last executing test programs: 10.585334589s ago: executing program 4 (id=2082): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="d8000000180081064e81f782db4cb904021d", 0x12}], 0x1}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000d00000095"], &(0x7f0000000700)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r0, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a85009a10d943a, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffff81, 0x14, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x64) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780)={r1}, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@ifindex=r2, r3, 0x2f, 0x0, 0xffffffffffffffff, @prog_id}, 0x20) 10.368843994s ago: executing program 4 (id=2089): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d040000000400000004000000000000000000001004000000000000000000000a030000000000000061"], 0x0, 0x5a}, 0x20) 10.270760637s ago: executing program 4 (id=2092): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec472db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc626b424da1e8c825357861aa50054686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf4d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b0100000000000000b0255f347160ac83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff7020000eea2ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072913152c845cf572cf39310d522a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8abafe4f0f6ea508000000a0c548552b571bed5647323c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e5251aae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b6588f6008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda34536020000fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bf8d9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5631820420b75b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d9c8c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282b6caa2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177c16810fae053349609000000000000009a7438978c5465113f668eb4484350048289d07dbef325d3221a7cb35f8100257941a9781e3214c2a3dcf89d99844b762a9cf17548c54fccad2c7ae8072b82e0880815daf966bd5343c1635e123f868a7167cfcff33384253af570f4ef9c0254afdd89c73943562b530dd88da8a94013bbaf204bebc38055adc39f07f7c22711f4d1f6dcc928d1578a093c072e0b92babc76f47ee367e745a024a2278319d9a4d1378482b70304669c447c71ca4d54c82395a3958d576c42c08a4d5adfb58306164cc7d870b881f8084a3d185a63c6b05292186095c1f407ce74297d16470988f1647f7b6f6cdc6ab8be3cacc325df963c2cb80cfe07ded6d55f556be0a3dfa85f0a0ace879b0a0a95cd07b66fbbc73d0945beebe87a21dd46fd5804cd63c01199c78b1d774b17686fe3aeadebc4f3d2e6af1110466fecf41384f1b5c96531700db5aefa1a5c17a9ebcaf334110ed582999208cc7ef977ceb2f8a5aa7d00000000000000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x0, 0x0, 0x0, 0x1}, 0x48) socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x1d, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = gettid() bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000001700)=ANY=[@ANYBLOB="b4000000006800000f140000000000006300000000000000950005007517f5f91502d0ca2a8b123b3e00000000d0098b9d62e36b3c5f8105dafed058de7379668ba08b3c617c3de1abcfa47da8819dd175d1775f3bc0bc908f2eb3d988a61fe311a9edc8bf7cfa7c8eb222aa6c12d9df778c0cb94363695bdf1151a3c6dbbaa932e22bae9b2098b1d7465880e5f9fa5c05c91bf9bd1c66dca984854105f6a9ddad77550ee1180324d15a"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r4, 0xffffffffffffffff, 0x0, 0x1, &(0x7f00000001c0)='\x00'}, 0x30) syz_open_procfs$namespace(r4, &(0x7f0000001740)='ns/uts\x00') setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x8, 0x4}, 0x80, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f0000050a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 9.808814184s ago: executing program 4 (id=2099): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="d8000000180081064e81f782db4cb904021d", 0x12}], 0x1}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000d00000095"], &(0x7f0000000700)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r0, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a85009a10d943a, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffff81, 0x14, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x64) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780)={r1}, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@ifindex=r2, r3, 0x2f, 0x0, 0xffffffffffffffff, @prog_id}, 0x20) 9.533920436s ago: executing program 4 (id=2101): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x63}, @exit], &(0x7f0000000200)='GPL\x00'}, 0x90) 8.807604575s ago: executing program 4 (id=2106): perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x6, 0x4, 0x9}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000000), &(0x7f0000000240)='%-010d \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073010802000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) socket$kcm(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0x400000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"/2379], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f00000000c0), 0x2, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000180), 0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000400)='FROZEN\x00', 0x7) 1.70962252s ago: executing program 1 (id=2201): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='c *:23'], 0xa) 1.56689905s ago: executing program 1 (id=2205): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000510000000200000000000000954f"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) socket$kcm(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5c00000014006b04000000d86e6c1d000a847ea6ea6567e75110623400cdd46b44dacff32c6e020075e300250002000f000000172f71d34460bc24eab5560000000ebab8bebf9367140051f60a64c9f4d4778037e786a6d0bdd70000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) close(0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0}, 0x90) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)="1800000015006b05c84e21000af32c6e0a0975f802000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.315356497s ago: executing program 1 (id=2208): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x7, 0x2, 0x4}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r2, 0x0, 0x0}, 0x10) 1.185992408s ago: executing program 1 (id=2212): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xf, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xba}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.075778992s ago: executing program 3 (id=2215): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='c *:23'], 0xa) 1.057261021s ago: executing program 1 (id=2216): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x5452, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x5, 0x0, 0x5, 0x0}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 937.875109ms ago: executing program 3 (id=2218): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080005300000000faff0000940000000fad41"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'virt_wifi0\x00', @random="0100"}) 853.004299ms ago: executing program 0 (id=2219): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{r1}, &(0x7f0000000400), &(0x7f0000000440)='%pK \x00'}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='N-N:N/8', @ANYBLOB='N'], 0x6a) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000780)=@tipc=@name={0x1e, 0x2, 0xaddadaad58640f99, {{0x1, 0x4}, 0x1}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000280)="e379798abbcc93e5e5c4f2ad2395f5a4dc2db61b879eeda0082aebe686beba4ef0a297cddb83a72f321858a870279e0ddbb746efc8c4c76733e484", 0x3b}, {&(0x7f0000000800)="e0d8febb58e646d1a0808c6761c483e3e5cff157f97d54ae4087f8c0db9b0dfeb0b8dfecdefa040cd062a9c6745f16d9f3c99aeefc32d140828d1948bc27f7d3cdab0e8312b3d92ce6970bc2d46d5690f827ebbfa76bc99440b9dfb6773a75e191ef3acbcd175cc870aafa604a7731066a0c788be7462601815fe8ef0f2b437c2c0ebda45b2d3d4d123881477cc603009f450120884a5e613a978c67559875cfb84d8c4362e680e4398910dcf376eb423f59234d8aed85cd004b0dac33a1c5539600", 0xc2}, {&(0x7f0000000900)="9732e39f38188e6e58b0fe569e50cf8926eff9d0336134ade3b699b9d659160a4ab867ed3debd76496dfb689b448f9f4a53a2d5aa9b3e29ea269b7d2288398aab614bf737d23401e8552b353bdc32adadfbe39f49825cafe2f6fc5756d8d59f684b23508f8d0fd7f5b5753ebf1ebb73058ded4b7d9d4d770692497d48627341198b96bf1882e80a4472f3f28358b1dee0389537137567f34a36b2c2708936491125dff0b679b6c", 0xa7}, {&(0x7f0000000a40)="973a213efdebfb60cf1a810cbde5108dbbe671fb5a4a836fc5b68eeb3ad4f3002f8615316169ad3da59db21fdce26700fb34a27834880d206cdecce4bef8375e78f2b24094bd5dc10c88c4c48a8375f64d858a7b93afa6742b170ddfb8d87ba932e068a5d91269fe364cbd1f7b5dbf1e351902ca932e38a463b1e855", 0x7c}, {&(0x7f0000000ac0)="3795c0900a4f115ae987d9fc84115f3dfcc7496148c6d7b79183b5840b35fc8b8bed4791d38d2f8e4a2f49b726044a44617752b8cfb60d75557c36126b06595aabfc2c48a8e6274903e47b772db273b0fb5b188ac40c0f24c47f9e9b3ea44da8a00c54070c105312523859cf0031ae9104ab1870ede05a83d1c5e596072d6346c83406431d70ff3bfa10746ccfdfbadde092712eebd8ebe82e31109d0e2505a237848fb31c09de5c3748f19d25f7fca86157c07e3c1d2111190639de6bff9359a275ddc592b2ff55247c354e", 0xcc}, {&(0x7f0000000300)="43ae8f7e5cbfb81fa5a4e80d0923ad7992a139c9b29938370bd4b2792a46", 0x1e}, {&(0x7f0000000bc0)="42ac337fada7f99ab35c988755ace2b3579304d15056d7911f2548ea716610144222d800ea2d9c9b476e54da4791bd92dfc21bdf62ab84a95344dc80ff7b80d5a92c10f1290670cfc762bdb70fd702a0e3b247dc", 0x54}, {&(0x7f0000000c40)="dea8b6b1e3f6219f123105133793604d1487eebbe00e0c68fd6444550d30ff396ace78623c3ea85c1fd123a4febe21cfc7907579785553e4024ec8d6f24fab194f1bf690e3c576f2d9b4568efdc8cfa60733ca0df4c72633a5cfcb4aa186caada3c20208810633bdd9285eb9a04bd675cfe565c996e5553725ddec74ae82c67193486f866e81d72bba6235da6ed8efb20bbdc0e96c42e05f9adae9b1bc5aaab47f74bf691ac609bd064e87aac40de4", 0xaf}, {&(0x7f0000000d00)="8b4065641a540084c9c264e117543640510eb7633713e3af8b367d06d963f7fefdf22ca86a9d6e8c34d51894a88b5ea8d0321964cb07b4df654c96721251f9d46a52bc39d7f729088994b6ca3c6f6f061320dd326d9620d5fcb4116f0ef754415a9e061717edd6a8f2961d86a4ba369c61ea40f16d4a65c4aea69ed307b6caee84fc6d723b33e70d19b4778ceeaf19f6d92c9f7c9f97467aa081a5a95c216ecb5209fbe91fd19dd5e19e36e3ef19a9ecaf423aa63bd72e01e8560fad96ef7222609e472654db5de57d66c5b19ee9c708", 0xd0}, {&(0x7f0000000e00)="c793e63cd0f65c618edd4942592e058d9be51ef3ee6978f8dfd72aac1b312cb84cfcbe402d4c179d954592e2b1855c7840cbacf58bdd3ac7ceeb41f3efc228655c61c3b5584447fe8202286e3d7a2f7ab6f691b5588c50c830052f8774334c690cc7ad4bfe0b9194d1b44d3046b6d956c6de5da8eda817e6cfa91d26ab4e95981d392c39d63b09425dc3d723cb9e9b76891521edb4dace0567469f16798a44106c272b30f981f2804b234002a5f13b32d2afff2927df8d084957b0090eca05fce8f210dd131e0ade7efd", 0xca}], 0xa, &(0x7f0000000fc0)=[{0x90, 0x0, 0x7, "6064583aca247d36ff1d893202a2e91832973004a098a79050470f383b7257f5860ee600beea859ddcef8274ad818a7c24e68066793d81b6891dac963404a7e9ab0da82c6538e911cb038dbed3497c6641c785df5e762825f4df7fa18d0b78ee9e6743e854e5b90763abfda5d454447e859e43bb2659b8590ebb9386"}, {0xc8, 0x104, 0x58c, "51e2b0f4eb33fb29b8e210ec485d9f8e496b628834afc7eb3f8533c2efb0d0a06084e5ab2f976d24cb8c4feeb1ecb3f9b3713ab10298a0ea5ab2f91775d956ffad9df8d078eb57d4decb3e9d136bb6ed7a0a96b864ce9a8629d782e9d2d70aa0fdda63de8e7475ff1a9b51857460863ed4e01c1966a8d4d41aed6cc48b9d92c3a90d9f1578add2ec6e5bad7c24c3834d160b5fdbf439079fd75267a10183e881bd9174fcea19f5c88dc5b1ee42e7f20f17"}, {0x68, 0x109, 0x10000, "6a203229b5f310d5854d92082f17f8b742e5fbebd42b94b4e8b34930e12fcb0db962cc2fb6ada37562889c3457b60bb583002db7875b8b52ba0a2f24880bc3658e8220a1a1d05797fe2e82a70e35ef9fe35084"}, {0x10, 0x110, 0xfc}, {0x50, 0x10a, 0x1, "53515dc9b487da0e53b2d15fd4c3b4275594c3f5636b3a7607c99fac2ed17e5a825087a65b45a938c1fdd309f9a4780019f2546feb3197f111386226131bd9"}, {0x10, 0x10d}], 0x230}, 0x20004015) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xb4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x90) r4 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="02", 0x33fe0}], 0x1}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001580)={r5, 0xe0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000012c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000001300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001340)=[0x0], 0x0, 0x6d, &(0x7f0000001380)=[{}, {}], 0x10, 0x10, &(0x7f00000013c0), &(0x7f0000001400), 0x8, 0x3b, 0x8, 0x8, &(0x7f0000001440)}}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6f94f90224fc600e0005000a000200053582c137153e37080001800400100004e0", 0x33fe0}], 0x1}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x11, 0xd, &(0x7f00000015c0)=ANY=[@ANYBLOB="6200f6796f03ac15b2b21c8bf55a45e491098612b926c1b9d19a733f471a920571ab8592bd564dfa0cfaa027f76de229460127e49dddb394949b4a1052773cd971c243214087b7bb1e41672675a52e6e739499b5a4a74fa4507ea89aa43f550d98bf1dfff93c580ee4f9cc07846df19ce2d6844b5b1fc63b5064dc3aef33755d34245888836177141aaefc1317d7f2874be755b2654e4155c048ac594c13b26b42cd2bb0bead9a283de9f808ce0dd5d490ab4ebfb71098ad19d00c19915f1e0b5625dcd1a07c665b699d3388c03714858a8e", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', r7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x2f08, 0x10, 0x10, &(0x7f00000006c0)="0000000000000005", &(0x7f0000000700)=""/8, 0x447, 0x6000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) 723.165414ms ago: executing program 3 (id=2221): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000001c0)=@base={0xa, 0x16, 0x7bdf, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000f40000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000c60a000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50200000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xb, &(0x7f0000000340)=""/222}, 0x90) 509.126775ms ago: executing program 2 (id=2222): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='mm_lru_insertion\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b80)={{r0}, &(0x7f0000000b00), &(0x7f0000000b40)='%pS \x00'}, 0x20) write$cgroup_int(r2, &(0x7f00000000c0), 0x12) ioctl$SIOCSIFHWADDR(r2, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x2}}) 500.821346ms ago: executing program 3 (id=2223): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001d80)={@cgroup, 0xffffffffffffffff, 0x10, 0x4030, 0xffffffffffffffff, @prog_id}, 0x20) 478.137974ms ago: executing program 2 (id=2224): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000c3ea57000000000095"], &(0x7f0000000d40)='syzkaller\x00', 0x9}, 0x90) 452.2803ms ago: executing program 0 (id=2225): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x90}, [@ldst={0x2, 0x0, 0xb}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x4e, 0x0, 0xffffffffffffffff, 0x3000000}, 0x48) 438.64926ms ago: executing program 1 (id=2226): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000240)="a2", 0x1}], 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) setsockopt$sock_attach_bpf(r0, 0x84, 0xb, &(0x7f0000000000), 0xc) 351.145615ms ago: executing program 3 (id=2227): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001500)=[{}], 0x1}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801}, 0x0, 0x0, r1, 0x0) socketpair(0x1e, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x20, 0x5, 0x0, 0x0, 0x2ada}, 0x48) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r6) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f91424fc60040f030047000000053582c137153e370248018060f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0xffff7fff}, 0x48) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={0xffffffffffffffff}, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) close(r5) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000006c0)={0x0, r1, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) 292.838414ms ago: executing program 0 (id=2228): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='c *:23'], 0xa) 292.691574ms ago: executing program 2 (id=2229): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000300e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000004800913a745c7388641f9c0e0a"], 0xfe33) 216.65899ms ago: executing program 2 (id=2230): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000488c) recvmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x41) 191.489899ms ago: executing program 0 (id=2231): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080005300000000faff0000940000000fad41"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'virt_wifi0\x00', @random="0100"}) 128.899106ms ago: executing program 2 (id=2232): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f93b24fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 109.299286ms ago: executing program 0 (id=2233): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000060000000300000000000008000000000000005f21"], 0x0, 0x2a}, 0x20) 71.579741ms ago: executing program 3 (id=2234): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x3, 0x0, &(0x7f0000000000)="b9ff06", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000b00)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20000000}, {0x85, 0x0, 0x0, 0x72}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 961.233µs ago: executing program 0 (id=2235): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='mm_lru_insertion\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b80)={{r0}, &(0x7f0000000b00), &(0x7f0000000b40)='%pS \x00'}, 0x20) write$cgroup_int(r2, &(0x7f00000000c0), 0x12) ioctl$SIOCSIFHWADDR(r2, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x2}}) 0s ago: executing program 2 (id=2236): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{r1}, &(0x7f0000000400), &(0x7f0000000440)='%pK \x00'}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='N-N:N/8', @ANYBLOB='N'], 0x6a) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000780)=@tipc=@name={0x1e, 0x2, 0xaddadaad58640f99, {{0x1, 0x4}, 0x1}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000280)="e379798abbcc93e5e5c4f2ad2395f5a4dc2db61b879eeda0082aebe686beba4ef0a297cddb83a72f321858a870279e0ddbb746efc8c4c76733e484", 0x3b}, {&(0x7f0000000800)="e0d8febb58e646d1a0808c6761c483e3e5cff157f97d54ae4087f8c0db9b0dfeb0b8dfecdefa040cd062a9c6745f16d9f3c99aeefc32d140828d1948bc27f7d3cdab0e8312b3d92ce6970bc2d46d5690f827ebbfa76bc99440b9dfb6773a75e191ef3acbcd175cc870aafa604a7731066a0c788be7462601815fe8ef0f2b437c2c0ebda45b2d3d4d123881477cc603009f450120884a5e613a978c67559875cfb84d8c4362e680e4398910dcf376eb423f59234d8aed85cd004b0dac33a1c5539600", 0xc2}, {&(0x7f0000000900)="9732e39f38188e6e58b0fe569e50cf8926eff9d0336134ade3b699b9d659160a4ab867ed3debd76496dfb689b448f9f4a53a2d5aa9b3e29ea269b7d2288398aab614bf737d23401e8552b353bdc32adadfbe39f49825cafe2f6fc5756d8d59f684b23508f8d0fd7f5b5753ebf1ebb73058ded4b7d9d4d770692497d48627341198b96bf1882e80a4472f3f28358b1dee0389537137567f34a36b2c2708936491125dff0b679b6c", 0xa7}, {&(0x7f0000000a40)="973a213efdebfb60cf1a810cbde5108dbbe671fb5a4a836fc5b68eeb3ad4f3002f8615316169ad3da59db21fdce26700fb34a27834880d206cdecce4bef8375e78f2b24094bd5dc10c88c4c48a8375f64d858a7b93afa6742b170ddfb8d87ba932e068a5d91269fe364cbd1f7b5dbf1e351902ca932e38a463b1e855", 0x7c}, {&(0x7f0000000ac0)="3795c0900a4f115ae987d9fc84115f3dfcc7496148c6d7b79183b5840b35fc8b8bed4791d38d2f8e4a2f49b726044a44617752b8cfb60d75557c36126b06595aabfc2c48a8e6274903e47b772db273b0fb5b188ac40c0f24c47f9e9b3ea44da8a00c54070c105312523859cf0031ae9104ab1870ede05a83d1c5e596072d6346c83406431d70ff3bfa10746ccfdfbadde092712eebd8ebe82e31109d0e2505a237848fb31c09de5c3748f19d25f7fca86157c07e3c1d2111190639de6bff9359a275ddc592b2ff55247c354e", 0xcc}, {&(0x7f0000000300)="43ae8f7e5cbfb81fa5a4e80d0923ad7992a139c9b29938370bd4b2792a46", 0x1e}, {&(0x7f0000000bc0)="42ac337fada7f99ab35c988755ace2b3579304d15056d7911f2548ea716610144222d800ea2d9c9b476e54da4791bd92dfc21bdf62ab84a95344dc80ff7b80d5a92c10f1290670cfc762bdb70fd702a0e3b247dc", 0x54}, {&(0x7f0000000c40)="dea8b6b1e3f6219f123105133793604d1487eebbe00e0c68fd6444550d30ff396ace78623c3ea85c1fd123a4febe21cfc7907579785553e4024ec8d6f24fab194f1bf690e3c576f2d9b4568efdc8cfa60733ca0df4c72633a5cfcb4aa186caada3c20208810633bdd9285eb9a04bd675cfe565c996e5553725ddec74ae82c67193486f866e81d72bba6235da6ed8efb20bbdc0e96c42e05f9adae9b1bc5aaab47f74bf691ac609bd064e87aac40de4", 0xaf}, {&(0x7f0000000d00)="8b4065641a540084c9c264e117543640510eb7633713e3af8b367d06d963f7fefdf22ca86a9d6e8c34d51894a88b5ea8d0321964cb07b4df654c96721251f9d46a52bc39d7f729088994b6ca3c6f6f061320dd326d9620d5fcb4116f0ef754415a9e061717edd6a8f2961d86a4ba369c61ea40f16d4a65c4aea69ed307b6caee84fc6d723b33e70d19b4778ceeaf19f6d92c9f7c9f97467aa081a5a95c216ecb5209fbe91fd19dd5e19e36e3ef19a9ecaf423aa63bd72e01e8560fad96ef7222609e472654db5de57d66c5b19ee9c708", 0xd0}, {&(0x7f0000000e00)="c793e63cd0f65c618edd4942592e058d9be51ef3ee6978f8dfd72aac1b312cb84cfcbe402d4c179d954592e2b1855c7840cbacf58bdd3ac7ceeb41f3efc228655c61c3b5584447fe8202286e3d7a2f7ab6f691b5588c50c830052f8774334c690cc7ad4bfe0b9194d1b44d3046b6d956c6de5da8eda817e6cfa91d26ab4e95981d392c39d63b09425dc3d723cb9e9b76891521edb4dace0567469f16798a44106c272b30f981f2804b234002a5f13b32d2afff2927df8d084957b0090eca05fce8f210dd131e0ade7efd", 0xca}], 0xa, &(0x7f0000000fc0)=[{0x90, 0x0, 0x7, "6064583aca247d36ff1d893202a2e91832973004a098a79050470f383b7257f5860ee600beea859ddcef8274ad818a7c24e68066793d81b6891dac963404a7e9ab0da82c6538e911cb038dbed3497c6641c785df5e762825f4df7fa18d0b78ee9e6743e854e5b90763abfda5d454447e859e43bb2659b8590ebb9386"}, {0xc8, 0x104, 0x58c, "51e2b0f4eb33fb29b8e210ec485d9f8e496b628834afc7eb3f8533c2efb0d0a06084e5ab2f976d24cb8c4feeb1ecb3f9b3713ab10298a0ea5ab2f91775d956ffad9df8d078eb57d4decb3e9d136bb6ed7a0a96b864ce9a8629d782e9d2d70aa0fdda63de8e7475ff1a9b51857460863ed4e01c1966a8d4d41aed6cc48b9d92c3a90d9f1578add2ec6e5bad7c24c3834d160b5fdbf439079fd75267a10183e881bd9174fcea19f5c88dc5b1ee42e7f20f17"}, {0x68, 0x109, 0x10000, "6a203229b5f310d5854d92082f17f8b742e5fbebd42b94b4e8b34930e12fcb0db962cc2fb6ada37562889c3457b60bb583002db7875b8b52ba0a2f24880bc3658e8220a1a1d05797fe2e82a70e35ef9fe35084"}, {0x10, 0x110, 0xfc}, {0x50, 0x10a, 0x1, "53515dc9b487da0e53b2d15fd4c3b4275594c3f5636b3a7607c99fac2ed17e5a825087a65b45a938c1fdd309f9a4780019f2546feb3197f111386226131bd9"}, {0x10, 0x10d}], 0x230}, 0x20004015) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xb4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x90) r4 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="02", 0x33fe0}], 0x1}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001580)={r5, 0xe0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000012c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000001300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001340)=[0x0], 0x0, 0x6d, &(0x7f0000001380)=[{}, {}], 0x10, 0x10, &(0x7f00000013c0), &(0x7f0000001400), 0x8, 0x3b, 0x8, 0x8, &(0x7f0000001440)}}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6f94f90224fc600e0005000a000200053582c137153e37080001800400100004e0", 0x33fe0}], 0x1}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x11, 0xd, &(0x7f00000015c0)=ANY=[@ANYBLOB="6200f6796f03ac15b2b21c8bf55a45e491098612b926c1b9d19a733f471a920571ab8592bd564dfa0cfaa027f76de229460127e49dddb394949b4a1052773cd971c243214087b7bb1e41672675a52e6e739499b5a4a74fa4507ea89aa43f550d98bf1dfff93c580ee4f9cc07846df19ce2d6844b5b1fc63b5064dc3aef33755d34245888836177141aaefc1317d7f2874be755b2654e4155c048ac594c13b26b42cd2bb0bead9a283de9f808ce0dd5d490ab4ebfb71098ad19d00c19915f1e0b5625dcd1a07c665b699d3388c03714858a8e", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', r7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x2f08, 0x10, 0x10, &(0x7f00000006c0)="0000000000000005", &(0x7f0000000700)=""/8, 0x447, 0x6000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) kernel console output (not intermixed with test programs): 40 bytes leftover after parsing attributes in process `syz.4.400'. [ 94.460169][ T6166] bridge0: port 3(ipvlan1) entered blocking state [ 94.480812][ T6166] bridge0: port 3(ipvlan1) entered disabled state [ 94.494327][ T6166] ipvlan1: entered allmulticast mode [ 94.504323][ T6166] veth0_vlan: entered allmulticast mode [ 94.518357][ T6166] ipvlan1: left allmulticast mode [ 94.524030][ T6166] veth0_vlan: left allmulticast mode [ 94.529594][ T6166] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 94.852308][ T5107] Bluetooth: hci5: command tx timeout [ 95.269546][ T6207] validate_nla: 6 callbacks suppressed [ 95.269565][ T6207] netlink: 'syz.2.416': attribute type 10 has an invalid length. [ 95.310518][ T6207] netlink: 40 bytes leftover after parsing attributes in process `syz.2.416'. [ 95.330066][ T6207] ipvlan1: entered promiscuous mode [ 95.335667][ T6207] bridge0: port 3(ipvlan1) entered blocking state [ 95.353706][ T6207] bridge0: port 3(ipvlan1) entered disabled state [ 95.374262][ T6207] ipvlan1: entered allmulticast mode [ 95.392404][ T6207] veth0_vlan: entered allmulticast mode [ 95.414249][ T6207] ipvlan1: left allmulticast mode [ 95.449935][ T6207] veth0_vlan: left allmulticast mode [ 95.455456][ T6207] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 95.975981][ T6240] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.428'. [ 96.587626][ T6261] syz.3.437 (6261) used greatest stack depth: 18528 bytes left [ 96.752262][ T5926] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.794193][ T5926] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.859586][ T5926] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.921837][ T5926] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.376160][ T5926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.503121][ T5926] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.573705][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.581783][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.661528][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.668759][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.131657][ T6308] syzkaller0: entered promiscuous mode [ 98.160618][ T6308] syzkaller0: entered allmulticast mode [ 99.892040][ T6360] netlink: 64951 bytes leftover after parsing attributes in process `syz.4.467'. [ 100.226782][ T6370] netlink: 188 bytes leftover after parsing attributes in process `syz.2.469'. [ 100.391490][ T5926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.477730][ T6379] netlink: 'syz.3.472': attribute type 21 has an invalid length. [ 100.641265][ T5926] veth0_vlan: entered promiscuous mode [ 100.714764][ T5926] veth1_vlan: entered promiscuous mode [ 100.842377][ T5926] veth0_macvtap: entered promiscuous mode [ 100.877130][ T5926] veth1_macvtap: entered promiscuous mode [ 100.938868][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.989016][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.044070][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.069917][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.100224][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.134263][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.170964][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.189918][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.231814][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.319250][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.350595][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.413556][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.451569][ T6420] syz.3.483[6420] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.451825][ T6420] syz.3.483[6420] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.473365][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.555859][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.575418][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.598504][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.619455][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.642785][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.663177][ T6433] netlink: 'syz.3.486': attribute type 21 has an invalid length. [ 101.712239][ T5926] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.726575][ T5926] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.743624][ T5926] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.788083][ T5926] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.221799][ T2835] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.250715][ T2835] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.335030][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.377683][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.677883][ T6463] netlink: 'syz.0.307': attribute type 1 has an invalid length. [ 102.972027][ T6472] netlink: 'syz.0.496': attribute type 10 has an invalid length. [ 103.031911][ T6480] syz.2.495[6480] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 103.032137][ T6480] syz.2.495[6480] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 103.267392][ T6472] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 103.756371][ T6509] netlink: 'syz.0.506': attribute type 1 has an invalid length. [ 103.891313][ T6514] netlink: 'syz.2.508': attribute type 11 has an invalid length. [ 103.939292][ T6514] netlink: 132 bytes leftover after parsing attributes in process `syz.2.508'. [ 104.045383][ T6523] syz.0.510[6523] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.045649][ T6523] syz.0.510[6523] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.785447][ T6551] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 104.873429][ T6551] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 104.896770][ T6558] syz.3.524[6558] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.897003][ T6558] syz.3.524[6558] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.126144][ T6564] netlink: 'syz.2.525': attribute type 5 has an invalid length. [ 105.527918][ T6581] netlink: 168 bytes leftover after parsing attributes in process `syz.2.530'. [ 105.580034][ T6581] netlink: 'syz.2.530': attribute type 29 has an invalid length. [ 105.592818][ T6581] netlink: 'syz.2.530': attribute type 29 has an invalid length. [ 105.938878][ T6600] netlink: 'syz.2.535': attribute type 10 has an invalid length. [ 106.202356][ T6600] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 106.615278][ T6639] netlink: 'syz.1.548': attribute type 5 has an invalid length. [ 106.650926][ T6634] netlink: 168 bytes leftover after parsing attributes in process `syz.2.546'. [ 106.685490][ T6634] netlink: 'syz.2.546': attribute type 29 has an invalid length. [ 106.707493][ T6634] netlink: 'syz.2.546': attribute type 29 has an invalid length. [ 106.811871][ T6651] netlink: 184472 bytes leftover after parsing attributes in process `syz.4.553'. [ 107.202328][ T6660] netlink: 'syz.1.557': attribute type 10 has an invalid length. [ 107.251278][ T6660] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 107.268744][ T6660] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 107.323359][ T6660] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 107.348440][ T6665] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 107.369168][ T6665] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 107.675764][ T6676] netlink: 'syz.3.562': attribute type 11 has an invalid length. [ 107.707063][ T6676] netlink: 132 bytes leftover after parsing attributes in process `syz.3.562'. [ 107.924508][ T6687] netlink: 184472 bytes leftover after parsing attributes in process `syz.2.567'. [ 108.770844][ T6719] netlink: 'syz.3.580': attribute type 2 has an invalid length. [ 108.814216][ T6719] netlink: 'syz.3.580': attribute type 9 has an invalid length. [ 108.858281][ T6719] netlink: 132 bytes leftover after parsing attributes in process `syz.3.580'. [ 108.947745][ T6721] netlink: 184472 bytes leftover after parsing attributes in process `syz.1.581'. [ 110.037382][ T6744] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.592'. [ 110.461628][ T6740] syz.1.590 (6740) used greatest stack depth: 18208 bytes left [ 110.575787][ T6752] netlink: 40 bytes leftover after parsing attributes in process `syz.0.595'. [ 110.668003][ T6754] netlink: 'syz.1.596': attribute type 21 has an invalid length. [ 110.695668][ T6754] netlink: 'syz.1.596': attribute type 6 has an invalid length. [ 111.119661][ T6762] netlink: 'syz.0.598': attribute type 10 has an invalid length. [ 111.158802][ T6762] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.182613][ T6762] bond0: (slave team0): Enslaving as an active interface with an up link [ 111.222540][ T6768] netlink: 'syz.0.598': attribute type 10 has an invalid length. [ 111.233757][ T6768] bond0: (slave team0): Releasing backup interface [ 111.281891][ T6768] bridge0: port 3(team0) entered blocking state [ 111.308901][ T6768] bridge0: port 3(team0) entered disabled state [ 111.320561][ T6768] team0: entered allmulticast mode [ 111.325894][ T6768] team_slave_0: entered allmulticast mode [ 111.332403][ T6768] team_slave_1: entered allmulticast mode [ 111.340824][ T6768] team0: entered promiscuous mode [ 111.346317][ T6768] team_slave_0: entered promiscuous mode [ 111.353673][ T6768] team_slave_1: entered promiscuous mode [ 111.371217][ T6770] netlink: 76 bytes leftover after parsing attributes in process `syz.0.598'. [ 111.558088][ T6785] netlink: 40 bytes leftover after parsing attributes in process `syz.1.608'. [ 111.969346][ T6783] netlink: 'syz.3.607': attribute type 2 has an invalid length. [ 111.981831][ T6783] netlink: 'syz.3.607': attribute type 9 has an invalid length. [ 112.000608][ T6783] netlink: 132 bytes leftover after parsing attributes in process `syz.3.607'. [ 112.017255][ T6791] netlink: 'syz.1.610': attribute type 21 has an invalid length. [ 112.043470][ T6791] netlink: 'syz.1.610': attribute type 6 has an invalid length. [ 112.562520][ T6799] netlink: 'syz.1.614': attribute type 10 has an invalid length. [ 112.650912][ T6799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.671069][ T6799] team0: Port device batadv0 added [ 112.886047][ T6812] netlink: 'syz.4.618': attribute type 7 has an invalid length. [ 113.107837][ T6814] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.155030][ T6814] bond0: (slave team0): Enslaving as an active interface with an up link [ 113.258736][ T6820] bond0: (slave team0): Releasing backup interface [ 113.369733][ T6820] bridge0: port 3(team0) entered blocking state [ 113.385236][ T6820] bridge0: port 3(team0) entered disabled state [ 113.395199][ T6820] team0: entered allmulticast mode [ 113.435491][ T6820] team_slave_0: entered allmulticast mode [ 113.461606][ T6820] team_slave_1: entered allmulticast mode [ 113.511035][ T6820] team0: entered promiscuous mode [ 113.541815][ T6820] team_slave_0: entered promiscuous mode [ 113.579432][ T6820] team_slave_1: entered promiscuous mode [ 113.621513][ T6814] netlink: 76 bytes leftover after parsing attributes in process `syz.3.619'. [ 114.004491][ T6852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.031887][ T6852] batadv0: entered promiscuous mode [ 114.037745][ T6852] batadv0: entered allmulticast mode [ 114.046105][ T6852] team0: Port device batadv0 added [ 114.058746][ T6851] team0: left allmulticast mode [ 114.064631][ T6851] team_slave_0: left allmulticast mode [ 114.074229][ T6851] team_slave_1: left allmulticast mode [ 114.091177][ T6851] team0: left promiscuous mode [ 114.096924][ T6851] team_slave_0: left promiscuous mode [ 114.103617][ T6851] team_slave_1: left promiscuous mode [ 114.110918][ T6851] bridge0: port 3(team0) entered disabled state [ 114.164345][ T2835] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 114.174538][ T2835] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 114.223441][ T6851] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.278903][ T6849] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.632'. [ 114.437533][ T6857] syzkaller0: entered promiscuous mode [ 114.463649][ T6857] syzkaller0: entered allmulticast mode [ 114.478315][ T6864] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.637'. [ 114.561971][ T6867] netlink: 6 bytes leftover after parsing attributes in process `syz.0.637'. [ 114.621843][ T6867] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 114.978986][ T6891] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.645'. [ 115.983302][ T6886] validate_nla: 7 callbacks suppressed [ 115.983322][ T6886] netlink: 'syz.3.644': attribute type 10 has an invalid length. [ 116.038436][ T6886] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.057082][ T6886] bond0: (slave team0): Enslaving as an active interface with an up link [ 116.076310][ T6890] netlink: 'syz.3.644': attribute type 10 has an invalid length. [ 116.096132][ T6890] bond0: (slave team0): Releasing backup interface [ 116.177909][ T6890] bridge0: port 3(team0) entered blocking state [ 116.205249][ T6890] bridge0: port 3(team0) entered disabled state [ 116.218291][ T6890] team0: entered allmulticast mode [ 116.232986][ T6890] team_slave_0: entered allmulticast mode [ 116.255843][ T6890] team_slave_1: entered allmulticast mode [ 116.271700][ T6890] team0: entered promiscuous mode [ 116.297263][ T6890] team_slave_0: entered promiscuous mode [ 116.310329][ T6890] team_slave_1: entered promiscuous mode [ 116.339223][ T6893] netlink: 76 bytes leftover after parsing attributes in process `syz.3.644'. [ 116.497355][ T6906] netlink: 'syz.4.653': attribute type 10 has an invalid length. [ 116.599281][ T6906] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.831837][ T6931] netlink: 'syz.1.661': attribute type 21 has an invalid length. [ 116.861610][ T6931] netlink: 'syz.1.661': attribute type 6 has an invalid length. [ 117.059338][ T6943] netlink: 'syz.3.667': attribute type 21 has an invalid length. [ 117.422360][ T6960] netlink: 'syz.0.673': attribute type 10 has an invalid length. [ 117.458890][ T6960] team0: left allmulticast mode [ 117.467349][ T6960] team_slave_0: left allmulticast mode [ 117.495296][ T6960] team_slave_1: left allmulticast mode [ 117.505429][ T6960] batadv0: left allmulticast mode [ 117.520683][ T6960] team0: left promiscuous mode [ 117.532596][ T6960] team_slave_0: left promiscuous mode [ 117.544778][ T6960] team_slave_1: left promiscuous mode [ 117.556499][ T6960] batadv0: left promiscuous mode [ 117.563651][ T6960] bridge0: port 3(team0) entered disabled state [ 117.602183][ T6960] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.622831][ T6960] bond0: (slave team0): Enslaving as an active interface with an up link [ 117.723244][ T6968] netlink: 'syz.1.676': attribute type 10 has an invalid length. [ 117.856724][ T6975] netlink: 'syz.3.680': attribute type 3 has an invalid length. [ 117.906051][ T6975] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.680'. [ 117.948851][ T6977] netlink: 'syz.2.681': attribute type 21 has an invalid length. [ 118.017916][ T6975] netlink: 6 bytes leftover after parsing attributes in process `syz.3.680'. [ 118.064853][ T6975] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 118.395398][ T6995] team0: left allmulticast mode [ 118.439348][ T6995] team_slave_0: left allmulticast mode [ 118.452704][ T6995] team_slave_1: left allmulticast mode [ 118.474141][ T6995] team0: left promiscuous mode [ 118.490258][ T6995] team_slave_0: left promiscuous mode [ 118.503808][ T6995] team_slave_1: left promiscuous mode [ 118.518099][ T6995] bridge0: port 3(team0) entered disabled state [ 118.557063][ T6995] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.961970][ T7014] netlink: 40 bytes leftover after parsing attributes in process `syz.2.698'. [ 118.989107][ T7014] netlink: 1 bytes leftover after parsing attributes in process `syz.2.698'. [ 119.423000][ T7031] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.478477][ T7031] bond0: (slave team0): Enslaving as an active interface with an up link [ 120.387975][ T7075] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.803102][ T7089] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.735'. [ 121.364670][ T7111] validate_nla: 6 callbacks suppressed [ 121.364709][ T7111] netlink: 'syz.3.744': attribute type 10 has an invalid length. [ 121.427586][ T7111] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.479480][ T7115] netlink: 'syz.0.741': attribute type 10 has an invalid length. [ 121.568970][ T7107] netlink: 'syz.0.741': attribute type 10 has an invalid length. [ 121.614762][ T7107] bond0: (slave team0): Releasing backup interface [ 121.671682][ T7107] bridge0: port 3(team0) entered blocking state [ 121.684252][ T7107] bridge0: port 3(team0) entered disabled state [ 121.716342][ T7107] team0: entered allmulticast mode [ 121.723809][ T7107] team_slave_0: entered allmulticast mode [ 121.729689][ T7107] team_slave_1: entered allmulticast mode [ 121.737269][ T7107] batadv0: entered allmulticast mode [ 121.744880][ T7107] team0: entered promiscuous mode [ 121.750671][ T7107] team_slave_0: entered promiscuous mode [ 121.756911][ T7107] team_slave_1: entered promiscuous mode [ 121.761425][ T7130] netlink: 'syz.4.752': attribute type 3 has an invalid length. [ 121.763011][ T7107] batadv0: entered promiscuous mode [ 121.777665][ T7130] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.752'. [ 121.808149][ T7115] netlink: 76 bytes leftover after parsing attributes in process `syz.0.741'. [ 122.063956][ T2835] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 122.073334][ T2835] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 122.836489][ T7161] netlink: 'syz.2.766': attribute type 3 has an invalid length. [ 122.876383][ T7161] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.766'. [ 123.307825][ T7180] netlink: 'syz.0.775': attribute type 10 has an invalid length. [ 123.377104][ T7180] netlink: 212412 bytes leftover after parsing attributes in process `syz.0.775'. [ 123.407870][ T7184] netlink: 40 bytes leftover after parsing attributes in process `syz.2.778'. [ 123.430628][ T7180] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 123.460176][ T7184] netlink: 'syz.2.778': attribute type 1 has an invalid length. [ 123.475456][ T7184] netlink: 1 bytes leftover after parsing attributes in process `syz.2.778'. [ 124.141546][ T7212] netlink: 40 bytes leftover after parsing attributes in process `syz.0.792'. [ 124.156935][ T7212] netlink: 'syz.0.792': attribute type 1 has an invalid length. [ 124.192559][ T7212] netlink: 1 bytes leftover after parsing attributes in process `syz.0.792'. [ 124.365414][ T7215] netlink: 'syz.1.793': attribute type 10 has an invalid length. [ 124.415892][ T7215] netlink: 212412 bytes leftover after parsing attributes in process `syz.1.793'. [ 124.464535][ T7215] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 125.704054][ T7253] netlink: 'syz.3.801': attribute type 1 has an invalid length. [ 126.133207][ T7261] __nla_validate_parse: 2 callbacks suppressed [ 126.133226][ T7261] netlink: 212412 bytes leftover after parsing attributes in process `syz.1.810'. [ 126.162214][ T7261] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 126.397474][ T7268] validate_nla: 1 callbacks suppressed [ 126.397494][ T7268] netlink: 'syz.0.811': attribute type 3 has an invalid length. [ 126.415338][ T7268] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.811'. [ 126.794778][ T7259] GPL: port 1(veth0_to_bond) entered blocking state [ 126.805248][ T7259] GPL: port 1(veth0_to_bond) entered disabled state [ 126.813502][ T7259] veth0_to_bond: entered allmulticast mode [ 126.820636][ T7259] veth0_to_bond: entered promiscuous mode [ 126.829939][ T7275] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.813'. [ 127.333267][ T7284] netlink: 'syz.1.817': attribute type 10 has an invalid length. [ 127.350233][ T7284] netlink: 2 bytes leftover after parsing attributes in process `syz.1.817'. [ 127.371011][ T7284] bond0: entered promiscuous mode [ 127.377057][ T7284] bond_slave_0: entered promiscuous mode [ 127.406032][ T7284] bond_slave_1: entered promiscuous mode [ 127.447250][ T7284] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 127.469562][ T7284] team0: entered promiscuous mode [ 127.475055][ T7284] team_slave_0: entered promiscuous mode [ 127.488605][ T7284] team_slave_1: entered promiscuous mode [ 127.504108][ T7284] batadv0: entered promiscuous mode [ 127.513336][ T7284] bridge0: port 3(bond0) entered blocking state [ 127.522995][ T7284] bridge0: port 3(bond0) entered disabled state [ 127.529392][ T7284] bond0: entered allmulticast mode [ 127.535898][ T7284] bond_slave_0: entered allmulticast mode [ 127.546537][ T7284] bond_slave_1: entered allmulticast mode [ 127.553185][ T7284] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 127.561630][ T7284] team0: entered allmulticast mode [ 127.566757][ T7284] team_slave_0: entered allmulticast mode [ 127.572760][ T7284] team_slave_1: entered allmulticast mode [ 127.578496][ T7284] batadv0: entered allmulticast mode [ 127.588325][ T7284] bridge0: port 3(bond0) entered blocking state [ 127.594751][ T7284] bridge0: port 3(bond0) entered forwarding state [ 127.613911][ T11] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 127.623379][ T11] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 128.746715][ T7311] tap0: tun_chr_ioctl cmd 1074812118 [ 129.118500][ T7338] netlink: 'syz.4.834': attribute type 1 has an invalid length. [ 129.158499][ T7338] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.834'. [ 129.487153][ T12] tipc: Subscription rejected, illegal request [ 129.930381][ T7361] tap0: tun_chr_ioctl cmd 1074812118 [ 130.766692][ T12] tipc: Subscription rejected, illegal request [ 131.031273][ T7394] tap0: tun_chr_ioctl cmd 1074812118 [ 131.709031][ T7420] GPL: port 1(veth0_to_bond) entered blocking state [ 131.755941][ T7420] GPL: port 1(veth0_to_bond) entered disabled state [ 131.797011][ T7420] veth0_to_bond: entered allmulticast mode [ 131.819018][ T7420] veth0_to_bond: entered promiscuous mode [ 131.832953][ T7437] netlink: 'syz.0.877': attribute type 10 has an invalid length. [ 131.843296][ T7437] netlink: 2 bytes leftover after parsing attributes in process `syz.0.877'. [ 131.859544][ T7437] bond0: entered promiscuous mode [ 131.865031][ T7437] bond_slave_0: entered promiscuous mode [ 131.884246][ T7437] bond_slave_1: entered promiscuous mode [ 131.893774][ T7437] mac80211_hwsim hwsim13 wlan1: entered promiscuous mode [ 131.919444][ T7437] bridge0: port 4(bond0) entered blocking state [ 131.933892][ T7437] bridge0: port 4(bond0) entered disabled state [ 131.948255][ T7437] bond0: entered allmulticast mode [ 131.962820][ T7437] bond_slave_0: entered allmulticast mode [ 131.986764][ T7437] bond_slave_1: entered allmulticast mode [ 132.000268][ T7437] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 132.024910][ T7437] bridge0: port 4(bond0) entered blocking state [ 132.031423][ T7437] bridge0: port 4(bond0) entered forwarding state [ 132.489591][ T7467] netlink: 212424 bytes leftover after parsing attributes in process `syz.0.888'. [ 132.524506][ T7467] netlink: 500 bytes leftover after parsing attributes in process `syz.0.888'. [ 132.534407][ T35] tipc: Subscription rejected, illegal request [ 132.802244][ T7486] netlink: 'syz.4.897': attribute type 10 has an invalid length. [ 132.877427][ T7486] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 132.884837][ T7486] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 132.955085][ T7486] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 133.251709][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.258385][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.266373][ T7508] netlink: 212424 bytes leftover after parsing attributes in process `syz.0.903'. [ 133.281960][ T7508] netlink: 500 bytes leftover after parsing attributes in process `syz.0.903'. [ 133.433073][ T12] tipc: Subscription rejected, illegal request [ 133.836891][ T7533] netlink: 'syz.2.916': attribute type 16 has an invalid length. [ 133.859129][ T7533] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.916'. [ 133.948714][ T7533] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 133.970219][ T7533] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 134.004806][ T7546] netlink: 203448 bytes leftover after parsing attributes in process `syz.0.921'. [ 134.041858][ T7546] netlink: 9486 bytes leftover after parsing attributes in process `syz.0.921'. [ 134.631688][ T7577] netlink: 203448 bytes leftover after parsing attributes in process `syz.0.936'. [ 134.642103][ T7577] netlink: 9486 bytes leftover after parsing attributes in process `syz.0.936'. [ 134.692774][ T7533] syz.2.916 (7533) used greatest stack depth: 17784 bytes left [ 134.920999][ T7586] netlink: 'syz.2.939': attribute type 10 has an invalid length. [ 135.180254][ T7606] netlink: 'syz.3.949': attribute type 16 has an invalid length. [ 135.207689][ T7606] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 135.232126][ T7606] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 135.788278][ T7640] netlink: 'syz.2.965': attribute type 4 has an invalid length. [ 136.357622][ T7670] netlink: 'syz.4.981': attribute type 4 has an invalid length. [ 136.579237][ T7679] netlink: 'syz.4.985': attribute type 16 has an invalid length. [ 136.599659][ T7679] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 136.643164][ T7679] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 137.274114][ T7716] __nla_validate_parse: 11 callbacks suppressed [ 137.274269][ T7716] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1004'. [ 137.298913][ T7716] openvswitch: netlink: Geneve option length err (len 509, max 255). [ 137.555785][ T7729] netlink: 'syz.4.1010': attribute type 4 has an invalid length. [ 137.574170][ T7729] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.1010'. [ 137.758007][ T7743] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1017'. [ 137.772551][ T7741] netlink: 'syz.4.1016': attribute type 22 has an invalid length. [ 137.787141][ T7743] openvswitch: netlink: Geneve option length err (len 509, max 255). [ 138.280664][ T7764] netlink: 'syz.3.1027': attribute type 4 has an invalid length. [ 138.288438][ T7764] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.1027'. [ 138.557315][ T5107] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 138.570713][ T5107] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 138.584954][ T5107] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 138.597614][ T5107] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 138.606645][ T5107] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 138.614971][ T5107] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 139.048778][ T7775] netlink: 'syz.3.1031': attribute type 22 has an invalid length. [ 139.378481][ T61] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.543973][ T7789] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1037'. [ 139.605710][ T7798] netlink: 'syz.0.1042': attribute type 16 has an invalid length. [ 139.630048][ T7798] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1042'. [ 139.667505][ T61] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.774952][ T7798] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 139.797028][ T7798] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 139.945766][ T61] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.128988][ T61] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.197539][ T7767] chnl_net:caif_netlink_parms(): no params data found [ 140.676764][ T7839] netlink: 'syz.4.1057': attribute type 22 has an invalid length. [ 140.685880][ T5104] Bluetooth: hci0: command tx timeout [ 140.728350][ T7767] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.744457][ T7767] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.754633][ T7767] bridge_slave_0: entered allmulticast mode [ 140.768432][ T7767] bridge_slave_0: entered promiscuous mode [ 140.780765][ T7767] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.788065][ T7767] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.798152][ T7767] bridge_slave_1: entered allmulticast mode [ 140.811452][ T7767] bridge_slave_1: entered promiscuous mode [ 140.962059][ T7853] delete_channel: no stack [ 140.969513][ T7853] delete_channel: no stack [ 140.969625][ T61] bond0: left allmulticast mode [ 140.988480][ T61] bond_slave_0: left allmulticast mode [ 140.994234][ T61] bond_slave_1: left allmulticast mode [ 141.010467][ T61] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 141.018330][ T61] team0: left allmulticast mode [ 141.029045][ T61] team_slave_0: left allmulticast mode [ 141.035410][ T61] team_slave_1: left allmulticast mode [ 141.049917][ T61] batadv0: left allmulticast mode [ 141.056719][ T61] bridge0: port 3(bond0) entered disabled state [ 141.073911][ T7855] netlink: 'syz.0.1064': attribute type 16 has an invalid length. [ 141.100305][ T7855] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1064'. [ 141.153526][ T61] bridge_slave_1: left allmulticast mode [ 141.159403][ T61] bridge_slave_1: left promiscuous mode [ 141.166187][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.183617][ T61] bridge_slave_0: left allmulticast mode [ 141.201495][ T61] bridge_slave_0: left promiscuous mode [ 141.207292][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.771857][ T7880] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 141.798392][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.807609][ T61] bond_slave_0: left promiscuous mode [ 141.817817][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.826938][ T61] bond_slave_1: left promiscuous mode [ 141.836022][ T61] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 141.845002][ T61] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 141.860179][ T61] bond0 (unregistering): (slave team0): Releasing backup interface [ 141.868888][ T61] team0: left promiscuous mode [ 141.875628][ T61] team_slave_0: left promiscuous mode [ 141.882812][ T61] team_slave_1: left promiscuous mode [ 141.888318][ T61] batadv0: left promiscuous mode [ 141.896971][ T61] bond0 (unregistering): Released all slaves [ 141.912793][ T7767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.923449][ T7855] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 141.936571][ T7875] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.945643][ T7875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.970684][ T7855] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 142.001252][ T7875] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.017859][ T7875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.203388][ T7767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.455087][ T7767] team0: Port device team_slave_0 added [ 142.544566][ T7767] team0: Port device team_slave_1 added [ 142.760025][ T5104] Bluetooth: hci0: command tx timeout [ 142.771352][ T7767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.800437][ T7767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.827558][ T7767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.907662][ T7767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.924650][ T7767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.017289][ T7767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.048631][ T7917] netlink: 'syz.0.1088': attribute type 21 has an invalid length. [ 143.059858][ T7917] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1088'. [ 143.181602][ T61] hsr_slave_0: left promiscuous mode [ 143.198942][ T61] hsr_slave_1: left promiscuous mode [ 143.222270][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.239057][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.290858][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.298316][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.392340][ T61] veth1_macvtap: left promiscuous mode [ 143.406438][ T61] veth0_macvtap: left promiscuous mode [ 143.412521][ T61] veth1_vlan: left promiscuous mode [ 143.417900][ T61] veth0_vlan: left promiscuous mode [ 144.567103][ T61] team0 (unregistering): Port device team_slave_1 removed [ 144.599378][ T61] team0 (unregistering): Port device team_slave_0 removed [ 144.617660][ T7968] netlink: 'syz.0.1107': attribute type 29 has an invalid length. [ 144.804933][ T61] team0 (unregistering): Port device batadv0 removed [ 144.840722][ T5104] Bluetooth: hci0: command tx timeout [ 144.948216][ T7767] hsr_slave_0: entered promiscuous mode [ 144.954800][ T7767] hsr_slave_1: entered promiscuous mode [ 144.966133][ T7767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 144.976519][ T7767] Cannot create hsr debugfs directory [ 145.035407][ T7968] netlink: 'syz.0.1107': attribute type 29 has an invalid length. [ 145.044172][ T7967] netlink: 'syz.0.1107': attribute type 29 has an invalid length. [ 145.920113][ T7993] netlink: 'syz.3.1116': attribute type 21 has an invalid length. [ 145.938908][ T7993] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1116'. [ 146.807542][ T8033] netlink: 'syz.0.1125': attribute type 1 has an invalid length. [ 146.857670][ T8033] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.1125'. [ 146.920105][ T5104] Bluetooth: hci0: command tx timeout [ 147.202439][ T7767] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 147.263748][ T7767] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 147.309094][ T7767] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 147.380440][ T7767] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 147.538842][ T8070] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1139'. [ 147.842246][ T8078] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.1143'. [ 147.955692][ T8078] netlink: 'syz.4.1143': attribute type 3 has an invalid length. [ 148.080554][ T8080] netlink: 'syz.0.1144': attribute type 29 has an invalid length. [ 148.093657][ T7767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.128419][ T8080] netlink: 'syz.0.1144': attribute type 29 has an invalid length. [ 148.173844][ T7767] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.195211][ T8083] netlink: 'syz.0.1144': attribute type 29 has an invalid length. [ 148.247469][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.254684][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.362249][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.369452][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.475730][ T7767] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 148.898401][ T7767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.027162][ T7767] veth0_vlan: entered promiscuous mode [ 149.066752][ T7767] veth1_vlan: entered promiscuous mode [ 149.157295][ T7767] veth0_macvtap: entered promiscuous mode [ 149.209485][ T7767] veth1_macvtap: entered promiscuous mode [ 149.308262][ T7767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.370590][ T7767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.393693][ T7767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.419865][ T7767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.451884][ T7767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.489799][ T7767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.541426][ T7767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.606389][ T7767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.659924][ T7767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.708781][ T7767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.751726][ T7767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.777919][ T7767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.788879][ T7767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.804246][ T7767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.851852][ T7767] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.889846][ T7767] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.908634][ T7767] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.950111][ T7767] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.450541][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.487327][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.563458][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.579532][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.648833][ T8189] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.1175'. [ 150.680140][ T8189] netlink: 'syz.3.1175': attribute type 3 has an invalid length. [ 151.224896][ T8221] : renamed from ipvlan1 [ 151.390935][ T8231] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1187'. [ 151.836889][ T8253] netlink: 'syz.3.1195': attribute type 3 has an invalid length. [ 151.870263][ T8253] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1195'. [ 152.115123][ T8265] netlink: 'syz.3.1199': attribute type 21 has an invalid length. [ 152.482496][ T8281] netlink: 'syz.1.1205': attribute type 11 has an invalid length. [ 152.509890][ T8281] netlink: 134780 bytes leftover after parsing attributes in process `syz.1.1205'. [ 153.255294][ T8316] netlink: 'syz.4.1222': attribute type 11 has an invalid length. [ 153.279095][ T8316] netlink: 134780 bytes leftover after parsing attributes in process `syz.4.1222'. [ 153.466335][ T8324] netlink: 'syz.1.1226': attribute type 3 has an invalid length. [ 153.486033][ T8324] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1226'. [ 154.695354][ T8358] netlink: 'syz.3.1240': attribute type 3 has an invalid length. [ 154.710521][ T8358] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1240'. [ 155.103542][ T8375] netlink: 'syz.0.1245': attribute type 3 has an invalid length. [ 155.133440][ T8375] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.1245'. [ 156.435708][ T8391] netlink: 'syz.4.1254': attribute type 3 has an invalid length. [ 156.471412][ T8391] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.1254'. [ 157.205794][ T5091] cgroup: fork rejected by pids controller in /syz4 [ 157.660146][ T8405] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1260'. [ 159.368977][ T5107] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 159.378615][ T5107] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 159.390354][ T5107] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 159.402123][ T5107] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 159.411252][ T5107] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 159.418647][ T5107] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 160.883668][ T5107] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 160.917401][ T5107] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 160.925992][ T5107] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 160.941799][ T5107] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 161.020352][ T5107] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 161.027875][ T5107] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 161.233011][ T8412] chnl_net:caif_netlink_parms(): no params data found [ 161.492977][ T5104] Bluetooth: hci2: command tx timeout [ 161.571212][ T8446] netlink: 'syz.0.1274': attribute type 3 has an invalid length. [ 161.582234][ T8446] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1274'. [ 161.644176][ T8412] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.675403][ T8412] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.692368][ T8412] bridge_slave_0: entered allmulticast mode [ 161.702298][ T8412] bridge_slave_0: entered promiscuous mode [ 161.716642][ T8412] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.728033][ T8412] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.741680][ T8412] bridge_slave_1: entered allmulticast mode [ 161.755763][ T8412] bridge_slave_1: entered promiscuous mode [ 161.881230][ T8412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.983315][ T8412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.088051][ T8412] team0: Port device team_slave_0 added [ 162.113310][ T8412] team0: Port device team_slave_1 added [ 162.205016][ T8421] chnl_net:caif_netlink_parms(): no params data found [ 162.247580][ T8412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.322101][ T8412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.423638][ T8412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.537933][ T8412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.564500][ T8412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.664884][ T8412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.041094][ T8412] hsr_slave_0: entered promiscuous mode [ 163.079950][ T5104] Bluetooth: hci4: command tx timeout [ 163.098185][ T8412] hsr_slave_1: entered promiscuous mode [ 163.134913][ T8412] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.185107][ T8412] Cannot create hsr debugfs directory [ 163.586464][ T12] bond0 (unregistering): Released all slaves [ 164.442610][ T5107] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 164.452738][ T5107] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 164.465310][ T4493] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 164.478470][ T5095] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 164.487644][ T5095] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 164.490552][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 164.503879][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 164.510602][ T5110] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 164.514811][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 164.519414][ T5110] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 164.535452][ T5095] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 164.542802][ T5108] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 164.553371][ T5110] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 164.561670][ T5108] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 164.571357][ T5110] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 164.578857][ T5108] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 164.580976][ T5095] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 164.587441][ T5110] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 164.612310][ T5110] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 164.618695][ T5095] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 164.645168][ T5095] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 164.663362][ T5095] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 164.672066][ T5095] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 164.679473][ T5095] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 164.954257][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.105166][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.218564][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.316578][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.447524][ T8486] chnl_net:caif_netlink_parms(): no params data found [ 165.949520][ T8491] chnl_net:caif_netlink_parms(): no params data found [ 165.996721][ T8486] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.011217][ T8486] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.018499][ T8486] bridge_slave_0: entered allmulticast mode [ 166.060492][ T8486] bridge_slave_0: entered promiscuous mode [ 166.092926][ T8486] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.111015][ T8486] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.118677][ T8486] bridge_slave_1: entered allmulticast mode [ 166.132700][ T8486] bridge_slave_1: entered promiscuous mode [ 166.193303][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.298385][ T8488] chnl_net:caif_netlink_parms(): no params data found [ 166.300865][ T8519] netlink: 212424 bytes leftover after parsing attributes in process `syz.3.1297'. [ 166.314874][ T8519] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1297'. [ 166.331739][ T8485] chnl_net:caif_netlink_parms(): no params data found [ 166.358027][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.422113][ T8486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.495121][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.519417][ T8486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.651402][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.680823][ T53] Bluetooth: hci0: command tx timeout [ 166.686787][ T53] Bluetooth: hci2: command tx timeout [ 166.693356][ T5095] Bluetooth: hci4: command tx timeout [ 166.760416][ T5095] Bluetooth: hci5: command tx timeout [ 166.782690][ T8491] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.793875][ T8491] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.802435][ T8491] bridge_slave_0: entered allmulticast mode [ 166.811137][ T8491] bridge_slave_0: entered promiscuous mode [ 166.827919][ T8486] team0: Port device team_slave_0 added [ 166.875351][ T8491] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.884524][ T8491] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.896672][ T8491] bridge_slave_1: entered allmulticast mode [ 166.931399][ T8491] bridge_slave_1: entered promiscuous mode [ 166.994578][ T8486] team0: Port device team_slave_1 added [ 167.031714][ T8551] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.1302'. [ 167.049426][ T8488] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.057929][ T8488] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.080498][ T8488] bridge_slave_0: entered allmulticast mode [ 167.089594][ T8488] bridge_slave_0: entered promiscuous mode [ 167.258784][ T8488] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.267311][ T8488] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.274918][ T8488] bridge_slave_1: entered allmulticast mode [ 167.285178][ T8488] bridge_slave_1: entered promiscuous mode [ 167.318867][ T8491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.335581][ T8491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.355539][ T8486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.357122][ T8559] netlink: 212424 bytes leftover after parsing attributes in process `syz.3.1305'. [ 167.364019][ T8486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.373217][ T8559] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1305'. [ 167.420615][ T8486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.511174][ T8485] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.519004][ T8485] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.527385][ T8485] bridge_slave_0: entered allmulticast mode [ 167.536105][ T8485] bridge_slave_0: entered promiscuous mode [ 167.554599][ T8486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.562194][ T8486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.589464][ T8486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.630258][ T8488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.641309][ T8485] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.648432][ T8485] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.658319][ T8485] bridge_slave_1: entered allmulticast mode [ 167.666035][ T8485] bridge_slave_1: entered promiscuous mode [ 167.712213][ T8491] team0: Port device team_slave_0 added [ 167.753764][ T8488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.790420][ T8485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.814086][ T8491] team0: Port device team_slave_1 added [ 167.867926][ T12] bond0: left allmulticast mode [ 167.873390][ T12] bond_slave_0: left allmulticast mode [ 167.879131][ T12] bond_slave_1: left allmulticast mode [ 167.885389][ T12] mac80211_hwsim hwsim13 wlan1: left allmulticast mode [ 167.894545][ T12] bridge0: port 4(bond0) entered disabled state [ 167.903475][ T12] team0: left allmulticast mode [ 167.908427][ T12] team_slave_0: left allmulticast mode [ 167.914501][ T12] team_slave_1: left allmulticast mode [ 167.921382][ T12] batadv0: left allmulticast mode [ 167.927137][ T12] team0: left promiscuous mode [ 167.932656][ T12] team_slave_0: left promiscuous mode [ 167.938219][ T12] team_slave_1: left promiscuous mode [ 167.944261][ T12] batadv0: left promiscuous mode [ 167.949500][ T12] bridge0: port 3(team0) entered disabled state [ 167.958407][ T12] bridge_slave_1: left allmulticast mode [ 167.964890][ T12] bridge_slave_1: left promiscuous mode [ 167.970903][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.982888][ T12] bridge_slave_0: left promiscuous mode [ 167.988632][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.999272][ T12] bridge_slave_1: left allmulticast mode [ 168.005301][ T12] bridge_slave_1: left promiscuous mode [ 168.011326][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.020916][ T12] bridge_slave_0: left allmulticast mode [ 168.026672][ T12] bridge_slave_0: left promiscuous mode [ 168.034963][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.047061][ T12] bridge_slave_1: left allmulticast mode [ 168.053274][ T12] bridge_slave_1: left promiscuous mode [ 168.058955][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.068389][ T12] bridge_slave_0: left allmulticast mode [ 168.074511][ T12] bridge_slave_0: left promiscuous mode [ 168.080430][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.715178][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.724364][ T12] bond_slave_0: left promiscuous mode [ 168.738264][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.747798][ T12] bond_slave_1: left promiscuous mode [ 168.758884][ T12] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 168.760241][ T5095] Bluetooth: hci4: command tx timeout [ 168.772548][ T53] Bluetooth: hci2: command tx timeout [ 168.772558][ T4493] Bluetooth: hci0: command tx timeout [ 168.785464][ T12] mac80211_hwsim hwsim13 wlan1: left promiscuous mode [ 168.798326][ T12] bond0 (unregistering): Released all slaves [ 168.846703][ T4493] Bluetooth: hci5: command tx timeout [ 168.896028][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.908139][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.920553][ T12] bond0 (unregistering): Released all slaves [ 168.934452][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.945214][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.964444][ T12] bond0 (unregistering): Released all slaves [ 168.977051][ T8485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.012814][ T8491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.020001][ T8491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.057561][ T8491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.090653][ T8486] hsr_slave_0: entered promiscuous mode [ 169.112439][ T8486] hsr_slave_1: entered promiscuous mode [ 169.124388][ T8486] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.132270][ T8486] Cannot create hsr debugfs directory [ 169.167235][ T8488] team0: Port device team_slave_0 added [ 169.206340][ T8485] team0: Port device team_slave_0 added [ 169.216091][ T8491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.223804][ T8491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.253352][ T8491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.284642][ T8570] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.1310'. [ 169.303835][ T8488] team0: Port device team_slave_1 added [ 169.336960][ T8485] team0: Port device team_slave_1 added [ 169.505952][ T8488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.522434][ T8488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.552476][ T8488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.664909][ T8488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.681708][ T8488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.718308][ T8488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.758048][ T8580] netlink: 212424 bytes leftover after parsing attributes in process `syz.3.1313'. [ 169.780195][ T8580] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1313'. [ 169.831253][ T8485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.838690][ T8485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.910312][ T8485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.944206][ T8491] hsr_slave_0: entered promiscuous mode [ 169.955581][ T8590] netlink: 209840 bytes leftover after parsing attributes in process `syz.3.1315'. [ 169.968275][ T8491] hsr_slave_1: entered promiscuous mode [ 169.983256][ T8491] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.996393][ T8491] Cannot create hsr debugfs directory [ 170.114135][ T8488] hsr_slave_0: entered promiscuous mode [ 170.142954][ T8488] hsr_slave_1: entered promiscuous mode [ 170.157887][ T8488] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.168652][ T8488] Cannot create hsr debugfs directory [ 170.197520][ T8485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.219798][ T8485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.264615][ T8485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.615931][ T8485] hsr_slave_0: entered promiscuous mode [ 170.631859][ T8485] hsr_slave_1: entered promiscuous mode [ 170.647460][ T8485] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.682684][ T8485] Cannot create hsr debugfs directory [ 170.840156][ T4493] Bluetooth: hci0: command tx timeout [ 170.845654][ T5095] Bluetooth: hci4: command tx timeout [ 170.851509][ T53] Bluetooth: hci2: command tx timeout [ 170.921018][ T5095] Bluetooth: hci5: command tx timeout [ 171.092145][ T12] hsr_slave_0: left promiscuous mode [ 171.116606][ T12] hsr_slave_1: left promiscuous mode [ 171.133536][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.152984][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.166949][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.175582][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.201409][ T12] hsr_slave_0: left promiscuous mode [ 171.208887][ T12] hsr_slave_1: left promiscuous mode [ 171.216469][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.224548][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.234007][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.250233][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.272712][ T12] hsr_slave_0: left promiscuous mode [ 171.280186][ T12] hsr_slave_1: left promiscuous mode [ 171.287229][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.295483][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.326416][ T12] veth1_macvtap: left promiscuous mode [ 171.332067][ T12] veth0_macvtap: left promiscuous mode [ 171.337867][ T12] veth1_vlan: left promiscuous mode [ 171.343533][ T12] veth0_vlan: left promiscuous mode [ 171.355487][ T12] veth1_macvtap: left promiscuous mode [ 171.366207][ T12] veth0_macvtap: left promiscuous mode [ 171.372095][ T12] veth1_vlan: left promiscuous mode [ 171.377570][ T12] veth0_vlan: left promiscuous mode [ 171.382467][ T8605] netlink: 212424 bytes leftover after parsing attributes in process `syz.3.1320'. [ 171.393647][ T8605] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1320'. [ 171.525070][ T8609] netlink: 209840 bytes leftover after parsing attributes in process `syz.3.1322'. [ 172.116716][ T12] team0 (unregistering): Port device team_slave_1 removed [ 172.156645][ T12] team0 (unregistering): Port device team_slave_0 removed [ 172.372938][ T12] team0 (unregistering): Port device batadv0 removed [ 172.825247][ T12] team0 (unregistering): Port device team_slave_1 removed [ 172.864824][ T12] team0 (unregistering): Port device team_slave_0 removed [ 172.926815][ T5095] Bluetooth: hci4: command tx timeout [ 172.932557][ T4493] Bluetooth: hci0: command tx timeout [ 172.938638][ T5095] Bluetooth: hci2: command tx timeout [ 173.001667][ T5095] Bluetooth: hci5: command tx timeout [ 173.253478][ T12] team0 (unregistering): Port device team_slave_1 removed [ 173.282867][ T12] team0 (unregistering): Port device team_slave_0 removed [ 173.575417][ T8486] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.954610][ T8486] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.402715][ T8486] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.675842][ T8486] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.828926][ T8643] netlink: 212424 bytes leftover after parsing attributes in process `syz.3.1329'. [ 174.840310][ T8643] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1329'. [ 174.945611][ T8647] netlink: 209840 bytes leftover after parsing attributes in process `syz.3.1330'. [ 175.532351][ T8491] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 175.544222][ T8669] netlink: 'syz.3.1335': attribute type 3 has an invalid length. [ 175.560217][ T8491] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 175.567536][ T8669] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1335'. [ 175.590651][ T8491] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 175.615846][ T8491] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 176.143009][ T8491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.217420][ T8686] netlink: 209840 bytes leftover after parsing attributes in process `syz.3.1337'. [ 176.259518][ T8491] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.298234][ T8485] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 176.330932][ T8485] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 176.379200][ T8485] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 176.466547][ T8488] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.494825][ T8485] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 176.513397][ T5147] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.520557][ T5147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.583575][ T8488] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.633202][ T930] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.640431][ T930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.694062][ T8488] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.798234][ T8696] delete_channel: no stack [ 176.804612][ T8488] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.987266][ T8485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.093601][ T8485] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.138377][ T8707] netlink: 209840 bytes leftover after parsing attributes in process `syz.3.1344'. [ 177.150564][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.157832][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.189279][ T8488] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 177.248819][ T930] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.256055][ T930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.289464][ T8488] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 177.362090][ T8488] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 177.435260][ T8488] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 177.478488][ T8486] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 177.515652][ T8486] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 177.544375][ T8491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.601393][ T8486] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 177.670105][ T8486] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 177.999531][ T8491] veth0_vlan: entered promiscuous mode [ 178.079537][ T8491] veth1_vlan: entered promiscuous mode [ 178.379347][ T8491] veth0_macvtap: entered promiscuous mode [ 178.403536][ T8485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.424818][ T8491] veth1_macvtap: entered promiscuous mode [ 178.474809][ T8488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.559155][ T8491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.615849][ T8491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.625887][ T8491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.643032][ T8491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.655357][ T8491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.675121][ T8488] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.706542][ T8486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.754092][ T8491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.779034][ T8491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.794419][ T8491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.820627][ T8491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.848587][ T8491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.867332][ T8749] netlink: 'syz.3.1350': attribute type 3 has an invalid length. [ 178.900402][ T8749] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1350'. [ 178.930507][ T5145] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.937798][ T5145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.965660][ T8485] veth0_vlan: entered promiscuous mode [ 178.977615][ T8486] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.008122][ T8491] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.019969][ T8491] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.028719][ T8491] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.048922][ T8491] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.065296][ T5144] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.072544][ T5144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.181832][ T5176] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.189015][ T5176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.230920][ T5176] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.238090][ T5176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.585097][ T8485] veth1_vlan: entered promiscuous mode [ 179.716180][ T8486] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 179.882483][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.893046][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.965090][ T8485] veth0_macvtap: entered promiscuous mode [ 180.072403][ T8485] veth1_macvtap: entered promiscuous mode [ 180.131526][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.150875][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.194031][ T8485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.249831][ T8485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.270120][ T8485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.292429][ T8485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.309029][ T8485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.320319][ T8485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.343409][ T8485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.393863][ T8486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.409528][ T8485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.423564][ T8485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.458251][ T8793] netlink: 'syz.3.1354': attribute type 11 has an invalid length. [ 180.466410][ T8485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.483930][ T8485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.494452][ T8793] netlink: 80220 bytes leftover after parsing attributes in process `syz.3.1354'. [ 180.511605][ T8485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.532341][ T8485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.556225][ T8485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.668667][ T8488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.699889][ T8485] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.708670][ T8485] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.736797][ T8485] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.746418][ T8485] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.981660][ T8486] veth0_vlan: entered promiscuous mode [ 181.033185][ T8809] netlink: 'syz.1.1356': attribute type 10 has an invalid length. [ 181.072562][ T8809] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.081711][ T8809] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.170524][ T8809] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.177801][ T8809] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.185661][ T8809] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.192895][ T8809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.242731][ T8809] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 181.297704][ T8486] veth1_vlan: entered promiscuous mode [ 181.373887][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.410774][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.477919][ T8827] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.1359'. [ 181.522089][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.531376][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.602034][ T8486] veth0_macvtap: entered promiscuous mode [ 181.704105][ T8486] veth1_macvtap: entered promiscuous mode [ 181.746551][ T8488] veth0_vlan: entered promiscuous mode [ 181.785549][ T8486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.808214][ T8486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.818709][ T8486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.857209][ T8486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.881108][ T8486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.904116][ T8486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.929594][ T8486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.942369][ T8486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.954280][ T8486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.023185][ T8486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.044145][ T8486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.070329][ T8486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.089865][ T8486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.110717][ T8486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.129916][ T8486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.146421][ T8486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.163652][ T8486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.196916][ T8486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.245285][ T8488] veth1_vlan: entered promiscuous mode [ 182.277890][ T8486] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.307192][ T8486] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.336229][ T8486] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.354368][ T8486] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.546658][ T8488] veth0_macvtap: entered promiscuous mode [ 182.625432][ T8488] veth1_macvtap: entered promiscuous mode [ 182.720708][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.728675][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.781781][ T8488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.799873][ T8488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.821687][ T8488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.857686][ T8488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.881885][ T8488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.911707][ T8488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.943999][ T8488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.969506][ T8488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.991046][ T8488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.010534][ T8488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.029542][ T8488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.080859][ T8488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.092960][ T8488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.119821][ T8488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.139800][ T8488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.149673][ T8488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.175306][ T8488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.186634][ T8488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.220765][ T8488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.240007][ T8488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.269142][ T8488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.323162][ T8488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.333398][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.351799][ T8488] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.370515][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.385287][ T8488] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.398702][ T8488] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.428144][ T8488] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.705217][ T8905] netlink: 'syz.2.1285': attribute type 3 has an invalid length. [ 183.750080][ T8905] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1285'. [ 183.934429][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.001183][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.221237][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.259691][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.530633][ T8919] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1382'. [ 184.863581][ T8934] netlink: 'syz.4.1389': attribute type 3 has an invalid length. [ 184.865809][ T8937] netlink: 'syz.0.1390': attribute type 3 has an invalid length. [ 184.893486][ T8934] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.1389'. [ 184.927921][ T8937] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1390'. [ 186.057768][ T8972] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1407'. [ 186.088970][ T8976] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1410'. [ 186.521284][ T4493] Bluetooth: hci1: command 0x0406 tx timeout [ 186.534018][ T4493] Bluetooth: hci3: command 0x0406 tx timeout [ 186.859456][ T9016] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1429'. [ 187.071242][ T9018] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1430'. [ 187.902087][ T9048] netlink: 'syz.1.1444': attribute type 1 has an invalid length. [ 187.915293][ T9048] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.1444'. [ 188.388035][ T9071] netlink: 'syz.3.1455': attribute type 5 has an invalid length. [ 188.416473][ T9074] netlink: 'syz.1.1456': attribute type 29 has an invalid length. [ 188.439430][ T9074] netlink: 'syz.1.1456': attribute type 29 has an invalid length. [ 188.461627][ T9074] netlink: 'syz.1.1456': attribute type 29 has an invalid length. [ 190.442444][ T9141] netlink: 'syz.1.1486': attribute type 3 has an invalid length. [ 190.475054][ T9141] netlink: 'syz.1.1486': attribute type 11 has an invalid length. [ 190.504432][ T9141] netlink: 128512 bytes leftover after parsing attributes in process `syz.1.1486'. [ 190.821071][ T9158] netlink: 'syz.3.1492': attribute type 11 has an invalid length. [ 190.866861][ T9158] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1492'. [ 191.494032][ T9170] netlink: 'syz.0.1499': attribute type 2 has an invalid length. [ 191.520862][ T9170] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1499'. [ 191.669532][ T9179] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1501'. [ 192.037142][ T9195] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.1509'. [ 192.091435][ T9195] netlink: get zone limit has 8 unknown bytes [ 192.145566][ T9205] netlink: 'syz.0.1512': attribute type 2 has an invalid length. [ 192.174579][ T9205] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1512'. [ 192.305594][ T9212] netlink: 'syz.1.1513': attribute type 11 has an invalid length. [ 192.336748][ T9212] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1513'. [ 192.847556][ T9235] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1525'. [ 193.570808][ T9270] validate_nla: 1 callbacks suppressed [ 193.570829][ T9270] netlink: 'syz.3.1541': attribute type 5 has an invalid length. [ 193.624328][ T9275] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.1543'. [ 193.657586][ T9275] netlink: get zone limit has 8 unknown bytes [ 193.840551][ T9282] netlink: 'syz.2.1544': attribute type 11 has an invalid length. [ 193.859160][ T9282] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1544'. [ 194.509061][ T9308] netlink: 'syz.0.1558': attribute type 29 has an invalid length. [ 194.525690][ T9308] netlink: 'syz.0.1558': attribute type 29 has an invalid length. [ 194.530166][ T9305] netlink: 'syz.4.1556': attribute type 3 has an invalid length. [ 194.562104][ T9308] netlink: 'syz.0.1558': attribute type 29 has an invalid length. [ 194.619956][ T9305] netlink: 'syz.4.1556': attribute type 3 has an invalid length. [ 194.653830][ T9305] netlink: 'syz.4.1556': attribute type 5 has an invalid length. [ 194.729765][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.736098][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.823223][ T9312] netlink: 'syz.4.1556': attribute type 3 has an invalid length. [ 194.849408][ T9315] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.1559'. [ 194.897950][ T9312] netlink: 125316 bytes leftover after parsing attributes in process `syz.4.1556'. [ 194.910407][ T9315] netlink: get zone limit has 8 unknown bytes [ 195.485459][ T9341] netlink: 'syz.4.1570': attribute type 29 has an invalid length. [ 196.440054][ T9363] sctp: [Deprecated]: syz.4.1579 (pid 9363) Use of int in max_burst socket option deprecated. [ 196.440054][ T9363] Use struct sctp_assoc_value instead [ 196.536502][ T9367] __nla_validate_parse: 1 callbacks suppressed [ 196.536525][ T9367] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1581'. [ 196.903049][ T9386] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1590'. [ 197.011086][ T9393] netlink: 122916 bytes leftover after parsing attributes in process `syz.4.1588'. [ 197.041865][ T9395] sctp: [Deprecated]: syz.0.1593 (pid 9395) Use of int in max_burst socket option deprecated. [ 197.041865][ T9395] Use struct sctp_assoc_value instead [ 197.375475][ T9404] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1597'. [ 197.653299][ T9423] netlink: 22 bytes leftover after parsing attributes in process `syz.0.1604'. [ 197.653401][ T9420] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.1603'. [ 197.692806][ T9420] netlink: get zone limit has 8 unknown bytes [ 197.739843][ T9425] sctp: [Deprecated]: syz.1.1605 (pid 9425) Use of int in max_burst socket option deprecated. [ 197.739843][ T9425] Use struct sctp_assoc_value instead [ 198.054685][ T9441] netlink: 122916 bytes leftover after parsing attributes in process `syz.2.1607'. [ 198.393141][ T9451] netlink: 22 bytes leftover after parsing attributes in process `syz.2.1616'. [ 198.614556][ T9455] validate_nla: 16 callbacks suppressed [ 198.614596][ T9455] netlink: 'syz.1.1617': attribute type 3 has an invalid length. [ 198.641321][ T9455] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1617'. [ 199.022250][ T9473] sctp: [Deprecated]: syz.0.1620 (pid 9473) Use of int in max_burst socket option deprecated. [ 199.022250][ T9473] Use struct sctp_assoc_value instead [ 199.255158][ T9482] netlink: 22 bytes leftover after parsing attributes in process `syz.0.1629'. [ 199.298714][ T9483] netlink: 'syz.4.1628': attribute type 11 has an invalid length. [ 201.805483][ T9527] netlink: 'syz.2.1646': attribute type 11 has an invalid length. [ 201.869390][ T9527] __nla_validate_parse: 1 callbacks suppressed [ 201.869432][ T9527] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1646'. [ 201.961064][ T9530] netlink: 'syz.4.1647': attribute type 3 has an invalid length. [ 201.985047][ T9530] netlink: 'syz.4.1647': attribute type 3 has an invalid length. [ 201.995713][ T9530] netlink: 'syz.4.1647': attribute type 5 has an invalid length. [ 202.299501][ T9537] netlink: 'syz.4.1647': attribute type 3 has an invalid length. [ 202.309820][ T9537] netlink: 122916 bytes leftover after parsing attributes in process `syz.4.1647'. [ 202.424079][ T9540] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1650'. [ 202.883785][ T9564] netlink: 'syz.0.1660': attribute type 13 has an invalid length. [ 202.938496][ T9564] netlink: 90032 bytes leftover after parsing attributes in process `syz.0.1660'. [ 202.970072][ T9564] openvswitch: netlink: IP tunnel dst address not specified [ 203.060132][ T9570] netlink: 'syz.2.1662': attribute type 3 has an invalid length. [ 203.067914][ T9570] netlink: 'syz.2.1662': attribute type 3 has an invalid length. [ 203.146147][ T9572] netlink: 13951 bytes leftover after parsing attributes in process `syz.0.1660'. [ 203.468246][ T9576] netlink: 122916 bytes leftover after parsing attributes in process `syz.2.1662'. [ 203.761820][ T9580] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1664'. [ 204.336833][ T9607] validate_nla: 3 callbacks suppressed [ 204.336853][ T9607] netlink: 'syz.1.1674': attribute type 2 has an invalid length. [ 204.370915][ T9607] netlink: 'syz.1.1674': attribute type 7 has an invalid length. [ 204.382147][ T9609] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1676'. [ 204.400107][ T9607] netlink: 12698 bytes leftover after parsing attributes in process `syz.1.1674'. [ 204.429890][ T9607] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1674'. [ 204.470975][ T9607] netlink: 'syz.1.1674': attribute type 2 has an invalid length. [ 204.478773][ T9607] netlink: 'syz.1.1674': attribute type 7 has an invalid length. [ 204.795974][ T9622] netlink: 'syz.1.1681': attribute type 11 has an invalid length. [ 205.041258][ T53] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 205.053183][ T53] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 205.062766][ T53] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 205.086478][ T53] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 205.096051][ T53] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 205.107094][ T53] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 205.827751][ T9628] chnl_net:caif_netlink_parms(): no params data found [ 206.176951][ T9628] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.184788][ T9628] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.202796][ T9628] bridge_slave_0: entered allmulticast mode [ 206.213588][ T9628] bridge_slave_0: entered promiscuous mode [ 206.237605][ T9628] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.264263][ T9628] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.282219][ T9628] bridge_slave_1: entered allmulticast mode [ 206.298513][ T9628] bridge_slave_1: entered promiscuous mode [ 206.323963][ T9670] netlink: 'syz.0.1699': attribute type 13 has an invalid length. [ 206.356869][ T9670] netlink: 'syz.0.1699': attribute type 58 has an invalid length. [ 206.605313][ T9628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.639371][ T9628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.737489][ T9628] team0: Port device team_slave_0 added [ 206.750623][ T9678] netlink: 'syz.2.1703': attribute type 13 has an invalid length. [ 206.764337][ T9628] team0: Port device team_slave_1 added [ 206.781672][ T9678] openvswitch: netlink: IP tunnel dst address not specified [ 206.834225][ T9628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.865559][ T9628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.904294][ T9682] netlink: 'syz.2.1703': attribute type 1 has an invalid length. [ 206.921557][ T9682] __nla_validate_parse: 5 callbacks suppressed [ 206.921577][ T9682] netlink: 13951 bytes leftover after parsing attributes in process `syz.2.1703'. [ 206.943791][ T9628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.992040][ T9628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.012468][ T9628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.043013][ T9628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.162213][ T4493] Bluetooth: hci6: command tx timeout [ 207.284519][ T9691] netlink: 'syz.0.1708': attribute type 9 has an invalid length. [ 207.315378][ T9628] hsr_slave_0: entered promiscuous mode [ 207.337542][ T9691] netlink: 134780 bytes leftover after parsing attributes in process `syz.0.1708'. [ 207.369036][ T9628] hsr_slave_1: entered promiscuous mode [ 207.515812][ T9628] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 207.529777][ T9628] Cannot create hsr debugfs directory [ 207.585054][ T9697] netlink: 'syz.0.1713': attribute type 11 has an invalid length. [ 207.617410][ T9697] netlink: 508 bytes leftover after parsing attributes in process `syz.0.1713'. [ 207.821581][ T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 207.832081][ T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 207.852058][ T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 207.877988][ T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 207.889247][ T53] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 207.900397][ T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 208.570095][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.751082][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.848035][ T9716] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1717'. [ 208.946375][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.048221][ T9628] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.240210][ T53] Bluetooth: hci6: command tx timeout [ 209.387293][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.543019][ T9628] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.797987][ T9628] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.878005][ T9744] validate_nla: 2 callbacks suppressed [ 209.878047][ T9744] netlink: 'syz.4.1733': attribute type 3 has an invalid length. [ 209.894915][ T9744] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.1733'. [ 209.970147][ T53] Bluetooth: hci5: command tx timeout [ 210.295150][ T9628] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.487913][ T9704] chnl_net:caif_netlink_parms(): no params data found [ 210.707178][ T9765] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1738'. [ 210.723928][ T9766] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1738'. [ 210.745231][ T11] bridge_slave_1: left allmulticast mode [ 210.757629][ T11] bridge_slave_1: left promiscuous mode [ 210.776702][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.881068][ T11] bridge_slave_0: left allmulticast mode [ 210.887000][ T11] bridge_slave_0: left promiscuous mode [ 210.900046][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.321863][ T53] Bluetooth: hci6: command tx timeout [ 211.543962][ T11] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 211.776216][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.820739][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.839315][ T11] bond0 (unregistering): Released all slaves [ 212.001783][ T9800] netlink: 4068 bytes leftover after parsing attributes in process `syz.2.1749'. [ 212.040053][ T53] Bluetooth: hci5: command tx timeout [ 212.408375][ T9820] netlink: 'syz.2.1757': attribute type 11 has an invalid length. [ 212.423767][ T9820] netlink: 508 bytes leftover after parsing attributes in process `syz.2.1757'. [ 212.444016][ T9704] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.465925][ T9704] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.474372][ T9704] bridge_slave_0: entered allmulticast mode [ 212.490074][ T9704] bridge_slave_0: entered promiscuous mode [ 212.547211][ T9704] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.569255][ T9704] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.589964][ T9704] bridge_slave_1: entered allmulticast mode [ 212.616782][ T9704] bridge_slave_1: entered promiscuous mode [ 212.663253][ T9628] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 212.703329][ T9828] netlink: 'syz.4.1759': attribute type 13 has an invalid length. [ 212.712741][ T9828] netlink: 'syz.4.1759': attribute type 58 has an invalid length. [ 212.721369][ T9828] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1759'. [ 212.731183][ T9830] netlink: 4068 bytes leftover after parsing attributes in process `syz.2.1761'. [ 212.788505][ T9704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.811187][ T9628] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 212.826289][ T9628] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 212.859037][ T9704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.915855][ T9628] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 212.964155][ T11] hsr_slave_0: left promiscuous mode [ 212.972733][ T11] hsr_slave_1: left promiscuous mode [ 212.988656][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.017366][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.026049][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.040038][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.110474][ T11] veth1_macvtap: left promiscuous mode [ 213.116068][ T11] veth0_macvtap: left promiscuous mode [ 213.133477][ T11] veth1_vlan: left promiscuous mode [ 213.138872][ T11] veth0_vlan: left promiscuous mode [ 213.413340][ T53] Bluetooth: hci6: command tx timeout [ 214.136458][ T53] Bluetooth: hci5: command tx timeout [ 215.069907][ T11] team0 (unregistering): Port device team_slave_1 removed [ 215.155326][ T11] team0 (unregistering): Port device team_slave_0 removed [ 215.568543][ T53] Bluetooth: hci0: Malformed LE Event: 0x0b [ 216.187417][ T9903] netlink: 'syz.4.1786': attribute type 9 has an invalid length. [ 216.195792][ T9903] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1786'. [ 216.210057][ T53] Bluetooth: hci5: command tx timeout [ 216.442342][ T9704] team0: Port device team_slave_0 added [ 216.508617][ T9704] team0: Port device team_slave_1 added [ 216.707984][ T9919] netlink: 'syz.4.1793': attribute type 3 has an invalid length. [ 216.716061][ T9919] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.1793'. [ 217.060534][ T9704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.107820][ T9704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.140692][ T9704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.180451][ T9704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.189443][ T9704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.225558][ T9704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.398613][ T9704] hsr_slave_0: entered promiscuous mode [ 217.423092][ T9704] hsr_slave_1: entered promiscuous mode [ 217.439935][ T9704] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.455422][ T9704] Cannot create hsr debugfs directory [ 217.760631][ T9950] netlink: 8391 bytes leftover after parsing attributes in process `syz.0.1802'. [ 217.920946][ T9956] netlink: 'syz.4.1804': attribute type 3 has an invalid length. [ 217.928810][ T9956] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.1804'. [ 217.931766][ T9628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.093214][ T9628] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.143070][ T930] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.150313][ T930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.198429][ T5147] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.205605][ T5147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.837674][ T9704] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 218.855486][ T9704] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 218.888883][ T9704] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 218.916383][ T9704] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 218.948180][ T9628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.085010][ T9628] veth0_vlan: entered promiscuous mode [ 219.137327][ T9628] veth1_vlan: entered promiscuous mode [ 219.267740][ T9628] veth0_macvtap: entered promiscuous mode [ 219.304001][ T9628] veth1_macvtap: entered promiscuous mode [ 219.346336][ T9704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.407241][ T9704] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.442223][ T9628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.479770][ T9628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.510098][ T9628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.523932][ T9628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.537589][ T9628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.548496][ T9628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.558820][ T9628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.571115][ T9628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.582598][ T9628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.593823][ T9628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.606199][ T9628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.625845][ T5144] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.633275][ T5144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.716340][ T5144] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.723822][ T5144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.749508][ T9628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.771011][ T9628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.798290][T10019] netlink: 'syz.4.1823': attribute type 3 has an invalid length. [ 219.799585][ T9628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.815741][T10019] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.1823'. [ 219.835273][ T9628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.847321][ T9628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.858079][ T9628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.868345][ T9628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.883951][ T9628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.894519][ T9628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.912130][ T9628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.933513][ T9628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.966498][ T9628] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.980049][ T9628] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.997926][ T9628] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.013321][ T9628] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.105441][T10031] netlink: 'syz.0.1825': attribute type 29 has an invalid length. [ 220.126091][T10031] netlink: 'syz.0.1825': attribute type 29 has an invalid length. [ 220.155347][T10031] netlink: 'syz.0.1825': attribute type 29 has an invalid length. [ 220.209655][T10031] netlink: 'syz.0.1825': attribute type 29 has an invalid length. [ 220.375965][ T2481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.388355][ T9704] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 220.394261][ T2481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.543422][T10041] netlink: 'syz.0.1827': attribute type 10 has an invalid length. [ 220.556247][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.573765][T10041] netlink: 212412 bytes leftover after parsing attributes in process `syz.0.1827'. [ 220.586736][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.595376][T10041] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 220.650967][T10046] netlink: 11623 bytes leftover after parsing attributes in process `syz.4.1828'. [ 220.867898][ T9704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.043738][ T9704] veth0_vlan: entered promiscuous mode [ 221.094174][ T9704] veth1_vlan: entered promiscuous mode [ 221.170795][ T9704] veth0_macvtap: entered promiscuous mode [ 221.220719][ T9704] veth1_macvtap: entered promiscuous mode [ 221.291559][ T9704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.329870][ T9704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.348522][ T9704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.380803][ T9704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.413916][ T9704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.442205][ T9704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.478333][ T9704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.504713][ T9704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.528044][ T9704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.553321][ T9704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.577914][ T9704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.607557][ T9704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.649058][ T9704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.722873][T10073] netlink: 'syz.4.1834': attribute type 15 has an invalid length. [ 221.778866][T10073] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1834'. [ 221.804013][T10078] netlink: 'syz.0.1836': attribute type 12 has an invalid length. [ 221.826629][T10078] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1836'. [ 221.856476][ T9704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.876228][ T9704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.909844][ T9704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.929783][ T9704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.947306][ T9704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.966129][ T9704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.985031][ T9704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.004925][ T9704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.017641][ T9704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.034526][ T9704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.050518][ T9704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.071816][ T9704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.091010][ T9704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.139180][ T9704] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.156694][ T9704] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.175721][ T9704] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.198942][ T9704] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.664750][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.695896][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.741988][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.755462][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.013803][T10126] netlink: 'syz.0.1848': attribute type 10 has an invalid length. [ 223.052076][T10126] netlink: 212412 bytes leftover after parsing attributes in process `syz.0.1848'. [ 223.076481][T10126] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 223.095069][T10128] netlink: 'syz.4.1849': attribute type 21 has an invalid length. [ 223.105032][T10128] netlink: 'syz.4.1849': attribute type 3 has an invalid length. [ 223.134388][T10128] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1849'. [ 223.728843][T10156] netlink: 'syz.4.1863': attribute type 29 has an invalid length. [ 223.760191][T10156] netlink: 'syz.4.1863': attribute type 29 has an invalid length. [ 223.783472][T10156] netlink: 'syz.4.1863': attribute type 29 has an invalid length. [ 223.818505][T10156] netlink: 'syz.4.1863': attribute type 29 has an invalid length. [ 223.846752][T10165] netlink: 'syz.0.1867': attribute type 1 has an invalid length. [ 223.853098][T10163] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1866'. [ 223.875838][T10165] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.1867'. [ 224.457751][T10191] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.1879'. [ 224.632148][T10203] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1885'. [ 224.653365][T10203] team0: Port device virt_wifi0 added [ 224.710626][T10205] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1886'. [ 225.350226][T10235] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1900'. [ 225.972833][T10273] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.1917'. [ 226.588926][T10302] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1930'. [ 226.890409][T10315] validate_nla: 18 callbacks suppressed [ 226.890429][T10315] netlink: 'syz.1.1937': attribute type 1 has an invalid length. [ 226.941844][T10315] netlink: 'syz.1.1937': attribute type 1 has an invalid length. [ 226.993323][T10313] netlink: 'syz.4.1936': attribute type 3 has an invalid length. [ 227.328829][ T4493] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 227.347003][ T4493] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 227.370037][ T4493] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 227.395274][ T4493] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 227.407968][ T4493] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 227.418021][ T4493] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 227.710169][T10350] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 227.746785][T10350] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 227.973190][T10332] chnl_net:caif_netlink_parms(): no params data found [ 228.513345][T10362] netlink: 'syz.4.1952': attribute type 15 has an invalid length. [ 228.557515][T10362] __nla_validate_parse: 4 callbacks suppressed [ 228.557530][T10362] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1952'. [ 228.587854][T10369] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1955'. [ 228.606537][T10332] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.624852][T10332] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.666291][T10332] bridge_slave_0: entered allmulticast mode [ 228.689042][T10332] bridge_slave_0: entered promiscuous mode [ 228.742997][T10332] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.780510][T10332] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.820672][T10332] bridge_slave_1: entered allmulticast mode [ 228.885721][T10332] bridge_slave_1: entered promiscuous mode [ 228.988928][T10332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.033530][T10332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.215988][T10332] team0: Port device team_slave_0 added [ 229.249854][T10383] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 229.257381][T10383] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 229.286981][T10332] team0: Port device team_slave_1 added [ 229.313281][T10386] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1963'. [ 229.356842][T10386] openvswitch: netlink: ufid size 3079 bytes exceeds the range (1, 16) [ 229.403940][T10386] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 229.432020][T10332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.462688][T10332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.489410][ T4493] Bluetooth: hci7: command tx timeout [ 229.529752][T10332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.618511][T10332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.648822][T10332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.705503][T10332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.747821][T10401] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1971'. [ 229.900679][T10414] netlink: 'syz.3.1976': attribute type 3 has an invalid length. [ 229.906932][T10332] hsr_slave_0: entered promiscuous mode [ 229.918739][T10414] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1976'. [ 229.940772][T10332] hsr_slave_1: entered promiscuous mode [ 229.961740][T10332] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.969344][T10332] Cannot create hsr debugfs directory [ 230.162392][T10427] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1983'. [ 230.191799][T10427] openvswitch: netlink: ufid size 3079 bytes exceeds the range (1, 16) [ 230.220713][T10427] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 230.495389][T10442] netlink: 'syz.0.1991': attribute type 3 has an invalid length. [ 230.530075][T10442] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1991'. [ 230.649492][T10332] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.685827][T10449] netlink: 191416 bytes leftover after parsing attributes in process `syz.3.1994'. [ 230.702964][T10449] netlink: zone id is out of range [ 230.708405][T10449] netlink: zone id is out of range [ 230.723322][T10449] netlink: zone id is out of range [ 230.731844][T10449] netlink: zone id is out of range [ 230.738317][T10449] netlink: zone id is out of range [ 230.759080][T10449] netlink: zone id is out of range [ 230.863803][T10459] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1997'. [ 230.886901][T10332] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.083935][T10332] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.109589][T10470] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2001'. [ 231.248598][T10332] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.572847][ T4493] Bluetooth: hci7: command tx timeout [ 231.632325][T10332] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 231.691803][T10332] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 231.714736][T10332] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 231.753491][T10332] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 232.067910][T10332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.221918][T10332] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.273771][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.281004][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.434180][ T5145] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.441451][ T5145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.063646][T10332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.177969][T10332] veth0_vlan: entered promiscuous mode [ 233.207228][T10332] veth1_vlan: entered promiscuous mode [ 233.326978][T10332] veth0_macvtap: entered promiscuous mode [ 233.344885][T10332] veth1_macvtap: entered promiscuous mode [ 233.384330][T10332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.399254][T10332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.440125][T10332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.459683][T10332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.472367][T10332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.486171][T10332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.497369][T10332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.510291][T10332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.522183][T10332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.535117][T10332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.545376][T10332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.557431][T10332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.569417][T10332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.581396][T10332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.593565][T10332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.617319][T10332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.640152][ T4493] Bluetooth: hci7: command tx timeout [ 233.672763][T10332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.682895][T10332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.693532][T10332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.703658][T10332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.714714][T10332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.738039][T10332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.763209][T10332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.783033][T10332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.819923][T10332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.849762][T10332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.874759][T10332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.894424][T10332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.954969][T10332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.989353][T10332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.008563][T10332] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.025995][T10332] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.038854][T10332] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.072994][T10332] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.491409][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.499274][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.650180][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.670881][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.720200][ T4493] Bluetooth: hci7: command tx timeout [ 235.784377][T10619] netlink: 'syz.3.2067': attribute type 64 has an invalid length. [ 235.800081][T10619] __nla_validate_parse: 8 callbacks suppressed [ 235.800100][T10619] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2067'. [ 236.961476][T10649] netlink: 'syz.4.2081': attribute type 64 has an invalid length. [ 236.972096][T10649] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2081'. [ 237.173914][T10658] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.2085'. [ 237.556057][T10671] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2092'. [ 239.491876][T10713] netlink: 'syz.2.2109': attribute type 64 has an invalid length. [ 239.532092][T10713] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2109'. [ 239.922156][T10734] netlink: 14556 bytes leftover after parsing attributes in process `syz.2.2118'. [ 240.124395][T10743] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2122'. [ 240.318169][T10750] netlink: 'syz.2.2124': attribute type 64 has an invalid length. [ 240.355265][T10750] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2124'. [ 240.821191][T10765] netlink: 14556 bytes leftover after parsing attributes in process `syz.3.2132'. [ 242.124614][T10797] netlink: 14556 bytes leftover after parsing attributes in process `syz.3.2145'. [ 242.506285][T10821] netlink: 'syz.2.2155': attribute type 30 has an invalid length. [ 243.008059][T10834] netlink: 14556 bytes leftover after parsing attributes in process `syz.3.2161'. [ 243.236616][T10842] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2165'. [ 243.302065][T10841] netlink: 'syz.3.2163': attribute type 10 has an invalid length. [ 243.333320][T10846] netlink: 'syz.0.2167': attribute type 30 has an invalid length. [ 243.479284][T10841] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 245.246176][T10892] netlink: 1038 bytes leftover after parsing attributes in process `syz.2.2187'. [ 246.133340][T10928] netlink: 155568 bytes leftover after parsing attributes in process `syz.2.2203'. [ 246.162331][T10928] net_ratelimit: 147 callbacks suppressed [ 246.162370][T10928] openvswitch: netlink: IP tunnel dst address not specified [ 246.412565][T10945] netlink: 'syz.0.2210': attribute type 21 has an invalid length. [ 246.433367][T10945] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2210'. [ 246.641183][T10957] netlink: 16222 bytes leftover after parsing attributes in process `syz.0.2214'. [ 246.897479][T10963] netlink: 155568 bytes leftover after parsing attributes in process `syz.0.2219'. [ 246.909292][T10965] netlink: 'syz.2.2220': attribute type 3 has an invalid length. [ 246.933308][T10965] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2220'. [ 246.947165][T10963] openvswitch: netlink: IP tunnel dst address not specified [ 247.317350][T10979] netlink: 'syz.3.2227': attribute type 3 has an invalid length. [ 247.335831][T10979] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2227'. [ 247.350593][T10984] netlink: 16222 bytes leftover after parsing attributes in process `syz.2.2229'. [ 247.538518][T10991] netlink: 'syz.2.2232': attribute type 3 has an invalid length. [ 247.552205][T10991] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2232'. [ 247.577500][T10995] ================================================================== [ 247.585612][T10995] BUG: KASAN: slab-use-after-free in cpu_map_enqueue+0xba/0x380 [ 247.593299][T10995] Read of size 8 at addr ffff88807bb7aa08 by task syz.3.2234/10995 [ 247.601206][T10995] [ 247.603553][T10995] CPU: 0 PID: 10995 Comm: syz.3.2234 Not tainted 6.10.0-rc6-syzkaller-00175-gf153831097b4 #0 [ 247.613719][T10995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 247.623808][T10995] Call Trace: [ 247.627093][T10995] [ 247.630024][T10995] dump_stack_lvl+0x241/0x360 [ 247.634829][T10995] ? __pfx_dump_stack_lvl+0x10/0x10 [ 247.640047][T10995] ? __pfx__printk+0x10/0x10 [ 247.644643][T10995] ? _printk+0xd5/0x120 [ 247.648911][T10995] ? __virt_addr_valid+0x183/0x520 [ 247.654044][T10995] ? __virt_addr_valid+0x183/0x520 [ 247.659426][T10995] print_report+0x169/0x550 [ 247.663933][T10995] ? __virt_addr_valid+0x183/0x520 [ 247.669049][T10995] ? __virt_addr_valid+0x183/0x520 [ 247.674365][T10995] ? __virt_addr_valid+0x44e/0x520 [ 247.679582][T10995] ? __phys_addr+0xba/0x170 [ 247.684102][T10995] ? cpu_map_enqueue+0xba/0x380 [ 247.689217][T10995] kasan_report+0x143/0x180 [ 247.693822][T10995] ? cpu_map_enqueue+0xba/0x380 [ 247.698684][T10995] cpu_map_enqueue+0xba/0x380 [ 247.703470][T10995] xdp_do_redirect_frame+0x35f/0x660 [ 247.708777][T10995] bpf_test_run_xdp_live+0xe60/0x1e60 [ 247.714162][T10995] ? bpf_test_run_xdp_live+0x724/0x1e60 [ 247.719709][T10995] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 247.725539][T10995] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 247.731451][T10995] ? __might_fault+0xaa/0x120 [ 247.736141][T10995] ? __might_fault+0xc6/0x120 [ 247.740838][T10995] ? _copy_from_user+0xa6/0xe0 [ 247.745594][T10995] ? bpf_test_init+0x15a/0x180 [ 247.750358][T10995] ? xdp_convert_md_to_buff+0x5b/0x330 [ 247.755818][T10995] bpf_prog_test_run_xdp+0x80e/0x11b0 [ 247.761279][T10995] ? __pfx_lock_release+0x10/0x10 [ 247.766305][T10995] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 247.772112][T10995] ? __fget_files+0x29/0x470 [ 247.776701][T10995] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 247.782506][T10995] bpf_prog_test_run+0x33a/0x3b0 [ 247.787529][T10995] __sys_bpf+0x48d/0x810 [ 247.791775][T10995] ? __pfx___sys_bpf+0x10/0x10 [ 247.796577][T10995] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 247.802561][T10995] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 247.808890][T10995] ? do_syscall_64+0x100/0x230 [ 247.813660][T10995] __x64_sys_bpf+0x7c/0x90 [ 247.818164][T10995] do_syscall_64+0xf3/0x230 [ 247.822684][T10995] ? clear_bhb_loop+0x35/0x90 [ 247.827374][T10995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.833285][T10995] RIP: 0033:0x7fdbdcb75bd9 [ 247.838141][T10995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.857767][T10995] RSP: 002b:00007fdbdd902048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 247.866179][T10995] RAX: ffffffffffffffda RBX: 00007fdbdcd03f60 RCX: 00007fdbdcb75bd9 [ 247.874176][T10995] RDX: 0000000000000050 RSI: 0000000020000240 RDI: 000000000000000a [ 247.882240][T10995] RBP: 00007fdbdcbe4e60 R08: 0000000000000000 R09: 0000000000000000 [ 247.890228][T10995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.898214][T10995] R13: 000000000000000b R14: 00007fdbdcd03f60 R15: 00007ffe03e36218 [ 247.906189][T10995] [ 247.909222][T10995] [ 247.911535][T10995] Allocated by task 10337: [ 247.915934][T10995] kasan_save_track+0x3f/0x80 [ 247.920611][T10995] __kasan_kmalloc+0x98/0xb0 [ 247.925191][T10995] __kmalloc_node_noprof+0x22a/0x440 [ 247.930475][T10995] bpf_map_kmalloc_node+0xd3/0x1c0 [ 247.935580][T10995] cpu_map_update_elem+0x29c/0x1010 [ 247.940867][T10995] bpf_map_update_value+0x1b1/0x540 [ 247.946078][T10995] map_update_elem+0x53a/0x6f0 [ 247.950931][T10995] __sys_bpf+0x76f/0x810 [ 247.955170][T10995] __x64_sys_bpf+0x7c/0x90 [ 247.959576][T10995] do_syscall_64+0xf3/0x230 [ 247.964081][T10995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.969988][T10995] [ 247.972314][T10995] Freed by task 12: [ 247.976285][T10995] kasan_save_track+0x3f/0x80 [ 247.980961][T10995] kasan_save_free_info+0x40/0x50 [ 247.985986][T10995] poison_slab_object+0xe0/0x150 [ 247.990918][T10995] __kasan_slab_free+0x37/0x60 [ 247.995670][T10995] kfree+0x149/0x360 [ 247.999571][T10995] __cpu_map_entry_free+0x6e8/0x770 [ 248.004773][T10995] cpu_map_free+0xc1/0x190 [ 248.009276][T10995] bpf_map_free_deferred+0xe6/0x110 [ 248.014484][T10995] process_scheduled_works+0xa2c/0x1830 [ 248.020021][T10995] worker_thread+0x86d/0xd50 [ 248.024606][T10995] kthread+0x2f0/0x390 [ 248.028687][T10995] ret_from_fork+0x4b/0x80 [ 248.033119][T10995] ret_from_fork_asm+0x1a/0x30 [ 248.037883][T10995] [ 248.040208][T10995] The buggy address belongs to the object at ffff88807bb7aa00 [ 248.040208][T10995] which belongs to the cache kmalloc-cg-256 of size 256 [ 248.054514][T10995] The buggy address is located 8 bytes inside of [ 248.054514][T10995] freed 256-byte region [ffff88807bb7aa00, ffff88807bb7ab00) [ 248.068214][T10995] [ 248.070542][T10995] The buggy address belongs to the physical page: [ 248.076970][T10995] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88807bb7ba00 pfn:0x7bb7a [ 248.087035][T10995] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 248.095543][T10995] memcg:ffff8880281dcb01 [ 248.099777][T10995] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 248.107668][T10995] page_type: 0xffffefff(slab) [ 248.112342][T10995] raw: 00fff00000000040 ffff88801504f000 ffffea0001870a00 0000000000000003 [ 248.120920][T10995] raw: ffff88807bb7ba00 0000000000100009 00000001ffffefff ffff8880281dcb01 [ 248.129496][T10995] head: 00fff00000000040 ffff88801504f000 ffffea0001870a00 0000000000000003 [ 248.143742][T10995] head: ffff88807bb7ba00 0000000000100009 00000001ffffefff ffff8880281dcb01 [ 248.152452][T10995] head: 00fff00000000001 ffffea0001eede81 ffffffffffffffff 0000000000000000 [ 248.161151][T10995] head: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000 [ 248.170335][T10995] page dumped because: kasan: bad access detected [ 248.176841][T10995] page_owner tracks the page as allocated [ 248.182547][T10995] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 8393, tgid 8392 (syz.0.1255), ts 156754353024, free_ts 156705968503 [ 248.205296][T10995] post_alloc_hook+0x1f3/0x230 [ 248.210091][T10995] get_page_from_freelist+0x2e4c/0x2f10 [ 248.215739][T10995] __alloc_pages_noprof+0x256/0x6c0 [ 248.220940][T10995] alloc_slab_page+0x5f/0x120 [ 248.225607][T10995] allocate_slab+0x5a/0x2f0 [ 248.230107][T10995] ___slab_alloc+0xcd1/0x14b0 [ 248.234948][T10995] __slab_alloc+0x58/0xa0 [ 248.239266][T10995] kmalloc_trace_noprof+0x1d5/0x2c0 [ 248.244470][T10995] prog_array_map_alloc+0x51/0x200 [ 248.249601][T10995] map_create+0x90c/0x1200 [ 248.254025][T10995] __sys_bpf+0x6d1/0x810 [ 248.258377][T10995] __x64_sys_bpf+0x7c/0x90 [ 248.262798][T10995] do_syscall_64+0xf3/0x230 [ 248.267296][T10995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.273184][T10995] page last free pid 5090 tgid 5090 stack trace: [ 248.279495][T10995] free_unref_page+0xd22/0xea0 [ 248.284258][T10995] __put_partials+0xeb/0x130 [ 248.288850][T10995] put_cpu_partial+0x17c/0x250 [ 248.293608][T10995] __slab_free+0x2ea/0x3d0 [ 248.298013][T10995] qlist_free_all+0x9e/0x140 [ 248.302679][T10995] kasan_quarantine_reduce+0x14f/0x170 [ 248.308142][T10995] __kasan_slab_alloc+0x23/0x80 [ 248.312984][T10995] __kmalloc_noprof+0x1a3/0x400 [ 248.317830][T10995] tomoyo_realpath_from_path+0xcf/0x5e0 [ 248.323367][T10995] tomoyo_path_perm+0x2b7/0x740 [ 248.328212][T10995] security_inode_getattr+0xd8/0x130 [ 248.333494][T10995] vfs_getattr+0x45/0x430 [ 248.337819][T10995] vfs_fstatat+0xd6/0x190 [ 248.342228][T10995] __x64_sys_newfstatat+0x125/0x1b0 [ 248.347518][T10995] do_syscall_64+0xf3/0x230 [ 248.352032][T10995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.358132][T10995] [ 248.360536][T10995] Memory state around the buggy address: [ 248.366176][T10995] ffff88807bb7a900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 248.374416][T10995] ffff88807bb7a980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 248.382731][T10995] >ffff88807bb7aa00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 248.390795][T10995] ^ [ 248.395379][T10995] ffff88807bb7aa80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 248.403603][T10995] ffff88807bb7ab00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 248.411740][T10995] ================================================================== [ 248.419906][T10995] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 248.427128][T10995] CPU: 0 PID: 10995 Comm: syz.3.2234 Not tainted 6.10.0-rc6-syzkaller-00175-gf153831097b4 #0 [ 248.437305][T10995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 248.447476][T10995] Call Trace: [ 248.450769][T10995] [ 248.453782][T10995] dump_stack_lvl+0x241/0x360 [ 248.458504][T10995] ? __pfx_dump_stack_lvl+0x10/0x10 [ 248.463745][T10995] ? __pfx__printk+0x10/0x10 [ 248.468361][T10995] ? vscnprintf+0x5d/0x90 [ 248.472713][T10995] panic+0x349/0x860 [ 248.476615][T10995] ? check_panic_on_warn+0x21/0xb0 [ 248.481746][T10995] ? __pfx_panic+0x10/0x10 [ 248.486239][T10995] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 248.492240][T10995] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 248.498169][T10995] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 248.504503][T10995] ? print_report+0x502/0x550 [ 248.509242][T10995] check_panic_on_warn+0x86/0xb0 [ 248.514182][T10995] ? cpu_map_enqueue+0xba/0x380 [ 248.519118][T10995] end_report+0x77/0x160 [ 248.523359][T10995] kasan_report+0x154/0x180 [ 248.527868][T10995] ? cpu_map_enqueue+0xba/0x380 [ 248.532719][T10995] cpu_map_enqueue+0xba/0x380 [ 248.537661][T10995] xdp_do_redirect_frame+0x35f/0x660 [ 248.542972][T10995] bpf_test_run_xdp_live+0xe60/0x1e60 [ 248.548372][T10995] ? bpf_test_run_xdp_live+0x724/0x1e60 [ 248.554031][T10995] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 248.559948][T10995] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 248.565842][T10995] ? __might_fault+0xaa/0x120 [ 248.570526][T10995] ? __might_fault+0xc6/0x120 [ 248.575242][T10995] ? _copy_from_user+0xa6/0xe0 [ 248.580111][T10995] ? bpf_test_init+0x15a/0x180 [ 248.585424][T10995] ? xdp_convert_md_to_buff+0x5b/0x330 [ 248.590887][T10995] bpf_prog_test_run_xdp+0x80e/0x11b0 [ 248.596347][T10995] ? __pfx_lock_release+0x10/0x10 [ 248.601377][T10995] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 248.607241][T10995] ? __fget_files+0x29/0x470 [ 248.611864][T10995] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 248.617683][T10995] bpf_prog_test_run+0x33a/0x3b0 [ 248.622631][T10995] __sys_bpf+0x48d/0x810 [ 248.626876][T10995] ? __pfx___sys_bpf+0x10/0x10 [ 248.631743][T10995] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 248.637744][T10995] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 248.644067][T10995] ? do_syscall_64+0x100/0x230 [ 248.648830][T10995] __x64_sys_bpf+0x7c/0x90 [ 248.653334][T10995] do_syscall_64+0xf3/0x230 [ 248.657919][T10995] ? clear_bhb_loop+0x35/0x90 [ 248.662595][T10995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.668496][T10995] RIP: 0033:0x7fdbdcb75bd9 [ 248.672921][T10995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.692536][T10995] RSP: 002b:00007fdbdd902048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 248.700950][T10995] RAX: ffffffffffffffda RBX: 00007fdbdcd03f60 RCX: 00007fdbdcb75bd9 [ 248.708912][T10995] RDX: 0000000000000050 RSI: 0000000020000240 RDI: 000000000000000a [ 248.716881][T10995] RBP: 00007fdbdcbe4e60 R08: 0000000000000000 R09: 0000000000000000 [ 248.724848][T10995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.732826][T10995] R13: 000000000000000b R14: 00007fdbdcd03f60 R15: 00007ffe03e36218 [ 248.741062][T10995] [ 248.744193][T10995] Kernel Offset: disabled [ 248.748508][T10995] Rebooting in 86400 seconds..