last executing test programs: 6m40.590616783s ago: executing program 1 (id=221): bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000500)=@base={0x15, 0x8, 0x4, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) 6m40.479579396s ago: executing program 1 (id=222): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x7, &(0x7f0000000580)=ANY=[@ANYBLOB="b700000000000000bf160000000000007961a800000000001501020000000000850000008c000000b70000000100000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000680)="0000e5ffffffffffffff00000000", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6m39.608646628s ago: executing program 1 (id=223): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000006440)={0xe, 0x4, &(0x7f0000006500)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000006540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) 6m39.53647369s ago: executing program 1 (id=224): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x0, 0x39, 0x0, 0x2, 0xf}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00000004000000040000000e"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000200), &(0x7f0000000240)=""/10, 0x2}, 0x20) 6m39.430405403s ago: executing program 1 (id=225): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x9, 0x3, &(0x7f0000000600)=@framed, &(0x7f0000000640)='syzkaller\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r0, 0x0, 0x0}, 0x10) 6m39.398261514s ago: executing program 1 (id=226): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000420000000600000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) 6m24.282169101s ago: executing program 32 (id=226): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000420000000600000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) 7.461808229s ago: executing program 0 (id=3125): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x10, 0x4, &(0x7f0000001980)=ANY=[@ANYBLOB], &(0x7f00000019c0)='GPL\x00', 0x2, 0xc3, &(0x7f0000001a00)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000001b00)={&(0x7f0000001b40)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001bc0)={0xe, 0x4, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000001e00)='GPL\x00', 0x4, 0xfd90, &(0x7f0000001e40)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000001f40), 0x366, 0x10, &(0x7f0000001f80), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000002000)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002040)={{r3}, &(0x7f0000002080), &(0x7f00000020c0)=r0}, 0x20) recvmsg$kcm(r1, &(0x7f0000002100)={0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000002180)=""/175, 0xaf}], 0x1}, 0x100b6) close(r3) 7.086833799s ago: executing program 0 (id=3128): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000005d79033d0466aa52000000000000003bd47fb453c756b29dd5fb6367e62bb9c5c639085bacb0eccf1cb98a511dfc63929b9d1e808b4667f51eb80661261cf3bdebe0355d68c0a9efc19c89", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x6, 0x13, &(0x7f00000017c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000001880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000018c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001b80)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001bc0)={{r2}, 0x0, &(0x7f0000001c00)=r1}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001ec0)={0xe, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000002080), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001680)={0xffffffffffffffff, 0xe0, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x10, &(0x7f0000001280), 0x0, 0x0, 0x1d, 0x8, 0x0, 0x0}}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00000016c0)=r3) 4.856641945s ago: executing program 2 (id=3131): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x66, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x6, 0x5, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000000}, 0x0, 0xc8, 0xffff, 0x7, 0xf9, 0x0, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000c40)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81bfa82c00fe08000e40000200875a65969ff57b00ff020000000000000000000000000001f0786379"], 0xfdef) 4.855742865s ago: executing program 0 (id=3138): syz_open_procfs$namespace(0x0, &(0x7f0000001600)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x16, 0xb, &(0x7f0000001740)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f00000017c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000001800)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x1b) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000880), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000008c0)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000940)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000980)={'syzkaller0\x00', @multicast}) write$cgroup_devices(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB="1e030600bc5cb6012887636086", @ANYRESDEC], 0xffdd) 4.611640102s ago: executing program 2 (id=3134): r0 = perf_event_open(&(0x7f0000000a80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x10, 0x487, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa5ba, 0x1, @perf_config_ext={0xa, 0x7}, 0x0, 0x200, 0x6, 0x1, 0x7, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x20000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000b00)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1002000000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x2000, 0x0, 0xc2ba, 0x3, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0xb) 4.386784558s ago: executing program 2 (id=3136): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000004000000040000000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x9, &(0x7f0000000840)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff8, 0xfffffffe}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x0, 0xe, 0x0, &(0x7f0000000980)='\x00'/14, 0x0, 0xfeff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.963728588s ago: executing program 4 (id=3140): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) 3.822227052s ago: executing program 4 (id=3141): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x101140, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, 0x0) 3.666075396s ago: executing program 2 (id=3142): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000592fa304749ff79003328991761180000", @ANYRES32, @ANYBLOB="0000000000000000150802000200000018110000", @ANYRES32, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0xfea7, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x567, 0x6}, 0xc634, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x2, 0x0, 0x0) 3.541904939s ago: executing program 2 (id=3143): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000010000000000000000000000711811000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.434883832s ago: executing program 2 (id=3144): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) 2.065516767s ago: executing program 3 (id=3145): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1, 0x100004, 0xdf18, 0xe2a4, 0x1}, 0x50) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4040) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xf9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00') perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r0}, 0x38) 2.045672348s ago: executing program 4 (id=3146): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000007b0000001801000000646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xdf}, 0x266, 0x400000, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000140)={0x4, 0x80, 0xc8, 0x6, 0x6, 0xd, 0x0, 0x7, 0x8881, 0x9, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000000), 0xbaf846cd620ca11}, 0x11d7, 0xffffffffffffffff, 0x7fff, 0x5, 0x7f, 0x10000, 0x9, 0x0, 0x9, 0x0, 0x6}) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000040)={'veth0_vlan\x00', @random="0100fe2010ff"}) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0xd7, 0x0, 0x0, 0x2101, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xa, 0x7}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x8, 0xff, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x8, r2, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1900", @ANYRES32], 0x48) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, 0x0, 0x0) 1.998776039s ago: executing program 0 (id=3147): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x10, 0x4, &(0x7f0000001980)=ANY=[@ANYBLOB="b400000000000000791048000000"], &(0x7f00000019c0)='GPL\x00', 0x2, 0xc3, &(0x7f0000001a00)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000001b00)={&(0x7f0000001b40)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001bc0)={0xe, 0x4, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000001e00)='GPL\x00', 0x4, 0xfd90, &(0x7f0000001e40)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000001f40), 0x366, 0x10, &(0x7f0000001f80), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000002000)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002040)={{r3}, &(0x7f0000002080), &(0x7f00000020c0)=r0}, 0x20) recvmsg$kcm(r1, &(0x7f0000002100)={0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000002180)=""/175, 0xaf}], 0x1}, 0x100b6) close(r3) 1.611614749s ago: executing program 3 (id=3148): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000300)=0x20000, &(0x7f0000000340)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r4}, &(0x7f0000000480)=0x2000000, &(0x7f00000004c0)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600)={r2, &(0x7f0000000780)}, 0x20) 1.611486599s ago: executing program 4 (id=3149): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f00000000c0)=0x80000001) 1.596593949s ago: executing program 0 (id=3150): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)=@base={0xa, 0x16, 0x1ff, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000740)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ff}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x79, 0x0, 0x0, 0x6400}, @initr0={0x18, 0x0, 0x0, 0x0, 0x11000000}, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @exit, @ldst={0x2, 0x2, 0x3, 0x0, 0x7, 0x100, 0x10}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x1}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0xfe3b, &(0x7f0000000800)=""/238}, 0x28) 1.468263672s ago: executing program 3 (id=3151): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000592fa304749ff79003328991761180000", @ANYRES32, @ANYBLOB="0000000000000000150802000200000018110000", @ANYRES32, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0xfea7, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x567, 0x6}, 0xc634, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x2, 0x0, 0x0) 1.359737725s ago: executing program 0 (id=3152): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfe103, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x4, 0x8}, 0x2000, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff0}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff3}, @generic={0xb7, 0x4, 0x0, 0x0, 0x5}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.359589745s ago: executing program 4 (id=3153): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x120, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1d, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x8010743f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002a40)={0x20, 0x17, &(0x7f0000002b00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000000e000000bf09000000000000550901000074f6967d00000000000000180100002020709000000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f0000002bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xc1c34af2e521e80b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.291569767s ago: executing program 3 (id=3154): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 883.030017ms ago: executing program 3 (id=3155): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001280)=@base={0x9, 0x9, 0x8, 0x40, 0xc0, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001340)="b5d83b05a72346a7", &(0x7f0000001380), 0xba1c, r0}, 0x38) 839.706928ms ago: executing program 4 (id=3156): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x183081, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000600)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x1e3c00, 0x0) close(r2) socketpair(0x1, 0x1, 0x1, &(0x7f0000000680)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000006c0)={'syzkaller0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}) 0s ago: executing program 3 (id=3157): getpid() r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) kernel console output (not intermixed with test programs): scuous mode [ 344.278163][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.291113][ T5826] veth1_macvtap: entered promiscuous mode [ 344.332149][ T5823] veth0_vlan: entered promiscuous mode [ 344.356086][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.371894][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.402886][ T5823] veth1_vlan: entered promiscuous mode [ 344.426980][ T5826] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.436929][ T5826] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.446190][ T5826] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.457041][ T5826] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.495436][ T5820] veth0_macvtap: entered promiscuous mode [ 344.538147][ T5819] veth0_vlan: entered promiscuous mode [ 344.560240][ T5820] veth1_macvtap: entered promiscuous mode [ 344.582945][ T5819] veth1_vlan: entered promiscuous mode [ 344.607887][ T5823] veth0_macvtap: entered promiscuous mode [ 344.634163][ T5823] veth1_macvtap: entered promiscuous mode [ 344.646293][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.657729][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.669948][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.736230][ T5861] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.745151][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.760090][ T5861] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.765898][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.779785][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.793992][ T5820] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.802743][ T5820] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.814967][ T5820] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.824107][ T5820] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.850633][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.863174][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.873023][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.884754][ T5090] Bluetooth: hci0: command tx timeout [ 344.893743][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.905772][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.942927][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.959061][ T5090] Bluetooth: hci2: command tx timeout [ 344.965356][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.977631][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.988427][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.000808][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.032160][ T5861] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.040275][ T5861] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.060439][ T5823] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.069983][ T5823] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.078861][ T5823] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.089901][ T5823] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.104609][ T5090] Bluetooth: hci1: command tx timeout [ 345.105003][ T5825] Bluetooth: hci3: command tx timeout [ 345.125984][ T5819] veth0_macvtap: entered promiscuous mode [ 345.162412][ T5819] veth1_macvtap: entered promiscuous mode [ 345.268938][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.286733][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.298599][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.309357][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.319549][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.330395][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.356714][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.382482][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.391091][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.405824][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.413686][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.425516][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.436460][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.446687][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.457632][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.471880][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.498691][ T5819] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.515386][ T5819] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.525509][ T5819] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.535491][ T5819] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.585913][ T5902] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.594403][ T5902] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.653301][ C1] hrtimer: interrupt took 306371 ns [ 345.676074][ T5902] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.688267][ T5902] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.759309][ T5861] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.791575][ T5861] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.847824][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.869887][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.976990][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.990931][ T5917] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.6'. [ 346.014681][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.332397][ T5934] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 346.446429][ T5930] netlink: 'syz.1.7': attribute type 2 has an invalid length. [ 346.581693][ T5937] netlink: 'syz.1.8': attribute type 21 has an invalid length. [ 346.799888][ T5937] netlink: 'syz.1.8': attribute type 21 has an invalid length. [ 346.945634][ T5825] Bluetooth: hci0: command tx timeout [ 347.024386][ T5825] Bluetooth: hci2: command tx timeout [ 347.150099][ T5949] netlink: 'syz.3.10': attribute type 21 has an invalid length. [ 347.161620][ T5949] netlink: 14530 bytes leftover after parsing attributes in process `syz.3.10'. [ 347.186484][ T5825] Bluetooth: hci1: command tx timeout [ 347.186502][ T5090] Bluetooth: hci3: command tx timeout [ 347.695099][ T5964] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.13'. [ 349.727616][ T5957] syzkaller0: entered promiscuous mode [ 349.734596][ T5957] syzkaller0: entered allmulticast mode [ 349.744957][ T5971] netlink: 'syz.2.14': attribute type 10 has an invalid length. [ 349.769761][ T5971] netlink: 40 bytes leftover after parsing attributes in process `syz.2.14'. [ 349.783945][ T5971] ipvlan1: entered promiscuous mode [ 349.789264][ T5971] ipvlan1: entered allmulticast mode [ 349.809965][ T5971] veth0_vlan: entered allmulticast mode [ 349.830957][ T5971] bridge0: port 3(ipvlan1) entered blocking state [ 349.843670][ T5971] bridge0: port 3(ipvlan1) entered disabled state [ 349.861564][ T5971] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 351.240037][ T789] rxe_eth0 speed is unknown, defaulting to 1000 [ 351.293867][ T5976] netlink: 26 bytes leftover after parsing attributes in process `syz.0.15'. [ 352.369127][ T5986] delete_channel: no stack [ 353.337913][ T6069] syzkaller0: entered promiscuous mode [ 353.379582][ T6069] syzkaller0: entered allmulticast mode [ 355.919761][ T6154] syzkaller0: tun_chr_ioctl cmd 1074025672 [ 355.936174][ T6154] syzkaller0: ignored: set checksum enabled [ 360.329999][ T6318] Driver unsupported XDP return value 0 on prog (id 64) dev N/A, expect packet loss! [ 360.613253][ T6314] syzkaller1: tun_chr_ioctl cmd 35108 [ 362.702728][ T6427] syzkaller0: entered promiscuous mode [ 362.738169][ T6427] syzkaller0: entered allmulticast mode [ 366.653841][ T6531] syz_tun: mtu less than device minimum [ 368.978375][ T6589] rxe_eth0 speed is unknown, defaulting to 1000 [ 369.646938][ T6601] warning: `syz.3.280' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 372.320739][ T6635] syzkaller0: entered promiscuous mode [ 372.355012][ T6635] syzkaller0: entered allmulticast mode [ 372.392885][ T50] syzkaller0: tun_net_xmit 48 [ 374.559829][ T6648] syzkaller0: entered promiscuous mode [ 374.565485][ T6648] syzkaller0: entered allmulticast mode [ 376.346978][ T6664] syzkaller0: entered promiscuous mode [ 378.791737][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.798955][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.075671][ T6688] Q6\bY4: renamed from lo (while UP) [ 379.628019][ T6720] syzkaller0: entered promiscuous mode [ 379.638663][ T6720] syzkaller0: entered allmulticast mode [ 380.509836][ T5090] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 380.533610][ T5090] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 380.542189][ T5090] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 380.563354][ T5090] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 380.573707][ T5090] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 380.591817][ T5090] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 380.716692][ T6743] rxe_eth0 speed is unknown, defaulting to 1000 [ 381.130432][ T6749] rxe_eth0 speed is unknown, defaulting to 1000 [ 381.162611][ T5090] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 381.480199][ T6743] chnl_net:caif_netlink_parms(): no params data found [ 381.739691][ T6743] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.748915][ T6743] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.756822][ T6743] bridge_slave_0: entered allmulticast mode [ 381.764492][ T6743] bridge_slave_0: entered promiscuous mode [ 381.809872][ T6743] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.841269][ T6743] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.849942][ T6743] bridge_slave_1: entered allmulticast mode [ 381.864597][ T6743] bridge_slave_1: entered promiscuous mode [ 381.959986][ T6743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.973876][ T6743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.088250][ T6743] team0: Port device team_slave_0 added [ 382.131889][ T6743] team0: Port device team_slave_1 added [ 382.212277][ T6743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.221130][ T6743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.251873][ T6743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.372562][ T6743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.390742][ T6743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.417476][ T6743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.637387][ T5090] Bluetooth: hci4: command tx timeout [ 384.311086][ T6743] hsr_slave_0: entered promiscuous mode [ 384.323842][ T6743] hsr_slave_1: entered promiscuous mode [ 384.335173][ T6743] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 384.350634][ T6743] Cannot create hsr debugfs directory [ 384.484648][ T5090] Bluetooth: hci1: unexpected event 0x16 length: 151 > 6 [ 384.703212][ T5090] Bluetooth: hci4: command tx timeout [ 384.794518][ T6743] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 384.814167][ T6743] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 384.835519][ T6743] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 384.851991][ T6743] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 385.047477][ T6743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.099078][ T6743] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.129854][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.137110][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.212507][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.219770][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.928858][ T6743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.707377][ T5090] Bluetooth: hci0: unexpected event 0x10 length: 15 > 1 [ 386.708531][ T5825] Bluetooth: hci0: hardware error 0x00 [ 386.783565][ T5090] Bluetooth: hci4: command tx timeout [ 386.810338][ T6743] veth0_vlan: entered promiscuous mode [ 386.827020][ T6743] veth1_vlan: entered promiscuous mode [ 386.882356][ T6743] veth0_macvtap: entered promiscuous mode [ 386.937413][ T6743] veth1_macvtap: entered promiscuous mode [ 387.071913][ T6743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.103454][ T6743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.118318][ T6743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.129469][ T6743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.140537][ T6743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.157223][ T6743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.168687][ T6743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.187666][ T6743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.201379][ T6743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.227682][ T6743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.246474][ T6743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.256946][ T6743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.267766][ T6743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.280447][ T6743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.291134][ T6743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.301299][ T6743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.323502][ T6743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.335781][ T6743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.380491][ T6743] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.396027][ T6743] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.405328][ T6743] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.414343][ T6743] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.698577][ T5888] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.734112][ T5888] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.835530][ T5879] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.853181][ T5879] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.979879][ T6901] syz.2.392 uses obsolete (PF_INET,SOCK_PACKET) [ 388.736949][ T5090] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8 [ 388.784101][ T5825] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 388.844397][ T5825] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 388.863904][ T5825] Bluetooth: hci4: command tx timeout [ 390.135486][ T6973] rxe_eth0 speed is unknown, defaulting to 1000 [ 390.152359][ T6985] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 390.358731][ T6991] A6: renamed from team_slave_1 (while UP) [ 391.860945][ T50] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.995269][ T50] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.159743][ T50] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.277627][ T50] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.422291][ T7010] pimreg1: tun_chr_ioctl cmd 2147767507 [ 393.519205][ T5825] Bluetooth: hci4: unexpected event 0x1d length: 15 > 5 [ 395.387332][ T50] hsr_slave_0: left promiscuous mode [ 395.456696][ T50] hsr_slave_1: left promiscuous mode [ 395.501572][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 395.533223][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.582392][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.613154][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.633387][ T50] bridge_slave_1: left allmulticast mode [ 395.639125][ T50] bridge_slave_1: left promiscuous mode [ 395.683910][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.717673][ T50] bridge_slave_0: left allmulticast mode [ 395.729171][ T50] bridge_slave_0: left promiscuous mode [ 395.752575][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.892234][ T50] veth1_macvtap: left promiscuous mode [ 395.908916][ T50] veth0_macvtap: left promiscuous mode [ 395.936019][ T50] veth1_vlan: left promiscuous mode [ 395.955963][ T50] veth0_vlan: left promiscuous mode [ 397.247765][ T50] team0 (unregistering): Port device team_slave_1 removed [ 397.288779][ T50] team0 (unregistering): Port device team_slave_0 removed [ 397.334502][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 397.385857][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 397.692625][ T50] bond0 (unregistering): Released all slaves [ 397.812388][ T7148] tap0: tun_chr_ioctl cmd 1074025677 [ 397.817956][ T7148] tap0: linktype set to 823 [ 399.239912][ T7196] netlink: 'syz.4.498': attribute type 10 has an invalid length. [ 399.623489][ T7206] netlink: 132 bytes leftover after parsing attributes in process `syz.2.501'. [ 401.281964][ T5825] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 401.291449][ T5825] Bluetooth: hci1: Injecting HCI hardware error event [ 401.299740][ T5825] Bluetooth: hci1: hardware error 0x00 [ 401.794654][ T7254] netlink: 'syz.0.516': attribute type 27 has an invalid length. [ 401.972482][ T7254] bond0: (slave bond_slave_0): Releasing backup interface [ 402.543261][ T5090] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 402.551922][ T5090] Bluetooth: hci4: Injecting HCI hardware error event [ 402.560928][ T52] Bluetooth: hci4: hardware error 0x00 [ 402.824248][ T7292] netlink: 'syz.3.528': attribute type 4 has an invalid length. [ 402.841552][ T7292] netlink: 152 bytes leftover after parsing attributes in process `syz.3.528'. [ 402.871388][ T7292] .`: renamed from bond0 (while UP) [ 403.664482][ T5825] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 403.718758][ T7326] tap0: tun_chr_ioctl cmd 1074025677 [ 403.764072][ T7326] tap0: linktype set to 1 [ 403.935366][ T7334] netlink: 'syz.2.538': attribute type 39 has an invalid length. [ 404.623894][ T52] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 404.766696][ T7356] netlink: 'syz.0.545': attribute type 39 has an invalid length. [ 404.811068][ T7356] macvlan0: entered promiscuous mode [ 404.839036][ T7356] macvlan0: entered allmulticast mode [ 406.738604][ T7405] netlink: 'syz.4.561': attribute type 10 has an invalid length. [ 406.751048][ T7405] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.561'. [ 407.069784][ T7419] netlink: 'syz.0.568': attribute type 2 has an invalid length. [ 407.083784][ T7419] netlink: 'syz.0.568': attribute type 8 has an invalid length. [ 407.091608][ T7419] netlink: 132 bytes leftover after parsing attributes in process `syz.0.568'. [ 407.163359][ T7422] netlink: 60 bytes leftover after parsing attributes in process `syz.2.569'. [ 407.203270][ T7422] netlink: 60 bytes leftover after parsing attributes in process `syz.2.569'. [ 407.244161][ T7422] netlink: 60 bytes leftover after parsing attributes in process `syz.2.569'. [ 407.268427][ T7422] netlink: 60 bytes leftover after parsing attributes in process `syz.2.569'. [ 407.664929][ T7445] netlink: 'syz.3.574': attribute type 2 has an invalid length. [ 407.698926][ T7445] netlink: 164 bytes leftover after parsing attributes in process `syz.3.574'. [ 408.654688][ T7487] netlink: 'syz.4.591': attribute type 21 has an invalid length. [ 413.366024][ T7600] netlink: 'syz.3.636': attribute type 3 has an invalid length. [ 413.387567][ T7600] netlink: 'syz.3.636': attribute type 1 has an invalid length. [ 413.408038][ T7600] netlink: 128 bytes leftover after parsing attributes in process `syz.3.636'. [ 413.947152][ T7631] Zero length message leads to an empty skb [ 415.247697][ T7650] netlink: 'syz.2.650': attribute type 1 has an invalid length. [ 415.273504][ T7650] netlink: 'syz.2.650': attribute type 2 has an invalid length. [ 415.290236][ T7650] netlink: 11254 bytes leftover after parsing attributes in process `syz.2.650'. [ 415.451987][ T7667] netlink: 'syz.4.656': attribute type 10 has an invalid length. [ 415.581044][ T7667] veth0_vlan: left promiscuous mode [ 415.620342][ T7667] veth0_vlan: entered promiscuous mode [ 415.648899][ T7667] team0: Device veth0_vlan failed to register rx_handler [ 415.715532][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 416.159061][ T7679] netlink: 60 bytes leftover after parsing attributes in process `syz.2.662'. [ 416.607107][ T7679] netlink: 60 bytes leftover after parsing attributes in process `syz.2.662'. [ 416.630573][ T7680] netlink: 60 bytes leftover after parsing attributes in process `syz.2.662'. [ 416.664273][ T7667] syz.4.656 (7667) used greatest stack depth: 20456 bytes left [ 418.178859][ T7720] syzkaller0: entered promiscuous mode [ 418.193892][ T7720] syzkaller0: entered allmulticast mode [ 419.163564][ T7759] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 419.169640][ T7759] syzkaller1: linktype set to 6 [ 419.199107][ T7759] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 419.211127][ T7759] syzkaller1: linktype set to 774 [ 421.856182][ T7823] netlink: 132 bytes leftover after parsing attributes in process `syz.3.715'. [ 423.940300][ T7881] netlink: 132 bytes leftover after parsing attributes in process `syz.2.735'. [ 424.205943][ T7893] syzkaller0: entered promiscuous mode [ 424.238932][ T7893] syzkaller0: entered allmulticast mode [ 424.357180][ T7898] netlink: 168 bytes leftover after parsing attributes in process `syz.2.741'. [ 429.513540][ T8045] IPv6: Can't replace route, no match found [ 430.482414][ T8080] netlink: 'syz.2.798': attribute type 29 has an invalid length. [ 430.522887][ T8080] netlink: 'syz.2.798': attribute type 29 has an invalid length. [ 430.569596][ T8080] netlink: 'syz.2.798': attribute type 29 has an invalid length. [ 430.605990][ T8080] netlink: 'syz.2.798': attribute type 29 has an invalid length. [ 432.955378][ T8144] netlink: 'syz.2.827': attribute type 29 has an invalid length. [ 433.286938][ T8144] netlink: 'syz.2.827': attribute type 29 has an invalid length. [ 433.311179][ T8145] netlink: 'syz.2.827': attribute type 29 has an invalid length. [ 433.867845][ T8172] netlink: 132 bytes leftover after parsing attributes in process `syz.2.839'. [ 434.159964][ T8182] netlink: 14 bytes leftover after parsing attributes in process `syz.0.844'. [ 434.191096][ T8182] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 434.321265][ T8182] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 434.599289][ T8197] netlink: 132 bytes leftover after parsing attributes in process `syz.3.849'. [ 436.817761][ T8262] rxe_eth0 speed is unknown, defaulting to 1000 [ 440.240432][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.247054][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.330028][ T8381] netlink: 'syz.3.926': attribute type 1 has an invalid length. [ 443.626789][ T8389] netlink: 'syz.3.930': attribute type 29 has an invalid length. [ 443.635186][ T8389] netlink: 'syz.3.930': attribute type 29 has an invalid length. [ 443.644192][ T8389] netlink: 'syz.3.930': attribute type 29 has an invalid length. [ 443.652557][ T8389] netlink: 'syz.3.930': attribute type 29 has an invalid length. [ 444.224493][ T8410] netlink: 'syz.4.939': attribute type 10 has an invalid length. [ 444.232312][ T8410] netlink: 40 bytes leftover after parsing attributes in process `syz.4.939'. [ 445.593853][ T8474] netlink: 'syz.0.969': attribute type 10 has an invalid length. [ 445.657991][ T8474] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.863820][ T8474] bridge_slave_1 (unregistering): left allmulticast mode [ 445.894996][ T8474] bridge_slave_1 (unregistering): left promiscuous mode [ 445.903420][ T8474] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.229987][ T8489] netlink: 132 bytes leftover after parsing attributes in process `syz.3.976'. [ 447.062624][ T8523] netlink: 60 bytes leftover after parsing attributes in process `syz.0.992'. [ 448.891174][ T8523] netlink: 60 bytes leftover after parsing attributes in process `syz.0.992'. [ 449.390291][ T8555] netlink: 'syz.2.1006': attribute type 2 has an invalid length. [ 449.432805][ T8555] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1006'. [ 451.070659][ T8610] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.180241][ T8610] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.188315][ T8610] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.167252][ T8688] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1069'. [ 455.067780][ T8725] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1087'. [ 458.251483][ T8801] netlink: 'syz.2.1121': attribute type 21 has an invalid length. [ 458.300172][ T8805] netlink: 'syz.4.1122': attribute type 19 has an invalid length. [ 458.696596][ T8817] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.792062][ T5879] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.799324][ T5879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.212384][ T8836] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1136'. [ 459.574312][ T8852] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1144'. [ 459.607590][ T8854] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1146'. [ 459.620838][ T8854] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1146'. [ 459.632917][ T8854] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1146'. [ 459.648016][ T8854] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1146'. [ 460.089683][ T8876] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.1153'. [ 461.298505][ T8921] netlink: 'syz.4.1176': attribute type 29 has an invalid length. [ 461.319724][ T8921] netlink: 'syz.4.1176': attribute type 29 has an invalid length. [ 461.361091][ T8921] netlink: 'syz.4.1176': attribute type 29 has an invalid length. [ 461.391226][ T8921] netlink: 'syz.4.1176': attribute type 29 has an invalid length. [ 462.783967][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 466.050231][ T9037] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.188251][ T6024] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.195650][ T6024] bridge0: port 1(bridge_slave_0) entered listening state [ 468.356046][ T9084] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.532938][ T6023] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.540451][ T6023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.717327][ T9116] netlink: 'syz.4.1260': attribute type 2 has an invalid length. [ 469.725331][ T9116] netlink: 'syz.4.1260': attribute type 8 has an invalid length. [ 469.744016][ T9116] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1260'. [ 469.899282][ T9120] netlink: 'syz.2.1262': attribute type 2 has an invalid length. [ 469.911751][ T9120] netlink: 'syz.2.1262': attribute type 1 has an invalid length. [ 470.352551][ T9135] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1270'. [ 470.387915][ T9135] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1270'. [ 470.399964][ T9135] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1270'. [ 470.415516][ T9135] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1270'. [ 470.794545][ T9151] netlink: 'syz.3.1277': attribute type 3 has an invalid length. [ 470.822705][ T9151] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1277'. [ 471.986839][ T9186] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1292'. [ 471.996349][ T9186] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1292'. [ 472.007399][ T9186] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1292'. [ 472.016820][ T9185] netlink: 'syz.0.1291': attribute type 29 has an invalid length. [ 472.026021][ T9186] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1292'. [ 472.036173][ T9185] netlink: 'syz.0.1291': attribute type 29 has an invalid length. [ 472.060094][ T9185] netlink: 'syz.0.1291': attribute type 29 has an invalid length. [ 475.383315][ T9284] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1333'. [ 475.392414][ T9284] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1333'. [ 475.440315][ T9284] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1333'. [ 476.248357][ T9312] netlink: 'syz.3.1348': attribute type 28 has an invalid length. [ 477.289879][ T9353] bridge0: port 3(team0) entered blocking state [ 477.299256][ T9353] bridge0: port 3(team0) entered disabled state [ 477.310757][ T9353] team0: entered allmulticast mode [ 477.326163][ T9353] team_slave_0: entered allmulticast mode [ 477.351145][ T9353] team_slave_1: entered allmulticast mode [ 477.377738][ T9353] team0: entered promiscuous mode [ 477.391422][ T9353] team_slave_0: entered promiscuous mode [ 477.409860][ T9353] team_slave_1: entered promiscuous mode [ 477.440171][ T9353] bridge0: port 3(team0) entered blocking state [ 477.446941][ T9353] bridge0: port 3(team0) entered forwarding state [ 478.707102][ T9377] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1376'. [ 478.717170][ T9377] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1376'. [ 478.729572][ T9377] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1376'. [ 478.746542][ T9377] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1376'. [ 479.388264][ T9406] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.418291][ T9406] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.425541][ T9406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.000020][ T9411] rxe_eth0 speed is unknown, defaulting to 1000 [ 480.297050][ T9425] netlink: 'syz.4.1396': attribute type 10 has an invalid length. [ 480.317940][ T9425] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1396'. [ 480.340504][ T9425] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.360246][ T9425] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.633619][ T9425] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.645027][ T9425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.658661][ T9425] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.668364][ T9425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.822551][ T9425] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 480.867122][ T9425] syz.4.1396 (9425) used greatest stack depth: 19944 bytes left [ 481.834485][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 481.860070][ T9461] netlink: 'syz.3.1411': attribute type 1 has an invalid length. [ 481.890883][ T9461] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.1411'. [ 482.221629][ T9468] netlink: 'syz.3.1415': attribute type 29 has an invalid length. [ 482.237149][ T9468] netlink: 'syz.3.1415': attribute type 29 has an invalid length. [ 482.509293][ T9470] rxe_eth0 speed is unknown, defaulting to 1000 [ 483.702013][ T9506] netlink: 'syz.2.1430': attribute type 10 has an invalid length. [ 483.727436][ T9506] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1430'. [ 483.783751][ T9506] batman_adv: batadv0: Adding interface: virt_wifi0 [ 483.795715][ T9506] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.834293][ T9506] batman_adv: batadv0: Interface activated: virt_wifi0 [ 484.140914][ T9516] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.451485][ T9525] netlink: 'syz.3.1436': attribute type 10 has an invalid length. [ 484.632850][ T9525] team0: Device wg1 is of different type [ 485.334660][ T9534] netlink: 17861 bytes leftover after parsing attributes in process `syz.0.1440'. [ 485.363527][ T9534] netlink: 17861 bytes leftover after parsing attributes in process `syz.0.1440'. [ 487.863750][ T9612] netlink: 'syz.3.1452': attribute type 25 has an invalid length. [ 487.871979][ T9612] netlink: 'syz.3.1452': attribute type 9 has an invalid length. [ 488.025583][ T9612] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1452'. [ 488.726284][ T9614] rxe_eth0 speed is unknown, defaulting to 1000 [ 490.379535][ T9643] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1462'. [ 491.728669][ T9646] rxe_eth0 speed is unknown, defaulting to 1000 [ 493.197042][ T9656] netlink: 134780 bytes leftover after parsing attributes in process `syz.4.1464'. [ 494.087553][ T9676] netlink: 'syz.2.1473': attribute type 25 has an invalid length. [ 494.100925][ T9676] netlink: 'syz.2.1473': attribute type 28 has an invalid length. [ 495.556770][ T9711] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1488'. [ 495.566221][ T9711] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1488'. [ 495.576726][ T9711] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1488'. [ 497.201930][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.209472][ C1] bridge0: topology change detected, propagating [ 497.490445][ T9736] netlink: 'syz.4.1499': attribute type 25 has an invalid length. [ 497.515878][ T9736] netlink: 'syz.4.1499': attribute type 28 has an invalid length. [ 498.149552][ T9762] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1509'. [ 498.298286][ T9762] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 498.338930][ T9762] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 498.366113][ T9762] .` (unregistering): Released all slaves [ 498.394542][ T9766] netlink: 'syz.2.1512': attribute type 25 has an invalid length. [ 498.402837][ T9766] netlink: 'syz.2.1512': attribute type 28 has an invalid length. [ 500.758654][ T9837] netlink: 'syz.4.1544': attribute type 17 has an invalid length. [ 501.669896][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.676824][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.102720][ T9872] netlink: 'syz.3.1560': attribute type 10 has an invalid length. [ 502.116370][ T9872] syz_tun: entered promiscuous mode [ 502.266568][ T9878] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1562'. [ 503.007259][ T9902] netlink: 'syz.2.1573': attribute type 21 has an invalid length. [ 503.380177][ T9915] netlink: 'syz.3.1579': attribute type 4 has an invalid length. [ 503.486361][ T9919] netlink: 'syz.2.1581': attribute type 10 has an invalid length. [ 503.518159][ T9919] nlmon0: entered promiscuous mode [ 503.539374][ T9919] nlmon0: entered allmulticast mode [ 503.560783][ T9919] team0: Device nlmon0 is of different type [ 503.724148][ T9928] IPv6: Can't replace route, no match found [ 509.285991][T10005] netlink: 'syz.4.1615': attribute type 13 has an invalid length. [ 509.294088][T10007] netlink: 'syz.3.1616': attribute type 1 has an invalid length. [ 509.306942][T10007] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.1616'. [ 511.839330][T10074] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1644'. [ 511.866183][T10074] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 511.927981][T10074] syz.3.1644 (10074) used greatest stack depth: 19560 bytes left [ 512.828179][T10095] netlink: 'syz.4.1651': attribute type 17 has an invalid length. [ 512.839195][T10095] netlink: 'syz.4.1651': attribute type 16 has an invalid length. [ 512.847680][T10095] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1651'. [ 514.188427][T10119] netlink: 'syz.2.1663': attribute type 41 has an invalid length. [ 516.467872][T10124] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1665'. [ 521.136136][T10160] netlink: 'syz.4.1680': attribute type 25 has an invalid length. [ 521.145267][T10160] netlink: 'syz.4.1680': attribute type 28 has an invalid length. [ 523.102220][T10225] netlink: 'syz.2.1709': attribute type 25 has an invalid length. [ 523.118122][T10225] netlink: 'syz.2.1709': attribute type 28 has an invalid length. [ 524.269121][T10250] netlink: 'syz.4.1721': attribute type 25 has an invalid length. [ 524.298873][T10250] netlink: 'syz.4.1721': attribute type 28 has an invalid length. [ 525.143255][T10276] netlink: 'syz.4.1731': attribute type 10 has an invalid length. [ 525.921455][T10276] team0: Device wg1 is of different type [ 526.370045][T10297] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1739'. [ 528.682463][T10292] netlink: 'syz.4.1737': attribute type 25 has an invalid length. [ 528.690812][T10292] netlink: 'syz.4.1737': attribute type 28 has an invalid length. [ 529.279708][T10331] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1752'. [ 529.323567][T10331] hsr_slave_0: left promiscuous mode [ 529.353517][T10331] hsr_slave_1: left promiscuous mode [ 529.568881][T10333] netlink: 'syz.4.1753': attribute type 25 has an invalid length. [ 529.577573][T10333] netlink: 'syz.4.1753': attribute type 28 has an invalid length. [ 530.396029][T10367] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 530.402959][T10367] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 531.171611][T10385] netlink: 'syz.3.1776': attribute type 25 has an invalid length. [ 531.197186][T10385] netlink: 'syz.3.1776': attribute type 28 has an invalid length. [ 531.253169][T10387] ipvlan1: left promiscuous mode [ 531.264676][T10387] ipvlan1: left allmulticast mode [ 531.277029][T10387] veth0_vlan: left allmulticast mode [ 531.798315][T10412] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1790'. [ 531.819263][T10414] sit0: entered allmulticast mode [ 531.857511][T10414] sit0: entered promiscuous mode [ 535.406976][T10434] netlink: 'syz.2.1799': attribute type 25 has an invalid length. [ 535.431980][T10434] netlink: 'syz.2.1799': attribute type 28 has an invalid length. [ 535.583949][T10440] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1801'. [ 535.601206][T10440] bridge_slave_1: default FDB implementation only supports local addresses [ 535.784752][T10448] netlink: 'syz.0.1804': attribute type 10 has an invalid length. [ 535.836308][T10453] IPv6: NLM_F_CREATE should be specified when creating new route [ 536.056423][T10460] netlink: 'syz.4.1810': attribute type 25 has an invalid length. [ 536.073197][T10460] netlink: 'syz.4.1810': attribute type 28 has an invalid length. [ 536.218928][T10466] netlink: 'syz.4.1812': attribute type 29 has an invalid length. [ 536.241271][T10466] netlink: 'syz.4.1812': attribute type 29 has an invalid length. [ 536.262458][T10466] netlink: 'syz.4.1812': attribute type 29 has an invalid length. [ 536.388208][T10472] netlink: 'syz.4.1812': attribute type 29 has an invalid length. [ 536.418900][T10466] can: request_module (can-proto-0) failed. [ 536.676510][T10479] netlink: 'syz.0.1817': attribute type 10 has an invalid length. [ 536.907282][T10479] veth0_vlan: left promiscuous mode [ 536.968358][T10479] veth0_vlan: entered promiscuous mode [ 537.087247][T10479] team0: Device veth0_vlan failed to register rx_handler [ 540.121020][T10479] syz.0.1817 (10479) used greatest stack depth: 17768 bytes left [ 540.148043][T10488] bridge_slave_1: left allmulticast mode [ 540.158650][T10488] bridge_slave_1: left promiscuous mode [ 540.164669][T10488] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.176716][T10488] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.055063][T10541] bridge0: port 3(veth0_to_bridge) entered blocking state [ 541.082432][T10541] bridge0: port 3(veth0_to_bridge) entered disabled state [ 541.090424][T10541] veth0_to_bridge: entered allmulticast mode [ 541.099702][T10541] veth0_to_bridge: entered promiscuous mode [ 541.106109][T10541] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 541.128853][T10541] bridge0: port 3(veth0_to_bridge) entered blocking state [ 541.136189][T10541] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 542.010441][T10559] : renamed from bond_slave_1 [ 544.642018][T10562] netlink: 'syz.0.1850': attribute type 10 has an invalid length. [ 544.650093][T10562] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1850'. [ 544.667821][T10562] ipvlan1: entered promiscuous mode [ 544.703273][T10562] ipvlan1: entered allmulticast mode [ 544.724804][T10562] veth0_vlan: entered allmulticast mode [ 544.749661][T10562] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 545.184792][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 545.197842][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 545.210768][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 545.223556][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 545.236545][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 545.249295][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 545.262038][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 545.274800][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 545.287731][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 545.576088][T10585] netlink: 'syz.2.1857': attribute type 27 has an invalid length. [ 545.626183][T10585] netlink: 'syz.2.1857': attribute type 4 has an invalid length. [ 545.663487][T10585] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1857'. [ 547.821503][T10630] netlink: 'syz.3.1873': attribute type 16 has an invalid length. [ 547.843123][T10630] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1873'. [ 547.868712][T10630] veth1_macvtap: entered allmulticast mode [ 548.524353][T10640] : renamed from bond_slave_1 (while UP) [ 549.753097][ C1] net_ratelimit: 9110 callbacks suppressed [ 549.753115][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 549.771567][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 549.784082][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 549.796636][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 549.809153][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 549.821604][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 549.834088][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 549.846565][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 549.859033][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 549.871544][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 550.648983][T10682] : renamed from bond_slave_1 (while UP) [ 551.900890][T10703] netlink: 'syz.2.1903': attribute type 4 has an invalid length. [ 551.927539][T10703] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1903'. [ 554.763297][ C1] net_ratelimit: 12536 callbacks suppressed [ 554.763318][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 554.781847][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 554.794399][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 554.806954][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 554.819603][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 554.832114][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 554.844735][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 554.857233][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 554.869775][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 554.882302][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 558.520010][T10749] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1921'. [ 559.359550][T10763] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1925'. [ 559.773333][ C1] net_ratelimit: 12422 callbacks suppressed [ 559.773352][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 559.791910][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 559.804485][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 559.817052][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 559.829615][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 559.842163][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 559.854701][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 559.867429][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 559.880005][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 559.892563][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 560.783364][T10778] netlink: 'syz.3.1930': attribute type 10 has an invalid length. [ 560.999669][T10778] veth0_vlan: left promiscuous mode [ 561.041509][T10778] veth0_vlan: entered promiscuous mode [ 561.168382][T10778] team0: Device veth0_vlan failed to register rx_handler [ 563.203664][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.210252][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.783321][ C1] net_ratelimit: 11639 callbacks suppressed [ 564.783339][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 564.801864][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 564.814387][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 564.826908][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 564.839402][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 564.851892][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 564.864389][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 564.876903][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 564.889516][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 564.902095][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 565.013970][T10815] netlink: 'syz.2.1948': attribute type 27 has an invalid length. [ 565.022185][T10815] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1948'. [ 569.793398][ C1] net_ratelimit: 11674 callbacks suppressed [ 569.793419][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 569.811935][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 569.824534][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 569.837083][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 569.849649][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 569.862179][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 569.874780][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 569.887358][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 569.899897][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 569.912497][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 572.027721][T10897] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1978'. [ 573.259315][T10914] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1985'. [ 573.364404][T10913] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1985'. [ 573.826657][T10919] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1986'. [ 574.143751][T10924] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.1988'. [ 574.803097][ C1] net_ratelimit: 8557 callbacks suppressed [ 574.803115][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 574.821707][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 574.834481][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 574.847249][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 574.860019][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 574.872828][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 574.888530][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 574.901748][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 574.914795][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 574.927969][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 575.530908][T10919] hsr_slave_0: left promiscuous mode [ 575.683140][T10919] hsr_slave_1: left promiscuous mode [ 575.948824][T10929] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1991'. [ 576.149947][T10932] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1992'. [ 579.743338][T10961] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2004'. [ 579.789723][T10962] netlink: 'syz.0.2003': attribute type 29 has an invalid length. [ 579.813301][ C1] net_ratelimit: 6495 callbacks suppressed [ 579.813317][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 579.831787][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 579.844436][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 579.856995][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 579.869528][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 579.882106][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 579.894609][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 579.907193][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 579.919733][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 579.928442][T10961] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2004'. [ 579.933158][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 580.035049][T10962] netlink: 'syz.0.2003': attribute type 29 has an invalid length. [ 580.118593][T10961] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2004'. [ 582.482538][T10993] sit0: entered promiscuous mode [ 582.517290][T10993] sit0: entered allmulticast mode [ 583.759554][ T5825] Bluetooth: hci2: unexpected event 0x0f length: 15 > 4 [ 584.621480][T11024] sctp: [Deprecated]: syz.4.2027 (pid 11024) Use of struct sctp_assoc_value in delayed_ack socket option. [ 584.621480][T11024] Use struct sctp_sack_info instead [ 584.823035][ C1] net_ratelimit: 9640 callbacks suppressed [ 584.823052][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 584.841493][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 584.854032][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 584.866624][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 584.879190][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 584.891697][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 584.904221][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 584.916804][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 584.929371][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 584.941965][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 585.129978][T11031] netlink: 'syz.3.2030': attribute type 11 has an invalid length. [ 587.249612][T11056] netlink: 'syz.3.2041': attribute type 4 has an invalid length. [ 587.293249][T11056] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2041'. [ 587.565405][T11065] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2045'. [ 587.603233][T11065] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2045'. [ 587.638123][T11065] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2045'. [ 587.677150][T11065] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2045'. [ 587.800504][T11072] netlink: 'syz.3.2048': attribute type 29 has an invalid length. [ 587.824526][ T5825] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 587.834329][ T5825] Bluetooth: hci2: Injecting HCI hardware error event [ 587.842713][ T5825] Bluetooth: hci2: hardware error 0x00 [ 587.920889][T11072] netlink: 'syz.3.2048': attribute type 29 has an invalid length. [ 587.931099][T11075] netlink: 'syz.3.2048': attribute type 29 has an invalid length. [ 587.962399][T11072] netlink: 'syz.3.2048': attribute type 29 has an invalid length. [ 587.996597][T11072] netlink: 'syz.3.2048': attribute type 29 has an invalid length. [ 589.803201][T11099] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2057'. [ 589.833180][ C1] net_ratelimit: 10565 callbacks suppressed [ 589.833200][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 589.851812][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 589.864380][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 589.873956][T11099] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2057'. [ 589.877782][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 589.898026][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 589.910612][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 589.913565][ T5825] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 589.923204][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 589.942020][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 589.954602][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 589.967222][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:da:ec:36:38:92, vlan:0) [ 589.995174][T11101] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2057'. [ 590.064808][T11104] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2057'. [ 590.130636][T11102] netlink: 'syz.2.2059': attribute type 10 has an invalid length. [ 590.893204][T11102] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2059'. [ 590.933306][T11102] netlink: 'syz.2.2059': attribute type 10 has an invalid length. [ 593.776102][T11156] veth0_to_bridge: left allmulticast mode [ 593.782337][T11156] veth0_to_bridge: left promiscuous mode [ 593.974657][T11156] bridge0: port 3(veth0_to_bridge) entered disabled state [ 594.038525][T11156] bridge_slave_1: left allmulticast mode [ 594.058857][T11156] bridge_slave_1: left promiscuous mode [ 594.082070][T11156] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.168989][T11156] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.285183][T11156] bond0: (slave bridge0): Releasing backup interface [ 594.443292][T11146] rxe_eth0 speed is unknown, defaulting to 1000 [ 595.655564][T11184] netlink: 'syz.3.2093': attribute type 7 has an invalid length. [ 595.719984][T11184] veth1_macvtap: left promiscuous mode [ 595.736718][T11184] macsec0: entered promiscuous mode [ 595.805060][T11187] netlink: 'syz.4.2094': attribute type 10 has an invalid length. [ 595.932357][T11187] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 596.863962][T11208] netlink: 'syz.3.2103': attribute type 10 has an invalid length. [ 596.882462][T11208] __nla_validate_parse: 2 callbacks suppressed [ 596.882498][T11208] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2103'. [ 596.917600][T11208] veth0_vlan: left promiscuous mode [ 596.925856][T11208] veth0_vlan: entered promiscuous mode [ 596.934904][T11208] veth0_vlan: entered allmulticast mode [ 596.961077][T11214] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2105'. [ 596.988010][T11208] net_ratelimit: 6482 callbacks suppressed [ 596.988047][T11208] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 597.041066][T11214] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2105'. [ 597.052381][T11215] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2105'. [ 597.144199][T11214] netlink: 'syz.4.2105': attribute type 10 has an invalid length. [ 597.166203][T11214] macvlan0: entered promiscuous mode [ 597.171696][T11214] macvlan0: entered allmulticast mode [ 597.255544][T11214] veth1_vlan: entered allmulticast mode [ 597.298048][T11214] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 599.544368][T11278] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2133'. [ 599.578888][T11278] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2133'. [ 599.597815][T11277] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2133'. [ 599.647164][T11280] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 600.098833][T11291] netlink: 'syz.3.2139': attribute type 29 has an invalid length. [ 600.110968][T11291] netlink: 'syz.3.2139': attribute type 29 has an invalid length. [ 600.127662][T11291] netlink: 'syz.3.2139': attribute type 29 has an invalid length. [ 600.153692][T11291] netlink: 'syz.3.2139': attribute type 29 has an invalid length. [ 600.373176][T11301] netlink: 'syz.3.2139': attribute type 29 has an invalid length. [ 601.618876][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 601.629094][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 601.638130][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 601.656696][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 601.677134][ T52] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 601.684774][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 601.922139][T11328] rxe_eth0 speed is unknown, defaulting to 1000 [ 602.412340][T11355] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.2167'. [ 602.600149][T11328] chnl_net:caif_netlink_parms(): no params data found [ 602.706611][T11328] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.714355][T11328] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.721780][T11328] bridge_slave_0: entered allmulticast mode [ 602.729725][T11328] bridge_slave_0: entered promiscuous mode [ 602.739571][T11328] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.747091][T11328] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.754660][T11328] bridge_slave_1: entered allmulticast mode [ 602.762233][T11328] bridge_slave_1: entered promiscuous mode [ 602.859403][T11328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 602.889536][T11328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 603.013762][T11328] team0: Port device team_slave_0 added [ 603.022738][T11328] team0: Port device team_slave_1 added [ 603.127431][T11328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.136131][T11328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.162811][T11328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 603.197019][T11328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 603.219205][T11328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.292766][T11328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 603.318627][T11385] netlink: 'syz.3.2178': attribute type 4 has an invalid length. [ 603.340877][T11385] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2178'. [ 603.619262][T11328] hsr_slave_0: entered promiscuous mode [ 603.628248][T11328] hsr_slave_1: entered promiscuous mode [ 603.743482][ T5825] Bluetooth: hci3: command tx timeout [ 603.789641][T11399] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2184'. [ 603.833753][T11399] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2184'. [ 603.864875][T11399] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2184'. [ 603.985161][T11328] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.015724][T11399] netlink: 'syz.0.2184': attribute type 10 has an invalid length. [ 604.042169][T11406] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2187'. [ 604.049847][T11399] veth1_vlan: entered allmulticast mode [ 604.088444][T11399] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 604.097746][T11406] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2187'. [ 604.170442][T11328] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.189431][T11406] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2187'. [ 604.201471][T11407] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2187'. [ 604.292887][T11328] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.357845][T11411] netlink: 'syz.4.2189': attribute type 10 has an invalid length. [ 604.374949][T11411] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2189'. [ 604.399930][T11328] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.427797][T11411] netlink: 'syz.4.2189': attribute type 10 has an invalid length. [ 604.634482][T11328] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 604.670642][T11328] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 604.709006][T11328] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 604.726421][T11328] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 604.927267][T11328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 604.987516][T11428] netlink: 'syz.3.2197': attribute type 10 has an invalid length. [ 605.005793][T11428] macvlan0: entered promiscuous mode [ 605.011468][T11428] macvlan0: entered allmulticast mode [ 605.056156][T11328] 8021q: adding VLAN 0 to HW filter on device team0 [ 605.140644][ T9591] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.148029][ T9591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 605.177045][ T9591] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.184349][ T9591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 605.778495][T11443] delete_channel: no stack [ 605.826273][ T5825] Bluetooth: hci3: command tx timeout [ 605.951137][T11328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 606.113384][T11328] veth0_vlan: entered promiscuous mode [ 606.132150][T11328] veth1_vlan: entered promiscuous mode [ 606.207716][T11328] veth0_macvtap: entered promiscuous mode [ 606.231306][T11328] veth1_macvtap: entered promiscuous mode [ 606.275083][T11328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 606.307139][T11328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.356836][T11328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 606.389980][T11328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.424867][T11328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 606.461571][T11328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.498560][T11328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 606.549485][T11328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 606.571951][T11328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.583339][T11328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 606.599729][T11328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.610040][T11328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 606.630626][T11328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.645175][T11328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 606.686897][T11328] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.701763][T11328] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.711706][T11328] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.727017][T11328] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.903311][ T5825] Bluetooth: hci3: command tx timeout [ 609.359320][ T6023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 609.387033][ T6023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 609.454710][ T6023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 609.459250][T11482] mac80211_hwsim hwsim12 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 609.462599][ T6023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 609.799672][T11492] netlink: 'syz.2.2149': attribute type 2 has an invalid length. [ 609.818964][T11492] netlink: 'syz.2.2149': attribute type 8 has an invalid length. [ 609.843181][T11492] __nla_validate_parse: 17 callbacks suppressed [ 609.843220][T11492] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2149'. [ 609.882000][T11496] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2224'. [ 609.892088][T11497] netlink: 'syz.2.2149': attribute type 2 has an invalid length. [ 609.913756][T11497] netlink: 'syz.2.2149': attribute type 8 has an invalid length. [ 609.921578][T11497] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2149'. [ 609.944787][T11496] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2224'. [ 609.966622][T11501] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2224'. [ 609.982572][T11496] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2224'. [ 609.998545][ T5825] Bluetooth: hci3: command tx timeout [ 611.082271][T11528] netlink: 'syz.3.2237': attribute type 1 has an invalid length. [ 611.092849][T11528] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2237'. [ 612.064987][ T9586] wlan1: Trigger new scan to find an IBSS to join [ 613.296191][T11532] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2238'. [ 614.114001][T11532] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2238'. [ 614.203996][T11534] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2238'. [ 614.589143][T11540] netlink: 'syz.4.2241': attribute type 1 has an invalid length. [ 614.636563][T11542] netlink: 'syz.0.2242': attribute type 29 has an invalid length. [ 614.653736][T11542] netlink: 'syz.0.2242': attribute type 29 has an invalid length. [ 614.674623][T11542] netlink: 'syz.0.2242': attribute type 29 has an invalid length. [ 615.041866][T11546] __nla_validate_parse: 1 callbacks suppressed [ 615.041904][T11546] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.2244'. [ 615.119063][T11554] netlink: 'syz.3.2247': attribute type 10 has an invalid length. [ 615.134961][T11554] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2247'. [ 615.158213][T11554] batman_adv: batadv0: Adding interface: virt_wifi0 [ 615.171189][T11554] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 615.201671][T11557] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2249'. [ 615.235514][T11554] batman_adv: batadv0: Interface activated: virt_wifi0 [ 615.251851][T11557] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2249'. [ 615.281066][T11560] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2249'. [ 615.308873][T11557] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2249'. [ 615.504505][T11569] netlink: 'syz.3.2254': attribute type 27 has an invalid length. [ 615.527485][T11569] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2254'. [ 616.065576][ T9588] wlan1: Trigger new scan to find an IBSS to join [ 618.645995][ T9586] wlan1: Creating new IBSS network, BSSID c6:11:3a:9c:56:c1 [ 618.764219][T11607] netlink: 'syz.4.2266': attribute type 10 has an invalid length. [ 618.772126][T11607] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2266'. [ 618.839520][T11607] batman_adv: batadv0: Adding interface: virt_wifi0 [ 618.846650][T11607] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 618.873158][T11607] batman_adv: batadv0: Interface activated: virt_wifi0 [ 619.722378][T11637] netlink: 'syz.2.2280': attribute type 10 has an invalid length. [ 619.742735][T11637] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2280'. [ 619.771860][T11637] batman_adv: batadv0: Adding interface: virt_wifi0 [ 619.779582][T11637] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 619.812327][T11637] batman_adv: batadv0: Interface activated: virt_wifi0 [ 621.114738][T11675] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2299'. [ 621.132267][T11675] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2299'. [ 621.162001][T11675] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2299'. [ 621.359709][T11684] netlink: 'syz.0.2303': attribute type 4 has an invalid length. [ 624.259997][T11743] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2328'. [ 624.423173][T11743] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2328'. [ 624.451297][T11744] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2328'. [ 624.555906][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.562502][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.805365][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 624.817578][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 624.828546][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 624.843347][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 624.895039][ T52] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 624.903475][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 625.046423][T11745] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2328'. [ 625.180274][T11749] rxe_eth0 speed is unknown, defaulting to 1000 [ 625.540100][T11759] netlink: 'syz.4.2333': attribute type 21 has an invalid length. [ 625.560060][T11759] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2333'. [ 626.943518][ T52] Bluetooth: hci0: command tx timeout [ 627.530205][T11779] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2338'. [ 627.549713][T11779] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2338'. [ 627.604585][T11779] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2338'. [ 627.644468][T11779] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2338'. [ 627.680021][T11749] chnl_net:caif_netlink_parms(): no params data found [ 627.899997][T11749] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.923421][T11749] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.933634][T11749] bridge_slave_0: entered allmulticast mode [ 627.947536][T11749] bridge_slave_0: entered promiscuous mode [ 627.979303][T11749] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.997139][T11749] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.011021][T11749] bridge_slave_1: entered allmulticast mode [ 628.021795][T11749] bridge_slave_1: entered promiscuous mode [ 628.096439][T11749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 628.113903][T11749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 628.178554][T11749] team0: Port device team_slave_0 added [ 628.189134][T11749] team0: Port device team_slave_1 added [ 628.254921][T11749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 628.270839][T11749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 628.304503][T11749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 628.322001][T11749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 628.338141][T11749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 628.404404][T11749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 628.482272][T11749] hsr_slave_0: entered promiscuous mode [ 628.502749][T11749] hsr_slave_1: entered promiscuous mode [ 628.514085][T11749] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 628.522452][T11811] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2352'. [ 628.524863][T11749] Cannot create hsr debugfs directory [ 628.552651][T11811] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2352'. [ 628.589573][T11811] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2352'. [ 628.608729][T11811] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2352'. [ 628.961797][T11749] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.023351][ T52] Bluetooth: hci0: command tx timeout [ 629.139300][T11749] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.401674][T11749] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.561601][T11838] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2363'. [ 629.692541][T11749] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.770368][T11838] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2363'. [ 630.271237][T11749] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 630.302219][T11749] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 630.324516][T11749] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 630.350613][T11749] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 630.608429][T11749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 630.672426][T11749] 8021q: adding VLAN 0 to HW filter on device team0 [ 630.706531][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.713796][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 630.749620][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.756894][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 630.817731][T11749] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 630.828386][T11749] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 631.104772][ T52] Bluetooth: hci0: command tx timeout [ 631.335699][T11749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 631.446776][T11749] veth0_vlan: entered promiscuous mode [ 631.471403][T11749] veth1_vlan: entered promiscuous mode [ 631.594955][T11749] veth0_macvtap: entered promiscuous mode [ 631.620303][T11749] veth1_macvtap: entered promiscuous mode [ 631.696253][T11749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.727277][T11749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.764447][T11749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.824072][T11749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.835563][T11749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.861757][T11749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.874769][T11749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.885951][T11749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.898397][T11749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 631.946333][T11749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 631.975547][T11749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.006272][T11749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.043213][T11749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.068255][T11749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.092312][T11749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.110492][T11749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.128221][T11749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.165182][T11749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 632.197818][T11749] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.241118][T11749] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.273090][T11749] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.281876][T11749] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.540924][ T9593] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 632.590158][ T9593] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 632.616521][T11895] sit0: entered allmulticast mode [ 632.657688][T11895] sit0: entered promiscuous mode [ 633.055223][ T9593] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 633.076112][ T9593] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 633.131068][T11910] __nla_validate_parse: 10 callbacks suppressed [ 633.131085][T11910] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2390'. [ 633.164449][T11910] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2390'. [ 633.183280][ T52] Bluetooth: hci0: command tx timeout [ 633.189690][T11910] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2390'. [ 633.206822][T11910] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2390'. [ 633.575339][T11926] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2397'. [ 633.813989][T11939] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2402'. [ 633.824274][T11939] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2402'. [ 633.835877][T11939] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2402'. [ 633.846054][T11939] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2402'. [ 634.451029][T11967] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2414'. [ 634.592121][T11971] netlink: 'syz.0.2417': attribute type 10 has an invalid length. [ 634.615476][T11971] veth0_macvtap: left promiscuous mode [ 635.958455][T12012] team0: entered allmulticast mode [ 635.986168][T12012] team_slave_0: entered allmulticast mode [ 636.012446][T12012] team_slave_1: entered allmulticast mode [ 636.698360][ T52] Bluetooth: hci0: Malformed HCI Event: 0x22 [ 638.378225][T12074] __nla_validate_parse: 17 callbacks suppressed [ 638.378243][T12074] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2455'. [ 638.394356][T12074] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2455'. [ 638.421916][T12074] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2455'. [ 638.442489][T12076] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2457'. [ 638.466974][T12074] netlink: 13695 bytes leftover after parsing attributes in process `syz.0.2455'. [ 638.477231][T12076] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2457'. [ 638.490398][T12074] netlink: 'syz.0.2455': attribute type 10 has an invalid length. [ 638.507349][T12074] macvlan0: entered promiscuous mode [ 638.518206][T12074] macvlan0: entered allmulticast mode [ 638.569333][T12074] veth1_vlan: entered allmulticast mode [ 638.619994][T12074] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 638.631754][T12076] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2457'. [ 638.642039][T12080] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2457'. [ 638.666479][T12078] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 638.692526][T12078] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 638.756959][T12078] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 638.796592][T12078] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 638.828349][T12078] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 638.843307][T12078] batman_adv: batadv0: Removing interface: virt_wifi0 [ 639.111362][T12092] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2461'. [ 639.467900][T12104] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2470'. [ 641.213261][T12151] netlink: 'syz.2.2489': attribute type 10 has an invalid length. [ 641.252649][T12151] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 641.448864][T12160] netlink: 'syz.2.2493': attribute type 21 has an invalid length. [ 641.623025][T12160] netlink: 'syz.2.2493': attribute type 10 has an invalid length. [ 641.691663][T12160] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.707575][T12160] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.037174][T12160] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.048905][T12160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 642.065562][T12160] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.074065][T12160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 642.246281][T12160] bridge0: entered allmulticast mode [ 642.253093][T12160] team0: Port device bridge0 added [ 642.261388][T12177] netlink: 'syz.3.2497': attribute type 10 has an invalid length. [ 642.711818][T12194] netlink: 'syz.0.2506': attribute type 10 has an invalid length. [ 643.650110][T12210] : port 1(team0) entered blocking state [ 643.683751][T12210] : port 1(team0) entered disabled state [ 643.689788][T12210] team0: entered allmulticast mode [ 643.708890][T12210] team_slave_0: entered allmulticast mode [ 643.721976][T12210] A6: entered allmulticast mode [ 643.742007][T12210] team0: entered promiscuous mode [ 643.752506][T12210] team_slave_0: entered promiscuous mode [ 643.761033][T12210] A6: entered promiscuous mode [ 643.895945][T12216] __nla_validate_parse: 11 callbacks suppressed [ 643.895961][T12216] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2512'. [ 643.912272][T12216] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2512'. [ 643.933243][T12216] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2512'. [ 644.005244][T12216] netlink: 13695 bytes leftover after parsing attributes in process `syz.4.2512'. [ 644.045673][T12216] netlink: 'syz.4.2512': attribute type 10 has an invalid length. [ 644.072446][T12216] veth1_vlan: left allmulticast mode [ 644.137005][T12221] netlink: 'syz.0.2516': attribute type 41 has an invalid length. [ 644.191181][T12227] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2518'. [ 644.212594][T12227] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2518'. [ 644.261314][T12227] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2518'. [ 644.282822][T12227] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2518'. [ 644.557216][T12232] netlink: 'syz.0.2521': attribute type 10 has an invalid length. [ 644.621579][T12242] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2522'. [ 644.701739][T12232] team0: Device wg1 is of different type [ 644.757076][T12242] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2522'. [ 645.299678][T12258] syz.0.2530 (12258) used obsolete PPPIOCDETACH ioctl [ 645.697903][ T5825] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 645.708110][ T5825] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 645.717640][ T5825] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 645.726842][ T5825] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 645.735892][ T5825] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 645.744526][ T5825] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 645.784842][T12266] rxe_eth0 speed is unknown, defaulting to 1000 [ 646.504403][T12284] netlink: 'syz.0.2538': attribute type 4 has an invalid length. [ 646.520430][T12284] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 646.631910][T12266] chnl_net:caif_netlink_parms(): no params data found [ 646.828697][T12266] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.837635][T12266] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.846455][T12266] bridge_slave_0: entered allmulticast mode [ 646.854520][T12266] bridge_slave_0: entered promiscuous mode [ 646.869311][T12266] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.883216][T12266] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.890589][T12266] bridge_slave_1: entered allmulticast mode [ 646.908604][T12266] bridge_slave_1: entered promiscuous mode [ 646.942627][T12266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 646.969461][T12266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 647.009347][T12266] team0: Port device team_slave_0 added [ 647.022909][T12266] team0: Port device team_slave_1 added [ 647.083629][T12266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 647.090877][T12266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 647.120275][T12266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 647.134991][T12266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 647.142229][T12266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 647.176734][T12266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 647.242452][T12266] hsr_slave_0: entered promiscuous mode [ 647.249989][T12266] hsr_slave_1: entered promiscuous mode [ 647.263850][T12266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 647.272410][T12266] Cannot create hsr debugfs directory [ 647.525112][T12266] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.705935][T12266] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.823344][ T52] Bluetooth: hci1: command tx timeout [ 648.527459][T12266] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.726113][T12266] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.069492][T12266] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 649.089607][T12266] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 649.101644][T12336] netlink: 'syz.2.2558': attribute type 10 has an invalid length. [ 649.115389][T12336] __nla_validate_parse: 8 callbacks suppressed [ 649.115413][T12336] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2558'. [ 649.137153][T12336] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 649.159412][T12266] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 649.174860][T12266] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 649.913199][ T52] Bluetooth: hci1: command tx timeout [ 649.991552][T12266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 650.128399][T12266] 8021q: adding VLAN 0 to HW filter on device team0 [ 651.987170][ T52] Bluetooth: hci1: command tx timeout [ 653.970262][ T9593] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.977494][ T9593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 654.072571][ T52] Bluetooth: hci1: command tx timeout [ 654.256067][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.263310][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 654.441866][T12394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2578'. [ 654.452334][T12394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2578'. [ 654.469324][T12394] netlink: 33 bytes leftover after parsing attributes in process `syz.0.2578'. [ 654.479597][T12394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2578'. [ 654.499554][T12394] netlink: 33 bytes leftover after parsing attributes in process `syz.0.2578'. [ 654.690568][T12395] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2576'. [ 654.821381][T12398] netlink: 'syz.4.2576': attribute type 10 has an invalid length. [ 655.039170][T12398] geneve1: entered promiscuous mode [ 655.112385][T12398] geneve1: entered allmulticast mode [ 655.167511][T12398] team0: Port device geneve1 added [ 655.290597][ T9591] hsr_slave_0: left promiscuous mode [ 655.330723][ T9591] hsr_slave_1: left promiscuous mode [ 655.337385][ T9591] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 655.373054][ T9591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 655.444325][ T9591] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 655.451826][ T9591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 655.513955][ T9591] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 655.528247][ T9591] batman_adv: batadv0: Removing interface: virt_wifi0 [ 655.622530][ T9591] veth0_macvtap: left promiscuous mode [ 655.632514][ T9591] veth1_vlan: left promiscuous mode [ 656.828258][ T9591] team0 (unregistering): Port device team_slave_1 removed [ 656.922409][ T9591] team0 (unregistering): Port device team_slave_0 removed [ 657.671149][T12266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 657.913591][T12266] veth0_vlan: entered promiscuous mode [ 658.024806][T12266] veth1_vlan: entered promiscuous mode [ 658.216239][T12266] veth0_macvtap: entered promiscuous mode [ 658.297338][T12266] veth1_macvtap: entered promiscuous mode [ 658.458676][T12266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 658.523797][T12266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.584012][T12266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 658.603075][T12266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.623091][T12266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 658.646525][T12266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.659319][T12266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 658.671404][T12266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.703097][T12266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.730939][T12266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.751231][T12266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.761385][T12266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.785042][T12266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.799196][T12266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 658.822083][T12266] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.851334][T12266] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.870045][T12266] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.879120][T12266] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.890659][T12437] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2592'. [ 658.910980][T12437] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.931791][T12438] netlink: 'syz.2.2592': attribute type 10 has an invalid length. [ 658.972656][T12438] geneve1: entered allmulticast mode [ 658.984076][T12438] team0: Port device geneve1 added [ 659.215903][ T9593] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.224569][ T9593] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.284021][ T9593] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.291879][ T9593] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 660.115140][T12480] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2605'. [ 661.032624][T12480] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.228569][T12484] netlink: 'syz.3.2605': attribute type 10 has an invalid length. [ 661.298834][T12484] team0: Port device geneve1 added [ 661.478549][T12502] netlink: 'syz.0.2614': attribute type 10 has an invalid length. [ 661.509031][T12502] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 661.785683][T12512] netlink: 'syz.0.2618': attribute type 39 has an invalid length. [ 662.984246][T12535] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 662.991796][T12535] IPv6: NLM_F_CREATE should be set when creating new route [ 662.999672][T12535] IPv6: NLM_F_CREATE should be set when creating new route [ 663.007224][T12535] IPv6: NLM_F_CREATE should be set when creating new route [ 663.350950][T12550] vcan0: entered promiscuous mode [ 663.398878][T12550] vcan0: entered allmulticast mode [ 665.097582][T12586] vcan0: entered promiscuous mode [ 665.116908][T12586] vcan0: entered allmulticast mode [ 665.352595][T12592] netlink: 'syz.3.2651': attribute type 12 has an invalid length. [ 665.360661][T12592] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2651'. [ 665.508898][T12594] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 665.515530][T12594] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 665.564647][T12601] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2654'. [ 666.151637][T12623] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2665'. [ 666.360731][T12623] hsr_slave_0: left promiscuous mode [ 666.369759][T12623] hsr_slave_1: left promiscuous mode [ 667.667726][T12655] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2679'. [ 667.820167][T12667] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2685'. [ 669.151244][T12709] netlink: 'syz.4.2700': attribute type 3 has an invalid length. [ 669.167249][T12709] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2700'. [ 669.209227][T12711] netlink: 'syz.2.2704': attribute type 29 has an invalid length. [ 669.246692][T12711] netlink: 'syz.2.2704': attribute type 29 has an invalid length. [ 669.270069][T12711] netlink: 'syz.2.2704': attribute type 29 has an invalid length. [ 669.963748][T12732] netlink: 'syz.4.2712': attribute type 16 has an invalid length. [ 669.971658][T12732] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2712'. [ 670.043372][T12732] veth1_macvtap: entered allmulticast mode [ 670.940285][T12761] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2725'. [ 670.958602][T12761] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2725'. [ 671.019331][T12761] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2725'. [ 672.683881][T12792] netlink: 'syz.2.2738': attribute type 3 has an invalid length. [ 672.713251][T12792] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2738'. [ 672.871535][T12799] lo: entered promiscuous mode [ 673.061472][T12807] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2745'. [ 673.218315][T12807] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 673.251002][T12807] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 673.270767][T12807] bond0 (unregistering): Released all slaves [ 673.291489][T12814] netlink: 'syz.4.2748': attribute type 19 has an invalid length. [ 673.360964][T12820] : renamed from virt_wifi0 [ 673.690402][T12831] raw_sendmsg: syz.4.2754 forgot to set AF_INET. Fix it! [ 673.765110][T12831] netlink: 'syz.4.2754': attribute type 10 has an invalid length. [ 673.788223][T12831] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2754'. [ 673.868867][T12831] ipvlan1: entered promiscuous mode [ 673.893260][T12831] ipvlan1: entered allmulticast mode [ 673.911531][T12831] veth0_vlan: entered allmulticast mode [ 674.146946][T12831] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 674.761370][T12846] netlink: 'syz.3.2760': attribute type 10 has an invalid length. [ 674.778166][T12846] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2760'. [ 674.807104][T12848] netlink: 'syz.4.2761': attribute type 29 has an invalid length. [ 674.852665][T12848] netlink: 'syz.4.2761': attribute type 29 has an invalid length. [ 674.893588][T12851] netlink: 'syz.4.2761': attribute type 29 has an invalid length. [ 674.903719][T12848] netlink: 'syz.4.2761': attribute type 29 has an invalid length. [ 674.938957][T12848] netlink: 'syz.4.2761': attribute type 29 has an invalid length. [ 675.020719][T12855] netlink: 'syz.2.2764': attribute type 29 has an invalid length. [ 675.043636][T12855] netlink: 'syz.2.2764': attribute type 29 has an invalid length. [ 675.069841][T12855] netlink: 'syz.2.2764': attribute type 29 has an invalid length. [ 675.083702][T12855] netlink: 'syz.2.2764': attribute type 29 has an invalid length. [ 675.330843][T12861] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2767'. [ 676.160789][T12879] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2775'. [ 676.173095][T12879] veth1_to_team: entered promiscuous mode [ 676.178892][T12879] veth1_to_team: entered allmulticast mode [ 676.204151][T12879] bridge0: port 3(veth1_to_team) entered blocking state [ 676.221781][T12879] bridge0: port 3(veth1_to_team) entered disabled state [ 676.241584][T12879] bridge0: port 3(veth1_to_team) entered blocking state [ 676.248905][T12879] bridge0: port 3(veth1_to_team) entered forwarding state [ 677.048202][T12908] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2787'. [ 677.464570][T12918] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2792'. [ 678.232525][T12950] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2806'. [ 678.275260][T12950] bridge0: port 3(ipvlan1) entered blocking state [ 678.367430][T12950] bridge0: port 3(ipvlan1) entered disabled state [ 678.403354][T12950] ipvlan1: entered allmulticast mode [ 678.423279][T12950] veth0_vlan: entered allmulticast mode [ 678.450355][T12950] ipvlan1: left allmulticast mode [ 678.470078][T12950] veth0_vlan: left allmulticast mode [ 678.487410][T12950] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 678.546249][T12952] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2807'. [ 680.120013][T12987] rxe_eth0 speed is unknown, defaulting to 1000 [ 680.667716][T12997] rxe_eth0 speed is unknown, defaulting to 1000 [ 682.724023][T13024] rxe_eth0 speed is unknown, defaulting to 1000 [ 685.731285][T13070] syzkaller0: entered promiscuous mode [ 685.767843][T13070] syzkaller0: entered allmulticast mode [ 686.038654][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.045783][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.397853][ T5825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 686.409412][ T5825] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 686.433508][ T5825] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 686.456356][ T5825] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 686.473533][ T5825] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 686.481172][ T5825] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 688.012723][T13079] rxe_eth0 speed is unknown, defaulting to 1000 [ 688.214629][ T9591] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.299823][ T9591] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.344306][T13079] chnl_net:caif_netlink_parms(): no params data found [ 688.419134][ T9591] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.467097][T13079] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.474405][T13079] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.481586][T13079] bridge_slave_0: entered allmulticast mode [ 688.494715][T13079] bridge_slave_0: entered promiscuous mode [ 688.521652][ T9591] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.540556][T13079] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.549415][ T52] Bluetooth: hci2: command tx timeout [ 688.556794][T13079] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.564364][T13079] bridge_slave_1: entered allmulticast mode [ 688.571904][T13079] bridge_slave_1: entered promiscuous mode [ 688.606577][T13079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 688.621174][T13079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 688.663972][T13079] team0: Port device team_slave_0 added [ 688.673732][T13079] team0: Port device team_slave_1 added [ 688.738140][T13079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 688.760506][T13079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 688.804238][T13079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 688.839018][T13079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 688.847314][T13079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 688.875283][T13079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 689.001401][T13079] hsr_slave_0: entered promiscuous mode [ 689.014523][T13079] hsr_slave_1: entered promiscuous mode [ 689.021080][T13079] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 689.029369][T13079] Cannot create hsr debugfs directory [ 690.237658][ T9591] team0: left allmulticast mode [ 690.242608][ T9591] team_slave_0: left allmulticast mode [ 690.285495][ T9591] A6: left allmulticast mode [ 690.290398][ T9591] geneve1: left allmulticast mode [ 690.295926][ T9591] team0: left promiscuous mode [ 690.300748][ T9591] team_slave_0: left promiscuous mode [ 690.307732][ T9591] A6: left promiscuous mode [ 690.312626][ T9591] geneve1: left promiscuous mode [ 690.319102][ T9591] : port 1(team0) entered disabled state [ 690.336574][ T9591] hsr_slave_0: left promiscuous mode [ 690.343518][ T9591] hsr_slave_1: left promiscuous mode [ 690.350217][ T9591] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 690.358186][ T9591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 690.368645][ T9591] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 690.381368][ T9591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 690.390331][ T9591] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 690.405853][ T9591] batman_adv: batadv0: Removing interface: virt_wifi0 [ 690.437341][ T9591] veth1_macvtap: left promiscuous mode [ 690.443216][ T9591] veth0_macvtap: left promiscuous mode [ 690.449149][ T9591] veth1_vlan: left promiscuous mode [ 690.627732][ T9591] team0 (unregistering): Port device geneve1 removed [ 690.635506][ T52] Bluetooth: hci2: command tx timeout [ 690.797575][ T9591] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 691.147942][ T9591] team0 (unregistering): Port device 2A6 removed [ 691.196591][ T9591] team0 (unregistering): Port device team_slave_0 removed [ 691.242489][ T9591] bond0 (unregistering): (slave c): Releasing backup interface [ 691.291076][ T9591] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 691.622805][ T9591] bond0 (unregistering): Released all slaves [ 691.725543][T13079] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 691.751624][T13079] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 691.772536][T13079] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 691.800743][T13079] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 692.012210][T13079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 692.058039][T13079] 8021q: adding VLAN 0 to HW filter on device team0 [ 692.092745][ T9586] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.100104][ T9586] bridge0: port 1(bridge_slave_0) entered forwarding state [ 692.127430][ T9583] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.134724][ T9583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 692.504960][T13079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 692.703951][ T52] Bluetooth: hci2: command tx timeout [ 692.766986][T13079] veth0_vlan: entered promiscuous mode [ 692.781394][T13079] veth1_vlan: entered promiscuous mode [ 692.815474][T13079] veth0_macvtap: entered promiscuous mode [ 692.828751][T13079] veth1_macvtap: entered promiscuous mode [ 692.848027][T13079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 692.858649][T13079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.870592][T13079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 692.881219][T13079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.891716][T13079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 692.902290][T13079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.912171][T13079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 692.922727][T13079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.935712][T13079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 692.947909][T13079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 692.958805][T13079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.969374][T13079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 692.980104][T13079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.990304][T13079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 693.000847][T13079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.013697][T13079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 693.035174][T13079] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.045098][T13079] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.056372][T13079] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.065391][T13079] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.148115][ T9586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 693.162213][ T9586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.199916][ T9593] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 693.210215][ T9593] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 694.783606][ T52] Bluetooth: hci2: command tx timeout [ 694.840897][T13169] rxe_eth0 speed is unknown, defaulting to 1000 [ 695.107994][T13174] syzkaller0: entered promiscuous mode [ 695.114884][T13174] syzkaller0: entered allmulticast mode [ 697.144319][T13142] rxe_eth0 speed is unknown, defaulting to 1000 [ 699.220705][T13186] rxe_eth0 speed is unknown, defaulting to 1000 [ 699.613421][T13213] wg2: entered promiscuous mode [ 699.618374][T13213] wg2: entered allmulticast mode [ 700.607981][T13216] rxe_eth0 speed is unknown, defaulting to 1000 [ 701.147314][T13224] veth0_vlan: entered allmulticast mode [ 701.280133][T13224] : renamed from vlan1 [ 704.640145][T13251] rxe_eth0 speed is unknown, defaulting to 1000 [ 704.831967][T13255] veth0_vlan: entered allmulticast mode [ 705.084410][T13255] : renamed from vlan1 [ 705.178959][T13258] veth0_vlan: left promiscuous mode [ 705.312653][T13258] veth0_vlan: entered promiscuous mode [ 706.397872][T13276] sit0: entered allmulticast mode [ 706.735448][T13281] sit0: entered promiscuous mode [ 706.842667][T13282] wg2: left promiscuous mode [ 706.862815][T13282] wg2: left allmulticast mode [ 706.960816][T13285] rxe_eth0 speed is unknown, defaulting to 1000 [ 707.174044][T13289] veth0_vlan: entered allmulticast mode [ 707.428934][T13289] : renamed from vlan1 [ 707.598935][T13290] veth0_vlan: left promiscuous mode [ 707.792945][T13290] veth0_vlan: entered promiscuous mode [ 708.373510][T13306] rxe_eth0 speed is unknown, defaulting to 1000 [ 709.548539][ T9583] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 709.556543][ T9583] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 709.565525][ T9583] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 709.573492][ T9583] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 709.581688][ T9583] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 709.589335][ T9583] batman_adv: batadv0: Removing interface: virt_wifi0 [ 709.602367][ T9583] team0: left allmulticast mode [ 709.607415][ T9583] team_slave_0: left allmulticast mode [ 709.623663][ T9583] team_slave_1: left allmulticast mode [ 709.643032][ T9583] team0: left promiscuous mode [ 709.648059][ T9583] team_slave_0: left promiscuous mode [ 709.663215][ T9583] team_slave_1: left promiscuous mode [ 709.673600][ T9583] bridge0: port 3(team0) entered disabled state [ 709.696708][ T9583] bridge_slave_1: left allmulticast mode [ 709.702593][ T9583] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.724137][ T9583] bridge_slave_0: left allmulticast mode [ 709.734128][ T9583] bridge_slave_0: left promiscuous mode [ 709.739986][ T9583] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.781764][ T9583] veth1_macvtap: left promiscuous mode [ 709.787786][ T9583] veth0_macvtap: left promiscuous mode [ 709.794106][ T9583] veth1_vlan: left promiscuous mode [ 709.799823][ T9583] veth0_vlan: left promiscuous mode [ 710.526590][ T9583] team0 (unregistering): Port device team_slave_1 removed [ 710.575281][ T9583] team0 (unregistering): Port device team_slave_0 removed [ 710.621811][ T9583] bond0 (unregistering): (slave c): Releasing backup interface [ 710.670900][ T9583] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 710.976127][ T9583] bond0 (unregistering): Released all slaves [ 711.422896][T13333] rxe_eth0 speed is unknown, defaulting to 1000 [ 711.690726][T13341] : renamed from veth0_vlan (while UP) [ 715.925639][T13364] rxe_eth0 speed is unknown, defaulting to 1000 [ 718.753900][T13401] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 718.826360][T13401] syzkaller0: entered promiscuous mode [ 718.834487][T13401] syzkaller0: entered allmulticast mode [ 721.239850][T13403] rxe_eth0 speed is unknown, defaulting to 1000 [ 721.463491][T13407] rxe_eth0 speed is unknown, defaulting to 1000 [ 722.195172][T13416] syzkaller0: entered promiscuous mode [ 722.200704][T13416] syzkaller0: entered allmulticast mode [ 723.983157][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 724.664602][T13427] rxe_eth0 speed is unknown, defaulting to 1000 [ 725.163138][T13429] rxe_eth0 speed is unknown, defaulting to 1000 [ 725.870201][T13450] rxe_eth0 speed is unknown, defaulting to 1000 [ 730.222019][T13473] syzkaller0: entered promiscuous mode [ 730.256418][T13473] syzkaller0: entered allmulticast mode [ 734.366316][T13506] rxe_eth0 speed is unknown, defaulting to 1000 [ 735.723026][T13535] bridge0: port 3(veth1_to_team) entered disabled state [ 735.730303][T13535] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.738405][T13535] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.760904][T13535] bridge0: entered allmulticast mode [ 737.236982][T13582] syzkaller0: entered promiscuous mode [ 737.243077][T13582] syzkaller0: entered allmulticast mode [ 742.601822][T13607] rxe_eth0 speed is unknown, defaulting to 1000 [ 742.848801][T13616] veth0_to_bond: entered allmulticast mode [ 742.911423][ T6025] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 742.933277][ T6025] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 742.966212][ T6025] veth1_macvtap: left promiscuous mode [ 742.972027][ T6025] veth0_macvtap: left promiscuous mode [ 742.978461][ T6025] veth1_vlan: left allmulticast mode [ 742.994850][ T6025] veth1_vlan: left promiscuous mode [ 743.450252][ T6025] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 743.756790][ T6025] team0 (unregistering): Port device team_slave_1 removed [ 743.803001][ T6025] team0 (unregistering): Port device team_slave_0 removed [ 743.851160][ T6025] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 744.180785][ T6025] bond0 (unregistering): Released all slaves [ 746.164414][T13665] rxe_eth0 speed is unknown, defaulting to 1000 [ 746.617490][T13674] : renamed from team_slave_1 (while UP) [ 746.652860][T13676] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.696660][T13676] bridge0: entered allmulticast mode [ 747.433091][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.439509][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.619929][T13703] bridge0: port 2(bridge_slave_1) entered disabled state [ 748.211077][T13725] rxe_eth0 speed is unknown, defaulting to 1000 [ 748.646207][T13735] rxe_eth0 speed is unknown, defaulting to 1000 [ 749.484654][T13760] syzkaller0: entered promiscuous mode [ 749.490228][T13760] syzkaller0: entered allmulticast mode [ 749.506214][ T5825] Bluetooth: hci0: command 0x0406 tx timeout [ 752.652710][T13799] : renamed from team_slave_1 (while UP) [ 752.758916][T13804] rxe_eth0 speed is unknown, defaulting to 1000 [ 754.526101][T13829] syzkaller0: entered promiscuous mode [ 754.531844][T13829] syzkaller0: entered allmulticast mode [ 754.560368][T13831] : renamed from team_slave_1 (while UP) [ 756.990595][T13851] syzkaller0: entered promiscuous mode [ 757.014399][T13851] syzkaller0: entered allmulticast mode [ 759.342006][T13864] syzkaller0: entered promiscuous mode [ 759.354463][T13864] syzkaller0: entered allmulticast mode [ 759.396506][T13866] : renamed from team_slave_1 (while UP) [ 761.967359][T13893] rxe_eth0 speed is unknown, defaulting to 1000 [ 762.846163][T13916] rxe_eth0 speed is unknown, defaulting to 1000 [ 763.717809][T13925] syzkaller0: entered allmulticast mode [ 764.097478][T13932] [ 764.104942][T13932] ============================= [ 764.110057][T13932] WARNING: suspicious RCU usage [ 764.115092][T13932] syzkaller #0 Not tainted [ 764.119547][T13932] ----------------------------- [ 764.124613][T13932] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 764.133233][T13932] [ 764.133233][T13932] other info that might help us debug this: [ 764.133233][T13932] [ 764.143557][T13932] [ 764.143557][T13932] rcu_scheduler_active = 2, debug_locks = 1 [ 764.151638][T13932] 1 lock held by syz.3.3157/13932: [ 764.156846][T13932] #0: ffffffff8df322c0 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x70 [ 764.167498][T13932] [ 764.167498][T13932] stack backtrace: [ 764.173531][T13932] CPU: 1 PID: 13932 Comm: syz.3.3157 Not tainted syzkaller #0 [ 764.181025][T13932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 764.191132][T13932] Call Trace: [ 764.194452][T13932] [ 764.197412][T13932] dump_stack_lvl+0x18c/0x250 [ 764.202220][T13932] ? show_regs_print_info+0x20/0x20 [ 764.207466][T13932] ? load_image+0x420/0x420 [ 764.212060][T13932] lockdep_rcu_suspicious+0x1e1/0x300 [ 764.217520][T13932] get_callchain_entry+0x2a9/0x3c0 [ 764.222708][T13932] get_perf_callchain+0xc6/0x510 [ 764.227686][T13932] ? put_callchain_entry+0xb0/0xb0 [ 764.232884][T13932] __bpf_get_stack+0x2e4/0x540 [ 764.237717][T13932] ? stack_map_get_build_id_offset+0x720/0x720 [ 764.243936][T13932] ? __cant_sleep+0x220/0x220 [ 764.248721][T13932] ? bpf_prog_b8a90dd1efcc4ad9+0x45/0x49 [ 764.254393][T13932] bpf_get_stack_raw_tp+0x1a4/0x210 [ 764.259684][T13932] bpf_prog_b8a90dd1efcc4ad9+0x45/0x49 [ 764.265202][T13932] bpf_prog_run_pin_on_cpu+0x64/0x150 [ 764.270639][T13932] bpf_prog_test_run_syscall+0x320/0x4b0 [ 764.276324][T13932] ? sock_gen_cookie+0x60/0x60 [ 764.281140][T13932] ? sock_gen_cookie+0x60/0x60 [ 764.285949][T13932] bpf_prog_test_run+0x31f/0x390 [ 764.290947][T13932] __sys_bpf+0x49d/0x890 [ 764.295267][T13932] ? bpf_link_show_fdinfo+0x560/0x560 [ 764.300700][T13932] ? lock_chain_count+0x20/0x20 [ 764.305606][T13932] __x64_sys_bpf+0x7c/0x90 [ 764.310092][T13932] do_syscall_64+0x55/0xb0 [ 764.314554][T13932] ? clear_bhb_loop+0x40/0x90 [ 764.319421][T13932] ? clear_bhb_loop+0x40/0x90 [ 764.324158][T13932] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 764.330197][T13932] RIP: 0033:0x7f784959e559 [ 764.334831][T13932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 764.354497][T13932] RSP: 002b:00007f78477f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 764.362964][T13932] RAX: ffffffffffffffda RBX: 00007f7849825fa0 RCX: 00007f784959e559 [ 764.370986][T13932] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 764.378997][T13932] RBP: 00007f7849635ad8 R08: 0000000000000000 R09: 0000000000000000 [ 764.387009][T13932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 764.395025][T13932] R13: 00007f7849826038 R14: 00007f7849825fa0 R15: 00007ffcb5358b78 [ 764.403065][T13932] [ 769.987202][ T52] Bluetooth: hci1: command 0x0406 tx timeout