. [ 770.801361][T18006] netlink: 'syz.0.4841': attribute type 10 has an invalid length. [ 770.831779][T18005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 772.579633][T18027] device syzkaller0 entered promiscuous mode [ 773.292937][T18053] netlink: 'syz.1.4855': attribute type 11 has an invalid length. [ 773.300795][T18053] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4855'. [ 773.328694][T18054] netlink: 'syz.1.4855': attribute type 10 has an invalid length. [ 773.348307][T18052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 776.385872][T18110] netlink: 'syz.3.4868': attribute type 11 has an invalid length. [ 776.460743][T18110] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4868'. [ 776.587491][T18116] netlink: 'syz.3.4868': attribute type 10 has an invalid length. [ 776.712251][T18108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 778.477941][T18166] netlink: 'syz.4.4885': attribute type 11 has an invalid length. [ 778.529825][T18166] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4885'. [ 779.226189][T18165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 781.038996][T18168] netlink: 'syz.4.4885': attribute type 10 has an invalid length. [ 782.349134][T18229] netlink: 'syz.5.4907': attribute type 11 has an invalid length. [ 782.362994][T18229] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.4907'. [ 782.486450][T18229] netlink: 'syz.5.4907': attribute type 10 has an invalid length. [ 782.552747][T18229] team0: Port device wlan1 added [ 782.581550][T18228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 786.289854][T18282] netlink: 'syz.0.4925': attribute type 4 has an invalid length. [ 786.300127][T18282] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4925'. [ 786.335932][T18282] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 786.725052][T18288] netlink: 'syz.5.4926': attribute type 10 has an invalid length. [ 786.786599][T18288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 786.848645][T18288] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 791.468604][T18329] device syzkaller0 entered promiscuous mode [ 791.502341][T18341] netlink: 'syz.5.4942': attribute type 10 has an invalid length. [ 794.856891][T18371] netlink: 'syz.5.4956': attribute type 10 has an invalid length. [ 796.135108][T18416] device syzkaller0 entered promiscuous mode [ 796.438330][ T47] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 796.473654][ T47] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 796.479105][T18430] netlink: 'syz.3.4973': attribute type 11 has an invalid length. [ 796.489842][ T47] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 796.506390][ T47] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 796.508700][T18430] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4973'. [ 796.526653][ T47] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 796.541493][ T47] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 796.652655][T18428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 798.493476][T18423] device sit0 entered promiscuous mode [ 798.499636][T18421] netlink: 'syz.4.4972': attribute type 10 has an invalid length. [ 798.518513][T18421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 798.554003][T18421] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 798.592550][ T47] Bluetooth: hci4: command 0x0409 tx timeout [ 798.990472][ T4559] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.180840][T18473] netlink: 'syz.5.4983': attribute type 11 has an invalid length. [ 799.190693][ T4559] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.212559][T18473] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.4983'. [ 799.269069][T18470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 799.328542][T18478] device syzkaller0 entered promiscuous mode [ 799.352327][T18480] netlink: 'syz.4.4987': attribute type 10 has an invalid length. [ 799.458626][ T4559] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.619939][ T4559] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.676528][T18426] chnl_net:caif_netlink_parms(): no params data found [ 800.682516][ T47] Bluetooth: hci4: command 0x041b tx timeout [ 802.295780][T18511] netlink: 'syz.4.4997': attribute type 11 has an invalid length. [ 802.319508][T18511] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4997'. [ 802.380389][T18510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 802.759198][ T47] Bluetooth: hci4: command 0x040f tx timeout [ 804.832879][ T47] Bluetooth: hci4: command 0x0419 tx timeout [ 805.098695][T18426] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.107086][T18426] bridge0: port 1(bridge_slave_0) entered disabled state [ 805.116087][T18426] device bridge_slave_0 entered promiscuous mode [ 805.139904][T18426] bridge0: port 2(bridge_slave_1) entered blocking state [ 805.162538][T18426] bridge0: port 2(bridge_slave_1) entered disabled state [ 805.170871][T18426] device bridge_slave_1 entered promiscuous mode [ 805.262243][T18552] netlink: 'syz.3.5010': attribute type 11 has an invalid length. [ 805.278901][T18426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 805.324840][T18426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 805.343634][T18552] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5010'. [ 805.397677][T18551] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 805.543832][T18564] [ 805.546460][T18564] ============================= [ 805.551322][T18564] WARNING: suspicious RCU usage [ 805.556462][T18564] syzkaller #0 Not tainted [ 805.560893][T18564] ----------------------------- [ 805.565809][T18564] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 805.574361][T18564] [ 805.574361][T18564] other info that might help us debug this: [ 805.574361][T18564] [ 805.584665][T18564] [ 805.584665][T18564] rcu_scheduler_active = 2, debug_locks = 1 [ 805.592801][T18564] 1 lock held by syz.4.5014/18564: [ 805.597954][T18564] #0: ffffffff8cb2d7a0 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x70 [ 805.608243][T18564] [ 805.608243][T18564] stack backtrace: [ 805.614193][T18564] CPU: 0 PID: 18564 Comm: syz.4.5014 Not tainted syzkaller #0 [ 805.621673][T18564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 805.631755][T18564] Call Trace: [ 805.635055][T18564] [ 805.638004][T18564] dump_stack_lvl+0x188/0x24e [ 805.642716][T18564] ? show_regs_print_info+0x12/0x12 [ 805.647944][T18564] ? load_image+0x400/0x400 [ 805.652528][T18564] lockdep_rcu_suspicious+0x1dd/0x300 [ 805.657942][T18564] get_callchain_entry+0x2a5/0x3b0 [ 805.663105][T18564] get_perf_callchain+0xc4/0x490 [ 805.668089][T18564] ? put_callchain_entry+0xb0/0xb0 [ 805.673235][T18564] ? plist_add+0x3d4/0x480 [ 805.677676][T18564] ? verify_lock_unused+0x140/0x140 [ 805.682892][T18564] __bpf_get_stack+0x2de/0x520 [ 805.687662][T18564] ? stack_map_get_build_id_offset+0x970/0x970 [ 805.693816][T18564] ? bpf_prog_b8a90dd1efcc4ad9+0x3d/0x41 [ 805.699445][T18564] bpf_get_stack_raw_tp+0x189/0x1c0 [ 805.704653][T18564] bpf_prog_b8a90dd1efcc4ad9+0x3d/0x41 [ 805.710197][T18564] bpf_prog_run_pin_on_cpu+0xaa/0x150 [ 805.715571][T18564] bpf_prog_test_run_syscall+0x313/0x4a0 [ 805.721199][T18564] ? sock_gen_cookie+0x60/0x60 [ 805.725967][T18564] ? sock_gen_cookie+0x60/0x60 [ 805.730726][T18564] bpf_prog_test_run+0x31e/0x390 [ 805.735668][T18564] __sys_bpf+0x62b/0x780 [ 805.739909][T18564] ? bpf_link_show_fdinfo+0x380/0x380 [ 805.745280][T18564] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 805.751185][T18564] ? lock_chain_count+0x20/0x20 [ 805.756049][T18564] __x64_sys_bpf+0x78/0x90 [ 805.760470][T18564] do_syscall_64+0x4c/0xa0 [ 805.764883][T18564] ? clear_bhb_loop+0x60/0xb0 [ 805.769561][T18564] ? clear_bhb_loop+0x60/0xb0 [ 805.774240][T18564] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 805.780125][T18564] RIP: 0033:0x7f618dd9bf79 [ 805.784533][T18564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 805.804143][T18564] RSP: 002b:00007f618ed22028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 805.812553][T18564] RAX: ffffffffffffffda RBX: 00007f618e015fa0 RCX: 00007f618dd9bf79 [ 805.820517][T18564] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 805.828478][T18564] RBP: 00007f618de327e0 R08: 0000000000000000 R09: 0000000000000000 [ 805.836440][T18564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 805.844406][T18564] R13: 00007f618e016038 R14: 00007f618e015fa0 R15: 00007fff066a97a8 [ 805.852380][T18564] [ 805.879672][T18426] team0: Port device team_slave_0 added [ 805.892667][T18426] team0: Port device team_slave_1 added [ 806.018939][T18426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 806.069301][T18426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 806.139034][T18426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 806.205755][T18426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 806.213549][T18426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 806.243030][T18426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 806.305437][T18426] device hsr_slave_0 entered promiscuous mode [ 806.313357][T18426] device hsr_slave_1 entered promiscuous mode [ 806.320135][T18426] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 806.328829][T18426] Cannot create hsr debugfs directory [ 806.522075][T18426] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 806.551053][T18426] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 806.562134][T18426] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 806.578556][T18426] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 806.739800][T18426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 806.797290][ T4559] team0: Port device wlan1 removed [ 806.819164][T18426] 8021q: adding VLAN 0 to HW filter on device team0 [ 806.829362][T13822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 806.837782][T13822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 806.855166][T13822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 806.867963][T13822] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 806.877320][T13822] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.884478][T13822] bridge0: port 1(bridge_slave_0) entered forwarding state [ 806.893269][T13822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 806.902031][T13822] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 806.910890][T13822] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.918036][T13822] bridge0: port 2(bridge_slave_1) entered forwarding state [ 806.957404][T13822] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 806.967249][T13822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 806.976966][T13822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 806.988782][T13822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 806.999629][T13822] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 807.008690][T13822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 807.019944][T13822] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 807.075148][T13822] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 807.083406][T13822] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 807.096924][T18426] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 807.110603][T18426] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 807.121852][T13822] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 807.152869][ T4559] device hsr_slave_0 left promiscuous mode [ 807.159171][ T4559] device hsr_slave_1 left promiscuous mode [ 807.165540][ T4559] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 807.173035][ T4559] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 807.180557][ T4559] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 807.189062][ T4559] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 807.209198][ T4559] device veth1_macvtap left promiscuous mode [ 807.215381][ T4559] device veth0_macvtap left promiscuous mode [ 807.221432][ T4559] device veth1_vlan left promiscuous mode [ 807.228279][ T4559] device veth0_vlan left promiscuous mode [ 807.720713][ T4559] team0 (unregistering): Port device team_slave_1 removed [ 807.757004][ T4559] team0 (unregistering): Port device team_slave_0 removed [ 807.793372][ T4559] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 807.829721][ T4559] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 808.026546][ T4559] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 808.099133][ T4559] bond0 (unregistering): Released all slaves [ 808.516109][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 808.530216][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 808.547256][T18426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 808.681738][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.688143][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.965797][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 808.981413][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 809.003642][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 809.017896][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 809.028838][T18426] device veth0_vlan entered promiscuous mode [ 809.037190][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 809.045671][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 809.059792][T18426] device veth1_vlan entered promiscuous mode [ 809.084160][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 809.097757][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 809.108749][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 809.123531][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 809.134792][T18426] device veth0_macvtap entered promiscuous mode [ 809.161133][T18426] device veth1_macvtap entered promiscuous mode [ 809.172193][T13822] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 809.180782][T13822] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 809.220300][T18426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 809.233611][T18426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.244222][T18426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 809.256476][T18426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.267745][T18426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 809.283526][T18426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.297569][T18426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 809.309804][T18426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.326927][T18426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 809.334975][T13822] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 809.344488][T13822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 809.356639][T18426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 809.367812][T18426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.379017][T18426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 809.390324][T18426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.400661][T18426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 809.411616][T18426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.421605][T18426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 809.432548][T18426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.443965][T18426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 809.454151][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 809.462883][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 809.480037][T18426] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.488939][T18426] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.503544][T18426] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.516598][T18426] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.596433][ T4350] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 809.614660][ T4350] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 809.622872][T13822] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 809.650926][ T4350] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 809.659393][ T4350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 809.668782][T13822] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready