last executing test programs: 10.021417782s ago: executing program 0: r0 = perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='(\"@]K@{.\"\x02') 9.713271869s ago: executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xb2}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) 9.477481925s ago: executing program 0: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r0, 0x20, &(0x7f0000000140)={0xfffffffffffffffd, 0x0, 0x0, &(0x7f0000000100)=""/47, 0x2f}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000840)=r1, 0x4) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r5, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) recvmsg$unix(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000002c0)=""/139, 0x8b}, {0x0, 0x3}], 0x2, &(0x7f0000000880)}, 0x0) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000900)="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", 0xfffffd10}], 0x1}, 0x800) 9.418435185s ago: executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x4}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x6, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 8.92967231s ago: executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000100), &(0x7f0000000180)=r0}, 0x20) close(r0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x92, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000140), &(0x7f0000000280)=r0}, 0x20) 8.678916518s ago: executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xb2}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) 8.369388745s ago: executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) sendmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000004c0)='{', 0x1}], 0x1}, 0x2400c041) 8.345827579s ago: executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000100000000003b810100850000d06218df931c37e5005000000095508aae1f17700000000082a37897a78bb28808767e4639c53e97153921ab7556dca2728acd1da83301a80fca2914ac125447708a3ad4cbe7c4d8f982835aba955861d5c4242ea9a5b63982a495745670a9812bb348b0bad715c12b789e228a3745dd615f5abad253bd4319f13a42c77f2f6a7111059bd196f51a06dfb9f7e7ef158a199b6cc561cc92e7220ad7f704aa728047b691c55814762de29009ca2a53eebbf478979f570d0228116a9348ecf4136c3c31fa1ce0860d26"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x2a, &(0x7f0000000100)=r3, 0x4) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)='\f', 0x1}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0xfd9f) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r4}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000a00)={r3}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800009500"/17], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r7}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r8, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) recvmsg$unix(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/27, 0x1b}, {&(0x7f0000000440)=""/65, 0x41}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/4096, 0x1000}, {&(0x7f0000000540)=""/79, 0x4f}], 0x6, &(0x7f0000000800)=[@rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights], 0xf8}, 0x2) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$tipc(r10, &(0x7f0000000400)={&(0x7f00000002c0)=@id={0x1e, 0x3, 0x0, {0x0, 0x1}}, 0x10, 0x0}, 0x0) write$cgroup_int(r5, &(0x7f00000001c0), 0xfffffdef) close(r2) perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x88120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff95, 0x8}, 0x0, 0x9, 0x0, 0x2, 0xfffffffffffffffe}, 0x0, 0x80000000000000, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0xf, &(0x7f0000000080)=@ringbuf, 0x0}, 0x90) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x8, 0x42, 0x40, 0x42}, 0x48) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000240)={r11, &(0x7f0000000100), &(0x7f0000002240)=""/99}, 0x20) 7.410830943s ago: executing program 4: bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x4852}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000940)=[0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1c, &(0x7f00000009c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000a00), &(0x7f0000000a40), 0x8, 0x7d, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002002007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x44) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='ext4_da_write_pages\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000100), 0x1001) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_da_write_pages\x00', r5}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x6}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r6, &(0x7f0000000080)='8', 0x0}, 0x20) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c80)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000cc0)={'veth1_macvtap\x00', @local}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x307) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x23}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000540)=@o_path={&(0x7f0000000500)='./file0\x00', r0, 0x4000, r6}, 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x6132}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x6132}) ioctl$TUNSETQUEUE(r10, 0x400454d9, &(0x7f00000000c0)={'syz_tun\x00', 0x400}) write$cgroup_type(r1, &(0x7f0000000180), 0x1a518) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) 6.635600201s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000f9ffffff8500000028000000180100002020702500000000d04d9884be2f"], 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="10001d000000faff947b72fb9900000045"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x50}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f3, &(0x7f0000000080)) 6.502335342s ago: executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9041c1d0800fe007c05e8fe55a115000100ff02142603600e12080005007a010401a80016002000034004020000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) 6.357958964s ago: executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x27}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0xd4}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000000000000000000000000000007fffffff0001000000000071273fa79d93014b8e3381b6"], 0xfdef) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x9, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='syzkaller\x00'}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) write$cgroup_subtree(r1, 0x0, 0xda00) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x58, &(0x7f0000000240)}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x8008743f, 0x0) bpf$MAP_DELETE_ELEM(0x15, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ext4_es_lookup_extent_exit\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4004662b, &(0x7f00000005c0)) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x0, 0x4}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r6, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 2.226387618s ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x7b}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 2.189868664s ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000640)='itimer_state\x00', r0}, 0x10) r1 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x7}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000080), &(0x7f00000004c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x1, 0x7, 0x5, 0x7, 0x0, 0xfff, 0x80409, 0xb, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000340), 0x9}, 0x1894e, 0x100000001, 0xffffffe1, 0x1, 0x4, 0x24, 0x3, 0x0, 0x800, 0x0, 0x9}, 0x0, 0xa, r1, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f00000002c0)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0xa, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='ext4_ext_handle_unwritten_extents\x00', r7}, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='ext4_allocate_blocks\x00', r8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.08240814s ago: executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x4}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x6, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 1.773828158s ago: executing program 2: r0 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000003180)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x80, 0x0}, 0x0) 1.196752916s ago: executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x2, 0xffffffff}, 0x48) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3b) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000640)='syzkaller\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 988.687818ms ago: executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e0000001801000020646c2500000000002020177b1af8ff00000000bfa100000000000007010000f8ffffffbc02000000000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61106000000000006113380000000000bfa00000000000000700000008ffffffd50301001774004095000000000000006916000000000000bf67000000000000350607000fff0720170600002019000016"], 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001480)={0x8, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x40c000) ioctl$SIOCSIFHWADDR(r4, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_type(r5, &(0x7f0000000000), 0x9) write$cgroup_subtree(r3, &(0x7f00000002c0)={[{0x0, 'cpu'}]}, 0x5) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x20080ffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40305829, &(0x7f0000000040)) 905.169271ms ago: executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x48}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x98, &(0x7f00000002c0)=""/152}, 0x90) 785.601259ms ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='jbd2_handle_stats\x00', r1}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 756.355633ms ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000020000000000000000000000850000008700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e06921e8682d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 527.756069ms ago: executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000400000000000000008500000027000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000710000009500000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x65) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x0, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000100), 0x1001) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_writepages_result\x00', r3}, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) 484.366736ms ago: executing program 3: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macvlan1\x00', 0x8000}) socketpair(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8922, &(0x7f0000000080)) 436.393213ms ago: executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000040)=@raw=[@call={0x85, 0x0, 0x0, 0x7f}, @exit], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x19}, 0x80) 359.141264ms ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x7b}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 314.058691ms ago: executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_mems\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 218.075016ms ago: executing program 1: r0 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000003180)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x80, 0x0}, 0x0) 142.354288ms ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000f9ffffff8500000028000000180100002020702500000000d04d9884be2f"], 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="10001d000000faff947b72fb9900000045"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x50}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f3, &(0x7f0000000080)) 98.929324ms ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r3}, 0x10) 0s ago: executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9041c1d0800fe007c05e8fe55a115000100ff02142603600e12080005007a010401a80016002000034004020000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) kernel console output (not intermixed with test programs): ngth. [ 135.835939][ T5611] lo: mtu less than device minimum [ 136.631563][ T5643] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 136.676244][ T5647] device sit0 entered promiscuous mode [ 136.877857][ T5643] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 136.930735][ T5648] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 137.127473][ T5657] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 137.353584][ T3585] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 137.362660][ T3585] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 137.371086][ T3585] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 137.383160][ T3585] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 137.394083][ T3585] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 137.402046][ T3585] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 137.552149][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.613146][ T5680] device sit0 left promiscuous mode [ 137.718722][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.753361][ T5680] device sit0 entered promiscuous mode [ 137.851139][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.862175][ T102] wlan1: Trigger new scan to find an IBSS to join [ 137.862319][ T102] wlan1: Trigger new scan to find an IBSS to join [ 138.240982][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.855747][ T5667] chnl_net:caif_netlink_parms(): no params data found [ 138.868719][ T102] wlan1: Creating new IBSS network, BSSID ee:cb:64:87:6c:24 [ 139.318351][ T5667] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.325857][ T5667] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.363942][ T5667] device bridge_slave_0 entered promiscuous mode [ 139.430107][ T5667] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.441009][ T5667] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.457277][ T3587] Bluetooth: hci3: command tx timeout [ 139.469613][ T5667] device bridge_slave_1 entered promiscuous mode [ 139.572292][ T5667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.608573][ T5667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.809621][ T5667] team0: Port device team_slave_0 added [ 139.925241][ T5667] team0: Port device team_slave_1 added [ 140.162986][ T5768] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 140.175036][ T5667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.187423][ T5768] netlink: 16255 bytes leftover after parsing attributes in process `syz-executor.1'. [ 140.194799][ T5667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.304565][ T5667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.379011][ T5667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.404250][ T5667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.485077][ T5667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.784966][ T5667] device hsr_slave_0 entered promiscuous mode [ 140.802768][ T5667] device hsr_slave_1 entered promiscuous mode [ 140.840822][ T5667] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 140.871927][ T5667] Cannot create hsr debugfs directory [ 141.116524][ T11] device hsr_slave_0 left promiscuous mode [ 141.125941][ T11] device hsr_slave_1 left promiscuous mode [ 141.155476][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.165911][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.193213][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.211893][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.238419][ T11] device bridge_slave_1 left promiscuous mode [ 141.273413][ T5801] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 141.281923][ T5801] netlink: 16255 bytes leftover after parsing attributes in process `syz-executor.4'. [ 141.287940][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.332795][ T11] device bridge_slave_0 left promiscuous mode [ 141.352253][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.386167][ T11] device veth1_macvtap left promiscuous mode [ 141.396380][ T11] device veth0_macvtap left promiscuous mode [ 141.411124][ T11] device veth1_vlan left promiscuous mode [ 141.422472][ T11] device veth0_vlan left promiscuous mode [ 141.537552][ T3587] Bluetooth: hci3: command tx timeout [ 142.003251][ T11] team0 (unregistering): Port device team_slave_1 removed [ 142.035714][ T11] team0 (unregistering): Port device team_slave_0 removed [ 142.059045][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.063312][ T5828] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 142.075815][ T5828] netlink: 16255 bytes leftover after parsing attributes in process `syz-executor.3'. [ 142.086178][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.214269][ T11] bond0 (unregistering): Released all slaves [ 142.295519][ T5819] device sit0 entered promiscuous mode [ 143.471690][ T5869] netlink: 134780 bytes leftover after parsing attributes in process `syz-executor.4'. [ 143.598960][ T3587] Bluetooth: hci1: unexpected subevent 0x04 length: 14 > 11 [ 143.617052][ T3587] Bluetooth: hci3: command tx timeout [ 143.715378][ T5667] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 143.733761][ T5667] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 143.807021][ T5667] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 143.841027][ T5667] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 144.037367][ T5885] netlink: 9286 bytes leftover after parsing attributes in process `syz-executor.1'. [ 144.167167][ T5667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.236236][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 144.266154][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 144.310393][ T5667] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.395460][ T3324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 144.405388][ T3324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 144.430823][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.438056][ T3324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.478439][ T3324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 144.512235][ T3324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 144.538763][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.546004][ T3324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.579333][ T3324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 144.598476][ T3324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 144.618685][ T3324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 144.648636][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 144.667112][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 144.688496][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 144.713899][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 144.769072][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 144.778056][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 144.812013][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 144.839643][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 144.855559][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 144.885894][ T5667] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 145.103348][ T5914] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.671872][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 145.697113][ T3587] Bluetooth: hci3: command tx timeout [ 145.718173][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 145.731419][ T5667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.773690][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 145.806781][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 145.852692][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 145.872426][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 145.904975][ T5667] device veth0_vlan entered promiscuous mode [ 145.927933][ T3324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 145.935971][ T3324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 145.972230][ T5667] device veth1_vlan entered promiscuous mode [ 145.978453][ T5937] netlink: 9286 bytes leftover after parsing attributes in process `syz-executor.1'. [ 146.026846][ T5935] device lo entered promiscuous mode [ 146.054214][ T5667] device veth0_macvtap entered promiscuous mode [ 146.071670][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 146.102876][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 146.123836][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 146.149357][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 146.185468][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 146.206060][ T5667] device veth1_macvtap entered promiscuous mode [ 146.475715][ T5667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.519854][ T5667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.534023][ T5667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.584773][ T5667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.604380][ T5667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.625148][ T5667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.644375][ T5667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.655145][ T5667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.676261][ T5667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.692931][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 146.734081][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 146.806689][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 146.898648][ T5951] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 146.975495][ T5951] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 147.040338][ T5667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.076735][ T5667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.092003][ T5667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.111277][ T5667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.125301][ T5667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.136193][ T5667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.151198][ T5667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.162032][ T5667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.186094][ T5667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.255339][ T5667] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.272012][ T5667] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.281060][ T5667] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.289905][ T5667] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.302476][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 147.326585][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 147.504234][ T5964] netlink: 134780 bytes leftover after parsing attributes in process `syz-executor.0'. [ 147.555768][ T3736] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.581838][ T3736] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.651036][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 147.704743][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.743552][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.768878][ T3324] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 147.831874][ T5978] device sit0 entered promiscuous mode [ 147.890089][ T5982] netlink: 9286 bytes leftover after parsing attributes in process `syz-executor.0'. [ 149.463911][ T5988] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 149.551220][ T5988] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 149.649858][ T6002] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.3'. [ 149.925402][ T6023] netlink: 9286 bytes leftover after parsing attributes in process `syz-executor.1'. [ 150.522492][ T6035] device sit0 entered promiscuous mode [ 151.027994][ T6045] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.2'. [ 151.361481][ T6062] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 151.444025][ T6062] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 151.480399][ T6071] netlink: 9286 bytes leftover after parsing attributes in process `syz-executor.3'. [ 152.160266][ T6095] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 152.176043][ T6095] netlink: 127868 bytes leftover after parsing attributes in process `syz-executor.1'. [ 152.190705][ T6098] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.2'. [ 152.454673][ T6115] device sit0 left promiscuous mode [ 152.644309][ T6123] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.3'. [ 152.650163][ T6131] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 152.702487][ T6124] device sit0 entered promiscuous mode [ 152.711567][ T6131] netlink: 127868 bytes leftover after parsing attributes in process `syz-executor.2'. [ 153.366754][ T6159] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 153.397653][ T6159] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.4'. [ 154.410850][ T6201] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 154.454848][ T6201] netlink: 127868 bytes leftover after parsing attributes in process `syz-executor.0'. [ 154.495107][ T6209] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 154.514502][ T6209] netlink: 'syz-executor.2': attribute type 16 has an invalid length. [ 154.537789][ T6209] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.2'. [ 154.949350][ T6224] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 155.044099][ T6230] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.4'. [ 155.125557][ T6238] device sit0 left promiscuous mode [ 155.264433][ T6240] device sit0 entered promiscuous mode [ 155.935666][ T6267] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 156.294477][ T6293] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 156.322000][ T6293] netlink: 'syz-executor.2': attribute type 16 has an invalid length. [ 156.335048][ T6293] __nla_validate_parse: 1 callbacks suppressed [ 156.335066][ T6293] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.2'. [ 157.160566][ T6314] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 157.323350][ T6324] validate_nla: 2 callbacks suppressed [ 157.323366][ T6324] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 157.357217][ T6324] netlink: 'syz-executor.0': attribute type 16 has an invalid length. [ 157.375930][ T6324] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.0'. [ 157.603911][ T6337] netlink: 64859 bytes leftover after parsing attributes in process `syz-executor.0'. [ 157.775352][ T6341] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 157.819638][ T6341] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 158.059540][ T6354] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 158.082167][ T6355] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 158.090806][ T6354] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'. [ 158.579180][ T6366] device sit0 left promiscuous mode [ 158.716961][ T6369] device sit0 entered promiscuous mode [ 159.390234][ T6385] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 159.407430][ T6385] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 159.531433][ T6395] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 159.567266][ T6395] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 160.591175][ T6422] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 160.618917][ T6422] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 160.637372][ T6424] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 160.752674][ T6432] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 160.781464][ T6432] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 161.600677][ T6488] __nla_validate_parse: 1 callbacks suppressed [ 161.600697][ T6488] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 161.709656][ T6491] device sit0 left promiscuous mode [ 161.844417][ T6495] device sit0 entered promiscuous mode [ 163.455170][ T6558] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 163.462871][ T6558] IPv6: NLM_F_CREATE should be set when creating new route [ 163.470152][ T6558] IPv6: NLM_F_CREATE should be set when creating new route [ 164.107614][ T6585] validate_nla: 4 callbacks suppressed [ 164.107632][ T6585] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 164.273926][ T6594] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 164.281619][ T6594] IPv6: NLM_F_CREATE should be set when creating new route [ 164.288994][ T6594] IPv6: NLM_F_CREATE should be set when creating new route [ 164.296271][ T6594] IPv6: NLM_F_CREATE should be set when creating new route [ 165.157184][ T6633] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 165.164544][ T6633] IPv6: NLM_F_CREATE should be set when creating new route [ 165.171895][ T6633] IPv6: NLM_F_CREATE should be set when creating new route [ 168.141868][ T3585] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 168.152085][ T3585] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 168.160282][ T3585] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 168.171451][ T3585] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 168.179255][ T3585] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 168.186644][ T3585] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 168.257910][ T102] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.324902][ T102] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.407295][ T102] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.512827][ T102] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.823944][ T6741] chnl_net:caif_netlink_parms(): no params data found [ 168.956366][ T3736] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 169.888291][ T6741] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.895586][ T6741] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.917138][ T6741] device bridge_slave_0 entered promiscuous mode [ 170.008121][ T6741] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.023730][ T6741] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.048431][ T6741] device bridge_slave_1 entered promiscuous mode [ 170.127271][ T6741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.168671][ T6741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.257293][ T3585] Bluetooth: hci1: command tx timeout [ 170.341832][ T6741] team0: Port device team_slave_0 added [ 170.429182][ T6741] team0: Port device team_slave_1 added [ 170.516362][ T6741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.539185][ T6741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.592567][ T6741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.688869][ T6797] device syzkaller0 entered promiscuous mode [ 170.707945][ T6741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.715075][ T6741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.807242][ T6741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.161272][ T102] device hsr_slave_0 left promiscuous mode [ 171.193011][ T102] device hsr_slave_1 left promiscuous mode [ 171.235771][ T102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.282423][ T102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.353202][ T102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.400280][ T102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.469354][ T102] device bridge_slave_1 left promiscuous mode [ 171.515298][ T102] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.551690][ T102] device bridge_slave_0 left promiscuous mode [ 171.564182][ T102] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.650166][ T102] device veth1_macvtap left promiscuous mode [ 171.656280][ T102] device veth0_macvtap left promiscuous mode [ 171.674791][ T102] device veth1_vlan left promiscuous mode [ 171.693312][ T102] device veth0_vlan left promiscuous mode [ 171.741262][ T3585] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 172.337234][ T3585] Bluetooth: hci1: command tx timeout [ 172.481465][ T102] team0 (unregistering): Port device team_slave_1 removed [ 172.546439][ T102] team0 (unregistering): Port device team_slave_0 removed [ 172.617327][ T102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.676126][ T102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.928670][ T102] bond0 (unregistering): Released all slaves [ 173.036219][ T6741] device hsr_slave_0 entered promiscuous mode [ 173.060904][ T6741] device hsr_slave_1 entered promiscuous mode [ 173.093921][ T6741] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 173.121906][ T6741] Cannot create hsr debugfs directory [ 173.292666][ T6851] device syzkaller0 entered promiscuous mode [ 173.448970][ T3585] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 174.111953][ T3585] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 174.128464][ T6907] device syzkaller0 entered promiscuous mode [ 174.417461][ T3585] Bluetooth: hci1: command tx timeout [ 174.642074][ T6741] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 174.686859][ T6741] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 174.750133][ T6741] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 174.873587][ T6741] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 175.256368][ T3585] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 175.263810][ T6741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.288996][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 175.298092][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 175.310599][ T6741] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.323027][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 175.332815][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 175.345205][ T3645] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.352436][ T3645] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.443118][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 175.476825][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 175.503683][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 175.521300][ T3645] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.528544][ T3645] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.561979][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 175.574498][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 175.618023][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 175.628554][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 175.644866][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 175.654091][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 175.673537][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 175.683733][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 175.706576][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 175.748310][ T6741] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 175.773593][ T6741] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 175.800705][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 175.813175][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 176.015670][ T6953] device syzkaller0 entered promiscuous mode [ 176.280998][ T3585] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 176.499175][ T3585] Bluetooth: hci1: command tx timeout [ 176.609185][ T3587] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 176.618819][ T3587] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 176.627660][ T3587] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 176.638127][ T3587] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 176.646363][ T3587] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 176.653864][ T3587] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 176.991389][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 177.002831][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 177.071874][ T6741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.171505][ T6999] device syzkaller0 entered promiscuous mode [ 177.362302][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 177.398672][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 177.566122][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 177.627878][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 177.637055][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 177.645000][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 177.681771][ T6741] device veth0_vlan entered promiscuous mode [ 177.726432][ T6980] chnl_net:caif_netlink_parms(): no params data found [ 177.796826][ T6741] device veth1_vlan entered promiscuous mode [ 178.036787][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 178.047826][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 178.056153][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 178.064965][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 178.128464][ T6741] device veth0_macvtap entered promiscuous mode [ 178.211730][ T102] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.245949][ T6741] device veth1_macvtap entered promiscuous mode [ 178.262104][ T6980] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.278504][ T6980] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.296268][ T6980] device bridge_slave_0 entered promiscuous mode [ 178.343113][ T6980] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.367290][ T6980] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.375673][ T6980] device bridge_slave_1 entered promiscuous mode [ 178.461623][ T102] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.516526][ T3585] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 178.525613][ T3585] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 178.546229][ T3585] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 178.554442][ T3585] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 178.562525][ T3585] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 178.570023][ T3585] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 178.582418][ T7041] device syzkaller0 entered promiscuous mode [ 178.609871][ T102] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.630556][ T6980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.643847][ T6980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.653252][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 178.664158][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 178.710430][ T6741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.721450][ T6741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.731550][ T6741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.738627][ T3585] Bluetooth: hci5: command tx timeout [ 178.747633][ T6741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.757844][ T6741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.768438][ T6741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.778513][ T6741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.791244][ T6741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.803329][ T6741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.810833][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 178.824243][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 178.894218][ T6980] team0: Port device team_slave_0 added [ 178.906124][ T6741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.919881][ T6741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.931635][ T6741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.942554][ T6741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.955353][ T6741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.966092][ T6741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.976171][ T6741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.986794][ T6741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.999899][ T6741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.013026][ T102] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.041954][ T6980] team0: Port device team_slave_1 added [ 179.080599][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 179.096327][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 179.167295][ T6741] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.179605][ T6741] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.196642][ T6741] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.205748][ T6741] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.250863][ T6980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.258648][ T6980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.294567][ T6980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.318818][ T6980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.325912][ T6980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.360325][ T6980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.667240][ T3587] Bluetooth: hci0: command tx timeout [ 180.817179][ T3587] Bluetooth: hci5: command tx timeout [ 182.243387][ T6980] device hsr_slave_0 entered promiscuous mode [ 182.252229][ T6980] device hsr_slave_1 entered promiscuous mode [ 182.260216][ T6980] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 182.268850][ T6980] Cannot create hsr debugfs directory [ 182.552218][ T3643] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.597821][ T3643] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.652504][ T7045] chnl_net:caif_netlink_parms(): no params data found [ 182.670200][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 182.747607][ T3587] Bluetooth: hci0: command tx timeout [ 182.785272][ T7069] device syzkaller0 entered promiscuous mode [ 182.830976][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.839969][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.873501][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 182.897231][ T3587] Bluetooth: hci5: command tx timeout [ 183.060842][ T7045] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.073807][ T7045] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.095765][ T7045] device bridge_slave_0 entered promiscuous mode [ 183.113520][ T7087] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 183.120980][ T7087] IPv6: NLM_F_CREATE should be set when creating new route [ 183.128355][ T7087] IPv6: NLM_F_CREATE should be set when creating new route [ 183.167387][ T7045] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.177890][ T7045] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.206519][ T7045] device bridge_slave_1 entered promiscuous mode [ 183.658009][ T7045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.817350][ T3587] Bluetooth: hci0: command tx timeout [ 184.977325][ T3587] Bluetooth: hci5: command tx timeout [ 186.254378][ T7045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.277204][ T7114] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 186.391309][ T7045] team0: Port device team_slave_0 added [ 186.449984][ T7045] team0: Port device team_slave_1 added [ 186.501316][ T102] device hsr_slave_0 left promiscuous mode [ 186.516179][ T102] device hsr_slave_1 left promiscuous mode [ 186.535665][ T102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.547145][ T102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.557363][ T102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.564982][ T102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.576147][ T102] device bridge_slave_1 left promiscuous mode [ 186.585014][ T102] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.598014][ T102] device bridge_slave_0 left promiscuous mode [ 186.604287][ T102] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.634167][ T102] device veth1_macvtap left promiscuous mode [ 186.649017][ T102] device veth0_macvtap left promiscuous mode [ 186.655298][ T102] device veth1_vlan left promiscuous mode [ 186.676105][ T102] device veth0_vlan left promiscuous mode [ 186.897098][ T3587] Bluetooth: hci0: command tx timeout [ 186.954861][ T7139] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 186.965665][ T7139] netlink: 127868 bytes leftover after parsing attributes in process `syz-executor.1'. [ 187.850640][ T7160] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 187.897067][ T7160] netlink: 127868 bytes leftover after parsing attributes in process `syz-executor.3'. [ 189.267682][ T7195] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 189.275831][ T7195] netlink: 127868 bytes leftover after parsing attributes in process `syz-executor.3'. [ 189.866862][ T102] team0 (unregistering): Port device team_slave_1 removed [ 189.884643][ T102] team0 (unregistering): Port device team_slave_0 removed [ 189.907963][ T102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.925806][ T102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.042116][ T102] bond0 (unregistering): Released all slaves [ 190.122965][ T7045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.154926][ T7045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.191394][ T7045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.222483][ T7045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.236091][ T7045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.271510][ T7045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.317890][ T6980] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 190.341341][ T6980] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 190.423194][ T6980] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 190.436869][ T7226] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 190.438708][ T6980] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 190.461534][ T7226] netlink: 127868 bytes leftover after parsing attributes in process `syz-executor.3'. [ 190.479258][ T7045] device hsr_slave_0 entered promiscuous mode [ 190.495075][ T7045] device hsr_slave_1 entered promiscuous mode [ 190.505587][ T7045] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.521569][ T7045] Cannot create hsr debugfs directory [ 190.855815][ T6980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.912339][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 190.931055][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 190.964243][ T6980] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.217913][ T3585] Bluetooth: hci2: command 0x0406 tx timeout [ 191.736743][ T7253] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 191.756974][ T7253] netlink: 127868 bytes leftover after parsing attributes in process `syz-executor.3'. [ 193.630521][ T7045] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.855730][ T7250] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 193.867751][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 193.876783][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 193.885739][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.893400][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.946370][ T7045] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.992495][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 194.007789][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 194.016687][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 194.074297][ T3583] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.081505][ T3583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.140108][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 194.164316][ T7045] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.260978][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 194.297319][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 194.314725][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 194.323341][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.329923][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.356443][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 194.379375][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 194.393884][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 194.405333][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 194.421439][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 194.470486][ T7045] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.529787][ T6980] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 194.566655][ T6980] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 194.595482][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 194.616220][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 194.839851][ T7045] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 194.865599][ T7045] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 195.199916][ T7293] syz-executor.3 (7293) used greatest stack depth: 17784 bytes left [ 195.319177][ T7045] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 195.408947][ T7045] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 195.467059][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 195.474605][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 195.525563][ T6980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.755035][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 195.765752][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 195.926695][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 195.949222][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 195.979078][ T7045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.988425][ T6980] device veth0_vlan entered promiscuous mode [ 196.009868][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 196.020508][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 196.035179][ T6980] device veth1_vlan entered promiscuous mode [ 196.055905][ T7045] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.079318][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 196.087580][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 196.160667][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 196.175250][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 196.209820][ T3622] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.217014][ T3622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.284185][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 196.314030][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 196.347794][ T3622] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.354993][ T3622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.394875][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 196.423829][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 196.459537][ T6980] device veth0_macvtap entered promiscuous mode [ 196.532313][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 196.548830][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 196.567899][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 196.586386][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 196.602878][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 196.623022][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 196.642336][ T6980] device veth1_macvtap entered promiscuous mode [ 196.686698][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 196.695612][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 196.714361][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 196.732686][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 196.745343][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 196.762425][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 196.803848][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 196.826368][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 196.859985][ T7045] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 196.913356][ T6980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.951368][ T6980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.983774][ T6980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.013363][ T6980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.036128][ T6980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.057887][ T6980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.076762][ T6980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.102853][ T6980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.136192][ T6980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.153546][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 197.173834][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 197.282226][ T6980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.308573][ T6980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.327049][ T6980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.344702][ T6980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.407120][ T6980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.435084][ T6980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.455336][ T6980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.481913][ T6980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.503662][ T6980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.531030][ T102] device hsr_slave_0 left promiscuous mode [ 197.554849][ T102] device hsr_slave_1 left promiscuous mode [ 197.581986][ T102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.595682][ T102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.613418][ T102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.633219][ T102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.650522][ T102] device bridge_slave_1 left promiscuous mode [ 197.664746][ T102] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.691838][ T102] device bridge_slave_0 left promiscuous mode [ 197.701508][ T102] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.729498][ T102] device veth1_macvtap left promiscuous mode [ 197.746287][ T102] device veth0_macvtap left promiscuous mode [ 197.757059][ T102] device veth1_vlan left promiscuous mode [ 197.773244][ T102] device veth0_vlan left promiscuous mode [ 198.179225][ T102] team0 (unregistering): Port device team_slave_1 removed [ 198.208035][ T102] team0 (unregistering): Port device team_slave_0 removed [ 198.235397][ T102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.254710][ T102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.389730][ T102] bond0 (unregistering): Released all slaves [ 198.467816][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 198.481502][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 198.493780][ T6980] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.506302][ T6980] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.515635][ T6980] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.534247][ T6980] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.567212][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 198.574774][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 198.606064][ T7045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.744292][ T3643] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.760435][ T3643] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.810244][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 198.833196][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.857533][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.880417][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 200.030534][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 200.059495][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 200.087169][ T7416] syz-executor.0 (7416) used greatest stack depth: 17024 bytes left [ 200.139385][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 200.158486][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 200.183548][ T7045] device veth0_vlan entered promiscuous mode [ 200.208856][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 200.234952][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 200.276598][ T7045] device veth1_vlan entered promiscuous mode [ 200.390330][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 200.400917][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 200.424127][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 200.445091][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 200.464366][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 200.486470][ T7045] device veth0_macvtap entered promiscuous mode [ 200.518185][ T7045] device veth1_macvtap entered promiscuous mode [ 200.581644][ T7045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.613271][ T7045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.630083][ T7045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.643074][ T7045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.656475][ T7045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.677210][ T7045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.694383][ T7045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.706091][ T7045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.734483][ T7045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.787451][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 200.807967][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 200.846182][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 200.875408][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 200.908306][ T7045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.935225][ T7045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.959210][ T7045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.975217][ T7045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.993119][ T7045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.004721][ T7045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.035255][ T7045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.076676][ T7045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.094556][ T7045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.103937][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 201.114263][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 201.129036][ T7045] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.167000][ T7045] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.182119][ T7045] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.211443][ T7045] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.445357][ T3643] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.471001][ T3643] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.516057][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 201.543016][ T3643] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.582795][ T3643] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.597431][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 201.741584][ T7489] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 201.767174][ T7489] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 201.826820][ T7489] bridge0: port 3(macvlan1) entered blocking state [ 201.874807][ T7489] bridge0: port 3(macvlan1) entered disabled state [ 201.916398][ T7489] device macvlan1 entered promiscuous mode [ 201.958100][ T7489] bridge0: port 3(macvlan1) entered blocking state [ 201.964845][ T7489] bridge0: port 3(macvlan1) entered forwarding state [ 202.457351][ T7496] device syzkaller0 entered promiscuous mode [ 202.468054][ T7499] syz-executor.3 (7499) used greatest stack depth: 16568 bytes left [ 202.958342][ T7523] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 202.976847][ T7523] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 202.997250][ T7523] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 203.005169][ T7523] bridge0: port 3(macvlan1) entered blocking state [ 203.024248][ T7523] bridge0: port 3(macvlan1) entered disabled state [ 203.055623][ T7523] device macvlan1 entered promiscuous mode [ 203.064622][ T7523] bridge0: port 3(macvlan1) entered blocking state [ 203.071516][ T7523] bridge0: port 3(macvlan1) entered forwarding state [ 203.129568][ T7523] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 203.753008][ T7543] device syzkaller0 entered promiscuous mode [ 204.064006][ T7561] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 204.097875][ T7561] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 204.120132][ T7561] bridge0: port 3(macvlan1) entered blocking state [ 204.142042][ T7561] bridge0: port 3(macvlan1) entered disabled state [ 204.155866][ T7561] device macvlan1 entered promiscuous mode [ 204.185102][ T7561] bridge0: port 3(macvlan1) entered blocking state [ 204.192329][ T7561] bridge0: port 3(macvlan1) entered forwarding state [ 204.553795][ T7579] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 204.582546][ T7579] netlink: 61951 bytes leftover after parsing attributes in process `syz-executor.3'. [ 204.703583][ T7578] device syzkaller0 entered promiscuous mode [ 204.902673][ T7594] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 204.924861][ T7594] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 205.207664][ T7604] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 205.216058][ T7604] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 205.318026][ T7604] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 205.460734][ T7610] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 205.477051][ T7610] netlink: 61951 bytes leftover after parsing attributes in process `syz-executor.0'. [ 205.887516][ T7621] device syzkaller0 entered promiscuous mode [ 206.107596][ T7628] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 206.126520][ T7628] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 206.144058][ T7628] bridge0: port 3(macvlan1) entered blocking state [ 206.163650][ T7628] bridge0: port 3(macvlan1) entered disabled state [ 206.173980][ T7628] device macvlan1 entered promiscuous mode [ 206.181011][ T7628] bridge0: port 3(macvlan1) entered blocking state [ 206.188557][ T7628] bridge0: port 3(macvlan1) entered forwarding state [ 206.369222][ T7642] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 206.388128][ T7642] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 206.460233][ T7642] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 206.508289][ T7644] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 206.522117][ T7644] netlink: 61951 bytes leftover after parsing attributes in process `syz-executor.4'. [ 206.790960][ T7662] sctp: [Deprecated]: syz-executor.1 (pid 7662) Use of struct sctp_assoc_value in delayed_ack socket option. [ 206.790960][ T7662] Use struct sctp_sack_info instead [ 207.023311][ T7669] device syzkaller0 entered promiscuous mode [ 207.258482][ T7676] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 207.298635][ T7676] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 207.339589][ T7676] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 207.419877][ T7679] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 207.447237][ T7679] netlink: 61951 bytes leftover after parsing attributes in process `syz-executor.2'. [ 207.790098][ T7701] sctp: [Deprecated]: syz-executor.1 (pid 7701) Use of struct sctp_assoc_value in delayed_ack socket option. [ 207.790098][ T7701] Use struct sctp_sack_info instead [ 207.995843][ T7710] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 208.043974][ T7710] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 208.070303][ T7710] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 208.150394][ T7708] bridge0: port 4(veth1_to_hsr) entered blocking state [ 208.176777][ T7708] bridge0: port 4(veth1_to_hsr) entered disabled state [ 208.204682][ T7708] device veth1_to_hsr entered promiscuous mode [ 208.235190][ T7708] bridge0: port 4(veth1_to_hsr) entered blocking state [ 208.243177][ T7708] bridge0: port 4(veth1_to_hsr) entered forwarding state [ 208.278085][ T7714] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 208.302448][ T7714] netlink: 61951 bytes leftover after parsing attributes in process `syz-executor.3'. [ 208.597808][ T7737] sctp: [Deprecated]: syz-executor.2 (pid 7737) Use of struct sctp_assoc_value in delayed_ack socket option. [ 208.597808][ T7737] Use struct sctp_sack_info instead [ 208.695137][ T7741] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 208.735343][ T7741] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 208.768381][ T7741] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 208.955898][ T7751] bridge0: port 4(veth1_to_hsr) entered blocking state [ 208.964218][ T7751] bridge0: port 4(veth1_to_hsr) entered disabled state [ 208.980515][ T7751] device veth1_to_hsr entered promiscuous mode [ 209.030840][ T7751] bridge0: port 4(veth1_to_hsr) entered blocking state [ 209.037932][ T7751] bridge0: port 4(veth1_to_hsr) entered forwarding state [ 209.215750][ T7768] sctp: [Deprecated]: syz-executor.3 (pid 7768) Use of struct sctp_assoc_value in delayed_ack socket option. [ 209.215750][ T7768] Use struct sctp_sack_info instead [ 209.848306][ T7805] sctp: [Deprecated]: syz-executor.1 (pid 7805) Use of struct sctp_assoc_value in delayed_ack socket option. [ 209.848306][ T7805] Use struct sctp_sack_info instead [ 210.180859][ T7824] bridge0: port 3(veth1_to_hsr) entered blocking state [ 210.208562][ T7824] bridge0: port 3(veth1_to_hsr) entered disabled state [ 210.234345][ T7824] device veth1_to_hsr entered promiscuous mode [ 210.259161][ T7824] bridge0: port 3(veth1_to_hsr) entered blocking state [ 210.266409][ T7824] bridge0: port 3(veth1_to_hsr) entered forwarding state [ 211.802690][ T7924] netlink: 1041 bytes leftover after parsing attributes in process `syz-executor.2'. [ 211.929582][ T7930] netlink: 35347 bytes leftover after parsing attributes in process `syz-executor.1'. [ 212.503649][ T7954] netlink: 1041 bytes leftover after parsing attributes in process `syz-executor.4'. [ 212.584114][ T3590] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 212.607186][ T3590] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 212.616091][ T3590] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 212.624611][ T3590] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 212.632530][ T3590] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 212.640259][ T3590] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 212.669626][ T46] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.741378][ T7963] netlink: 35347 bytes leftover after parsing attributes in process `syz-executor.3'. [ 212.779379][ T46] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.929170][ T46] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.095055][ T46] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.149693][ T7986] netlink: 1041 bytes leftover after parsing attributes in process `syz-executor.4'. [ 213.306989][ T7997] netlink: 35347 bytes leftover after parsing attributes in process `syz-executor.4'. [ 213.616845][ T7956] chnl_net:caif_netlink_parms(): no params data found [ 213.830414][ T8017] netlink: 1041 bytes leftover after parsing attributes in process `syz-executor.2'. [ 214.006320][ T7956] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.027985][ T7956] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.036660][ T7956] device bridge_slave_0 entered promiscuous mode [ 214.065882][ T7956] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.092433][ T7956] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.214603][ T7956] device bridge_slave_1 entered promiscuous mode [ 214.415126][ T8032] netlink: 35347 bytes leftover after parsing attributes in process `syz-executor.3'. [ 214.538888][ T7956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.632063][ T7956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.747776][ T3590] Bluetooth: hci1: command tx timeout [ 214.861602][ T7956] team0: Port device team_slave_0 added [ 214.883323][ T7956] team0: Port device team_slave_1 added [ 214.948063][ T7956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.965434][ T7956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.969408][ T8050] netlink: 1041 bytes leftover after parsing attributes in process `syz-executor.4'. [ 215.020612][ T7956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.096029][ T7956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.117128][ T7956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.222310][ T7956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.275191][ T8064] netlink: 35347 bytes leftover after parsing attributes in process `syz-executor.4'. [ 215.443001][ T46] device hsr_slave_0 left promiscuous mode [ 215.474614][ T46] device hsr_slave_1 left promiscuous mode [ 215.504258][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.530547][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.570179][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.593021][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.624314][ T46] device veth1_to_hsr left promiscuous mode [ 215.644689][ T46] bridge0: port 4(veth1_to_hsr) entered disabled state [ 215.690958][ T46] device macvlan1 left promiscuous mode [ 215.708957][ T46] bridge0: port 3(macvlan1) entered disabled state [ 215.743238][ T46] device bridge_slave_1 left promiscuous mode [ 215.763238][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.795546][ T46] device bridge_slave_0 left promiscuous mode [ 215.842677][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.934681][ T46] device veth1_macvtap left promiscuous mode [ 215.947075][ T46] device veth0_macvtap left promiscuous mode [ 215.978295][ T46] device veth1_vlan left promiscuous mode [ 216.009654][ T46] device veth0_vlan left promiscuous mode [ 216.817244][ T3590] Bluetooth: hci1: command tx timeout [ 216.824239][ T46] team0 (unregistering): Port device team_slave_1 removed [ 216.868816][ T46] team0 (unregistering): Port device team_slave_0 removed [ 216.903442][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.939357][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.330428][ T46] bond0 (unregistering): Released all slaves [ 217.486105][ T7956] device hsr_slave_0 entered promiscuous mode [ 217.516396][ T7956] device hsr_slave_1 entered promiscuous mode [ 217.560838][ T7956] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.594108][ T7956] Cannot create hsr debugfs directory [ 218.793855][ T7956] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 218.868939][ T7956] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 218.897446][ T3590] Bluetooth: hci1: command tx timeout [ 218.979108][ T7956] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 219.038749][ T7956] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 219.726136][ T7956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.875624][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 219.904169][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 219.943105][ T7956] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.980263][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 220.026555][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 220.046018][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.053436][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.113425][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 220.127870][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 220.157401][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 220.165996][ T3645] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.173221][ T3645] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.231712][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 220.280072][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 220.324495][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 220.369968][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 220.432388][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 220.441705][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 220.487693][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 220.528419][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 220.586589][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 220.627952][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 220.687742][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 220.698991][ T7956] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 220.977294][ T3590] Bluetooth: hci1: command tx timeout [ 221.672183][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 221.687853][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 221.744832][ T7956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.922468][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 221.967960][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 222.023264][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 222.041467][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 222.060589][ T7956] device veth0_vlan entered promiscuous mode [ 222.074433][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 222.095596][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 222.129976][ T7956] device veth1_vlan entered promiscuous mode [ 222.249139][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 222.265215][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 222.288151][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 222.318350][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 222.370974][ T7956] device veth0_macvtap entered promiscuous mode [ 222.409114][ T7956] device veth1_macvtap entered promiscuous mode [ 222.510528][ T7956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.557571][ T7956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.608250][ T7956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.657040][ T7956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.698244][ T7956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.749084][ T7956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.791123][ T7956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.841495][ T7956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.892321][ T7956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.942515][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 222.958523][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 222.972530][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 222.988131][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 222.999417][ T7956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.018896][ T7956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.037145][ T7956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.053648][ T7956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.067178][ T7956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.083873][ T7956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.094125][ T7956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.118319][ T7956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.134190][ T7956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.187314][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 223.196351][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 223.233425][ T7956] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.262327][ T7956] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.284564][ T7956] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.316601][ T7956] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.831105][ T3736] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.865311][ T3736] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.916532][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 223.958021][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.992710][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.001626][ T8295] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 224.026814][ T8295] netlink: 157116 bytes leftover after parsing attributes in process `syz-executor.2'. [ 224.042272][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 224.840203][ T8332] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 224.877070][ T8332] netlink: 157116 bytes leftover after parsing attributes in process `syz-executor.3'. [ 225.805272][ T8368] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 225.821742][ T8368] netlink: 157116 bytes leftover after parsing attributes in process `syz-executor.3'. [ 226.551766][ T8401] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 226.647318][ T8401] netlink: 157116 bytes leftover after parsing attributes in process `syz-executor.3'. [ 227.778779][ T8440] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 227.827298][ T8440] netlink: 157116 bytes leftover after parsing attributes in process `syz-executor.4'. [ 228.845777][ T8476] netlink: 131748 bytes leftover after parsing attributes in process `syz-executor.2'. [ 228.933938][ T8476] netlink: zone id is out of range [ 228.966953][ T8476] netlink: zone id is out of range [ 228.991259][ T8476] netlink: zone id is out of range [ 228.998294][ T8476] netlink: zone id is out of range [ 229.003696][ T8476] netlink: zone id is out of range [ 229.009245][ T8476] netlink: zone id is out of range [ 229.014494][ T8476] netlink: zone id is out of range [ 229.021787][ T8476] netlink: zone id is out of range [ 229.027340][ T8476] netlink: zone id is out of range [ 229.032722][ T8476] netlink: zone id is out of range [ 231.410506][ T3736] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 234.593030][ T8514] netlink: 131748 bytes leftover after parsing attributes in process `syz-executor.3'. [ 234.776306][ T8514] net_ratelimit: 158 callbacks suppressed [ 234.776329][ T8514] netlink: zone id is out of range [ 234.914903][ T8514] netlink: zone id is out of range [ 234.961264][ T8514] netlink: zone id is out of range [ 234.992218][ T8514] netlink: zone id is out of range [ 235.061341][ T8514] netlink: zone id is out of range [ 235.102919][ T8514] netlink: zone id is out of range [ 235.180115][ T8514] netlink: zone id is out of range [ 235.255975][ T8514] netlink: zone id is out of range [ 235.327142][ T8514] netlink: zone id is out of range [ 235.491181][ T8514] netlink: zone id is out of range [ 236.565320][ T8554] netlink: 131748 bytes leftover after parsing attributes in process `syz-executor.0'. [ 236.701933][ T8560] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 236.738507][ T8560] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.2'. [ 236.832441][ T8560] device team0 entered promiscuous mode [ 236.865257][ T8560] device team_slave_0 entered promiscuous mode [ 236.917361][ T8560] device team_slave_1 entered promiscuous mode [ 236.963663][ T8560] bridge0: port 4(team0) entered blocking state [ 236.995610][ T8560] bridge0: port 4(team0) entered disabled state [ 237.092845][ T8560] bridge0: port 4(team0) entered blocking state [ 237.099400][ T8560] bridge0: port 4(team0) entered forwarding state [ 237.307182][ T3587] Bluetooth: hci4: command 0x0406 tx timeout [ 238.141439][ T8589] netlink: 131748 bytes leftover after parsing attributes in process `syz-executor.1'. [ 238.546577][ T8601] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 238.594102][ T8601] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.3'. [ 238.660832][ T8601] device team0 entered promiscuous mode [ 238.715478][ T8601] device team_slave_0 entered promiscuous mode [ 238.763535][ T8601] device team_slave_1 entered promiscuous mode [ 238.794154][ T8601] bridge0: port 4(team0) entered blocking state [ 238.863682][ T8601] bridge0: port 4(team0) entered disabled state [ 238.910017][ T8601] bridge0: port 4(team0) entered blocking state [ 238.916482][ T8601] bridge0: port 4(team0) entered forwarding state [ 239.577426][ T8623] netlink: 131748 bytes leftover after parsing attributes in process `syz-executor.0'. [ 239.990159][ T8646] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 240.027042][ T8646] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. [ 240.077442][ T8646] device team0 entered promiscuous mode [ 240.099424][ T8646] device team_slave_0 entered promiscuous mode [ 240.136764][ T8646] device team_slave_1 entered promiscuous mode [ 240.156517][ T8646] bridge0: port 5(team0) entered blocking state [ 240.173574][ T8646] bridge0: port 5(team0) entered disabled state [ 240.193251][ T8646] bridge0: port 5(team0) entered blocking state [ 240.199766][ T8646] bridge0: port 5(team0) entered forwarding state [ 240.960129][ T8699] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 241.016980][ T8699] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.0'. [ 241.046761][ T8699] device team0 entered promiscuous mode [ 241.056111][ T8699] device team_slave_0 entered promiscuous mode [ 241.096144][ T8699] device team_slave_1 entered promiscuous mode [ 241.116850][ T8699] bridge0: port 3(team0) entered blocking state [ 241.157096][ T8699] bridge0: port 3(team0) entered disabled state [ 241.168368][ T8699] bridge0: port 3(team0) entered blocking state [ 241.174754][ T8699] bridge0: port 3(team0) entered forwarding state [ 241.841555][ T8751] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 241.860713][ T8751] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.3'. [ 242.757599][ T8797] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 242.815707][ T8797] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 242.855655][ T8802] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 242.912428][ T8797] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 242.961048][ T8797] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 242.989144][ T8797] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 245.275412][ T8914] netlink: 16255 bytes leftover after parsing attributes in process `syz-executor.2'. [ 246.312144][ T8950] netlink: 16255 bytes leftover after parsing attributes in process `syz-executor.0'. [ 247.045650][ T3590] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 247.056300][ T3590] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 247.064974][ T3590] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 247.074924][ T3590] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 247.084097][ T3590] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 247.093748][ T3590] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 247.124117][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.173564][ T8990] netlink: 16255 bytes leftover after parsing attributes in process `syz-executor.1'. [ 247.329744][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.440162][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.530520][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.822121][ T9022] netlink: 16255 bytes leftover after parsing attributes in process `syz-executor.4'. [ 248.049602][ T8982] chnl_net:caif_netlink_parms(): no params data found [ 248.294610][ T8982] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.318336][ T8982] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.335556][ T8982] device bridge_slave_0 entered promiscuous mode [ 248.352174][ T9057] netlink: 16255 bytes leftover after parsing attributes in process `syz-executor.4'. [ 248.382220][ T8982] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.389993][ T8982] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.400138][ T8982] device bridge_slave_1 entered promiscuous mode [ 248.512314][ T8982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.606333][ T8982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.758965][ T8982] team0: Port device team_slave_0 added [ 248.778708][ T8982] team0: Port device team_slave_1 added [ 248.847947][ T9083] netlink: 16255 bytes leftover after parsing attributes in process `syz-executor.0'. [ 248.923599][ T8982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.953848][ T8982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.020528][ T8982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.139947][ T3585] Bluetooth: hci3: command tx timeout [ 249.227787][ T8982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.237414][ T8982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.309891][ T8982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.378185][ T9] device hsr_slave_0 left promiscuous mode [ 249.387774][ T9] device hsr_slave_1 left promiscuous mode [ 249.405097][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.437213][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.464958][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.473672][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.498434][ T9] bridge0: port 4(team0) entered disabled state [ 249.507599][ T9] device veth1_to_hsr left promiscuous mode [ 249.514950][ T9] bridge0: port 3(veth1_to_hsr) entered disabled state [ 249.528882][ T9] device bridge_slave_1 left promiscuous mode [ 249.535414][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.545445][ T9] device bridge_slave_0 left promiscuous mode [ 249.558582][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.585663][ T9] device veth1_macvtap left promiscuous mode [ 249.593114][ T9] device veth0_macvtap left promiscuous mode [ 249.605368][ T9] device veth1_vlan left promiscuous mode [ 249.616210][ T9] device veth0_vlan left promiscuous mode [ 249.959828][ T9] device team_slave_1 left promiscuous mode [ 249.971125][ T9] team0 (unregistering): Port device team_slave_1 removed [ 249.984628][ T9] device team_slave_0 left promiscuous mode [ 249.991992][ T9] team0 (unregistering): Port device team_slave_0 removed [ 250.006153][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.025070][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.111895][ T9] bond0 (unregistering): Released all slaves [ 250.297859][ T8982] device hsr_slave_0 entered promiscuous mode [ 250.311567][ T8982] device hsr_slave_1 entered promiscuous mode [ 250.327517][ T8982] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 250.368618][ T8982] Cannot create hsr debugfs directory [ 251.218896][ T3590] Bluetooth: hci3: command tx timeout [ 251.399600][ T8982] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 251.431211][ T8982] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 251.460300][ T8982] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 251.501567][ T8982] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 251.704774][ T8982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.758882][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 251.777668][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 251.790852][ T8982] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.826703][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 251.839230][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 251.876241][ T3619] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.883460][ T3619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.957164][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 251.965360][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 251.988336][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 252.014779][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.022008][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.045911][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 252.067629][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 252.101983][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 252.112832][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 252.137843][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 252.146760][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 252.177988][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 252.187611][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 252.204021][ T8982] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 252.243775][ T8982] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 252.330895][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 252.345212][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 252.371929][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 252.938869][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 252.949292][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 252.973937][ T8982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.039510][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 253.051974][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 253.095970][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 253.119699][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 253.140803][ T8982] device veth0_vlan entered promiscuous mode [ 253.152432][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 253.168889][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 253.194853][ T8982] device veth1_vlan entered promiscuous mode [ 253.290364][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 253.298415][ T3590] Bluetooth: hci3: command tx timeout [ 253.318218][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 253.332627][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 253.343175][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 253.369158][ T8982] device veth0_macvtap entered promiscuous mode [ 253.395338][ T8982] device veth1_macvtap entered promiscuous mode [ 253.434176][ T8982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.454932][ T8982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.507273][ T8982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.530165][ T8982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.540868][ T8982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.588993][ T8982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.622210][ T8982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.637167][ T8982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.650757][ T8982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.695880][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 253.723568][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 253.765669][ T8982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.778459][ T8982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.788867][ T8982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.801216][ T8982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.811283][ T8982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.823327][ T8982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.833476][ T8982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.848674][ T8982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.872225][ T8982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.886482][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 253.938353][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 253.966608][ T8982] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.990128][ T8982] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.009152][ T8982] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.026546][ T8982] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.051000][ T9289] IPv6: Can't replace route, no match found [ 254.370592][ T3736] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.415342][ T3736] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.448208][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 254.491978][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.534715][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.579391][ T9309] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 254.602475][ T9309] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 254.615606][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 254.727895][ T9317] IPv6: Can't replace route, no match found [ 255.136687][ T9341] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 255.153813][ T9341] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 255.181610][ T9349] IPv6: Can't replace route, no match found [ 255.377338][ T3590] Bluetooth: hci3: command tx timeout [ 255.699595][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.705991][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.789003][ T9383] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 255.804974][ T9383] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 255.845361][ T9386] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 256.294909][ T9419] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 256.306045][ T9418] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 256.319166][ T9418] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 256.792864][ T9448] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 256.801914][ T9448] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 257.021508][ T9462] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 257.093597][ T9465] netlink: 121244 bytes leftover after parsing attributes in process `syz-executor.2'. [ 257.557278][ T3590] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10 [ 257.874990][ T9495] netlink: 121244 bytes leftover after parsing attributes in process `syz-executor.4'. [ 257.978768][ T9496] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 258.218403][ T9502] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 258.492367][ T3585] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10 [ 258.885934][ T9532] netlink: 121244 bytes leftover after parsing attributes in process `syz-executor.1'. [ 259.164410][ T3590] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10 [ 259.767138][ T3585] Bluetooth: hci0: command tx timeout [ 260.340366][ T9568] netlink: 121244 bytes leftover after parsing attributes in process `syz-executor.4'. [ 260.445697][ T9574] validate_nla: 2 callbacks suppressed [ 260.445717][ T9574] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 260.663124][ T3590] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10 [ 261.168755][ T9604] netlink: 121244 bytes leftover after parsing attributes in process `syz-executor.3'. [ 261.221197][ T3590] Bluetooth: hci3: command tx timeout [ 261.338607][ T9608] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 261.858352][ T3590] Bluetooth: hci0: command tx timeout [ 262.075946][ T3590] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10 [ 262.497135][ T9639] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 262.665358][ T9649] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 262.695250][ T9649] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 263.942074][ T3585] Bluetooth: hci0: command tx timeout [ 264.096998][ T3585] Bluetooth: hci1: command tx timeout [ 264.159692][ T9686] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 264.168999][ T9686] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 264.598021][ T102] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 265.729305][ T9723] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 265.747130][ T9723] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 267.469838][ T9761] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 267.504082][ T9761] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 268.855918][ T9792] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 268.898671][ T9792] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 269.983784][ T9829] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.992921][ T9829] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.085567][ T9831] netlink: 'syz-executor.1': attribute type 15 has an invalid length. [ 270.104443][ T9831] netlink: 11594 bytes leftover after parsing attributes in process `syz-executor.1'. [ 270.114589][ T9836] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.121801][ T9836] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.129326][ T9836] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.136500][ T9836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.153987][ T9836] device bridge0 entered promiscuous mode [ 270.616100][ T9847] EXT4-fs warning (device sda1): verify_group_input:172: Reserved blocks too high (149) [ 270.888708][ T9851] device syzkaller0 entered promiscuous mode [ 271.144910][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 271.825776][ T9872] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 271.836045][ T9872] netlink: 11594 bytes leftover after parsing attributes in process `syz-executor.4'. [ 272.008757][ T9877] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.016829][ T9877] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.058582][ T9877] device bridge0 left promiscuous mode [ 272.080161][ T9880] EXT4-fs warning (device sda1): verify_group_input:172: Reserved blocks too high (149) [ 272.183204][ T9883] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.190428][ T9883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.197887][ T9883] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.205119][ T9883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.346365][ T9883] device bridge0 entered promiscuous mode [ 272.389793][ T9892] device syzkaller0 entered promiscuous mode [ 272.893079][ T9908] netlink: 'syz-executor.0': attribute type 15 has an invalid length. [ 272.905290][ T9908] netlink: 11594 bytes leftover after parsing attributes in process `syz-executor.0'. [ 273.593288][ T9917] EXT4-fs warning (device sda1): verify_group_input:172: Reserved blocks too high (149) [ 274.739905][ T9932] bridge0: port 4(team0) entered disabled state [ 274.749071][ T9932] bridge0: port 3(macvlan1) entered disabled state [ 274.759091][ T9932] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.769727][ T9932] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.887190][ T9937] bridge0: port 4(team0) entered blocking state [ 274.893578][ T9937] bridge0: port 4(team0) entered forwarding state [ 274.900260][ T9937] bridge0: port 3(macvlan1) entered blocking state [ 274.906931][ T9937] bridge0: port 3(macvlan1) entered forwarding state [ 274.913829][ T9937] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.921067][ T9937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.928528][ T9937] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.935686][ T9937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.974816][ T9937] device bridge0 entered promiscuous mode [ 274.983435][ T9936] netlink: 'syz-executor.2': attribute type 15 has an invalid length. [ 274.997901][ T9936] netlink: 11594 bytes leftover after parsing attributes in process `syz-executor.2'. [ 275.019283][ T9942] device syzkaller0 entered promiscuous mode [ 275.406112][ T9961] EXT4-fs warning (device sda1): verify_group_input:172: Reserved blocks too high (149) [ 276.249476][ T9983] netlink: 'syz-executor.1': attribute type 15 has an invalid length. [ 276.258128][ T9983] netlink: 11594 bytes leftover after parsing attributes in process `syz-executor.1'. [ 276.470160][ T9997] EXT4-fs warning (device sda1): verify_group_input:172: Reserved blocks too high (149) [ 276.617682][ T9987] bridge0: port 5(team0) entered disabled state [ 276.625531][ T9987] bridge0: port 4(veth1_to_hsr) entered disabled state [ 276.633740][ T9987] bridge0: port 3(macvlan1) entered disabled state [ 276.642228][ T9987] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.651346][ T9987] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.943947][T10002] bridge0: port 5(team0) entered blocking state [ 276.950472][T10002] bridge0: port 5(team0) entered forwarding state [ 276.957189][T10002] bridge0: port 4(veth1_to_hsr) entered blocking state [ 276.964170][T10002] bridge0: port 4(veth1_to_hsr) entered forwarding state [ 276.971498][T10002] bridge0: port 3(macvlan1) entered blocking state [ 276.978208][T10002] bridge0: port 3(macvlan1) entered forwarding state [ 276.985042][T10002] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.992284][T10002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.999762][T10002] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.007066][T10002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.138824][T10002] device bridge0 entered promiscuous mode [ 277.308562][T10000] device syzkaller0 entered promiscuous mode [ 277.866482][T10037] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 277.884592][ T3585] Bluetooth: hci2: unexpected event 0x03 length: 15 > 11 [ 277.901259][T10037] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 277.953855][T10037] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.4'. [ 278.153279][T10050] device syzkaller0 entered promiscuous mode [ 278.225882][T10051] bridge0: port 5(team0) entered disabled state [ 278.233137][T10051] bridge0: port 4(veth1_to_hsr) entered disabled state [ 278.240911][T10051] bridge0: port 3(macvlan1) entered disabled state [ 278.248474][T10051] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.256516][T10051] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.322902][T10051] device bridge0 left promiscuous mode [ 278.476765][T10057] bridge0: port 5(team0) entered blocking state [ 278.483207][T10057] bridge0: port 5(team0) entered forwarding state [ 278.489948][T10057] bridge0: port 4(veth1_to_hsr) entered blocking state [ 278.496976][T10057] bridge0: port 4(veth1_to_hsr) entered forwarding state [ 278.504245][T10057] bridge0: port 3(macvlan1) entered blocking state [ 278.510937][T10057] bridge0: port 3(macvlan1) entered forwarding state [ 278.517899][T10057] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.525118][T10057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.532588][T10057] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.539816][T10057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.557137][T10057] device bridge0 entered promiscuous mode [ 278.992925][ T3585] Bluetooth: hci2: unexpected event 0x03 length: 15 > 11 [ 279.053636][T10078] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 279.081756][T10078] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 279.100880][T10078] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.4'. [ 279.278583][T10091] bridge0: port 4(team0) entered disabled state [ 279.285963][T10091] bridge0: port 3(macvlan1) entered disabled state [ 279.293388][T10091] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.301285][T10091] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.351603][T10091] device bridge0 left promiscuous mode [ 279.437194][T10097] bridge0: port 4(team0) entered blocking state [ 279.443682][T10097] bridge0: port 4(team0) entered forwarding state [ 279.450395][T10097] bridge0: port 3(macvlan1) entered blocking state [ 279.457154][T10097] bridge0: port 3(macvlan1) entered forwarding state [ 279.464039][T10097] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.471321][T10097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.478779][T10097] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.486059][T10097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.591754][T10097] device bridge0 entered promiscuous mode [ 279.614829][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 279.762822][ T3585] Bluetooth: hci0: unexpected event 0x03 length: 15 > 11 [ 280.011509][T10119] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 280.097170][T10119] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 280.137192][T10119] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.3'. [ 280.536690][T10142] bridge0: port 4(team0) entered disabled state [ 280.544354][T10142] bridge0: port 3(macvlan1) entered disabled state [ 280.552514][T10142] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.561009][T10142] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.593808][T10142] device bridge0 left promiscuous mode [ 280.615074][ T3585] Bluetooth: hci0: unexpected event 0x03 length: 15 > 11 [ 280.675975][T10148] bridge0: port 4(team0) entered blocking state [ 280.689525][T10148] bridge0: port 4(team0) entered forwarding state [ 280.696198][T10148] bridge0: port 3(macvlan1) entered blocking state [ 280.702872][T10148] bridge0: port 3(macvlan1) entered forwarding state [ 280.709922][T10148] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.717200][T10148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.724676][T10148] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.731914][T10148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.800245][T10148] device bridge0 entered promiscuous mode [ 280.875140][T10154] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 280.918351][T10154] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 280.944421][T10154] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.2'. [ 281.356755][ T3585] Bluetooth: hci4: unexpected event 0x03 length: 15 > 11 [ 281.718449][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 281.877932][T10188] bridge0: port 3(team0) entered disabled state [ 281.885639][T10188] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.894584][T10188] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.008697][T10197] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 282.031752][T10197] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 282.031832][T10194] bridge0: port 3(team0) entered blocking state [ 282.046382][T10194] bridge0: port 3(team0) entered forwarding state [ 282.053119][T10194] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.056997][T10197] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.4'. [ 282.060302][T10194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.077427][T10194] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.084577][T10194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.099345][T10194] device bridge0 entered promiscuous mode [ 283.016716][T10232] device veth0_vlan left promiscuous mode [ 283.037444][T10232] device veth0_vlan entered promiscuous mode [ 283.055252][ T22] bridge0: port 3(macvlan1) entered disabled state [ 283.086132][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 283.117662][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 283.138151][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 283.147400][ T3645] bridge0: port 3(macvlan1) entered blocking state [ 283.154045][ T3645] bridge0: port 3(macvlan1) entered forwarding state [ 284.130702][T10279] device veth0_vlan left promiscuous mode [ 284.193076][T10279] device veth0_vlan entered promiscuous mode [ 285.393733][T10320] device veth0_vlan left promiscuous mode [ 285.559782][T10320] device veth0_vlan entered promiscuous mode [ 285.660440][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 285.882025][T10322] device syzkaller0 entered promiscuous mode [ 286.183174][T10342] mac80211_hwsim hwsim17 €Â: renamed from wlan1 [ 287.055301][T10354] device veth0_vlan left promiscuous mode [ 287.090482][T10354] device veth0_vlan entered promiscuous mode [ 287.153191][ T3645] bridge0: port 3(macvlan1) entered disabled state [ 287.173434][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 287.207619][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 287.237717][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 287.245693][ T3645] bridge0: port 3(macvlan1) entered blocking state [ 287.252352][ T3645] bridge0: port 3(macvlan1) entered forwarding state [ 287.881537][T10381] device syzkaller0 entered promiscuous mode [ 288.232536][T10401] device veth0_vlan left promiscuous mode [ 288.286606][T10401] device veth0_vlan entered promiscuous mode [ 288.782035][T10430] device syzkaller0 entered promiscuous mode [ 289.074383][T10446] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.2'. [ 289.102189][T10443] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.2'. [ 291.130007][T10582] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.0'. [ 291.179246][T10577] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.0'. [ 291.479754][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 292.515490][T10640] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 299.349716][T10896] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 299.389100][T10896] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 299.409828][T10901] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 299.442692][T10905] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 299.464568][T10906] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 299.474251][T10910] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 300.963479][T10944] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 301.018851][T10944] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 301.050573][T10950] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 301.076156][T10948] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 301.404277][T10528] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.518380][T10528] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.529795][T10964] delete_channel: no stack [ 301.535108][T10964] delete_channel: no stack [ 301.619065][T10528] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.734589][T10528] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.458818][ T3587] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 302.505369][ T3587] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 302.513799][ T3587] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 302.522342][ T3587] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 302.537422][ T3587] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 302.545006][ T3587] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 302.937028][T11000] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 302.955736][T10997] netlink: 194488 bytes leftover after parsing attributes in process `syz-executor.1'. [ 303.143502][T10980] chnl_net:caif_netlink_parms(): no params data found [ 303.907078][ T3590] Bluetooth: hci0: command 0x0406 tx timeout [ 304.216524][T10980] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.224254][T10980] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.248303][T10980] device bridge_slave_0 entered promiscuous mode [ 304.304242][T10980] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.317658][T10980] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.326314][T10980] device bridge_slave_1 entered promiscuous mode [ 304.407452][T11028] delete_channel: no stack [ 304.414192][T11028] delete_channel: no stack [ 304.438875][T10980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.484107][T10528] device hsr_slave_0 left promiscuous mode [ 304.508159][T10528] device hsr_slave_1 left promiscuous mode [ 304.520033][T10528] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.537825][T10528] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.557585][T10528] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.565049][T10528] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.585539][ T3587] Bluetooth: hci1: command tx timeout [ 304.605722][T10528] bridge0: port 3(team0) entered disabled state [ 304.635089][T10528] device bridge_slave_1 left promiscuous mode [ 304.642011][T10528] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.650901][T10528] device bridge_slave_0 left promiscuous mode [ 304.657499][T10528] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.671360][T10528] device veth1_macvtap left promiscuous mode [ 304.677758][T10528] device veth0_macvtap left promiscuous mode [ 304.685327][T10528] device veth1_vlan left promiscuous mode [ 304.695766][T10528] device veth0_vlan left promiscuous mode [ 305.104332][ T3585] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 305.109767][T10528] device team_slave_1 left promiscuous mode [ 305.117949][ T3590] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 305.126072][ T3585] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 305.126692][T10528] team0 (unregistering): Port device team_slave_1 removed [ 305.144569][ T3585] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 305.150723][T10528] device team_slave_0 left promiscuous mode [ 305.158349][ T3590] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 305.166107][T10528] team0 (unregistering): Port device team_slave_0 removed [ 305.173603][ T3590] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 305.183985][T10528] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.204856][T10528] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.280238][T10528] bond0 (unregistering): Released all slaves [ 305.323869][T10980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.343306][T11045] validate_nla: 5 callbacks suppressed [ 305.343323][T11045] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 305.367128][T11045] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 305.469135][T10980] team0: Port device team_slave_0 added [ 305.492030][T10980] team0: Port device team_slave_1 added [ 305.625918][T10980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.672413][T10980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.723304][T10980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.738496][T10980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.745498][T10980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.772509][T11058] syz-executor.1[11058] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 305.772616][T11058] syz-executor.1[11058] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 305.784694][T10980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.866082][T11060] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 305.874511][T11060] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 305.883110][T11060] netlink: 194488 bytes leftover after parsing attributes in process `syz-executor.3'. [ 305.933969][T10980] device hsr_slave_0 entered promiscuous mode [ 305.949423][T10980] device hsr_slave_1 entered promiscuous mode [ 305.962197][T10980] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 305.983811][T10980] Cannot create hsr debugfs directory [ 305.989925][T11062] delete_channel: no stack [ 305.996789][T11062] delete_channel: no stack [ 306.390123][T11046] chnl_net:caif_netlink_parms(): no params data found [ 306.542134][T11077] netlink: 'syz-executor.3': attribute type 33 has an invalid length. [ 306.557561][T11077] device bond0 entered promiscuous mode [ 306.563210][T11077] device bond_slave_0 entered promiscuous mode [ 306.578402][T11077] device bond_slave_1 entered promiscuous mode [ 306.656941][ T3590] Bluetooth: hci1: command tx timeout [ 306.793217][T11046] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.803010][T11046] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.813604][T11046] device bridge_slave_0 entered promiscuous mode [ 306.822819][T11046] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.833363][T11046] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.841933][T11046] device bridge_slave_1 entered promiscuous mode [ 306.962288][T11046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.014068][T11046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.075189][T10980] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 307.159530][T11046] team0: Port device team_slave_0 added [ 307.166242][T10980] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 307.196314][T10980] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 307.216733][T11046] team0: Port device team_slave_1 added [ 307.224482][T10980] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 307.227388][ T3590] Bluetooth: hci0: command tx timeout [ 307.325305][T11101] syz-executor.2[11101] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 307.326085][T11101] syz-executor.2[11101] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 307.354064][T11046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.447156][T11046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.581405][T11046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.612802][T11106] netlink: 'syz-executor.1': attribute type 33 has an invalid length. [ 307.744002][T11106] device bond0 entered promiscuous mode [ 307.853679][T11106] device bond_slave_0 entered promiscuous mode [ 307.943691][T11106] device bond_slave_1 entered promiscuous mode [ 308.163532][T11046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.183525][T11046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.296887][T11046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.426587][T11046] device hsr_slave_0 entered promiscuous mode [ 308.448015][T11046] device hsr_slave_1 entered promiscuous mode [ 308.462690][T11046] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 308.477178][T11046] Cannot create hsr debugfs directory [ 308.680099][T10980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.737136][ T3590] Bluetooth: hci1: command tx timeout [ 308.744243][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 308.752472][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 308.770435][T10980] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.828064][ T3324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 308.846654][ T3324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 308.855432][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.862582][ T3324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.911008][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 308.919567][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 308.935424][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 308.945657][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.952824][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.971936][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 309.031804][T11046] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.058735][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 309.068870][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 309.078854][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 309.088494][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 309.097668][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 309.148463][T11046] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.186007][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 309.198503][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 309.207653][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 309.216102][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 309.227979][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 309.239034][T10980] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 309.269373][T11046] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.297215][ T3590] Bluetooth: hci0: command tx timeout [ 309.355653][T11046] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.379078][ T8982] [ 309.381470][ T8982] ====================================================== [ 309.388492][ T8982] WARNING: possible circular locking dependency detected [ 309.395495][ T8982] 6.1.94-syzkaller #0 Not tainted [ 309.400503][ T8982] ------------------------------------------------------ [ 309.407503][ T8982] syz-executor.2/8982 is trying to acquire lock: [ 309.413815][ T8982] ffff8880b9835e90 (lock#10){+.+.}-{2:2}, at: __mmap_lock_do_trace_acquire_returned+0x84/0x670 [ 309.424182][ T8982] [ 309.424182][ T8982] but task is already holding lock: [ 309.431528][ T8982] ffff8880b983aa18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 309.441001][ T8982] [ 309.441001][ T8982] which lock already depends on the new lock. [ 309.441001][ T8982] [ 309.451400][ T8982] [ 309.451400][ T8982] the existing dependency chain (in reverse order) is: [ 309.460406][ T8982] [ 309.460406][ T8982] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 309.467700][ T8982] lock_acquire+0x1f8/0x5a0 [ 309.472824][ T8982] _raw_spin_lock_nested+0x2d/0x40 [ 309.478462][ T8982] raw_spin_rq_lock_nested+0x26/0x140 [ 309.484347][ T8982] task_fork_fair+0x5d/0x350 [ 309.489450][ T8982] sched_cgroup_fork+0x374/0x400 [ 309.494916][ T8982] copy_process+0x2442/0x4060 [ 309.500116][ T8982] kernel_clone+0x222/0x920 [ 309.505129][ T8982] user_mode_thread+0x12e/0x190 [ 309.510489][ T8982] rest_init+0x23/0x300 [ 309.515157][ T8982] start_kernel+0x0/0x53f [ 309.519997][ T8982] start_kernel+0x496/0x53f [ 309.525008][ T8982] secondary_startup_64_no_verify+0xcf/0xdb [ 309.531421][ T8982] [ 309.531421][ T8982] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 309.538706][ T8982] lock_acquire+0x1f8/0x5a0 [ 309.543724][ T8982] _raw_spin_lock_irqsave+0xd1/0x120 [ 309.549522][ T8982] try_to_wake_up+0xad/0x12e0 [ 309.554713][ T8982] rcu_read_unlock_special+0x3d2/0x540 [ 309.560687][ T8982] __rcu_read_unlock+0x92/0x100 [ 309.566049][ T8982] get_mem_cgroup_from_mm+0x19f/0x290 [ 309.571934][ T8982] get_mm_memcg_path+0x1b/0x600 [ 309.577295][ T8982] __mmap_lock_do_trace_acquire_returned+0x12f/0x670 [ 309.584496][ T8982] get_user_pages_unlocked+0x866/0x8a0 [ 309.590464][ T8982] internal_get_user_pages_fast+0x2826/0x2cf0 [ 309.597043][ T8982] __iov_iter_get_pages_alloc+0x3b1/0xa70 [ 309.603278][ T8982] iov_iter_get_pages2+0xcb/0x120 [ 309.608815][ T8982] bio_iov_iter_get_pages+0x359/0x1340 [ 309.614789][ T8982] iomap_dio_bio_iter+0xc86/0x1600 [ 309.620417][ T8982] __iomap_dio_rw+0x1271/0x2130 [ 309.625780][ T8982] iomap_dio_rw+0x42/0xa0 [ 309.630625][ T8982] ext4_file_write_iter+0x1464/0x1880 [ 309.636513][ T8982] vfs_write+0x7ae/0xba0 [ 309.641275][ T8982] ksys_write+0x19c/0x2c0 [ 309.646114][ T8982] do_syscall_64+0x3b/0xb0 [ 309.651053][ T8982] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 309.657464][ T8982] [ 309.657464][ T8982] -> #0 (lock#10){+.+.}-{2:2}: [ 309.664410][ T8982] validate_chain+0x1661/0x5950 [ 309.669781][ T8982] __lock_acquire+0x125b/0x1f80 [ 309.675149][ T8982] lock_acquire+0x1f8/0x5a0 [ 309.680172][ T8982] __mmap_lock_do_trace_acquire_returned+0x9d/0x670 [ 309.687270][ T8982] stack_map_get_build_id_offset+0x99e/0x9c0 [ 309.693763][ T8982] __bpf_get_stack+0x495/0x570 [ 309.699042][ T8982] bpf_get_stack_raw_tp+0x1b2/0x220 [ 309.704751][ T8982] bpf_prog_ec3b2eefa702d8d3+0x3a/0x3e [ 309.710729][ T8982] bpf_trace_run2+0x1fd/0x410 [ 309.715911][ T8982] trace_tlb_flush+0x151/0x1a0 [ 309.721187][ T8982] switch_mm_irqs_off+0x84a/0xc20 [ 309.726726][ T8982] __schedule+0x1140/0x4550 [ 309.731745][ T8982] preempt_schedule_common+0x83/0xd0 [ 309.737541][ T8982] preempt_schedule+0xd9/0xe0 [ 309.742724][ T8982] preempt_schedule_thunk+0x16/0x18 [ 309.748440][ T8982] _raw_spin_unlock_irqrestore+0x128/0x130 [ 309.754761][ T8982] __wake_up_sync_key+0x121/0x1c0 [ 309.760304][ T8982] pipe_write+0x12e4/0x1af0 [ 309.765322][ T8982] vfs_write+0x7ae/0xba0 [ 309.770075][ T8982] ksys_write+0x19c/0x2c0 [ 309.774911][ T8982] do_syscall_64+0x3b/0xb0 [ 309.779843][ T8982] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 309.786251][ T8982] [ 309.786251][ T8982] other info that might help us debug this: [ 309.786251][ T8982] [ 309.796463][ T8982] Chain exists of: [ 309.796463][ T8982] lock#10 --> &p->pi_lock --> &rq->__lock [ 309.796463][ T8982] [ 309.808107][ T8982] Possible unsafe locking scenario: [ 309.808107][ T8982] [ 309.815543][ T8982] CPU0 CPU1 [ 309.820894][ T8982] ---- ---- [ 309.826244][ T8982] lock(&rq->__lock); [ 309.830302][ T8982] lock(&p->pi_lock); [ 309.836881][ T8982] lock(&rq->__lock); [ 309.843456][ T8982] lock(lock#10); [ 309.847174][ T8982] [ 309.847174][ T8982] *** DEADLOCK *** [ 309.847174][ T8982] [ 309.855303][ T8982] 3 locks held by syz-executor.2/8982: [ 309.860743][ T8982] #0: ffff8880b983aa18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 309.870657][ T8982] #1: ffffffff8d12acc0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x110/0x410 [ 309.880045][ T8982] #2: ffff88807d789058 (&mm->mmap_lock){++++}-{3:3}, at: stack_map_get_build_id_offset+0x232/0x9c0 [ 309.890828][ T8982] [ 309.890828][ T8982] stack backtrace: [ 309.896705][ T8982] CPU: 0 PID: 8982 Comm: syz-executor.2 Not tainted 6.1.94-syzkaller #0 [ 309.905018][ T8982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 309.915070][ T8982] Call Trace: [ 309.918342][ T8982] [ 309.921265][ T8982] dump_stack_lvl+0x1e3/0x2cb [ 309.925942][ T8982] ? nf_tcp_handle_invalid+0x642/0x642 [ 309.931406][ T8982] ? print_circular_bug+0x12b/0x1a0 [ 309.936595][ T8982] check_noncircular+0x2fa/0x3b0 [ 309.941523][ T8982] ? add_chain_block+0x850/0x850 [ 309.946459][ T8982] ? lockdep_lock+0x11f/0x2a0 [ 309.951141][ T8982] validate_chain+0x1661/0x5950 [ 309.956001][ T8982] ? __lock_acquire+0x125b/0x1f80 [ 309.961023][ T8982] ? reacquire_held_locks+0x660/0x660 [ 309.966394][ T8982] ? reacquire_held_locks+0x660/0x660 [ 309.971779][ T8982] ? mark_lock+0x9a/0x340 [ 309.976105][ T8982] __lock_acquire+0x125b/0x1f80 [ 309.980957][ T8982] lock_acquire+0x1f8/0x5a0 [ 309.985473][ T8982] ? __mmap_lock_do_trace_acquire_returned+0x84/0x670 [ 309.992229][ T8982] ? read_lock_is_recursive+0x10/0x10 [ 309.997601][ T8982] ? validate_chain+0x112/0x5950 [ 310.002537][ T8982] ? exc_int3+0xa/0x70 [ 310.006594][ T8982] ? asm_exc_int3+0x35/0x40 [ 310.011101][ T8982] ? __mmap_lock_do_trace_acquire_returned+0x84/0x670 [ 310.017856][ T8982] __mmap_lock_do_trace_acquire_returned+0x9d/0x670 [ 310.024438][ T8982] ? __mmap_lock_do_trace_acquire_returned+0x84/0x670 [ 310.031190][ T8982] ? stack_map_get_build_id_offset+0x982/0x9c0 [ 310.037343][ T8982] stack_map_get_build_id_offset+0x99e/0x9c0 [ 310.043319][ T8982] ? __lock_acquire+0x125b/0x1f80 [ 310.048341][ T8982] ? __bpf_get_stackid+0x910/0x910 [ 310.053450][ T8982] __bpf_get_stack+0x495/0x570 [ 310.058212][ T8982] ? stack_map_get_build_id_offset+0x9c0/0x9c0 [ 310.064362][ T8982] ? __cant_sleep+0x270/0x270 [ 310.069034][ T8982] bpf_get_stack_raw_tp+0x1b2/0x220 [ 310.074228][ T8982] bpf_prog_ec3b2eefa702d8d3+0x3a/0x3e [ 310.079680][ T8982] bpf_trace_run2+0x1fd/0x410 [ 310.084347][ T8982] ? bpf_trace_run2+0x110/0x410 [ 310.089187][ T8982] ? bpf_trace_run1+0x3d0/0x3d0 [ 310.094032][ T8982] ? __perf_event_task_sched_out+0xb19/0xc60 [ 310.100008][ T8982] trace_tlb_flush+0x151/0x1a0 [ 310.104768][ T8982] switch_mm_irqs_off+0x84a/0xc20 [ 310.109788][ T8982] ? psi_task_switch+0x300/0x770 [ 310.114717][ T8982] ? switch_mm+0x190/0x190 [ 310.119132][ T8982] __schedule+0x1140/0x4550 [ 310.123639][ T8982] ? ep_poll_callback+0x6ae/0xb10 [ 310.128661][ T8982] ? _raw_spin_unlock+0x40/0x40 [ 310.133506][ T8982] ? __sched_text_start+0x8/0x8 [ 310.138351][ T8982] ? __wake_up+0x128/0x1c0 [ 310.142768][ T8982] ? preempt_schedule+0xd9/0xe0 [ 310.147605][ T8982] preempt_schedule_common+0x83/0xd0 [ 310.152878][ T8982] preempt_schedule+0xd9/0xe0 [ 310.157544][ T8982] ? schedule_preempt_disabled+0x20/0x20 [ 310.163166][ T8982] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 310.169143][ T8982] ? print_irqtrace_events+0x210/0x210 [ 310.174600][ T8982] preempt_schedule_thunk+0x16/0x18 [ 310.179819][ T8982] _raw_spin_unlock_irqrestore+0x128/0x130 [ 310.185643][ T8982] ? _raw_spin_unlock+0x40/0x40 [ 310.190511][ T8982] ? __wake_up_common+0x2a0/0x4e0 [ 310.195550][ T8982] __wake_up_sync_key+0x121/0x1c0 [ 310.200574][ T8982] ? __wake_up_locked_key_bookmark+0x20/0x20 [ 310.206553][ T8982] ? page_copy_sane+0x46/0x390 [ 310.211312][ T8982] ? copy_page_from_iter+0xe4/0x100 [ 310.216500][ T8982] pipe_write+0x12e4/0x1af0 [ 310.221023][ T8982] ? pipe_read+0x12a0/0x12a0 [ 310.225604][ T8982] ? end_current_label_crit_section+0x147/0x170 [ 310.231841][ T8982] ? common_file_perm+0x17d/0x1d0 [ 310.236892][ T8982] ? fsnotify_perm+0x67/0x590 [ 310.241594][ T8982] vfs_write+0x7ae/0xba0 [ 310.245842][ T8982] ? file_end_write+0x250/0x250 [ 310.250696][ T8982] ? kernel_wait+0x230/0x230 [ 310.255303][ T8982] ? __fdget_pos+0x1db/0x360 [ 310.259886][ T8982] ksys_write+0x19c/0x2c0 [ 310.264212][ T8982] ? print_irqtrace_events+0x210/0x210 [ 310.269670][ T8982] ? __ia32_sys_read+0x80/0x80 [ 310.274439][ T8982] ? syscall_enter_from_user_mode+0x2e/0x230 [ 310.280435][ T8982] ? lockdep_hardirqs_on+0x94/0x130 [ 310.285648][ T8982] ? syscall_enter_from_user_mode+0x2e/0x230 [ 310.291640][ T8982] do_syscall_64+0x3b/0xb0 [ 310.296075][ T8982] ? clear_bhb_loop+0x45/0xa0 [ 310.300778][ T8982] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 310.306684][ T8982] RIP: 0033:0x7fdd6a87bbef [ 310.311104][ T8982] Code: Unable to access opcode bytes at 0x7fdd6a87bbc5. [ 310.318117][ T8982] RSP: 002b:00007ffe4f2e1940 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 310.326524][ T8982] RAX: ffffffffffffffda RBX: 000000000000016d RCX: 00007fdd6a87bbef [ 310.334486][ T8982] RDX: 000000000000000c RSI: 00007ffe4f2e1a20 RDI: 00000000000000f8 [ 310.342447][ T8982] RBP: 00007ffe4f2e19bc R08: 0000000000000000 R09: 0000000000000010 [ 310.350409][ T8982] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032 [ 310.358370][ T8982] R13: 000000000004b7f1 R14: 000000000004b7a7 R15: 0000000000000006 [ 310.366346][ T8982] [ 310.410712][T11139] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 310.422304][T11139] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. 2024/06/17 02:36:20 SYZFATAL: failed to send *flatrpc.ExecutorMessageRawT: write tcp 10.128.1.188:45920->10.128.0.163:30024: write: broken pipe