last executing test programs: 4.875889222s ago: executing program 3 (id=3647): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x51}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) 4.686620178s ago: executing program 0 (id=3649): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000fc0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000280)=r1, 0x4) r2 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, 0x0}, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400) r3 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x0, 0xd, 0x0, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='ext4_allocate_inode\x00', r5}, 0x10) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000001c0)=ANY=[], 0x0}, 0x90) socket$kcm(0x10, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r6}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x2e, &(0x7f0000000000)=r7, 0x4) recvmsg(r7, &(0x7f00000001c0)={0x0, 0x82, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 4.250979813s ago: executing program 3 (id=3652): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0), 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d64050000000000650404000100000004040000fb007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e1a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080e71113610e10d858e8327edb1fb6c86adac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18c65ae1bd4f4390af9a9ceafd07ed00b0000002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a469398685211bbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72c7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9624d37c10223fdae7ed04935c3c9068000000bc8619d73415cda2130f5011e4845500a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b40000000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b60c2499d16d7d9158ffffffff00000000ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a9e90d7676074a0bde4471414c99d4894ee7f8139dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702cca54728acad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd20785f653b621491dc6aaee0d409731091f4fb94c06006e3c1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e1590bab105b0cb578af7dc7d5e87d48d376444e2de02f47c61e8e84ff828de453f34c2b08660b080efc707e676e1fb4d5865c0ca177a4c7fbb4e829ab0894a1062b445c00f576b2b5cc7f819abd0f885cc4806f47ffb966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d3676329bb8cda690d192a070886df42b2708398773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169cdfaa4252d4ea6b8f6216ff202b5b5a182cb5e8380100632d03a7ca6f6d0339f9953c30930804fdc3690d10ecb65dc5b47481edbf1eee2e8893e903054d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026def743f1213bf817becd9e5a225d67521d1128eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979030000007081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f324661351df747aa6a65872dfdcfa68f65bd06b4082d43e121861b5cc09b986bf56c747d9a1cc5b506892c3a16ff10feea20bdac89bfb758cf3500000000000000000000000000000098e6db5a96055e764a3bfd4ccb20d2e800994f4b602d25b2c076f21c7102687e054bb93b2d013be6227fd99902b074c0de00733128c81c48c5e140b17d71ac48f137d10798c4272826d2ba55bbda0059636528c132ed06759d880d1bc291beea56ed7ee8bcb392fdf886dbc74879ec4b831904d7c101ebbaef3c0ae6d0cf0000000000000000000000000000000011cb735f66a559ef0cdb5163a15c0bb986474bf5d9542e3e48805ce53127e4c076d69d868df543717aaaa07d7aca056f7f036c2bcba0795d1a64868a29ac5321b3cd6ef5b1a741afc7124e16b64a5d1d68b45fcfd7e531090ceae2f05536a4d5d6a4081e743827fb9c031d1fc9f195c2da189c49eaed6c30c71da0452e502ef393efeb02ebe82b1851cae5fa7c958ba23110b5e0e5b890803f28a356b2920e74564e0f8377b0ba515d4cc28d702287fed2882b4780a1bcb583f1cb1470003ef9b592b9461328cfc01ebfce0ecdcea714a517dc40000000000000000000000000006bd0561e1cc72880cc3ec1bdf35eb670a9040e3b53cd826b94ad8aeb014e74787fe89fb3247a87d8bfb6d400142369f88964708d1d4d"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) 3.689176039s ago: executing program 0 (id=3656): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 3.611590505s ago: executing program 3 (id=3659): syz_clone(0x4000c0fe, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000140)={'pim6reg1\x00', @link_local={0x25, 0x80, 0xc2, 0x25, 0x64}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x13, 0x10, 0x1}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0], 0x0, 0xec, &(0x7f0000000540)=[{}, {}], 0x10, 0x10, &(0x7f0000000580), &(0x7f0000000680), 0x8, 0xa0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000840)={r2, 0x58, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0xfffffff9, 0x5, 0x4, 0x1204, r2, 0x1000, '\x00', r3, 0xffffffffffffffff, 0x2, 0x4, 0x3, 0x6}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c00)={{r4}, &(0x7f0000000b80), &(0x7f0000000bc0)=r5}, 0x20) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000800008500000082000000850000000800000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001200)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x10f, 0x88, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000040)='mm_lru_insertion\x00', r8}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001d40)={r6, 0x0, 0x1000, 0x2f, &(0x7f0000000c40)="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", &(0x7f0000000a40)=""/47, 0xa3ae, 0x0, 0xff, 0x42, &(0x7f0000001c40)="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", &(0x7f0000000a80)="74a130e096eaa2106da6b33ef3d5baf2cebe5eb5869c0c086ecf5bdab41c0dfb7442b8670c5ace0e9370ada97a5f2d04fa9822ca49fd22305a9be39d277aaef4de9b", 0x0, 0x0, 0x3}, 0x50) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r10, &(0x7f0000000180), 0x40010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x17, 0xa, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES64=r4, @ANYBLOB="000000000000001f6c0a", @ANYRES32=r4, @ANYBLOB="00000000000000009500d440cf5002c82d"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0xfffffffffffffdae) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.425381491s ago: executing program 1 (id=3660): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000040085000000a800000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 3.083745878s ago: executing program 1 (id=3662): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x6, 0x2, &(0x7f0000000200)=@raw=[@call, @exit], &(0x7f0000000280)='GPL\x00', 0x5, 0x81, &(0x7f00000002c0)=""/123, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x90, 0x0, 0x100000}, 0x80) 3.014895255s ago: executing program 4 (id=3663): r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10, 0x0}, 0x8000) close(0x3) 2.82224419s ago: executing program 4 (id=3664): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x1, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={&(0x7f0000000280)="2209b886c0d562c87eedf80ed6302bdf3a11fe7c53f13a7454e74af43e3e811dfd6db8", 0x0, &(0x7f0000000200), &(0x7f0000000680), 0xa3, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 2.689370151s ago: executing program 3 (id=3666): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='0'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 2.57325375s ago: executing program 4 (id=3667): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000fc0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000280)=r1, 0x4) r2 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, 0x0}, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400) r3 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x0, 0xd, 0x0, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='ext4_allocate_inode\x00', r5}, 0x10) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000001c0)=ANY=[], 0x0}, 0x90) socket$kcm(0x10, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r6}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x2e, &(0x7f0000000000)=r7, 0x4) recvmsg(r7, &(0x7f00000001c0)={0x0, 0x82, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 2.572394281s ago: executing program 0 (id=3668): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xca}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001"], 0x0}, 0x90) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) write$cgroup_subtree(r3, &(0x7f0000000c00)=ANY=[@ANYRES8=r2, @ANYBLOB='>'], 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000280)='jbd2_update_log_tail\x00', r0}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_int(r3, &(0x7f00000002c0)=0x8, 0x12) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000200)={'veth1_virt_wifi\x00', 0xc00}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800007cf123da5a7a07ac054080000000000000000000000000007912c8000099c88c3c9618a7e44e2d531c99af3a87428c3c0dc0963b933ba88783f7aa571cd465e50c7b2527026f7120514692559e6a8fe83dbb3c424a300e8aee52d71e565eab5b2b60377c11472c20457f9a6f0ce2fde4ca0f48181d3d53544bb5070fc319fe34a06c6d188a5bc433a213dcac971ffe5f0296e8c61b2ce7de79dc40f0c3e7e0a08b68398e08e0c299aa52ce88833aec3d4ee4747205a61a5b7f8b147364eed1cb9be6aa349ee0b58a1f90e9e4dff73c6a3ae58479d96a526f712a01dea71f2bc311d7ef2c2128de40bbd4abcf8ac6d9ee2a55ca32170445b8d47efa0c13aee584e814fa91548cdcca0239e23e0a7f1299b9d09da82e07d7f0b5d4d35a1cd7a8f8968c50091555149709cda450a3b4253a39faa0e7477675ce90afd19f830c59c30d8993b73b6231d007fe6cfb977533a735e0d0abcc556982831556"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) r5 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x3c56, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000580), 0xffffffff, r6}, 0x38) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0), 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20025, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, @perf_config_ext={0x1ff, 0x9}, 0x0, 0xaf, 0x7cdfdb5}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r7 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r7, 0x2401, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000000)={'pim6reg1\x00', 0x400}) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x200000000000024c, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x52}, 0x90) 2.545957472s ago: executing program 1 (id=3669): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b00)=""/250, 0xfa}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000005c0)=""/173, 0xad}, {&(0x7f0000000880)=""/188, 0xbc}, {&(0x7f0000000c00)=""/269, 0x10d}, {&(0x7f0000001580)=""/4097, 0x1001}], 0x6}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000000c0)="1400000035000b6300800000000000000224fc60", 0x14}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.33222992s ago: executing program 3 (id=3671): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x8004745a, 0x2000000c) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000003c0), 0x12) write$cgroup_pid(r2, &(0x7f00000001c0), 0x74) 2.326543011s ago: executing program 1 (id=3672): perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc40c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x7, 0xffffffffffffffff, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz1\x00', 0x1ff) openat$tun(0xffffffffffffff9c, 0x0, 0x123200, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='pids.events\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) unlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x10}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x90) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a2, &(0x7f0000000080)) 2.314960462s ago: executing program 2 (id=3673): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000240)=""/213, 0xd5}, {&(0x7f0000000ec0)=""/252, 0xfc}, {&(0x7f0000002140)=""/4058, 0xfda}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f0000000a00)=""/203, 0xcb}, {&(0x7f0000000340)=""/176, 0xb0}, {&(0x7f0000000b00)=""/226, 0xe2}, {&(0x7f0000000400)=""/35, 0x23}, {&(0x7f0000000940)=""/183, 0xb7}, {&(0x7f0000000c00)=""/155, 0x9b}, {&(0x7f0000000880)=""/64, 0x40}, {&(0x7f00000008c0)=""/54, 0x36}, {&(0x7f0000000cc0)=""/59, 0x3b}, {&(0x7f0000000d40)=""/146, 0x92}, {&(0x7f0000001200)=""/228, 0xe4}], 0xf}, 0x0) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x1a, 0x0}, 0x0) 2.124833987s ago: executing program 2 (id=3674): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="7f0000006a007ffa9e", 0x9}, {&(0x7f00000001c0)="64cabf2dfb06fc021d6b689866f05d48000d0088a8ffff0200258f2e4409b8f9e6aaeb88beab23fc2c6726e89b13e2f6e8bc95ee5adcd7298d390938510293bca0b646a3ce904f6e6b788b3204c233e60ddc36024aa400712cfff68aac572a830923ed3c3fac90beecd4521a447ffe975606ab42a207", 0x76}], 0x2}, 0x0) 1.947898592s ago: executing program 2 (id=3675): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, 0x0, 0xfe33) 1.906780035s ago: executing program 1 (id=3676): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)='+\x00'}, 0x30) ioctl$TUNSETOFFLOAD(r0, 0x4008744b, 0x20000000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x5, 0x2, 0x9, 0x42}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000080), &(0x7f0000000100)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r2, &(0x7f0000000080), 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r3}, 0x38) 1.905868955s ago: executing program 0 (id=3677): socket$kcm(0x2, 0x1000000000000002, 0x0) socket$kcm(0x10, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x269d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5865}, 0x4048000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x28, 0x2, 0x0) socket$kcm(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) 1.879345117s ago: executing program 3 (id=3678): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) write$cgroup_devices(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e031c003c5ca601288763608600000811"], 0xffdd) 1.71212743s ago: executing program 2 (id=3679): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081140000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071103f00000000001d300500000000004704000001ed00000f030000000000001d44020000000000620a00fe040400007203000000000000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a8641aa05a1336b3b4c4becea710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343cccc953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c9102"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1.575530102s ago: executing program 4 (id=3680): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x6, 0x2, &(0x7f0000000200)=@raw=[@call, @exit], &(0x7f0000000280)='GPL\x00', 0x5, 0x81, &(0x7f00000002c0)=""/123, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x90, 0x0, 0x100000}, 0x80) 1.545469124s ago: executing program 0 (id=3681): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x7ffc, 0x220108, 0x4b, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0x58}, 0x10) r3 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8916, &(0x7f0000000000)={r3}) 1.534849895s ago: executing program 1 (id=3682): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='0'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 1.173233225s ago: executing program 4 (id=3683): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b00)=""/250, 0xfa}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000005c0)=""/173, 0xad}, {&(0x7f0000000880)=""/188, 0xbc}, {&(0x7f0000000c00)=""/269, 0x10d}, {&(0x7f0000001580)=""/4097, 0x1001}], 0x6}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000000c0)="1400000035000b6300800000000000000224fc60", 0x14}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 754.314169ms ago: executing program 2 (id=3684): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000240)=""/213, 0xd5}, {&(0x7f0000000ec0)=""/252, 0xfc}, {&(0x7f0000002140)=""/4058, 0xfda}, {&(0x7f0000000480)=""/243, 0xf3}, {&(0x7f0000000a00)=""/203, 0xcb}, {&(0x7f0000000340)=""/176, 0xb0}, {&(0x7f0000000b00)=""/226, 0xe2}, {&(0x7f0000000400)=""/35, 0x23}, {&(0x7f0000000940)=""/183, 0xb7}, {&(0x7f0000001400)=""/155, 0x9b}, {&(0x7f0000000880)=""/64, 0x40}, {&(0x7f0000001140)=""/63, 0x3f}, {&(0x7f0000000d40)=""/146, 0x92}, {&(0x7f0000001200)=""/226, 0xe2}], 0xe}, 0x0) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 17.107889ms ago: executing program 2 (id=3685): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000240)=""/213, 0xd5}, {&(0x7f0000000ec0)=""/252, 0xfc}, {&(0x7f0000002140)=""/4058, 0xfda}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f0000000a00)=""/203, 0xcb}, {&(0x7f0000000340)=""/176, 0xb0}, {&(0x7f0000000b00)=""/226, 0xe2}, {&(0x7f0000000400)=""/35, 0x23}, {&(0x7f0000000940)=""/183, 0xb7}, {&(0x7f0000000c00)=""/155, 0x9b}, {&(0x7f0000000880)=""/64, 0x40}, {&(0x7f00000008c0)=""/54, 0x36}, {&(0x7f0000000cc0)=""/59, 0x3b}, {&(0x7f0000000d40)=""/146, 0x92}, {&(0x7f0000001200)=""/228, 0xe4}], 0xf}, 0x0) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x1a, 0x0}, 0x0) 10.03057ms ago: executing program 0 (id=3686): perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc40c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x7, 0xffffffffffffffff, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz1\x00', 0x1ff) openat$tun(0xffffffffffffff9c, 0x0, 0x123200, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='pids.events\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) unlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x10}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x90) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a2, &(0x7f0000000080)) 0s ago: executing program 4 (id=3687): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) kernel console output (not intermixed with test programs): HANGE): veth1_macvtap: link becomes ready [ 59.807388][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.817919][ T3648] device veth1_macvtap entered promiscuous mode [ 59.844010][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.852287][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.864687][ T3635] device veth1_macvtap entered promiscuous mode [ 59.902151][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.910106][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.922208][ T3648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.936422][ T3648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.946586][ T3648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.957317][ T3648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.968250][ T3648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.976951][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.988040][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.999065][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.010487][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.018357][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.029660][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.048165][ T3638] device veth0_vlan entered promiscuous mode [ 60.082480][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.095787][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.104752][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.112751][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.120790][ T3635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.131544][ T3635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.141487][ T3635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.152277][ T3635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.165252][ T3635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.175892][ T3635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.187649][ T3635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.196197][ T3648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.206875][ T3648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.217536][ T3648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.228034][ T3648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.231255][ T3652] Bluetooth: hci2: command tx timeout [ 60.240054][ T3648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.243439][ T3652] Bluetooth: hci1: command tx timeout [ 60.250646][ T3641] Bluetooth: hci4: command tx timeout [ 60.256027][ T3647] Bluetooth: hci3: command tx timeout [ 60.281474][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.290108][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.295918][ T2477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.306652][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.308066][ T2477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.316427][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.322898][ T3652] Bluetooth: hci0: command tx timeout [ 60.333208][ T3635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.346798][ T3635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.358476][ T3635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.368956][ T3635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.378969][ T3635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.390943][ T3635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.402970][ T3635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.413598][ T3638] device veth1_vlan entered promiscuous mode [ 60.422948][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.434603][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.444261][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.448507][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.459668][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.470633][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.479858][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.493911][ T3648] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.503206][ T3648] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.512394][ T3648] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.521550][ T3648] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.533868][ T3635] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.542995][ T3635] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.553665][ T3635] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.562543][ T3635] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.612625][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.620811][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.629287][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.639751][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.729887][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.742750][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.762729][ T3638] device veth0_macvtap entered promiscuous mode [ 60.832969][ T3638] device veth1_macvtap entered promiscuous mode [ 60.890405][ T3638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.905473][ T3638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.916421][ T3638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.936402][ T3638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.946374][ T3638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.957440][ T3638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.967635][ T3638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.979088][ T3638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.993674][ T3638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.012686][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.030168][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.049227][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.063993][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.069873][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.111216][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.119920][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.137685][ T3638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.159213][ T3638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.171950][ T3638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.182919][ T3638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.193543][ T3638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.204431][ T3638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.214832][ T3638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.225467][ T3638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.243863][ T3638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.265571][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.279520][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.289905][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.301477][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.319963][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.348478][ T3638] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.365492][ T3638] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.375899][ T3638] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.408509][ T3638] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.469045][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.479197][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.496326][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.527723][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.563335][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.630327][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.660488][ T2477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.678994][ T2477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.702798][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.758300][ T3735] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.801544][ T3735] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.883889][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.905325][ T3744] netlink: 'syz.4.5': attribute type 30 has an invalid length. [ 62.095560][ C0] hrtimer: interrupt took 37499 ns [ 62.313198][ T3652] Bluetooth: hci1: command tx timeout [ 62.318667][ T3652] Bluetooth: hci3: command tx timeout [ 62.324268][ T3647] Bluetooth: hci4: command tx timeout [ 62.324270][ T3641] Bluetooth: hci2: command tx timeout [ 62.390850][ T3652] Bluetooth: hci0: command tx timeout [ 63.888117][ T3775] netlink: 'syz.1.26': attribute type 30 has an invalid length. [ 64.610424][ T3811] netlink: 'syz.4.43': attribute type 21 has an invalid length. [ 66.791333][ T3823] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 66.849662][ T3843] netlink: 'syz.3.59': attribute type 21 has an invalid length. [ 67.601986][ T3877] netlink: 'syz.3.73': attribute type 21 has an invalid length. [ 68.105001][ T3899] netlink: 'syz.4.85': attribute type 21 has an invalid length. [ 68.148876][ T3899] netlink: 156 bytes leftover after parsing attributes in process `syz.4.85'. [ 68.327589][ T3909] netlink: 'syz.2.91': attribute type 21 has an invalid length. [ 68.416710][ T3915] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.94'. [ 68.770458][ T3930] netlink: 'syz.4.101': attribute type 21 has an invalid length. [ 68.804791][ T3930] netlink: 128 bytes leftover after parsing attributes in process `syz.4.101'. [ 68.837383][ T3930] netlink: 'syz.4.101': attribute type 5 has an invalid length. [ 68.863786][ T3930] netlink: 'syz.4.101': attribute type 6 has an invalid length. [ 68.877724][ T3930] netlink: 3 bytes leftover after parsing attributes in process `syz.4.101'. [ 68.888733][ T3935] netlink: 'syz.3.102': attribute type 21 has an invalid length. [ 68.900876][ T3935] netlink: 156 bytes leftover after parsing attributes in process `syz.3.102'. [ 69.034613][ T3942] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.108'. [ 69.558276][ T3966] netlink: 'syz.2.118': attribute type 21 has an invalid length. [ 69.595281][ T3966] netlink: 128 bytes leftover after parsing attributes in process `syz.2.118'. [ 69.606800][ T3966] netlink: 'syz.2.118': attribute type 5 has an invalid length. [ 69.617059][ T3966] netlink: 'syz.2.118': attribute type 6 has an invalid length. [ 69.625326][ T3966] netlink: 3 bytes leftover after parsing attributes in process `syz.2.118'. [ 69.644559][ T3970] netlink: 156 bytes leftover after parsing attributes in process `syz.4.120'. [ 69.829202][ T3974] device sit0 entered promiscuous mode [ 69.897274][ T3979] netlink: 4093 bytes leftover after parsing attributes in process `syz.4.124'. [ 70.721656][ T56] wlan1: Trigger new scan to find an IBSS to join [ 71.026548][ T4032] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.074077][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.105274][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.112468][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.193989][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.200509][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.627728][ T4072] validate_nla: 10 callbacks suppressed [ 72.627745][ T4072] netlink: 'syz.1.167': attribute type 22 has an invalid length. [ 73.450200][ T4106] Dead loop on virtual device ip6_vti0, fix it urgently! [ 74.274859][ T4109] device sit0 entered promiscuous mode [ 74.356336][ T4114] netlink: 'syz.3.184': attribute type 22 has an invalid length. [ 74.380759][ T4114] __nla_validate_parse: 22 callbacks suppressed [ 74.380774][ T4114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.184'. [ 74.556445][ T4120] netlink: 4093 bytes leftover after parsing attributes in process `syz.0.188'. [ 74.607967][ T4120] netlink: 4093 bytes leftover after parsing attributes in process `syz.0.188'. [ 74.627274][ T4124] netlink: 4093 bytes leftover after parsing attributes in process `syz.0.188'. [ 74.920053][ T4137] Dead loop on virtual device ip6_vti0, fix it urgently! [ 75.672278][ T56] wlan1: Trigger new scan to find an IBSS to join [ 76.117740][ T4173] netlink: 4093 bytes leftover after parsing attributes in process `syz.0.209'. [ 76.151088][ T4173] netlink: 4093 bytes leftover after parsing attributes in process `syz.0.209'. [ 76.207587][ T4176] netlink: 4093 bytes leftover after parsing attributes in process `syz.0.209'. [ 76.231448][ T4178] Dead loop on virtual device ip6_vti0, fix it urgently! [ 76.312869][ T948] cfg80211: failed to load regulatory.db [ 76.405846][ T4186] netlink: 132 bytes leftover after parsing attributes in process `syz.4.215'. [ 76.706108][ T4195] netlink: 196 bytes leftover after parsing attributes in process `syz.3.218'. [ 77.482469][ T9] wlan1: Creating new IBSS network, BSSID a2:4a:2b:c0:ba:19 [ 77.826379][ T3647] Bluetooth: hci3: unexpected event 0x0b length: 15 > 11 [ 77.848893][ T4215] Dead loop on virtual device ip6_vti0, fix it urgently! [ 78.038816][ T4223] netlink: 196 bytes leftover after parsing attributes in process `syz.0.231'. [ 79.305480][ T4243] netlink: 'syz.1.237': attribute type 29 has an invalid length. [ 79.335708][ T4243] netlink: 'syz.1.237': attribute type 29 has an invalid length. [ 79.383866][ T4248] Dead loop on virtual device ip6_vti0, fix it urgently! [ 79.427722][ T4243] netlink: 'syz.1.237': attribute type 29 has an invalid length. [ 79.457438][ T4249] netlink: 'syz.1.237': attribute type 29 has an invalid length. [ 79.477201][ T3647] Bluetooth: hci3: unexpected event 0x0b length: 15 > 11 [ 79.497143][ T4252] netlink: 'syz.1.237': attribute type 29 has an invalid length. [ 79.696751][ T4260] __nla_validate_parse: 1 callbacks suppressed [ 79.696767][ T4260] netlink: 196 bytes leftover after parsing attributes in process `syz.0.247'. [ 79.956020][ T4275] netlink: 132 bytes leftover after parsing attributes in process `syz.4.251'. [ 80.703608][ T3647] Bluetooth: hci4: unexpected event 0x0b length: 15 > 11 [ 80.779339][ T4291] netlink: 'syz.3.259': attribute type 29 has an invalid length. [ 80.857828][ T4291] netlink: 'syz.3.259': attribute type 29 has an invalid length. [ 80.895665][ T4295] netlink: 'syz.3.259': attribute type 29 has an invalid length. [ 80.996836][ T4301] netlink: 'syz.3.259': attribute type 29 has an invalid length. [ 81.040814][ T4291] netlink: 'syz.3.259': attribute type 29 has an invalid length. [ 81.307449][ T4310] netlink: 196 bytes leftover after parsing attributes in process `syz.2.265'. [ 81.507123][ T4321] netlink: 132 bytes leftover after parsing attributes in process `syz.0.269'. [ 81.671225][ T3647] Bluetooth: hci0: unexpected event 0x0b length: 15 > 11 [ 82.667480][ T3647] Bluetooth: hci4: unexpected event 0x0b length: 15 > 11 [ 83.084803][ T4369] netlink: 132 bytes leftover after parsing attributes in process `syz.4.290'. [ 84.402324][ T4426] device batadv0 entered promiscuous mode [ 84.555721][ T4426] syz.2.315 (4426) used greatest stack depth: 20152 bytes left [ 85.139462][ T4454] netlink: 40 bytes leftover after parsing attributes in process `syz.2.328'. [ 85.167457][ T4454] validate_nla: 15 callbacks suppressed [ 85.167472][ T4454] netlink: 'syz.2.328': attribute type 1 has an invalid length. [ 85.210051][ T4454] netlink: 1 bytes leftover after parsing attributes in process `syz.2.328'. [ 85.247424][ T4461] device batadv0 entered promiscuous mode [ 85.916644][ T4493] device batadv0 entered promiscuous mode [ 86.009916][ T4495] netlink: 40 bytes leftover after parsing attributes in process `syz.3.346'. [ 86.070520][ T4495] netlink: 'syz.3.346': attribute type 1 has an invalid length. [ 86.079057][ T4495] netlink: 1 bytes leftover after parsing attributes in process `syz.3.346'. [ 86.776061][ T4537] netlink: 40 bytes leftover after parsing attributes in process `syz.1.365'. [ 86.803698][ T4537] netlink: 'syz.1.365': attribute type 1 has an invalid length. [ 86.829415][ T4537] netlink: 1 bytes leftover after parsing attributes in process `syz.1.365'. [ 87.556232][ T4576] netlink: 40 bytes leftover after parsing attributes in process `syz.3.384'. [ 87.600019][ T4576] netlink: 'syz.3.384': attribute type 1 has an invalid length. [ 87.629034][ T4576] netlink: 1 bytes leftover after parsing attributes in process `syz.3.384'. [ 88.831574][ T4638] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.411'. [ 89.740684][ T4670] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.427'. [ 90.813368][ T4697] device dummy0 entered promiscuous mode [ 91.093234][ T4712] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.442'. [ 92.286123][ T4736] device dummy0 entered promiscuous mode [ 92.547358][ T4752] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.458'. [ 92.640477][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 93.637665][ T4776] device dummy0 entered promiscuous mode [ 94.108867][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 94.392383][ T4809] device dummy0 entered promiscuous mode [ 95.585703][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 96.909893][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 97.069575][ T4882] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.076730][ T4882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.306550][ T4922] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.313726][ T4922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.740671][ T4940] mac80211_hwsim hwsim2 : renamed from wlan0 [ 99.072529][ T4951] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.079683][ T4951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.345362][ T4984] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.352544][ T4984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.445793][ T3647] Bluetooth: hci4: unexpected event 0x08 length: 15 > 4 [ 100.452824][ T4990] mac80211_hwsim hwsim10 : renamed from wlan0 [ 101.195374][ T3647] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 101.324862][ T5030] mac80211_hwsim hwsim7 : renamed from wlan0 [ 101.457645][ T5037] netlink: 'syz.3.588': attribute type 29 has an invalid length. [ 101.486447][ T5037] netlink: 44 bytes leftover after parsing attributes in process `syz.3.588'. [ 101.529338][ T5037] netlink: 'syz.3.588': attribute type 29 has an invalid length. [ 101.559343][ T5037] netlink: 44 bytes leftover after parsing attributes in process `syz.3.588'. [ 101.720418][ T5051] netlink: 763 bytes leftover after parsing attributes in process `syz.0.596'. [ 101.858260][ T5057] netlink: 'syz.4.598': attribute type 6 has an invalid length. [ 101.920279][ T3647] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 102.159468][ T5072] mac80211_hwsim hwsim3 : renamed from wlan0 [ 102.469879][ T5088] netlink: 763 bytes leftover after parsing attributes in process `syz.2.611'. [ 102.634056][ T5095] netlink: 'syz.0.614': attribute type 6 has an invalid length. [ 102.659657][ T3647] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 103.331810][ T5133] netlink: 763 bytes leftover after parsing attributes in process `syz.4.628'. [ 103.554019][ T5144] netlink: 'syz.3.634': attribute type 6 has an invalid length. [ 103.949242][ T3647] Bluetooth: hci0: unexpected event 0x1d length: 15 > 5 [ 104.017494][ T5170] netlink: 763 bytes leftover after parsing attributes in process `syz.0.643'. [ 104.514696][ T5194] netlink: 'syz.1.652': attribute type 6 has an invalid length. [ 104.536014][ T3647] Bluetooth: hci1: unexpected subevent 0x01 length: 14 < 18 [ 104.789039][ T3647] Bluetooth: hci4: unexpected event 0x1d length: 15 > 5 [ 105.049484][ T3647] Bluetooth: hci2: unexpected event 0x01 length: 15 > 1 [ 105.383207][ T5229] Driver unsupported XDP return value 0 on prog (id 338) dev N/A, expect packet loss! [ 105.486897][ T5231] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.497430][ T5231] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.569422][ T3647] Bluetooth: hci2: unexpected subevent 0x01 length: 14 < 18 [ 105.627688][ T5232] netlink: 'syz.2.668': attribute type 6 has an invalid length. [ 105.722324][ T3647] Bluetooth: hci3: unexpected event 0x1d length: 15 > 5 [ 105.786457][ T5237] device bridge_slave_1 left promiscuous mode [ 105.801232][ T5237] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.825199][ T5237] device bridge_slave_0 left promiscuous mode [ 105.838364][ T5237] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.968879][ T3647] Bluetooth: hci4: unexpected event 0x01 length: 15 > 1 [ 106.422960][ T5270] netlink: 'syz.0.682': attribute type 6 has an invalid length. [ 106.616332][ T3647] Bluetooth: hci2: unexpected subevent 0x01 length: 14 < 18 [ 106.683513][ T3647] Bluetooth: hci0: unexpected event 0x1d length: 15 > 5 [ 106.848566][ T5288] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.862949][ T5288] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.960289][ T3647] Bluetooth: hci0: unexpected event 0x01 length: 15 > 1 [ 106.999240][ T5283] device bridge_slave_1 left promiscuous mode [ 107.036198][ T5283] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.099362][ T5283] device bridge_slave_0 left promiscuous mode [ 107.130446][ T5283] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.289034][ T5299] netlink: 'syz.1.692': attribute type 5 has an invalid length. [ 107.492854][ T5313] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 107.624601][ T3647] Bluetooth: hci0: unexpected subevent 0x01 length: 14 < 18 [ 107.894102][ T3647] Bluetooth: hci4: unexpected event 0x01 length: 15 > 1 [ 108.164886][ T5337] netlink: 'syz.0.708': attribute type 5 has an invalid length. [ 109.079152][ T5377] netlink: 'syz.3.725': attribute type 5 has an invalid length. [ 109.484985][ T5382] device syzkaller0 entered promiscuous mode [ 111.484885][ T5417] netlink: 'syz.0.741': attribute type 5 has an invalid length. [ 112.736875][ T5464] device syzkaller0 entered promiscuous mode [ 113.177949][ T5497] netlink: 'syz.3.771': attribute type 2 has an invalid length. [ 113.194938][ T5497] netlink: 10 bytes leftover after parsing attributes in process `syz.3.771'. [ 114.797048][ T5529] netlink: 'syz.2.783': attribute type 2 has an invalid length. [ 114.820817][ T5529] netlink: 10 bytes leftover after parsing attributes in process `syz.2.783'. [ 115.726333][ T5553] device syzkaller0 entered promiscuous mode [ 116.646873][ T5592] netlink: 'syz.2.802': attribute type 2 has an invalid length. [ 116.654814][ T5592] netlink: 10 bytes leftover after parsing attributes in process `syz.2.802'. [ 118.026755][ T5624] netlink: 'syz.3.814': attribute type 2 has an invalid length. [ 118.089727][ T5624] netlink: 10 bytes leftover after parsing attributes in process `syz.3.814'. [ 119.095479][ T5659] netlink: 'syz.4.827': attribute type 2 has an invalid length. [ 119.145069][ T5659] netlink: 10 bytes leftover after parsing attributes in process `syz.4.827'. [ 119.803676][ T5682] netlink: 'syz.2.837': attribute type 33 has an invalid length. [ 119.829352][ T5682] netlink: 'syz.2.837': attribute type 10 has an invalid length. [ 119.850260][ T5682] netlink: 108 bytes leftover after parsing attributes in process `syz.2.837'. [ 119.876620][ T5682] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 120.335812][ T5697] netlink: 'syz.1.843': attribute type 2 has an invalid length. [ 120.358641][ T5697] netlink: 10 bytes leftover after parsing attributes in process `syz.1.843'. [ 120.600763][ T5689] device syzkaller0 entered promiscuous mode [ 122.017236][ T5715] netlink: 'syz.1.851': attribute type 33 has an invalid length. [ 122.026771][ T5715] netlink: 'syz.1.851': attribute type 10 has an invalid length. [ 122.036178][ T5715] netlink: 108 bytes leftover after parsing attributes in process `syz.1.851'. [ 122.055168][ T5715] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 122.126618][ T5726] : renamed from pim6reg1 [ 122.489619][ T5742] netlink: 'syz.2.858': attribute type 2 has an invalid length. [ 122.532490][ T5742] netlink: 10 bytes leftover after parsing attributes in process `syz.2.858'. [ 123.466657][ T5767] netlink: 'syz.3.867': attribute type 33 has an invalid length. [ 123.484568][ T5767] netlink: 'syz.3.867': attribute type 10 has an invalid length. [ 123.531521][ T5767] netlink: 108 bytes leftover after parsing attributes in process `syz.3.867'. [ 123.547165][ T5767] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 123.613649][ T5773] netlink: 'syz.1.869': attribute type 10 has an invalid length. [ 123.621905][ T5773] netlink: 40 bytes leftover after parsing attributes in process `syz.1.869'. [ 123.669488][ T5773] device ipvlan1 entered promiscuous mode [ 123.724031][ T5773] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 123.826770][ T5781] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 123.837475][ T5779] : renamed from pim6reg1 [ 123.954304][ T5773] syz.1.869 (5773) used greatest stack depth: 19992 bytes left [ 124.022298][ T5789] netlink: 10 bytes leftover after parsing attributes in process `syz.4.875'. [ 124.815499][ T5808] device syzkaller0 entered promiscuous mode [ 124.898800][ T5813] validate_nla: 1 callbacks suppressed [ 124.898818][ T5813] netlink: 'syz.2.882': attribute type 33 has an invalid length. [ 124.947484][ T5813] netlink: 'syz.2.882': attribute type 10 has an invalid length. [ 124.964666][ T5813] netlink: 108 bytes leftover after parsing attributes in process `syz.2.882'. [ 124.974238][ T5813] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 125.417849][ T5835] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 126.181391][ T5836] : renamed from pim6reg1 [ 126.223571][ T5840] IPv6: NLM_F_CREATE should be specified when creating new route [ 126.251045][ T5840] netlink: 1 bytes leftover after parsing attributes in process `syz.0.891'. [ 126.448997][ T5853] netlink: 'syz.2.896': attribute type 10 has an invalid length. [ 126.535713][ T5853] team0: Device veth1_macvtap failed to register rx_handler [ 126.770658][ T5866] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37 [ 127.211784][ T5881] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 127.547337][ T5884] IPv6: NLM_F_CREATE should be specified when creating new route [ 127.555542][ T5884] netlink: 1 bytes leftover after parsing attributes in process `syz.1.908'. [ 127.695892][ T5886] device syzkaller0 entered promiscuous mode [ 127.748551][ T5888] : renamed from pim6reg1 [ 128.149907][ T5915] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37 [ 128.586540][ T5928] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 129.071159][ T5912] netlink: 'syz.0.915': attribute type 10 has an invalid length. [ 129.083274][ T5912] team0: Device veth1_macvtap failed to register rx_handler [ 129.119518][ T5926] netlink: 1 bytes leftover after parsing attributes in process `syz.1.921'. [ 129.658703][ T5948] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37 [ 130.159443][ T5956] netlink: 'syz.3.933': attribute type 10 has an invalid length. [ 130.184696][ T5956] team0: Device veth1_macvtap failed to register rx_handler [ 130.340598][ T5964] netlink: 1 bytes leftover after parsing attributes in process `syz.0.935'. [ 130.529214][ T5970] : renamed from pim6reg1 [ 130.637815][ T5977] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 130.669260][ T5960] device syzkaller0 entered promiscuous mode [ 130.885185][ T5986] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37 [ 131.890227][ T5996] netlink: 'syz.0.948': attribute type 10 has an invalid length. [ 131.899513][ T5996] team0: Device veth1_macvtap failed to register rx_handler [ 132.059855][ T6006] netlink: 1010 bytes leftover after parsing attributes in process `syz.4.951'. [ 132.210219][ T6015] netlink: 'syz.3.953': attribute type 29 has an invalid length. [ 132.259677][ T6015] netlink: 'syz.3.953': attribute type 29 has an invalid length. [ 132.325900][ T6022] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 132.555687][ T6032] netlink: 'syz.2.961': attribute type 10 has an invalid length. [ 132.583631][ T6032] team0: Device veth1_macvtap failed to register rx_handler [ 132.632381][ T3735] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 132.632838][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.649840][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.925333][ T6040] device syzkaller0 entered promiscuous mode [ 133.343026][ T6060] netlink: 'syz.1.969': attribute type 29 has an invalid length. [ 133.933011][ T6071] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 134.443304][ T6060] netlink: 'syz.1.969': attribute type 29 has an invalid length. [ 134.553534][ T6078] netlink: 'syz.3.975': attribute type 10 has an invalid length. [ 134.597793][ T6078] team0: Device veth1_macvtap failed to register rx_handler [ 135.145368][ T6103] netlink: 'syz.4.987': attribute type 29 has an invalid length. [ 135.162927][ T6103] netlink: 'syz.4.987': attribute type 29 has an invalid length. [ 135.187252][ T6107] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.989'. [ 135.396080][ T6114] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 135.611658][ T6117] device syzkaller0 entered promiscuous mode [ 136.398787][ T6149] netlink: 'syz.2.1003': attribute type 29 has an invalid length. [ 136.650092][ T6156] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 137.273384][ T6149] netlink: 'syz.2.1003': attribute type 29 has an invalid length. [ 137.412393][ T6166] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.1008'. [ 137.726293][ T6183] netlink: 'syz.1.1015': attribute type 2 has an invalid length. [ 137.761826][ T6183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1015'. [ 138.066980][ T6191] device syzkaller0 entered promiscuous mode [ 139.691839][ T6207] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.1024'. [ 139.706487][ T6219] netlink: 'syz.4.1030': attribute type 2 has an invalid length. [ 139.714734][ T6219] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1030'. [ 140.110270][ T6237] netlink: 'syz.3.1039': attribute type 8 has an invalid length. [ 140.153913][ T6237] netlink: 'syz.3.1039': attribute type 7 has an invalid length. [ 140.200790][ T6237] netlink: 194488 bytes leftover after parsing attributes in process `syz.3.1039'. [ 140.255964][ T6242] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.1041'. [ 140.420869][ T6246] netlink: 'syz.2.1043': attribute type 2 has an invalid length. [ 140.428633][ T6246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1043'. [ 140.679751][ T6251] device syzkaller0 entered promiscuous mode [ 141.438903][ T6280] netlink: 'syz.2.1055': attribute type 8 has an invalid length. [ 141.461705][ T6280] netlink: 'syz.2.1055': attribute type 7 has an invalid length. [ 141.480985][ T6280] netlink: 194488 bytes leftover after parsing attributes in process `syz.2.1055'. [ 142.336222][ T6288] netlink: 'syz.4.1059': attribute type 2 has an invalid length. [ 142.390718][ T6288] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1059'. [ 142.577290][ T3647] Bluetooth: hci0: unexpected subevent 0x05 length: 14 > 12 [ 142.805348][ T6301] netlink: 'syz.0.1065': attribute type 29 has an invalid length. [ 142.877114][ T6301] netlink: 'syz.0.1065': attribute type 29 has an invalid length. [ 142.891709][ T6309] netlink: 'syz.0.1065': attribute type 29 has an invalid length. [ 143.221520][ T6322] netlink: 'syz.0.1071': attribute type 8 has an invalid length. [ 143.278943][ T6322] netlink: 'syz.0.1071': attribute type 7 has an invalid length. [ 143.334551][ T6322] netlink: 194488 bytes leftover after parsing attributes in process `syz.0.1071'. [ 143.584285][ T6332] Zero length message leads to an empty skb [ 143.596116][ T6330] netlink: 'syz.0.1075': attribute type 2 has an invalid length. [ 143.622199][ T6330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1075'. [ 143.636593][ T3647] Bluetooth: hci1: unexpected subevent 0x05 length: 14 > 12 [ 143.718929][ T6332] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.1077'. [ 144.075806][ T6354] netlink: 194488 bytes leftover after parsing attributes in process `syz.0.1086'. [ 144.334099][ T3647] Bluetooth: hci3: unexpected subevent 0x05 length: 14 > 12 [ 144.630664][ T3647] Bluetooth: hci0: command tx timeout [ 144.634192][ T6380] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.1096'. [ 144.840358][ T6391] netlink: 194488 bytes leftover after parsing attributes in process `syz.4.1101'. [ 145.005999][ T3652] Bluetooth: hci0: unexpected subevent 0x05 length: 14 > 12 [ 145.152064][ T6404] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1107'. [ 145.496764][ T6422] validate_nla: 11 callbacks suppressed [ 145.496782][ T6422] netlink: 'syz.0.1114': attribute type 29 has an invalid length. [ 145.538010][ T6421] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.1115'. [ 145.568059][ T6422] netlink: 'syz.0.1114': attribute type 29 has an invalid length. [ 145.570016][ T6425] netlink: 'syz.3.1116': attribute type 8 has an invalid length. [ 145.582046][ T6428] netlink: 'syz.0.1114': attribute type 29 has an invalid length. [ 145.594778][ T6425] netlink: 'syz.3.1116': attribute type 7 has an invalid length. [ 145.623178][ T6425] netlink: 194488 bytes leftover after parsing attributes in process `syz.3.1116'. [ 145.676530][ T3652] Bluetooth: hci1: command tx timeout [ 145.861817][ T6439] netlink: 'syz.4.1123': attribute type 2 has an invalid length. [ 145.869588][ T6439] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1123'. [ 146.390772][ T3647] Bluetooth: hci3: command tx timeout [ 146.443815][ T6469] netlink: 'syz.1.1139': attribute type 2 has an invalid length. [ 147.030971][ T3652] Bluetooth: hci0: command tx timeout [ 147.132650][ T6495] netlink: 'syz.4.1150': attribute type 2 has an invalid length. [ 147.427667][ T6506] netlink: 'syz.0.1155': attribute type 29 has an invalid length. [ 147.491269][ T6506] netlink: 'syz.0.1155': attribute type 29 has an invalid length. [ 149.462043][ T6582] __nla_validate_parse: 4 callbacks suppressed [ 149.462061][ T6582] netlink: 134784 bytes leftover after parsing attributes in process `syz.2.1189'. [ 149.973127][ T3652] Bluetooth: hci4: unexpected subevent 0x01 length: 14 < 18 [ 150.372179][ T6611] netlink: 134784 bytes leftover after parsing attributes in process `syz.1.1203'. [ 150.634987][ T6622] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1208'. [ 151.799943][ T6659] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1223'. [ 152.732820][ T6691] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1239'. [ 153.102798][ T6709] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.1248'. [ 153.258628][ T6715] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1251'. [ 153.577044][ T6726] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1256'. [ 153.983309][ T6740] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.1263'. [ 154.021221][ T6738] syz.2.1262 uses obsolete (PF_INET,SOCK_PACKET) [ 154.408836][ T6761] validate_nla: 7 callbacks suppressed [ 154.408858][ T6761] netlink: 'syz.2.1272': attribute type 1 has an invalid length. [ 154.430829][ T6761] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1272'. [ 154.505830][ T6757] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1271'. [ 154.895270][ T6773] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.1278'. [ 155.391917][ T6790] netlink: 'syz.1.1286': attribute type 1 has an invalid length. [ 155.399738][ T6790] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1286'. [ 155.821012][ T6807] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.1293'. [ 156.090968][ T6823] netlink: 'syz.4.1299': attribute type 1 has an invalid length. [ 156.098747][ T6823] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1299'. [ 157.173359][ T6851] netlink: 'syz.1.1312': attribute type 1 has an invalid length. [ 157.208996][ T6851] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1312'. [ 157.269564][ T6855] netlink: 'syz.0.1314': attribute type 29 has an invalid length. [ 157.294079][ T6855] netlink: 'syz.0.1314': attribute type 29 has an invalid length. [ 157.360400][ T6858] netlink: 'syz.0.1314': attribute type 29 has an invalid length. [ 158.163081][ T6886] netlink: 'syz.0.1329': attribute type 29 has an invalid length. [ 158.196686][ T6886] netlink: 'syz.0.1329': attribute type 29 has an invalid length. [ 158.207843][ T6889] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.1330'. [ 158.228199][ T6891] netlink: 'syz.0.1329': attribute type 29 has an invalid length. [ 158.238447][ T6888] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 158.248293][ T6889] netlink: zone id is out of range [ 158.258475][ T6889] netlink: zone id is out of range [ 158.270776][ T6889] netlink: zone id is out of range [ 158.276035][ T6888] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 158.307996][ T6892] delete_channel: no stack [ 158.316507][ T6889] netlink: zone id is out of range [ 158.329682][ T6889] netlink: zone id is out of range [ 158.340873][ T6889] netlink: zone id is out of range [ 158.363073][ T6889] netlink: zone id is out of range [ 158.379781][ T6889] netlink: zone id is out of range [ 158.386049][ T6889] netlink: zone id is out of range [ 158.398677][ T6889] netlink: zone id is out of range [ 158.497898][ T6898] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1334'. [ 158.720825][ T56] wlan1: Trigger new scan to find an IBSS to join [ 159.402052][ T6933] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1350'. [ 159.847888][ T6946] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1356'. [ 161.972220][ T3652] Bluetooth: hci4: unexpected event 0x03 length: 15 > 11 [ 162.020463][ T6951] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 162.111100][ T6951] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 162.528315][ T6972] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1368'. [ 162.754431][ T6980] netlink: 121244 bytes leftover after parsing attributes in process `syz.0.1373'. [ 162.774423][ T6982] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1372'. [ 162.789187][ T6982] netlink: 'syz.4.1372': attribute type 3 has an invalid length. [ 162.804581][ T6982] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1372'. [ 162.976350][ T6988] netlink: 'syz.4.1376': attribute type 10 has an invalid length. [ 162.995450][ T6988] netlink: 14536 bytes leftover after parsing attributes in process `syz.4.1376'. [ 163.242196][ T7002] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1383'. [ 163.381117][ T7006] netlink: 121244 bytes leftover after parsing attributes in process `syz.0.1386'. [ 163.440620][ T7012] netlink: 'syz.1.1388': attribute type 3 has an invalid length. [ 163.478873][ T7012] netlink: 'syz.1.1388': attribute type 4 has an invalid length. [ 163.507285][ T7012] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1388'. [ 163.518482][ T7011] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 163.599677][ T7011] net_ratelimit: 44 callbacks suppressed [ 163.599693][ T7011] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 163.844524][ T7026] netlink: 'syz.1.1393': attribute type 10 has an invalid length. [ 163.869191][ T7026] netlink: 14536 bytes leftover after parsing attributes in process `syz.1.1393'. [ 164.029705][ T7034] device pim6reg1 entered promiscuous mode [ 164.297058][ T7049] netlink: 'syz.3.1404': attribute type 3 has an invalid length. [ 164.308518][ T7048] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 164.333696][ T7049] netlink: 'syz.3.1404': attribute type 4 has an invalid length. [ 164.420789][ T7048] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 164.630701][ T56] wlan1: Trigger new scan to find an IBSS to join [ 165.108837][ T7077] device pim6reg1 entered promiscuous mode [ 165.267286][ T7083] netlink: 'syz.2.1418': attribute type 3 has an invalid length. [ 165.300639][ T7083] netlink: 'syz.2.1418': attribute type 4 has an invalid length. [ 165.325452][ T7083] __nla_validate_parse: 2 callbacks suppressed [ 165.325467][ T7083] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1418'. [ 165.573897][ T3735] wlan1: Creating new IBSS network, BSSID 00:00:00:00:65:78 [ 165.762474][ T7106] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 165.780907][ T7106] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 166.209367][ T7119] netlink: 'syz.1.1433': attribute type 3 has an invalid length. [ 166.221185][ T7119] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1433'. [ 166.261177][ T7118] device pim6reg1 entered promiscuous mode [ 166.389409][ T7125] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1436'. [ 166.919188][ T7146] device netdevsim0 entered promiscuous mode [ 166.929460][ T7146] team0: Device netdevsim0 is up. Set it down before adding it as a team port [ 167.233468][ T7156] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1449'. [ 167.807912][ T7161] device veth0_vlan left promiscuous mode [ 167.816223][ T7161] device veth0_vlan entered promiscuous mode [ 167.895025][ T7147] syz.0.1444 (7147) used greatest stack depth: 19040 bytes left [ 168.133904][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 168.153092][ T7177] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 168.893552][ T7203] device veth0_vlan left promiscuous mode [ 168.900004][ T7203] device veth0_vlan entered promiscuous mode [ 169.530218][ T7214] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 169.612437][ T7214] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 169.643789][ T7217] validate_nla: 2 callbacks suppressed [ 169.643807][ T7217] netlink: 'syz.1.1474': attribute type 21 has an invalid length. [ 169.671011][ T7217] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1474'. [ 169.725979][ T7217] netlink: 'syz.1.1474': attribute type 1 has an invalid length. [ 169.966745][ T7233] device veth0_vlan left promiscuous mode [ 170.010429][ T7233] device veth0_vlan entered promiscuous mode [ 170.029913][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 170.039940][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 170.048959][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 170.520181][ T7252] device veth0_vlan left promiscuous mode [ 170.553060][ T7252] device veth0_vlan entered promiscuous mode [ 170.586399][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 170.599548][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 170.608307][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 170.628615][ T7262] netlink: 'syz.2.1493': attribute type 21 has an invalid length. [ 170.640747][ T7262] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1493'. [ 170.650067][ T7262] netlink: 'syz.2.1493': attribute type 1 has an invalid length. [ 171.110749][ T7281] device veth0_vlan left promiscuous mode [ 171.125861][ T7281] device veth0_vlan entered promiscuous mode [ 171.339732][ T7294] netlink: 'syz.2.1506': attribute type 21 has an invalid length. [ 171.405168][ T7294] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1506'. [ 171.422025][ T7294] netlink: 'syz.2.1506': attribute type 1 has an invalid length. [ 171.577375][ T7300] device veth0_vlan left promiscuous mode [ 171.613301][ T7300] device veth0_vlan entered promiscuous mode [ 175.384616][ T7351] device veth0_vlan left promiscuous mode [ 175.392536][ T7351] device veth0_vlan entered promiscuous mode [ 175.427550][ T7356] sock: sock_set_timeout: `syz.2.1533' (pid 7356) tries to set negative timeout [ 175.763582][ T7370] netlink: 'syz.3.1540': attribute type 10 has an invalid length. [ 175.788556][ T7370] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.819354][ T7370] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.845912][ T7370] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 176.339146][ T7394] device veth0_vlan left promiscuous mode [ 176.357823][ T7394] device veth0_vlan entered promiscuous mode [ 176.657696][ T7415] netlink: 'syz.0.1562': attribute type 10 has an invalid length. [ 176.690675][ T7415] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.740129][ T7415] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.786083][ T7415] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 177.257143][ T7439] device syzkaller0 entered promiscuous mode [ 177.424838][ T7458] netlink: 'syz.2.1580': attribute type 126 has an invalid length. [ 178.229853][ T7448] device veth0_vlan left promiscuous mode [ 178.239618][ T7448] device veth0_vlan entered promiscuous mode [ 178.261644][ T7461] netlink: 'syz.0.1582': attribute type 10 has an invalid length. [ 178.889082][ T7486] netlink: 'syz.1.1593': attribute type 126 has an invalid length. [ 179.519005][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 179.527825][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 179.535936][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 179.947158][ T7507] sock: sock_set_timeout: `syz.2.1601' (pid 7507) tries to set negative timeout [ 180.792526][ T3650] Bluetooth: hci4: command 0x0406 tx timeout [ 180.792644][ T3643] Bluetooth: hci1: command 0x0406 tx timeout [ 180.798628][ T3650] Bluetooth: hci3: command 0x0406 tx timeout [ 180.804614][ T3636] Bluetooth: hci2: command 0x0406 tx timeout [ 180.804678][ T3636] Bluetooth: hci0: command 0x0406 tx timeout [ 180.816941][ T7516] netlink: 'syz.2.1604': attribute type 10 has an invalid length. [ 182.862323][ T7522] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1607'. [ 182.891997][ T7522] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1607'. [ 182.925571][ T7522] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1607'. [ 183.065757][ T7524] device syzkaller0 entered promiscuous mode [ 187.122405][ T7536] device veth0_vlan left promiscuous mode [ 187.129118][ T7536] device veth0_vlan entered promiscuous mode [ 187.137650][ T7553] netlink: 'syz.4.1617': attribute type 21 has an invalid length. [ 187.145742][ T7553] netlink: 'syz.4.1617': attribute type 6 has an invalid length. [ 187.153899][ T7553] netlink: 14320 bytes leftover after parsing attributes in process `syz.4.1617'. [ 187.173387][ T7561] netlink: 'syz.2.1621': attribute type 10 has an invalid length. [ 187.310065][ T7564] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1622'. [ 187.352463][ T7564] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1622'. [ 187.378664][ T7564] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1622'. [ 187.542734][ T3636] Bluetooth: hci4: unexpected event 0x20 length: 15 > 7 [ 188.517619][ T7604] device syzkaller0 entered promiscuous mode [ 188.626846][ T7609] netlink: 'syz.0.1639': attribute type 3 has an invalid length. [ 188.667389][ T7609] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1639'. [ 188.805843][ T3636] Bluetooth: hci1: unexpected event 0x20 length: 15 > 7 [ 191.656771][ T7655] netlink: 'syz.1.1658': attribute type 3 has an invalid length. [ 191.727513][ T7655] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1658'. [ 192.308681][ T7674] netlink: 'syz.0.1662': attribute type 3 has an invalid length. [ 192.366483][ T7674] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1662'. [ 192.389131][ T7670] device syzkaller0 entered promiscuous mode [ 193.108862][ T7691] netlink: 'syz.4.1671': attribute type 3 has an invalid length. [ 193.137206][ T7691] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1671'. [ 194.114730][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.121454][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.639210][ T7713] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1678'. [ 196.721589][ T7716] tap0: tun_chr_ioctl cmd 1074025675 [ 196.730594][ T7716] tap0: persist enabled [ 196.743661][ T7716] tap0: tun_chr_ioctl cmd 1074025675 [ 196.748978][ T7716] tap0: persist enabled [ 196.799932][ T3636] Bluetooth: hci1: unexpected event 0x20 length: 15 > 7 [ 197.030137][ T7726] netlink: 'syz.1.1683': attribute type 3 has an invalid length. [ 197.092391][ T7726] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1683'. [ 197.210131][ T7739] netlink: 'syz.0.1688': attribute type 3 has an invalid length. [ 197.244501][ T7739] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1688'. [ 197.255292][ T7737] device syzkaller0 entered promiscuous mode [ 197.268441][ T7741] netlink: 'syz.3.1689': attribute type 21 has an invalid length. [ 198.002975][ T56] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 198.812742][ T7761] netlink: 'syz.1.1693': attribute type 8 has an invalid length. [ 198.820781][ T7761] netlink: 'syz.1.1693': attribute type 7 has an invalid length. [ 198.828786][ T7761] netlink: 194488 bytes leftover after parsing attributes in process `syz.1.1693'. [ 199.267781][ T7752] netlink: 'syz.0.1691': attribute type 10 has an invalid length. [ 199.276530][ T7752] device dummy0 left promiscuous mode [ 199.479672][ T7767] netlink: 'syz.3.1696': attribute type 10 has an invalid length. [ 199.765261][ T7780] netlink: 'syz.0.1701': attribute type 21 has an invalid length. [ 200.725262][ T7807] netlink: 'syz.1.1713': attribute type 21 has an invalid length. [ 203.045279][ T7815] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1717'. [ 203.102290][ T7817] netlink: 'syz.3.1718': attribute type 21 has an invalid length. [ 203.208382][ T7821] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1720'. [ 203.232784][ T7821] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1720'. [ 203.271677][ T7821] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1720'. [ 203.350929][ T7827] netlink: 'syz.3.1723': attribute type 21 has an invalid length. [ 203.628575][ T7839] netlink: 'syz.2.1727': attribute type 21 has an invalid length. [ 204.145100][ T7850] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1733'. [ 204.470476][ T7854] netlink: 'syz.3.1734': attribute type 6 has an invalid length. [ 204.478322][ T7854] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1734'. [ 205.237000][ T7877] netlink: 'syz.2.1742': attribute type 39 has an invalid length. [ 205.259141][ T7877] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1742'. [ 205.302480][ T7877] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 205.360841][ T7876] netlink: 'syz.0.1744': attribute type 21 has an invalid length. [ 205.540084][ T7882] netlink: 'syz.1.1746': attribute type 6 has an invalid length. [ 205.569545][ T7882] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1746'. [ 205.598146][ T7884] netlink: 'syz.3.1747': attribute type 10 has an invalid length. [ 205.610338][ T7889] netlink: 'syz.4.1745': attribute type 3 has an invalid length. [ 205.628669][ T7884] bridge0: port 3(team0) entered blocking state [ 205.647098][ T7889] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1745'. [ 205.661209][ T7884] bridge0: port 3(team0) entered disabled state [ 205.703773][ T7884] device team0 entered promiscuous mode [ 205.709370][ T7884] device team_slave_0 entered promiscuous mode [ 205.717510][ T7884] device team_slave_1 entered promiscuous mode [ 205.726556][ T7884] bridge0: port 3(team0) entered blocking state [ 205.733197][ T7884] bridge0: port 3(team0) entered forwarding state [ 206.023926][ T7899] netlink: 'syz.1.1753': attribute type 10 has an invalid length. [ 206.276335][ T7906] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1756'. [ 206.437768][ T7911] netlink: 'syz.0.1758': attribute type 39 has an invalid length. [ 206.490390][ T7911] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 206.893719][ T7932] netlink: 'syz.3.1768': attribute type 10 has an invalid length. [ 207.014764][ T7936] netlink: 'syz.0.1770': attribute type 29 has an invalid length. [ 210.147676][ T8002] validate_nla: 10 callbacks suppressed [ 210.147692][ T8002] netlink: 'syz.2.1799': attribute type 2 has an invalid length. [ 210.161529][ T8002] netlink: 'syz.2.1799': attribute type 1 has an invalid length. [ 210.180774][ T8006] netlink: 'syz.0.1801': attribute type 29 has an invalid length. [ 210.206422][ T8009] netlink: 'syz.0.1801': attribute type 29 has an invalid length. [ 210.336739][ T8012] syz.2.1803[8012] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 210.336919][ T8012] syz.2.1803[8012] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 210.668447][ T8026] netlink: 'syz.4.1810': attribute type 3 has an invalid length. [ 210.689241][ T8026] __nla_validate_parse: 1 callbacks suppressed [ 210.689256][ T8026] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.1810'. [ 210.834939][ T8034] netlink: 'syz.0.1814': attribute type 2 has an invalid length. [ 210.861191][ T8034] netlink: 'syz.0.1814': attribute type 1 has an invalid length. [ 210.997389][ T8035] netlink: 'syz.1.1813': attribute type 3 has an invalid length. [ 211.019178][ T8035] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1813'. [ 211.019263][ T8044] netlink: 'syz.0.1818': attribute type 29 has an invalid length. [ 211.043851][ T8039] netlink: 'syz.4.1817': attribute type 13 has an invalid length. [ 211.053494][ T8039] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1817'. [ 212.425460][ T8070] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1828'. [ 212.435493][ T8069] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1829'. [ 212.487905][ T8072] IPv6: NLM_F_CREATE should be specified when creating new route [ 212.534707][ T8073] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1830'. [ 212.636108][ T8077] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1832'. [ 214.593999][ T8102] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1844'. [ 214.604048][ T8104] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1845'. [ 214.613435][ T8106] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1846'. [ 214.628217][ T8107] IPv6: NLM_F_CREATE should be specified when creating new route [ 214.983537][ T8124] syz_tun: refused to change device tx_queue_len [ 215.004665][ T8124] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 215.222549][ T8136] validate_nla: 10 callbacks suppressed [ 215.222566][ T8136] netlink: 'syz.2.1859': attribute type 21 has an invalid length. [ 215.308520][ T8143] netlink: 'syz.2.1859': attribute type 21 has an invalid length. [ 215.326548][ T8143] IPv6: NLM_F_CREATE should be specified when creating new route [ 216.059532][ T8164] netlink: 'syz.1.1872': attribute type 13 has an invalid length. [ 216.099282][ T8162] netlink: 'syz.0.1871': attribute type 29 has an invalid length. [ 216.116574][ T8164] __nla_validate_parse: 3 callbacks suppressed [ 216.116588][ T8164] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1872'. [ 216.195014][ T8164] syz_tun: refused to change device tx_queue_len [ 216.224690][ T8164] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 216.295324][ T8162] netlink: 'syz.0.1871': attribute type 29 has an invalid length. [ 216.527802][ T8174] netlink: 'syz.1.1876': attribute type 21 has an invalid length. [ 216.564779][ T8174] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1876'. [ 216.609195][ T8178] netlink: 'syz.1.1876': attribute type 21 has an invalid length. [ 216.637507][ T8178] IPv6: NLM_F_CREATE should be specified when creating new route [ 216.971543][ T8195] netlink: 'syz.0.1885': attribute type 10 has an invalid length. [ 216.979416][ T8195] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1885'. [ 217.037208][ T8195] bridge0: port 3(ipvlan1) entered blocking state [ 217.049811][ T8195] bridge0: port 3(ipvlan1) entered disabled state [ 217.064967][ T8195] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 217.091587][ T8198] netlink: 'syz.2.1887': attribute type 29 has an invalid length. [ 217.126916][ T8198] netlink: 'syz.2.1887': attribute type 29 has an invalid length. [ 217.896204][ T8231] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1899'. [ 217.954555][ T8231] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 218.706764][ T8254] device veth1_macvtap left promiscuous mode [ 218.732672][ T8257] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1909'. [ 218.847452][ T8254] device veth1_macvtap entered promiscuous mode [ 218.881889][ T8254] device macsec0 entered promiscuous mode [ 218.918181][ T948] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 219.092250][ T8268] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1914'. [ 219.120414][ T8268] bridge0: port 4(ipvlan1) entered blocking state [ 219.129876][ T8268] bridge0: port 4(ipvlan1) entered disabled state [ 219.142705][ T8268] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 219.768752][ T8299] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1926'. [ 220.648374][ T8333] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1941'. [ 220.676530][ T8332] validate_nla: 6 callbacks suppressed [ 220.676544][ T8332] netlink: 'syz.1.1940': attribute type 10 has an invalid length. [ 220.711058][ T8332] device batadv0 left promiscuous mode [ 220.737089][ T8332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.774122][ T8332] team0: Port device batadv0 added [ 221.541894][ T8366] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1952'. [ 221.586182][ T8369] device pim6reg1 entered promiscuous mode [ 221.726531][ T8372] netlink: 'syz.1.1956': attribute type 21 has an invalid length. [ 221.754711][ T8376] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1957'. [ 221.861754][ T8374] netlink: 'syz.3.1955': attribute type 10 has an invalid length. [ 221.939141][ T8374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.995777][ T8374] device batadv0 entered promiscuous mode [ 222.071695][ T8374] team0: Port device batadv0 added [ 222.460707][ T9] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 222.470315][ T9] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 222.491173][ T8399] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1966'. [ 222.760940][ T8409] netlink: 'syz.0.1970': attribute type 21 has an invalid length. [ 223.218942][ T8423] netlink: 'syz.0.1974': attribute type 29 has an invalid length. [ 225.614272][ T8423] netlink: 'syz.0.1974': attribute type 29 has an invalid length. [ 225.622496][ T8419] device pim6reg1 entered promiscuous mode [ 225.843060][ T8444] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1980'. [ 226.013167][ T8453] netlink: 'syz.4.1984': attribute type 7 has an invalid length. [ 226.116483][ T8454] netlink: 'syz.2.1985': attribute type 10 has an invalid length. [ 226.124676][ T8454] netlink: 'syz.2.1985': attribute type 4 has an invalid length. [ 226.146360][ T8454] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1985'. [ 226.318058][ T8462] netlink: 'syz.4.1988': attribute type 29 has an invalid length. [ 226.845167][ T8454] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 226.910075][ T8462] netlink: 'syz.4.1988': attribute type 29 has an invalid length. [ 226.934118][ T8465] netlink: 'syz.4.1988': attribute type 29 has an invalid length. [ 226.945177][ T8471] netlink: 'syz.3.1989': attribute type 10 has an invalid length. [ 226.960920][ T8466] netlink: 'syz.4.1988': attribute type 29 has an invalid length. [ 227.018255][ T8467] netlink: 'syz.4.1988': attribute type 29 has an invalid length. [ 227.050438][ T8475] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 227.057213][ T8475] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 227.091899][ T8468] netlink: 'syz.4.1988': attribute type 29 has an invalid length. [ 229.849908][ T8551] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2019'. [ 229.884991][ T8551] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 230.568655][ T8577] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2030'. [ 231.496905][ T8586] netlink: 64985 bytes leftover after parsing attributes in process `syz.3.2034'. [ 231.969220][ T8609] validate_nla: 12 callbacks suppressed [ 231.969251][ T8609] netlink: 'syz.0.2041': attribute type 10 has an invalid length. [ 231.997183][ T8609] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.005610][ T8609] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.092436][ T8609] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.100028][ T8609] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.108804][ T8609] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.116227][ T8609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.167140][ T8609] team0: Port device bridge0 added [ 233.666761][ T8636] tap0: tun_chr_ioctl cmd 1074812118 [ 233.944306][ T8659] netlink: 'syz.0.2062': attribute type 10 has an invalid length. [ 233.961614][ T8659] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.969252][ T8659] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.291866][ T8724] tap0: tun_chr_ioctl cmd 2147767506 [ 235.616224][ T8736] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2097'. [ 236.461531][ T8746] netlink: 'syz.1.2101': attribute type 46 has an invalid length. [ 236.846506][ T8765] tap0: tun_chr_ioctl cmd 2147767506 [ 236.945790][ T8775] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2113'. [ 237.082463][ T8779] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.2115'. [ 237.750425][ T8778] netlink: 'syz.0.2116': attribute type 46 has an invalid length. [ 237.799540][ T3636] Bluetooth: hci2: unexpected subevent 0x12 length: 14 > 5 [ 238.256718][ T8807] netlink: 'syz.2.2127': attribute type 10 has an invalid length. [ 238.311764][ T8807] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.320147][ T8807] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.376171][ T8807] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.383879][ T8807] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.392724][ T8807] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.400149][ T8807] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.439475][ T8807] team0: Port device bridge0 added [ 238.457318][ T8819] netlink: 'syz.3.2132': attribute type 46 has an invalid length. [ 238.522737][ T8821] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2133'. [ 238.626358][ T3636] Bluetooth: hci2: unexpected subevent 0x12 length: 14 > 5 [ 239.395205][ T8859] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.2150'. [ 239.420629][ T3636] Bluetooth: hci0: unexpected subevent 0x12 length: 14 > 5 [ 239.566124][ T8863] device pim6reg1 entered promiscuous mode [ 239.684354][ T8869] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2154'. [ 239.884991][ T3636] Bluetooth: hci2: unexpected event 0x14 length: 15 > 6 [ 240.098538][ T8888] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.2163'. [ 240.114909][ T3636] Bluetooth: hci3: unexpected subevent 0x12 length: 14 > 5 [ 240.715062][ T8908] : renamed from pim6reg1 [ 240.992997][ T8925] tap0: tun_chr_ioctl cmd 1074025677 [ 240.998457][ T8925] tap0: linktype set to 778 [ 241.229356][ T8934] netlink: 'syz.0.2182': attribute type 21 has an invalid length. [ 241.346651][ T8936] device syzkaller0 entered promiscuous mode [ 242.596174][ T8952] : renamed from pim6reg1 [ 242.718922][ T8961] tap0: tun_chr_ioctl cmd 1074025677 [ 242.724584][ T8961] tap0: linktype set to 778 [ 242.812687][ T8967] netlink: 'syz.1.2194': attribute type 21 has an invalid length. [ 243.362588][ T8997] : renamed from pim6reg1 [ 243.715833][ T9001] tap0: tun_chr_ioctl cmd 1074025677 [ 243.736908][ T9001] tap0: linktype set to 778 [ 243.816427][ T9005] netlink: 'syz.0.2209': attribute type 21 has an invalid length. [ 244.620665][ T9035] : renamed from pim6reg1 [ 244.649231][ T9037] tap1: tun_chr_ioctl cmd 1074025677 [ 244.672436][ T9037] tap1: linktype set to 778 [ 244.685082][ T9039] netlink: 'syz.1.2225': attribute type 21 has an invalid length. [ 245.170007][ T9056] device syzkaller0 entered promiscuous mode [ 246.497267][ T9085] netlink: 3748 bytes leftover after parsing attributes in process `syz.4.2243'. [ 246.838471][ T9098] bridge0: port 4(veth0_to_bond) entered blocking state [ 246.896597][ T9098] bridge0: port 4(veth0_to_bond) entered disabled state [ 246.916791][ T9098] device veth0_to_bond entered promiscuous mode [ 246.944802][ T9098] bridge0: port 4(veth0_to_bond) entered blocking state [ 246.952491][ T9098] bridge0: port 4(veth0_to_bond) entered forwarding state [ 246.974456][ T9094] device veth0_to_bond left promiscuous mode [ 247.020229][ T9094] bridge0: port 4(veth0_to_bond) entered disabled state [ 247.162616][ T9109] device syzkaller0 entered promiscuous mode [ 247.254063][ T9114] netlink: 3748 bytes leftover after parsing attributes in process `syz.2.2256'. [ 248.376041][ T9120] netlink: 'syz.2.2259': attribute type 21 has an invalid length. [ 248.384115][ T9120] netlink: 'syz.2.2259': attribute type 6 has an invalid length. [ 248.393715][ T9120] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2259'. [ 248.842933][ T9145] netlink: 3748 bytes leftover after parsing attributes in process `syz.2.2270'. [ 248.904274][ T9146] bridge0: port 4(veth0_to_bond) entered blocking state [ 248.999124][ T9146] bridge0: port 4(veth0_to_bond) entered disabled state [ 249.057057][ T9146] device veth0_to_bond entered promiscuous mode [ 249.064501][ T9146] bridge0: port 4(veth0_to_bond) entered blocking state [ 249.071596][ T9146] bridge0: port 4(veth0_to_bond) entered forwarding state [ 249.089496][ T9150] device veth0_to_bond left promiscuous mode [ 249.102383][ T9150] bridge0: port 4(veth0_to_bond) entered disabled state [ 249.234211][ T9156] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2275'. [ 249.339758][ T9162] netlink: 'syz.2.2277': attribute type 32 has an invalid length. [ 249.676402][ T9176] netlink: 3748 bytes leftover after parsing attributes in process `syz.0.2283'. [ 249.980159][ T9188] netlink: 'syz.3.2289': attribute type 32 has an invalid length. [ 250.645263][ T9214] tap0: tun_chr_ioctl cmd 1074025681 [ 250.861271][ T9221] netlink: 'syz.2.2302': attribute type 32 has an invalid length. [ 251.010816][ T9227] netlink: 'syz.1.2305': attribute type 29 has an invalid length. [ 251.052355][ T9227] netlink: 'syz.1.2305': attribute type 29 has an invalid length. [ 251.072885][ T9232] netlink: 'syz.1.2305': attribute type 29 has an invalid length. [ 251.097205][ T9227] netlink: 'syz.1.2305': attribute type 29 has an invalid length. [ 251.108449][ T9227] netlink: 'syz.1.2305': attribute type 29 has an invalid length. [ 251.326890][ T9244] tap1: tun_chr_ioctl cmd 1074025681 [ 252.243787][ T9267] can: request_module (can-proto-4) failed. [ 253.048484][ T9294] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2331'. [ 253.280031][ T9305] tap1: tun_chr_ioctl cmd 1074025681 [ 253.794227][ T9320] validate_nla: 15 callbacks suppressed [ 253.794245][ T9320] netlink: 'syz.2.2339': attribute type 10 has an invalid length. [ 253.865633][ T9320] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2339'. [ 253.908582][ T9320] device hsr0 entered promiscuous mode [ 253.934223][ T9320] bridge0: port 3(hsr0) entered blocking state [ 253.940458][ T9320] bridge0: port 3(hsr0) entered disabled state [ 253.946192][ T9320] bridge0: port 3(hsr0) entered blocking state [ 253.953441][ T9320] bridge0: port 3(hsr0) entered forwarding state [ 254.171514][ T9335] syz.3.2344[9335] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 254.171666][ T9335] syz.3.2344[9335] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 254.209415][ T9338] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2346'. [ 254.938885][ T9371] netlink: 'syz.4.2360': attribute type 49 has an invalid length. [ 254.985205][ T9371] netlink: 'syz.4.2360': attribute type 49 has an invalid length. [ 255.038589][ T9378] netlink: 'syz.2.2357': attribute type 10 has an invalid length. [ 255.093599][ T9378] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2357'. [ 255.520881][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.527210][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.796470][ T9406] netlink: 'syz.4.2375': attribute type 49 has an invalid length. [ 255.804597][ T9406] netlink: 'syz.4.2375': attribute type 49 has an invalid length. [ 255.984457][ T9414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2379'. [ 256.004528][ T9414] netlink: 'syz.0.2379': attribute type 49 has an invalid length. [ 256.030918][ T9414] netlink: 'syz.0.2379': attribute type 49 has an invalid length. [ 256.197243][ T9419] netlink: 'syz.4.2380': attribute type 10 has an invalid length. [ 256.261524][ T9419] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2380'. [ 256.296052][ T9419] device hsr0 entered promiscuous mode [ 256.308237][ T9419] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check. [ 256.528099][ T9434] netlink: 'syz.2.2388': attribute type 49 has an invalid length. [ 256.954902][ T9444] bridge0: port 4(veth0_to_bond) entered blocking state [ 257.037141][ T9444] bridge0: port 4(veth0_to_bond) entered disabled state [ 257.148541][ T9444] device veth0_to_bond entered promiscuous mode [ 257.168746][ T9444] bridge0: port 4(veth0_to_bond) entered blocking state [ 257.175912][ T9444] bridge0: port 4(veth0_to_bond) entered forwarding state [ 259.390593][ T9486] validate_nla: 3 callbacks suppressed [ 259.390616][ T9486] netlink: 'syz.0.2409': attribute type 10 has an invalid length. [ 259.410421][ T9486] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2409'. [ 259.440722][ T9486] device hsr0 entered promiscuous mode [ 259.446690][ T9486] bridge0: port 3(hsr0) entered blocking state [ 259.453414][ T9486] bridge0: port 3(hsr0) entered disabled state [ 259.534391][ T9496] netlink: 'syz.1.2412': attribute type 29 has an invalid length. [ 259.551448][ T9496] netlink: 'syz.1.2412': attribute type 29 has an invalid length. [ 259.590891][ T9498] netlink: 'syz.1.2412': attribute type 29 has an invalid length. [ 259.650889][ T9496] netlink: 'syz.1.2412': attribute type 29 has an invalid length. [ 259.695271][ T9496] netlink: 'syz.1.2412': attribute type 29 has an invalid length. [ 260.679203][ T9537] netlink: 'syz.3.2427': attribute type 10 has an invalid length. [ 260.688563][ T9537] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2427'. [ 260.698078][ T9537] device hsr0 entered promiscuous mode [ 260.704568][ T9537] bridge0: port 5(hsr0) entered blocking state [ 260.711123][ T9537] bridge0: port 5(hsr0) entered disabled state [ 260.720951][ T9537] bridge0: port 5(hsr0) entered blocking state [ 260.727363][ T9537] bridge0: port 5(hsr0) entered forwarding state [ 261.939558][ T9587] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2452'. [ 261.973925][ T9587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2452'. [ 262.050032][ T9587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2452'. [ 262.077314][ T9587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2452'. [ 262.456375][ T9609] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2463'. [ 262.488016][ T9609] tc_dump_action: action bad kind [ 262.546965][ T9612] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2464'. [ 262.605902][ T9612] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 262.613641][ T9617] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2468'. [ 262.623581][ T9617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2468'. [ 263.115033][ T9640] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 263.132826][ T9641] tc_dump_action: action bad kind [ 263.282267][ T9646] netlink: 'syz.3.2481': attribute type 29 has an invalid length. [ 263.289071][ T9647] netlink: 'syz.2.2483': attribute type 29 has an invalid length. [ 263.304761][ T9646] netlink: 'syz.3.2481': attribute type 29 has an invalid length. [ 263.757884][ T9672] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 264.372379][ T9694] device hsr0 entered promiscuous mode [ 264.378607][ T9694] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check. [ 264.469610][ T9700] __nla_validate_parse: 11 callbacks suppressed [ 264.469626][ T9700] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2506'. [ 264.515489][ T9700] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 264.609385][ T9702] device syzkaller0 entered promiscuous mode [ 264.974042][ T9720] validate_nla: 9 callbacks suppressed [ 264.974057][ T9720] netlink: 'syz.1.2515': attribute type 29 has an invalid length. [ 265.774176][ T9720] netlink: 'syz.1.2515': attribute type 29 has an invalid length. [ 265.901295][ T3636] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 266.029308][ T9731] netlink: 'syz.4.2519': attribute type 29 has an invalid length. [ 266.076355][ T9731] netlink: 'syz.4.2519': attribute type 29 has an invalid length. [ 266.116524][ T9731] netlink: 'syz.4.2519': attribute type 29 has an invalid length. [ 266.142446][ T9729] netlink: 'syz.3.2520': attribute type 10 has an invalid length. [ 266.150790][ T9729] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2520'. [ 266.183749][ T9737] netlink: 'syz.4.2519': attribute type 29 has an invalid length. [ 266.207465][ T9731] netlink: 'syz.4.2519': attribute type 29 has an invalid length. [ 266.225256][ T9731] netlink: 'syz.4.2519': attribute type 29 has an invalid length. [ 266.379481][ T9747] netlink: 'syz.1.2528': attribute type 29 has an invalid length. [ 266.504546][ T9751] device syzkaller0 entered promiscuous mode [ 267.027719][ T3636] Bluetooth: hci4: unexpected event 0x04 length: 15 > 10 [ 267.101460][ T9780] netlink: 646 bytes leftover after parsing attributes in process `syz.4.2540'. [ 267.192193][ T9784] device syzkaller0 entered promiscuous mode [ 267.626745][ T9798] device syzkaller0 entered promiscuous mode [ 268.469929][ T9830] device syzkaller0 entered promiscuous mode [ 268.910291][ T9843] device syzkaller0 entered promiscuous mode [ 269.002488][ T9849] device veth1_macvtap left promiscuous mode [ 269.030631][ T3643] Bluetooth: hci4: command 0x0406 tx timeout [ 269.197457][ T9850] device syzkaller0 entered promiscuous mode [ 269.220666][ T9855] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2574'. [ 269.241684][ T3643] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 271.353079][ T9891] device syzkaller0 entered promiscuous mode [ 271.459679][ T9896] validate_nla: 25 callbacks suppressed [ 271.459696][ T9896] netlink: 'syz.1.2588': attribute type 10 has an invalid length. [ 271.475724][ T9896] device veth1_macvtap left promiscuous mode [ 271.482115][ T9896] device macsec0 left promiscuous mode [ 271.506135][ T9898] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2589'. [ 271.582874][ T3643] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 272.214833][ T9922] device syzkaller0 entered promiscuous mode [ 272.254531][ T9927] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2602'. [ 274.018015][ T9937] device syzkaller0 entered promiscuous mode [ 274.310144][ T9959] netlink: 'syz.0.2614': attribute type 29 has an invalid length. [ 274.340073][ T9963] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2615'. [ 274.384622][ T9959] netlink: 'syz.0.2614': attribute type 29 has an invalid length. [ 274.402799][ T9964] netlink: 'syz.0.2614': attribute type 29 has an invalid length. [ 274.435478][ T9959] netlink: 'syz.0.2614': attribute type 29 has an invalid length. [ 274.482657][ T9959] netlink: 'syz.0.2614': attribute type 29 has an invalid length. [ 274.503643][ T9968] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2617'. [ 274.528689][ T9959] netlink: 'syz.0.2614': attribute type 29 has an invalid length. [ 274.564337][ T9959] netlink: 'syz.0.2614': attribute type 29 has an invalid length. [ 274.830667][ T9976] netlink: 'syz.0.2623': attribute type 3 has an invalid length. [ 274.870789][ T9976] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2623'. [ 275.168762][ T9996] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2631'. [ 276.865209][T10039] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2645'. [ 276.906435][T10041] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2646'. [ 277.153710][T10054] netlink: 'syz.1.2651': attribute type 2 has an invalid length. [ 277.260000][T10057] netlink: 'syz.4.2652': attribute type 21 has an invalid length. [ 277.305879][T10057] netlink: 'syz.4.2652': attribute type 1 has an invalid length. [ 277.492537][T10061] device syzkaller0 entered promiscuous mode [ 278.975954][T10100] netlink: 'syz.4.2666': attribute type 21 has an invalid length. [ 279.020572][T10100] netlink: 'syz.4.2666': attribute type 1 has an invalid length. [ 280.874070][T10123] device syzkaller0 entered promiscuous mode [ 280.881311][T10140] netlink: 'syz.4.2682': attribute type 21 has an invalid length. [ 280.889253][T10140] netlink: 'syz.4.2682': attribute type 1 has an invalid length. [ 282.164496][T10157] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2690'. [ 282.218985][T10161] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2692'. [ 283.834187][T10204] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2705'. [ 284.420418][T10228] device syzkaller0 entered promiscuous mode [ 285.682919][T10246] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2721'. [ 285.794572][T10244] device syzkaller0 entered promiscuous mode [ 288.091459][T10271] device pim6reg1 entered promiscuous mode [ 288.349177][T10288] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2734'. [ 288.699482][T10292] device syzkaller0 entered promiscuous mode [ 289.401755][T10308] netlink: 'syz.1.2741': attribute type 29 has an invalid length. [ 290.293870][T10302] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 290.319839][T10308] netlink: 'syz.1.2741': attribute type 29 has an invalid length. [ 290.665015][T10325] netlink: 'syz.1.2745': attribute type 21 has an invalid length. [ 292.110015][T10351] device syzkaller0 entered promiscuous mode [ 292.148169][T10358] device syzkaller0 entered promiscuous mode [ 294.193792][T10367] netlink: 'syz.0.2759': attribute type 21 has an invalid length. [ 295.180429][T10408] netlink: 'syz.1.2771': attribute type 29 has an invalid length. [ 295.198478][T10392] device syzkaller0 entered promiscuous mode [ 295.433042][T10408] netlink: 'syz.1.2771': attribute type 29 has an invalid length. [ 296.427125][T10409] netlink: 'syz.1.2771': attribute type 29 has an invalid length. [ 296.774805][T10424] netlink: 'syz.2.2775': attribute type 21 has an invalid length. [ 297.282795][ T3636] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 297.291637][ T3636] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 297.299250][ T3636] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 297.308889][ T3636] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 297.316551][ T3636] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 297.326071][ T3636] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 297.694166][T10452] device pim6reg1 entered promiscuous mode [ 298.090660][T10466] netlink: 'syz.4.2791': attribute type 21 has an invalid length. [ 298.439590][T10441] chnl_net:caif_netlink_parms(): no params data found [ 299.001435][T10481] netlink: 'syz.2.2798': attribute type 5 has an invalid length. [ 299.256921][T10441] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.314365][T10441] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.348872][T10441] device bridge_slave_0 entered promiscuous mode [ 299.432568][ T3643] Bluetooth: hci5: command tx timeout [ 299.727312][T10494] device syzkaller0 entered promiscuous mode [ 299.773818][T10503] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.2805'. [ 299.886292][T10441] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.900252][T10441] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.939411][T10441] device bridge_slave_1 entered promiscuous mode [ 300.029867][T10503] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 300.080597][T10503] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 301.510619][ T3643] Bluetooth: hci5: command tx timeout [ 303.487094][T10441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.559062][T10441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.590572][ T3643] Bluetooth: hci5: command tx timeout [ 304.025614][T10441] team0: Port device team_slave_0 added [ 304.132725][T10441] team0: Port device team_slave_1 added [ 304.727335][T10441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.761029][T10441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.016294][T10441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.115084][T10441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.233591][T10441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.460346][T10441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.671091][ T3643] Bluetooth: hci5: command tx timeout [ 305.779899][T10441] device hsr_slave_0 entered promiscuous mode [ 305.861418][T10441] device hsr_slave_1 entered promiscuous mode [ 305.915794][T10441] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 306.010633][T10441] Cannot create hsr debugfs directory [ 306.578622][T10565] device syzkaller0 entered promiscuous mode [ 306.817530][ T3643] Bluetooth: hci4: ISO packet for unknown connection handle 4 [ 313.425968][T10441] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.952745][T10441] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.226981][T10622] netlink: 'syz.4.2851': attribute type 10 has an invalid length. [ 314.312048][T10622] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2851'. [ 314.669106][T10639] netlink: 'syz.1.2854': attribute type 3 has an invalid length. [ 314.712618][T10441] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.762423][T10639] netlink: 'syz.1.2854': attribute type 1 has an invalid length. [ 314.844419][T10639] netlink: 39 bytes leftover after parsing attributes in process `syz.1.2854'. [ 315.108642][T10644] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 315.133545][T10441] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.553666][T10652] netlink: 'syz.0.2859': attribute type 12 has an invalid length. [ 315.598988][T10652] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2859'. [ 315.778261][T10441] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 315.857634][T10441] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 315.950045][T10441] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 316.036929][T10441] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 316.794342][T10441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.967205][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.973549][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.003015][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 317.012922][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 317.059650][T10441] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.124170][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 317.172760][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 317.344063][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.351226][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.551831][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 317.559977][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 317.765920][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 317.937821][ T3683] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.944987][ T3683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.212339][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 318.221554][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 318.285561][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 318.457951][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 318.688055][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 318.814528][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 318.974887][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 319.116082][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 319.234512][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 319.410218][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 319.546104][T10672] device pim6reg1 entered promiscuous mode [ 319.607824][T10680] netlink: 'syz.4.2870': attribute type 12 has an invalid length. [ 319.661041][T10680] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2870'. [ 319.920380][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 320.381853][T10688] netlink: 'syz.1.2873': attribute type 23 has an invalid length. [ 320.415193][T10688] netlink: 'syz.1.2873': attribute type 6 has an invalid length. [ 323.450983][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 323.458457][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 323.748185][T10441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.920745][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 323.929492][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 324.414729][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 324.442939][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 324.592576][T10716] netlink: 'syz.0.2883': attribute type 12 has an invalid length. [ 324.672716][T10716] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2883'. [ 324.799442][T10441] device veth0_vlan entered promiscuous mode [ 324.850248][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 324.894192][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 325.041682][T10719] netlink: 'syz.4.2884': attribute type 23 has an invalid length. [ 325.049601][T10719] netlink: 'syz.4.2884': attribute type 6 has an invalid length. [ 325.075930][T10441] device veth1_vlan entered promiscuous mode [ 325.775378][T10441] device veth0_macvtap entered promiscuous mode [ 325.924238][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 325.982152][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 326.098130][T10441] device veth1_macvtap entered promiscuous mode [ 326.183000][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 326.376699][T10441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.488172][T10441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.548059][T10441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.618386][T10441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.654739][T10441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.684131][T10441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.736887][T10441] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.790748][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 326.841346][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 326.934603][T10441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.002804][T10441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.077165][T10441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.208497][T10441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.265118][T10441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.312852][T10441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.354615][T10441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.398069][T10441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.438547][T10441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.481018][T10441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.525896][T10441] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.567823][T10750] netlink: 'syz.1.2894': attribute type 11 has an invalid length. [ 327.599786][T10750] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2894'. [ 327.612922][T10751] netlink: 'syz.2.2896': attribute type 12 has an invalid length. [ 327.621326][T10751] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2896'. [ 327.654640][T10754] netlink: 'syz.0.2897': attribute type 23 has an invalid length. [ 327.710779][T10754] netlink: 'syz.0.2897': attribute type 6 has an invalid length. [ 327.762901][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 327.812993][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 328.018452][T10441] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.124008][T10441] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.167556][T10441] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.213425][T10441] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.555558][T10772] bridge0: port 3(hsr0) entered disabled state [ 328.562309][T10772] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.570091][T10772] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.794213][T10774] bridge0: port 3(hsr0) entered blocking state [ 328.800555][T10774] bridge0: port 3(hsr0) entered forwarding state [ 328.807109][T10774] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.814244][T10774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.821618][T10774] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.828739][T10774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.986760][T10774] device bridge0 entered promiscuous mode [ 329.057177][T10783] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2908'. [ 329.098554][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.124949][T10784] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2908'. [ 329.151030][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.244471][T10788] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2908'. [ 329.295931][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 329.353861][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.379408][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.600162][ T948] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 329.629126][T10793] netlink: 'syz.0.2911': attribute type 23 has an invalid length. [ 329.660591][T10793] netlink: 'syz.0.2911': attribute type 6 has an invalid length. [ 330.504314][T10810] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2918'. [ 330.578219][T10811] netlink: 'syz.3.2919': attribute type 12 has an invalid length. [ 330.792389][T10811] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2919'. [ 330.984095][T10821] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2923'. [ 331.415407][T10829] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2926'. [ 331.536042][T10824] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2926'. [ 332.318003][T10851] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2936'. [ 332.786587][T10856] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2938'. [ 332.945406][T10863] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2941'. [ 333.054781][T10862] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2941'. [ 333.897996][T10881] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2950'. [ 334.332418][T10892] netlink: 'syz.0.2954': attribute type 10 has an invalid length. [ 334.554547][T10892] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 334.657487][T10896] tc_dump_action: action bad kind [ 335.653217][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 335.986334][T10934] __nla_validate_parse: 7 callbacks suppressed [ 335.986350][T10934] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2971'. [ 336.051943][T10930] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2971'. [ 336.105049][T10937] netlink: 'syz.1.2974': attribute type 29 has an invalid length. [ 336.241839][T10937] netlink: 'syz.1.2974': attribute type 29 has an invalid length. [ 336.351210][T10939] netlink: 'syz.1.2974': attribute type 29 has an invalid length. [ 336.391303][T10944] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2976'. [ 336.418934][T10940] netlink: 'syz.1.2974': attribute type 29 has an invalid length. [ 336.465761][T10947] netlink: 'syz.1.2974': attribute type 29 has an invalid length. [ 336.570931][T10939] netlink: 'syz.1.2974': attribute type 29 has an invalid length. [ 336.674317][T10937] netlink: 'syz.1.2974': attribute type 29 has an invalid length. [ 336.957945][T10955] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2979'. [ 337.150166][T10961] netlink: 'syz.0.2982': attribute type 10 has an invalid length. [ 337.181122][T10961] netlink: 'syz.0.2982': attribute type 11 has an invalid length. [ 337.189093][T10961] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.2982'. [ 337.510352][T10968] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2984'. [ 337.567509][ T3643] Bluetooth: hci0: unexpected event 0x03 length: 15 > 11 [ 337.569075][T10964] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2984'. [ 337.634819][T10970] netlink: 'syz.4.2987': attribute type 1 has an invalid length. [ 337.650576][T10970] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2987'. [ 337.957280][T10980] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2990'. [ 338.346013][T10995] netlink: 'syz.4.2995': attribute type 1 has an invalid length. [ 338.502101][T10995] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2995'. [ 341.334015][T11065] validate_nla: 7 callbacks suppressed [ 341.334032][T11065] netlink: 'syz.2.3026': attribute type 29 has an invalid length. [ 341.491953][T11065] netlink: 'syz.2.3026': attribute type 29 has an invalid length. [ 341.527458][T11066] __nla_validate_parse: 3 callbacks suppressed [ 341.527472][T11066] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3024'. [ 341.710016][T11065] netlink: 'syz.2.3026': attribute type 29 has an invalid length. [ 341.890966][T11069] netlink: 'syz.2.3026': attribute type 29 has an invalid length. [ 341.931427][T11072] netlink: 'syz.2.3026': attribute type 29 has an invalid length. [ 341.998943][T11074] netlink: 'syz.2.3026': attribute type 29 has an invalid length. [ 342.081352][T11079] netlink: 'syz.2.3026': attribute type 29 has an invalid length. [ 343.221876][T11107] netlink: 'syz.2.3043': attribute type 29 has an invalid length. [ 343.230010][T11107] netlink: 'syz.2.3043': attribute type 29 has an invalid length. [ 343.383709][T11112] netlink: 'syz.2.3043': attribute type 29 has an invalid length. [ 344.045127][T11123] device syzkaller0 entered promiscuous mode [ 344.061925][T11124] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3050'. [ 346.802177][T11153] validate_nla: 4 callbacks suppressed [ 346.802193][T11153] netlink: 'syz.0.3060': attribute type 29 has an invalid length. [ 346.953892][T11153] netlink: 'syz.0.3060': attribute type 29 has an invalid length. [ 347.043502][T11159] netlink: 'syz.0.3060': attribute type 29 has an invalid length. [ 347.130580][T11160] netlink: 'syz.0.3060': attribute type 29 has an invalid length. [ 347.172370][T11163] netlink: 'syz.0.3060': attribute type 29 has an invalid length. [ 347.210575][T11153] netlink: 'syz.0.3060': attribute type 29 has an invalid length. [ 347.220265][T11153] netlink: 'syz.0.3060': attribute type 29 has an invalid length. [ 347.528449][T11173] netlink: 'syz.0.3069': attribute type 5 has an invalid length. [ 347.918902][T11177] device syzkaller0 entered promiscuous mode [ 348.360345][T11197] netlink: 'syz.0.3080': attribute type 29 has an invalid length. [ 350.798028][T11197] netlink: 'syz.0.3080': attribute type 29 has an invalid length. [ 351.924190][T11236] validate_nla: 1 callbacks suppressed [ 351.924207][T11236] netlink: 'syz.4.3096': attribute type 21 has an invalid length. [ 352.130703][T11238] netlink: 'syz.1.3097': attribute type 5 has an invalid length. [ 352.881011][T11247] device syzkaller0 entered promiscuous mode [ 352.907926][T11262] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3106'. [ 355.268258][T11278] netlink: 'syz.4.3112': attribute type 5 has an invalid length. [ 355.285250][T11281] netlink: 'syz.2.3113': attribute type 21 has an invalid length. [ 357.556278][T11320] netlink: 'syz.0.3129': attribute type 21 has an invalid length. [ 357.934381][T11322] device syzkaller0 entered promiscuous mode [ 360.659721][T11336] device syzkaller0 entered promiscuous mode [ 360.693959][T11349] netlink: 'syz.0.3140': attribute type 10 has an invalid length. [ 360.722887][T11349] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3140'. [ 360.843994][T11349] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 363.840775][T11365] device bridge0 entered promiscuous mode [ 363.867949][T11369] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3147'. [ 363.962397][T11370] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.3148'. [ 364.654069][T11391] netlink: 'syz.4.3154': attribute type 10 has an invalid length. [ 364.735565][T11391] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3154'. [ 364.824346][T11391] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 365.366047][T11387] device syzkaller0 entered promiscuous mode [ 368.179516][T11407] netlink: 'syz.4.3160': attribute type 21 has an invalid length. [ 368.188743][T11409] device bridge0 left promiscuous mode [ 368.227314][T11412] device bridge0 entered promiscuous mode [ 368.252950][T11411] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.3162'. [ 368.478169][T11416] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3163'. [ 368.577963][T11424] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3163'. [ 368.652742][T11428] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3163'. [ 369.408879][T11442] netlink: 'syz.4.3171': attribute type 10 has an invalid length. [ 369.425818][T11442] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3171'. [ 369.508403][T11442] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 370.539869][T11461] sctp: [Deprecated]: syz.4.3176 (pid 11461) Use of int in maxseg socket option. [ 370.539869][T11461] Use struct sctp_assoc_value instead [ 370.627612][T11455] device syzkaller0 entered promiscuous mode [ 370.956523][T11466] bridge0: port 3(hsr0) entered blocking state [ 370.962841][T11466] bridge0: port 3(hsr0) entered forwarding state [ 370.969446][T11466] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.976624][T11466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.984032][T11466] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.991193][T11466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.035281][T11466] device bridge0 entered promiscuous mode [ 373.250382][ T948] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 373.280669][T11479] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3182'. [ 373.638787][T11488] netlink: 'syz.1.3186': attribute type 29 has an invalid length. [ 373.721350][T11488] netlink: 'syz.1.3186': attribute type 29 has an invalid length. [ 373.743285][T11493] netlink: 'syz.1.3186': attribute type 29 has an invalid length. [ 373.798864][T11495] netlink: 'syz.1.3186': attribute type 29 has an invalid length. [ 373.845501][T11488] netlink: 'syz.1.3186': attribute type 29 has an invalid length. [ 374.055589][T11497] netlink: 'syz.2.3188': attribute type 10 has an invalid length. [ 374.125288][T11497] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3188'. [ 374.681832][T11497] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 374.690069][T11512] sctp: [Deprecated]: syz.4.3192 (pid 11512) Use of int in maxseg socket option. [ 374.690069][T11512] Use struct sctp_assoc_value instead [ 374.814759][T11497] syz.2.3188 (11497) used greatest stack depth: 18168 bytes left [ 375.053701][T11531] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3194'. [ 375.162302][T11522] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3194'. [ 375.739547][T11542] netlink: 'syz.0.3200': attribute type 29 has an invalid length. [ 375.838552][T11542] netlink: 'syz.0.3200': attribute type 29 has an invalid length. [ 375.853620][T11545] netlink: 'syz.0.3200': attribute type 29 has an invalid length. [ 375.957506][T11542] netlink: 'syz.0.3200': attribute type 29 has an invalid length. [ 376.252729][T11552] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3204'. [ 376.338084][T11552] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 376.522325][T11558] sctp: [Deprecated]: syz.0.3206 (pid 11558) Use of int in maxseg socket option. [ 376.522325][T11558] Use struct sctp_assoc_value instead [ 377.127711][T11573] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3209'. [ 377.178752][T11569] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3209'. [ 378.143421][T11608] sctp: [Deprecated]: syz.2.3220 (pid 11608) Use of int in maxseg socket option. [ 378.143421][T11608] Use struct sctp_assoc_value instead [ 378.399619][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.406107][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.310005][T11599] validate_nla: 3 callbacks suppressed [ 381.310020][T11599] netlink: 'syz.3.3217': attribute type 29 has an invalid length. [ 381.356611][T11622] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3224'. [ 381.753704][T11639] netlink: 'syz.3.3229': attribute type 21 has an invalid length. [ 382.326396][T11663] netlink: 'syz.3.3240': attribute type 29 has an invalid length. [ 382.339072][T11664] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3239'. [ 382.375294][T11663] netlink: 'syz.3.3240': attribute type 29 has an invalid length. [ 382.396506][T11661] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3239'. [ 385.122373][T11665] netlink: 'syz.3.3240': attribute type 29 has an invalid length. [ 385.362004][T11688] netlink: 'syz.1.3246': attribute type 21 has an invalid length. [ 385.720666][T11703] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3251'. [ 385.761187][T11701] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3251'. [ 386.585851][T11721] netlink: 'syz.0.3260': attribute type 29 has an invalid length. [ 386.696267][T11723] netlink: 'syz.1.3261': attribute type 21 has an invalid length. [ 386.735298][T11721] netlink: 'syz.0.3260': attribute type 29 has an invalid length. [ 386.800770][T11724] netlink: 'syz.0.3260': attribute type 29 has an invalid length. [ 389.535116][T11725] netlink: 'syz.0.3260': attribute type 29 has an invalid length. [ 389.550788][T11745] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3267'. [ 390.989203][T11769] netlink: 'syz.4.3275': attribute type 21 has an invalid length. [ 391.496940][T11781] netlink: 'syz.2.3280': attribute type 29 has an invalid length. [ 391.520063][T11781] netlink: 'syz.2.3280': attribute type 29 has an invalid length. [ 391.572123][T11784] netlink: 'syz.2.3280': attribute type 29 has an invalid length. [ 391.593954][T11781] netlink: 'syz.2.3280': attribute type 29 has an invalid length. [ 391.608698][T11781] netlink: 'syz.2.3280': attribute type 29 has an invalid length. [ 392.019983][T11794] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3285'. [ 392.032210][T11792] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3285'. [ 395.413603][T11825] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3297'. [ 397.226629][T11866] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3312'. [ 397.413894][T11863] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3312'. [ 399.319425][T11903] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3327'. [ 399.391192][T11899] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3327'. [ 399.676022][T11908] netlink: 'syz.2.3330': attribute type 29 has an invalid length. [ 399.750325][T11908] netlink: 'syz.2.3330': attribute type 29 has an invalid length. [ 399.831922][T11912] netlink: 'syz.2.3330': attribute type 29 has an invalid length. [ 399.878148][T11913] netlink: 'syz.2.3330': attribute type 29 has an invalid length. [ 399.900466][T11908] netlink: 'syz.2.3330': attribute type 29 has an invalid length. [ 402.744495][T11941] netlink: 'syz.3.3341': attribute type 9 has an invalid length. [ 402.813693][T11941] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.3341'. [ 403.012574][T11948] netlink: 'syz.0.3344': attribute type 21 has an invalid length. [ 403.197367][T11948] netlink: 'syz.0.3344': attribute type 2 has an invalid length. [ 403.321856][T11948] netlink: 12374 bytes leftover after parsing attributes in process `syz.0.3344'. [ 403.476392][T11954] netlink: 'syz.2.3347': attribute type 29 has an invalid length. [ 403.581019][T11954] netlink: 'syz.2.3347': attribute type 29 has an invalid length. [ 404.846553][T11984] netlink: 7727 bytes leftover after parsing attributes in process `syz.1.3359'. [ 404.898145][T11982] validate_nla: 3 callbacks suppressed [ 404.898191][T11982] netlink: 'syz.4.3357': attribute type 10 has an invalid length. [ 405.016307][T11984] netlink: 7727 bytes leftover after parsing attributes in process `syz.1.3359'. [ 405.659983][T11993] netlink: 'syz.2.3362': attribute type 29 has an invalid length. [ 407.349728][T11985] netlink: 7727 bytes leftover after parsing attributes in process `syz.1.3359'. [ 407.367442][T11993] netlink: 'syz.2.3362': attribute type 29 has an invalid length. [ 408.329942][T12013] netlink: 'syz.2.3370': attribute type 10 has an invalid length. [ 408.868193][T12016] device pim6reg1 entered promiscuous mode [ 413.012074][T12061] netlink: 'syz.2.3385': attribute type 10 has an invalid length. [ 413.834497][T12080] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3392'. [ 413.858284][T12080] tc_dump_action: action bad kind [ 414.179642][T12093] device syzkaller0 entered promiscuous mode [ 417.181812][T12110] netlink: 'syz.4.3401': attribute type 10 has an invalid length. [ 417.458953][T12133] device veth0_vlan left promiscuous mode [ 417.608019][T12133] device veth0_vlan entered promiscuous mode [ 417.794212][ T948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 417.821794][ T948] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 417.841313][T12137] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3409'. [ 417.871630][T12137] tc_dump_action: action bad kind [ 418.591615][T12150] device syzkaller0 entered promiscuous mode [ 420.535170][T12157] netlink: 'syz.3.3418': attribute type 21 has an invalid length. [ 420.544557][T12157] netlink: 'syz.3.3418': attribute type 6 has an invalid length. [ 420.555914][T12157] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3418'. [ 420.945774][T12180] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3425'. [ 420.971653][T12180] tc_dump_action: action bad kind [ 421.431513][ T3636] Bluetooth: hci5: command 0x0406 tx timeout [ 423.634554][T12204] device syzkaller0 entered promiscuous mode [ 425.855555][T12215] device syzkaller0 entered promiscuous mode [ 425.967109][ T37] device hsr_slave_0 left promiscuous mode [ 425.975778][ T37] device hsr_slave_1 left promiscuous mode [ 425.983610][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 425.991759][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.001594][ T37] bridge0: port 5(hsr0) entered disabled state [ 426.021587][ T37] device veth0_to_bond left promiscuous mode [ 426.027728][ T37] bridge0: port 4(veth0_to_bond) entered disabled state [ 426.040041][ T37] device team0 left promiscuous mode [ 426.063563][ T37] device team_slave_0 left promiscuous mode [ 426.069790][ T37] device team_slave_1 left promiscuous mode [ 426.076593][ T37] device batadv0 left promiscuous mode [ 426.082629][ T37] bridge0: port 3(team0) entered disabled state [ 426.130324][ T37] device bridge_slave_1 left promiscuous mode [ 426.144258][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.157585][ T37] device bridge_slave_0 left promiscuous mode [ 426.173002][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.209437][ T37] device veth0_macvtap left promiscuous mode [ 426.215876][ T37] device veth1_vlan left promiscuous mode [ 426.223736][ T37] device veth0_vlan left promiscuous mode [ 426.494212][ T37] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 426.526152][ T37] team0 (unregistering): Port device team_slave_1 removed [ 426.552521][ T37] team0 (unregistering): Port device team_slave_0 removed [ 426.578860][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 426.606393][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 426.719822][ T37] team0 (unregistering): Port device batadv0 removed [ 426.874142][ T37] bond0 (unregistering): Released all slaves [ 427.869484][T12226] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3440'. [ 427.878622][T12226] tc_dump_action: action bad kind [ 427.895636][T12259] tap0: tun_chr_ioctl cmd 1074025677 [ 427.920752][T12259] tap0: linktype set to 805 [ 429.262035][T12279] device syzkaller0 entered promiscuous mode [ 432.728208][T12297] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3464'. [ 432.737360][T12297] tc_dump_action: action bad kind [ 432.802446][T12298] device syzkaller0 entered promiscuous mode [ 434.639517][T12333] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3477'. [ 434.825066][T12336] device syzkaller0 entered promiscuous mode [ 434.851195][T12341] netlink: 'syz.2.3480': attribute type 21 has an invalid length. [ 434.866152][T12341] netlink: 'syz.2.3480': attribute type 5 has an invalid length. [ 437.099797][T12347] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3481'. [ 437.134566][T12347] tc_dump_action: action bad kind [ 437.614329][T12361] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3489'. [ 437.826230][T12365] device syzkaller0 entered promiscuous mode [ 437.858130][T12367] netlink: 'syz.2.3492': attribute type 21 has an invalid length. [ 437.870526][T12367] netlink: 'syz.2.3492': attribute type 5 has an invalid length. [ 439.840133][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.846499][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.966630][T12400] netlink: 180 bytes leftover after parsing attributes in process `syz.4.3505'. [ 440.089694][T12405] netlink: 'syz.0.3506': attribute type 21 has an invalid length. [ 440.216172][T12405] netlink: 'syz.0.3506': attribute type 5 has an invalid length. [ 441.418229][T12421] netlink: 'syz.4.3516': attribute type 29 has an invalid length. [ 441.543675][T12421] netlink: 'syz.4.3516': attribute type 29 has an invalid length. [ 441.602779][T12427] netlink: 'syz.4.3516': attribute type 29 has an invalid length. [ 441.642052][T12421] netlink: 'syz.4.3516': attribute type 29 has an invalid length. [ 441.979828][T12431] device syzkaller0 entered promiscuous mode [ 441.992745][T12433] netlink: 180 bytes leftover after parsing attributes in process `syz.4.3520'. [ 442.025701][T12436] netlink: 'syz.1.3521': attribute type 21 has an invalid length. [ 442.048250][T12436] netlink: 'syz.1.3521': attribute type 5 has an invalid length. [ 443.435651][T12458] netlink: 'syz.0.3530': attribute type 29 has an invalid length. [ 443.865805][ T3636] Bluetooth: hci4: unexpected event 0x32 length: 15 > 9 [ 444.313230][T12458] netlink: 'syz.0.3530': attribute type 29 has an invalid length. [ 444.492742][T12471] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3535'. [ 444.523712][T12471] device bond0 entered promiscuous mode [ 444.529297][T12471] device bond_slave_0 entered promiscuous mode [ 444.568118][T12471] device bond_slave_1 entered promiscuous mode [ 444.577930][T12471] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 445.389218][T12498] validate_nla: 1 callbacks suppressed [ 445.389234][T12498] netlink: 'syz.4.3547': attribute type 29 has an invalid length. [ 445.402955][T12498] netlink: 'syz.4.3547': attribute type 29 has an invalid length. [ 445.510737][T12498] netlink: 'syz.4.3547': attribute type 29 has an invalid length. [ 445.557741][T12498] netlink: 'syz.4.3547': attribute type 29 has an invalid length. [ 445.964912][T12512] netlink: 'syz.0.3553': attribute type 10 has an invalid length. [ 446.038434][T12512] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3553'. [ 446.067014][T12512] device bond0 entered promiscuous mode [ 446.097762][T12512] device bond_slave_0 entered promiscuous mode [ 446.127082][T12512] device bond_slave_1 entered promiscuous mode [ 446.150291][T12512] device batadv_slave_0 entered promiscuous mode [ 446.179439][T12512] bridge0: port 4(bond0) entered blocking state [ 446.205566][T12512] bridge0: port 4(bond0) entered disabled state [ 446.235443][T12512] bridge0: port 4(bond0) entered blocking state [ 446.241862][T12512] bridge0: port 4(bond0) entered forwarding state [ 446.295875][T12513] Y4`Ҙ: renamed from lo [ 447.526062][T12534] netlink: 'syz.4.3563': attribute type 29 has an invalid length. [ 447.653427][T12534] netlink: 'syz.4.3563': attribute type 29 has an invalid length. [ 447.691038][T12537] netlink: 'syz.4.3563': attribute type 29 has an invalid length. [ 447.722962][T12534] netlink: 'syz.4.3563': attribute type 29 has an invalid length. [ 448.018013][T12545] Y4`Ҙ: renamed from lo [ 448.166256][T12550] netlink: 'syz.0.3570': attribute type 10 has an invalid length. [ 448.229322][T12550] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3570'. [ 451.005865][T12603] Y4`Ҙ: renamed from lo [ 451.349267][T12612] netlink: 'syz.1.3597': attribute type 10 has an invalid length. [ 451.438149][T12612] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3597'. [ 451.495278][T12612] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 453.897917][T12680] netlink: 'syz.3.3622': attribute type 29 has an invalid length. [ 453.977767][T12680] netlink: 'syz.3.3622': attribute type 29 has an invalid length. [ 454.462537][T12705] netlink: 'syz.3.3632': attribute type 29 has an invalid length. [ 454.514948][T12705] netlink: 'syz.3.3632': attribute type 29 has an invalid length. [ 454.574246][T12707] netlink: 'syz.3.3632': attribute type 29 has an invalid length. [ 454.630918][T12710] netlink: 'syz.3.3632': attribute type 29 has an invalid length. [ 455.298036][T12722] netlink: 'syz.4.3638': attribute type 29 has an invalid length. [ 455.316091][T12722] netlink: 'syz.4.3638': attribute type 29 has an invalid length. [ 456.744696][T12761] netlink: 'syz.4.3654': attribute type 29 has an invalid length. [ 456.770813][T12761] netlink: 'syz.4.3654': attribute type 29 has an invalid length. [ 457.012084][T12770] netlink: 'syz.4.3658': attribute type 29 has an invalid length. [ 457.017925][T12764] GPL: port 1(team0) entered blocking state [ 457.047338][T12764] GPL: port 1(team0) entered disabled state [ 457.069928][T12764] device team0 entered promiscuous mode [ 457.084501][T12764] device team_slave_0 entered promiscuous mode [ 457.105299][T12764] device team_slave_1 entered promiscuous mode [ 457.189126][T12770] netlink: 'syz.4.3658': attribute type 29 has an invalid length. [ 457.249422][T12781] netlink: 'syz.4.3658': attribute type 29 has an invalid length. [ 457.274130][T12770] netlink: 'syz.4.3658': attribute type 29 has an invalid length. [ 457.313247][T12776] netlink: 'syz.4.3658': attribute type 29 has an invalid length. [ 457.328645][T12773] netlink: 'syz.4.3658': attribute type 29 has an invalid length. [ 457.379378][T12775] netlink: 'syz.4.3658': attribute type 29 has an invalid length. [ 458.106922][T12803] netlink: 'syz.2.3670': attribute type 29 has an invalid length. [ 458.373795][T12812] GPL: port 1(team0) entered blocking state [ 458.400216][T12812] GPL: port 1(team0) entered disabled state [ 458.424617][T12812] device team0 entered promiscuous mode [ 458.466818][T12812] device team_slave_0 entered promiscuous mode [ 458.477747][T12812] device team_slave_1 entered promiscuous mode [ 458.494920][T12812] device batadv0 entered promiscuous mode [ 458.803882][ T37] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 458.813483][ T37] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 458.877192][T12822] device syzkaller0 entered promiscuous mode [ 460.571953][T12844] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 460.583711][T12844] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 460.592143][T12844] CPU: 0 PID: 12844 Comm: syz.4.3687 Not tainted 6.1.102-syzkaller #0 [ 460.600315][T12844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 460.610389][T12844] RIP: 0010:bq_flush_to_queue+0x44/0x600 [ 460.616039][T12844] Code: df e8 90 cd de ff 49 8d 5e 50 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 66 55 36 00 48 8b 2b 48 89 e8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 0f 85 19 05 00 00 44 8b 65 00 4d 8d 6e 58 4c [ 460.635654][T12844] RSP: 0018:ffffc9000311f6b8 EFLAGS: 00010246 [ 460.641728][T12844] RAX: 0000000000000000 RBX: ffff8880b9800050 RCX: 0000000000040000 [ 460.649692][T12844] RDX: ffffc90005802000 RSI: 0000000000000178 RDI: 0000000000000179 [ 460.657656][T12844] RBP: 0000000000000000 R08: ffffffff81abccd2 R09: fffffbfff1d337ae [ 460.665630][T12844] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 460.673603][T12844] R13: 00000000ffffffff R14: ffff8880b9800000 R15: dffffc0000000000 [ 460.681569][T12844] FS: 00007f52f65ae6c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 460.690516][T12844] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 460.697105][T12844] CR2: 000000110c3237ff CR3: 000000004ce71000 CR4: 00000000003506f0 [ 460.705072][T12844] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 460.713036][T12844] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 460.721000][T12844] Call Trace: [ 460.724270][T12844] [ 460.727194][T12844] ? __die_body+0x5e/0xa0 [ 460.731528][T12844] ? die_addr+0x95/0xc0 [ 460.735680][T12844] ? exc_general_protection+0x3ae/0x590 [ 460.741232][T12844] ? asm_exc_general_protection+0x22/0x30 [ 460.746950][T12844] ? __cpu_map_flush+0x22/0x130 [ 460.751799][T12844] ? bq_flush_to_queue+0x44/0x600 [ 460.756817][T12844] ? bq_flush_to_queue+0x20/0x600 [ 460.761832][T12844] ? trace_xdp_redirect+0xc3/0x2d0 [ 460.766944][T12844] __cpu_map_flush+0xa5/0x130 [ 460.771626][T12844] xdp_do_flush+0xf/0x20 [ 460.775861][T12844] bpf_test_run_xdp_live+0x1650/0x1ea0 [ 460.781315][T12844] ? stack_trace_save+0x113/0x1c0 [ 460.786348][T12844] ? __lock_acquire+0x125b/0x1f80 [ 460.791370][T12844] ? bpf_test_run_xdp_live+0x75c/0x1ea0 [ 460.796910][T12844] ? xdp_convert_md_to_buff+0x330/0x330 [ 460.802455][T12844] ? __might_fault+0xa1/0x110 [ 460.807213][T12844] ? __might_sleep+0xb0/0xb0 [ 460.811797][T12844] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 460.818038][T12844] ? __might_fault+0xa1/0x110 [ 460.822710][T12844] ? __might_fault+0xbd/0x110 [ 460.827381][T12844] ? _copy_from_user+0x109/0x170 [ 460.832309][T12844] ? bpf_test_init+0x15a/0x180 [ 460.837068][T12844] ? xdp_convert_md_to_buff+0x5b/0x330 [ 460.842521][T12844] bpf_prog_test_run_xdp+0x7d1/0x1130 [ 460.847910][T12844] ? dev_put+0x80/0x80 [ 460.851987][T12844] ? dev_put+0x80/0x80 [ 460.856054][T12844] bpf_prog_test_run+0x32f/0x3a0 [ 460.861008][T12844] __sys_bpf+0x3eb/0x6c0 [ 460.865260][T12844] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 460.870653][T12844] ? print_irqtrace_events+0x210/0x210 [ 460.876114][T12844] ? print_irqtrace_events+0x210/0x210 [ 460.881579][T12844] ? syscall_enter_from_user_mode+0x2e/0x230 [ 460.887581][T12844] ? lockdep_hardirqs_on+0x94/0x130 [ 460.892782][T12844] __x64_sys_bpf+0x78/0x90 [ 460.897196][T12844] do_syscall_64+0x3b/0xb0 [ 460.901608][T12844] ? clear_bhb_loop+0x45/0xa0 [ 460.906280][T12844] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 460.912185][T12844] RIP: 0033:0x7f52f5777299 [ 460.916601][T12844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.936203][T12844] RSP: 002b:00007f52f65ae048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 460.944610][T12844] RAX: ffffffffffffffda RBX: 00007f52f5905f80 RCX: 00007f52f5777299 [ 460.952577][T12844] RDX: 0000000000000050 RSI: 0000000020000240 RDI: 000000000000000a [ 460.960536][T12844] RBP: 00007f52f57e48e6 R08: 0000000000000000 R09: 0000000000000000 [ 460.968498][T12844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 460.976546][T12844] R13: 000000000000000b R14: 00007f52f5905f80 R15: 00007ffd706ddec8 [ 460.984514][T12844] [ 460.987522][T12844] Modules linked in: [ 460.991494][T12844] ---[ end trace 0000000000000000 ]--- [ 460.996960][T12844] RIP: 0010:bq_flush_to_queue+0x44/0x600 [ 461.002648][T12844] Code: df e8 90 cd de ff 49 8d 5e 50 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 66 55 36 00 48 8b 2b 48 89 e8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 0f 85 19 05 00 00 44 8b 65 00 4d 8d 6e 58 4c [ 461.022295][T12844] RSP: 0018:ffffc9000311f6b8 EFLAGS: 00010246 [ 461.028373][T12844] RAX: 0000000000000000 RBX: ffff8880b9800050 RCX: 0000000000040000 [ 461.036392][T12844] RDX: ffffc90005802000 RSI: 0000000000000178 RDI: 0000000000000179 [ 461.044502][T12844] RBP: 0000000000000000 R08: ffffffff81abccd2 R09: fffffbfff1d337ae [ 461.052526][T12844] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 461.060621][T12844] R13: 00000000ffffffff R14: ffff8880b9800000 R15: dffffc0000000000 [ 461.068605][T12844] FS: 00007f52f65ae6c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 461.077581][T12844] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 461.084218][T12844] CR2: 000000110c3237ff CR3: 000000004ce71000 CR4: 00000000003506f0 [ 461.092243][T12844] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 461.100228][T12844] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 461.108257][T12844] Kernel panic - not syncing: Fatal exception in interrupt [ 461.115688][T12844] Kernel Offset: disabled [ 461.120002][T12844] Rebooting in 86400 seconds..