last executing test programs: 3.665455342s ago: executing program 0: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x3, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 3.54858728s ago: executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x5452, 0x20001419) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8}, 0x48) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9ae}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x0, 0x4, 0x4}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x40, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r1}, 0x38) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, 0x0, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x100}, 0x0) 3.178962816s ago: executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x12, 0x0}, 0x2100) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8c18cffb703000008000000b704000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x100}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 3.055893015s ago: executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b8000699030000000500160002008178a8001500030001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x0) 2.869586633s ago: executing program 0: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='ext4_journal_start\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) 2.746389942s ago: executing program 0: r0 = socket$kcm(0x2, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0xb}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x2, &(0x7f0000000000)=r3, 0x8) 2.003622825s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x3, 0x8}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x17, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000040850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x9e}]}, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.883367313s ago: executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r2], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc028660f, &(0x7f00000005c0)=0x400000001) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={r0, 0x20, &(0x7f00000004c0)={&(0x7f0000000300)=""/49, 0x31, 0x0, &(0x7f0000000380)=""/140, 0x8c}}, 0x10) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r6}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r6}, @ldst={0x1, 0x0, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x90) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x3, '\x00', 0x0, r3, 0x1, 0x4}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r1, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000800)=r4}, 0x20) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)={0x1b, 0x0, 0x0, 0xffffb658, 0x0, r0, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xe, 0x22, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x3, 0x100, 0x3}, 0x10, r5, r0, 0x0, &(0x7f0000000900)=[r3, r7, r8, r1, r3, r1, r1, r9, r0], 0x0, 0x10, 0x1}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000180), 0x0}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x1003, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x2f}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x89a2, &(0x7f0000000080)) 1.747202604s ago: executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000005}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000200700000000000001000084060000000000000001"], 0x0, 0x42}, 0x20) 1.652115598s ago: executing program 4: bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f00000004c0)=ANY=[], 0xfffffdef) 1.224228073s ago: executing program 1: bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000006d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.084193875s ago: executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000061123c000400000095000000bf51a21da6467c0000000072cf80928cac0ae9f46adbd49c19fd3341345ecdc6660da8adda661c121ba05af7e7f5f54f299332a838d766c4395d01000080fef4c3f5cbb1e904"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x0, 0x16, 0xb3, 0x7f}, 0x48) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x2}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0x3) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xffffffff, 0x12) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="c50a00000000000061134c00000000001800000000000000000000000000000095000000000000005b343f100624b3de7926e22e7edb1497bf3991011242f785f0d596bb538ff72ed469b954afb2361cd3c59f04b57ebf2a29c94ea39c171264f6a088721d3a80495e3ed97583c8bf335cba5f728965fed3d22dd59ee0d06124c3aeb14cb61a877b1382c2489060f66d2018d74d1cd2c729541b0885f7a78a423a83f15537e7ef488da890f5cf403719b04057766ee017e7220e68a7ea43c069da2d0b05dd3567487d73dd363920cd575b2419179af731a6b1bd8c462df0f949c3a16ff977cddb2e84614a492c3d3ec65b1335bc6949473b8eec37c55781b5a83771c146b4027601df36e666908010355216568f8f67a2a136232f96bf7ef1bcb9d42baca52173809ca16d6cbb4760867c6f24fdd803934d5a8fae179929fed9c414cff600d3a673497b71f2fc10d239192e357388288f001ac7d76cea"], 0x0}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0x18, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r3, @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r1, 0x1, 0x19, 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 730.701299ms ago: executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@struct={0x0, 0x2, 0x0, 0x13, 0x0, 0x2, [{0x1}, {}]}]}, {0x0, [0x61]}}, &(0x7f0000000200)=""/225, 0x3f, 0xe1, 0x1}, 0x20) 689.866665ms ago: executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x0, 0x10000, 0x8001, 0x384, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1, 0x0, 0xffffff81, 0x0, 0x11, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001380)={{}, 0x0, &(0x7f0000001340)='%-5lx \x00'}, 0x20) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x901c0, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a1, &(0x7f0000000080)) 652.96699ms ago: executing program 3: perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003400)={0xd, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="850000000000ac205415b11286000095000000000000de"], &(0x7f0000003240)='GPL\x00', 0x0, 0x5}, 0xc01) 530.443979ms ago: executing program 2: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, 0x0, 0x0}, 0x90) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000003c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000005fab3197d3c9d820a3841b8e1a55"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 501.737993ms ago: executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r2], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc028660f, &(0x7f00000005c0)=0x400000001) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={r0, 0x20, &(0x7f00000004c0)={&(0x7f0000000300)=""/49, 0x31, 0x0, &(0x7f0000000380)=""/140, 0x8c}}, 0x10) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r6}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r6}, @ldst={0x1, 0x0, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x90) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x3, '\x00', 0x0, r3, 0x1, 0x4}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r1, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000800)=r4}, 0x20) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)={0x1b, 0x0, 0x0, 0xffffb658, 0x0, r0, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xe, 0x22, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x3, 0x100, 0x3}, 0x10, r5, r0, 0x0, &(0x7f0000000900)=[r3, r7, r8, r1, r3, r1, r1, r9, r0], 0x0, 0x10, 0x1}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000180), 0x0}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x1003, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x2f}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x89a2, &(0x7f0000000080)) 374.908572ms ago: executing program 2: bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000006d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 320.894711ms ago: executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000005}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000200700000000000001000084060000000000000001"], 0x0, 0x42}, 0x20) 318.504071ms ago: executing program 2: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r0}, &(0x7f0000000600), &(0x7f0000000640)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 306.879373ms ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x27}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 267.039189ms ago: executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x2, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000e9ffffff0000000061102d00000000009500000000000000671c63e0df51edab8e49e7e11c871e96fe8276b071a43685b44723dc89828b5f11b52a86233d10d4c914fec8d5de407bf85a25bd93"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x2, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x2d}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x0, 0x0) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000240)={[{0x2b, 'cpuacct'}]}, 0x9) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x0, 0x2, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a7", 0x1}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x4, 0x5}, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x1e000003, 0x1, 0x0, 0x8, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f00000000c0)={'c', ' *:* ', 'rwm\x00'}, 0xa) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0xf, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0001400200000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 190.18587ms ago: executing program 1: syz_open_procfs$namespace(0x0, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffd) 185.928332ms ago: executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@struct={0x0, 0x2, 0x0, 0x13, 0x0, 0x2, [{0x1}, {}]}]}, {0x0, [0x61]}}, &(0x7f0000000200)=""/225, 0x3f, 0xe1, 0x1}, 0x20) 161.877915ms ago: executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x3, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 111.813363ms ago: executing program 1: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='c '], 0xb) 106.396063ms ago: executing program 2: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0), 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002ac0)={{r0}, 0x0, 0x0, 0x406}, 0x20) 62.29222ms ago: executing program 3: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d80000003e0081064e81f782db44b9040a1d08040300000000070aa11800150006f7132603600e1208000f0000810401a80016", 0x33}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b904020000", 0x13}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0) 31.847545ms ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r3}, 0x10) 0s ago: executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d00)) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000200)=0x7fff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) kernel console output (not intermixed with test programs): lave_1): Enslaving as an active interface with an up link [ 73.367029][ T4033] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 73.410816][ T4033] netlink: 128124 bytes leftover after parsing attributes in process `syz-executor.3'. [ 73.489144][ T3931] team0: Port device team_slave_0 added [ 73.519356][ T3931] team0: Port device team_slave_1 added [ 73.599435][ T3931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.660332][ T3931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.692541][ T3931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.785320][ T4046] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 73.818151][ T4052] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET) [ 73.861005][ T4046] team0: Device veth0_macvtap failed to register rx_handler [ 73.902440][ T3931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.909407][ T3931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.958468][ T3931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.298149][ T3931] device hsr_slave_0 entered promiscuous mode [ 74.310189][ T3575] Bluetooth: hci4: command tx timeout [ 74.350931][ T3931] device hsr_slave_1 entered promiscuous mode [ 74.406629][ T3931] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.510555][ T3931] Cannot create hsr debugfs directory [ 74.589113][ T52] device hsr_slave_0 left promiscuous mode [ 74.613489][ T52] device hsr_slave_1 left promiscuous mode [ 74.685433][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.707480][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.723124][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.774632][ T4073] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 74.783736][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.807041][ T52] device bridge_slave_1 left promiscuous mode [ 74.830043][ T4073] netlink: 128124 bytes leftover after parsing attributes in process `syz-executor.3'. [ 74.853403][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.955842][ T52] device bridge_slave_0 left promiscuous mode [ 74.963447][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.013519][ T52] device veth1_macvtap left promiscuous mode [ 75.020869][ T52] device veth0_macvtap left promiscuous mode [ 75.027202][ T52] device veth1_vlan left promiscuous mode [ 75.033915][ T52] device veth0_vlan left promiscuous mode [ 75.201349][ T52] team0 (unregistering): Port device team_slave_1 removed [ 75.215653][ T52] team0 (unregistering): Port device team_slave_0 removed [ 75.226734][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.239554][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.305466][ T52] bond0 (unregistering): Released all slaves [ 75.371496][ T4080] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 75.381381][ T4080] team0: Device veth0_macvtap failed to register rx_handler [ 76.309613][ T4114] tap0: tun_chr_ioctl cmd 1074025677 [ 76.316688][ T22] cfg80211: failed to load regulatory.db [ 76.340904][ T4114] tap0: linktype set to 805 [ 76.390435][ T3584] Bluetooth: hci4: command tx timeout [ 77.017749][ T3931] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.132774][ T3931] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.178272][ T3931] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.210170][ T3931] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.396693][ T4152] tap0: tun_chr_ioctl cmd 1074025677 [ 77.403068][ T4152] tap0: linktype set to 805 [ 77.553467][ T3931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.643409][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.658010][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.776894][ T3931] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.817355][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.833910][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.885176][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.892316][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.926818][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.946479][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.960844][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.980595][ T3653] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.987708][ T3653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.071446][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.138790][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.157965][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.197591][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.218353][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.270901][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.279455][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.360739][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.385040][ T3931] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.448255][ T3931] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.470725][ T3584] Bluetooth: hci4: command tx timeout [ 78.490514][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.508766][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.553708][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.600951][ T4200] tap0: tun_chr_ioctl cmd 1074025677 [ 78.631701][ T4200] tap0: linktype set to 805 [ 79.417362][ T3931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.466970][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 79.490319][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 79.541190][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 79.557817][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.614599][ T4246] tap0: tun_chr_ioctl cmd 1074025677 [ 79.653274][ T4246] tap0: linktype set to 805 [ 79.677245][ T3931] device veth0_vlan entered promiscuous mode [ 79.720715][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 79.747518][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.842832][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 79.860765][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 79.882345][ T3931] device veth1_vlan entered promiscuous mode [ 80.067564][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 80.095148][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.128628][ T3931] device veth0_macvtap entered promiscuous mode [ 80.169623][ T3931] device veth1_macvtap entered promiscuous mode [ 80.331250][ T3931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.377439][ T3931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.441297][ T3931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.524709][ T3931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.567118][ T3931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.597807][ T3931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.613096][ T3931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.623788][ T3931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.636176][ T3931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.644977][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 80.653579][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 80.666605][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 80.683845][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.711206][ T3931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.740005][ T3931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.760564][ T3931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.815114][ T3931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.849442][ T3931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.910133][ T3931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.935865][ T3931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.961344][ T3931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.012342][ T3931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.064082][ T4309] tap0: tun_chr_ioctl cmd 1074025677 [ 81.107020][ T4309] tap0: linktype set to 805 [ 81.144019][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.173231][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.223298][ T3931] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.294600][ T3931] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.332821][ T3931] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.383604][ T3931] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.671341][ T36] wlan1: Trigger new scan to find an IBSS to join [ 81.712418][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.733240][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.778267][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 81.842946][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.868920][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.943730][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 82.116575][ T4356] tap0: tun_chr_ioctl cmd 1074025677 [ 82.143320][ T4356] tap0: linktype set to 805 [ 82.227711][ T3584] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4 [ 82.713640][ T9] wlan1: Trigger new scan to find an IBSS to join [ 82.917851][ T3584] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 83.612898][ T4424] syz-executor.0 (4424) used greatest stack depth: 19200 bytes left [ 83.707856][ T3584] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 84.522064][ T4466] syz-executor.0 (4466) used greatest stack depth: 18880 bytes left [ 87.672622][ T4286] wlan1: Trigger new scan to find an IBSS to join [ 88.710301][ T3641] wlan1: Trigger new scan to find an IBSS to join [ 89.671221][ T3947] wlan1: Trigger new scan to find an IBSS to join [ 90.630293][ T4294] wlan1: Trigger new scan to find an IBSS to join [ 90.720213][ T3947] wlan1: Trigger new scan to find an IBSS to join [ 91.781284][ T4290] wlan1: Creating new IBSS network, BSSID ce:df:70:b7:1e:7d [ 92.711268][ T56] wlan1: Trigger new scan to find an IBSS to join [ 93.670164][ T4294] wlan1: Trigger new scan to find an IBSS to join [ 95.670335][ T11] wlan1: Trigger new scan to find an IBSS to join [ 95.670393][ T36] wlan1: Trigger new scan to find an IBSS to join [ 96.689881][ T52] wlan1: Creating new IBSS network, BSSID 5a:d9:dd:06:92:34 [ 98.630110][ T56] wlan1: Trigger new scan to find an IBSS to join [ 98.720201][ T3947] wlan1: Trigger new scan to find an IBSS to join [ 99.609157][ T4294] wlan1: Creating new IBSS network, BSSID da:2a:7b:77:97:2c [ 99.666348][ T52] wlan1: Creating new IBSS network, BSSID 3a:5c:e8:4d:5d:9a [ 103.194462][ T5131] netlink: 14546 bytes leftover after parsing attributes in process `syz-executor.1'. [ 104.342095][ T5167] netlink: 14546 bytes leftover after parsing attributes in process `syz-executor.0'. [ 105.612471][ T5197] netlink: 14546 bytes leftover after parsing attributes in process `syz-executor.4'. [ 106.536735][ T5235] netlink: 14546 bytes leftover after parsing attributes in process `syz-executor.2'. [ 107.628577][ T5268] netlink: 14546 bytes leftover after parsing attributes in process `syz-executor.4'. [ 108.557856][ T5304] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 108.591733][ T5304] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 108.643697][ T5304] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 108.668710][ T5309] syz-executor.2[5309] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 108.668866][ T5309] syz-executor.2[5309] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.767229][ T5337] syz-executor.1[5337] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.770890][ T5339] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 109.812139][ T5339] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 109.851989][ T5337] syz-executor.1[5337] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.891564][ T5339] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 110.701558][ T5369] syz-executor.0[5369] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.701698][ T5369] syz-executor.0[5369] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.754530][ T5374] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 110.920026][ T5374] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 110.968076][ T5374] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 111.567146][ T5401] Driver unsupported XDP return value 0 on prog (id 493) dev N/A, expect packet loss! [ 111.726373][ T5406] syz-executor.1[5406] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.726537][ T5406] syz-executor.1[5406] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 112.100094][ T5415] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 112.130174][ T5415] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 112.163351][ T5415] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 112.501648][ T5431] syz-executor.0[5431] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 112.501786][ T5431] syz-executor.0[5431] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.107749][ T5455] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 113.197241][ T5455] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 113.222288][ T5455] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 113.583807][ T3584] Bluetooth: hci4: unexpected event 0x14 length: 15 > 6 [ 114.837072][ T5503] bpf_get_probe_write_proto: 2 callbacks suppressed [ 114.837088][ T5503] syz-executor.2[5503] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.865938][ T5503] syz-executor.2[5503] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.031387][ T3584] Bluetooth: hci3: unexpected event 0x14 length: 15 > 6 [ 115.849882][ T5537] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 115.894307][ T5537] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.0'. [ 116.175390][ T3584] Bluetooth: hci2: unexpected event 0x14 length: 15 > 6 [ 116.591137][ T5565] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 116.638637][ T5565] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.1'. [ 117.506948][ T3584] Bluetooth: hci4: unexpected event 0x14 length: 15 > 6 [ 117.517570][ T5599] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 117.546854][ T5599] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.2'. [ 118.466888][ T5633] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 118.503027][ T5633] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.0'. [ 118.544246][ T3584] Bluetooth: hci0: unexpected event 0x14 length: 15 > 6 [ 118.719109][ T5649] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 118.900599][ T5649] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 119.206916][ T5667] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 119.224701][ T5667] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.4'. [ 119.494736][ T3584] Bluetooth: hci0: unexpected event 0x14 length: 15 > 6 [ 119.644432][ T5685] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 119.685094][ T5685] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 119.699189][ T5689] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 119.730307][ T5689] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 119.767193][ T5691] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 119.941865][ T5704] netlink: 61211 bytes leftover after parsing attributes in process `syz-executor.3'. [ 120.195590][ T5719] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 120.671372][ T5737] netlink: 61211 bytes leftover after parsing attributes in process `syz-executor.0'. [ 120.862001][ T5749] validate_nla: 8 callbacks suppressed [ 120.862017][ T5749] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 120.863789][ T5748] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 120.896288][ T5748] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 120.927112][ T5748] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 120.973136][ T5748] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 121.039122][ T5757] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 121.391908][ T5778] __nla_validate_parse: 1 callbacks suppressed [ 121.391924][ T5778] netlink: 61211 bytes leftover after parsing attributes in process `syz-executor.0'. [ 121.511370][ T5781] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 121.519724][ T5781] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 121.840216][ T4286] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 121.855716][ T5794] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 121.898042][ T5794] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 121.944921][ T5802] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 122.029839][ T5806] netlink: 61211 bytes leftover after parsing attributes in process `syz-executor.4'. [ 122.156533][ T5810] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 122.814962][ T5840] netlink: 61211 bytes leftover after parsing attributes in process `syz-executor.4'. [ 123.049079][ T5851] netlink: 1041 bytes leftover after parsing attributes in process `syz-executor.4'. [ 123.239410][ T5863] netlink: 16255 bytes leftover after parsing attributes in process `syz-executor.4'. [ 123.917489][ T5889] netlink: 1041 bytes leftover after parsing attributes in process `syz-executor.3'. [ 124.131879][ T5899] netlink: 16255 bytes leftover after parsing attributes in process `syz-executor.4'. [ 124.777078][ T3575] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 124.789037][ T3575] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 124.820143][ T3575] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 124.834792][ T3575] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 124.844525][ T3575] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 124.851975][ T3575] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 124.877764][ T5924] netlink: 1041 bytes leftover after parsing attributes in process `syz-executor.1'. [ 124.923621][ T3644] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.033504][ T3644] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.179104][ T3644] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.374534][ T3644] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.588082][ T5916] chnl_net:caif_netlink_parms(): no params data found [ 126.143690][ T5916] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.190072][ T5916] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.198207][ T5916] device bridge_slave_0 entered promiscuous mode [ 126.283186][ T5916] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.320019][ T5916] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.341848][ T5916] device bridge_slave_1 entered promiscuous mode [ 126.435244][ T5992] __nla_validate_parse: 3 callbacks suppressed [ 126.435259][ T5992] netlink: 1041 bytes leftover after parsing attributes in process `syz-executor.3'. [ 126.596819][ T5916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.669004][ T5916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.758318][ T4294] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 126.855519][ T5916] team0: Port device team_slave_0 added [ 126.870750][ T3584] Bluetooth: hci4: command tx timeout [ 126.892022][ T5916] team0: Port device team_slave_1 added [ 127.070441][ T6015] netlink: 16255 bytes leftover after parsing attributes in process `syz-executor.2'. [ 127.140579][ T5916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.147921][ T5916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.289582][ T5916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.339051][ T6031] validate_nla: 8 callbacks suppressed [ 127.339067][ T6031] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 127.365037][ T5916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.400001][ T5916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.410025][ T6031] netlink: 194488 bytes leftover after parsing attributes in process `syz-executor.3'. [ 127.455652][ T5916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.467729][ T6035] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.4'. [ 127.478169][ T6035] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 127.659172][ T5916] device hsr_slave_0 entered promiscuous mode [ 127.685526][ T5916] device hsr_slave_1 entered promiscuous mode [ 127.737303][ T5916] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.756199][ T5916] Cannot create hsr debugfs directory [ 127.971096][ T3644] device hsr_slave_0 left promiscuous mode [ 127.979283][ T3644] device hsr_slave_1 left promiscuous mode [ 128.001602][ T3644] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.018006][ T3644] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.036189][ T3644] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.046593][ T3644] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.056188][ T3644] device bridge_slave_1 left promiscuous mode [ 128.062688][ T3644] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.077941][ T3644] device bridge_slave_0 left promiscuous mode [ 128.084645][ T3644] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.106391][ T3644] device veth1_macvtap left promiscuous mode [ 128.112708][ T3644] device veth0_macvtap left promiscuous mode [ 128.118910][ T3644] device veth1_vlan left promiscuous mode [ 128.127821][ T3644] device veth0_vlan left promiscuous mode [ 128.685248][ T3644] team0 (unregistering): Port device team_slave_1 removed [ 128.720606][ T3644] team0 (unregistering): Port device team_slave_0 removed [ 128.734179][ T3644] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.747090][ T3644] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.817684][ T3644] bond0 (unregistering): Released all slaves [ 128.901829][ T6063] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 128.910943][ T6063] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 128.922159][ T6063] bridge0: port 3(dummy0) entered blocking state [ 128.928746][ T6063] bridge0: port 3(dummy0) entered disabled state [ 128.936502][ T6063] device dummy0 entered promiscuous mode [ 128.950949][ T3584] Bluetooth: hci4: command tx timeout [ 128.956685][ T6063] bridge0: port 3(dummy0) entered blocking state [ 128.964094][ T6063] bridge0: port 3(dummy0) entered forwarding state [ 128.987062][ T6065] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.2'. [ 129.015361][ T6065] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 129.639658][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 129.727293][ T4294] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 130.298667][ T6104] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 130.367817][ T6104] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 130.489114][ T6108] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.3'. [ 130.535993][ T6108] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 130.641065][ T5916] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 130.691712][ T5916] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 130.772344][ T5916] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 130.786012][ T5916] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 130.851371][ T4286] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 131.031218][ T3584] Bluetooth: hci4: command tx timeout [ 131.291719][ T5916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.341963][ T6139] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 131.374120][ T6139] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 131.416913][ T6139] bridge0: port 3(dummy0) entered blocking state [ 131.437173][ T6139] bridge0: port 3(dummy0) entered disabled state [ 131.533054][ T6139] device dummy0 entered promiscuous mode [ 131.559544][ T6139] bridge0: port 3(dummy0) entered blocking state [ 131.566033][ T6139] bridge0: port 3(dummy0) entered forwarding state [ 131.602191][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 131.623254][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 131.686032][ T5916] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.764716][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 131.801001][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 131.847153][ T3653] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.854418][ T3653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.931252][ T6149] device batadv0 entered promiscuous mode [ 132.015172][ T6151] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.2'. [ 132.040151][ T6151] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 132.081082][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 132.094988][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 132.125848][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 132.155598][ T3571] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.162839][ T3571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.208078][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 132.247724][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 132.301619][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 132.321591][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 132.360587][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 132.378125][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 132.419034][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 132.428715][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 132.454249][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 132.485129][ T5916] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 132.512301][ T5916] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 132.532446][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 132.547111][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 132.642185][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.648538][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.110078][ T3584] Bluetooth: hci4: command tx timeout [ 133.148119][ T6186] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 133.204198][ T6186] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 133.228266][ T6189] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.1'. [ 133.265467][ T6189] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 133.370265][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 133.377724][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 133.533568][ T5916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.559054][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 133.568935][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 133.588517][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 133.597068][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 133.618447][ T5916] device veth0_vlan entered promiscuous mode [ 133.636103][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 133.644601][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 133.727290][ T5916] device veth1_vlan entered promiscuous mode [ 134.033317][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 134.042821][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 134.060622][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 134.126649][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 134.163269][ T5916] device veth0_macvtap entered promiscuous mode [ 134.202665][ T6219] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 134.241787][ T5916] device veth1_macvtap entered promiscuous mode [ 134.284235][ T6219] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 134.349659][ T5916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.411054][ T5916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.457557][ T5916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.495856][ T5916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.525888][ T5916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.566421][ T5916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.614626][ T5916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.654593][ T5916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.706920][ T5916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.739452][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 134.761579][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 134.804607][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 134.845568][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 134.881278][ T5916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.896782][ T5916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.908391][ T5916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.921990][ T5916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.935680][ T5916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.956673][ T5916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.986861][ T5916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.013882][ T5916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.026373][ T5916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.048371][ T6236] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 135.078829][ T6236] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 135.143424][ T6236] bridge0: port 3(dummy0) entered blocking state [ 135.176550][ T6236] bridge0: port 3(dummy0) entered disabled state [ 135.187684][ T6236] device dummy0 entered promiscuous mode [ 135.215838][ T6236] bridge0: port 3(dummy0) entered blocking state [ 135.222337][ T6236] bridge0: port 3(dummy0) entered forwarding state [ 135.236863][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 135.271349][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 135.308302][ T5916] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.318805][ T5916] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.349137][ T5916] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.392996][ T5916] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.414660][ T6241] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.1'. [ 135.428714][ T6241] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 135.833920][ T3947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.886319][ T3947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.981041][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 136.052856][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.085927][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.191134][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 136.572250][ T6282] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 136.630850][ T6283] device batadv0 entered promiscuous mode [ 136.644820][ T6282] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 138.540216][ T6336] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 138.658369][ T6336] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 139.090405][ T6359] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 139.744735][ T6385] netlink: 61211 bytes leftover after parsing attributes in process `syz-executor.3'. [ 140.205571][ T6398] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 140.253719][ T6398] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 140.913397][ T6423] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 141.100104][ T6433] netlink: 61211 bytes leftover after parsing attributes in process `syz-executor.0'. [ 141.595722][ T6454] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 141.672991][ T6454] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 142.596075][ T6467] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 142.654684][ T6474] netlink: 61211 bytes leftover after parsing attributes in process `syz-executor.1'. [ 143.534035][ T6494] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 143.593290][ T6494] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 143.866929][ T6508] device batadv0 entered promiscuous mode [ 144.655914][ T6514] netlink: 61211 bytes leftover after parsing attributes in process `syz-executor.0'. [ 144.688892][ T6512] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 145.284462][ T6545] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 145.320262][ T6545] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 145.887543][ T6555] netlink: 61211 bytes leftover after parsing attributes in process `syz-executor.4'. [ 145.906433][ T6556] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 147.662456][ T6584] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 147.760383][ T6584] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 148.566744][ T3575] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 148.575157][ T3575] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 148.583723][ T3575] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 148.595323][ T3575] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 148.603471][ T3575] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 148.610894][ T3575] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 149.432800][ T6607] chnl_net:caif_netlink_parms(): no params data found [ 149.893869][ T6607] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.949083][ T6607] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.008954][ T6607] device bridge_slave_0 entered promiscuous mode [ 150.068613][ T6607] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.111031][ T6607] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.155645][ T6638] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 150.179299][ T6638] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 150.179356][ T6607] device bridge_slave_1 entered promiscuous mode [ 150.305113][ T6607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.346669][ T6607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.515300][ T6607] team0: Port device team_slave_0 added [ 150.536115][ T6607] team0: Port device team_slave_1 added [ 150.633571][ T3575] Bluetooth: hci0: command tx timeout [ 150.659867][ T6607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.703143][ T6607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.851383][ T6607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.923217][ T6607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.959984][ T6607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.076297][ T6607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.257290][ T6607] device hsr_slave_0 entered promiscuous mode [ 151.297452][ T6607] device hsr_slave_1 entered promiscuous mode [ 151.339235][ T6607] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.369054][ T6607] Cannot create hsr debugfs directory [ 151.865992][ T6607] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.880881][ T6670] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 151.889081][ T6670] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 152.066364][ T6607] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.171480][ T6607] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.328626][ T6607] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.370764][ T6687] netlink: 16410 bytes leftover after parsing attributes in process `syz-executor.1'. [ 152.634339][ T6607] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 152.707498][ T6607] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 152.714406][ T3575] Bluetooth: hci0: command tx timeout [ 152.740730][ T6607] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 152.775584][ T6607] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 152.867171][ T4286] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 153.013401][ T6607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.027204][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 153.127642][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 153.164502][ T6607] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.281725][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 153.311454][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 153.351973][ T3616] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.359124][ T3616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.388956][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 153.418492][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 153.431219][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 153.455930][ T3613] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.463084][ T3613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.472230][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 153.515468][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 153.558225][ T6607] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 153.602222][ T6607] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 153.633422][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 153.652682][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 153.668040][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 153.691130][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 153.716914][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 153.740931][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 153.749581][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 153.778680][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 153.801885][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 153.817159][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 153.828989][ T6728] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.4'. [ 154.727792][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 154.758886][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 154.792784][ T3575] Bluetooth: hci0: command tx timeout [ 154.803630][ T6607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.940333][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 154.966098][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 155.100923][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 155.109275][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 155.168522][ T6607] device veth0_vlan entered promiscuous mode [ 155.188267][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 155.200762][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 155.264126][ T6607] device veth1_vlan entered promiscuous mode [ 155.363658][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 155.372516][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 155.420801][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 155.460216][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 155.472520][ T6607] device veth0_macvtap entered promiscuous mode [ 155.502329][ T6607] device veth1_macvtap entered promiscuous mode [ 155.582426][ T6607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.630029][ T6607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.657430][ T6607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.701436][ T6607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.758363][ T6607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.808938][ T6607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.863683][ T6607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.876480][ T6607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.886577][ T6607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.897170][ T6607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.909003][ T6607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.922507][ T6607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.940618][ T6607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.953699][ T6607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.973249][ T6607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.988284][ T6607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.006918][ T6607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.016963][ T6607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.027486][ T6607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.037378][ T6607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.048432][ T6607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.070904][ T6607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.084047][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 156.096822][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 156.134393][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 156.150799][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 156.174883][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 156.184230][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 156.206342][ T6780] netlink: 16410 bytes leftover after parsing attributes in process `syz-executor.4'. [ 156.246708][ T6607] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.310231][ T6607] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.318952][ T6607] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.373699][ T6607] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.815966][ T3644] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.857538][ T3644] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.871879][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 156.890374][ T3575] Bluetooth: hci0: command tx timeout [ 156.952054][ T3641] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.981205][ T3641] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.036065][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 157.492752][ T6813] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.3'. [ 157.550492][ T6818] netlink: 16410 bytes leftover after parsing attributes in process `syz-executor.4'. [ 157.706437][ T6827] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 256 (only 8 groups) [ 157.885254][ T4294] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 158.282912][ T6847] netlink: 16410 bytes leftover after parsing attributes in process `syz-executor.0'. [ 158.364538][ T6850] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.4'. [ 158.637344][ T6861] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 256 (only 8 groups) [ 159.360627][ T26] audit: type=1804 audit(1718356597.773:2): pid=6889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2453059575/syzkaller.iJb6nP/271/memory.events" dev="sda1" ino=1960 res=1 errno=0 [ 159.400159][ T6887] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.4'. [ 159.519110][ T26] audit: type=1800 audit(1718356597.783:3): pid=6889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1960 res=0 errno=0 [ 159.854749][ T6904] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 256 (only 8 groups) [ 160.294228][ T6922] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.3'. [ 160.766346][ T56] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 161.764710][ T6958] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.1'. [ 161.840416][ T6958] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. [ 161.869467][ T6962] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.3'. [ 161.981151][ T4294] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 162.088145][ T3641] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 163.404588][ T6996] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.3'. [ 163.424706][ T6996] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.3'. [ 163.812082][ T7013] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 163.838639][ T7013] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 164.182850][ T7031] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.3'. [ 164.241542][ T7031] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.3'. [ 164.707317][ T7045] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 164.924605][ T7045] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 165.569464][ T7070] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.4'. [ 165.603243][ T7070] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. [ 167.041828][ T7097] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.3'. [ 167.087886][ T7097] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.3'. [ 167.100485][ T7102] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.2'. [ 167.139741][ T7102] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.2'. [ 167.251683][ T26] audit: type=1804 audit(1718356605.683:4): pid=7108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2365170372/syzkaller.lDPOfJ/274/memory.events" dev="sda1" ino=1946 res=1 errno=0 [ 167.370414][ T26] audit: type=1800 audit(1718356605.723:5): pid=7108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1946 res=0 errno=0 [ 168.502359][ T3584] Bluetooth: hci1: unexpected event 0x1c length: 15 > 5 [ 168.593124][ T7148] __nla_validate_parse: 1 callbacks suppressed [ 168.593141][ T7148] netlink: 164 bytes leftover after parsing attributes in process `syz-executor.2'. [ 169.209247][ T26] audit: type=1804 audit(1718356607.633:6): pid=7168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1910218691/syzkaller.PLzBWF/75/memory.events" dev="sda1" ino=1958 res=1 errno=0 [ 169.362881][ T26] audit: type=1800 audit(1718356607.633:7): pid=7168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1958 res=0 errno=0 [ 171.062206][ T7207] netlink: 164 bytes leftover after parsing attributes in process `syz-executor.3'. [ 171.228672][ T26] audit: type=1804 audit(1718356609.653:8): pid=7214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1910218691/syzkaller.PLzBWF/77/memory.events" dev="sda1" ino=1957 res=1 errno=0 [ 171.267828][ T26] audit: type=1800 audit(1718356609.653:9): pid=7214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1957 res=0 errno=0 [ 172.656437][ T7247] netlink: 164 bytes leftover after parsing attributes in process `syz-executor.0'. [ 173.773953][ T26] audit: type=1804 audit(1718356612.203:10): pid=7264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2453059575/syzkaller.iJb6nP/300/memory.events" dev="sda1" ino=1945 res=1 errno=0 [ 173.881426][ T26] audit: type=1800 audit(1718356612.233:11): pid=7264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1945 res=0 errno=0 [ 174.129708][ T7283] netlink: 164 bytes leftover after parsing attributes in process `syz-executor.3'. [ 175.670102][ T3586] Bluetooth: hci2: command 0x0406 tx timeout [ 175.670312][ T3575] Bluetooth: hci1: command 0x0406 tx timeout [ 175.676251][ T3586] Bluetooth: hci3: command 0x0406 tx timeout [ 175.942370][ T26] audit: type=1804 audit(1718356614.373:12): pid=7326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1910218691/syzkaller.PLzBWF/88/memory.events" dev="sda1" ino=1947 res=1 errno=0 [ 176.039139][ T26] audit: type=1800 audit(1718356614.403:13): pid=7326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1947 res=0 errno=0 [ 177.461112][ T7358] lo: mtu less than device minimum [ 177.501657][ T26] audit: type=1804 audit(1718356615.933:14): pid=7362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3163779327/syzkaller.10HDwI/51/memory.events" dev="sda1" ino=1959 res=1 errno=0 [ 177.611501][ T26] audit: type=1800 audit(1718356615.963:15): pid=7362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1959 res=0 errno=0 [ 178.997204][ T7391] lo: mtu less than device minimum [ 179.357210][ T26] audit: type=1804 audit(1718356617.783:16): pid=7409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2453059575/syzkaller.iJb6nP/308/memory.events" dev="sda1" ino=1961 res=1 errno=0 [ 179.427825][ T26] audit: type=1800 audit(1718356617.823:17): pid=7409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1961 res=0 errno=0 [ 179.923847][ T7431] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 179.952216][ T7433] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 179.960934][ T7431] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 179.990229][ T7433] netlink: 128124 bytes leftover after parsing attributes in process `syz-executor.0'. [ 180.878894][ T7462] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 180.900115][ T7462] netlink: 'syz-executor.1': attribute type 15 has an invalid length. [ 181.545262][ T7488] Zero length message leads to an empty skb [ 181.574602][ T7488] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 181.596223][ T7488] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.2'. [ 181.936734][ T7495] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 182.030070][ T7495] netlink: 128124 bytes leftover after parsing attributes in process `syz-executor.3'. [ 182.937108][ T26] audit: type=1804 audit(1718356621.363:18): pid=7522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2453059575/syzkaller.iJb6nP/314/memory.events" dev="sda1" ino=1952 res=1 errno=0 [ 182.997858][ T26] audit: type=1800 audit(1718356621.363:19): pid=7522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1952 res=0 errno=0 [ 183.045953][ T7527] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 183.062257][ T7527] netlink: 128124 bytes leftover after parsing attributes in process `syz-executor.2'. [ 184.003028][ T7571] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 184.010962][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 184.100240][ T7571] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.3'. [ 184.767347][ T7601] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 184.789216][ T7601] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.3'. [ 185.499166][ T7631] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 185.522450][ T7631] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.0'. [ 186.472223][ T7664] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 186.520174][ T7664] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.2'. [ 187.818759][ T7705] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 187.868106][ T7705] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.4'. [ 188.911519][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 189.601810][ T7761] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 189.667125][ T7761] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.0'. [ 191.374033][ T7799] tun0: tun_chr_ioctl cmd 1074025694 [ 191.391068][ T7799] netlink: 4083 bytes leftover after parsing attributes in process `syz-executor.0'. [ 191.448588][ T7807] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 191.523657][ T7807] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.2'. [ 192.288158][ T26] audit: type=1804 audit(1718356630.713:20): pid=7833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1910218691/syzkaller.PLzBWF/146/memory.events" dev="sda1" ino=1957 res=1 errno=0 [ 192.418567][ T26] audit: type=1800 audit(1718356630.713:21): pid=7833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1957 res=0 errno=0 [ 193.055475][ T7839] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 193.103842][ T7842] tun0: tun_chr_ioctl cmd 1074025694 [ 193.110232][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 193.134946][ T7839] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 193.154835][ T7843] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 193.210578][ T7842] netlink: 4083 bytes leftover after parsing attributes in process `syz-executor.3'. [ 193.221185][ T7839] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 193.242820][ T7843] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 193.267754][ T7839] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 193.294629][ T7839] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 193.318712][ T7839] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 193.585960][ T7858] IPv6: NLM_F_CREATE should be specified when creating new route [ 193.631864][ T7858] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.3'. [ 193.770568][ T7863] device dummy0 entered promiscuous mode [ 193.834130][ T7865] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 194.077744][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.084119][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.253327][ T7887] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.4'. [ 194.408554][ T7894] IPv6: NLM_F_CREATE should be specified when creating new route [ 194.454185][ T7894] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. [ 194.676741][ T7902] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 196.510197][ T7937] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 196.567045][ T7940] validate_nla: 10 callbacks suppressed [ 196.567060][ T7940] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 196.773792][ T7945] device dummy0 entered promiscuous mode [ 196.927576][ T7958] netlink: 16186 bytes leftover after parsing attributes in process `syz-executor.1'. [ 196.958682][ T7954] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 196.977428][ T7961] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 197.045794][ T7961] netlink: 'syz-executor.2': attribute type 19 has an invalid length. [ 197.072137][ T7967] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 197.090047][ T7961] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.2'. [ 197.116839][ T7962] netlink: 'syz-executor.4': attribute type 49 has an invalid length. [ 197.140567][ T7954] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 197.169655][ T7966] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 197.210899][ T7963] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 197.777960][ T7980] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 197.811285][ T7979] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.3'. [ 198.025099][ T7986] netlink: 134780 bytes leftover after parsing attributes in process `syz-executor.2'. [ 198.210732][ T7992] tun0: tun_chr_ioctl cmd 1074025694 [ 198.263321][ T7992] netlink: 4083 bytes leftover after parsing attributes in process `syz-executor.1'. [ 198.288821][ T7999] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.3'. [ 198.527886][ T8008] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 199.732611][ T8026] netlink: 134780 bytes leftover after parsing attributes in process `syz-executor.0'. [ 200.069120][ T8034] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.0'. [ 200.086163][ T8037] tun0: tun_chr_ioctl cmd 1074025694 [ 200.379275][ T3644] device hsr_slave_0 left promiscuous mode [ 200.453045][ T3644] device hsr_slave_1 left promiscuous mode [ 200.503509][ T3644] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.520829][ T3644] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.585443][ T3644] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.622062][ T3644] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.705221][ T3644] device dummy0 left promiscuous mode [ 200.737634][ T3644] bridge0: port 3(dummy0) entered disabled state [ 200.872446][ T3644] device bridge_slave_1 left promiscuous mode [ 200.878842][ T3644] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.020864][ T3644] device bridge_slave_0 left promiscuous mode [ 201.027186][ T3644] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.350764][ T3644] device veth1_macvtap left promiscuous mode [ 201.367211][ T3644] device veth1_vlan left promiscuous mode [ 201.393920][ T3644] device veth0_vlan left promiscuous mode [ 202.135911][ T3644] team0 (unregistering): Port device team_slave_1 removed [ 202.206775][ T3644] team0 (unregistering): Port device team_slave_0 removed [ 202.245409][ T3644] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.293560][ T3644] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.378440][ T3644] bond0 (unregistering): Released all slaves [ 202.983697][ T8098] __nla_validate_parse: 3 callbacks suppressed [ 202.983715][ T8098] netlink: 134780 bytes leftover after parsing attributes in process `syz-executor.0'. [ 203.252890][ T8100] validate_nla: 7 callbacks suppressed [ 203.252908][ T8100] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 203.330927][ T8100] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 203.401471][ T8101] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 203.484210][ T8100] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 203.977051][ T8131] netlink: 134780 bytes leftover after parsing attributes in process `syz-executor.3'. [ 204.306483][ T8139] ref_ctr_offset mismatch. inode: 0x79f offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 204.867755][ T8145] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 204.907925][ T8145] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 204.931268][ T8150] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 205.140443][ T8145] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 205.913627][ T8183] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 206.468773][ T8206] netlink: 202920 bytes leftover after parsing attributes in process `syz-executor.3'. [ 206.503125][ T8206] openvswitch: netlink: Flow key attr not present in new flow. [ 207.095777][ T8234] netlink: 202920 bytes leftover after parsing attributes in process `syz-executor.2'. [ 207.117065][ T8230] ref_ctr_offset mismatch. inode: 0x7a4 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 207.135606][ T8234] openvswitch: netlink: Flow key attr not present in new flow. [ 207.322624][ T8248] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 208.008087][ T8271] netlink: 202920 bytes leftover after parsing attributes in process `syz-executor.3'. [ 208.084822][ T8271] openvswitch: netlink: Flow key attr not present in new flow. [ 209.104917][ T8310] netlink: 202920 bytes leftover after parsing attributes in process `syz-executor.3'. [ 209.129496][ T8310] openvswitch: netlink: Flow key attr not present in new flow. [ 209.183492][ T8309] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 209.223151][ T8309] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 209.246355][ T8311] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 209.307166][ T8309] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 209.548945][ T8318] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 209.579623][ T8318] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 209.618302][ T8318] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 210.051680][ T8341] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 210.109644][ T8341] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 210.143225][ T8346] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 210.222019][ T8349] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 210.236386][ T8341] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 210.248720][ T8354] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 210.266348][ T8349] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 210.720620][ T11] wlan1: Trigger new scan to find an IBSS to join [ 210.976044][ T8388] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 211.022435][ T8388] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 213.113434][ T8482] netlink: 61211 bytes leftover after parsing attributes in process `syz-executor.4'. [ 213.307548][ T8489] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len [ 213.674457][ T11] wlan1: Trigger new scan to find an IBSS to join [ 214.102219][ T8517] netlink: 61211 bytes leftover after parsing attributes in process `syz-executor.2'. [ 215.670158][ T11] wlan1: Creating new IBSS network, BSSID 7e:64:fd:c5:1b:a6 [ 216.994253][ T8522] mac80211_hwsim hwsim11 wlan1: refused to change device tx_queue_len [ 217.203630][ T8536] validate_nla: 18 callbacks suppressed [ 217.203686][ T8536] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 217.281850][ T8536] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 217.300932][ T8545] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 217.354436][ T8536] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 218.136381][ T8571] mac80211_hwsim hwsim7 wlan1: refused to change device tx_queue_len [ 218.720630][ T8586] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 218.731793][ T8586] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 218.787827][ T8586] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 218.831894][ T8586] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 219.410301][ T8612] mac80211_hwsim hwsim11 wlan1: refused to change device tx_queue_len [ 219.787080][ T8626] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 219.832618][ T8626] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 220.481851][ T8651] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len [ 221.998213][ T8709] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.4'. [ 222.064660][ T8709] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. [ 222.877874][ T8742] validate_nla: 5 callbacks suppressed [ 222.877889][ T8742] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 222.946370][ T8742] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.2'. [ 222.989340][ T8742] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 223.017904][ T8742] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 223.081383][ T8742] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 224.290993][ T8778] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 224.320225][ T8778] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.0'. [ 224.385780][ T8778] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 224.407862][ T8778] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 224.464711][ T8778] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. [ 226.130553][ T8830] netlink: 16255 bytes leftover after parsing attributes in process `syz-executor.0'. [ 227.772502][ T8886] device wlan1 entered promiscuous mode [ 230.734186][ T8892] netlink: 'syz-executor.4': attribute type 58 has an invalid length. [ 230.785657][ T8892] netlink: 'syz-executor.4': attribute type 58 has an invalid length. [ 230.804851][ T8902] netlink: 'syz-executor.4': attribute type 58 has an invalid length. [ 230.847320][ T8905] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 230.866462][ T8905] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 230.912396][ T8905] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 230.954698][ T8909] netlink: 16255 bytes leftover after parsing attributes in process `syz-executor.0'. [ 234.325600][ T8923] device wlan1 entered promiscuous mode [ 234.346978][ T8941] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 234.578348][ T8960] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 234.611806][ T8960] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 234.658874][ T8960] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 234.852594][ T8969] netlink: 'syz-executor.0': attribute type 58 has an invalid length. [ 234.883139][ T8969] netlink: 'syz-executor.0': attribute type 58 has an invalid length. [ 234.931662][ T8972] netlink: 'syz-executor.0': attribute type 58 has an invalid length. [ 235.335274][ T8988] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.3'. [ 235.711769][ T9009] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 238.531702][ T9033] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.2'. [ 238.772450][ T9045] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 242.174426][ T9078] device wlan1 entered promiscuous mode [ 242.275651][ T9088] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 242.995445][ T9123] device wlan1 entered promiscuous mode [ 244.724031][ T9172] netlink: 763 bytes leftover after parsing attributes in process `syz-executor.4'. [ 247.350095][ T47] Bluetooth: hci4: command 0x0406 tx timeout [ 249.947699][ T9257] device syzkaller0 entered promiscuous mode [ 252.152478][ T9319] device syzkaller0 entered promiscuous mode [ 254.128802][ T9371] device syzkaller0 entered promiscuous mode [ 255.137317][ T9429] validate_nla: 3 callbacks suppressed [ 255.137333][ T9429] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 255.168108][ T9429] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 255.904004][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.910360][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.920691][ T9434] bridge0: port 4(hsr_slave_1) entered blocking state [ 255.943313][ T9434] bridge0: port 4(hsr_slave_1) entered disabled state [ 256.172808][ T9447] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 256.217052][ T9447] netlink: 127868 bytes leftover after parsing attributes in process `syz-executor.0'. [ 256.515600][ T9458] device syzkaller0 entered promiscuous mode [ 257.574415][ T9499] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 257.586063][ T9495] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 257.605219][ T9499] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 257.616013][ T9495] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 257.626480][ T9495] netlink: 194488 bytes leftover after parsing attributes in process `syz-executor.4'. [ 257.849714][ T9512] bridge0: port 3(hsr_slave_1) entered blocking state [ 257.868182][ T9512] bridge0: port 3(hsr_slave_1) entered disabled state [ 258.280475][ T9531] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 258.321618][ T9531] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 258.698795][ T9540] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 258.730033][ T9540] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 258.752280][ T9540] netlink: 194488 bytes leftover after parsing attributes in process `syz-executor.0'. [ 258.866328][ T9550] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 258.940344][ T9550] netlink: 127868 bytes leftover after parsing attributes in process `syz-executor.4'. [ 260.413092][ T9586] device syzkaller0 entered promiscuous mode [ 260.614958][ T9609] bridge0: port 3(veth0_to_bond) entered blocking state [ 260.627451][ T9611] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 260.650807][ T9609] bridge0: port 3(veth0_to_bond) entered disabled state [ 260.659090][ T9609] device veth0_to_bond entered promiscuous mode [ 260.690237][ T9611] netlink: 127868 bytes leftover after parsing attributes in process `syz-executor.1'. [ 260.700838][ T9609] bridge0: port 3(veth0_to_bond) entered blocking state [ 260.708098][ T9609] bridge0: port 3(veth0_to_bond) entered forwarding state [ 260.770935][ T9616] device veth0_to_bond left promiscuous mode [ 260.814333][ T9616] bridge0: port 3(veth0_to_bond) entered disabled state [ 261.598939][ T9644] device syzkaller0 entered promiscuous mode [ 262.130227][ T9659] bridge0: port 4(veth0_to_bond) entered blocking state [ 262.148789][ T9659] bridge0: port 4(veth0_to_bond) entered disabled state [ 262.242243][ T9659] device veth0_to_bond entered promiscuous mode [ 262.302276][ T9659] bridge0: port 4(veth0_to_bond) entered blocking state [ 262.309332][ T9659] bridge0: port 4(veth0_to_bond) entered forwarding state [ 262.331529][ T9665] device veth0_to_bond left promiscuous mode [ 262.337992][ T9665] bridge0: port 4(veth0_to_bond) entered disabled state [ 262.389180][ T9672] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 263.172329][ T9690] device syzkaller0 entered promiscuous mode [ 263.960837][ T9707] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 264.917031][ T9750] device syzkaller0 entered promiscuous mode [ 265.129828][ T9765] netlink: 'syz-executor.0': attribute type 46 has an invalid length. [ 265.388222][ T9779] bridge0: port 3(veth0_to_bond) entered blocking state [ 265.420350][ T9779] bridge0: port 3(veth0_to_bond) entered disabled state [ 265.451339][ T9779] device veth0_to_bond entered promiscuous mode [ 265.460920][ T9779] bridge0: port 3(veth0_to_bond) entered blocking state [ 265.468016][ T9779] bridge0: port 3(veth0_to_bond) entered forwarding state [ 265.484416][ T9784] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 265.499734][ T9783] device veth0_to_bond left promiscuous mode [ 265.509814][ T9783] bridge0: port 3(veth0_to_bond) entered disabled state [ 265.702943][ T9799] netlink: 'syz-executor.1': attribute type 46 has an invalid length. [ 266.076083][ T9801] device syzkaller0 entered promiscuous mode [ 266.103976][ T9814] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 266.414070][ T9821] bridge0: port 4(veth0_to_bond) entered blocking state [ 266.449123][ T9821] bridge0: port 4(veth0_to_bond) entered disabled state [ 266.476574][ T9821] device veth0_to_bond entered promiscuous mode [ 266.508454][ T9821] bridge0: port 4(veth0_to_bond) entered blocking state [ 266.515519][ T9821] bridge0: port 4(veth0_to_bond) entered forwarding state [ 266.569529][ T9826] device veth0_to_bond left promiscuous mode [ 266.652325][ T9826] bridge0: port 4(veth0_to_bond) entered disabled state [ 267.172455][ T9836] netlink: 'syz-executor.2': attribute type 46 has an invalid length. [ 267.866911][ T9850] device syzkaller0 entered promiscuous mode [ 268.406654][ T9875] bridge0: port 3(veth0_to_bond) entered blocking state [ 268.430088][ T9875] bridge0: port 3(veth0_to_bond) entered disabled state [ 268.456349][ T9875] device veth0_to_bond entered promiscuous mode [ 268.727659][ T9875] bridge0: port 3(veth0_to_bond) entered blocking state [ 268.734805][ T9875] bridge0: port 3(veth0_to_bond) entered forwarding state [ 268.936029][ T9874] device veth0_to_bond left promiscuous mode [ 268.961050][ T9874] bridge0: port 3(veth0_to_bond) entered disabled state [ 268.971390][ T9879] netlink: 'syz-executor.3': attribute type 46 has an invalid length. [ 269.926042][ T9917] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.4'. [ 269.960152][ T9920] bridge0: port 4(veth0_to_bond) entered blocking state [ 269.967197][ T9920] bridge0: port 4(veth0_to_bond) entered disabled state [ 270.028474][ T9920] device veth0_to_bond entered promiscuous mode [ 270.077741][ T9920] bridge0: port 4(veth0_to_bond) entered blocking state [ 270.084817][ T9920] bridge0: port 4(veth0_to_bond) entered forwarding state [ 270.379058][ T9929] device syzkaller0 entered promiscuous mode [ 270.706297][ T9943] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 270.763503][ T9943] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 270.787412][ T9943] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 271.890586][ T9957] bridge0: port 4(veth0_to_bond) entered blocking state [ 271.897763][ T9957] bridge0: port 4(veth0_to_bond) entered disabled state [ 271.913859][ T9957] device veth0_to_bond entered promiscuous mode [ 271.924581][ T9957] bridge0: port 4(veth0_to_bond) entered blocking state [ 271.931694][ T9957] bridge0: port 4(veth0_to_bond) entered forwarding state [ 271.973493][ T9948] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.2'. [ 272.030587][ T9959] device veth0_to_bond left promiscuous mode [ 272.067820][ T9959] bridge0: port 4(veth0_to_bond) entered disabled state [ 273.033306][ T3586] Bluetooth: hci0: command 0x0406 tx timeout [ 273.149796][ T9973] device syzkaller0 entered promiscuous mode [ 274.051865][T10010] : renamed from ipvlan1 [ 274.467582][T10028] device syzkaller0 entered promiscuous mode [ 275.707995][T10049] device syzkaller0 entered promiscuous mode [ 275.792092][T10069] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 275.810828][T10069] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 275.822483][T10069] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.3'. [ 275.995183][T10074] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 276.014555][T10074] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 276.118621][T10070] : renamed from ipvlan1 [ 276.769497][T10090] device syzkaller0 entered promiscuous mode [ 276.982360][T10100] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.3'. [ 277.126410][T10111] : renamed from ipvlan1 [ 277.785102][T10127] device syzkaller0 entered promiscuous mode [ 277.795085][T10134] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. [ 278.039600][T10152] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 278.080689][T10152] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 278.134610][T10152] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.4'. [ 278.457500][T10173] bridge0: port 3(veth0_to_bond) entered blocking state [ 278.468182][T10173] bridge0: port 3(veth0_to_bond) entered disabled state [ 278.488944][T10173] device veth0_to_bond entered promiscuous mode [ 278.604062][T10173] bridge0: port 3(veth0_to_bond) entered blocking state [ 278.611167][T10173] bridge0: port 3(veth0_to_bond) entered forwarding state [ 278.691959][T10171] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. [ 279.043201][T10173] device veth0_to_bond left promiscuous mode [ 279.049426][T10173] bridge0: port 3(veth0_to_bond) entered disabled state [ 279.329657][T10185] device syzkaller0 entered promiscuous mode [ 279.352325][T10197] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 279.383383][T10197] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 279.392852][T10197] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.0'. [ 279.427288][T10201] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 279.447510][T10201] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.2'. [ 279.563667][T10211] bridge0: port 3(veth0_to_bond) entered blocking state [ 279.573521][T10211] bridge0: port 3(veth0_to_bond) entered disabled state [ 279.582714][T10211] device veth0_to_bond entered promiscuous mode [ 279.593479][T10211] bridge0: port 3(veth0_to_bond) entered blocking state [ 279.600588][T10211] bridge0: port 3(veth0_to_bond) entered forwarding state [ 279.622632][T10211] device veth0_to_bond left promiscuous mode [ 279.637600][T10211] bridge0: port 3(veth0_to_bond) entered disabled state [ 280.012620][T10238] netlink: 'syz-executor.4': attribute type 46 has an invalid length. [ 280.028501][T10237] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 280.230451][T10249] bridge0: port 3(veth0_to_bond) entered blocking state [ 280.239324][T10249] bridge0: port 3(veth0_to_bond) entered disabled state [ 280.253258][T10249] device veth0_to_bond entered promiscuous mode [ 280.261596][T10249] bridge0: port 3(veth0_to_bond) entered blocking state [ 280.268648][T10249] bridge0: port 3(veth0_to_bond) entered forwarding state [ 280.290417][T10249] device veth0_to_bond left promiscuous mode [ 280.299589][T10249] bridge0: port 3(veth0_to_bond) entered disabled state [ 280.433247][T10257] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 280.572876][T10268] netlink: 'syz-executor.2': attribute type 46 has an invalid length. [ 280.671965][T10279] bridge0: port 3(veth0_to_bond) entered blocking state [ 280.679218][T10279] bridge0: port 3(veth0_to_bond) entered disabled state [ 280.688713][T10279] device veth0_to_bond entered promiscuous mode [ 280.706000][T10279] bridge0: port 3(veth0_to_bond) entered blocking state [ 280.713065][T10279] bridge0: port 3(veth0_to_bond) entered forwarding state [ 280.736105][T10279] device veth0_to_bond left promiscuous mode [ 280.742639][T10279] bridge0: port 3(veth0_to_bond) entered disabled state [ 280.851600][T10288] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 280.866117][T10288] __nla_validate_parse: 9 callbacks suppressed [ 280.866133][T10288] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.4'. [ 280.888984][T10284] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. [ 281.059597][T10298] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 281.196589][T10308] netlink: 'syz-executor.1': attribute type 46 has an invalid length. [ 281.222613][T10308] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. [ 281.232445][T10311] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.0'. [ 281.251737][T10313] bridge0: port 4(veth0_to_bond) entered blocking state [ 281.276001][T10313] bridge0: port 4(veth0_to_bond) entered disabled state [ 281.314156][T10313] device veth0_to_bond entered promiscuous mode [ 281.339866][T10313] bridge0: port 4(veth0_to_bond) entered blocking state [ 281.346933][T10313] bridge0: port 4(veth0_to_bond) entered forwarding state [ 281.378464][T10315] device veth0_to_bond left promiscuous mode [ 281.395097][T10315] bridge0: port 4(veth0_to_bond) entered disabled state [ 281.427410][T10322] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 281.436367][T10322] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.0'. [ 281.628839][T10324] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.1'. [ 281.681419][T10336] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 281.705863][T10339] netlink: 'syz-executor.4': attribute type 46 has an invalid length. [ 281.745118][T10339] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. [ 281.797669][T10346] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.3'. [ 281.889436][T10353] bridge0: port 3(veth0_to_bond) entered blocking state [ 281.907114][T10353] bridge0: port 3(veth0_to_bond) entered disabled state [ 281.920124][T10353] device veth0_to_bond entered promiscuous mode [ 281.926788][T10353] bridge0: port 3(veth0_to_bond) entered blocking state [ 281.933860][T10353] bridge0: port 3(veth0_to_bond) entered forwarding state [ 281.992038][T10359] device veth0_to_bond left promiscuous mode [ 282.021305][T10359] bridge0: port 3(veth0_to_bond) entered disabled state [ 282.072514][T10352] Â: renamed from pim6reg1 [ 282.287648][T10374] netlink: 'syz-executor.2': attribute type 46 has an invalid length. [ 282.666555][T10398] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 282.690030][T10398] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 283.038391][T10417] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 283.050257][T10417] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 283.483265][T10435] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 284.229844][T10494] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 284.288111][T10494] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 285.042846][T10547] device syzkaller0 entered promiscuous mode [ 285.498001][T10580] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 285.560065][T10580] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 285.708737][T10593] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 285.727518][T10593] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 286.059580][T10599] Â: renamed from pim6reg1 [ 286.208644][T10614] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 286.484167][T10627] __nla_validate_parse: 8 callbacks suppressed [ 286.484214][T10627] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. [ 286.545561][T10637] device macvlan1 entered promiscuous mode [ 286.567238][T10637] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 286.752554][T10644] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 286.873945][T10642] Â: renamed from pim6reg1 [ 286.897190][T10651] netlink: 134056 bytes leftover after parsing attributes in process `syz-executor.4'. [ 286.960709][T10651] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 286.977189][T10651] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 287.671438][T10667] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.3'. [ 287.868549][T10682] device pim6reg1 entered promiscuous mode [ 288.240082][T10704] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 288.293722][T10709] netlink: 134056 bytes leftover after parsing attributes in process `syz-executor.3'. [ 288.346079][T10709] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 288.382398][T10709] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 288.597786][T10723] device pim6reg1 entered promiscuous mode [ 288.719697][T10727] netlink: 16366 bytes leftover after parsing attributes in process `syz-executor.0'. [ 289.205985][T10740] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 289.661295][T10755] device pim6reg1 entered promiscuous mode [ 290.177971][T10775] Â: renamed from pim6reg1 [ 290.434620][T10786] device macvlan1 entered promiscuous mode [ 290.468230][T10786] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 290.748162][T10801] device pim6reg1 entered promiscuous mode [ 290.998759][T10823] €Â0: renamed from pim6reg1 [ 291.394771][T10846] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 291.407768][T10844] device pim6reg1 entered promiscuous mode [ 292.241417][T10885] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 293.526740][T10948] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 293.585884][T10951] €Â0: renamed from pim6reg1 [ 294.360158][T10987] €Â0: renamed from pim6reg1 [ 294.456215][T10993] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 294.552033][T11005] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 295.491999][T11029] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 295.533066][T11029] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 295.624883][T11035] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 295.687915][T11039] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 295.866265][T11051] sctp: [Deprecated]: syz-executor.0 (pid 11051) Use of int in max_burst socket option deprecated. [ 295.866265][T11051] Use struct sctp_assoc_value instead [ 296.049009][T11063] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 296.065449][T11066] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 296.078265][T11066] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 296.096892][T11063] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 296.117876][T11068] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 296.160154][T11063] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 296.170641][T11063] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 296.210085][ T26] audit: type=1804 audit(1718356734.633:22): pid=11074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2453059575/syzkaller.iJb6nP/606/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0 [ 296.275432][ T26] audit: type=1800 audit(1718356734.643:23): pid=11074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="cgroup.controllers" dev="sda1" ino=1953 res=0 errno=0 [ 296.305572][T11077] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 296.425762][T11085] sctp: [Deprecated]: syz-executor.2 (pid 11085) Use of int in max_burst socket option deprecated. [ 296.425762][T11085] Use struct sctp_assoc_value instead [ 297.733195][T11132] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 297.744379][T11132] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.3'. [ 297.782338][ T26] audit: type=1804 audit(1718356736.213:24): pid=11135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3163779327/syzkaller.10HDwI/359/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 297.815572][T11137] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 297.839710][ T26] audit: type=1800 audit(1718356736.213:25): pid=11135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="cgroup.controllers" dev="sda1" ino=1960 res=0 errno=0 [ 297.851291][T11137] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 298.177867][T11168] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.3'. [ 298.586884][ T3586] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 299.589858][ T3586] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 299.657177][T11240] device syzkaller0 entered promiscuous mode [ 300.341497][T11288] device syzkaller0 entered promiscuous mode [ 300.352968][T11274] Â: renamed from pim6reg1 [ 300.498269][T11296] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 300.518622][T11296] netlink: 112865 bytes leftover after parsing attributes in process `syz-executor.2'. [ 300.815220][ T3586] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 301.740563][T11339] Â: renamed from pim6reg1 [ 301.936163][T11368] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 301.968335][T11368] netlink: 112865 bytes leftover after parsing attributes in process `syz-executor.2'. [ 302.292177][T11390] Â: renamed from pim6reg1 [ 302.354108][T11396] validate_nla: 14 callbacks suppressed [ 302.354122][T11396] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 302.370712][T11396] device veth1_macvtap left promiscuous mode [ 302.392349][T11396] bridge0: port 3(macsec0) entered blocking state [ 302.403954][T11396] bridge0: port 3(macsec0) entered disabled state [ 302.412307][T11396] device macsec0 entered promiscuous mode [ 302.466491][T11398] device syzkaller0 entered promiscuous mode [ 302.599264][T11402] device wg2 entered promiscuous mode [ 302.716216][T11411] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 302.750643][T11411] netlink: 112865 bytes leftover after parsing attributes in process `syz-executor.3'. [ 302.837438][T11416] device syzkaller0 entered promiscuous mode [ 302.997185][T11427] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 303.277668][T11446] device syzkaller0 entered promiscuous mode [ 303.493860][T11446] device wg2 entered promiscuous mode [ 303.517680][T11463] sctp: [Deprecated]: syz-executor.0 (pid 11463) Use of struct sctp_assoc_value in delayed_ack socket option. [ 303.517680][T11463] Use struct sctp_sack_info instead [ 303.639217][T11466] device syzkaller0 entered promiscuous mode [ 303.740084][T11470] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 303.755424][T11470] device veth1_macvtap left promiscuous mode [ 303.787535][T11470] bridge0: port 3(macsec0) entered blocking state [ 303.808686][T11470] bridge0: port 3(macsec0) entered disabled state [ 303.837972][T11470] device macsec0 entered promiscuous mode [ 304.196809][T11500] sctp: [Deprecated]: syz-executor.1 (pid 11500) Use of struct sctp_assoc_value in delayed_ack socket option. [ 304.196809][T11500] Use struct sctp_sack_info instead [ 304.316068][T11503] device syzkaller0 entered promiscuous mode [ 304.465183][T11507] device syzkaller0 entered promiscuous mode [ 304.486801][T11503] device wg2 entered promiscuous mode [ 305.007397][T11525] Â: renamed from pim6reg1 [ 305.115578][T11534] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 305.140041][T11534] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.0'. [ 305.219527][T11532] device syzkaller0 entered promiscuous mode [ 305.348692][T11545] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 305.381726][T11545] device veth1_macvtap left promiscuous mode [ 305.404837][T11545] bridge0: port 5(macsec0) entered blocking state [ 305.426254][T11545] bridge0: port 5(macsec0) entered disabled state [ 305.446989][T11545] device macsec0 entered promiscuous mode [ 305.566641][T11547] device wg2 left promiscuous mode [ 305.624058][T11547] device wg2 entered promiscuous mode [ 305.640527][T11560] sctp: [Deprecated]: syz-executor.0 (pid 11560) Use of struct sctp_assoc_value in delayed_ack socket option. [ 305.640527][T11560] Use struct sctp_sack_info instead [ 305.748162][T11552] device syzkaller0 entered promiscuous mode [ 305.795732][T11554] device syzkaller0 entered promiscuous mode [ 306.023177][T11582] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 306.694021][T11609] device syzkaller0 entered promiscuous mode [ 306.793317][T11612] device syzkaller0 entered promiscuous mode [ 306.805788][T11609] device wg2 left promiscuous mode [ 306.862047][T11615] device syzkaller0 entered promiscuous mode [ 306.878223][T11609] device wg2 entered promiscuous mode [ 307.600501][T11632] device syzkaller0 entered promiscuous mode [ 307.650166][T11640] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 307.658274][T11640] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.0'. [ 308.271565][T11672] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 308.279665][T11672] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.0'. [ 308.695662][T11681] device syzkaller0 entered promiscuous mode [ 308.779834][T11681] device wg2 left promiscuous mode [ 308.817638][T11681] device wg2 entered promiscuous mode [ 309.291039][T11701] device syzkaller0 entered promiscuous mode [ 309.508426][T11711] device syzkaller0 entered promiscuous mode [ 309.603200][T11722] device syzkaller0 entered promiscuous mode [ 309.686997][T11729] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 309.767727][T11729] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 309.777544][T11732] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 309.812506][T11729] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 309.851794][T11729] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 309.890597][T11729] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 309.932832][T11729] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 310.052091][T11742] netlink: 14568 bytes leftover after parsing attributes in process `syz-executor.1'. [ 310.170253][T11748] device syzkaller0 entered promiscuous mode [ 310.794565][T11776] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 311.066122][T11785] netlink: 14568 bytes leftover after parsing attributes in process `syz-executor.2'. [ 311.459111][T11798] device netdevsim0 entered promiscuous mode [ 311.596500][T11796] device syzkaller0 entered promiscuous mode [ 311.723763][T11811] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 312.152220][T11839] device syzkaller0 entered promiscuous mode [ 312.183941][T11843] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 312.410566][T11858] netlink: 14568 bytes leftover after parsing attributes in process `syz-executor.0'. [ 312.561901][T11865] device pim6reg1 entered promiscuous mode [ 312.990804][T11885] device syzkaller0 entered promiscuous mode [ 313.461889][T11904] device syzkaller0 entered promiscuous mode [ 313.537858][T11896] device syzkaller0 entered promiscuous mode [ 313.617680][T11910] device wg2 left promiscuous mode [ 313.653994][T11904] device wg2 entered promiscuous mode [ 313.786307][T11920] device pim6reg1 entered promiscuous mode [ 313.965967][T11933] device syzkaller0 entered promiscuous mode [ 313.996425][T11939] device netdevsim0 entered promiscuous mode [ 314.257655][T11949] device syzkaller0 entered promiscuous mode [ 314.553175][T11967] device pim6reg1 entered promiscuous mode [ 315.143056][T11997] device syzkaller0 entered promiscuous mode [ 317.012215][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.018546][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.128337][T12079] device syzkaller0 entered promiscuous mode [ 318.953893][T12080] device wg2 entered promiscuous mode [ 319.307024][T12101] device pim6reg1 entered promiscuous mode [ 321.472346][ T47] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 321.508478][ T47] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 321.518910][ T47] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 321.527990][ T47] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 321.577018][ T47] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 321.586143][ T47] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 322.452348][ T56] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.597203][ T56] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.713729][ T56] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.843854][T12167] device pim6reg1 entered promiscuous mode [ 322.881848][ T56] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.036348][T12149] chnl_net:caif_netlink_parms(): no params data found [ 323.698276][ T47] Bluetooth: hci5: command tx timeout [ 324.112894][T12149] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.120501][T12149] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.129056][T12149] device bridge_slave_0 entered promiscuous mode [ 324.169203][T12149] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.186452][T12149] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.222875][T12149] device bridge_slave_1 entered promiscuous mode [ 324.325057][T12149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.337591][T12149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.431565][T12149] team0: Port device team_slave_0 added [ 324.445947][T12149] team0: Port device team_slave_1 added [ 324.535243][T12149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.555181][T12149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.631232][T12149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.663729][T12149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.674316][T12149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.727316][T12149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.905749][T12149] device hsr_slave_0 entered promiscuous mode [ 324.950651][T12149] device hsr_slave_1 entered promiscuous mode [ 325.460055][ T56] device hsr_slave_0 left promiscuous mode [ 325.478007][ T56] device hsr_slave_1 left promiscuous mode [ 325.511277][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.518843][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.560152][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.567581][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.587025][ T56] bridge0: port 3(dummy0) entered disabled state [ 325.615887][ T56] device bridge_slave_1 left promiscuous mode [ 325.617175][T12234] validate_nla: 13 callbacks suppressed [ 325.617189][T12234] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 325.633063][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.666962][ T56] device bridge_slave_0 left promiscuous mode [ 325.670922][T12234] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 325.685301][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.731968][ T56] device veth1_macvtap left promiscuous mode [ 325.747666][ T56] device veth0_macvtap left promiscuous mode [ 325.754032][ T47] Bluetooth: hci5: command tx timeout [ 325.768860][ T56] device veth1_vlan left promiscuous mode [ 325.792985][ T56] device veth0_vlan left promiscuous mode [ 326.339402][ T56] team0 (unregistering): Port device team_slave_1 removed [ 326.418633][ T56] team0 (unregistering): Port device team_slave_0 removed [ 326.492677][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.580387][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.880980][ T56] bond0 (unregistering): Released all slaves [ 327.476073][T12149] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 327.497479][T12149] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 327.540634][T12149] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 327.602185][T12149] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 327.825255][T12300] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 327.830144][ T47] Bluetooth: hci5: command tx timeout [ 327.848086][T12300] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 328.052980][T12149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.081521][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 328.099639][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 328.112424][T12149] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.143329][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 328.152741][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 328.171017][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.178128][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.249753][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 328.270783][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 328.297034][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 328.401271][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.408383][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.491004][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 328.499877][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 328.533652][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 328.544558][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 328.554524][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 328.565135][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 328.573797][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 328.582639][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 328.595448][T12149] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 328.622038][T12149] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 328.637582][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 328.651979][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 328.668449][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 329.405684][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 329.426686][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 329.496181][T12149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.883761][T12364] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 329.895117][T12364] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 329.910098][ T47] Bluetooth: hci5: command tx timeout [ 330.152279][T12375] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.3'. [ 330.649699][T12396] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.658602][T12396] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.759240][T12402] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 330.772803][T12402] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 330.810374][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 330.824282][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 330.905143][T12400] device bridge_slave_1 left promiscuous mode [ 330.950752][T12400] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.978236][T12400] device bridge_slave_0 left promiscuous mode [ 330.992137][T12400] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.193549][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 331.215735][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 331.253593][T12149] device veth0_vlan entered promiscuous mode [ 331.287726][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 331.325869][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 331.364186][T12149] device veth1_vlan entered promiscuous mode [ 331.461687][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 331.476050][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 331.495870][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 331.531367][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 331.572666][T12149] device veth0_macvtap entered promiscuous mode [ 331.595540][T12149] device veth1_macvtap entered promiscuous mode [ 331.649656][T12149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.678319][T12149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.703537][T12149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.724540][T12149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.744762][T12149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.764166][T12149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.774174][T12149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.784714][T12149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.797472][T12149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.807791][T12424] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 331.836806][T12424] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 331.856804][T12424] netlink: 16114 bytes leftover after parsing attributes in process `syz-executor.2'. [ 331.892283][T12422] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 331.904345][T12422] netlink: 'syz-executor.0': attribute type 22 has an invalid length. [ 331.950019][T12422] netlink: 14384 bytes leftover after parsing attributes in process `syz-executor.0'. [ 331.979156][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 331.987760][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 332.037247][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 332.055693][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 332.078840][T12149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.101936][T12149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.121404][T12149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.161330][T12149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.187057][T12149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.223766][T12149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.255364][T12149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.275306][T12149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.293166][T12149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.307110][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 332.377475][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 332.477419][T12149] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.530125][T12149] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.560196][T12149] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.599412][T12149] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.809336][T12450] device syzkaller0 entered promiscuous mode [ 333.052149][ T3641] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.071152][ T3641] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.086960][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 333.126323][ T3641] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.156033][ T3641] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.182023][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 333.525086][T12482] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 333.560867][T12482] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 333.581801][T12482] netlink: 16114 bytes leftover after parsing attributes in process `syz-executor.4'. [ 333.631388][T12488] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 333.789502][T12494] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.1'. [ 334.674913][T12534] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.684317][T12534] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.792858][T12535] device macsec0 left promiscuous mode [ 334.798513][T12535] bridge0: port 3(macsec0) entered disabled state [ 334.828262][T12535] device bridge_slave_1 left promiscuous mode [ 334.834841][T12535] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.844072][T12535] device bridge_slave_0 left promiscuous mode [ 334.851506][T12535] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.491339][T12563] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. [ 335.546868][T12567] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 335.574822][T12570] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.4'. [ 336.146832][T12597] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. [ 336.216870][T12601] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 336.266943][T12607] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.1'. [ 336.637657][T12631] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.3'. [ 336.918774][T12642] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 336.990148][T12642] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.3'. [ 337.811984][T12687] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 338.365503][T12715] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 338.716375][T12736] IPv6: NLM_F_CREATE should be specified when creating new route [ 338.741065][T12736] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.0'. [ 338.832110][T12740] Â: renamed from pim6reg1 [ 338.888248][T12740] netlink: 'syz-executor.3': attribute type 19 has an invalid length. [ 338.935079][T12748] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 338.994347][T12750] bridge0: port 3(veth1_to_hsr) entered blocking state [ 339.050199][T12750] bridge0: port 3(veth1_to_hsr) entered disabled state [ 339.077544][T12750] device veth1_to_hsr entered promiscuous mode [ 339.124441][T12750] bridge0: port 3(veth1_to_hsr) entered blocking state [ 339.131514][T12750] bridge0: port 3(veth1_to_hsr) entered forwarding state [ 339.453729][T12768] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 339.470235][T12768] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.3'. [ 339.722875][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.775769][ T3586] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 339.789337][ T3586] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 339.797409][ T3586] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 339.808904][ T3586] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 339.816811][ T3586] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 339.824968][ T3586] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 339.834791][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.950969][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.972270][T12795] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 339.980635][T12795] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.3'. [ 340.032845][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.262967][T12781] chnl_net:caif_netlink_parms(): no params data found [ 340.514379][T12830] bridge0: port 6(veth1_to_hsr) entered blocking state [ 340.521616][T12830] bridge0: port 6(veth1_to_hsr) entered disabled state [ 340.529808][T12830] device veth1_to_hsr entered promiscuous mode [ 340.536533][T12830] bridge0: port 6(veth1_to_hsr) entered blocking state [ 340.543545][T12830] bridge0: port 6(veth1_to_hsr) entered forwarding state [ 340.584733][T12781] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.609157][T12781] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.645001][T12781] device bridge_slave_0 entered promiscuous mode [ 340.716518][T12832] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 340.738890][T12832] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.3'. [ 340.785679][T12781] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.797676][T12781] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.832620][T12781] device bridge_slave_1 entered promiscuous mode [ 340.923868][T12781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.972132][T12781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.083099][T12781] team0: Port device team_slave_0 added [ 341.114547][T12847] bridge0: port 3(veth1_to_hsr) entered disabled state [ 341.122158][T12847] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.130413][T12847] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.174694][T12852] device veth1_to_hsr left promiscuous mode [ 341.203328][T12852] bridge0: port 3(veth1_to_hsr) entered disabled state [ 341.212019][T12852] device bridge_slave_1 left promiscuous mode [ 341.218234][T12852] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.233320][T12852] device bridge_slave_0 left promiscuous mode [ 341.239676][T12852] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.285489][T12781] team0: Port device team_slave_1 added [ 341.353094][T12781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.390159][T12781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.450474][T12781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.486698][T12781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.499971][T12781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.554914][T12781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.593290][T12863] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 341.625449][T12863] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.4'. [ 341.736719][ T3577] [ 341.739078][ T3577] ====================================================== [ 341.746084][ T3577] WARNING: possible circular locking dependency detected [ 341.753084][ T3577] 6.1.93-syzkaller #0 Not tainted [ 341.758085][ T3577] ------------------------------------------------------ [ 341.765083][ T3577] syz-executor.3/3577 is trying to acquire lock: [ 341.771386][ T3577] ffff8880b9835e90 (lock#10){+.+.}-{2:2}, at: __mmap_lock_do_trace_acquire_returned+0x84/0x670 [ 341.781747][ T3577] [ 341.781747][ T3577] but task is already holding lock: [ 341.789178][ T3577] ffff8880b983aa18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 341.798647][ T3577] [ 341.798647][ T3577] which lock already depends on the new lock. [ 341.798647][ T3577] [ 341.809030][ T3577] [ 341.809030][ T3577] the existing dependency chain (in reverse order) is: [ 341.818024][ T3577] [ 341.818024][ T3577] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 341.825306][ T3577] lock_acquire+0x1f8/0x5a0 [ 341.830321][ T3577] _raw_spin_lock_nested+0x2d/0x40 [ 341.835951][ T3577] raw_spin_rq_lock_nested+0x26/0x140 [ 341.841830][ T3577] task_fork_fair+0x5d/0x350 [ 341.846929][ T3577] sched_cgroup_fork+0x374/0x400 [ 341.852374][ T3577] copy_process+0x2442/0x4060 [ 341.857557][ T3577] kernel_clone+0x222/0x920 [ 341.862562][ T3577] user_mode_thread+0x12e/0x190 [ 341.867915][ T3577] rest_init+0x23/0x300 [ 341.872576][ T3577] start_kernel+0x0/0x53f [ 341.877408][ T3577] start_kernel+0x496/0x53f [ 341.882412][ T3577] secondary_startup_64_no_verify+0xcf/0xdb [ 341.888813][ T3577] [ 341.888813][ T3577] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 341.896094][ T3577] lock_acquire+0x1f8/0x5a0 [ 341.901107][ T3577] _raw_spin_lock_irqsave+0xd1/0x120 [ 341.906899][ T3577] try_to_wake_up+0xad/0x12e0 [ 341.912088][ T3577] rcu_read_unlock_special+0x3d2/0x540 [ 341.918052][ T3577] __rcu_read_unlock+0x92/0x100 [ 341.923408][ T3577] get_mem_cgroup_from_mm+0x19f/0x290 [ 341.929289][ T3577] get_mm_memcg_path+0x1b/0x600 [ 341.934653][ T3577] __mmap_lock_do_trace_acquire_returned+0x12f/0x670 [ 341.941852][ T3577] lock_mm_and_find_vma+0x219/0x2e0 [ 341.947567][ T3577] exc_page_fault+0x169/0x620 [ 341.952756][ T3577] asm_exc_page_fault+0x22/0x30 [ 341.958122][ T3577] copy_user_enhanced_fast_string+0xa/0x40 [ 341.964446][ T3577] _copy_from_iter+0x2c2/0xff0 [ 341.969726][ T3577] copy_page_from_iter+0x76/0x100 [ 341.975277][ T3577] pipe_write+0x857/0x1af0 [ 341.980216][ T3577] vfs_write+0x7ae/0xba0 [ 341.984963][ T3577] ksys_write+0x19c/0x2c0 [ 341.989795][ T3577] do_syscall_64+0x3b/0xb0 [ 341.994720][ T3577] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 342.001126][ T3577] [ 342.001126][ T3577] -> #0 (lock#10){+.+.}-{2:2}: [ 342.008068][ T3577] validate_chain+0x1661/0x5950 [ 342.013432][ T3577] __lock_acquire+0x125b/0x1f80 [ 342.018794][ T3577] lock_acquire+0x1f8/0x5a0 [ 342.023809][ T3577] __mmap_lock_do_trace_acquire_returned+0x9d/0x670 [ 342.030907][ T3577] stack_map_get_build_id_offset+0x99e/0x9c0 [ 342.037399][ T3577] __bpf_get_stack+0x495/0x570 [ 342.042675][ T3577] bpf_get_stack_raw_tp+0x1b2/0x220 [ 342.048377][ T3577] bpf_prog_ec3b2eefa702d8d3+0x3a/0x3e [ 342.054357][ T3577] bpf_trace_run2+0x1fd/0x410 [ 342.059548][ T3577] trace_tlb_flush+0x151/0x1a0 [ 342.064823][ T3577] switch_mm_irqs_off+0x84a/0xc20 [ 342.070356][ T3577] __schedule+0x1140/0x4550 [ 342.075373][ T3577] schedule+0xbf/0x180 [ 342.080045][ T3577] do_nanosleep+0x192/0x5f0 [ 342.085053][ T3577] hrtimer_nanosleep+0x24d/0x490 [ 342.090498][ T3577] __se_sys_clock_nanosleep+0x323/0x3b0 [ 342.096551][ T3577] do_syscall_64+0x3b/0xb0 [ 342.101477][ T3577] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 342.107879][ T3577] [ 342.107879][ T3577] other info that might help us debug this: [ 342.107879][ T3577] [ 342.118087][ T3577] Chain exists of: [ 342.118087][ T3577] lock#10 --> &p->pi_lock --> &rq->__lock [ 342.118087][ T3577] [ 342.129726][ T3577] Possible unsafe locking scenario: [ 342.129726][ T3577] [ 342.137184][ T3577] CPU0 CPU1 [ 342.142549][ T3577] ---- ---- [ 342.147897][ T3577] lock(&rq->__lock); [ 342.151957][ T3577] lock(&p->pi_lock); [ 342.158544][ T3577] lock(&rq->__lock); [ 342.165123][ T3577] lock(lock#10); [ 342.168840][ T3577] [ 342.168840][ T3577] *** DEADLOCK *** [ 342.168840][ T3577] [ 342.177056][ T3577] 3 locks held by syz-executor.3/3577: [ 342.182497][ T3577] #0: ffff8880b983aa18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 342.192408][ T3577] #1: ffffffff8d12acc0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x110/0x410 [ 342.201792][ T3577] #2: ffff8880788e2e58 (&mm->mmap_lock){++++}-{3:3}, at: stack_map_get_build_id_offset+0x232/0x9c0 [ 342.212571][ T3577] [ 342.212571][ T3577] stack backtrace: [ 342.218449][ T3577] CPU: 0 PID: 3577 Comm: syz-executor.3 Not tainted 6.1.93-syzkaller #0 [ 342.226759][ T3577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 342.236810][ T3577] Call Trace: [ 342.240077][ T3577] [ 342.242997][ T3577] dump_stack_lvl+0x1e3/0x2cb [ 342.247668][ T3577] ? nf_tcp_handle_invalid+0x642/0x642 [ 342.253122][ T3577] ? print_circular_bug+0x12b/0x1a0 [ 342.258310][ T3577] check_noncircular+0x2fa/0x3b0 [ 342.263257][ T3577] ? add_chain_block+0x850/0x850 [ 342.268199][ T3577] ? lockdep_lock+0x11f/0x2a0 [ 342.272877][ T3577] ? trace_event_raw_event_lock+0x240/0x240 [ 342.278766][ T3577] validate_chain+0x1661/0x5950 [ 342.283624][ T3577] ? unwind_next_frame+0x1a3f/0x2220 [ 342.288895][ T3577] ? reacquire_held_locks+0x660/0x660 [ 342.294260][ T3577] ? reacquire_held_locks+0x660/0x660 [ 342.299621][ T3577] ? preempt_count_add+0x8f/0x180 [ 342.304636][ T3577] ? validate_chain+0x112/0x5950 [ 342.309579][ T3577] ? stack_trace_save+0x1c0/0x1c0 [ 342.314607][ T3577] ? mark_lock+0x9a/0x340 [ 342.318930][ T3577] __lock_acquire+0x125b/0x1f80 [ 342.323781][ T3577] lock_acquire+0x1f8/0x5a0 [ 342.328275][ T3577] ? __mmap_lock_do_trace_acquire_returned+0x84/0x670 [ 342.335026][ T3577] ? trace_event_raw_event_lock+0x240/0x240 [ 342.340909][ T3577] ? read_lock_is_recursive+0x10/0x10 [ 342.346273][ T3577] ? validate_chain+0x112/0x5950 [ 342.351204][ T3577] ? down_read_trylock+0x24a/0x3b0 [ 342.356303][ T3577] ? stack_map_get_build_id_offset+0x232/0x9c0 [ 342.362447][ T3577] ? __mmap_lock_do_trace_acquire_returned+0x84/0x670 [ 342.369195][ T3577] __mmap_lock_do_trace_acquire_returned+0x9d/0x670 [ 342.375769][ T3577] ? __mmap_lock_do_trace_acquire_returned+0x84/0x670 [ 342.382520][ T3577] stack_map_get_build_id_offset+0x99e/0x9c0 [ 342.388491][ T3577] ? __lock_acquire+0x125b/0x1f80 [ 342.393506][ T3577] ? __bpf_get_stackid+0x910/0x910 [ 342.398608][ T3577] __bpf_get_stack+0x495/0x570 [ 342.403362][ T3577] ? stack_map_get_build_id_offset+0x9c0/0x9c0 [ 342.409503][ T3577] ? psi_task_switch+0x43d/0x770 [ 342.414426][ T3577] ? __cant_sleep+0x270/0x270 [ 342.419088][ T3577] bpf_get_stack_raw_tp+0x1b2/0x220 [ 342.424276][ T3577] bpf_prog_ec3b2eefa702d8d3+0x3a/0x3e [ 342.429722][ T3577] bpf_trace_run2+0x1fd/0x410 [ 342.434383][ T3577] ? bpf_trace_run2+0x110/0x410 [ 342.439217][ T3577] ? bpf_trace_run1+0x3d0/0x3d0 [ 342.444055][ T3577] ? __perf_event_task_sched_out+0xb19/0xc60 [ 342.450021][ T3577] trace_tlb_flush+0x151/0x1a0 [ 342.454775][ T3577] switch_mm_irqs_off+0x84a/0xc20 [ 342.459785][ T3577] ? psi_task_switch+0x340/0x770 [ 342.464707][ T3577] ? switch_mm+0x190/0x190 [ 342.469115][ T3577] __schedule+0x1140/0x4550 [ 342.473618][ T3577] ? do_nanosleep+0x153/0x5f0 [ 342.478291][ T3577] ? __sched_text_start+0x8/0x8 [ 342.483132][ T3577] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 342.489028][ T3577] ? _raw_spin_unlock+0x40/0x40 [ 342.493869][ T3577] schedule+0xbf/0x180 [ 342.497929][ T3577] do_nanosleep+0x192/0x5f0 [ 342.502421][ T3577] ? do_nanosleep+0x7c/0x5f0 [ 342.506999][ T3577] ? usleep_range_state+0x1c0/0x1c0 [ 342.512185][ T3577] ? memset+0x1f/0x40 [ 342.516156][ T3577] ? __hrtimer_init+0x181/0x260 [ 342.520995][ T3577] hrtimer_nanosleep+0x24d/0x490 [ 342.525921][ T3577] ? nanosleep_copyout+0x120/0x120 [ 342.531018][ T3577] ? __remove_hrtimer+0x4b0/0x4b0 [ 342.536034][ T3577] ? timespec64_add_safe+0x220/0x220 [ 342.541306][ T3577] ? restore_fpregs_from_fpstate+0xfc/0x230 [ 342.547453][ T3577] __se_sys_clock_nanosleep+0x323/0x3b0 [ 342.552987][ T3577] ? __x64_sys_clock_nanosleep+0xa0/0xa0 [ 342.558604][ T3577] ? syscall_enter_from_user_mode+0x2e/0x230 [ 342.564568][ T3577] ? lockdep_hardirqs_on+0x94/0x130 [ 342.569754][ T3577] ? syscall_enter_from_user_mode+0x2e/0x230 [ 342.575721][ T3577] do_syscall_64+0x3b/0xb0 [ 342.580128][ T3577] ? clear_bhb_loop+0x45/0xa0 [ 342.584798][ T3577] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 342.590680][ T3577] RIP: 0033:0x7fc2fc0a82b5 [ 342.595077][ T3577] Code: Unable to access opcode bytes at 0x7fc2fc0a828b. [ 342.602077][ T3577] RSP: 002b:00007ffced1c4600 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 342.610476][ T3577] RAX: ffffffffffffffda RBX: 0000000000000713 RCX: 00007fc2fc0a82b5 [ 342.618433][ T3577] RDX: 00007ffced1c4640 RSI: 0000000000000000 RDI: 0000000000000000 [ 342.626393][ T3577] RBP: 00007ffced1c46bc R08: 0000000000000000 R09: 0000000000000010 2024/06/14 09:19:41 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 342.634378][ T3577] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032 [ 342.642334][ T3577] R13: 00000000000536ac R14: 0000000000053681 R15: 0000000000000006 [ 342.650297][ T3577] [ 342.655508][ T3586] Bluetooth: hci1: command tx timeout [ 342.677208][T12879] netlink: 'syz-executor.3': attribute type 22 has an invalid length. [ 342.822452][T12884] device syzkaller0 entered promiscuous mode