last executing test programs: 21.776280007s ago: executing program 0: r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x2, 0x0, @private}, 0xf, 0x0}, 0x0) 21.669845193s ago: executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc786b409ac930c90ff90f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d858952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09e3187a10d905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367638cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c07052c6bc314b0ac5c63bc2083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a2d4f12e8e717eaaa2a6d14fee0c15f36c203dbc7c06128bec84231d43e152ef19ce027436fb4ebb9fce431b913f4817597a6f53d1626f9d1cb7b36fb18ac19547a8b20ede70c81a75686cea85dcd34408128da7cab045541bc6b9a0a79f63f2e7646356e04b977c9f47467537015240b974184be9c54b7c628ae4d97ebdb06070344468994afbaac71e5ffac2c61d9af66f9de2760a38e968a781528531c1c936a02065be48f1eee77be878873206d65bd0b1241fab9139abd7f40febe81fed3684e6b59273da01f1743c6a5df300ec59c65e8174fc2d95a62ca7b937289ad14107333007eab833a5849eb19f18ae41743dfb949377e"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 21.403683392s ago: executing program 0: r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x3f00, &(0x7f0000000000)=[{&(0x7f0000000040)="0202ff0902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) 21.319205874s ago: executing program 0: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab66c1aae9314d7381fcfeb970bea672010000000000000043144648a07a975bd89dc398712376610faa54f12495b4659be8673086f6f3543205d4bc4ce05b8b961103673dff7f158052e62bfbdcddde6985f3f1ac5d9a94cc53207899762a07282a1914452d11858e795a3ca30a101af5574f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5ed44039aab46419496362e54cfad05b4004ac71a003d7b85d07191bed4e5a8908263722d4146f7ed569985439baa355cf3d8731f5e7a237bc06d035a8d601f21746d880819f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c5b9f87d988c9fbd2b9d9b4e2d71753b1549fa734f0b2e5fcf9549804cddad721971637f9c9730a9cc384eed30345979db9c93e1c52f42cad0a4d4f9436d3f39b0ed09c395dc6e970366087a8e4daeeb1b017006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f710c490ecd085d2811a7555c53030000007f00000000bfa6478eb96b079c277e2910b7ccdc3d672ed34aa65278c549e2abb549ad954884289130bc71cee2b7de62bf48129ae1af052a2d46a6165eb0954dac7265f1f425735acf6377793946b3229e861d8ea49806b3b533345d36ecef9df700000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c000000aaae37f044bcadeb0f6846582b7653665aa336db9f0384d3c7ddf79c2e0000000000000000000000000000000000000000000000e154aa0d3e41986a668ee1e5ef93a8ceac75f44aae95e26742f895f287111f8ee86f7e3ffb63cfb0e345cf7fc63dd2b0d30977899c6f03640040af4db71f7452bfc79a05118d8bb42b63b195771e42f9942ec626bd4b5461b74324012164e8"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r1, r0, 0x2, 0x0, 0x4000}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2}, 0x10) 21.201302232s ago: executing program 0: r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x2, 0x0, @private}, 0xf, 0x0}, 0x0) 19.39869138s ago: executing program 2: r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002f80)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./cgroup.cpu/cpuset.cpus\x00'}, 0x18) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19.390589901s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[], 0x0, 0x0, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffff003}, 0x48) socketpair(0x25, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb01005ffc"], 0x0, 0xfc5f}, 0x20) 19.142872368s ago: executing program 2: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x102, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 18.785942951s ago: executing program 4: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{}, 0x0, 0x0}, 0xff35) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f0000001040)='cgroup.procs\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x841}, 0x0, 0xc, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x6, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2cc3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x0, 0x0, 0x5}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x6d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x1b}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 18.772807953s ago: executing program 2: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x70000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 18.489210995s ago: executing program 2: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r1, r0, 0x2, 0x0, 0x4000}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2}, 0x10) 18.129372778s ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[], 0x0, 0x0, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffff003}, 0x48) socketpair(0x25, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb01005ffc"], 0x0, 0xfc5f}, 0x20) 18.127620199s ago: executing program 4: r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x3f00, &(0x7f0000000000)=[{&(0x7f0000000040)="0202ff0902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) 17.786473869s ago: executing program 4: r0 = socket$kcm(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) 17.661248908s ago: executing program 4: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r1, r0, 0x2, 0x0, 0x4000}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2}, 0x10) 17.290272603s ago: executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x47, 0x10001, 0x8, 0x1}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x44, &(0x7f00000002c0)=@framed={{}, [@printk={@u}, @alu, @ringbuf_output, @jmp, @btf_id, @snprintf, @func, @ringbuf_output, @printk={@s}, @snprintf]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x998, 0x8}, 0x48) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7000000, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 10.323810147s ago: executing program 0: r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x2, 0x0, @private}, 0xf, 0x0}, 0x0) 3.200824325s ago: executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, 0x0, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000e9ff2085000000700000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000000)='ext4_mark_inode_dirty\x00'}, 0x10) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='ext4_mark_inode_dirty\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r4, @ANYRES32, @ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000d40)={0x3f, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x17, r6, 0x8, &(0x7f0000000cc0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000d00)={0x5, 0x8, 0xa795, 0x2}, 0x10, r7, r5, 0x5, &(0x7f0000000d80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x4, 0x3, 0x2, 0x6}, {0x0, 0x3, 0x10}, {0x1, 0x5, 0x4, 0xe}, {0x3, 0x2, 0x0, 0x5}, {0x4, 0x3, 0x3, 0x4}], 0x10, 0xbd}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@exit, @kfunc]}, &(0x7f0000000280)='syzkaller\x00', 0xfffffff9, 0xf4, &(0x7f00000002c0)=""/244, 0x41100, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f00000006c0)=[{0x0, 0x3, 0xc, 0xc}, {0x3, 0x5, 0x3, 0x1}, {0x1, 0x1, 0x7, 0x1}], 0x10, 0x400}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='ext4_da_update_reserve_space\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.time\x00', 0x100002, 0x0) write$cgroup_pid(r8, &(0x7f0000000980), 0x12) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080)=0x1) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000400)) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x20001400) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x2, &(0x7f0000000000)='\xc8\xa9'}, 0x30) 3.109876179s ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[], 0x0, 0x0, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffff003}, 0x48) socketpair(0x25, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb01005ffc"], 0x0, 0xfc5f}, 0x20) 1.697045258s ago: executing program 3: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000009002700000071106b00000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0xb9, &(0x7f0000000200)=""/185, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x0, 0x0, 0xb4, 0x7f}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}, {&(0x7f0000000a00)=""/242, 0xf2}, {&(0x7f0000001140)=""/4055, 0xfd7}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000007c0)=""/191, 0xbf}, {&(0x7f0000000500)=""/211, 0xd3}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000000c0)=""/42, 0x2a}, {&(0x7f0000000d40)=""/226, 0xe2}, {&(0x7f0000000400)=""/23, 0x17}, {0x0}, {&(0x7f0000000940)=""/183, 0xb7}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f00000008c0)=""/42, 0x2a}, {&(0x7f0000000140)=""/59, 0x3b}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000003140)=""/4089, 0xff9}, {&(0x7f0000000cc0)=""/88, 0x58}, {&(0x7f0000000f00)=""/202, 0xca}], 0x13}, 0x0) recvmsg$kcm(r2, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r2, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0xffffffff, [{0x0, 0x3}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0x10, 0x2}]}}, 0x0, 0x4a}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x32600) 1.578032546s ago: executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000014006b03000000d86e6c1d000a117ea670d6060000000000000000250002000f00000017d34460bc24eab556a705251e618294eee32675335d9a36c23de55f8e07bbd4e6f23b48dfd8cdbf9767b4fa51f62a64c9f4d49346", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.191695443s ago: executing program 1: r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014100000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c1300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000048aa0000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='ext4_free_inode\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000040)='ext4_free_inode\x00', r1}, 0xc) unlink(&(0x7f0000000140)='./cgroup\x00') 610.608349ms ago: executing program 1: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000140)=@hci={0x1f, 0x0, 0xe}, 0x80, &(0x7f0000000280)=[{&(0x7f00000006c0)='v', 0x1}, {&(0x7f00000001c0)="0a2110130035d632b458d1e3aa745f22a17d56432a63c98617cb9e1abb9f10566bb77e20baeb08ac2e2d2662db90828524925434cb0db425b3995ef2d9490057", 0x40}, {&(0x7f0000000200)="f8ef0ee94a3aebd6f0e18897", 0xc}], 0x3}, 0x0) 387.625802ms ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1234}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, r0}, &(0x7f0000000300), &(0x7f0000000340)='%-010d \x00'}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8b2b, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x800) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x6}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000040)=0x2, &(0x7f0000000180)=r1, 0x2}, 0x20) 329.208421ms ago: executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@datasec={0x2, 0x1, 0x0, 0xf, 0x1, [{0x2, 0x100}], '7'}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], 'Q'}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "1158"}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x50}, 0x20) 299.461465ms ago: executing program 3: r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f00000002c0)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0xfeb30ec498f8f429, 0x2}, @noop]}}}], 0x18}, 0x0) 229.973076ms ago: executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x6a, 0xa, 0xff00}, [@call={0x55}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0xe, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) 139.461589ms ago: executing program 1: bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)="040000000000ffffffff00000000ff15", 0x0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe80, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 44.857333ms ago: executing program 3: bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0xb, 0x1, 0x40, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x200000, 0x0, &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x5f}, 0x90) 0s ago: executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, 0x0, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000e9ff2085000000700000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000000)='ext4_mark_inode_dirty\x00'}, 0x10) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='ext4_mark_inode_dirty\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r4, @ANYRES32, @ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000d40)={0x3f, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x17, r6, 0x8, &(0x7f0000000cc0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000d00)={0x5, 0x8, 0xa795, 0x2}, 0x10, r7, r5, 0x5, &(0x7f0000000d80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x4, 0x3, 0x2, 0x6}, {0x0, 0x3, 0x10}, {0x1, 0x5, 0x4, 0xe}, {0x3, 0x2, 0x0, 0x5}, {0x4, 0x3, 0x3, 0x4}], 0x10, 0xbd}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@exit, @kfunc]}, &(0x7f0000000280)='syzkaller\x00', 0xfffffff9, 0xf4, &(0x7f00000002c0)=""/244, 0x41100, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f00000006c0)=[{0x0, 0x3, 0xc, 0xc}, {0x3, 0x5, 0x3, 0x1}, {0x1, 0x1, 0x7, 0x1}], 0x10, 0x400}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='ext4_da_update_reserve_space\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.time\x00', 0x100002, 0x0) write$cgroup_pid(r8, &(0x7f0000000980), 0x12) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080)=0x1) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000400)) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x20001400) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x2, &(0x7f0000000000)='\xc8\xa9'}, 0x30) kernel console output (not intermixed with test programs): nd0) entered blocking state [ 72.612811][ T4127] bridge0: port 3(bond0) entered forwarding state [ 72.666117][ T4131] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 72.771083][ T4131] device syz_tun entered promiscuous mode [ 72.800143][ T4131] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 73.319528][ T4156] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.4'. [ 73.356505][ T4158] netlink: 4083 bytes leftover after parsing attributes in process `syz-executor.2'. [ 73.810954][ T4179] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 73.942762][ T4179] bridge0: port 4(vlan0) entered blocking state [ 74.005947][ T4179] bridge0: port 4(vlan0) entered disabled state [ 74.042621][ T4179] device vlan0 entered promiscuous mode [ 74.114469][ T4188] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.3'. [ 74.260653][ T4191] netlink: 9286 bytes leftover after parsing attributes in process `syz-executor.1'. [ 74.651609][ T4214] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 74.934945][ T4213] device syzkaller0 entered promiscuous mode [ 75.760559][ T4256] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.0'. [ 76.353710][ T4288] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.1'. [ 76.532306][ T7] cfg80211: failed to load regulatory.db [ 76.565060][ T48] Bluetooth: hci4: Malformed LE Event: 0x1d [ 79.424560][ T4390] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 79.466071][ T4390] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 81.072832][ T4466] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 81.089256][ T4466] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 81.203401][ T4472] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET) [ 81.233739][ T4473] tun0: tun_chr_ioctl cmd 1074812117 [ 81.948497][ T4509] netlink: 14546 bytes leftover after parsing attributes in process `syz-executor.0'. [ 81.998912][ T4510] tun0: tun_chr_ioctl cmd 1074812117 [ 82.160518][ T4516] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 82.229671][ T4516] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 82.522686][ T4543] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 82.548531][ T4542] tun0: tun_chr_ioctl cmd 1074812117 [ 82.632887][ T4543] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 82.736986][ T4544] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 82.765842][ T4549] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 82.793420][ T4550] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 82.887688][ T4559] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 83.353818][ T4571] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 83.614674][ T4571] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 83.685441][ T4585] tun0: tun_chr_ioctl cmd 1074812117 [ 84.493154][ T4626] tun0: tun_chr_ioctl cmd 1074812117 [ 84.531197][ T4625] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 84.565158][ T4625] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 84.665125][ T4632] validate_nla: 11 callbacks suppressed [ 84.665141][ T4632] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 84.992859][ T4651] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 85.012130][ T4651] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 85.081311][ T4654] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 85.124959][ T4651] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 85.155283][ T4651] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 85.337519][ T4665] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 85.482550][ T4665] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 85.862926][ T4677] sctp: [Deprecated]: syz-executor.0 (pid 4677) Use of int in maxseg socket option. [ 85.862926][ T4677] Use struct sctp_assoc_value instead [ 86.559883][ T4705] netlink: 14546 bytes leftover after parsing attributes in process `syz-executor.2'. [ 86.723207][ T4715] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 86.840765][ T4720] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 87.483194][ T4747] sctp: [Deprecated]: syz-executor.0 (pid 4747) Use of int in maxseg socket option. [ 87.483194][ T4747] Use struct sctp_assoc_value instead [ 87.644204][ T4755] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 87.662657][ T4755] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 87.691745][ T4755] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 87.888272][ T4766] bridge0: port 3(bond0) entered disabled state [ 87.894872][ T4766] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.903444][ T4766] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.005086][ T4768] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 88.064229][ T4772] ÿÿÿÿÿÿ: renamed from bridge0 [ 88.277489][ T4778] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 88.530492][ T4785] sctp: [Deprecated]: syz-executor.0 (pid 4785) Use of int in maxseg socket option. [ 88.530492][ T4785] Use struct sctp_assoc_value instead [ 88.647234][ T4786] device syzkaller0 entered promiscuous mode [ 88.850803][ T4797] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 88.864657][ T4797] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 89.719853][ T4835] device syzkaller0 entered promiscuous mode [ 89.727959][ T4838] validate_nla: 1 callbacks suppressed [ 89.727975][ T4838] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 89.742553][ T4838] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 89.774864][ T4838] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 91.002870][ T4889] device syzkaller0 entered promiscuous mode [ 92.047922][ T4928] netlink: 'syz-executor.1': attribute type 41 has an invalid length. [ 92.075846][ T4928] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 92.889165][ T4968] netlink: 'syz-executor.3': attribute type 41 has an invalid length. [ 92.926868][ T4968] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 93.214591][ T4972] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.222175][ T4972] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.334372][ T4977] ÿÿÿÿÿÿ: renamed from bridge0 [ 93.737600][ T4996] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 93.766688][ T4996] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 93.807454][ T5000] netlink: 'syz-executor.1': attribute type 41 has an invalid length. [ 93.825883][ T5000] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 93.845619][ T5002] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 93.878434][ T4996] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 93.909894][ T4996] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 95.875607][ T5114] validate_nla: 9 callbacks suppressed [ 95.875624][ T5114] netlink: 'syz-executor.4': attribute type 41 has an invalid length. [ 95.913395][ T5114] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 96.479560][ T5142] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.487080][ T5142] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.592623][ T5151] ÿÿÿÿÿÿ: renamed from bridge0 [ 98.118200][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.275885][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.420234][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.626593][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.756390][ T5246] netlink: 129384 bytes leftover after parsing attributes in process `syz-executor.2'. [ 98.835868][ T5246] openvswitch: netlink: Message has 4 unknown bytes. [ 98.964115][ T3572] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.973200][ T3572] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.981487][ T3572] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.990300][ T3572] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 99.009691][ T3572] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 99.017429][ T3572] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 99.278612][ T3572] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 99.287516][ T3572] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 99.297559][ T3574] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 99.324503][ T3572] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 99.333404][ T3572] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 99.341803][ T3572] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 99.376635][ T5268] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. [ 99.902727][ T5249] chnl_net:caif_netlink_parms(): no params data found [ 100.049554][ T5258] chnl_net:caif_netlink_parms(): no params data found [ 100.322296][ T5249] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.343186][ T5249] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.386912][ T5249] device bridge_slave_0 entered promiscuous mode [ 100.477042][ T5249] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.484629][ T5249] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.510898][ T5249] device bridge_slave_1 entered promiscuous mode [ 100.568590][ T5341] netlink: 129384 bytes leftover after parsing attributes in process `syz-executor.0'. [ 100.588098][ T5341] openvswitch: netlink: Message has 4 unknown bytes. [ 100.663083][ T5258] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.688793][ T5258] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.723321][ T5258] device bridge_slave_0 entered promiscuous mode [ 100.760203][ T5249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.821580][ T5258] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.841618][ T5258] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.876325][ T5258] device bridge_slave_1 entered promiscuous mode [ 100.937143][ T5249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.069921][ T5258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.085985][ T48] Bluetooth: hci2: command tx timeout [ 101.170311][ T5249] team0: Port device team_slave_0 added [ 101.238004][ T9] device hsr_slave_0 left promiscuous mode [ 101.277440][ T9] device hsr_slave_1 left promiscuous mode [ 101.304049][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.321830][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.334217][ T5376] netlink: 129384 bytes leftover after parsing attributes in process `syz-executor.2'. [ 101.361565][ T5376] openvswitch: netlink: Message has 4 unknown bytes. [ 101.378321][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.396479][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.406077][ T48] Bluetooth: hci4: command tx timeout [ 101.437256][ T9] device bridge_slave_1 left promiscuous mode [ 101.444645][ T9] ÿÿÿÿÿÿ: port 2(bridge_slave_1) entered disabled state [ 101.456999][ T9] device bridge_slave_0 left promiscuous mode [ 101.463236][ T9] ÿÿÿÿÿÿ: port 1(bridge_slave_0) entered disabled state [ 101.546769][ T9] device veth1_macvtap left promiscuous mode [ 101.565434][ T9] device veth0_macvtap left promiscuous mode [ 101.585509][ T9] device veth1_vlan left promiscuous mode [ 101.598885][ T9] device veth0_vlan left promiscuous mode [ 101.990970][ T9] team0 (unregistering): Port device team_slave_1 removed [ 102.004099][ T9] team0 (unregistering): Port device team_slave_0 removed [ 102.016750][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.032341][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.091246][ T9] bond0 (unregistering): Released all slaves [ 102.142089][ T5365] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. [ 102.159028][ T5258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.179730][ T5249] team0: Port device team_slave_1 added [ 102.185642][ T5393] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.1'. [ 102.331940][ T5258] team0: Port device team_slave_0 added [ 102.379948][ T5258] team0: Port device team_slave_1 added [ 102.416331][ T5249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.423301][ T5249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.494310][ T5412] netlink: 129384 bytes leftover after parsing attributes in process `syz-executor.0'. [ 102.507263][ T5249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.522622][ T5249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.529813][ T5249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.558410][ T5249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.569335][ T5412] openvswitch: netlink: Message has 4 unknown bytes. [ 102.653568][ T5258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.672948][ T5258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.790026][ T5258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.850671][ T5422] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.2'. [ 102.891218][ T5258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.909310][ T5258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.015648][ T5258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.099444][ T5249] device hsr_slave_0 entered promiscuous mode [ 103.135931][ T5249] device hsr_slave_1 entered promiscuous mode [ 103.156768][ T5249] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.165841][ T48] Bluetooth: hci2: command tx timeout [ 103.179768][ T5249] Cannot create hsr debugfs directory [ 103.429091][ T5258] device hsr_slave_0 entered promiscuous mode [ 103.455114][ T5258] device hsr_slave_1 entered promiscuous mode [ 103.466452][ T5258] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.484838][ T5258] Cannot create hsr debugfs directory [ 103.492302][ T48] Bluetooth: hci4: command tx timeout [ 103.511278][ T5462] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.1'. [ 103.531410][ T5464] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 104.120558][ T5249] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.309675][ T5249] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.396083][ T5495] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 104.414271][ T5497] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 104.425848][ T5497] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 104.434155][ T5497] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 104.530351][ T5249] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.572336][ T5504] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.1'. [ 104.593347][ T5507] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.0'. [ 104.616916][ T5502] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.0'. [ 104.737803][ T5249] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.183815][ T5532] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 105.245863][ T48] Bluetooth: hci2: command tx timeout [ 105.566707][ T48] Bluetooth: hci4: command tx timeout [ 105.764701][ T5249] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.806600][ T5249] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.851045][ T5249] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.942597][ T5249] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.101801][ T5258] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 106.150817][ T5258] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 106.196223][ T5258] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 106.254531][ T5258] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 106.404697][ T5249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.476832][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 106.506779][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 106.527012][ T5249] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.562166][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 106.591853][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 106.615607][ T3619] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.622817][ T3619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.663243][ T5593] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.0'. [ 106.729391][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 106.758269][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 106.796470][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.812433][ T3613] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.819631][ T3613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.836686][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 106.851372][ T5592] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.0'. [ 106.915818][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 106.925242][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 106.946140][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 107.016480][ T5258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.024345][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 107.037904][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 107.088653][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 107.112439][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 107.132038][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 107.158070][ T5249] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.182050][ T5249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 107.207543][ T5612] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 107.224273][ T5612] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 107.244404][ T5612] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 107.266894][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 107.292137][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 107.326097][ T48] Bluetooth: hci2: command tx timeout [ 107.337839][ T5258] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.444190][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 107.476433][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 107.528097][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 107.553146][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 107.587861][ T3619] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.594997][ T3619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.645814][ T48] Bluetooth: hci4: command tx timeout [ 107.656397][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 107.665224][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 107.696219][ T3619] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.703353][ T3619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.712485][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 107.723347][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 107.734323][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 107.801112][ T5614] device syzkaller0 entered promiscuous mode [ 107.825006][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 107.844865][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 107.929277][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 107.942942][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 107.953192][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 107.963570][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 107.988827][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 107.997851][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 108.008630][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 108.019460][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 108.043718][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 108.054628][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 108.079522][ T5249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.125621][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 108.135447][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 108.240223][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 108.260295][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 108.289697][ T5249] device veth0_vlan entered promiscuous mode [ 108.329373][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 108.344889][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 108.372297][ T5249] device veth1_vlan entered promiscuous mode [ 108.486613][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 108.517634][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 108.540217][ T5249] device veth0_macvtap entered promiscuous mode [ 108.564711][ T5249] device veth1_macvtap entered promiscuous mode [ 108.623745][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.654871][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.708921][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.761388][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.783200][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.795630][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.806340][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.817576][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.837960][ T5249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.862516][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 108.877399][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 108.886782][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 108.901343][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 108.924266][ T5682] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.1'. [ 108.947816][ T5679] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.1'. [ 108.973693][ T5258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.984787][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.007904][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.044747][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.062397][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.081682][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.100250][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.114333][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.126680][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.149183][ T5249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.192983][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 109.217319][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 109.224865][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 109.252637][ T5698] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 109.284534][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 109.295868][ T5698] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.1'. [ 109.321610][ T5249] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.345378][ T5249] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.362903][ T5249] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.387350][ T5249] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.630864][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.674597][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.723766][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 109.752025][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.792549][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.845270][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 110.100516][ T5726] device syzkaller0 entered promiscuous mode [ 110.243526][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 110.262849][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 110.382719][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 110.388168][ T5747] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 110.421515][ T5747] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.1'. [ 110.421642][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 110.473064][ T5258] device veth0_vlan entered promiscuous mode [ 110.546838][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 110.554859][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 110.603984][ T5258] device veth1_vlan entered promiscuous mode [ 110.649435][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 110.733555][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 110.744454][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 110.787452][ T5258] device veth0_macvtap entered promiscuous mode [ 110.840805][ T5258] device veth1_macvtap entered promiscuous mode [ 110.893937][ T5758] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 110.943930][ T5758] netlink: 11594 bytes leftover after parsing attributes in process `syz-executor.1'. [ 110.991094][ T5258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.027792][ T5258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.068213][ T5258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.086289][ T5258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.096602][ T5258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.107853][ T5258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.143860][ T5258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.165927][ T5258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.176580][ T5258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.190353][ T5258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.205324][ T5258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.215000][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 111.226212][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 111.241689][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 111.261186][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 111.288974][ T5258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.340621][ T5258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.395717][ T5258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.423066][ T5258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.438549][ T5258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.464047][ T5258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.484379][ T5258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.505367][ T5258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.515474][ T5258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.534676][ T5258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.547602][ T5258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.556979][ T5787] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.1'. [ 111.581439][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 111.633176][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 111.695391][ T5258] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.719628][ T5258] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.760292][ T5258] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.810831][ T5258] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.880456][ T5806] netlink: 134780 bytes leftover after parsing attributes in process `syz-executor.0'. [ 112.048826][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.077117][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.147253][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 112.175261][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.205704][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.230136][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 112.340870][ T5825] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 112.357298][ T5825] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.2'. [ 112.628038][ T5840] netlink: 134780 bytes leftover after parsing attributes in process `syz-executor.0'. [ 112.908675][ T27] audit: type=1804 audit(1718528303.658:2): pid=5855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3592917288/syzkaller.u74apP/12/memory.events" dev="sda1" ino=1960 res=1 errno=0 [ 113.105348][ T5867] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.2'. [ 113.383568][ T5879] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 113.402342][ T5879] netlink: 11594 bytes leftover after parsing attributes in process `syz-executor.0'. [ 113.444322][ T5881] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 113.693955][ T5894] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.4'. [ 114.029191][ T5911] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 114.039741][ T5911] netlink: 11594 bytes leftover after parsing attributes in process `syz-executor.3'. [ 114.050550][ T5910] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 115.350274][ T5956] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 117.919075][ T3566] bond0: (slave syz_tun): Releasing backup interface [ 118.057109][ T3566] device syz_tun left promiscuous mode [ 118.365084][ T3572] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 118.396401][ T3572] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 118.404424][ T3572] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 118.416963][ T3572] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 118.424520][ T3572] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 118.432358][ T3572] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 119.024904][ T6082] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 119.148771][ T6082] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 119.275948][ T6084] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 119.393675][ T6085] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 119.556396][ T6046] chnl_net:caif_netlink_parms(): no params data found [ 119.590365][ T6089] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 119.606764][ T6092] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 119.636308][ T6082] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 119.868766][ T6046] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.885903][ T6046] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.922968][ T6046] device bridge_slave_0 entered promiscuous mode [ 119.937730][ T6046] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.955835][ T6046] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.974726][ T6046] device bridge_slave_1 entered promiscuous mode [ 120.017313][ T6113] __nla_validate_parse: 3 callbacks suppressed [ 120.017330][ T6113] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.3'. [ 120.236227][ T6123] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 120.297497][ T6123] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 120.337963][ T6046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.386018][ T6126] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 120.443653][ T6046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.453830][ T3572] Bluetooth: hci0: command tx timeout [ 120.664183][ T6134] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.3'. [ 120.704678][ T6134] tc_dump_action: action bad kind [ 120.722129][ T6046] team0: Port device team_slave_0 added [ 120.769832][ T6046] team0: Port device team_slave_1 added [ 120.963360][ T6046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.004203][ T6046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.053551][ T6046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.122409][ T6046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.189232][ T6046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.245302][ T6046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.350209][ T6046] device hsr_slave_0 entered promiscuous mode [ 121.365174][ T6046] device hsr_slave_1 entered promiscuous mode [ 121.384053][ T6046] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 121.399228][ T6046] Cannot create hsr debugfs directory [ 121.416246][ T6152] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.4'. [ 121.856776][ T6046] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.990521][ T6046] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.109889][ T6046] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.223915][ T6046] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.298486][ T6194] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.4'. [ 122.316048][ T6194] tc_dump_action: action bad kind [ 122.525850][ T3572] Bluetooth: hci0: command tx timeout [ 122.599494][ T6046] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 122.640356][ T6046] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 122.732953][ T6209] device hsr0 entered promiscuous mode [ 122.778186][ T6209] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 122.865975][ T6209] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 122.903184][ T6209] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 122.933038][ T6209] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 122.941618][ T6046] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 122.980766][ T6046] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 123.781873][ T6046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.842740][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 123.889278][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 123.918333][ T6046] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.969077][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 123.996656][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 124.005260][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.012604][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.023778][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 124.046667][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 124.058465][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.065596][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.091161][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 124.109566][ T6242] tun0: tun_chr_ioctl cmd 1074025675 [ 124.114912][ T6242] tun0: persist enabled [ 124.138458][ T6245] tun0: tun_chr_ioctl cmd 1074025675 [ 124.159252][ T6245] tun0: persist disabled [ 124.184632][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 124.232784][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 124.244031][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 124.261347][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 124.273310][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 124.286835][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 124.298367][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 124.307128][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 124.359458][ T6253] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 124.377068][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 124.417311][ T6046] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 124.470257][ T6046] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 124.502901][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 124.546600][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 124.606246][ T3572] Bluetooth: hci0: command tx timeout [ 124.660112][ T6270] validate_nla: 15 callbacks suppressed [ 124.660129][ T6270] netlink: 'syz-executor.2': attribute type 58 has an invalid length. [ 124.674660][ T6270] netlink: 'syz-executor.2': attribute type 58 has an invalid length. [ 124.703290][ T6270] netlink: 'syz-executor.2': attribute type 58 has an invalid length. [ 125.238539][ T6287] tun0: tun_chr_ioctl cmd 1074025675 [ 125.286364][ T6287] tun0: persist enabled [ 125.320399][ T6293] tun0: tun_chr_ioctl cmd 1074025675 [ 125.345997][ T6293] tun0: persist disabled [ 125.397086][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 125.404677][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 125.483023][ T6046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.632828][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 125.677195][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 125.793090][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 125.822210][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 125.872773][ T6046] device veth0_vlan entered promiscuous mode [ 125.901520][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 125.918971][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 125.953213][ T6046] device veth1_vlan entered promiscuous mode [ 126.002447][ T6306] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 126.015950][ T6306] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 126.037032][ T6306] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 126.055192][ T6306] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 126.079007][ T6306] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 126.116169][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 126.131983][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 126.144476][ T6046] device veth0_macvtap entered promiscuous mode [ 126.158007][ T6046] device veth1_macvtap entered promiscuous mode [ 126.194956][ T6046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.229952][ T6046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.260391][ T6046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.286389][ T6046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.316651][ T6046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.343264][ T6046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.354101][ T6046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.365242][ T6046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.380410][ T6046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.392605][ T6046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.402769][ T6046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.413695][ T6046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.433044][ T6046] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.444918][ T6319] netlink: 763 bytes leftover after parsing attributes in process `syz-executor.3'. [ 126.490700][ T6327] tun0: tun_chr_ioctl cmd 1074025675 [ 126.506131][ T6327] tun0: persist enabled [ 126.518793][ T6321] tun0: tun_chr_ioctl cmd 1074025675 [ 126.524568][ T6321] tun0: persist disabled [ 126.530810][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 126.542402][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 126.550798][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 126.559729][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 126.571091][ T6046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.587683][ T6046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.632347][ T6046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.675179][ T6046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.686093][ T3572] Bluetooth: hci0: command tx timeout [ 126.731081][ T6046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.742390][ T6046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.760500][ T6046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.774910][ T6046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.795636][ T6046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.813668][ T6046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.823863][ T6046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.844304][ T6046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.866993][ T6046] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.888363][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 126.903185][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 126.920066][ T6046] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.976648][ T6046] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.051106][ T6046] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.084107][ T6046] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.143056][ T6336] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 127.164087][ T6336] device hsr0 entered promiscuous mode [ 127.226935][ T6336] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 127.324135][ T6336] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 127.338484][ T6336] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 127.362263][ T6336] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 127.556097][ T6350] netlink: 763 bytes leftover after parsing attributes in process `syz-executor.3'. [ 127.580091][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.580543][ T6353] netlink: 'syz-executor.4': attribute type 58 has an invalid length. [ 127.620074][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.637766][ T6353] netlink: 'syz-executor.4': attribute type 58 has an invalid length. [ 127.674809][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 127.688287][ T6356] netlink: 'syz-executor.4': attribute type 58 has an invalid length. [ 127.746757][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.773671][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.799548][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 127.999931][ T6372] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 128.061618][ T6372] device hsr0 entered promiscuous mode [ 128.107256][ T6372] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 128.133171][ T6372] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 128.169044][ T6372] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 128.207034][ T6372] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 128.329666][ T6386] netlink: 'syz-executor.2': attribute type 58 has an invalid length. [ 128.491851][ T6394] netlink: 16410 bytes leftover after parsing attributes in process `syz-executor.2'. [ 128.783944][ T6407] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.2'. [ 128.895627][ T6413] netlink: 65039 bytes leftover after parsing attributes in process `syz-executor.4'. [ 129.195498][ T6415] device syzkaller0 entered promiscuous mode [ 129.222876][ T6432] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.2'. [ 129.246971][ T6432] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.2'. [ 129.394232][ T6441] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 129.497506][ T6445] netlink: 65039 bytes leftover after parsing attributes in process `syz-executor.1'. [ 129.633078][ T6454] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 129.948847][ T6471] validate_nla: 4 callbacks suppressed [ 129.948864][ T6471] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 130.239373][ T6487] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 130.785133][ T6520] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 131.592332][ T6549] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 131.626608][ T6549] __nla_validate_parse: 9 callbacks suppressed [ 131.626624][ T6549] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 131.801969][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.002529][ T48] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 132.012712][ T48] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 132.024046][ T48] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 132.032778][ T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 132.054836][ T48] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 132.066302][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 132.098311][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.222347][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.370307][ T6561] device syzkaller0 entered promiscuous mode [ 132.388881][ T6572] netlink: 65039 bytes leftover after parsing attributes in process `syz-executor.0'. [ 132.421267][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.847653][ T1254] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.853992][ T1254] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.133506][ T6557] chnl_net:caif_netlink_parms(): no params data found [ 133.378742][ T6619] device syzkaller0 entered promiscuous mode [ 133.506656][ T6557] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.513924][ T6557] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.532775][ T6557] device bridge_slave_0 entered promiscuous mode [ 133.816542][ T6557] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.823658][ T6557] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.869754][ T6557] device bridge_slave_1 entered promiscuous mode [ 134.126592][ T3572] Bluetooth: hci4: command tx timeout [ 134.192394][ T6557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.254160][ T6557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.440470][ T6557] team0: Port device team_slave_0 added [ 134.488561][ T6557] team0: Port device team_slave_1 added [ 134.672270][ T6557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.698783][ T6557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.766678][ T6557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.816408][ T6701] netlink: 48569 bytes leftover after parsing attributes in process `syz-executor.0'. [ 134.857135][ T6557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.866064][ T6557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.955060][ T6557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.190145][ T6557] device hsr_slave_0 entered promiscuous mode [ 135.226194][ T6557] device hsr_slave_1 entered promiscuous mode [ 135.251846][ T6557] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 135.281759][ T6557] Cannot create hsr debugfs directory [ 135.863379][ T9] device hsr_slave_0 left promiscuous mode [ 135.892157][ T9] device hsr_slave_1 left promiscuous mode [ 135.905081][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.950646][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.012139][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.050992][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.120027][ T9] device bridge_slave_1 left promiscuous mode [ 136.137597][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.192908][ T9] device bridge_slave_0 left promiscuous mode [ 136.206288][ T3572] Bluetooth: hci4: command tx timeout [ 136.212272][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.281913][ T9] device veth1_macvtap left promiscuous mode [ 136.310432][ T9] device veth0_macvtap left promiscuous mode [ 136.335597][ T9] device veth1_vlan left promiscuous mode [ 136.350970][ T9] device veth0_vlan left promiscuous mode [ 137.148878][ T9] team0 (unregistering): Port device team_slave_1 removed [ 137.165116][ T9] team0 (unregistering): Port device team_slave_0 removed [ 137.180260][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.205407][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.298841][ T9] bond0 (unregistering): Released all slaves [ 137.394067][ T6776] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 137.432213][ T6789] netlink: 48569 bytes leftover after parsing attributes in process `syz-executor.3'. [ 137.969612][ T6828] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.0'. [ 138.201048][ T6557] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 138.285965][ T3572] Bluetooth: hci4: command tx timeout [ 138.299379][ T6557] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 138.299832][ T6839] netlink: 'syz-executor.1': attribute type 272 has an invalid length. [ 138.374216][ T6839] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.1'. [ 138.376626][ T6846] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 138.400315][ T6557] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 138.534121][ T6557] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 138.564643][ T6846] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 138.890861][ T6557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.934574][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 138.969779][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 138.992416][ T6557] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.048432][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 139.076931][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 139.121103][ T3619] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.128333][ T3619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.198149][ T6876] netlink: 16186 bytes leftover after parsing attributes in process `syz-executor.1'. [ 139.222973][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 139.237156][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 139.255163][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 139.299616][ T3624] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.306870][ T3624] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.367800][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 139.426807][ T6886] netlink: 'syz-executor.0': attribute type 272 has an invalid length. [ 139.446355][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 139.464353][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 139.490523][ T6886] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.0'. [ 139.501954][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 139.516421][ T6888] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 139.531072][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 139.553596][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 139.577578][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 139.619058][ T6888] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 139.655346][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 139.696841][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 139.743184][ T6557] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 139.832944][ T6557] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 139.874911][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 139.911507][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 140.069428][ T6911] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 140.365843][ T3572] Bluetooth: hci4: command tx timeout [ 140.496137][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 140.504374][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 140.567214][ T6557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.205614][ T6963] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 141.860848][ T6987] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.1'. [ 141.985590][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 141.999521][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 142.043911][ T6557] device veth0_vlan entered promiscuous mode [ 142.121200][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 142.130586][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 142.165481][ T6557] device veth1_vlan entered promiscuous mode [ 142.194943][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 142.210797][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 142.247668][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 142.340367][ T7005] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 142.404820][ T7005] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.0'. [ 142.472805][ T6557] device veth0_macvtap entered promiscuous mode [ 142.519182][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 142.538823][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 142.603580][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 142.674902][ T6557] device veth1_macvtap entered promiscuous mode [ 142.704201][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 142.727226][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 142.830751][ T6557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.934394][ T6557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.975774][ T6557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.006734][ T6557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.025869][ T6557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.036844][ T6557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.060264][ T6557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.107403][ T6557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.139951][ T6557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.162945][ T6557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.189496][ T6557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.213367][ T6557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.253216][ T6557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.290772][ T6557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.323875][ T6557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.375803][ T6557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.425764][ T6557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.466357][ T6557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.487441][ T6557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.497413][ T6557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.507959][ T6557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.518621][ T6557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.529521][ T6557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.539523][ T6557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.550155][ T6557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.562712][ T6557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.578361][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 143.603411][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 143.626560][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 143.662817][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 143.690642][ T6557] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.711962][ T6557] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.725278][ T6557] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.760717][ T6557] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.135380][ T3628] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.163567][ T3628] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.214059][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 144.240820][ T3628] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.323251][ T3628] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.361293][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 144.518840][ T7091] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 144.553616][ T7091] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.0'. [ 145.055441][ T7120] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 145.092097][ T7120] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.099954][ T7120] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.207067][ T7120] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.214256][ T7120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.221776][ T7120] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.229862][ T7120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.280262][ T7120] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 145.667687][ T7145] syz-executor.4[7145] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 145.667792][ T7145] syz-executor.4[7145] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.582028][ T7223] syz-executor.2[7223] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.637820][ T7227] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 147.661474][ T7227] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 147.802274][ T7231] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 147.861960][ T7231] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.4'. [ 147.913555][ T7223] syz-executor.2[7223] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.660530][ T7258] sctp: [Deprecated]: syz-executor.0 (pid 7258) Use of struct sctp_assoc_value in delayed_ack socket option. [ 148.660530][ T7258] Use struct sctp_sack_info instead [ 148.974988][ T7273] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 149.154743][ T7273] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 149.233058][ T7281] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 149.593863][ T7295] sctp: [Deprecated]: syz-executor.2 (pid 7295) Use of struct sctp_assoc_value in delayed_ack socket option. [ 149.593863][ T7295] Use struct sctp_sack_info instead [ 149.766249][ T7281] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.773792][ T7281] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.855729][ T7281] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.862937][ T7281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.870418][ T7281] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.877561][ T7281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.899201][ T7281] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 150.052922][ T7303] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 150.095762][ T7303] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.0'. [ 150.556083][ T7329] sctp: [Deprecated]: syz-executor.2 (pid 7329) Use of struct sctp_assoc_value in delayed_ack socket option. [ 150.556083][ T7329] Use struct sctp_sack_info instead [ 151.160848][ T3572] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 151.733230][ T3572] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 151.787643][ T7366] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 151.829924][ T7368] sctp: [Deprecated]: syz-executor.1 (pid 7368) Use of struct sctp_assoc_value in delayed_ack socket option. [ 151.829924][ T7368] Use struct sctp_sack_info instead [ 151.929779][ T7373] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 151.946496][ T7373] netlink: 17267 bytes leftover after parsing attributes in process `syz-executor.0'. [ 152.271849][ T7384] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 152.320488][ T7384] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.0'. [ 152.636161][ T7397] tap0: tun_chr_ioctl cmd 1074025672 [ 152.656002][ T7397] tap0: ignored: set checksum enabled [ 152.691650][ T7394] device batadv0 entered promiscuous mode [ 152.806644][ T7401] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 153.059565][ T7411] netlink: 'syz-executor.0': attribute type 15 has an invalid length. [ 153.068794][ T7411] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 153.275614][ T7425] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 153.391121][ T3572] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 153.583653][ T7442] sctp: [Deprecated]: syz-executor.0 (pid 7442) Use of struct sctp_assoc_value in delayed_ack socket option. [ 153.583653][ T7442] Use struct sctp_sack_info instead [ 153.959746][ T7456] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 154.110444][ T7465] tap0: tun_chr_ioctl cmd 1074025672 [ 154.120367][ T7465] tap0: ignored: set checksum enabled [ 154.489192][ T7486] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 156.395186][ T7584] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 156.420347][ T7584] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.4'. [ 156.499060][ T7590] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 156.521819][ T7590] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 156.549094][ T7593] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 156.564939][ T7590] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 156.588684][ T7590] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 157.199100][ T7626] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 157.246427][ T7631] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 157.268098][ T7626] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.4'. [ 157.276122][ T7631] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 157.316402][ T7631] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 157.857867][ T7649] netlink: 9286 bytes leftover after parsing attributes in process `syz-executor.4'. [ 157.980894][ T7661] device wlan0 entered promiscuous mode [ 158.129222][ T7667] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.1'. [ 158.216900][ T7673] netlink: 763 bytes leftover after parsing attributes in process `syz-executor.4'. [ 158.500090][ T7688] netlink: 9286 bytes leftover after parsing attributes in process `syz-executor.0'. [ 158.821942][ T7702] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.2'. [ 158.943845][ T7715] netlink: 763 bytes leftover after parsing attributes in process `syz-executor.3'. [ 159.293991][ T7733] device wlan0 entered promiscuous mode [ 159.563364][ T7745] netlink: 763 bytes leftover after parsing attributes in process `syz-executor.0'. [ 159.958852][ T7766] netlink: 9286 bytes leftover after parsing attributes in process `syz-executor.1'. [ 160.213341][ T7777] device wlan0 left promiscuous mode [ 160.366618][ T7786] device wlan0 entered promiscuous mode [ 160.462568][ T7792] device veth1_macvtap left promiscuous mode [ 160.486503][ T7792] device macsec0 entered promiscuous mode [ 160.547911][ T7794] device veth1_macvtap entered promiscuous mode [ 160.979842][ T7808] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.145566][ T7808] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.152769][ T7808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.074749][ T7864] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.108383][ T7866] validate_nla: 18 callbacks suppressed [ 162.108399][ T7866] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 162.230541][ T7866] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 162.263769][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 162.303789][ T3616] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.310979][ T3616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.630538][ T7896] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 162.943670][ T7913] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.974884][ T7915] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 162.997113][ T7915] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 163.023795][ T7915] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 163.033682][ T7915] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 163.044231][ T7915] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 163.158391][ T7913] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.166983][ T7913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.193897][ T7922] device veth1_macvtap left promiscuous mode [ 163.207693][ T7922] device macsec0 entered promiscuous mode [ 163.250989][ T7915] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 163.308890][ T7926] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 163.348666][ T7931] __nla_validate_parse: 1 callbacks suppressed [ 163.348708][ T7931] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.0'. [ 164.214429][ T7925] device veth1_macvtap entered promiscuous mode [ 164.936046][ T7982] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.0'. [ 165.743494][ T7986] device veth1_macvtap left promiscuous mode [ 165.764268][ T7992] device veth1_macvtap entered promiscuous mode [ 165.783390][ T7997] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.1'. [ 166.265202][ T8028] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.3'. [ 167.072317][ T8061] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.0'. [ 167.260841][ T8068] validate_nla: 17 callbacks suppressed [ 167.260914][ T8068] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 167.318912][ T8068] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 167.330907][ T8073] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 167.388493][ T8068] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 167.856497][ T8103] device veth1_macvtap left promiscuous mode [ 167.891961][ T8103] device veth1_macvtap entered promiscuous mode [ 167.916679][ T8104] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.1'. [ 168.083870][ T8111] netlink: 65039 bytes leftover after parsing attributes in process `syz-executor.3'. [ 168.631705][ T8142] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.1'. [ 168.806763][ T8149] netlink: 65039 bytes leftover after parsing attributes in process `syz-executor.2'. [ 168.902494][ T8155] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 169.122394][ T8168] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 169.135289][ T8168] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.3'. [ 169.961016][ T8174] device syzkaller0 entered promiscuous mode [ 170.107630][ T8197] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 170.182319][ T8203] device batadv0 entered promiscuous mode [ 170.363735][ T8201] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 170.457359][ T8201] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 170.468123][ T8211] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 170.573723][ T8201] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 170.674656][ T8232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.694906][ T8233] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 170.715533][ T8233] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.0'. [ 171.220141][ T8238] device veth1_macvtap left promiscuous mode [ 171.278930][ T8239] device veth1_macvtap entered promiscuous mode [ 171.315772][ T8243] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 171.815370][ T8267] device batadv0 entered promiscuous mode [ 171.964285][ T8279] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.3'. [ 172.185975][ T8272] Â: renamed from pim6reg1 [ 172.279151][ T8289] device veth1_macvtap left promiscuous mode [ 172.285328][ T8289] device macsec0 entered promiscuous mode [ 172.347471][ T8289] device veth1_macvtap entered promiscuous mode [ 173.070459][ T8327] Â: renamed from pim6reg1 [ 173.148664][ T8329] validate_nla: 2 callbacks suppressed [ 173.148680][ T8329] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 173.262895][ T8335] device batadv0 entered promiscuous mode [ 173.303239][ T8339] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.3'. [ 173.338766][ T8339] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 173.354288][ T8339] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 173.383872][ T8329] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 173.411610][ T8342] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 173.511807][ T8344] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 173.586226][ T8351] device syzkaller0 entered promiscuous mode [ 174.034098][ T8376] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. [ 174.068189][ T8376] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 174.088427][ T8376] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 174.448023][ T8393] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 174.476818][ T8393] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 174.504003][ T8393] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 174.528062][ T8393] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 174.743702][ T8410] Â: renamed from pim6reg1 [ 174.985100][ T8415] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.502275][ T8437] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 175.539209][ T8437] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 175.741955][ T8443] Â: renamed from pim6reg1 [ 175.783881][ T3579] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 175.793535][ T3579] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 175.801538][ T3579] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 175.816838][ T3579] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 175.824535][ T3579] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 175.843108][ T3579] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 175.885912][ T3579] Bluetooth: hci3: command 0x0406 tx timeout [ 175.892112][ T3579] Bluetooth: hci1: command 0x0406 tx timeout [ 176.345162][ T8474] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 176.354669][ T8474] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 176.390108][ T8445] chnl_net:caif_netlink_parms(): no params data found [ 176.494079][ T8445] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.501422][ T8445] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.509726][ T8445] device bridge_slave_0 entered promiscuous mode [ 176.565916][ T8445] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.573110][ T8445] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.585482][ T8445] device bridge_slave_1 entered promiscuous mode [ 176.613042][ T8445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.628378][ T8445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.665276][ T8445] team0: Port device team_slave_0 added [ 176.678952][ T8445] team0: Port device team_slave_1 added [ 176.767042][ T8445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.791788][ T8445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.828766][ T8445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.841785][ T8445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.849560][ T8445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.935870][ T8445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.015283][ T8445] device hsr_slave_0 entered promiscuous mode [ 177.022479][ T8445] device hsr_slave_1 entered promiscuous mode [ 177.029651][ T8445] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 177.044865][ T8445] Cannot create hsr debugfs directory [ 177.339783][ T8445] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.468534][ T8445] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.628533][ T8445] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.850010][ T8445] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.886240][ T3579] Bluetooth: hci0: command tx timeout [ 178.174054][ T3569] bond0: (slave syz_tun): Releasing backup interface [ 178.257458][ T3569] device syz_tun left promiscuous mode [ 178.382580][ T8445] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 178.428209][ T8445] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 178.455090][ T8445] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 178.480565][ T8445] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 178.677994][ T8445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.706266][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 178.714189][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 178.734537][ T8445] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.751989][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 178.772895][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.782261][ T3289] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.789425][ T3289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.819232][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 178.836638][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 178.845451][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.856758][ T3289] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.863926][ T3289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.876033][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 178.943782][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 178.948742][ T3574] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 178.956668][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 178.960717][ T3574] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 178.975511][ T3574] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 178.980266][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 178.985345][ T3574] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 179.008838][ T3574] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 179.016317][ T3574] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 179.018211][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 179.054643][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 179.063300][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 179.072121][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 179.080853][ T8563] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 179.105721][ T8563] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.3'. [ 179.169384][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 179.177661][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 179.187863][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 179.262665][ T8445] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 179.540083][ T46] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.684309][ T46] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.775142][ T8564] chnl_net:caif_netlink_parms(): no params data found [ 179.913473][ T46] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.966367][ T3579] Bluetooth: hci0: command tx timeout [ 180.022792][ T46] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.075870][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 180.083414][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 180.125263][ T8445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.242748][ T8564] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.255623][ T3572] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 180.265235][ T3572] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 180.272950][ T8564] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.273371][ T3572] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 180.303911][ T3572] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 180.316346][ T3572] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 180.321405][ T8564] device bridge_slave_0 entered promiscuous mode [ 180.334506][ T3574] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 180.407015][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 180.426522][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 180.489635][ T8564] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.503518][ T8564] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.528488][ T8564] device bridge_slave_1 entered promiscuous mode [ 180.596263][ T8564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.623941][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 180.637453][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 180.653007][ T8445] device veth0_vlan entered promiscuous mode [ 180.676819][ T8564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.712241][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 180.720557][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 180.775049][ T8445] device veth1_vlan entered promiscuous mode [ 180.825411][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 180.874548][ T8564] team0: Port device team_slave_0 added [ 180.890567][ T8564] team0: Port device team_slave_1 added [ 180.971803][ T8564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.982338][ T8564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.027620][ T8564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.068959][ T8564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.096080][ T8564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.166132][ T3579] Bluetooth: hci3: command tx timeout [ 181.186083][ T8564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.220500][ T8445] device veth0_macvtap entered promiscuous mode [ 181.279482][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 181.297389][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 181.351057][ T8445] device veth1_macvtap entered promiscuous mode [ 181.432863][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 181.441755][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 181.467087][ T8564] device hsr_slave_0 entered promiscuous mode [ 181.483821][ T8564] device hsr_slave_1 entered promiscuous mode [ 181.491017][ T8564] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 181.501145][ T8564] Cannot create hsr debugfs directory [ 181.507178][ T8627] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 181.521769][ T8627] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.3'. [ 181.596686][ T8633] skbuff: bad partial csum: csum=65417/6 headroom=162 headlen=65425 [ 181.611765][ T8445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.644256][ T8445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.664096][ T8445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.675616][ T8445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.686251][ T8445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.696804][ T8445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.706723][ T8445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.717238][ T8445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.727364][ T8445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.737847][ T8445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.748358][ T8445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.758859][ T8445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.768712][ T8445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.780531][ T8445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.807390][ T8445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.912030][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 181.931494][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 181.963513][ T8445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.984400][ T8445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.995779][ T8445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.006408][ T8445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.016266][ T8445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.028287][ T8445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.038152][ T8445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.048658][ T3579] Bluetooth: hci0: command tx timeout [ 182.054243][ T8445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.064147][ T8445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.085421][ T8445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.107173][ T8445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.120011][ T8445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.131495][ T8445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.142521][ T8445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.154649][ T8445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.214668][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 182.226725][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 182.245427][ T8445] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.258614][ T8445] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.268115][ T8445] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.277342][ T8445] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.366062][ T3574] Bluetooth: hci4: command tx timeout [ 182.505111][ T8604] chnl_net:caif_netlink_parms(): no params data found [ 182.948820][ T8564] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.269188][ T3574] Bluetooth: hci3: command tx timeout [ 183.296382][ T5195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.304537][ T5195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.380057][ T8564] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.527656][ T46] device hsr_slave_0 left promiscuous mode [ 183.536290][ T46] device hsr_slave_1 left promiscuous mode [ 183.552800][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.570637][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.637026][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.644574][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.656782][ T46] device bridge_slave_1 left promiscuous mode [ 183.664167][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.673166][ T46] device bridge_slave_0 left promiscuous mode [ 183.679894][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.693559][ T46] device veth1_macvtap left promiscuous mode [ 183.700154][ T46] device veth0_macvtap left promiscuous mode [ 183.706617][ T46] device veth1_vlan left promiscuous mode [ 183.712445][ T46] device veth0_vlan left promiscuous mode [ 184.126170][ T3574] Bluetooth: hci0: command tx timeout [ 184.343502][ T46] team0 (unregistering): Port device team_slave_1 removed [ 184.384629][ T46] team0 (unregistering): Port device team_slave_0 removed [ 184.412412][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.428376][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.446311][ T3574] Bluetooth: hci4: command tx timeout [ 184.512733][ T46] bond0 (unregistering): Released all slaves [ 184.558201][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 184.621071][ T8564] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.650550][ T8604] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.657974][ T8604] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.680965][ T8604] device bridge_slave_0 entered promiscuous mode [ 184.709074][ T8604] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.727212][ T8604] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.735459][ T8604] device bridge_slave_1 entered promiscuous mode [ 184.768532][ T3999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.787791][ T3999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.893929][ T8564] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.998058][ T8712] skbuff: bad partial csum: csum=65417/6 headroom=162 headlen=65425 [ 185.053491][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 185.072671][ T8604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.118880][ T8604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.234723][ T8604] team0: Port device team_slave_0 added [ 185.301127][ T8604] team0: Port device team_slave_1 added [ 185.326441][ T3574] Bluetooth: hci3: command tx timeout [ 185.595176][ T8720] device syzkaller0 entered promiscuous mode [ 185.647174][ T8604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.654154][ T8604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.725862][ T8604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.748358][ T8564] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 185.931900][ T8604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.944089][ T8604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.003838][ T8604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.026817][ T8564] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 186.048004][ T8564] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 186.085036][ T8564] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 186.247717][ T8604] device hsr_slave_0 entered promiscuous mode [ 186.295021][ T3579] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 186.306406][ T3579] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 186.314742][ T3579] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 186.323991][ T3579] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 186.331831][ T3579] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 186.339339][ T3579] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 186.362524][ T8604] device hsr_slave_1 entered promiscuous mode [ 186.398565][ T8604] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 186.421463][ T8604] Cannot create hsr debugfs directory [ 186.526760][ T3579] Bluetooth: hci4: command tx timeout [ 186.734338][ T8564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.865239][ T8564] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.912902][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 186.922011][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 186.974301][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 186.995047][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 187.014751][ T3616] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.022077][ T3616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.041201][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 187.062187][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 187.082154][ T3616] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.089397][ T3616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.163645][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 187.183103][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 187.204340][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 187.374890][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 187.388792][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 187.398615][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 187.406485][ T3579] Bluetooth: hci3: command tx timeout [ 187.417400][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 187.494377][ T8564] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 187.507256][ T8564] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 187.612689][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 187.627603][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 187.651674][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 187.672111][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 187.684256][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 187.704090][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 187.823339][ T8770] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 187.858299][ T8770] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.1'. [ 188.375079][ T3574] Bluetooth: hci0: command tx timeout [ 188.605887][ T3574] Bluetooth: hci4: command tx timeout [ 188.685384][ T8745] chnl_net:caif_netlink_parms(): no params data found [ 188.921635][ T8745] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.935883][ T8745] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.945255][ T8745] device bridge_slave_0 entered promiscuous mode [ 188.999290][ T8745] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.026185][ T8745] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.043705][ T8745] device bridge_slave_1 entered promiscuous mode [ 189.076269][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 189.083790][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 189.127186][ T8564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.191065][ T8745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.223070][ T8745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.270942][ T8604] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 189.297566][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 189.328006][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 189.374783][ T8745] team0: Port device team_slave_0 added [ 189.392028][ T8604] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 189.425100][ T8745] team0: Port device team_slave_1 added [ 189.436216][ T8604] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 189.523023][ T8807] skbuff: bad partial csum: csum=65417/6 headroom=162 headlen=65425 [ 189.564949][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 189.588070][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 189.608844][ T8564] device veth0_vlan entered promiscuous mode [ 189.616378][ T8604] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 189.637647][ T8745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.644626][ T8745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.691749][ T8745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.707892][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 189.725208][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 189.756736][ T8564] device veth1_vlan entered promiscuous mode [ 189.832845][ T46] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.850363][ T8745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.866007][ T8745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.905577][ T8745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.033130][ T46] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.105566][ T8604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.136457][ T8745] device hsr_slave_0 entered promiscuous mode [ 190.158631][ T8745] device hsr_slave_1 entered promiscuous mode [ 190.184891][ T8745] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.202962][ T8745] Cannot create hsr debugfs directory [ 190.219148][ T46] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.241493][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 190.252498][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 190.264096][ T8564] device veth0_macvtap entered promiscuous mode [ 190.283539][ T8604] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.312297][ T46] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.325241][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 190.333981][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 190.346802][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 190.357197][ T8564] device veth1_macvtap entered promiscuous mode [ 190.417104][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 190.431016][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 190.440362][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 190.450379][ T3574] Bluetooth: hci0: command tx timeout [ 190.456745][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.463857][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.471950][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 190.481417][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 190.489991][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.497138][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.504761][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 190.513602][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 190.522291][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 190.531376][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 190.547219][ T8564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.568758][ T8564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.580393][ T8564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.591215][ T8564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.601498][ T8564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.612771][ T8564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.622746][ T8564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.633299][ T8564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.643271][ T8564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.654188][ T8564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.664293][ T8564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.676086][ T8564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.688125][ T8564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.699114][ T8564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.713669][ T8564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.741823][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 190.750174][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 190.758754][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 190.768246][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 190.777670][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 190.789821][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 190.800758][ T8564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.811372][ T8564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.832556][ T8564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.843619][ T8564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.855350][ T8564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.866263][ T8564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.876562][ T8564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.901242][ T8564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.911732][ T8564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.923441][ T8564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.933735][ T8564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.944314][ T8564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.954555][ T8564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.965920][ T8564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.977533][ T8564] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.993420][ T8604] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 191.003934][ T8604] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 191.078975][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 191.089855][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 191.099022][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 191.123494][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 191.137248][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 191.155982][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 191.167574][ T8564] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.185944][ T8564] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.195299][ T8564] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.205500][ T8564] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.276191][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 191.333413][ T8835] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 191.379123][ T8835] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.1'. [ 191.639400][ T5261] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.666073][ T5261] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.721033][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 191.804069][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.813578][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 191.822416][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 191.845286][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.871115][ T8604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.900483][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 192.222978][ T8745] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 192.280535][ T8745] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 192.338927][ T8745] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 192.482718][ T8745] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 192.525995][ T3574] Bluetooth: hci0: command tx timeout [ 192.684982][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 192.707080][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 192.764102][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 192.792570][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 192.809985][ T8604] device veth0_vlan entered promiscuous mode [ 192.833039][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 192.854316][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 192.979414][ T8604] device veth1_vlan entered promiscuous mode [ 193.004729][ T8745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.084085][ T8745] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.106126][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 193.116733][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 193.125039][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 193.135203][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 193.181487][ T46] device hsr_slave_0 left promiscuous mode [ 193.218234][ T46] device hsr_slave_1 left promiscuous mode [ 193.236962][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.245231][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.272858][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.295905][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.313082][ T46] device bridge_slave_1 left promiscuous mode [ 193.326774][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.337281][ T46] device bridge_slave_0 left promiscuous mode [ 193.344372][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.384355][ T46] device veth1_macvtap left promiscuous mode [ 193.396536][ T46] device veth0_macvtap left promiscuous mode [ 193.402665][ T46] device veth1_vlan left promiscuous mode [ 193.425998][ T46] device veth0_vlan left promiscuous mode [ 193.448209][ T3579] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 193.457314][ T3579] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 193.465853][ T3579] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 193.474193][ T3579] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 193.482088][ T3579] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 193.490355][ T3579] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 193.758247][ T46] team0 (unregistering): Port device team_slave_1 removed [ 193.775131][ T46] team0 (unregistering): Port device team_slave_0 removed [ 193.804359][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.833956][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.902258][ T46] bond0 (unregistering): Released all slaves [ 193.961986][ T8604] device veth0_macvtap entered promiscuous mode [ 194.008221][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 194.017677][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 194.028090][ T3621] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.035191][ T3621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.043675][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 194.052604][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 194.077571][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 194.095144][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 194.107116][ T8604] device veth1_macvtap entered promiscuous mode [ 194.180915][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 194.192957][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 194.218203][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 194.243563][ T3619] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.250744][ T3619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.280538][ T8604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.292927][ T1254] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.293033][ T1254] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.355820][ T8604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.388084][ T8918] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 194.395814][ T8604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.425938][ T8604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.456167][ T8604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.485788][ T8604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.515720][ T8604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.536706][ T8604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.565831][ T8604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.585746][ T8604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.606075][ T3574] Bluetooth: hci0: command tx timeout [ 194.617402][ T8604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.644045][ T8604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.657648][ T8604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.680849][ T8604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.713190][ T8604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.744876][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 194.764490][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 194.805924][ T8918] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 194.815069][ T8920] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 194.840073][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 194.867959][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 194.897219][ T8922] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 194.932362][ T8925] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 194.980825][ T8926] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 195.013383][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 195.033688][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 195.064573][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 195.085634][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 195.136780][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 195.156681][ T8604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.190503][ T8604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.211401][ T8604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.233303][ T8604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.252511][ T8604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.265769][ T8604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.284283][ T8604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.305875][ T8604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.345914][ T8604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.356842][ T8604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.367059][ T8604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.377846][ T8604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.388117][ T8604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.403564][ T8604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.458001][ T8604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.465506][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 195.481055][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 195.551009][ T8604] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.566257][ T3574] Bluetooth: hci3: command tx timeout [ 195.638095][ T8604] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.666567][ T8604] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.675315][ T8604] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.715362][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 195.733762][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 195.800399][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 195.836658][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 195.877048][ T8745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 195.962065][ T8959] [ 195.964421][ T8959] ====================================================== [ 195.971438][ T8959] WARNING: possible circular locking dependency detected [ 195.978455][ T8959] 6.1.93-syzkaller #0 Not tainted [ 195.983472][ T8959] ------------------------------------------------------ [ 195.990481][ T8959] dhcpcd-run-hook/8959 is trying to acquire lock: [ 195.996975][ T8959] ffff88807bc28018 (&sighand->siglock){-...}-{2:2}, at: __lock_task_sighand+0x145/0x2d0 [ 196.006764][ T8959] [ 196.006764][ T8959] but task is already holding lock: [ 196.014124][ T8959] ffff8880b9935e90 (lock#10){+.+.}-{2:2}, at: __mmap_lock_do_trace_acquire_returned+0x84/0x670 [ 196.024578][ T8959] [ 196.024578][ T8959] which lock already depends on the new lock. [ 196.024578][ T8959] [ 196.034973][ T8959] [ 196.034973][ T8959] the existing dependency chain (in reverse order) is: [ 196.043976][ T8959] [ 196.043976][ T8959] -> #3 (lock#10){+.+.}-{2:2}: [ 196.050935][ T8959] lock_acquire+0x1f8/0x5a0 [ 196.055963][ T8959] __mmap_lock_do_trace_acquire_returned+0x9d/0x670 [ 196.063084][ T8959] stack_map_get_build_id_offset+0x99e/0x9c0 [ 196.069601][ T8959] __bpf_get_stack+0x495/0x570 [ 196.074897][ T8959] bpf_get_stack_raw_tp+0x1b2/0x220 [ 196.080614][ T8959] bpf_prog_682b67a395ac5c66+0xe/0x12 [ 196.086516][ T8959] bpf_trace_run2+0x1fd/0x410 [ 196.091710][ T8959] trace_tlb_flush+0x151/0x1a0 [ 196.096991][ T8959] switch_mm_irqs_off+0x84a/0xc20 [ 196.102534][ T8959] __schedule+0x1140/0x4550 [ 196.107568][ T8959] schedule+0xbf/0x180 [ 196.112160][ T8959] futex_wait_queue+0x149/0x1d0 [ 196.117529][ T8959] futex_wait+0x203/0x5c0 [ 196.122378][ T8959] do_futex+0x3b5/0x490 [ 196.127048][ T8959] __se_sys_futex+0x3d7/0x460 [ 196.132250][ T8959] do_syscall_64+0x3b/0xb0 [ 196.137192][ T8959] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 196.143705][ T8959] [ 196.143705][ T8959] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 196.151000][ T8959] lock_acquire+0x1f8/0x5a0 [ 196.156024][ T8959] _raw_spin_lock_nested+0x2d/0x40 [ 196.161656][ T8959] raw_spin_rq_lock_nested+0x26/0x140 [ 196.167554][ T8959] task_fork_fair+0x5d/0x350 [ 196.172758][ T8959] sched_cgroup_fork+0x374/0x400 [ 196.178214][ T8959] copy_process+0x2442/0x4060 [ 196.183407][ T8959] kernel_clone+0x222/0x920 [ 196.188430][ T8959] user_mode_thread+0x12e/0x190 [ 196.193882][ T8959] rest_init+0x23/0x300 [ 196.198553][ T8959] start_kernel+0x0/0x53f [ 196.203400][ T8959] start_kernel+0x496/0x53f [ 196.208416][ T8959] secondary_startup_64_no_verify+0xcf/0xdb [ 196.214829][ T8959] [ 196.214829][ T8959] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 196.222126][ T8959] lock_acquire+0x1f8/0x5a0 [ 196.227149][ T8959] _raw_spin_lock_irqsave+0xd1/0x120 [ 196.232950][ T8959] try_to_wake_up+0xad/0x12e0 [ 196.238148][ T8959] complete_signal+0x796/0xbd0 [ 196.243517][ T8959] __send_signal_locked+0xb1a/0xdc0 [ 196.249235][ T8959] do_notify_parent+0xe2b/0x1100 [ 196.254703][ T8959] do_exit+0x172e/0x26a0 [ 196.259467][ T8959] do_group_exit+0x202/0x2b0 [ 196.264575][ T8959] __x64_sys_exit_group+0x3b/0x40 [ 196.270133][ T8959] do_syscall_64+0x3b/0xb0 [ 196.275071][ T8959] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 196.281484][ T8959] [ 196.281484][ T8959] -> #0 (&sighand->siglock){-...}-{2:2}: [ 196.289312][ T8959] validate_chain+0x1661/0x5950 [ 196.294687][ T8959] __lock_acquire+0x125b/0x1f80 [ 196.300056][ T8959] lock_acquire+0x1f8/0x5a0 [ 196.305083][ T8959] _raw_spin_lock_irqsave+0xd1/0x120 [ 196.310885][ T8959] __lock_task_sighand+0x145/0x2d0 [ 196.316517][ T8959] group_send_sig_info+0x26c/0x300 [ 196.322235][ T8959] bpf_send_signal_common+0x2d8/0x420 [ 196.328132][ T8959] bpf_send_signal+0x15/0x20 [ 196.333241][ T8959] bpf_prog_9fbc3d1d47c9b36c+0x1a/0x21 [ 196.339223][ T8959] bpf_trace_run4+0x253/0x470 [ 196.344418][ T8959] __mmap_lock_do_trace_acquire_returned+0x5e3/0x670 [ 196.351609][ T8959] map_vdso+0x2c8/0x2e0 [ 196.356283][ T8959] load_elf_binary+0x1eab/0x2750 [ 196.361766][ T8959] bprm_execve+0x96a/0x18a0 [ 196.366781][ T8959] do_execveat_common+0x580/0x720 [ 196.372320][ T8959] __x64_sys_execve+0x8e/0xa0 [ 196.377511][ T8959] do_syscall_64+0x3b/0xb0 [ 196.382448][ T8959] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 196.388950][ T8959] [ 196.388950][ T8959] other info that might help us debug this: [ 196.388950][ T8959] [ 196.399167][ T8959] Chain exists of: [ 196.399167][ T8959] &sighand->siglock --> &rq->__lock --> lock#10 [ 196.399167][ T8959] [ 196.411344][ T8959] Possible unsafe locking scenario: [ 196.411344][ T8959] [ 196.418785][ T8959] CPU0 CPU1 [ 196.424139][ T8959] ---- ---- [ 196.429495][ T8959] lock(lock#10); [ 196.433217][ T8959] lock(&rq->__lock); [ 196.439802][ T8959] lock(lock#10); [ 196.446092][ T8959] lock(&sighand->siglock); [ 196.450677][ T8959] [ 196.450677][ T8959] *** DEADLOCK *** [ 196.450677][ T8959] [ 196.458811][ T8959] 5 locks held by dhcpcd-run-hook/8959: [ 196.464347][ T8959] #0: ffff88807ccf26d8 (&mm->mmap_lock){++++}-{3:3}, at: map_vdso+0x60/0x2e0 [ 196.473234][ T8959] #1: ffff8880b9935e90 (lock#10){+.+.}-{2:2}, at: __mmap_lock_do_trace_acquire_returned+0x84/0x670 [ 196.484038][ T8959] #2: ffffffff8d12acc0 (rcu_read_lock){....}-{1:2}, at: get_mm_memcg_path+0xb1/0x600 [ 196.493615][ T8959] #3: ffffffff8d12acc0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run4+0x16a/0x470 [ 196.503014][ T8959] #4: ffffffff8d12acc0 (rcu_read_lock){....}-{1:2}, at: __lock_task_sighand+0x25/0x2d0 [ 196.512762][ T8959] [ 196.512762][ T8959] stack backtrace: [ 196.518649][ T8959] CPU: 1 PID: 8959 Comm: dhcpcd-run-hook Not tainted 6.1.93-syzkaller #0 [ 196.527055][ T8959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 196.537114][ T8959] Call Trace: [ 196.540389][ T8959] [ 196.543319][ T8959] dump_stack_lvl+0x1e3/0x2cb [ 196.548001][ T8959] ? nf_tcp_handle_invalid+0x642/0x642 [ 196.553900][ T8959] ? print_circular_bug+0x12b/0x1a0 [ 196.559111][ T8959] check_noncircular+0x2fa/0x3b0 [ 196.564047][ T8959] ? add_chain_block+0x850/0x850 [ 196.568990][ T8959] ? lockdep_lock+0x11f/0x2a0 [ 196.573674][ T8959] ? _find_first_zero_bit+0xd0/0x100 [ 196.578979][ T8959] validate_chain+0x1661/0x5950 [ 196.583868][ T8959] ? reacquire_held_locks+0x660/0x660 [ 196.589252][ T8959] ? reacquire_held_locks+0x660/0x660 [ 196.594633][ T8959] ? validate_chain+0x112/0x5950 [ 196.599575][ T8959] ? reacquire_held_locks+0x660/0x660 [ 196.604950][ T8959] ? reacquire_held_locks+0x660/0x660 [ 196.610340][ T8959] ? mark_lock+0x9a/0x340 [ 196.614673][ T8959] __lock_acquire+0x125b/0x1f80 [ 196.619534][ T8959] lock_acquire+0x1f8/0x5a0 [ 196.624036][ T8959] ? __lock_task_sighand+0x145/0x2d0 [ 196.629324][ T8959] ? read_lock_is_recursive+0x10/0x10 [ 196.634694][ T8959] ? ct_irq_exit_irqson+0x150/0x1b0 [ 196.639892][ T8959] ? ct_irq_enter_irqson+0x1b0/0x1b0 [ 196.645178][ T8959] ? read_lock_is_recursive+0x10/0x10 [ 196.650555][ T8959] ? _raw_spin_lock_irqsave+0xac/0x120 [ 196.656017][ T8959] ? _raw_spin_lock_irqsave+0xac/0x120 [ 196.661474][ T8959] _raw_spin_lock_irqsave+0xd1/0x120 [ 196.666757][ T8959] ? __lock_task_sighand+0x145/0x2d0 [ 196.672041][ T8959] ? _raw_spin_lock+0x40/0x40 [ 196.676750][ T8959] __lock_task_sighand+0x145/0x2d0 [ 196.681864][ T8959] ? __lock_task_sighand+0x25/0x2d0 [ 196.687064][ T8959] group_send_sig_info+0x26c/0x300 [ 196.692183][ T8959] ? lockdep_assert_task_sighand_held+0x2b0/0x2b0 [ 196.698691][ T8959] bpf_send_signal_common+0x2d8/0x420 [ 196.704061][ T8959] ? trace_bpf_trace_printk+0x250/0x250 [ 196.709604][ T8959] ? kernfs_path_from_node+0x234/0xb00 [ 196.715068][ T8959] ? bpf_trace_run4+0x16a/0x470 [ 196.719923][ T8959] bpf_send_signal+0x15/0x20 [ 196.724506][ T8959] bpf_prog_9fbc3d1d47c9b36c+0x1a/0x21 [ 196.730059][ T8959] bpf_trace_run4+0x253/0x470 [ 196.734731][ T8959] ? asm_exc_int3+0x35/0x40 [ 196.739237][ T8959] ? bpf_trace_run3+0x440/0x440 [ 196.744174][ T8959] ? __mmap_lock_do_trace_acquire_returned+0x501/0x670 [ 196.751034][ T8959] __mmap_lock_do_trace_acquire_returned+0x5e3/0x670 [ 196.757708][ T8959] ? __mmap_lock_do_trace_acquire_returned+0x84/0x670 [ 196.764468][ T8959] map_vdso+0x2c8/0x2e0 [ 196.768627][ T8959] load_elf_binary+0x1eab/0x2750 [ 196.773584][ T8959] ? load_script+0x810/0x810 [ 196.778174][ T8959] ? _raw_read_unlock+0x24/0x40 [ 196.783024][ T8959] ? load_misc_binary+0x546/0xa40 [ 196.788046][ T8959] ? ima_file_mprotect+0x520/0x520 [ 196.793160][ T8959] bprm_execve+0x96a/0x18a0 [ 196.797665][ T8959] ? alloc_bprm+0x700/0x700 [ 196.802165][ T8959] ? copy_strings+0x438/0x480 [ 196.806840][ T8959] do_execveat_common+0x580/0x720 [ 196.811865][ T8959] __x64_sys_execve+0x8e/0xa0 [ 196.816550][ T8959] do_syscall_64+0x3b/0xb0 [ 196.820970][ T8959] ? clear_bhb_loop+0x45/0xa0 [ 196.825691][ T8959] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 196.831587][ T8959] RIP: 0033:0x7f6e0b3d8ef7 [ 196.836004][ T8959] Code: Unable to access opcode bytes at 0x7f6e0b3d8ecd. [ 196.843013][ T8959] RSP: 002b:00007f6e0b282e78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 196.851425][ T8959] RAX: ffffffffffffffda RBX: 00007ffcd01aa700 RCX: 00007f6e0b3d8ef7 2024/06/16 08:59:47 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 196.859485][ T8959] RDX: 000055ddba020b80 RSI: 00007ffcd01aabf0 RDI: 000055ddb8bf1df6 [ 196.867453][ T8959] RBP: 00007f6e0b282ff0 R08: 0000000000000000 R09: 0000000000000000 [ 196.875511][ T8959] R10: 0000000000000008 R11: 0000000000000246 R12: 00007ffcd01aaa18 [ 196.883478][ T8959] R13: 00007f6e0b282f28 R14: 0000000000000000 R15: 0000000000000041 [ 196.891456][ T8959] [ 197.645915][ T3574] Bluetooth: hci3: command tx timeout Connection to 10.128.1.54 closed by remote host.