last executing test programs: 3m12.017339657s ago: executing program 32 (id=24470): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\tm\nm'], 0xa) 3m11.970453807s ago: executing program 33 (id=24471): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8b, 0x5, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r0, &(0x7f0000000140), 0x0}, 0x20) 2m50.018862191s ago: executing program 6 (id=24608): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$kcm(0x11, 0x2, 0x300) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0), 0x5, 0x0, 0xfffffffffffffda4}, 0x0) 2m49.77256432s ago: executing program 6 (id=24613): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000010000008000"], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r1, 0x0, 0x138, 0x4c, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22) 2m49.56830276s ago: executing program 6 (id=24617): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x20000000) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xc6, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890b, &(0x7f0000000100)) 2m49.362362949s ago: executing program 6 (id=24621): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa0160a5afe99115, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102b00fe80000000000000875a650b9ff57b0000000000000000000000000000000001"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m48.668855436s ago: executing program 6 (id=24629): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000300)='GPL\x00', 0x3, 0x1002, &(0x7f00000004c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 2m47.716874553s ago: executing program 34 (id=24633): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 2m47.636135353s ago: executing program 35 (id=24636): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x9}, [@generic]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8b36, 0x20000000) 2m47.468772202s ago: executing program 36 (id=24637): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xffff0000, 0xb00, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) 2m47.459655963s ago: executing program 6 (id=24638): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x7, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x40}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 2m47.459331152s ago: executing program 37 (id=24638): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x7, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x40}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1m10.989279587s ago: executing program 9 (id=25627): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0xe, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000000bae3000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000640)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000480), &(0x7f00000004c0)=r1}, 0x20) 1m10.863000046s ago: executing program 7 (id=25628): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000010000008000"], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r1, 0x0, 0x138, 0x4c, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22) 1m10.656968786s ago: executing program 9 (id=25632): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x20000000) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xc6, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890b, &(0x7f0000000100)) 1m10.531709455s ago: executing program 7 (id=25634): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$tun(0xffffff9c, &(0x7f0000000080), 0x300, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000001c0)={'pim6reg1\x00'}) 1m10.409932705s ago: executing program 9 (id=25636): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) r1 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 1m10.263822674s ago: executing program 7 (id=25639): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x1}) 1m10.160558224s ago: executing program 9 (id=25640): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa0160a5afe99115, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102b00fe80000000000000875a650b9ff57b0000000000000000000000000000000001"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m9.916585723s ago: executing program 7 (id=25644): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) 1m9.492662252s ago: executing program 7 (id=25648): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 1m9.359033091s ago: executing program 9 (id=25650): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)) 1m8.97629131s ago: executing program 7 (id=25652): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0xfe8a}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1m8.563025208s ago: executing program 38 (id=25652): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0xfe8a}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1m8.541655538s ago: executing program 9 (id=25655): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000200)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10) close(r1) 1m8.352684528s ago: executing program 39 (id=25655): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f9002a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000200)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10) close(r1) 25.284932608s ago: executing program 5 (id=26093): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) close(0x3) 25.043335587s ago: executing program 5 (id=26096): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x19, &(0x7f0000000780)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x73}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 24.798344686s ago: executing program 5 (id=26101): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='b ', @ANYRESDEC], 0xc) 24.569883756s ago: executing program 5 (id=26106): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffdef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fd1ff7907001175f37538e486dd6317010000003a00db536873f45f08c6feaa70e2aef57b20000000000000000000000000ac1414aa"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 24.482932945s ago: executing program 4 (id=26108): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40000000) 24.280242535s ago: executing program 4 (id=26111): r0 = socket$kcm(0x2, 0x3, 0x2) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) 24.052276023s ago: executing program 3 (id=26115): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'pimreg\x00', 0x5dcf70ef8daa5d0e}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000340)=[{0x6}]}) ioctl$TUNGETIFF(r0, 0x800454d2, 0x0) 24.034854213s ago: executing program 4 (id=26116): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$kcm(0x11, 0x2, 0x300) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0), 0x5, 0x0, 0xfffffffffffffda4}, 0x0) 23.691602442s ago: executing program 3 (id=26119): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$tun(0xffffff9c, &(0x7f0000000080), 0x300, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000001c0)={'pim6reg1\x00'}) 23.633972262s ago: executing program 5 (id=26120): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f95e24fc60040068000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 23.499084792s ago: executing program 4 (id=26122): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa0160a5afe99115, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102b00fe80000000000000875a650b9ff57b0000000000000000000000000000000001"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 23.419891401s ago: executing program 3 (id=26123): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b7040000000000008500000033000000850000000800000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r0}, &(0x7f0000000500), &(0x7f0000000700)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48c8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 23.02248588s ago: executing program 5 (id=26136): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) 22.96574798s ago: executing program 3 (id=26127): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) 22.794375219s ago: executing program 4 (id=26128): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x1f2f, 0x0, 0x0, 0x0, 0x0, 0x241, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r1, &(0x7f0000000240), 0x0}, 0x20) 22.689319909s ago: executing program 3 (id=26130): r0 = syz_clone(0x28080, &(0x7f0000000c00), 0x0, &(0x7f0000000c80), 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000dc0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000e00)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000e40)=r0, 0x12) 22.328376908s ago: executing program 4 (id=26132): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='8-C'], 0x6a) 21.877005176s ago: executing program 40 (id=26132): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='8-C'], 0x6a) 21.860698356s ago: executing program 3 (id=26134): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0}, &(0x7f0000000080), &(0x7f0000000200)='%+9llu \x00'}, 0x20) 21.608416775s ago: executing program 41 (id=26134): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0}, &(0x7f0000000080), &(0x7f0000000200)='%+9llu \x00'}, 0x20) 2.426594388s ago: executing program 2 (id=26161): r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f00000024c0)={&(0x7f00000000c0)={0x2, 0x0, @private=0xa014101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='U', 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7c, &(0x7f0000000000), 0xc) 2.151179778s ago: executing program 0 (id=26165): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ced4fbd44e24eb0d34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3a06d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796efea77aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece72f2090000f44a3210223fdae7ed04935c3c90941576aebc8619d73415cda2130f5011e4845505000001000000004f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c040035cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bf463261135e24d154114df1381b02a0dcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f884cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e1700000000000000000000000000000000000000000000000000000520500002952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9a33c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a62415f78000000005f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c81c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b40824095135861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac00000b0000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e5dd921a5eadd4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293d5c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e602c28ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f257aac5af18d8c6b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e29b10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe8e4cd14dc5c1eb98b63198f6f830745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b51c34a5384f2cf51180c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af243b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380ecf1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f558982d57c556ca1427b5960b79990565ca2a20996fcba472213744d3a156979651596afde2b0089f023fcfccd072bd6ea8445fc787390d71ec61d5b7b0f05f6931914bf49aa0d66eff294271a93e32f54f281068514a4cd2d0700a43df59e9924e4affdbd22405e675e9d7cdc10546571131831d4dc8c8363077a908d9ae4f27ff095f5b07667f93a3573d3fabfca58ee0a6b6a691102bb3c7be4dc5b816853275e7ae8c13ec341bad15353fad794b46c4fd73e1b4cc78de2156cb158870d5b8446dae9ba5f7f244e6cf8f6791671057347208a313ebbcb72b04706005670f2b0055e440d72c7c3316982c6ebe8675458cf6bb393b007f5cedb7bc411834600000000000000000000000000a20071b07d568a8150ed646b4978d0226d9651647a5999ae7c7c85322a215fcdb1adbad63499518fe0d10145d430422c78367dfa941f74b63f3884565ac89c673da2c2b1172be5f2cd1f3f453ebddd432bd24c73fa773b739e20fcec16a821230654a383ac1868495f67d942c772ca75e09073dbe9307ff5cac7c2c411149a4d989a8a019e068da218d4bc34e4102fd2f97397331e4cd70b4915582b635f07ca87f00dc929f902540f565c20add8675b79e005cf0277d954697317b907b77fa5d6b7feaebaf676a2a37de8aa70748fee4bc198ffd3e2de11eb0eff896fd94de0805ba6b1054a7b3e300d4581e9af62a1ecaee96d2819b3d192e5b9561eb622da25450f586be14017a1cf74f89a1dd18af004decfe266134c3d036ae7996931fe6008a73ed34c35f0da4ffee1fe63bc1af6ef1b4731d50b8ceb582a1e9c6e8d97f8290cc105754f592d16ccdb1df8636d7ca5e372cea97dd0f005cc7092b126dd46758917fb0d94b8483d403bd451429cc1660f0b5a529d8134dc2702f6d8e2f943d98fbe50a3ba653f13f98a00fcbf311f9758ade8e4eb87b4b9fb2d387f5d8c4bdcab2fff9ed8c9de961fd831a070381c8020352fea7c334b2959ddd956701a7ea415e224a81c9fa1ebbabe74f7743e09b6c8b72650b51d5c2000ef3679c039b3604374fc1af7ab354204afbd24f0e701bc08a98452ce2668617e85e0d876f5a8b6d9b777f1c384d8a9883e4262defb6b9aab8d5b76bc91ca50f87966797da2499ca0ac76707c0408a7b6d8708fe7714988babdc11f"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f00000002c0)=r1, 0x4) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000140)="692d338298", 0x5}], 0x1, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @private=0xa010102}}}], 0x20}, 0x0) 1.866241137s ago: executing program 0 (id=26168): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34209, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext, 0x4040, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='u', 0x1}], 0x1}, 0x4040001) recvmsg$unix(r0, &(0x7f00000038c0)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffc36}, {0x0}, {0x0}], 0x9}, 0x10003) 1.719165016s ago: executing program 8 (id=26171): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) 1.607464766s ago: executing program 0 (id=26172): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'veth0_to_team\x00', 0x400}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000140)=0x8) 1.484994865s ago: executing program 8 (id=26174): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0xffffffffffffffff, 0x8}, 0x104101, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0xe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1.301735564s ago: executing program 2 (id=26175): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='rdma.current\x00', 0x26e1, 0x0) close(r0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000014c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="ff00"}) 1.300722374s ago: executing program 0 (id=26176): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="02"], 0x10) 1.226727754s ago: executing program 1 (id=26177): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000002c0)='rxrpc_client\x00', r0}, 0x10) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) 1.050276574s ago: executing program 2 (id=26178): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000004f2f000000000000180000000000000000000000000000009500000000000000a60a000000000000180000002020782500000000002020207b1af8ff00000000bfa10000000000000701000000feffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, &(0x7f0000000200)=""/242, 0x26, 0xf2, 0x1, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={r1, 0x20, &(0x7f0000000400)={0xfffffffffffffffe, 0x0, 0x0, &(0x7f0000000780)=""/164, 0xa4}}, 0x10) 1.032260634s ago: executing program 1 (id=26179): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000380)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, 0x0, 0x0) 1.016861424s ago: executing program 0 (id=26180): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000400)=0xa1, &(0x7f00000004c0)=r1}, 0x20) close(0x3) 1.006515293s ago: executing program 8 (id=26181): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000000000000000000085000000d000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f95f24fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 746.789992ms ago: executing program 1 (id=26182): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) 744.952673ms ago: executing program 2 (id=26183): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000ac0)='n', 0x1}], 0x1}, 0x4040001) recvmsg$unix(r0, &(0x7f00000038c0)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000200), 0x9, 0x0, 0xc2}, 0x40000061) 669.399302ms ago: executing program 0 (id=26184): r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f00000024c0)={&(0x7f00000000c0)={0x2, 0x0, @private=0xa014101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='U', 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7c, &(0x7f0000000000), 0xc) 668.768992ms ago: executing program 8 (id=26185): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 466.974012ms ago: executing program 1 (id=26186): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000007c0)=ANY=[], 0x27) 426.654261ms ago: executing program 2 (id=26187): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"/3098], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f00000002c0)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x2, 0x4e1d, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @dev={0xac, 0x14, 0x14, 0x8}}}}], 0x20}, 0x0) 248.985871ms ago: executing program 1 (id=26188): perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext, 0x0, 0x401}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x31}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 248.115011ms ago: executing program 8 (id=26189): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10, 0x0}, 0x20000000) close(r0) 184.767571ms ago: executing program 2 (id=26190): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 832.26µs ago: executing program 1 (id=26191): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x8, 0xe, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000ecff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 0s ago: executing program 8 (id=26200): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x14869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000faffffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x1400, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) kernel console output (not intermixed with test programs): batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1421.523729][T23386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.541748][T23386] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1421.575371][T31505] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1421.582927][T31505] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1421.614241][T31505] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1421.628557][T31505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1421.647717][T23386] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.665442][T23386] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.674201][T23386] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.691822][T23386] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.716007][T31510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1421.728821][T31510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1421.838370][T23384] device veth0_vlan entered promiscuous mode [ 1421.848673][T31496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1421.866139][T23609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1421.878318][T23609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1421.884250][T31496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1421.913263][T23609] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1421.923086][T23609] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1421.933911][T23609] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1421.990502][T23384] device veth1_vlan entered promiscuous mode [ 1422.111423][T23609] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1422.311258][T31509] bridge0: port 3(team0) entered disabled state [ 1422.331373][T31509] device bridge_slave_1 left promiscuous mode [ 1422.341922][T31509] bridge0: port 2(bridge_slave_1) entered disabled state [ 1422.354968][T31509] device bridge_slave_0 left promiscuous mode [ 1422.361209][T31509] bridge0: port 1(bridge_slave_0) entered disabled state [ 1422.392517][T31509] device hsr_slave_0 left promiscuous mode [ 1422.399938][T31509] device hsr_slave_1 left promiscuous mode [ 1422.419150][T31509] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1422.427817][T31509] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1422.440184][T31509] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1422.450485][T31509] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1422.467168][T31509] device bridge_slave_1 left promiscuous mode [ 1422.473519][T31509] bridge0: port 2(bridge_slave_1) entered disabled state [ 1422.496848][T31509] device bridge_slave_0 left promiscuous mode [ 1422.503273][T31509] bridge0: port 1(bridge_slave_0) entered disabled state [ 1422.534086][T31509] device hsr_slave_0 left promiscuous mode [ 1422.542580][T31509] device hsr_slave_1 left promiscuous mode [ 1422.558035][T31509] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1422.566213][T31509] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1422.575240][T31509] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1422.582878][T31509] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1422.600653][T31509] device bridge_slave_1 left promiscuous mode [ 1422.607710][T31509] bridge0: port 2(bridge_slave_1) entered disabled state [ 1422.618454][T31509] device bridge_slave_0 left promiscuous mode [ 1422.632356][T31509] bridge0: port 1(bridge_slave_0) entered disabled state [ 1422.686160][T31509] device veth1_macvtap left promiscuous mode [ 1422.692882][T31509] device veth0_macvtap left promiscuous mode [ 1422.699382][T31509] device veth1_vlan left promiscuous mode [ 1422.705805][T31509] device veth0_vlan left promiscuous mode [ 1422.713725][T31509] device veth1_macvtap left promiscuous mode [ 1422.720324][T31509] device veth0_macvtap left promiscuous mode [ 1422.726766][T31509] device veth1_vlan left promiscuous mode [ 1422.733516][T31509] device veth0_vlan left promiscuous mode [ 1422.988102][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.998800][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.111612][T31509] device geneve1 left promiscuous mode [ 1423.121126][T31509] team0 (unregistering): Port device geneve1 removed [ 1423.320034][T31509] device team_slave_1 left promiscuous mode [ 1423.327167][T31509] team0 (unregistering): Port device team_slave_1 removed [ 1423.373723][T31509] device team_slave_0 left promiscuous mode [ 1423.380818][T31509] team0 (unregistering): Port device team_slave_0 removed [ 1423.644173][T31509] device dummy0 left promiscuous mode [ 1423.652270][T31509] team0 (unregistering): Port device dummy0 removed [ 1424.236395][T31509] team0 (unregistering): Port device team_slave_1 removed [ 1424.289053][T31509] team0 (unregistering): Port device team_slave_0 removed [ 1424.337476][T31509] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1424.398647][T31509] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1424.890504][T31509] bond0 (unregistering): Released all slaves [ 1425.382396][T31509] team0 (unregistering): Port device team_slave_1 removed [ 1425.430856][T31509] team0 (unregistering): Port device team_slave_0 removed [ 1425.473822][T31509] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1425.520306][T31509] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1426.022653][T31509] bond0 (unregistering): Released all slaves [ 1426.100916][T18616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1426.110239][T18616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1426.129421][T31505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1426.141021][T31505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1426.167244][T18616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1426.203176][T18616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1426.240936][T23647] bridge0: port 2(bridge_slave_1) entered disabled state [ 1426.248235][T23647] bridge0: port 1(bridge_slave_0) entered disabled state [ 1426.284015][T23648] bridge0: port 2(bridge_slave_1) entered blocking state [ 1426.291229][T23648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1426.298704][T23648] bridge0: port 1(bridge_slave_0) entered blocking state [ 1426.305875][T23648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1426.325467][T23648] device bridge0 entered promiscuous mode [ 1426.335244][T23384] device veth0_macvtap entered promiscuous mode [ 1426.351871][T23377] device veth0_vlan entered promiscuous mode [ 1426.375951][T18616] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1426.400446][T18616] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1426.442933][T18616] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1426.478844][T23384] device veth1_macvtap entered promiscuous mode [ 1426.485799][T18616] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1426.493953][T18616] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1426.509534][T23377] device veth1_vlan entered promiscuous mode [ 1426.583032][T23384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1426.598467][T23384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1426.610995][T23384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1426.622467][T23384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1426.642012][T23384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1426.655308][T23384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1426.667637][T23384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1426.681354][T31510] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1426.690856][T31510] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1426.712829][T31510] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1426.730847][T31510] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1426.740250][T31510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1426.764972][T23657] tap0: tun_chr_ioctl cmd 2147767520 [ 1426.774014][T23384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1426.791450][T23384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1426.803141][T23384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1426.816237][T23384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1426.827888][T23384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1426.838868][T23384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1426.860601][T23384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1426.896445][T31510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1426.912384][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1426.926465][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1426.927362][T31510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1426.943659][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1426.972449][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1426.997268][T23384] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1427.011291][T23663] netlink: 'syz.5.24706': attribute type 29 has an invalid length. [ 1427.019963][T23384] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1427.034628][T23384] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1427.043381][T23384] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1427.101116][T23663] netlink: 'syz.5.24706': attribute type 29 has an invalid length. [ 1427.156627][T23612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1427.181586][T23612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1427.199290][T23664] netlink: 'syz.5.24706': attribute type 29 has an invalid length. [ 1427.216199][T23667] netlink: 'syz.5.24706': attribute type 29 has an invalid length. [ 1427.247948][T23377] device veth0_macvtap entered promiscuous mode [ 1427.284186][T23377] device veth1_macvtap entered promiscuous mode [ 1427.379437][T23669] IPv6: Can't replace route, no match found [ 1427.390177][T23612] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1427.404705][T23612] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1427.439234][T23377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1427.490688][T23377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1427.511373][T23377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1427.527036][T23377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1427.537315][T23377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1427.556610][T23377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1427.572612][T23377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1427.602231][T23377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1427.652083][T23377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1427.676359][T23612] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1427.693751][T23612] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1427.710274][T23612] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1427.733777][T23612] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1427.779040][T23612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1427.838145][T23377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1427.849630][T23377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1427.860848][T23377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1427.872451][T23377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1427.899231][T23377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1427.910020][T23377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1427.920442][T23377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1427.931550][T23377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1427.965790][T23377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1428.022514][T31505] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1428.070051][T31505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1428.101087][T23377] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1428.113567][T18616] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1428.134719][T18616] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1428.139645][T23377] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1428.152175][T23377] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1428.161680][T23377] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1428.197328][T31496] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1428.575168][T18616] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1428.593059][T18616] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1428.630656][T23698] tun0: tun_chr_ioctl cmd 21731 [ 1428.646920][T18616] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1428.722370][T23612] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1428.770118][T23612] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1428.798839][T31510] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1429.180958][T23707] tun0: tun_chr_ioctl cmd 1074025681 [ 1429.631225][T23718] netlink: 156 bytes leftover after parsing attributes in process `syz.7.24726'. [ 1430.361305][T23725] netlink: 'syz.5.24730': attribute type 21 has an invalid length. [ 1430.369911][T23725] netlink: 14546 bytes leftover after parsing attributes in process `syz.5.24730'. [ 1430.391513][T23727] netlink: 'syz.8.24731': attribute type 33 has an invalid length. [ 1430.409516][T23727] netlink: 152 bytes leftover after parsing attributes in process `syz.8.24731'. [ 1430.770537][T23738] netlink: 'syz.8.24735': attribute type 2 has an invalid length. [ 1430.789023][T23738] netlink: 'syz.8.24735': attribute type 4 has an invalid length. [ 1431.387533][T23764] netlink: 'syz.9.24746': attribute type 29 has an invalid length. [ 1431.453672][T23764] netlink: 'syz.9.24746': attribute type 29 has an invalid length. [ 1431.968771][T23782] netlink: 15999 bytes leftover after parsing attributes in process `syz.9.24751'. [ 1432.062305][T23786] netlink: 'syz.7.24753': attribute type 4 has an invalid length. [ 1432.451204][T23801] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.24759'. [ 1434.019684][T23855] netlink: 48 bytes leftover after parsing attributes in process `syz.7.24777'. [ 1434.252640][T23863] netlink: 60 bytes leftover after parsing attributes in process `syz.9.24778'. [ 1434.292507][T23863] netlink: 60 bytes leftover after parsing attributes in process `syz.9.24778'. [ 1434.335540][T23868] netlink: 60 bytes leftover after parsing attributes in process `syz.9.24778'. [ 1434.386033][T23859] netlink: 60 bytes leftover after parsing attributes in process `syz.9.24778'. [ 1435.291312][T23892] netlink: 152 bytes leftover after parsing attributes in process `syz.9.24789'. [ 1435.335993][T23892] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1437.160901][T23952] netlink: 61959 bytes leftover after parsing attributes in process `syz.7.24813'. [ 1437.180664][T23952] tc_dump_action: action bad kind [ 1438.190651][T23979] bridge0: port 1(bridge_slave_0) entered disabled state [ 1438.571208][T23979] device bridge_slave_0 left promiscuous mode [ 1438.601499][T23979] bridge0: port 1(bridge_slave_0) entered disabled state [ 1439.232190][T24026] netlink: 60 bytes leftover after parsing attributes in process `syz.9.24839'. [ 1439.297530][T24026] netlink: 60 bytes leftover after parsing attributes in process `syz.9.24839'. [ 1439.383395][T24022] netlink: 60 bytes leftover after parsing attributes in process `syz.9.24839'. [ 1439.431022][T24028] netlink: 60 bytes leftover after parsing attributes in process `syz.9.24839'. [ 1439.988235][T24048] netlink: 'syz.5.24847': attribute type 27 has an invalid length. [ 1440.014582][T24048] netlink: 2418 bytes leftover after parsing attributes in process `syz.5.24847'. [ 1440.306691][T24059] tun0: tun_chr_ioctl cmd 1074025673 [ 1440.923581][T24085] netlink: 65047 bytes leftover after parsing attributes in process `syz.9.24862'. [ 1441.001400][T24089] netlink: 'syz.7.24863': attribute type 33 has an invalid length. [ 1441.042342][T24089] netlink: 152 bytes leftover after parsing attributes in process `syz.7.24863'. [ 1444.142393][T24213] netlink: 'syz.8.24908': attribute type 3 has an invalid length. [ 1444.163313][T24213] netlink: 9814 bytes leftover after parsing attributes in process `syz.8.24908'. [ 1446.382057][T24300] netlink: 'syz.8.24941': attribute type 13 has an invalid length. [ 1446.406570][T24300] netlink: 24859 bytes leftover after parsing attributes in process `syz.8.24941'. [ 1446.529004][T24305] tap0: tun_chr_ioctl cmd 1074025677 [ 1446.534860][T24305] tap0: linktype set to 821 [ 1446.830459][T24321] netlink: 'syz.9.24948': attribute type 10 has an invalid length. [ 1446.849313][T24321] netlink: 65015 bytes leftover after parsing attributes in process `syz.9.24948'. [ 1447.679041][T24357] netlink: 'syz.7.24962': attribute type 10 has an invalid length. [ 1447.724825][T24357] netlink: 148 bytes leftover after parsing attributes in process `syz.7.24962'. [ 1448.231597][T24376] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1448.244734][T24376] syzkaller0: linktype set to 1 [ 1448.283654][T24379] netlink: 144 bytes leftover after parsing attributes in process `syz.8.24971'. [ 1448.533959][T24388] netlink: 'syz.5.24976': attribute type 9 has an invalid length. [ 1448.631725][T24388] netlink: 61951 bytes leftover after parsing attributes in process `syz.5.24976'. [ 1448.927378][T24406] netlink: 'syz.5.24981': attribute type 33 has an invalid length. [ 1448.964528][T24406] netlink: 'syz.5.24981': attribute type 10 has an invalid length. [ 1448.996700][T24406] netlink: 108 bytes leftover after parsing attributes in process `syz.5.24981'. [ 1449.022438][T24406] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1449.072247][T24413] netlink: 40 bytes leftover after parsing attributes in process `syz.9.24983'. [ 1449.100940][T24413] netlink: 'syz.9.24983': attribute type 1 has an invalid length. [ 1449.123641][T24413] netlink: 1 bytes leftover after parsing attributes in process `syz.9.24983'. [ 1449.153532][T24417] netlink: 'syz.8.24984': attribute type 21 has an invalid length. [ 1449.210205][T24417] netlink: 152 bytes leftover after parsing attributes in process `syz.8.24984'. [ 1449.575868][T24428] netlink: 'syz.8.24989': attribute type 2 has an invalid length. [ 1449.583749][T24428] netlink: 132 bytes leftover after parsing attributes in process `syz.8.24989'. [ 1451.564898][T24507] __nla_validate_parse: 1 callbacks suppressed [ 1451.564917][T24507] netlink: 48 bytes leftover after parsing attributes in process `syz.4.25016'. [ 1451.607190][T24512] netlink: 60 bytes leftover after parsing attributes in process `syz.5.25017'. [ 1451.647052][T24507] netlink: 'syz.4.25016': attribute type 8 has an invalid length. [ 1451.672263][T24512] netlink: 60 bytes leftover after parsing attributes in process `syz.5.25017'. [ 1451.703994][T24510] netlink: 60 bytes leftover after parsing attributes in process `syz.5.25017'. [ 1451.749919][T24514] netlink: 60 bytes leftover after parsing attributes in process `syz.5.25017'. [ 1453.237552][T24548] netlink: 'syz.8.25032': attribute type 2 has an invalid length. [ 1453.284514][T24548] netlink: 164 bytes leftover after parsing attributes in process `syz.8.25032'. [ 1453.712333][T24567] netlink: 'syz.4.25039': attribute type 49 has an invalid length. [ 1454.677134][T24592] netlink: 14556 bytes leftover after parsing attributes in process `syz.4.25049'. [ 1455.912248][T24641] netlink: 'syz.7.25067': attribute type 10 has an invalid length. [ 1455.961837][T24641] netlink: 3867 bytes leftover after parsing attributes in process `syz.7.25067'. [ 1456.686190][T24674] netlink: 9286 bytes leftover after parsing attributes in process `syz.8.25081'. [ 1457.285227][T24695] netlink: 15999 bytes leftover after parsing attributes in process `syz.9.25088'. [ 1457.749017][T24705] netlink: 'syz.9.25092': attribute type 21 has an invalid length. [ 1457.809369][T24705] netlink: 'syz.9.25092': attribute type 1 has an invalid length. [ 1457.833162][T24705] netlink: 'syz.9.25092': attribute type 2 has an invalid length. [ 1457.863685][T24705] netlink: 9062 bytes leftover after parsing attributes in process `syz.9.25092'. [ 1458.148287][T24719] netlink: 40 bytes leftover after parsing attributes in process `syz.8.25097'. [ 1458.734929][T24741] netlink: 132 bytes leftover after parsing attributes in process `syz.7.25106'. [ 1459.275107][T24762] netpci0: tun_chr_ioctl cmd 1074025694 [ 1460.262803][T22726] cgroup: fork rejected by pids controller in /syz5 [ 1460.510919][T24795] netlink: 14568 bytes leftover after parsing attributes in process `syz.8.25127'. [ 1460.976072][T23612] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1461.246951][T23612] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1461.337611][T23612] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1461.454384][T24825] netlink: 'syz.8.25137': attribute type 29 has an invalid length. [ 1461.554250][T23612] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1461.595432][T24825] netlink: 'syz.8.25137': attribute type 29 has an invalid length. [ 1461.622331][T24831] netlink: 'syz.8.25137': attribute type 29 has an invalid length. [ 1461.659014][T24833] netlink: 'syz.8.25137': attribute type 29 has an invalid length. [ 1462.315142][ T4268] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1462.328211][ T4268] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1462.337030][ T4268] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1462.347748][ T4268] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1462.359742][ T4268] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1462.373691][ T4268] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1463.136261][T24878] netlink: 60 bytes leftover after parsing attributes in process `syz.8.25154'. [ 1463.164711][T24878] netlink: 60 bytes leftover after parsing attributes in process `syz.8.25154'. [ 1463.265464][T24850] chnl_net:caif_netlink_parms(): no params data found [ 1463.301372][T24878] netlink: 60 bytes leftover after parsing attributes in process `syz.8.25154'. [ 1463.441941][T24881] netlink: 60 bytes leftover after parsing attributes in process `syz.8.25154'. [ 1463.664582][T24896] netlink: 'syz.8.25160': attribute type 29 has an invalid length. [ 1463.820736][T24891] netlink: 40 bytes leftover after parsing attributes in process `syz.4.25159'. [ 1463.831025][T24891] netlink: 'syz.4.25159': attribute type 3 has an invalid length. [ 1463.845602][T24891] netlink: 1 bytes leftover after parsing attributes in process `syz.4.25159'. [ 1463.869137][T24896] netlink: 'syz.8.25160': attribute type 29 has an invalid length. [ 1464.172808][T24910] netlink: 16255 bytes leftover after parsing attributes in process `syz.9.25164'. [ 1464.355869][T24850] bridge0: port 1(bridge_slave_0) entered blocking state [ 1464.363224][T24850] bridge0: port 1(bridge_slave_0) entered disabled state [ 1464.420979][T24850] device bridge_slave_0 entered promiscuous mode [ 1464.424764][T22729] Bluetooth: hci3: command 0x0409 tx timeout [ 1464.505582][T24850] bridge0: port 2(bridge_slave_1) entered blocking state [ 1464.512772][T24850] bridge0: port 2(bridge_slave_1) entered disabled state [ 1464.535788][T24850] device bridge_slave_1 entered promiscuous mode [ 1464.555390][T24928] netlink: 132 bytes leftover after parsing attributes in process `syz.8.25166'. [ 1464.669253][T24850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1464.861654][T24850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1465.265261][T24950] netlink: 60 bytes leftover after parsing attributes in process `syz.9.25175'. [ 1465.676969][T24962] netlink: 'syz.7.25180': attribute type 2 has an invalid length. [ 1465.701995][T24962] netlink: 17267 bytes leftover after parsing attributes in process `syz.7.25180'. [ 1465.853875][T24850] team0: Port device team_slave_0 added [ 1465.888204][T24850] team0: Port device team_slave_1 added [ 1466.338839][T24850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1466.355207][T24850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1466.486444][T24850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1466.505086][T22729] Bluetooth: hci3: command 0x041b tx timeout [ 1466.622691][T24850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1466.641329][T24850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1466.680354][T24850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1467.102882][T23612] device hsr_slave_0 left promiscuous mode [ 1467.152616][T23612] device hsr_slave_1 left promiscuous mode [ 1467.182952][T23612] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1467.196736][T23612] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1467.221653][T23612] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1467.249773][T23612] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1467.268818][T23612] device bridge_slave_1 left promiscuous mode [ 1467.318447][T23612] bridge0: port 2(bridge_slave_1) entered disabled state [ 1467.360864][T23612] device bridge_slave_0 left promiscuous mode [ 1467.378197][T23612] bridge0: port 1(bridge_slave_0) entered disabled state [ 1467.441030][T23612] device veth1_macvtap left promiscuous mode [ 1467.452971][T23612] device veth0_macvtap left promiscuous mode [ 1467.462725][T23612] device veth1_vlan left promiscuous mode [ 1467.469112][T23612] device veth0_vlan left promiscuous mode [ 1468.050720][T23612] team0 (unregistering): Port device team_slave_1 removed [ 1468.097754][T23612] team0 (unregistering): Port device team_slave_0 removed [ 1468.143802][T23612] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1468.195931][T23612] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1468.398634][T25030] netlink: 'syz.7.25205': attribute type 29 has an invalid length. [ 1468.584775][T22729] Bluetooth: hci3: command 0x040f tx timeout [ 1468.735564][T23612] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1468.747618][T23612] bond0 (unregistering): Released all slaves [ 1468.830853][T24850] device hsr_slave_0 entered promiscuous mode [ 1468.838129][T24850] device hsr_slave_1 entered promiscuous mode [ 1468.864013][T25028] netlink: 'syz.8.25204': attribute type 21 has an invalid length. [ 1468.872359][T25030] netlink: 'syz.7.25205': attribute type 29 has an invalid length. [ 1468.966445][T25031] netlink: 'syz.7.25205': attribute type 29 has an invalid length. [ 1469.005777][T25032] netlink: 'syz.7.25205': attribute type 29 has an invalid length. [ 1469.364061][T25045] __nla_validate_parse: 5 callbacks suppressed [ 1469.364081][T25045] netlink: 64859 bytes leftover after parsing attributes in process `syz.8.25210'. [ 1469.562819][T25048] netlink: 'syz.7.25211': attribute type 3 has an invalid length. [ 1469.634506][T25048] netlink: 13435 bytes leftover after parsing attributes in process `syz.7.25211'. [ 1470.268248][T24850] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1470.339777][T24850] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1470.405940][T24850] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1470.483018][T24850] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1470.665285][T22729] Bluetooth: hci3: command 0x0419 tx timeout [ 1471.081871][T24850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1471.206761][T31510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1471.231804][T31510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1471.282190][T24850] 8021q: adding VLAN 0 to HW filter on device team0 [ 1471.365271][T31496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1471.387702][T31496] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1471.414140][T31496] bridge0: port 1(bridge_slave_0) entered blocking state [ 1471.421440][T31496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1471.485424][T31496] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1471.521883][T31496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1471.535299][T31496] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1471.585097][T31496] bridge0: port 2(bridge_slave_1) entered blocking state [ 1471.592266][T31496] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1471.661597][T31496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1471.737549][T31496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1471.749494][T31496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1471.784071][T31496] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1471.854151][T31496] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1471.872902][T31496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1471.888972][T31496] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1471.935548][T31496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1471.969720][T31496] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1471.991700][T31496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1472.010353][T31496] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1472.051596][T24850] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1472.819898][T25147] syzkaller0: tun_chr_ioctl cmd 35108 [ 1472.871381][T31496] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1472.890966][T31496] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1472.936196][T24850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1473.116944][T25160] netlink: 'syz.8.25249': attribute type 46 has an invalid length. [ 1473.170441][T25160] netlink: 212868 bytes leftover after parsing attributes in process `syz.8.25249'. [ 1474.105701][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1474.142547][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1474.222335][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1474.244352][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1474.272672][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1474.311055][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1474.338352][T24850] device veth0_vlan entered promiscuous mode [ 1474.381745][T24850] device veth1_vlan entered promiscuous mode [ 1474.531198][T24850] device veth0_macvtap entered promiscuous mode [ 1474.566326][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1474.586119][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1474.622649][T25218] netlink: 188 bytes leftover after parsing attributes in process `syz.9.25269'. [ 1474.682500][T24850] device veth1_macvtap entered promiscuous mode [ 1474.709473][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1474.726928][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1474.774063][T24850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1474.911218][T24850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1474.928192][T24850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1474.982774][T24850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1475.019481][T24850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1475.043674][T24850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1475.079320][T24850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1475.104570][T24850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1475.124049][T24850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1475.159242][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1475.178540][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1475.197368][T24850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1475.214512][T24850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1475.290245][T24850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1475.326987][T24850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1475.345199][T24850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1475.394679][T24850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1475.413078][T24850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1475.447354][T24850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1475.488942][T24850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1475.541106][T24850] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1475.571618][T24850] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1475.620964][T24850] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1475.651439][T24850] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1476.244094][T31510] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1476.279203][T31510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1476.305882][T25268] delete_channel: no stack [ 1476.336571][T25268] delete_channel: no stack [ 1476.480744][T23612] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1476.515516][T23612] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1476.574655][T23612] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1476.620718][T31510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1476.636397][T31510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1476.660488][T23612] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1477.481823][T25310] netlink: 152 bytes leftover after parsing attributes in process `syz.5.25302'. [ 1477.526760][T25314] netlink: 'syz.7.25304': attribute type 4 has an invalid length. [ 1477.561454][T25314] netlink: 152 bytes leftover after parsing attributes in process `syz.7.25304'. [ 1477.594056][T25314] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1478.252859][T25338] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1478.278586][T25338] syzkaller0: linktype set to 778 [ 1478.305840][T25344] netlink: 4083 bytes leftover after parsing attributes in process `syz.7.25311'. [ 1478.339341][T25344] netlink: 4083 bytes leftover after parsing attributes in process `syz.7.25311'. [ 1478.392148][T25335] netlink: 4083 bytes leftover after parsing attributes in process `syz.7.25311'. [ 1478.493901][T25354] netlink: 148 bytes leftover after parsing attributes in process `syz.5.25316'. [ 1481.013969][T25408] netlink: 'syz.9.25335': attribute type 16 has an invalid length. [ 1481.053463][T25408] netlink: 152 bytes leftover after parsing attributes in process `syz.9.25335'. [ 1481.763514][T25442] netlink: 'syz.5.25347': attribute type 3 has an invalid length. [ 1481.845374][T25442] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.25347'. [ 1482.798646][T25483] netlink: 35347 bytes leftover after parsing attributes in process `syz.9.25363'. [ 1482.883757][T25491] netlink: 'syz.7.25366': attribute type 27 has an invalid length. [ 1482.914298][T25492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1482.945559][T25491] netlink: 2418 bytes leftover after parsing attributes in process `syz.7.25366'. [ 1482.964883][T25492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1483.025187][T25492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1483.033113][T25492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1484.235248][T25531] netlink: 'syz.4.25378': attribute type 11 has an invalid length. [ 1484.427503][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.433952][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.537571][T25540] netlink: 40 bytes leftover after parsing attributes in process `syz.9.25381'. [ 1484.589551][T25540] netlink: 4 bytes leftover after parsing attributes in process `syz.9.25381'. [ 1485.759839][T25596] netlink: 4083 bytes leftover after parsing attributes in process `syz.5.25402'. [ 1485.810818][T25596] netlink: 4083 bytes leftover after parsing attributes in process `syz.5.25402'. [ 1485.854172][T25600] netlink: 4083 bytes leftover after parsing attributes in process `syz.5.25402'. [ 1486.107776][T25615] netlink: 61967 bytes leftover after parsing attributes in process `syz.8.25409'. [ 1486.466768][T25627] delete_channel: no stack [ 1486.943930][T25642] netlink: 14546 bytes leftover after parsing attributes in process `syz.7.25416'. [ 1487.079459][T25646] netlink: 'syz.8.25417': attribute type 33 has an invalid length. [ 1487.117662][T25646] netlink: 152 bytes leftover after parsing attributes in process `syz.8.25417'. [ 1487.150827][T25646] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1487.379745][T25653] netlink: 'syz.7.25419': attribute type 29 has an invalid length. [ 1487.407634][T25653] netlink: 'syz.7.25419': attribute type 29 has an invalid length. [ 1487.436922][T25657] netlink: 'syz.7.25419': attribute type 29 has an invalid length. [ 1487.476430][T25653] netlink: 'syz.7.25419': attribute type 29 has an invalid length. [ 1487.705465][T25666] tap0: tun_chr_ioctl cmd 1074812118 [ 1488.437696][T25699] netlink: 'syz.5.25435': attribute type 21 has an invalid length. [ 1488.518216][T25699] netlink: 16166 bytes leftover after parsing attributes in process `syz.5.25435'. [ 1489.280284][T25714] pim6reg0: tun_chr_ioctl cmd 1074025676 [ 1489.322064][T25714] pim6reg0: owner set to 1 [ 1489.715368][T25731] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 1490.130624][T25747] netlink: 'syz.8.25452': attribute type 46 has an invalid length. [ 1490.505413][T25751] netlink: 'syz.5.25454': attribute type 3 has an invalid length. [ 1490.553154][T25751] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.25454'. [ 1490.745938][T25762] netlink: 'syz.4.25457': attribute type 29 has an invalid length. [ 1490.777535][T25762] netlink: 44 bytes leftover after parsing attributes in process `syz.4.25457'. [ 1490.815288][T25762] netlink: 'syz.4.25457': attribute type 29 has an invalid length. [ 1490.855392][T25762] netlink: 44 bytes leftover after parsing attributes in process `syz.4.25457'. [ 1491.341010][T25786] netlink: 14 bytes leftover after parsing attributes in process `syz.7.25466'. [ 1493.002504][T25842] netlink: 'syz.9.25489': attribute type 5 has an invalid length. [ 1493.045460][T25842] netlink: 'syz.9.25489': attribute type 5 has an invalid length. [ 1493.555918][T25857] netlink: 'syz.7.25494': attribute type 10 has an invalid length. [ 1493.581878][T25857] netlink: 'syz.7.25494': attribute type 19 has an invalid length. [ 1493.623593][T25857] netlink: 156 bytes leftover after parsing attributes in process `syz.7.25494'. [ 1494.354527][T25889] netlink: 'syz.4.25504': attribute type 5 has an invalid length. [ 1494.362446][T25889] netlink: 'syz.4.25504': attribute type 5 has an invalid length. [ 1495.544861][T25916] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1495.550870][T25916] syzkaller0: linktype set to 512 [ 1496.431479][T25945] netlink: 'syz.8.25524': attribute type 5 has an invalid length. [ 1496.481591][T25945] netlink: 'syz.8.25524': attribute type 5 has an invalid length. [ 1497.245685][T25964] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1497.251777][T25964] syzkaller0: linktype set to 512 [ 1497.672819][T25980] netlink: 48 bytes leftover after parsing attributes in process `syz.7.25550'. [ 1497.952065][T25991] netlink: 'syz.7.25542': attribute type 5 has an invalid length. [ 1497.993673][T25991] netlink: 'syz.7.25542': attribute type 5 has an invalid length. [ 1498.229049][T26001] netlink: 4031 bytes leftover after parsing attributes in process `syz.9.25549'. [ 1498.298420][T26003] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1498.344813][T26003] syzkaller0: linktype set to 512 [ 1498.802812][T26025] netlink: 152 bytes leftover after parsing attributes in process `syz.8.25568'. [ 1499.528478][T26054] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1499.544083][T26054] syzkaller0: linktype set to 512 [ 1501.012967][T26107] netlink: 'syz.7.25588': attribute type 29 has an invalid length. [ 1501.100157][T26107] netlink: 'syz.7.25588': attribute type 29 has an invalid length. [ 1501.150490][T26113] netlink: 'syz.7.25588': attribute type 29 has an invalid length. [ 1501.215209][T26107] netlink: 'syz.7.25588': attribute type 29 has an invalid length. [ 1504.291174][T26235] netlink: 'syz.8.25635': attribute type 3 has an invalid length. [ 1504.351806][T26235] netlink: 105116 bytes leftover after parsing attributes in process `syz.8.25635'. [ 1505.488524][T26276] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.25651'. [ 1505.679275][T23609] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1505.948690][T23609] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1506.131841][T23609] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1506.257198][T23609] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1506.850137][T22727] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1506.859637][T22727] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1506.867607][T22727] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1506.877661][ T4268] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1506.888355][ T4268] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1506.895885][ T4268] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1507.051961][ T4268] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1507.070208][ T4268] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1507.079774][ T4268] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1507.093096][ T4268] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1507.107447][ T4268] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1507.116900][ T4268] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1507.411955][T26322] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.25665'. [ 1507.792867][T26303] chnl_net:caif_netlink_parms(): no params data found [ 1508.222780][T26303] bridge0: port 1(bridge_slave_0) entered blocking state [ 1508.248976][T26303] bridge0: port 1(bridge_slave_0) entered disabled state [ 1508.278823][T26303] device bridge_slave_0 entered promiscuous mode [ 1508.304703][T26309] chnl_net:caif_netlink_parms(): no params data found [ 1508.350804][T26303] bridge0: port 2(bridge_slave_1) entered blocking state [ 1508.360286][T26303] bridge0: port 2(bridge_slave_1) entered disabled state [ 1508.389951][T26303] device bridge_slave_1 entered promiscuous mode [ 1508.823642][T23609] device hsr_slave_0 left promiscuous mode [ 1508.984583][T22729] Bluetooth: hci0: command 0x0409 tx timeout [ 1509.144635][ T4268] Bluetooth: hci3: command 0x0409 tx timeout [ 1509.152527][T23609] device hsr_slave_1 left promiscuous mode [ 1509.244726][T23609] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1509.252204][T23609] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1509.310564][T23609] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1509.318583][T23609] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1509.336277][T23609] device bridge_slave_1 left promiscuous mode [ 1509.342617][T23609] bridge0: port 2(bridge_slave_1) entered disabled state [ 1509.396175][T23609] device veth1_macvtap left promiscuous mode [ 1509.402251][T23609] device veth0_macvtap left promiscuous mode [ 1509.409260][T23609] device veth1_vlan left promiscuous mode [ 1509.420964][T23609] device veth0_vlan left promiscuous mode [ 1510.011966][T23609] team0 (unregistering): Port device team_slave_1 removed [ 1510.055999][T23609] team0 (unregistering): Port device team_slave_0 removed [ 1510.099273][T23609] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1510.146912][T23609] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1510.526127][T23609] bond0 (unregistering): Released all slaves [ 1510.620777][T26378] netlink: 'syz.4.25675': attribute type 10 has an invalid length. [ 1510.629244][T26378] bridge0: port 2(bridge_slave_1) entered disabled state [ 1510.636775][T26378] bridge0: port 1(bridge_slave_0) entered disabled state [ 1510.654285][T26378] bridge0: port 2(bridge_slave_1) entered blocking state [ 1510.661544][T26378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1510.669030][T26378] bridge0: port 1(bridge_slave_0) entered blocking state [ 1510.676205][T26378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1510.686794][T26378] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1510.702285][T26380] netlink: 15998 bytes leftover after parsing attributes in process `syz.8.25676'. [ 1510.771333][T26303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1510.817845][T26303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1510.990416][T26303] team0: Port device team_slave_0 added [ 1511.064657][T22729] Bluetooth: hci0: command 0x041b tx timeout [ 1511.149894][T26303] team0: Port device team_slave_1 added [ 1511.206522][T26309] bridge0: port 1(bridge_slave_0) entered blocking state [ 1511.225585][T22729] Bluetooth: hci3: command 0x041b tx timeout [ 1511.239693][T26309] bridge0: port 1(bridge_slave_0) entered disabled state [ 1511.250692][T26309] device bridge_slave_0 entered promiscuous mode [ 1511.320168][T26303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1511.342576][T26303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1511.376957][T26303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1511.394128][T26309] bridge0: port 2(bridge_slave_1) entered blocking state [ 1511.405935][T26309] bridge0: port 2(bridge_slave_1) entered disabled state [ 1511.414322][T26309] device bridge_slave_1 entered promiscuous mode [ 1511.435356][T26303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1511.442353][T26303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1511.492533][T26303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1511.602120][T26309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1511.643737][T26303] device hsr_slave_0 entered promiscuous mode [ 1511.653278][T26303] device hsr_slave_1 entered promiscuous mode [ 1511.663950][T26303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1511.700769][T26303] Cannot create hsr debugfs directory [ 1511.725859][T26309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1511.827847][T26309] team0: Port device team_slave_0 added [ 1511.885018][T26309] team0: Port device team_slave_1 added [ 1511.965648][T23609] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.109158][T26420] syzkaller1: tun_chr_ioctl cmd 2147767521 [ 1512.177697][T23609] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.235283][T26309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1512.242280][T26309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1512.334626][T26309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1512.366413][T26309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1512.373408][T26309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1512.442095][T26309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1512.487136][T23609] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.584294][T23609] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.689247][T26439] netlink: 'syz.4.25695': attribute type 29 has an invalid length. [ 1512.706786][T26309] device hsr_slave_0 entered promiscuous mode [ 1512.714107][T26309] device hsr_slave_1 entered promiscuous mode [ 1512.721668][T26309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1512.729878][T26309] Cannot create hsr debugfs directory [ 1512.741850][T26439] netlink: 'syz.4.25695': attribute type 29 has an invalid length. [ 1512.757161][T26442] netlink: 'syz.4.25695': attribute type 29 has an invalid length. [ 1512.920375][T26439] netlink: 'syz.4.25695': attribute type 29 has an invalid length. [ 1513.144718][T22729] Bluetooth: hci0: command 0x040f tx timeout [ 1513.298843][T23609] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1513.304862][T22729] Bluetooth: hci3: command 0x040f tx timeout [ 1513.457755][T23609] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1513.601673][T23609] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1513.642169][ T4268] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1513.652165][ T4268] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1513.661110][ T4268] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1513.669753][ T4268] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1513.677658][ T4268] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1513.685062][ T4268] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1513.748180][T23609] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1514.212620][T26465] chnl_net:caif_netlink_parms(): no params data found [ 1514.458410][T26496] netlink: 'syz.4.25711': attribute type 29 has an invalid length. [ 1514.486436][T26496] netlink: 'syz.4.25711': attribute type 29 has an invalid length. [ 1514.497523][T26492] tap0: tun_chr_ioctl cmd 2147767520 [ 1514.515866][T26496] netlink: 'syz.4.25711': attribute type 29 has an invalid length. [ 1514.524046][T26465] bridge0: port 1(bridge_slave_0) entered blocking state [ 1514.531627][T26465] bridge0: port 1(bridge_slave_0) entered disabled state [ 1514.540374][T26465] device bridge_slave_0 entered promiscuous mode [ 1514.553933][T26496] netlink: 'syz.4.25711': attribute type 29 has an invalid length. [ 1514.593096][T26465] bridge0: port 2(bridge_slave_1) entered blocking state [ 1514.604241][T26465] bridge0: port 2(bridge_slave_1) entered disabled state [ 1514.618613][T26465] device bridge_slave_1 entered promiscuous mode [ 1514.716768][T26499] IPv6: Can't replace route, no match found [ 1514.786831][T26465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1514.836764][T26465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1514.959392][T26465] team0: Port device team_slave_0 added [ 1515.069918][T26465] team0: Port device team_slave_1 added [ 1515.134365][T26465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1515.161941][T26465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1515.197792][T26465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1515.224497][ T4268] Bluetooth: hci0: command 0x0419 tx timeout [ 1515.384694][T22729] Bluetooth: hci3: command 0x0419 tx timeout [ 1515.410397][T26465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1515.417584][T26465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1515.445849][T26465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1515.647774][T26465] device hsr_slave_0 entered promiscuous mode [ 1515.654957][T26465] device hsr_slave_1 entered promiscuous mode [ 1515.661687][T26465] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1515.670338][T26465] Cannot create hsr debugfs directory [ 1515.705564][ T4268] Bluetooth: hci4: command 0x0409 tx timeout [ 1515.812410][T26523] tun0: tun_chr_ioctl cmd 21731 [ 1516.486748][T23609] device hsr_slave_0 left promiscuous mode [ 1516.493335][T23609] device hsr_slave_1 left promiscuous mode [ 1516.505440][T23609] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1516.513104][T23609] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1516.526141][T23609] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1516.533585][T23609] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1516.545337][T23609] device bridge_slave_1 left promiscuous mode [ 1516.551644][T23609] bridge0: port 2(bridge_slave_1) entered disabled state [ 1516.561889][T23609] device bridge_slave_0 left promiscuous mode [ 1516.568652][T23609] bridge0: port 1(bridge_slave_0) entered disabled state [ 1516.584306][T23609] device hsr_slave_0 left promiscuous mode [ 1516.592674][T23609] device hsr_slave_1 left promiscuous mode [ 1516.600075][T23609] device bridge_slave_1 left promiscuous mode [ 1516.607832][T23609] bridge0: port 2(bridge_slave_1) entered disabled state [ 1516.618142][T23609] device bridge_slave_0 left promiscuous mode [ 1516.624421][T23609] bridge0: port 1(bridge_slave_0) entered disabled state [ 1516.698085][T23609] device veth1_macvtap left promiscuous mode [ 1516.704169][T23609] device veth0_macvtap left promiscuous mode [ 1516.711243][T23609] device veth1_vlan left promiscuous mode [ 1516.717488][T23609] device veth0_vlan left promiscuous mode [ 1516.725317][T23609] device veth1_macvtap left promiscuous mode [ 1516.731395][T23609] device veth0_macvtap left promiscuous mode [ 1516.744600][T23609] device veth1_vlan left promiscuous mode [ 1516.750429][T23609] device veth0_vlan left promiscuous mode [ 1517.450868][T23609] team0 (unregistering): Port device team_slave_1 removed [ 1517.496400][T23609] team0 (unregistering): Port device team_slave_0 removed [ 1517.538938][T23609] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1517.582894][T23609] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1517.791503][ T4268] Bluetooth: hci4: command 0x041b tx timeout [ 1518.033280][T23609] bond0 (unregistering): Released all slaves [ 1518.440155][T23609] team0 (unregistering): Port device team_slave_1 removed [ 1518.485091][T23609] team0 (unregistering): Port device team_slave_0 removed [ 1518.526293][T23609] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1518.568114][T23609] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1518.990451][T23609] bond0 (unregistering): Released all slaves [ 1519.086416][T26541] tun1: tun_chr_ioctl cmd 1074025681 [ 1519.713434][T26553] netlink: 156 bytes leftover after parsing attributes in process `syz.8.25735'. [ 1519.864710][T22729] Bluetooth: hci4: command 0x040f tx timeout [ 1520.083195][T26556] netlink: 'syz.4.25737': attribute type 33 has an invalid length. [ 1520.093624][T26556] netlink: 152 bytes leftover after parsing attributes in process `syz.4.25737'. [ 1520.278959][T26561] netlink: 'syz.4.25738': attribute type 21 has an invalid length. [ 1520.287704][T26561] netlink: 14546 bytes leftover after parsing attributes in process `syz.4.25738'. [ 1520.578754][T26572] netlink: 'syz.4.25742': attribute type 2 has an invalid length. [ 1520.595786][T26572] netlink: 'syz.4.25742': attribute type 4 has an invalid length. [ 1520.697137][T26303] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1520.771466][T26303] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1520.785390][T26303] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1520.833200][T26303] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1521.000083][T26309] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1521.076514][T26309] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1521.096297][T26309] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1521.164335][T26309] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1521.300805][T26465] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1521.345680][T26465] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1521.386755][T26303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1521.411243][T26465] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1521.490075][T31505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1521.503250][T31505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1521.522551][T26465] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1521.536695][T26303] 8021q: adding VLAN 0 to HW filter on device team0 [ 1521.605075][T23612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1521.623332][T23612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1521.643943][T23612] bridge0: port 1(bridge_slave_0) entered blocking state [ 1521.651151][T23612] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1521.675327][T26606] netlink: 'syz.8.25750': attribute type 29 has an invalid length. [ 1521.685905][T23612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1521.720790][T23612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1521.732750][T23612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1521.743465][T23612] bridge0: port 2(bridge_slave_1) entered blocking state [ 1521.750675][T23612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1521.760387][T26606] netlink: 'syz.8.25750': attribute type 29 has an invalid length. [ 1521.826957][T26309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1521.833962][T31510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1521.865948][T31510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1521.899562][T31510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1521.916681][T31510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1521.937691][T31510] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1521.945700][T22729] Bluetooth: hci4: command 0x0419 tx timeout [ 1522.000955][T31510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1522.031567][T31510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1522.075663][T31510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1522.088045][T31510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1522.116867][T26303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1522.158563][T26303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1522.222924][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1522.236459][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1522.260979][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1522.278633][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1522.310353][T26309] 8021q: adding VLAN 0 to HW filter on device team0 [ 1522.357023][T31510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1522.377024][T31510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1522.402801][T31510] bridge0: port 1(bridge_slave_0) entered blocking state [ 1522.410063][T31510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1522.474977][T31510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1522.501269][T31510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1522.539257][T31510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1522.565407][T31510] bridge0: port 2(bridge_slave_1) entered blocking state [ 1522.572581][T31510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1522.609988][T31510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1522.631770][T31510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1522.678386][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1522.704022][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1522.744178][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1522.783679][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1522.812585][T26309] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1522.837037][T26309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1522.865634][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1522.876342][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1522.885907][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1522.899195][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1522.909317][T26640] netlink: 15999 bytes leftover after parsing attributes in process `syz.8.25758'. [ 1522.919686][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1522.938772][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1522.963275][T26465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1523.008573][T31510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1523.033378][T31510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1523.070258][T26303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1523.110859][T31510] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1523.119202][T31510] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1523.147314][T26465] 8021q: adding VLAN 0 to HW filter on device team0 [ 1523.221227][T23609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1523.235493][T23609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1523.256371][T26650] netlink: 'syz.8.25759': attribute type 4 has an invalid length. [ 1523.290287][T31510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1523.305302][T31510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1523.335438][T31510] bridge0: port 1(bridge_slave_0) entered blocking state [ 1523.342586][T31510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1523.353391][T31510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1523.362000][T31510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1523.400290][T31510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1523.426291][T31510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1523.442969][T31510] bridge0: port 2(bridge_slave_1) entered blocking state [ 1523.450149][T31510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1523.461168][T31510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1523.475278][T31510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1523.496391][T31510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1523.521877][T26303] device veth0_vlan entered promiscuous mode [ 1523.558882][T31510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1523.581621][T31510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1523.608044][T26303] device veth1_vlan entered promiscuous mode [ 1523.623321][T31496] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1523.645422][T31496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1523.666357][T31496] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1523.721620][T31496] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1523.741711][T31496] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1523.769655][T31496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1523.782826][T31496] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1523.794597][T31496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1523.803300][T31496] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1523.892444][T26465] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1523.911436][T26465] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1523.922794][T31496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1523.933186][T31496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1523.942563][T31496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1523.953898][T31496] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1523.974066][T26303] device veth0_macvtap entered promiscuous mode [ 1523.992040][T26668] netlink: 16255 bytes leftover after parsing attributes in process `syz.8.25765'. [ 1524.003793][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1524.022794][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1524.048899][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1524.081437][T26303] device veth1_macvtap entered promiscuous mode [ 1524.108551][T26309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1524.183310][T26303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1524.211618][T26303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1524.274293][T26303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1524.305505][T23612] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1524.322660][T23612] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1524.340341][T23612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1524.365732][T26303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1524.425477][T26303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1524.444500][T26303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1524.492897][T26303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1524.506278][T26303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1524.594648][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1524.615391][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1524.645633][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1524.680629][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1524.707965][T26303] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1524.735169][T26303] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1524.743930][T26303] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1524.806346][T26303] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1524.850414][T26309] device veth0_vlan entered promiscuous mode [ 1524.880285][T23612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1524.903520][T23612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1524.926671][T23612] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1524.966371][T23612] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1525.008431][T23612] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1525.033094][T23612] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1525.060253][T26465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1525.076899][T26309] device veth1_vlan entered promiscuous mode [ 1525.216418][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1525.253713][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1525.293578][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1525.335323][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1525.378878][T26309] device veth0_macvtap entered promiscuous mode [ 1525.392914][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1525.422211][T31516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1525.431836][T31516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1525.452229][T26309] device veth1_macvtap entered promiscuous mode [ 1525.489739][T31496] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1525.553696][T26309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1525.580454][T26309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.620238][T26309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1525.644502][T26309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.681736][T26309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1525.700083][T26309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1525.703355][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1525.754641][T26309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.765033][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1525.785669][T26309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1525.814345][T26309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.834503][T26309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1525.851611][T26309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.863643][T26309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1525.874850][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1525.900667][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1525.920433][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1525.937552][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1525.948686][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1525.963376][T26309] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1525.979521][T26309] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1525.989380][T26309] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1526.004275][T26309] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1526.103376][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1526.121068][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1526.204209][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1526.225132][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1526.272005][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1526.315368][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1526.361786][T26465] device veth0_vlan entered promiscuous mode [ 1526.407316][T23612] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1526.408718][T26465] device veth1_vlan entered promiscuous mode [ 1526.422092][T23612] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1526.465979][T31505] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1526.480401][T31505] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1526.607896][T31505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1526.632448][T31505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1526.688110][T26465] device veth0_macvtap entered promiscuous mode [ 1526.695401][T23612] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1526.702396][T26465] device veth1_macvtap entered promiscuous mode [ 1526.703515][T23612] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1526.790823][T26751] netlink: 'syz.4.25784': attribute type 2 has an invalid length. [ 1526.805000][T26751] netlink: 132 bytes leftover after parsing attributes in process `syz.4.25784'. [ 1526.839023][T23612] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1526.855777][T23612] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1526.888615][T23612] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1526.937840][T26465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1526.965147][T26465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.993241][T26465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1527.004569][T26465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1527.027004][T26465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1527.045203][T26465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1527.067861][T26465] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1527.089181][T31496] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1527.111065][T31496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1527.182721][T26465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1527.223991][T26465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1527.241287][T26465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1527.252941][T26465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1527.274572][T26465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1527.302251][T26465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1527.323696][T26465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1527.346763][T26465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1527.381566][T26465] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1527.391863][T26773] netlink: 40 bytes leftover after parsing attributes in process `syz.4.25792'. [ 1527.424647][T26773] netlink: 'syz.4.25792': attribute type 1 has an invalid length. [ 1527.443072][T26773] netlink: 1 bytes leftover after parsing attributes in process `syz.4.25792'. [ 1527.457931][T31496] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1527.502524][T31496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1527.531627][T26772] netlink: 'syz.3.25791': attribute type 21 has an invalid length. [ 1527.556637][T26772] netlink: 152 bytes leftover after parsing attributes in process `syz.3.25791'. [ 1527.581762][T26465] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1527.601216][T26465] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1527.614081][T26465] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1527.664453][T26465] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1527.710798][T26779] netlink: 'syz.8.25794': attribute type 33 has an invalid length. [ 1527.732488][T26779] netlink: 'syz.8.25794': attribute type 10 has an invalid length. [ 1527.741863][T26779] netlink: 108 bytes leftover after parsing attributes in process `syz.8.25794'. [ 1527.757798][T26779] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1527.989676][T26788] netlink: 'syz.4.25798': attribute type 9 has an invalid length. [ 1528.015436][T26788] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.25798'. [ 1528.048342][T26790] netlink: 'syz.8.25808': attribute type 10 has an invalid length. [ 1528.070204][T26790] netlink: 148 bytes leftover after parsing attributes in process `syz.8.25808'. [ 1528.116526][T31505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1528.164582][T31505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1528.204346][T23609] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1528.240231][T31496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1528.272009][T31496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1528.309449][T23609] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1528.457275][T26806] netlink: 144 bytes leftover after parsing attributes in process `syz.1.25804'. [ 1528.560780][T26813] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1528.612332][T26813] syzkaller0: linktype set to 1 [ 1529.201296][T26842] netlink: 'syz.5.25816': attribute type 10 has an invalid length. [ 1529.210444][T26842] netlink: 65015 bytes leftover after parsing attributes in process `syz.5.25816'. [ 1529.344195][T26847] tap0: tun_chr_ioctl cmd 1074025677 [ 1529.422231][T26847] tap0: linktype set to 821 [ 1529.458032][T26850] netlink: 'syz.3.25819': attribute type 13 has an invalid length. [ 1529.478549][T26850] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.25819'. [ 1530.413887][T26898] netlink: 'syz.1.25839': attribute type 3 has an invalid length. [ 1531.979195][T26964] __nla_validate_parse: 1 callbacks suppressed [ 1531.979217][T26964] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.25862'. [ 1532.584640][T22727] Bluetooth: hci1: command 0x0406 tx timeout [ 1532.591423][T22727] Bluetooth: hci2: command 0x0406 tx timeout [ 1532.749083][T26996] netlink: 60 bytes leftover after parsing attributes in process `syz.8.25873'. [ 1532.810780][T26996] netlink: 60 bytes leftover after parsing attributes in process `syz.8.25873'. [ 1532.880299][T26992] netlink: 60 bytes leftover after parsing attributes in process `syz.8.25873'. [ 1532.920985][T26998] netlink: 60 bytes leftover after parsing attributes in process `syz.8.25873'. [ 1533.266322][T27012] bridge0: port 1(bridge_slave_0) entered disabled state [ 1533.467638][T27012] device bridge_slave_0 left promiscuous mode [ 1533.484604][T27012] bridge0: port 1(bridge_slave_0) entered disabled state [ 1534.137857][T27041] netlink: 61959 bytes leftover after parsing attributes in process `syz.4.25889'. [ 1534.191540][T27041] tc_dump_action: action bad kind [ 1534.930837][T27075] netlink: 152 bytes leftover after parsing attributes in process `syz.1.25900'. [ 1534.962575][T27075] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1535.486653][T27093] netlink: 60 bytes leftover after parsing attributes in process `syz.5.25904'. [ 1535.515026][T27093] netlink: 60 bytes leftover after parsing attributes in process `syz.5.25904'. [ 1535.541286][T27089] netlink: 60 bytes leftover after parsing attributes in process `syz.5.25904'. [ 1536.632346][T27141] netlink: 'syz.4.25924': attribute type 10 has an invalid length. [ 1537.140844][T27165] netlink: 'syz.1.25933': attribute type 29 has an invalid length. [ 1537.190281][T27165] netlink: 'syz.1.25933': attribute type 29 has an invalid length. [ 1537.265278][T27173] netlink: 'syz.5.25934': attribute type 2 has an invalid length. [ 1537.285591][T27173] __nla_validate_parse: 2 callbacks suppressed [ 1537.285611][T27173] netlink: 17267 bytes leftover after parsing attributes in process `syz.5.25934'. [ 1537.552804][T27184] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.25937'. [ 1537.579615][T27183] netlink: 'syz.4.25938': attribute type 29 has an invalid length. [ 1537.630444][T27183] netlink: 'syz.4.25938': attribute type 29 has an invalid length. [ 1537.672186][T27186] netlink: 'syz.4.25938': attribute type 29 has an invalid length. [ 1537.712612][T27183] netlink: 'syz.4.25938': attribute type 29 has an invalid length. [ 1538.239447][T27209] syzkaller0: tun_chr_ioctl cmd 35108 [ 1539.359179][T27239] netlink: 'syz.8.25958': attribute type 4 has an invalid length. [ 1539.397582][T27239] netlink: 152 bytes leftover after parsing attributes in process `syz.8.25958'. [ 1539.446349][T27239] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1539.573317][T27244] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1539.585105][T27244] syzkaller0: linktype set to 778 [ 1539.596345][T27246] netlink: 148 bytes leftover after parsing attributes in process `syz.1.25960'. [ 1539.623050][T27255] netlink: 48 bytes leftover after parsing attributes in process `syz.5.25962'. [ 1540.010198][T27266] netlink: 'syz.5.25967': attribute type 16 has an invalid length. [ 1540.055824][T27266] netlink: 152 bytes leftover after parsing attributes in process `syz.5.25967'. [ 1540.692831][T27303] netlink: 2418 bytes leftover after parsing attributes in process `syz.5.25981'. [ 1542.295970][T27362] netlink: 14546 bytes leftover after parsing attributes in process `syz.8.26004'. [ 1543.383682][T27402] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 1543.699966][T27414] netlink: 14 bytes leftover after parsing attributes in process `syz.4.26025'. [ 1543.740665][T27417] validate_nla: 1 callbacks suppressed [ 1543.740686][T27417] netlink: 'syz.8.26021': attribute type 3 has an invalid length. [ 1543.762053][T27417] netlink: 105116 bytes leftover after parsing attributes in process `syz.8.26021'. [ 1544.745211][T27463] netlink: 'syz.3.26042': attribute type 29 has an invalid length. [ 1544.786479][T27463] netlink: 44 bytes leftover after parsing attributes in process `syz.3.26042'. [ 1544.831380][T27463] netlink: 'syz.3.26042': attribute type 29 has an invalid length. [ 1544.865970][T27463] netlink: 44 bytes leftover after parsing attributes in process `syz.3.26042'. [ 1545.076782][T27476] netlink: 'syz.3.26047': attribute type 46 has an invalid length. [ 1545.752406][T27496] pim6reg0: tun_chr_ioctl cmd 1074025676 [ 1545.790334][T27496] pim6reg0: owner set to 1 [ 1545.869996][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.876538][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.452699][T27517] netlink: 'syz.8.26057': attribute type 21 has an invalid length. [ 1546.532350][T27517] netlink: 16166 bytes leftover after parsing attributes in process `syz.8.26057'. [ 1547.111143][T27533] tap0: tun_chr_ioctl cmd 1074812118 [ 1547.170819][T27535] netlink: 'syz.1.26065': attribute type 29 has an invalid length. [ 1547.207793][T27535] netlink: 'syz.1.26065': attribute type 29 has an invalid length. [ 1547.223124][T27538] netlink: 40 bytes leftover after parsing attributes in process `syz.4.26076'. [ 1547.250956][T27538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.26076'. [ 1547.296304][T27540] netlink: 'syz.1.26065': attribute type 29 has an invalid length. [ 1547.307541][T27535] netlink: 'syz.1.26065': attribute type 29 has an invalid length. [ 1547.468150][T27548] netlink: 'syz.5.26068': attribute type 33 has an invalid length. [ 1547.491308][T27548] netlink: 152 bytes leftover after parsing attributes in process `syz.5.26068'. [ 1547.553728][T27553] delete_channel: no stack [ 1548.997644][T27611] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1549.014769][T27611] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1549.043048][T27611] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1549.083643][T27611] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1549.220941][T27618] netlink: 35347 bytes leftover after parsing attributes in process `syz.5.26092'. [ 1549.253880][T27620] validate_nla: 1 callbacks suppressed [ 1549.253900][T27620] netlink: 'syz.3.26091': attribute type 3 has an invalid length. [ 1549.279149][T27620] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.26091'. [ 1551.102429][T27702] netlink: 'syz.5.26120': attribute type 3 has an invalid length. [ 1551.114473][T27702] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.26120'. [ 1551.687777][T27728] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.26127'. [ 1552.370341][T31496] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1552.567836][T31496] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1552.856663][T31496] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1553.026734][T31496] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1553.082719][T27748] netlink: 'syz.1.26135': attribute type 3 has an invalid length. [ 1553.100140][T27748] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.26135'. [ 1553.511063][T22729] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1553.521406][T22729] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1553.529737][T22729] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1553.537736][T22729] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1553.546934][T22729] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1553.555318][T22729] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1553.832684][T22729] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1553.851705][T22729] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1553.869362][T22729] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1553.878602][T22729] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1553.886966][T22729] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1553.895958][T22729] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1553.956181][T22729] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1553.965910][T22729] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1553.973719][T22729] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1553.984069][T22729] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1553.993443][T22729] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1554.029564][T22729] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1554.175052][T27755] chnl_net:caif_netlink_parms(): no params data found [ 1554.553470][T27755] bridge0: port 1(bridge_slave_0) entered blocking state [ 1554.561434][T27755] bridge0: port 1(bridge_slave_0) entered disabled state [ 1554.576656][T27755] device bridge_slave_0 entered promiscuous mode [ 1554.686552][T27755] bridge0: port 2(bridge_slave_1) entered blocking state [ 1554.693701][T27755] bridge0: port 2(bridge_slave_1) entered disabled state [ 1554.702831][T27755] device bridge_slave_1 entered promiscuous mode [ 1554.722772][T27765] chnl_net:caif_netlink_parms(): no params data found [ 1554.779010][T27768] chnl_net:caif_netlink_parms(): no params data found [ 1554.901175][T27755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1554.931637][T27755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1554.993748][T31496] device hsr_slave_0 left promiscuous mode [ 1555.000401][T31496] device hsr_slave_1 left promiscuous mode [ 1555.008169][T31496] device bridge_slave_1 left promiscuous mode [ 1555.015388][T31496] bridge0: port 2(bridge_slave_1) entered disabled state [ 1555.025764][T31496] device bridge_slave_0 left promiscuous mode [ 1555.032025][T31496] bridge0: port 1(bridge_slave_0) entered disabled state [ 1555.059704][T31496] device veth1_macvtap left promiscuous mode [ 1555.065976][T31496] device veth0_macvtap left promiscuous mode [ 1555.072118][T31496] device veth1_vlan left promiscuous mode [ 1555.078674][T31496] device veth0_vlan left promiscuous mode [ 1555.581861][T31496] team0 (unregistering): Port device team_slave_1 removed [ 1555.624656][T22729] Bluetooth: hci0: command 0x0409 tx timeout [ 1555.625456][T31496] team0 (unregistering): Port device team_slave_0 removed [ 1555.673063][T31496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1555.718557][T31496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1555.945466][T22727] Bluetooth: hci1: command 0x0409 tx timeout [ 1556.110442][T22727] Bluetooth: hci2: command 0x0409 tx timeout [ 1556.184063][T31496] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1556.205894][T31496] bond0 (unregistering): Released all slaves [ 1556.483606][T27755] team0: Port device team_slave_0 added [ 1556.490378][T27765] bridge0: port 1(bridge_slave_0) entered blocking state [ 1556.507541][T27765] bridge0: port 1(bridge_slave_0) entered disabled state [ 1556.523089][T27765] device bridge_slave_0 entered promiscuous mode [ 1556.556037][T27755] team0: Port device team_slave_1 added [ 1556.594945][T27765] bridge0: port 2(bridge_slave_1) entered blocking state [ 1556.602062][T27765] bridge0: port 2(bridge_slave_1) entered disabled state [ 1556.617944][T27765] device bridge_slave_1 entered promiscuous mode [ 1556.640649][T27768] bridge0: port 1(bridge_slave_0) entered blocking state [ 1556.648353][T27768] bridge0: port 1(bridge_slave_0) entered disabled state [ 1556.657357][T27768] device bridge_slave_0 entered promiscuous mode [ 1556.666282][T27768] bridge0: port 2(bridge_slave_1) entered blocking state [ 1556.673530][T27768] bridge0: port 2(bridge_slave_1) entered disabled state [ 1556.681856][T27768] device bridge_slave_1 entered promiscuous mode [ 1556.745335][T27765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1556.758264][T27755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1556.785529][T27755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1556.819784][T27755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1556.845934][T27765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1556.859159][T27755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1556.872520][T27755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1556.916059][T27755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1556.940836][T27768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1557.004436][T27768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1557.038537][T27755] device hsr_slave_0 entered promiscuous mode [ 1557.045677][T27755] device hsr_slave_1 entered promiscuous mode [ 1557.066951][T27765] team0: Port device team_slave_0 added [ 1557.108904][T27765] team0: Port device team_slave_1 added [ 1557.134442][T27768] team0: Port device team_slave_0 added [ 1557.171355][T27768] team0: Port device team_slave_1 added [ 1557.235885][T27765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1557.242891][T27765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1557.270751][T27765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1557.293016][T27768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1557.302949][T27768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1557.329852][T27768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1557.346495][T27765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1557.353560][T27765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1557.389839][T27765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1557.407616][T27768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1557.418229][T27768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1557.452826][T27768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1557.589139][T31496] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1557.709916][T31496] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1557.720379][T22729] Bluetooth: hci0: command 0x041b tx timeout [ 1557.742430][T27768] device hsr_slave_0 entered promiscuous mode [ 1557.749890][T27768] device hsr_slave_1 entered promiscuous mode [ 1557.757105][T27768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1557.764799][T27768] Cannot create hsr debugfs directory [ 1557.773976][T27765] device hsr_slave_0 entered promiscuous mode [ 1557.784042][T27765] device hsr_slave_1 entered promiscuous mode [ 1557.791217][T27765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1557.798899][T27765] Cannot create hsr debugfs directory [ 1557.827143][T31496] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1558.029386][T31496] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1558.029689][T22729] Bluetooth: hci1: command 0x041b tx timeout [ 1558.184646][T22729] Bluetooth: hci2: command 0x041b tx timeout [ 1558.540435][T31496] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1558.666039][T31496] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1558.800429][T31496] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1558.894314][T31496] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1559.128139][T31496] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1559.223601][T31496] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1559.337736][T31496] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1559.403542][T31496] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1559.784566][T22729] Bluetooth: hci0: command 0x040f tx timeout [ 1560.104784][T22729] Bluetooth: hci1: command 0x040f tx timeout [ 1560.269549][T22729] Bluetooth: hci2: command 0x040f tx timeout [ 1561.864512][T22729] Bluetooth: hci0: command 0x0419 tx timeout [ 1561.917392][T31496] device hsr_slave_0 left promiscuous mode [ 1561.923870][T31496] device hsr_slave_1 left promiscuous mode [ 1561.938233][T31496] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1561.946566][T31496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1561.955670][T31496] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1561.963126][T31496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1561.971717][T31496] device bridge_slave_1 left promiscuous mode [ 1561.978467][T31496] bridge0: port 2(bridge_slave_1) entered disabled state [ 1561.991757][T31496] device hsr_slave_0 left promiscuous mode [ 1561.998429][T31496] device hsr_slave_1 left promiscuous mode [ 1562.005480][T31496] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1562.012957][T31496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1562.021858][T31496] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1562.030158][T31496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1562.042797][T31496] device bridge_slave_1 left promiscuous mode [ 1562.052829][T31496] bridge0: port 2(bridge_slave_1) entered disabled state [ 1562.066978][T31496] device bridge_slave_0 left promiscuous mode [ 1562.073245][T31496] bridge0: port 1(bridge_slave_0) entered disabled state [ 1562.099511][T31496] device hsr_slave_0 left promiscuous mode [ 1562.117166][T31496] device hsr_slave_1 left promiscuous mode [ 1562.123810][T31496] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1562.140282][T31496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1562.149927][T31496] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1562.165817][T31496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1562.173791][T31496] device bridge_slave_1 left promiscuous mode [ 1562.184650][T22727] Bluetooth: hci1: command 0x0419 tx timeout [ 1562.187985][T31496] bridge0: port 2(bridge_slave_1) entered disabled state [ 1562.208704][T31496] device bridge_slave_0 left promiscuous mode [ 1562.220234][T31496] bridge0: port 1(bridge_slave_0) entered disabled state [ 1562.304114][T31496] device veth1_macvtap left promiscuous mode [ 1562.310305][T31496] device veth0_macvtap left promiscuous mode [ 1562.316877][T31496] device veth1_vlan left promiscuous mode [ 1562.322723][T31496] device veth0_vlan left promiscuous mode [ 1562.332922][T31496] device veth1_macvtap left promiscuous mode [ 1562.339055][T31496] device veth0_macvtap left promiscuous mode [ 1562.345432][T22729] Bluetooth: hci2: command 0x0419 tx timeout [ 1562.352872][T31496] device veth1_vlan left promiscuous mode [ 1562.359810][T31496] device veth0_vlan left promiscuous mode [ 1562.367919][T31496] device veth1_macvtap left promiscuous mode [ 1562.374079][T31496] device veth0_macvtap left promiscuous mode [ 1562.381115][T31496] device veth1_vlan left promiscuous mode [ 1562.387774][T31496] device veth0_vlan left promiscuous mode [ 1563.058342][T31496] team0 (unregistering): Port device team_slave_1 removed [ 1563.097438][T31496] team0 (unregistering): Port device team_slave_0 removed [ 1563.136480][T31496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1563.180022][T31496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1563.548889][T31496] bond0 (unregistering): Released all slaves [ 1563.973902][T31496] team0 (unregistering): Port device team_slave_1 removed [ 1564.015071][T31496] team0 (unregistering): Port device team_slave_0 removed [ 1564.055110][T31496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1564.097503][T31496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1564.506614][T31496] bond0 (unregistering): Released all slaves [ 1564.918047][T31496] team0 (unregistering): Port device team_slave_1 removed [ 1564.959777][T31496] team0 (unregistering): Port device team_slave_0 removed [ 1564.999855][T31496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1565.040642][T31496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1565.467374][T31496] bond0 (unregistering): Released all slaves [ 1565.602509][T27755] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1565.614745][T27755] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1565.663765][T27755] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1565.676063][T27755] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1565.768474][T27765] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1565.804970][T27765] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1565.816465][T27765] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1565.853036][T27765] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1565.942106][T27768] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1565.964276][T27768] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1566.009278][T27768] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1566.049004][T27755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1566.057383][T27768] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1566.091362][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1566.100112][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1566.133799][T27755] 8021q: adding VLAN 0 to HW filter on device team0 [ 1566.192018][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1566.206763][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1566.216330][T31516] bridge0: port 1(bridge_slave_0) entered blocking state [ 1566.223449][T31516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1566.231786][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1566.247935][T27765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1566.261315][T31510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1566.291759][T31510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1566.307686][T31510] bridge0: port 2(bridge_slave_1) entered blocking state [ 1566.314896][T31510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1566.360233][T31510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1566.376281][T31510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1566.387987][T31510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1566.398380][T31510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1566.435334][T31510] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1566.474961][T31510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1566.486485][T31510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1566.501861][T31510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1566.510625][T31510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1566.533682][T27755] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1566.545894][T27755] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1566.562321][T31510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1566.572514][T31510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1566.581875][T31510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1566.591916][T31510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1566.601508][T31510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1566.616533][T27765] 8021q: adding VLAN 0 to HW filter on device team0 [ 1566.662209][T23609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1566.685109][T23609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1566.694030][T23609] bridge0: port 1(bridge_slave_0) entered blocking state [ 1566.701244][T23609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1566.743120][T23609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1566.761977][T23609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1566.799523][T23609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1566.839201][T23609] bridge0: port 2(bridge_slave_1) entered blocking state [ 1566.846428][T23609] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1566.899967][T23609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1566.915122][T23609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1566.935055][T27768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1566.959604][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1566.977812][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1567.016321][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1567.030891][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1567.041979][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1567.057828][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1567.072449][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1567.088063][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1567.099897][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1567.112260][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1567.121293][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1567.131695][T27765] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1567.150986][T27768] 8021q: adding VLAN 0 to HW filter on device team0 [ 1567.169496][T23609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1567.179177][T23609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1567.200120][T23609] bridge0: port 1(bridge_slave_0) entered blocking state [ 1567.207446][T23609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1567.235548][T23609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1567.266840][T23609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1567.285173][T23609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1567.293813][T23609] bridge0: port 2(bridge_slave_1) entered blocking state [ 1567.301005][T23609] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1567.347145][T23609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1567.362501][T23609] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1567.370472][T23609] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1567.382609][T23609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1567.399361][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1567.413736][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1567.428059][T27755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1567.443398][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1567.475743][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1567.495694][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1567.505156][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1567.513963][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1567.555838][T27768] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1567.571914][T27768] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1567.582857][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1567.598665][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1567.608858][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1567.620131][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1567.657488][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1567.667252][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1567.685732][T27765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1567.694299][T27755] device veth0_vlan entered promiscuous mode [ 1567.702896][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1567.712271][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1567.735800][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1567.743352][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1567.772424][T27755] device veth1_vlan entered promiscuous mode [ 1567.835529][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1567.844326][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1567.853506][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1567.876189][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1567.902914][T27755] device veth0_macvtap entered promiscuous mode [ 1567.927978][T27755] device veth1_macvtap entered promiscuous mode [ 1567.967140][T27755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1568.004549][T27755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1568.036218][T27755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1568.043578][T31505] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1568.077637][T31505] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1568.097796][T31505] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1568.107669][T31505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1568.122147][T27755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1568.133908][T27755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1568.145679][T27755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1568.162205][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1568.173971][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1568.191979][T27755] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1568.203363][T27755] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1568.216925][T27755] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1568.229324][T27755] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1568.274056][T31510] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1568.294850][T31510] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1568.312668][T27768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1568.354601][T31510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1568.366949][T31510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1568.417147][T31505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1568.427835][T31505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1568.463148][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1568.473574][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1568.483853][T31510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1568.488576][T27765] device veth0_vlan entered promiscuous mode [ 1568.492747][T31510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1568.508288][T27768] device veth0_vlan entered promiscuous mode [ 1568.519735][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1568.527993][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1568.536463][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1568.544290][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1568.556457][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1568.569484][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1568.579465][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1568.594924][T27765] device veth1_vlan entered promiscuous mode [ 1568.609339][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1568.620570][T27768] device veth1_vlan entered promiscuous mode [ 1568.649518][T31510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1568.663963][T31510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1568.693001][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1568.711686][T27768] device veth0_macvtap entered promiscuous mode [ 1568.722443][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1568.732980][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1568.757204][T27768] device veth1_macvtap entered promiscuous mode [ 1568.805535][T27765] device veth0_macvtap entered promiscuous mode [ 1568.815944][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1568.824148][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1568.865290][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1568.894838][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1568.922239][T27768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1568.970374][T27768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1569.001896][T27768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1569.013845][T27768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1569.040068][T27768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1569.061603][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1569.087514][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1569.107191][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1569.150795][T27765] device veth1_macvtap entered promiscuous mode [ 1569.176714][T27768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1569.197562][T27768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1569.234638][T27768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1569.264484][T27768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1569.297232][T27768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1569.325503][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1569.333988][T22729] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1569.338095][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1569.360296][T22729] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1569.361664][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1569.379695][T22729] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1569.395898][T22729] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1569.396018][T27768] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1569.415661][T22729] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1569.418877][T27768] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1569.433471][T22729] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1569.487562][T27768] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1569.511665][T27768] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1569.571945][T27765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1569.614504][T27765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1569.644020][T27765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1569.660597][T27765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1569.676872][T27765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1569.694825][T27765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1569.726353][T27765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1569.744691][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1569.757733][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1569.789321][T27765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1569.811258][T27765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1569.832000][T27765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1569.852883][T27765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1569.874134][T27765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1569.904439][T27765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1569.926081][T27765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1569.960884][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1569.979393][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1570.014610][T27765] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1570.036464][T27765] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1570.048711][T27765] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1570.082443][T27765] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1570.265970][T31496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1570.299838][T31496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1570.404812][T31496] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1570.422970][T31516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1570.425766][T23612] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1570.446152][T31516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1570.456477][T23612] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1570.497827][T31510] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1570.525025][T31510] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1570.552437][T28021] chnl_net:caif_netlink_parms(): no params data found [ 1570.658235][T23612] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1570.679086][T23612] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1570.741056][T31496] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1570.896087][T28021] bridge0: port 1(bridge_slave_0) entered blocking state [ 1570.917280][T28021] bridge0: port 1(bridge_slave_0) entered disabled state [ 1570.945618][T28021] device bridge_slave_0 entered promiscuous mode [ 1570.976253][T28021] bridge0: port 2(bridge_slave_1) entered blocking state [ 1570.996742][T28070] netlink: 202920 bytes leftover after parsing attributes in process `syz.8.26138'. [ 1571.007679][T28021] bridge0: port 2(bridge_slave_1) entered disabled state [ 1571.019457][T28021] device bridge_slave_1 entered promiscuous mode [ 1571.164121][T28021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1571.225797][T28021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1571.329758][T28021] team0: Port device team_slave_0 added [ 1571.363439][T28021] team0: Port device team_slave_1 added [ 1571.464667][T22729] Bluetooth: hci4: command 0x0409 tx timeout [ 1571.496001][T28021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1571.553362][T28021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1571.627480][T28021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1571.680179][T28021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1571.694586][T28021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1571.859699][T28021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1572.034032][T28021] device hsr_slave_0 entered promiscuous mode [ 1572.069112][T28021] device hsr_slave_1 entered promiscuous mode [ 1572.095749][T28021] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1572.124580][T28021] Cannot create hsr debugfs directory [ 1573.060583][T28021] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1573.121668][T28021] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1573.158574][T28021] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1573.179616][T28021] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1573.205609][T28147] netlink: 'syz.8.26174': attribute type 10 has an invalid length. [ 1573.227505][T28147] bridge0: port 2(bridge_slave_1) entered disabled state [ 1573.235104][T28147] bridge0: port 1(bridge_slave_0) entered disabled state [ 1573.289700][T28147] bridge0: port 2(bridge_slave_1) entered blocking state [ 1573.296947][T28147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1573.304461][T28147] bridge0: port 1(bridge_slave_0) entered blocking state [ 1573.311610][T28147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1573.376911][T28147] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1573.544551][T22729] Bluetooth: hci4: command 0x041b tx timeout [ 1573.581866][T28021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1573.631811][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1573.655090][T31516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1573.690171][T28021] 8021q: adding VLAN 0 to HW filter on device team0 [ 1573.747536][T23612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1573.763211][T23612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1573.799796][T23612] bridge0: port 1(bridge_slave_0) entered blocking state [ 1573.807051][T23612] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1573.877494][T23612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1573.913798][T23612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1573.938875][T23612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1573.969874][T23612] bridge0: port 2(bridge_slave_1) entered blocking state [ 1573.977051][T23612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1574.043123][T23612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1574.065628][T23612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1574.098892][T23612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1574.116167][T23612] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1574.155759][T23612] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1574.172416][T28177] IPv6: Can't replace route, no match found [ 1574.190945][T23612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1574.211357][T23612] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1574.242057][T23612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1574.295519][T23612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1574.341179][T28021] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1574.355763][T28021] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1574.378742][T23612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1574.388487][T23612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1574.691595][T28199] ================================================================== [ 1574.699724][T28199] BUG: KASAN: use-after-free in cpu_map_enqueue+0xb6/0x370 [ 1574.707055][T28199] Read of size 8 at addr ffff88801f3e9408 by task syz.8.26200/28199 [ 1574.715082][T28199] [ 1574.717436][T28199] CPU: 0 PID: 28199 Comm: syz.8.26200 Not tainted 6.1.128-syzkaller #0 [ 1574.725706][T28199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1574.735789][T28199] Call Trace: [ 1574.739097][T28199] [ 1574.742066][T28199] dump_stack_lvl+0x1e3/0x2cb [ 1574.746788][T28199] ? nf_tcp_handle_invalid+0x642/0x642 [ 1574.752281][T28199] ? panic+0x764/0x764 [ 1574.756365][T28199] ? _printk+0xd1/0x111 [ 1574.760539][T28199] ? __virt_addr_valid+0x17f/0x530 [ 1574.765695][T28199] ? __virt_addr_valid+0x17f/0x530 [ 1574.770818][T28199] print_report+0x15f/0x4f0 [ 1574.775328][T28199] ? __virt_addr_valid+0x17f/0x530 [ 1574.780482][T28199] ? __virt_addr_valid+0x17f/0x530 [ 1574.785612][T28199] ? __virt_addr_valid+0x45b/0x530 [ 1574.790781][T28199] ? __phys_addr+0xb6/0x170 [ 1574.795295][T28199] ? cpu_map_enqueue+0xb6/0x370 [ 1574.800151][T28199] kasan_report+0x136/0x160 [ 1574.804656][T28199] ? cpu_map_enqueue+0xb6/0x370 [ 1574.809510][T28199] cpu_map_enqueue+0xb6/0x370 [ 1574.814200][T28199] xdp_do_redirect_frame+0x2f0/0x660 [ 1574.819506][T28199] bpf_test_run_xdp_live+0xbf4/0x1ea0 [ 1574.824915][T28199] ? __mutex_unlock_slowpath+0x218/0x750 [ 1574.830584][T28199] ? 0xffffffffa0003b40 [ 1574.834740][T28199] ? bpf_test_run_xdp_live+0x75c/0x1ea0 [ 1574.840313][T28199] ? xdp_convert_md_to_buff+0x330/0x330 [ 1574.845895][T28199] ? bpf_dispatcher_change_prog+0xdf5/0xf80 [ 1574.851842][T28199] ? 0xffffffffa0003b40 [ 1574.856018][T28199] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1574.862282][T28199] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1574.868452][T28199] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1574.873924][T28199] bpf_prog_test_run_xdp+0x7d1/0x1130 [ 1574.879347][T28199] ? dev_put+0x80/0x80 [ 1574.883432][T28199] ? dev_put+0x80/0x80 [ 1574.887509][T28199] bpf_prog_test_run+0x32f/0x3a0 [ 1574.892458][T28199] __sys_bpf+0x3eb/0x6c0 [ 1574.896715][T28199] ? bpf_link_show_fdinfo+0x300/0x300 [ 1574.902108][T28199] ? ct_irq_exit_irqson+0x13c/0x1b0 [ 1574.907314][T28199] ? syscall_enter_from_user_mode+0x3b/0x230 [ 1574.913302][T28199] __x64_sys_bpf+0x78/0x90 [ 1574.917732][T28199] do_syscall_64+0x3b/0xb0 [ 1574.922155][T28199] ? clear_bhb_loop+0x45/0xa0 [ 1574.926835][T28199] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1574.932764][T28199] RIP: 0033:0x7f127cf8cde9 [ 1574.937185][T28199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1574.956821][T28199] RSP: 002b:00007f127dd72038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1574.965251][T28199] RAX: ffffffffffffffda RBX: 00007f127d1a5fa0 RCX: 00007f127cf8cde9 [ 1574.973232][T28199] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 000000000000000a [ 1574.981209][T28199] RBP: 00007f127d00e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1574.989187][T28199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1574.997249][T28199] R13: 0000000000000000 R14: 00007f127d1a5fa0 R15: 00007ffc939e3cb8 [ 1575.005235][T28199] [ 1575.008255][T28199] [ 1575.010577][T28199] Allocated by task 27652: [ 1575.014988][T28199] kasan_set_track+0x4b/0x70 [ 1575.019681][T28199] __kasan_kmalloc+0x97/0xb0 [ 1575.024274][T28199] prog_array_map_alloc+0x4d/0x1f0 [ 1575.029395][T28199] map_create+0x4c0/0xd20 [ 1575.033733][T28199] __sys_bpf+0x2d3/0x6c0 [ 1575.037981][T28199] __x64_sys_bpf+0x78/0x90 [ 1575.042409][T28199] do_syscall_64+0x3b/0xb0 [ 1575.046837][T28199] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1575.052739][T28199] [ 1575.055062][T28199] Last potentially related work creation: [ 1575.060772][T28199] kasan_save_stack+0x3b/0x60 [ 1575.065459][T28199] __kasan_record_aux_stack+0xb0/0xc0 [ 1575.070839][T28199] insert_work+0x54/0x3d0 [ 1575.075176][T28199] __queue_work+0xb4b/0xf90 [ 1575.079695][T28199] queue_work_on+0x14b/0x250 [ 1575.084295][T28199] bpf_map_release+0x107/0x130 [ 1575.089159][T28199] __fput+0x3f6/0x8d0 [ 1575.093153][T28199] task_work_run+0x246/0x300 [ 1575.097773][T28199] exit_to_user_mode_loop+0xde/0x100 [ 1575.103063][T28199] exit_to_user_mode_prepare+0xb1/0x140 [ 1575.108610][T28199] syscall_exit_to_user_mode+0x60/0x270 [ 1575.114159][T28199] do_syscall_64+0x47/0xb0 [ 1575.118573][T28199] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1575.124480][T28199] [ 1575.126807][T28199] Second to last potentially related work creation: [ 1575.133469][T28199] kasan_save_stack+0x3b/0x60 [ 1575.138147][T28199] __kasan_record_aux_stack+0xb0/0xc0 [ 1575.143633][T28199] insert_work+0x54/0x3d0 [ 1575.147989][T28199] __queue_work+0xb4b/0xf90 [ 1575.152511][T28199] queue_work_on+0x14b/0x250 [ 1575.157107][T28199] bpf_map_release+0x107/0x130 [ 1575.161881][T28199] __fput+0x3f6/0x8d0 [ 1575.165870][T28199] task_work_run+0x246/0x300 [ 1575.170468][T28199] exit_to_user_mode_loop+0xde/0x100 [ 1575.175790][T28199] exit_to_user_mode_prepare+0xb1/0x140 [ 1575.181355][T28199] syscall_exit_to_user_mode+0x60/0x270 [ 1575.186929][T28199] do_syscall_64+0x47/0xb0 [ 1575.191374][T28199] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1575.197392][T28199] [ 1575.199726][T28199] The buggy address belongs to the object at ffff88801f3e9400 [ 1575.199726][T28199] which belongs to the cache kmalloc-cg-256 of size 256 [ 1575.214053][T28199] The buggy address is located 8 bytes inside of [ 1575.214053][T28199] 256-byte region [ffff88801f3e9400, ffff88801f3e9500) [ 1575.227160][T28199] [ 1575.229517][T28199] The buggy address belongs to the physical page: [ 1575.235957][T28199] page:ffffea00007cfa00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88801f3e8a00 pfn:0x1f3e8 [ 1575.247414][T28199] head:ffffea00007cfa00 order:1 compound_mapcount:0 compound_pincount:0 [ 1575.255775][T28199] memcg:ffff8880241da101 [ 1575.260049][T28199] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1575.268047][T28199] raw: 00fff00000010200 ffffea0001022b00 dead000000000004 ffff888017c42c80 [ 1575.276636][T28199] raw: ffff88801f3e8a00 000000008010000b 00000001ffffffff ffff8880241da101 [ 1575.285213][T28199] page dumped because: kasan: bad access detected [ 1575.291632][T28199] page_owner tracks the page as allocated [ 1575.297339][T28199] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 14532, tgid 14531 (syz.0.5058), ts 360305682701, free_ts 350504086738 [ 1575.320351][T28199] post_alloc_hook+0x18d/0x1b0 [ 1575.325210][T28199] get_page_from_freelist+0x3731/0x38d0 [ 1575.330761][T28199] __alloc_pages+0x28d/0x770 [ 1575.335361][T28199] alloc_slab_page+0x6a/0x150 [ 1575.340049][T28199] new_slab+0x84/0x2d0 [ 1575.344123][T28199] ___slab_alloc+0xc20/0x1270 [ 1575.348807][T28199] __kmem_cache_alloc_node+0x19f/0x260 [ 1575.354271][T28199] __kmalloc+0xa1/0x230 [ 1575.358439][T28199] __register_sysctl_table+0xdc/0x11e0 [ 1575.363898][T28199] ipv4_frags_init_net+0x211/0x300 [ 1575.369014][T28199] ops_init+0x35d/0x610 [ 1575.373178][T28199] setup_net+0x4f9/0xc70 [ 1575.377428][T28199] copy_net_ns+0x352/0x590 [ 1575.381850][T28199] create_new_namespaces+0x425/0x7a0 [ 1575.387138][T28199] copy_namespaces+0x397/0x3f0 [ 1575.391906][T28199] copy_process+0x1ab8/0x4060 [ 1575.396581][T28199] page last free stack trace: [ 1575.401248][T28199] free_unref_page_prepare+0x12a6/0x15b0 [ 1575.406884][T28199] free_unref_page+0x33/0x3e0 [ 1575.411561][T28199] tlb_finish_mmu+0x119/0x1f0 [ 1575.416241][T28199] exit_mmap+0x3b3/0x980 [ 1575.420508][T28199] __mmput+0x115/0x3c0 [ 1575.424581][T28199] exit_mm+0x226/0x300 [ 1575.428658][T28199] do_exit+0x9f1/0x26a0 [ 1575.432824][T28199] do_group_exit+0x202/0x2b0 [ 1575.437420][T28199] get_signal+0x16f7/0x17d0 [ 1575.441932][T28199] arch_do_signal_or_restart+0xb0/0x1a10 [ 1575.447568][T28199] exit_to_user_mode_loop+0x6a/0x100 [ 1575.452855][T28199] exit_to_user_mode_prepare+0xb1/0x140 [ 1575.458421][T28199] syscall_exit_to_user_mode+0x60/0x270 [ 1575.463969][T28199] do_syscall_64+0x47/0xb0 [ 1575.468381][T28199] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1575.474283][T28199] [ 1575.476630][T28199] Memory state around the buggy address: [ 1575.482431][T28199] ffff88801f3e9300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1575.490490][T28199] ffff88801f3e9380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1575.498566][T28199] >ffff88801f3e9400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1575.506714][T28199] ^ [ 1575.511036][T28199] ffff88801f3e9480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1575.519096][T28199] ffff88801f3e9500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1575.527152][T28199] ================================================================== [ 1575.535440][T28199] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1575.542659][T28199] CPU: 0 PID: 28199 Comm: syz.8.26200 Not tainted 6.1.128-syzkaller #0 [ 1575.550931][T28199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1575.561011][T28199] Call Trace: [ 1575.564340][T28199] [ 1575.567298][T28199] dump_stack_lvl+0x1e3/0x2cb [ 1575.572034][T28199] ? nf_tcp_handle_invalid+0x642/0x642 [ 1575.577532][T28199] ? panic+0x764/0x764 [ 1575.581629][T28199] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1575.587793][T28199] ? vscnprintf+0x59/0x80 [ 1575.592131][T28199] panic+0x318/0x764 [ 1575.596050][T28199] ? check_panic_on_warn+0x1d/0xa0 [ 1575.601178][T28199] ? memcpy_page_flushcache+0xfc/0xfc [ 1575.606559][T28199] ? _raw_spin_unlock_irqrestore+0xd4/0x130 [ 1575.612496][T28199] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 1575.618412][T28199] ? _raw_spin_unlock+0x40/0x40 [ 1575.623270][T28199] ? print_report+0x4a3/0x4f0 [ 1575.627962][T28199] check_panic_on_warn+0x7e/0xa0 [ 1575.632992][T28199] ? cpu_map_enqueue+0xb6/0x370 [ 1575.637859][T28199] end_report+0x66/0x110 [ 1575.642111][T28199] kasan_report+0x143/0x160 [ 1575.646623][T28199] ? cpu_map_enqueue+0xb6/0x370 [ 1575.651482][T28199] cpu_map_enqueue+0xb6/0x370 [ 1575.656189][T28199] xdp_do_redirect_frame+0x2f0/0x660 [ 1575.661488][T28199] bpf_test_run_xdp_live+0xbf4/0x1ea0 [ 1575.666898][T28199] ? __mutex_unlock_slowpath+0x218/0x750 [ 1575.672547][T28199] ? 0xffffffffa0003b40 [ 1575.676704][T28199] ? bpf_test_run_xdp_live+0x75c/0x1ea0 [ 1575.682254][T28199] ? xdp_convert_md_to_buff+0x330/0x330 [ 1575.687804][T28199] ? bpf_dispatcher_change_prog+0xdf5/0xf80 [ 1575.694306][T28199] ? 0xffffffffa0003b40 [ 1575.698481][T28199] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1575.704736][T28199] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1575.710894][T28199] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1575.716359][T28199] bpf_prog_test_run_xdp+0x7d1/0x1130 [ 1575.721746][T28199] ? dev_put+0x80/0x80 [ 1575.725824][T28199] ? dev_put+0x80/0x80 [ 1575.729898][T28199] bpf_prog_test_run+0x32f/0x3a0 [ 1575.734839][T28199] __sys_bpf+0x3eb/0x6c0 [ 1575.739092][T28199] ? bpf_link_show_fdinfo+0x300/0x300 [ 1575.744482][T28199] ? ct_irq_exit_irqson+0x13c/0x1b0 [ 1575.749701][T28199] ? syscall_enter_from_user_mode+0x3b/0x230 [ 1575.755690][T28199] __x64_sys_bpf+0x78/0x90 [ 1575.760116][T28199] do_syscall_64+0x3b/0xb0 [ 1575.764535][T28199] ? clear_bhb_loop+0x45/0xa0 [ 1575.769214][T28199] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1575.775121][T28199] RIP: 0033:0x7f127cf8cde9 [ 1575.779558][T28199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1575.799250][T28199] RSP: 002b:00007f127dd72038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1575.807670][T28199] RAX: ffffffffffffffda RBX: 00007f127d1a5fa0 RCX: 00007f127cf8cde9 [ 1575.815664][T28199] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 000000000000000a [ 1575.823639][T28199] RBP: 00007f127d00e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1575.831609][T28199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1575.839582][T28199] R13: 0000000000000000 R14: 00007f127d1a5fa0 R15: 00007ffc939e3cb8 [ 1575.847567][T28199] [ 1575.850913][T28199] Kernel Offset: disabled [ 1575.855261][T28199] Rebooting in 86400 seconds..