last executing test programs: 11m32.951001584s ago: executing program 2 (id=69): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0xfffffffffffffdf5, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x81ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x38) 11m32.811774438s ago: executing program 2 (id=70): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x34) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 11m32.7311827s ago: executing program 2 (id=71): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1804000000000000000000000000000040183cf900000000"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x8f, &(0x7f0000000200)=""/143, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000004c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000004, 0x0, @perf_bp={0x0, 0x8}, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c000000"], 0x0, 0x26}, 0x28) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000500)=ANY=[@ANYBLOB="0900000016000000b40000007f"], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000004000000020000000000001103000000ffffffff000000000100000d010000000000000001000000020000000000000802000000000061"], 0x0, 0x4c}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="7a0af8ff75257075bfa100000000000007010000f9ffffffb702000005000000bf130000000000008500000006000000b7000000000000009500000000000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b257183fa3bcd48666d1ddd73f3047d248df061222193165274bc7f2382f6cda4bfdd45be583823c0f09601f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000000db453620ce7243d1aebd00000000000000005839c77edf2d34b12cd48a0c20fb7dd843267e0331759f4ec6b5b0af58e604f4942eb613eff289026d5045ef76d7d864409eb2dcc718a09f4886afc26abba34635d0e8b54bc76be40d435aa8b5202db761014b1b999a12df6bee431a666100"/296], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x2800000002000000, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x7300, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000000001000000"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xe0}, 0x100) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x0, 0x32, 0x0, 0x4, 0x3ff}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89a0, &(0x7f0000000080)) 11m29.257535328s ago: executing program 2 (id=74): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x818, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) getpid() 11m25.922348112s ago: executing program 2 (id=79): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000004b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000200)=r4) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 11m20.439942116s ago: executing program 2 (id=82): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x42124, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0xb5, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x8, 0xfffffffffffffffe, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) close(0xffffffffffffffff) close(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000340)='8\']:#:*+\'-,!^]{*-{#)!&\x00') ioctl$TUNGETVNETLE(r4, 0x8004745a, &(0x7f0000000180)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 11m5.287602052s ago: executing program 32 (id=82): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x42124, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0xb5, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x8, 0xfffffffffffffffe, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) close(0xffffffffffffffff) close(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000340)='8\']:#:*+\'-,!^]{*-{#)!&\x00') ioctl$TUNGETVNETLE(r4, 0x8004745a, &(0x7f0000000180)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 8.929101684s ago: executing program 0 (id=2311): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4002}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) 8.752567269s ago: executing program 0 (id=2315): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)="8bcd", 0x2}, {&(0x7f00000006c0)="4680230606b81ccd3f20eee72dd249c039690e1c1a2e", 0x16}], 0x2, 0x0, 0x0, 0x900}, 0x60) 8.615258322s ago: executing program 0 (id=2319): bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x5, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x62, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) 8.504541925s ago: executing program 0 (id=2322): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d000000040000"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000980)={&(0x7f0000000640)="37f8fab523830a811975889c1d6a29aee48a3981cc8ec694d91b628981550dff13b1dda2c92ca58f8b45fbe6c203a4b117767c0284a665e4908daeec887d5a912fa53763548d450de8dd72ebbe98b8bc43e9cd82a9a9cba69d2d179a4f2fb36a8d180cef920a92bd69b2ee15639ca47000dc9fc14c72e40842a4e2f1c765ab4fa248dc552b0f00bb60c0cc555bc3", 0x0, 0x0, &(0x7f0000000880), 0xb}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x2, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 8.35662988s ago: executing program 0 (id=2325): r0 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848350000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x20008800) 8.064492878s ago: executing program 0 (id=2332): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0), 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 1.948489286s ago: executing program 1 (id=2434): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f088a84ce0003000002000008877fbac141416e000030a89079f03b180ff83080520e0845013f2325f004408050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) 1.824037229s ago: executing program 1 (id=2437): r0 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x20008800) 1.572556577s ago: executing program 1 (id=2440): r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) 1.44536967s ago: executing program 1 (id=2442): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000d00000000009500a500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0xe0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001180)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 1.308554134s ago: executing program 3 (id=2443): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000240)="27050200340f14000600002fb96dbcf706060000170000005f45f491bdd54ec5ff1144ee162fd4b8bf7256da82f600102c21880b00000000010040570000000600000000000000805db1", 0x4a}, {&(0x7f00000004c0)="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", 0xf0d}, {&(0x7f0000002440)='i\\\'i', 0x4}], 0x3}, 0x4000) 1.257677056s ago: executing program 1 (id=2444): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000001280), 0x4) sendmsg$unix(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000140)="33f3", 0x2}], 0x1, 0x0, 0x0, 0x841}, 0x2005) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2002) 1.252929885s ago: executing program 4 (id=2445): bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x5, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x62, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) 1.07263837s ago: executing program 3 (id=2446): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 949.547484ms ago: executing program 4 (id=2447): r0 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)}, 0x20008800) 848.866257ms ago: executing program 3 (id=2448): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 664.577922ms ago: executing program 4 (id=2449): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="0200000004000000060000000500"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 620.919673ms ago: executing program 3 (id=2450): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="8510000004000000950080000000000018000000000000000000000000000002950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 537.670216ms ago: executing program 4 (id=2451): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000d00000000009500a500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0xe0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001180)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 332.187381ms ago: executing program 3 (id=2452): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf8, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0x1}, 0x800, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x3) 312.658432ms ago: executing program 4 (id=2453): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000010) 234.237954ms ago: executing program 1 (id=2454): bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x5, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x62, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) 125.587927ms ago: executing program 4 (id=2455): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000340)=@framed={{0x18, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xdc0, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 0s ago: executing program 3 (id=2456): r0 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)}, 0x20008800) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.126' (ED25519) to the list of known hosts. [ 350.285701][ T5802] cgroup: Unknown subsys name 'net' [ 350.449942][ T5802] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 352.209602][ T5802] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 353.839502][ T5817] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 353.848215][ T5817] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 353.856140][ T5817] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 353.875372][ T5825] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 353.884089][ T5825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 353.902329][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 353.909840][ T5823] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 353.918678][ T5829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 353.919732][ T5823] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 353.934058][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 353.936217][ T5823] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 353.949939][ T5823] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 353.957456][ T5825] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 353.965872][ T5823] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 353.973959][ T5823] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 353.981163][ T5825] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 353.991797][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 354.007262][ T5825] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 354.016950][ T5825] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 354.017724][ T5826] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 354.033450][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 354.041172][ T5825] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 354.041490][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 354.055782][ T5826] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 354.597791][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 354.635621][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 354.657751][ T5813] chnl_net:caif_netlink_parms(): no params data found [ 354.742142][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 354.919872][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.927497][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.935732][ T5819] bridge_slave_0: entered allmulticast mode [ 354.943742][ T5819] bridge_slave_0: entered promiscuous mode [ 354.955011][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.962349][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.969570][ T5816] bridge_slave_0: entered allmulticast mode [ 354.978226][ T5816] bridge_slave_0: entered promiscuous mode [ 354.986529][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.994621][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.002241][ T5813] bridge_slave_0: entered allmulticast mode [ 355.009379][ T5813] bridge_slave_0: entered promiscuous mode [ 355.017879][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.025310][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.032909][ T5813] bridge_slave_1: entered allmulticast mode [ 355.040191][ T5813] bridge_slave_1: entered promiscuous mode [ 355.067691][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.075545][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.082946][ T5819] bridge_slave_1: entered allmulticast mode [ 355.090405][ T5819] bridge_slave_1: entered promiscuous mode [ 355.097451][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.106391][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.115428][ T5816] bridge_slave_1: entered allmulticast mode [ 355.123672][ T5816] bridge_slave_1: entered promiscuous mode [ 355.149837][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.157329][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.164723][ T5820] bridge_slave_0: entered allmulticast mode [ 355.172666][ T5820] bridge_slave_0: entered promiscuous mode [ 355.210147][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.217644][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.225001][ T5820] bridge_slave_1: entered allmulticast mode [ 355.232657][ T5820] bridge_slave_1: entered promiscuous mode [ 355.255808][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.267989][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.289744][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.303611][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.315096][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.349552][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.361269][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.396372][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.432305][ T5813] team0: Port device team_slave_0 added [ 355.442057][ T5816] team0: Port device team_slave_0 added [ 355.472465][ T5813] team0: Port device team_slave_1 added [ 355.482381][ T5819] team0: Port device team_slave_0 added [ 355.491818][ T5816] team0: Port device team_slave_1 added [ 355.520370][ T5819] team0: Port device team_slave_1 added [ 355.550190][ T5820] team0: Port device team_slave_0 added [ 355.558918][ T5820] team0: Port device team_slave_1 added [ 355.630054][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.637334][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.664631][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.677560][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.684999][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.711787][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.725208][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.732565][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.758948][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.771768][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.778752][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.805465][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.819344][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.827068][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.853567][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.865835][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.873612][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.899916][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.913086][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.920115][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.946248][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.958406][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.965515][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.992259][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.052190][ T51] Bluetooth: hci1: command tx timeout [ 356.071409][ T5820] hsr_slave_0: entered promiscuous mode [ 356.078701][ T5820] hsr_slave_1: entered promiscuous mode [ 356.131213][ T5084] Bluetooth: hci2: command tx timeout [ 356.137142][ T5821] Bluetooth: hci3: command tx timeout [ 356.143539][ T51] Bluetooth: hci0: command tx timeout [ 356.162391][ T5813] hsr_slave_0: entered promiscuous mode [ 356.169952][ T5813] hsr_slave_1: entered promiscuous mode [ 356.176516][ T5813] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 356.184501][ T5813] Cannot create hsr debugfs directory [ 356.196238][ T5816] hsr_slave_0: entered promiscuous mode [ 356.206137][ T5816] hsr_slave_1: entered promiscuous mode [ 356.212814][ T5816] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 356.220426][ T5816] Cannot create hsr debugfs directory [ 356.245917][ T5819] hsr_slave_0: entered promiscuous mode [ 356.252583][ T5819] hsr_slave_1: entered promiscuous mode [ 356.258933][ T5819] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 356.267972][ T5819] Cannot create hsr debugfs directory [ 356.757206][ T5813] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 356.778332][ T5813] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 356.796073][ T5813] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 356.806362][ T5813] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 356.898789][ T5820] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 356.922811][ T5820] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 356.940079][ T5820] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 356.961758][ T5820] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 357.066700][ T5816] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 357.088671][ T5816] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 357.099915][ T5816] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 357.115439][ T5816] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 357.134293][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.189807][ T5819] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 357.211834][ T5819] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 357.222739][ T5819] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 357.246714][ T5819] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 357.276045][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.304546][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.325503][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.332987][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.369598][ T2995] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.376804][ T2995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.452949][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.492696][ T2995] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.499893][ T2995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.570595][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.577854][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.614823][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.704027][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.730042][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.777179][ T5820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 357.806516][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.813769][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.829052][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.836240][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.850056][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.877560][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.884787][ T5858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.939720][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.946983][ T5858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.006347][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.133098][ T5821] Bluetooth: hci1: command tx timeout [ 358.164562][ T5819] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 358.212646][ T5821] Bluetooth: hci3: command tx timeout [ 358.218166][ T5821] Bluetooth: hci0: command tx timeout [ 358.226622][ T51] Bluetooth: hci2: command tx timeout [ 358.240177][ T5813] veth0_vlan: entered promiscuous mode [ 358.284468][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.320526][ T5813] veth1_vlan: entered promiscuous mode [ 358.449288][ T5820] veth0_vlan: entered promiscuous mode [ 358.501920][ T5820] veth1_vlan: entered promiscuous mode [ 358.545437][ T5813] veth0_macvtap: entered promiscuous mode [ 358.586000][ T5813] veth1_macvtap: entered promiscuous mode [ 358.617904][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.633830][ T5820] veth0_macvtap: entered promiscuous mode [ 358.646357][ T5820] veth1_macvtap: entered promiscuous mode [ 358.663478][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.691952][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.702862][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.719785][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.730576][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.747701][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.759629][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.772674][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.783755][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.798340][ T5813] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.808049][ T5813] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.817438][ T5813] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.826487][ T5813] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.850802][ T5820] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.860779][ T5820] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.872205][ T5820] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.881300][ T5820] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.036652][ T5819] veth0_vlan: entered promiscuous mode [ 359.043000][ T5816] veth0_vlan: entered promiscuous mode [ 359.109315][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.125261][ T5816] veth1_vlan: entered promiscuous mode [ 359.131039][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.168983][ T5819] veth1_vlan: entered promiscuous mode [ 359.200675][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.215920][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.268065][ T5858] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.291627][ T5858] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.301890][ T5819] veth0_macvtap: entered promiscuous mode [ 359.324440][ T5819] veth1_macvtap: entered promiscuous mode [ 359.370461][ T2936] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.396783][ T5816] veth0_macvtap: entered promiscuous mode [ 359.407615][ T2936] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.435691][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.448622][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.459694][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.470692][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.498187][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.519133][ T5816] veth1_macvtap: entered promiscuous mode [ 359.537352][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.555898][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.566301][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.590262][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.612922][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 359.694062][ T5819] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.719549][ T5819] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.729846][ T5819] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.740529][ T5819] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.758068][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.782906][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.783275][ C0] hrtimer: interrupt took 89677 ns [ 359.799858][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.816913][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.829965][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.847055][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.859333][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.923722][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.940031][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.950714][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.976261][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.989416][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.006661][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.020557][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.034101][ T5886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 360.213511][ T51] Bluetooth: hci1: command tx timeout [ 360.236729][ T5887] netlink: 'syz.1.2': attribute type 21 has an invalid length. [ 360.285333][ T5816] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.294159][ T51] Bluetooth: hci2: command tx timeout [ 360.294216][ T51] Bluetooth: hci0: command tx timeout [ 360.294258][ T51] Bluetooth: hci3: command tx timeout [ 360.316260][ T5816] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.326809][ T5816] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.336020][ T5816] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.495968][ T5868] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.512237][ T5868] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.585733][ T5844] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.593905][ T5844] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.625510][ T5868] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.648237][ T5868] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.765242][ T5868] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.787467][ T5868] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.807625][ T5896] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 361.852744][ T5896] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 362.292294][ T5084] Bluetooth: hci1: command tx timeout [ 362.375392][ T5084] Bluetooth: hci3: command tx timeout [ 362.381371][ T5084] Bluetooth: hci0: command tx timeout [ 362.386827][ T5084] Bluetooth: hci2: command tx timeout [ 362.581050][ T5924] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 362.588126][ T5924] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 363.866349][ T5932] warning: `syz.0.14' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 367.635586][ T5953] wg2: entered promiscuous mode [ 367.660412][ T5953] wg2: entered allmulticast mode [ 369.065918][ T5966] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.093592][ T5973] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 369.825715][ T5987] wg2: entered promiscuous mode [ 369.830668][ T5987] wg2: entered allmulticast mode [ 369.930008][ T5989] Driver unsupported XDP return value 0 on prog (id 32) dev N/A, expect packet loss! [ 371.799244][ T6004] syz.2.39 (6004) used obsolete PPPIOCDETACH ioctl [ 374.447585][ T6020] syzkaller0: entered promiscuous mode [ 374.455424][ T6020] syzkaller0: entered allmulticast mode [ 374.526207][ T6019] syzkaller0: entered promiscuous mode [ 374.532820][ T6019] syzkaller0: entered allmulticast mode [ 379.061159][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.068018][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.391036][ T6077] syzkaller0: entered promiscuous mode [ 384.398749][ T6077] syzkaller0: entered allmulticast mode [ 387.557645][ T6091] syzkaller0: entered promiscuous mode [ 387.563413][ T6091] syzkaller0: entered allmulticast mode [ 389.541486][ T6117] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.549393][ T6117] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.560570][ T6117] bridge0: entered allmulticast mode [ 389.607343][ T6115] bridge_slave_1: left allmulticast mode [ 389.638416][ T6115] bridge_slave_1: left promiscuous mode [ 389.705409][ T6115] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.139247][ T6115] bridge_slave_0: left allmulticast mode [ 390.171879][ T6115] bridge_slave_0: left promiscuous mode [ 390.218057][ T6115] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.230570][ T6142] syzkaller0: entered promiscuous mode [ 392.257560][ T6142] syzkaller0: entered allmulticast mode [ 396.626321][ T6151] syzkaller0: entered promiscuous mode [ 396.641401][ T6151] syzkaller0: entered allmulticast mode [ 396.800483][ T6159] syzkaller0: entered promiscuous mode [ 396.806184][ T6159] syzkaller0: entered allmulticast mode [ 400.463507][ T6171] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 405.730325][ T6206] syzkaller0: entered promiscuous mode [ 405.742154][ T6206] syzkaller0: entered allmulticast mode [ 414.527017][ T6248] wg2: left promiscuous mode [ 414.532004][ T6248] wg2: left allmulticast mode [ 414.556219][ T6249] wg2: entered promiscuous mode [ 414.568665][ T6249] wg2: entered allmulticast mode [ 416.924431][ T5821] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 416.934241][ T5821] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 416.942423][ T5821] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 416.950919][ T5821] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 416.965072][ T5821] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 416.994547][ T5821] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 418.319682][ T6265] chnl_net:caif_netlink_parms(): no params data found [ 418.813580][ T6265] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.820944][ T6265] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.828229][ T6265] bridge_slave_0: entered allmulticast mode [ 418.835849][ T6265] bridge_slave_0: entered promiscuous mode [ 418.849004][ T6265] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.858918][ T6265] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.866908][ T6265] bridge_slave_1: entered allmulticast mode [ 418.875948][ T6265] bridge_slave_1: entered promiscuous mode [ 418.975845][ T6265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.008343][ T6265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.018026][ T5821] Bluetooth: hci4: command tx timeout [ 419.115848][ T6265] team0: Port device team_slave_0 added [ 419.154072][ T6265] team0: Port device team_slave_1 added [ 419.286626][ T6265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.300964][ T6265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.328235][ T6265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.395481][ T6265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.477061][ T6265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.504568][ T6265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.848876][ T6265] hsr_slave_0: entered promiscuous mode [ 419.873555][ T6265] hsr_slave_1: entered promiscuous mode [ 419.880644][ T6265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 419.902430][ T6265] Cannot create hsr debugfs directory [ 420.548312][ T6265] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 420.956211][ T6324] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.978266][ T6265] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 421.003713][ T6265] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 421.072640][ T6265] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 421.090961][ T5821] Bluetooth: hci4: command tx timeout [ 421.295460][ T6265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.324633][ T6265] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.354903][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.363009][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.409213][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.416591][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.028121][ T6265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.171078][ T5821] Bluetooth: hci4: command tx timeout [ 425.251129][ T5821] Bluetooth: hci4: command tx timeout [ 425.442087][ T6265] veth0_vlan: entered promiscuous mode [ 425.487936][ T6265] veth1_vlan: entered promiscuous mode [ 425.601425][ T6265] veth0_macvtap: entered promiscuous mode [ 425.621864][ T6265] veth1_macvtap: entered promiscuous mode [ 425.699385][ T6265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.731059][ T6265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.760874][ T6265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.793633][ T6265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.824704][ T6265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.844226][ T6265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.855720][ T6265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.873771][ T6265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.906060][ T6265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 425.935920][ T6265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.980897][ T6265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.002826][ T6265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.022586][ T6265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.062488][ T6265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.096752][ T6265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.127399][ T6265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.156306][ T6265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.182857][ T6265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.232392][ T6265] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.243085][ T6265] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.252468][ T6265] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.261732][ T6265] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.533630][ T5868] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.560901][ T5868] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.670680][ T2936] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.703715][ T2936] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.985186][ T6394] syzkaller0: entered promiscuous mode [ 426.995486][ T6394] syzkaller0: entered allmulticast mode [ 435.476422][ T2936] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.665571][ T2936] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.848199][ T2936] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.327974][ T2936] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.364645][ T6481] netlink: 132 bytes leftover after parsing attributes in process `syz.0.195'. [ 440.377051][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.388675][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.067234][ T6551] syzkaller0: entered promiscuous mode [ 441.140025][ T6551] syzkaller0: entered allmulticast mode [ 441.314693][ T6574] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.225'. [ 443.736793][ T6574] netlink: 22828 bytes leftover after parsing attributes in process `syz.0.225'. [ 443.746476][ T6601] netlink: 'syz.1.233': attribute type 2 has an invalid length. [ 443.754943][ T6601] netlink: 'syz.1.233': attribute type 8 has an invalid length. [ 443.768848][ T6601] netlink: 132 bytes leftover after parsing attributes in process `syz.1.233'. [ 443.812901][ T6611] netlink: 'syz.3.237': attribute type 4 has an invalid length. [ 444.231241][ T6622] Zero length message leads to an empty skb [ 445.632571][ T6655] delete_channel: no stack [ 449.844548][ T2936] hsr_slave_0: left promiscuous mode [ 449.891719][ T2936] hsr_slave_1: left promiscuous mode [ 449.911908][ T2936] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.919475][ T2936] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 449.988519][ T2936] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 450.010908][ T2936] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 450.058596][ T2936] bridge_slave_1: left allmulticast mode [ 450.078771][ T2936] bridge_slave_1: left promiscuous mode [ 450.098869][ T2936] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.121326][ T2936] bridge_slave_0: left promiscuous mode [ 450.127175][ T2936] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.176774][ T2936] veth1_macvtap: left promiscuous mode [ 450.183038][ T2936] veth0_macvtap: left promiscuous mode [ 450.188802][ T2936] veth1_vlan: left promiscuous mode [ 450.205541][ T2936] veth0_vlan: left promiscuous mode [ 453.850622][ T2936] team0 (unregistering): Port device team_slave_1 removed [ 453.897075][ T2936] team0 (unregistering): Port device team_slave_0 removed [ 453.940600][ T2936] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 453.995367][ T2936] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 454.336412][ T2936] bond0 (unregistering): Released all slaves [ 454.483950][ T6742] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.279'. [ 454.806931][ T6753] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 455.066363][ T6756] netlink: 'syz.3.284': attribute type 21 has an invalid length. [ 455.084287][ T6756] netlink: 132 bytes leftover after parsing attributes in process `syz.3.284'. [ 462.143411][ T6886] netlink: 'syz.1.326': attribute type 10 has an invalid length. [ 462.248515][ T6886] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.257643][ T6886] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.321563][ T6886] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.328872][ T6886] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.336582][ T6886] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.343840][ T6886] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.375169][ T6886] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 465.588644][ T6936] netlink: 'syz.0.338': attribute type 1 has an invalid length. [ 465.599175][ T6936] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.338'. [ 466.157805][ T6958] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.346'. [ 466.781834][ T6985] netlink: 16222 bytes leftover after parsing attributes in process `syz.4.358'. [ 467.371705][ T7002] delete_channel: no stack [ 468.537315][ T7045] delete_channel: no stack [ 468.589957][ T7048] netlink: 'syz.0.382': attribute type 2 has an invalid length. [ 468.656641][ T7048] netlink: 'syz.0.382': attribute type 8 has an invalid length. [ 468.687605][ T7048] netlink: 132 bytes leftover after parsing attributes in process `syz.0.382'. [ 468.846412][ T7053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.384'. [ 469.194631][ T7058] netlink: 'syz.1.384': attribute type 21 has an invalid length. [ 469.508567][ T7071] netlink: 'syz.4.397': attribute type 2 has an invalid length. [ 469.518154][ T7071] netlink: 'syz.4.397': attribute type 8 has an invalid length. [ 469.584758][ T7071] netlink: 132 bytes leftover after parsing attributes in process `syz.4.397'. [ 470.000566][ T7087] delete_channel: no stack [ 470.498910][ T7096] syzkaller0: entered promiscuous mode [ 470.523449][ T7096] syzkaller0: entered allmulticast mode [ 472.906277][ T7124] netlink: 'syz.3.405': attribute type 2 has an invalid length. [ 472.934912][ T7124] netlink: 'syz.3.405': attribute type 8 has an invalid length. [ 473.007869][ T7124] netlink: 132 bytes leftover after parsing attributes in process `syz.3.405'. [ 478.294310][ T5826] Bluetooth: hci0: command 0x0406 tx timeout [ 478.305411][ T5826] Bluetooth: hci1: command 0x0406 tx timeout [ 478.313910][ T5825] Bluetooth: hci3: command 0x0406 tx timeout [ 479.787483][ T7237] syzkaller0: entered promiscuous mode [ 479.825744][ T7237] syzkaller0: entered allmulticast mode [ 482.683262][ T7241] syzkaller0: entered promiscuous mode [ 482.688809][ T7241] syzkaller0: entered allmulticast mode [ 486.817521][ T7256] wg2: entered promiscuous mode [ 486.839173][ T7256] wg2: entered allmulticast mode [ 489.668259][ T7322] netlink: 4 bytes leftover after parsing attributes in process `syz.1.448'. [ 489.693923][ T7329] netlink: 'syz.1.448': attribute type 21 has an invalid length. [ 489.922707][ T7325] syzkaller0: entered promiscuous mode [ 489.928268][ T7325] syzkaller0: entered allmulticast mode [ 490.082904][ T7347] netlink: 128 bytes leftover after parsing attributes in process `syz.4.454'. [ 492.268933][ T7357] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 492.280944][ T7357] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 492.300862][ T7358] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.238915][ T7380] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 493.260298][ T7380] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 493.702579][ T7398] netlink: 4 bytes leftover after parsing attributes in process `syz.3.460'. [ 496.761008][ T7400] netlink: 'syz.3.460': attribute type 21 has an invalid length. [ 496.975535][ T7416] netlink: 128 bytes leftover after parsing attributes in process `syz.4.464'. [ 497.135709][ T7415] syzkaller0: entered promiscuous mode [ 497.171011][ T7415] syzkaller0: entered allmulticast mode [ 497.267046][ T7426] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 497.297469][ T7426] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 501.819417][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.830381][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.889808][ T7450] syzkaller0: entered promiscuous mode [ 502.898351][ T7450] syzkaller0: entered allmulticast mode [ 502.906537][ T7463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.475'. [ 502.924234][ T7465] netlink: 128 bytes leftover after parsing attributes in process `syz.4.476'. [ 502.940864][ T7466] netlink: 'syz.1.475': attribute type 21 has an invalid length. [ 514.110599][ T7494] netlink: 128 bytes leftover after parsing attributes in process `syz.1.488'. [ 514.339182][ T7501] netlink: 4 bytes leftover after parsing attributes in process `syz.4.489'. [ 517.424683][ T7508] netlink: 'syz.4.489': attribute type 21 has an invalid length. [ 518.191452][ T7547] netlink: 128 bytes leftover after parsing attributes in process `syz.4.500'. [ 522.513887][ T7560] netlink: 4 bytes leftover after parsing attributes in process `syz.0.504'. [ 522.608323][ T7561] netlink: 'syz.0.504': attribute type 21 has an invalid length. [ 523.137983][ T7575] netlink: 128 bytes leftover after parsing attributes in process `syz.3.510'. [ 523.543215][ T7581] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 523.551097][ T7581] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 524.106031][ T7594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.517'. [ 524.158309][ T7594] netlink: 'syz.4.517': attribute type 21 has an invalid length. [ 524.706840][ T7607] netlink: 128 bytes leftover after parsing attributes in process `syz.1.521'. [ 527.733335][ T7622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.526'. [ 527.779429][ T7622] netlink: 'syz.1.526': attribute type 21 has an invalid length. [ 528.146186][ T7632] netlink: 128 bytes leftover after parsing attributes in process `syz.1.530'. [ 528.382975][ T7630] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 528.418939][ T7630] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 528.593013][ T7633] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 528.693018][ T7633] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 529.625401][ T7654] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 529.634418][ T7654] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 529.739734][ T7659] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 529.780954][ T7659] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 531.069563][ T7681] netlink: 'syz.1.545': attribute type 21 has an invalid length. [ 531.442174][ T7686] netlink: 'syz.0.554': attribute type 21 has an invalid length. [ 531.658180][ T7689] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 531.687600][ T7689] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 533.973555][ T7711] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 533.989227][ T7711] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 534.022227][ T7719] netlink: 'syz.3.556': attribute type 21 has an invalid length. [ 538.242354][ T7749] netlink: 'syz.1.569': attribute type 21 has an invalid length. [ 538.320246][ T7751] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 538.334140][ T7751] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 538.399827][ T7752] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 538.441843][ T7752] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 538.487643][ T7759] netlink: 'syz.0.579': attribute type 21 has an invalid length. [ 539.731349][ T5821] Bluetooth: hci4: command 0x0406 tx timeout [ 540.410328][ T7789] netlink: 'syz.4.583': attribute type 21 has an invalid length. [ 543.338779][ T7793] netlink: 'syz.1.595': attribute type 21 has an invalid length. [ 547.464982][ T7828] netlink: 'syz.1.600': attribute type 21 has an invalid length. [ 557.822684][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 557.921778][ T7903] netlink: 'syz.3.624': attribute type 10 has an invalid length. [ 558.003582][ T7903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 558.058255][ T7903] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 560.800891][ T7903] syz.3.624 (7903) used greatest stack depth: 19400 bytes left [ 563.275243][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.282035][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.645424][ T7970] netlink: 'syz.0.646': attribute type 10 has an invalid length. [ 566.960035][ T7970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 566.996201][ T7970] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 570.881956][ T8015] netlink: 128 bytes leftover after parsing attributes in process `syz.1.664'. [ 571.357774][ T8025] netlink: 'syz.3.667': attribute type 21 has an invalid length. [ 574.870273][ T8042] netlink: 128 bytes leftover after parsing attributes in process `syz.4.674'. [ 575.342245][ T8053] netlink: 'syz.0.679': attribute type 21 has an invalid length. [ 578.664935][ T8066] netlink: 128 bytes leftover after parsing attributes in process `syz.4.685'. [ 581.821540][ T8082] netlink: 'syz.4.690': attribute type 21 has an invalid length. [ 585.345463][ T8100] netlink: 128 bytes leftover after parsing attributes in process `syz.1.695'. [ 592.094797][ T8145] netlink: 128 bytes leftover after parsing attributes in process `syz.3.709'. [ 592.620082][ T8160] syzkaller0: entered promiscuous mode [ 592.639689][ T8160] syzkaller0: entered allmulticast mode [ 592.875992][ T8172] netlink: 116 bytes leftover after parsing attributes in process `syz.1.723'. [ 598.222265][ T8194] netlink: 116 bytes leftover after parsing attributes in process `syz.0.733'. [ 599.037864][ T8219] netlink: 'syz.0.743': attribute type 21 has an invalid length. [ 599.298366][ T8225] netlink: 116 bytes leftover after parsing attributes in process `syz.0.746'. [ 599.765327][ T8237] syzkaller0: entered promiscuous mode [ 599.790369][ T8237] syzkaller0: entered allmulticast mode [ 601.759784][ T8248] netlink: 'syz.0.755': attribute type 21 has an invalid length. [ 602.457333][ T8271] netlink: 'syz.1.764': attribute type 21 has an invalid length. [ 609.001485][ T8355] netlink: 'syz.3.776': attribute type 21 has an invalid length. [ 609.504652][ T8371] syzkaller0: entered promiscuous mode [ 609.529708][ T8371] syzkaller0: entered allmulticast mode [ 614.813733][ T8394] netlink: 'syz.3.790': attribute type 21 has an invalid length. [ 615.132271][ T8411] netlink: 763 bytes leftover after parsing attributes in process `syz.1.796'. [ 615.192769][ T8411] netlink: 'syz.1.796': attribute type 10 has an invalid length. [ 616.036104][ T8411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 616.054614][ T8411] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 621.356974][ T8448] netlink: 'syz.1.804': attribute type 10 has an invalid length. [ 621.388093][ T8448] netlink: 40 bytes leftover after parsing attributes in process `syz.1.804'. [ 621.414092][ T8448] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 621.442877][ T8448] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 621.486867][ T8448] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 621.637484][ T8453] netlink: 763 bytes leftover after parsing attributes in process `syz.3.805'. [ 621.878044][ T8453] netlink: 'syz.3.805': attribute type 10 has an invalid length. [ 624.699032][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.706384][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.383724][ T8485] netlink: 'syz.3.820': attribute type 10 has an invalid length. [ 625.412263][ T8485] netlink: 40 bytes leftover after parsing attributes in process `syz.3.820'. [ 625.432213][ T8485] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 625.438991][ T8485] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 625.491324][ T8485] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 629.092744][ T8509] netlink: 763 bytes leftover after parsing attributes in process `syz.4.830'. [ 629.131164][ T8513] netlink: 'syz.4.830': attribute type 10 has an invalid length. [ 629.193155][ T8513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 629.214161][ T8513] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 632.860193][ T8537] netlink: 'syz.1.850': attribute type 25 has an invalid length. [ 632.880864][ T8537] netlink: 'syz.1.850': attribute type 9 has an invalid length. [ 632.952581][ T8535] netlink: 763 bytes leftover after parsing attributes in process `syz.4.842'. [ 632.995434][ T8535] netlink: 'syz.4.842': attribute type 10 has an invalid length. [ 633.460234][ T8543] netlink: 'syz.1.844': attribute type 25 has an invalid length. [ 633.487428][ T8543] netlink: 'syz.1.844': attribute type 9 has an invalid length. [ 633.501095][ T8548] netlink: 763 bytes leftover after parsing attributes in process `syz.0.846'. [ 633.535661][ T8548] netlink: 'syz.0.846': attribute type 10 has an invalid length. [ 636.471350][ T8558] netlink: 'syz.3.851': attribute type 10 has an invalid length. [ 636.492617][ T8558] netlink: 40 bytes leftover after parsing attributes in process `syz.3.851'. [ 637.179429][ T8573] netlink: 'syz.0.857': attribute type 25 has an invalid length. [ 637.196145][ T8573] netlink: 'syz.0.857': attribute type 9 has an invalid length. [ 637.223345][ T8579] netlink: 'syz.3.859': attribute type 10 has an invalid length. [ 637.231638][ T8579] netlink: 40 bytes leftover after parsing attributes in process `syz.3.859'. [ 637.437081][ T8581] netlink: 'syz.1.860': attribute type 25 has an invalid length. [ 637.461065][ T8581] netlink: 'syz.1.860': attribute type 9 has an invalid length. [ 637.603558][ T8589] netlink: 'syz.0.863': attribute type 10 has an invalid length. [ 637.620911][ T8589] netlink: 40 bytes leftover after parsing attributes in process `syz.0.863'. [ 637.641485][ T8589] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 637.648255][ T8589] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 637.685772][ T8589] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 638.047679][ T8604] netlink: 'syz.1.866': attribute type 10 has an invalid length. [ 638.085804][ T8604] netlink: 40 bytes leftover after parsing attributes in process `syz.1.866'. [ 640.321032][ T8675] netlink: 'syz.0.887': attribute type 25 has an invalid length. [ 640.329177][ T8675] netlink: 'syz.0.887': attribute type 9 has an invalid length. [ 641.967520][ T8714] netlink: 'syz.4.903': attribute type 25 has an invalid length. [ 641.991183][ T8714] netlink: 'syz.4.903': attribute type 9 has an invalid length. [ 644.341955][ T8776] netlink: 'syz.4.929': attribute type 10 has an invalid length. [ 644.349859][ T8776] netlink: 40 bytes leftover after parsing attributes in process `syz.4.929'. [ 644.372678][ T8776] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 644.379566][ T8776] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 644.441753][ T8776] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 645.360604][ T8803] netlink: 'syz.4.937': attribute type 10 has an invalid length. [ 645.375286][ T8803] netlink: 40 bytes leftover after parsing attributes in process `syz.4.937'. [ 645.869790][ T8820] netlink: 'syz.0.943': attribute type 10 has an invalid length. [ 645.880926][ T8820] netlink: 40 bytes leftover after parsing attributes in process `syz.0.943'. [ 646.872316][ T8841] netlink: 'syz.3.949': attribute type 10 has an invalid length. [ 646.889350][ T8841] netlink: 40 bytes leftover after parsing attributes in process `syz.3.949'. [ 647.263943][ T8845] netlink: 'syz.0.951': attribute type 10 has an invalid length. [ 647.272133][ T8845] netlink: 40 bytes leftover after parsing attributes in process `syz.0.951'. [ 647.801191][ T8851] netlink: 'syz.0.952': attribute type 25 has an invalid length. [ 647.811448][ T8851] netlink: 'syz.0.952': attribute type 9 has an invalid length. [ 647.855579][ T8856] netlink: 'syz.4.955': attribute type 25 has an invalid length. [ 647.871466][ T8856] netlink: 'syz.4.955': attribute type 9 has an invalid length. [ 648.294525][ T8865] netlink: 'syz.0.966': attribute type 25 has an invalid length. [ 648.320900][ T8865] netlink: 'syz.0.966': attribute type 9 has an invalid length. [ 648.655521][ T8882] netlink: 'syz.1.963': attribute type 10 has an invalid length. [ 648.678361][ T8882] netlink: 40 bytes leftover after parsing attributes in process `syz.1.963'. [ 648.690373][ T8885] netlink: 'syz.4.964': attribute type 10 has an invalid length. [ 648.710751][ T8885] netlink: 40 bytes leftover after parsing attributes in process `syz.4.964'. [ 649.780832][ T8899] netlink: 'syz.1.969': attribute type 25 has an invalid length. [ 650.067343][ T8911] netlink: 184 bytes leftover after parsing attributes in process `syz.4.985'. [ 650.406793][ T8920] netlink: 40 bytes leftover after parsing attributes in process `syz.1.977'. [ 650.576824][ T8923] netlink: 40 bytes leftover after parsing attributes in process `syz.0.980'. [ 650.965456][ T8936] netlink: 184 bytes leftover after parsing attributes in process `syz.0.987'. [ 651.029021][ T8939] netlink: 763 bytes leftover after parsing attributes in process `syz.4.988'. [ 651.368476][ T8947] netlink: 40 bytes leftover after parsing attributes in process `syz.1.993'. [ 652.017458][ T8960] netlink: 184 bytes leftover after parsing attributes in process `syz.3.998'. [ 652.065457][ T8961] team0: Port device wlan1 added [ 652.274427][ T8965] validate_nla: 12 callbacks suppressed [ 652.274445][ T8965] netlink: 'syz.0.1003': attribute type 10 has an invalid length. [ 652.326404][ T8965] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1003'. [ 652.505476][ T8969] netlink: 763 bytes leftover after parsing attributes in process `syz.1.1002'. [ 652.560337][ T8971] netlink: 'syz.4.1004': attribute type 25 has an invalid length. [ 652.581270][ T8971] netlink: 'syz.4.1004': attribute type 9 has an invalid length. [ 652.599578][ T8969] netlink: 'syz.1.1002': attribute type 10 has an invalid length. [ 652.776321][ T8981] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1008'. [ 652.792061][ T8977] netlink: 'syz.3.1006': attribute type 10 has an invalid length. [ 653.012742][ T8991] netlink: 'syz.4.1011': attribute type 10 has an invalid length. [ 653.143853][ T8991] team0: Port device wlan1 added [ 654.124540][ T9013] netlink: 'syz.4.1022': attribute type 10 has an invalid length. [ 654.196630][ T9017] netlink: 'syz.0.1023': attribute type 10 has an invalid length. [ 654.284873][ T9017] team0: Port device wlan1 added [ 655.309098][ T9044] netlink: 'syz.3.1034': attribute type 10 has an invalid length. [ 655.344590][ T9044] team0: Port device wlan1 added [ 655.394232][ T9043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 655.498940][ T9048] netlink: 'syz.1.1036': attribute type 10 has an invalid length. [ 655.529391][ T9048] __nla_validate_parse: 4 callbacks suppressed [ 655.529407][ T9048] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1036'. [ 657.253854][ T9082] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1051'. [ 660.528450][ T9109] netlink: 'syz.1.1061': attribute type 10 has an invalid length. [ 660.543623][ T9109] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1061'. [ 661.308628][ T9122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1066'. [ 661.415802][ T9125] netlink: 'syz.3.1068': attribute type 10 has an invalid length. [ 661.430962][ T9125] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1068'. [ 662.200377][ T9150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1080'. [ 665.657023][ T9163] netlink: 'syz.0.1085': attribute type 10 has an invalid length. [ 665.666903][ T9163] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1085'. [ 665.985851][ T9176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1091'. [ 666.469994][ T9185] netlink: 'syz.4.1093': attribute type 10 has an invalid length. [ 667.074141][ T9180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 669.314804][ T9188] netlink: 'syz.0.1095': attribute type 10 has an invalid length. [ 669.332034][ T9188] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1095'. [ 669.784648][ T9201] netlink: 'syz.3.1099': attribute type 10 has an invalid length. [ 669.810848][ T9201] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1099'. [ 669.879920][ T9203] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1100'. [ 669.923733][ T9203] netlink: 'syz.0.1100': attribute type 10 has an invalid length. [ 676.305184][ T9232] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1109'. [ 676.599513][ T9238] netlink: 'syz.4.1112': attribute type 10 has an invalid length. [ 676.614100][ T9238] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1112'. [ 682.965717][ T9255] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1120'. [ 683.327379][ T9260] netlink: 763 bytes leftover after parsing attributes in process `syz.4.1122'. [ 683.371884][ T9255] netlink: 'syz.0.1120': attribute type 10 has an invalid length. [ 683.399302][ T9263] netlink: 'syz.4.1122': attribute type 10 has an invalid length. [ 686.142236][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.148758][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.138854][ T9281] netlink: 'syz.0.1131': attribute type 10 has an invalid length. [ 687.184694][ T9281] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1131'. [ 692.189132][ T9311] netlink: 'syz.1.1140': attribute type 10 has an invalid length. [ 692.295222][ T9310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 695.793513][ T9324] netlink: 'syz.1.1144': attribute type 10 has an invalid length. [ 695.810949][ T9324] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1144'. [ 699.521590][ T9351] netlink: 'syz.0.1154': attribute type 10 has an invalid length. [ 699.555273][ T9350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 703.344636][ T9377] netlink: 'syz.3.1164': attribute type 10 has an invalid length. [ 703.380392][ T9376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 703.550563][ T9382] netlink: 'syz.4.1166': attribute type 25 has an invalid length. [ 703.559138][ T9382] netlink: 'syz.4.1166': attribute type 9 has an invalid length. [ 707.423402][ T9413] netlink: 'syz.0.1180': attribute type 25 has an invalid length. [ 707.498576][ T9413] netlink: 'syz.0.1180': attribute type 9 has an invalid length. [ 720.889435][ T9488] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1207'. [ 720.934660][ T9488] netlink: 'syz.3.1207': attribute type 10 has an invalid length. [ 727.584687][ T9529] netlink: 'syz.0.1220': attribute type 25 has an invalid length. [ 727.621192][ T9529] netlink: 'syz.0.1220': attribute type 9 has an invalid length. [ 735.557367][ T9593] netlink: 'syz.1.1246': attribute type 10 has an invalid length. [ 739.100054][ T9618] netlink: 'syz.4.1256': attribute type 10 has an invalid length. [ 739.126996][ T9618] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1256'. [ 739.422657][ T9628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1258'. [ 739.475195][ T9628] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1258'. [ 746.421437][ T9666] syzkaller0: entered promiscuous mode [ 746.427010][ T9666] syzkaller0: entered allmulticast mode [ 746.484068][ T9668] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1272'. [ 746.557341][ T9668] netlink: 'syz.4.1272': attribute type 21 has an invalid length. [ 746.597801][ T9668] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1272'. [ 747.574962][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.582911][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 758.551578][ T9722] syzkaller0: entered promiscuous mode [ 758.557183][ T9722] syzkaller0: entered allmulticast mode [ 761.523327][ T9757] netlink: 'syz.1.1304': attribute type 25 has an invalid length. [ 761.538686][ T9757] netlink: 'syz.1.1304': attribute type 9 has an invalid length. [ 761.787248][ T9762] syzkaller0: entered promiscuous mode [ 761.795272][ T9762] syzkaller0: entered allmulticast mode [ 765.078682][ T9801] netlink: 'syz.0.1315': attribute type 25 has an invalid length. [ 765.087206][ T9801] netlink: 'syz.0.1315': attribute type 9 has an invalid length. [ 776.242689][ T9968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1358'. [ 776.274058][ T9968] netlink: 'syz.1.1358': attribute type 21 has an invalid length. [ 779.713397][ T9986] netlink: 'syz.4.1366': attribute type 25 has an invalid length. [ 779.726157][ T9986] netlink: 'syz.4.1366': attribute type 9 has an invalid length. [ 782.534421][ T9988] netlink: 'syz.3.1367': attribute type 10 has an invalid length. [ 782.552001][ T9988] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1367'. [ 782.652131][ T9991] syzkaller0: entered promiscuous mode [ 782.685308][ T9991] syzkaller0: entered allmulticast mode [ 788.099887][T10010] netlink: 'syz.3.1373': attribute type 10 has an invalid length. [ 788.112564][T10010] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1373'. [ 794.983485][T10060] netlink: 'syz.4.1388': attribute type 10 has an invalid length. [ 794.997397][T10060] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1388'. [ 798.372740][T10070] netlink: 'syz.4.1394': attribute type 25 has an invalid length. [ 798.392995][T10070] netlink: 'syz.4.1394': attribute type 9 has an invalid length. [ 801.629028][T10092] netlink: 'syz.4.1399': attribute type 10 has an invalid length. [ 801.637126][T10092] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1399'. [ 808.082260][T10122] netlink: 'syz.3.1407': attribute type 10 has an invalid length. [ 808.090170][T10122] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1407'. [ 809.021430][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.027836][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.767464][T10160] netlink: 'syz.0.1421': attribute type 10 has an invalid length. [ 811.800922][T10160] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1421'. [ 811.833316][T10161] netlink: 'syz.3.1420': attribute type 10 has an invalid length. [ 811.873251][T10161] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1420'. [ 828.254819][T10226] netlink: 'syz.4.1442': attribute type 25 has an invalid length. [ 828.282411][T10226] netlink: 'syz.4.1442': attribute type 9 has an invalid length. [ 831.564994][T10241] netlink: 'syz.3.1450': attribute type 10 has an invalid length. [ 831.599934][T10241] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1450'. [ 856.083092][T10373] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1495'. [ 856.126993][T10373] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 859.081628][T10388] netlink: 'syz.1.1501': attribute type 10 has an invalid length. [ 859.107903][T10388] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1501'. [ 865.803921][T10419] netlink: 'syz.1.1512': attribute type 25 has an invalid length. [ 865.818709][T10419] netlink: 'syz.1.1512': attribute type 9 has an invalid length. [ 868.938476][T10433] netlink: 'syz.0.1515': attribute type 10 has an invalid length. [ 868.970807][T10433] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1515'. [ 869.395319][T10444] netlink: 'syz.0.1520': attribute type 10 has an invalid length. [ 869.420833][T10444] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1520'. [ 870.455129][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.461581][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 876.692952][T10479] netlink: 'syz.1.1534': attribute type 10 has an invalid length. [ 876.719293][T10479] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1534'. [ 876.943823][T10488] netlink: 'syz.4.1536': attribute type 25 has an invalid length. [ 876.973643][T10488] netlink: 'syz.4.1536': attribute type 9 has an invalid length. [ 879.928453][T10497] netlink: 'syz.0.1539': attribute type 10 has an invalid length. [ 879.936575][T10497] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1539'. [ 883.722395][T10523] netlink: 'syz.3.1548': attribute type 10 has an invalid length. [ 883.730309][T10523] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1548'. [ 886.861960][T10531] netlink: 'syz.3.1551': attribute type 10 has an invalid length. [ 886.870106][T10531] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1551'. [ 889.909916][T10536] netlink: 'syz.1.1562': attribute type 10 has an invalid length. [ 890.041659][T10536] 8021q: adding VLAN 0 to HW filter on device team0 [ 890.061212][T10536] bond0: (slave team0): Enslaving as an active interface with an up link [ 890.491109][T10547] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1558'. [ 891.290242][T10562] netlink: 'syz.3.1564': attribute type 10 has an invalid length. [ 891.299864][T10562] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1564'. [ 897.725377][T10604] netlink: 'syz.1.1581': attribute type 10 has an invalid length. [ 897.740389][T10604] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1581'. [ 898.533477][T10620] netlink: 'syz.0.1588': attribute type 10 has an invalid length. [ 898.713356][T10620] 8021q: adding VLAN 0 to HW filter on device team0 [ 898.769582][T10620] bond0: (slave team0): Enslaving as an active interface with an up link [ 898.911621][T10620] syz.0.1588 (10620) used greatest stack depth: 19176 bytes left [ 899.101123][T10629] netlink: 'syz.0.1590': attribute type 25 has an invalid length. [ 899.109258][T10629] netlink: 'syz.0.1590': attribute type 9 has an invalid length. [ 899.574643][T10642] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1594'. [ 900.186639][T10651] netlink: 'syz.4.1598': attribute type 10 has an invalid length. [ 900.273068][T10651] 8021q: adding VLAN 0 to HW filter on device team0 [ 900.306252][T10651] bond0: (slave team0): Enslaving as an active interface with an up link [ 900.977734][T10673] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1607'. [ 900.993096][T10674] netlink: 'syz.0.1606': attribute type 10 has an invalid length. [ 901.007281][T10674] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1606'. [ 901.342863][T10683] netlink: 'syz.3.1610': attribute type 10 has an invalid length. [ 901.413621][T10683] 8021q: adding VLAN 0 to HW filter on device team0 [ 901.449934][T10683] bond0: (slave team0): Enslaving as an active interface with an up link [ 902.116474][T10705] netlink: 'syz.3.1619': attribute type 10 has an invalid length. [ 902.134349][T10705] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1619'. [ 903.783270][T10759] netlink: 'syz.4.1636': attribute type 10 has an invalid length. [ 907.731259][T10793] netlink: 'syz.0.1654': attribute type 10 has an invalid length. [ 907.739295][T10793] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1654'. [ 908.183830][T10803] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1659'. [ 911.080956][T10822] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1664'. [ 914.277376][T10838] netlink: 'syz.4.1669': attribute type 10 has an invalid length. [ 914.296652][T10838] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1669'. [ 921.115415][T10888] bridge0: port 3(gretap0) entered blocking state [ 921.141542][T10888] bridge0: port 3(gretap0) entered disabled state [ 921.148243][T10888] gretap0: entered allmulticast mode [ 921.167209][T10888] gretap0: entered promiscuous mode [ 921.181505][T10888] bridge0: port 3(gretap0) entered blocking state [ 921.188192][T10888] bridge0: port 3(gretap0) entered forwarding state [ 921.519964][T10898] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1700'. [ 921.905976][T10900] netlink: 'syz.4.1693': attribute type 10 has an invalid length. [ 921.930712][T10900] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1693'. [ 924.247913][T10905] netlink: 'syz.1.1694': attribute type 10 has an invalid length. [ 924.260680][T10905] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1694'. [ 924.462841][T10908] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1696'. [ 924.539986][T10909] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 924.674169][T10913] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 924.867649][T10911] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1697'. [ 924.988255][T10917] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 925.150327][T10915] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1699'. [ 925.497209][T10927] netlink: 'syz.1.1705': attribute type 10 has an invalid length. [ 925.520053][T10927] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1705'. [ 926.073482][T10943] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 926.302631][T10945] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 926.547128][T10947] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 926.722849][T10954] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1713'. [ 928.911706][T10958] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1715'. [ 929.155786][T10961] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1717'. [ 929.297250][T10969] netlink: 'syz.3.1719': attribute type 10 has an invalid length. [ 929.317831][T10969] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1719'. [ 929.653823][T10980] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 929.673381][T10975] netlink: 'syz.4.1721': attribute type 10 has an invalid length. [ 929.700343][T10975] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1721'. [ 929.752260][T10983] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 930.041563][T10992] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1728'. [ 931.897039][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.904470][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.246069][T11000] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1730'. [ 933.525984][T11007] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1733'. [ 933.792983][T11010] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1735'. [ 933.867294][T11013] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 939.994327][T11024] netlink: 'syz.0.1740': attribute type 10 has an invalid length. [ 940.020647][T11024] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1740'. [ 940.151013][T11036] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1747'. [ 940.346953][T11040] netlink: 'syz.0.1749': attribute type 10 has an invalid length. [ 943.280969][T11048] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 943.481280][T11053] netlink: 'syz.4.1754': attribute type 10 has an invalid length. [ 943.500825][T11053] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1754'. [ 943.820366][T11065] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1757'. [ 946.865315][T11069] syzkaller0: entered promiscuous mode [ 946.886455][T11069] syzkaller0: entered allmulticast mode [ 947.117847][T11079] netlink: 'syz.4.1762': attribute type 10 has an invalid length. [ 950.689969][T11100] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1770'. [ 952.009751][T11091] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 952.417610][T11111] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1775'. [ 952.478579][T11109] syzkaller0: entered promiscuous mode [ 952.484299][T11109] syzkaller0: entered allmulticast mode [ 956.244457][T11133] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1784'. [ 964.405147][T11163] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 964.619416][T11168] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1797'. [ 978.282798][T11250] netlink: 'syz.4.1825': attribute type 10 has an invalid length. [ 978.320918][T11250] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1825'. [ 981.586990][T11263] netlink: 'syz.4.1830': attribute type 10 has an invalid length. [ 981.749671][T11271] netlink: 'syz.1.1836': attribute type 1 has an invalid length. [ 981.790695][T11271] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1836'. [ 985.803724][T11298] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1846'. [ 988.256506][T11300] netlink: 'syz.1.1847': attribute type 10 has an invalid length. [ 993.336779][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.346434][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.814896][T11340] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 994.254308][T11344] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1862'. [ 995.383834][T11355] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1868'. [ 998.826378][T11376] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1874'. [ 1000.159619][T11382] syzkaller0: entered promiscuous mode [ 1000.170718][T11382] syzkaller0: entered allmulticast mode [ 1002.083178][T11386] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1879'. [ 1004.155092][T11390] syzkaller0: entered promiscuous mode [ 1004.165461][T11390] syzkaller0: entered allmulticast mode [ 1006.146934][T11399] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1006.154624][T11399] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1006.164323][T11399] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1006.172123][T11399] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1006.180188][T11399] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 1006.187850][T11399] batman_adv: batadv0: Removing interface: hsr_slave_1 [ 1006.212327][T11399] bond0: (slave batadv0): Releasing backup interface [ 1006.225492][T11408] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1006.233275][T11408] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1006.241561][T11408] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1006.249159][T11408] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1006.260002][T11408] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 1006.269756][T11408] batman_adv: batadv0: Removing interface: hsr_slave_1 [ 1006.309560][T11408] bond0: (slave batadv0): Releasing backup interface [ 1006.332272][T11412] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1006.468976][T11414] netlink: 'syz.3.1886': attribute type 1 has an invalid length. [ 1006.520944][T11414] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1886'. [ 1006.656765][T11422] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1889'. [ 1009.793992][T11424] netlink: 'syz.4.1890': attribute type 10 has an invalid length. [ 1009.814241][T11424] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1890'. [ 1009.832237][T11424] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1009.910248][T11430] syzkaller0: entered promiscuous mode [ 1009.917419][T11430] syzkaller0: entered allmulticast mode [ 1010.181060][T11435] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1893'. [ 1014.805290][T11442] syzkaller0: entered promiscuous mode [ 1014.816140][T11442] syzkaller0: entered allmulticast mode [ 1014.912381][T11454] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1018.210201][T11467] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1901'. [ 1019.945622][T11456] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1019.953587][T11456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1019.961870][T11456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1019.969410][T11456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1019.977893][T11456] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 1019.985377][T11456] batman_adv: batadv0: Removing interface: hsr_slave_1 [ 1020.025104][T11456] bond0: (slave batadv0): Releasing backup interface [ 1020.053056][T11465] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1020.300357][T11475] bridge0: port 3(gretap0) entered blocking state [ 1020.318314][T11475] bridge0: port 3(gretap0) entered disabled state [ 1020.330764][T11475] gretap0: entered allmulticast mode [ 1020.337641][T11475] gretap0: entered promiscuous mode [ 1020.346194][T11475] bridge0: port 3(gretap0) entered blocking state [ 1020.352908][T11475] bridge0: port 3(gretap0) entered forwarding state [ 1020.392822][T11476] netlink: 'syz.0.1905': attribute type 10 has an invalid length. [ 1020.474495][T11478] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1906'. [ 1020.665931][T11481] syzkaller0: entered promiscuous mode [ 1020.671685][T11481] syzkaller0: entered allmulticast mode [ 1020.687095][T11483] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1020.705663][T11483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1023.742822][T11483] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1023.750296][T11483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1023.759218][T11483] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 1023.766755][T11483] batman_adv: batadv0: Removing interface: hsr_slave_1 [ 1023.802908][T11483] bond0: (slave batadv0): Releasing backup interface [ 1028.619403][T11495] netlink: 'syz.3.1912': attribute type 10 has an invalid length. [ 1028.628446][T11495] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1912'. [ 1028.638041][T11495] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1028.739551][T11496] syzkaller0: entered promiscuous mode [ 1028.760621][T11496] syzkaller0: entered allmulticast mode [ 1028.836301][T11506] netlink: 'syz.0.1913': attribute type 10 has an invalid length. [ 1030.605502][T11521] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1030.627518][T11520] bridge0: port 3(gretap0) entered blocking state [ 1030.650780][T11520] bridge0: port 3(gretap0) entered disabled state [ 1030.660990][T11520] gretap0: entered allmulticast mode [ 1030.675485][T11520] gretap0: entered promiscuous mode [ 1030.691340][T11520] bridge0: port 3(gretap0) entered blocking state [ 1030.697925][T11520] bridge0: port 3(gretap0) entered forwarding state [ 1030.836296][T11527] netlink: 'syz.4.1917': attribute type 10 has an invalid length. [ 1033.704115][T11537] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1920'. [ 1033.832052][T11541] netlink: 'syz.4.1923': attribute type 1 has an invalid length. [ 1033.840007][T11541] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.1923'. [ 1033.891940][T11542] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1034.061616][T11547] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1034.091709][T11548] netlink: 'syz.4.1926': attribute type 10 has an invalid length. [ 1034.322869][T11554] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1928'. [ 1034.884139][T11569] netlink: 'syz.1.1933': attribute type 10 has an invalid length. [ 1034.933247][T11568] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1934'. [ 1037.981876][T11577] netlink: 'syz.1.1937': attribute type 10 has an invalid length. [ 1037.984985][T11576] netlink: 'syz.3.1938': attribute type 1 has an invalid length. [ 1038.029675][T11576] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1938'. [ 1038.046736][T11573] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1038.237452][T11582] netlink: 'syz.0.1943': attribute type 10 has an invalid length. [ 1038.333908][T11588] netlink: 'syz.3.1944': attribute type 10 has an invalid length. [ 1038.341973][T11588] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1944'. [ 1038.352077][T11588] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1038.488417][T11590] netlink: 'syz.1.1946': attribute type 10 has an invalid length. [ 1038.623897][T11598] netlink: 'syz.0.1950': attribute type 1 has an invalid length. [ 1038.634172][T11598] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.1950'. [ 1038.711069][T11601] netlink: 'syz.1.1951': attribute type 10 has an invalid length. [ 1038.718983][T11601] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1951'. [ 1038.729861][T11601] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1038.795648][T11603] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1038.861789][T11605] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1952'. [ 1038.875048][T11607] netlink: 'syz.3.1953': attribute type 10 has an invalid length. [ 1039.125607][T11610] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1039.170397][T11612] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1039.311551][T11618] netlink: 'syz.0.1957': attribute type 1 has an invalid length. [ 1039.320306][T11618] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.1957'. [ 1039.479058][T11624] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1039.565621][T11625] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1959'. [ 1039.810504][T11631] netlink: 'syz.4.1962': attribute type 1 has an invalid length. [ 1039.818538][T11631] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.1962'. [ 1039.981108][T11635] netlink: 'syz.4.1966': attribute type 10 has an invalid length. [ 1040.010396][T11637] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1040.126135][T11639] netlink: 'syz.4.1969': attribute type 10 has an invalid length. [ 1040.197142][T11641] netlink: 'syz.0.1968': attribute type 10 has an invalid length. [ 1040.217055][T11641] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1968'. [ 1040.240963][T11641] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1040.517997][T11652] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1040.566748][T11655] netlink: 'syz.1.1973': attribute type 1 has an invalid length. [ 1040.575329][T11655] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1973'. [ 1040.916822][T11668] netlink: 'syz.0.1977': attribute type 10 has an invalid length. [ 1041.061306][T11673] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1041.147731][T11676] netlink: 'syz.1.1979': attribute type 10 has an invalid length. [ 1041.320374][T11683] netlink: 'syz.1.1982': attribute type 10 has an invalid length. [ 1041.329746][T11683] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1982'. [ 1041.345516][T11683] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1041.520990][T11691] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1041.870130][T11700] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1990'. [ 1042.129582][T11707] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1994'. [ 1042.141186][T11707] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1042.614730][T11711] syzkaller0: entered promiscuous mode [ 1042.620308][T11711] syzkaller0: entered allmulticast mode [ 1043.964238][T11731] __nla_validate_parse: 2 callbacks suppressed [ 1043.964273][T11731] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2001'. [ 1044.690134][T11725] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1044.711011][T11728] validate_nla: 2 callbacks suppressed [ 1044.711030][T11728] netlink: 'syz.3.2000': attribute type 10 has an invalid length. [ 1044.725888][T11728] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2000'. [ 1044.735570][T11728] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1044.904079][T11736] netlink: 'syz.3.2003': attribute type 10 has an invalid length. [ 1044.912994][T11736] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2003'. [ 1044.922898][T11736] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1045.019966][T11741] netlink: 'syz.1.2005': attribute type 10 has an invalid length. [ 1045.071519][T11739] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.2004'. [ 1045.091487][T11743] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1045.367722][T11748] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2008'. [ 1045.806339][T11758] netlink: 'syz.1.2012': attribute type 10 has an invalid length. [ 1045.816221][T11758] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2012'. [ 1045.825805][T11758] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1045.940467][T11765] netlink: 'syz.1.2014': attribute type 10 has an invalid length. [ 1045.948646][T11765] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2014'. [ 1045.958450][T11765] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1046.037426][T11767] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1046.548860][T11769] netlink: 'syz.4.2015': attribute type 10 has an invalid length. [ 1046.817503][T11779] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2018'. [ 1047.011422][T11776] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2017'. [ 1047.267302][T11784] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.2021'. [ 1047.569009][T11796] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1047.774613][T11793] syzkaller0: entered promiscuous mode [ 1047.780473][T11793] syzkaller0: entered allmulticast mode [ 1049.718751][T11801] netlink: 'syz.4.2026': attribute type 10 has an invalid length. [ 1049.726782][T11801] __nla_validate_parse: 1 callbacks suppressed [ 1049.726795][T11801] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2026'. [ 1049.742865][T11801] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1049.763914][T11810] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1050.005681][T11819] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2031'. [ 1050.338882][T11823] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.2033'. [ 1050.488501][T11828] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2034'. [ 1050.776052][T11833] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.2035'. [ 1050.921228][T11840] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1051.100459][T11845] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1051.147838][T11847] netlink: 'syz.1.2048': attribute type 10 has an invalid length. [ 1051.453060][T11852] syzkaller0: entered promiscuous mode [ 1051.458632][T11852] syzkaller0: entered allmulticast mode [ 1051.586788][T11862] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1052.362940][T11873] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.2045'. [ 1053.523314][T11860] syzkaller0: entered promiscuous mode [ 1053.528943][T11860] syzkaller0: entered allmulticast mode [ 1054.779627][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.788497][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.442628][T11882] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2051'. [ 1055.643716][T11885] netlink: 'syz.4.2050': attribute type 10 has an invalid length. [ 1055.840032][T11892] netlink: 'syz.0.2053': attribute type 10 has an invalid length. [ 1056.038067][T11896] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2055'. [ 1056.269617][T11903] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1056.421341][T11905] netlink: 'syz.1.2058': attribute type 10 has an invalid length. [ 1056.442852][T11907] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2059'. [ 1057.015499][T11918] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2063'. [ 1057.456418][T11926] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2066'. [ 1057.869100][T11936] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2069'. [ 1058.073107][T11942] netlink: 'syz.1.2072': attribute type 10 has an invalid length. [ 1058.081266][T11942] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2072'. [ 1058.093905][T11942] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1058.124456][T11940] netlink: 'syz.0.2071': attribute type 10 has an invalid length. [ 1058.144800][T11940] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2071'. [ 1058.172276][T11940] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1058.281029][T11947] netlink: 'syz.1.2073': attribute type 10 has an invalid length. [ 1058.309671][T11947] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2073'. [ 1058.320764][T11947] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1058.405002][T11949] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.2074'. [ 1058.734647][T11952] netlink: 'syz.3.2075': attribute type 10 has an invalid length. [ 1059.003812][T11962] netlink: 'syz.3.2079': attribute type 10 has an invalid length. [ 1059.428051][T11972] netlink: 'syz.1.2082': attribute type 10 has an invalid length. [ 1059.876614][T11985] netlink: 'syz.4.2086': attribute type 10 has an invalid length. [ 1059.885391][T11985] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1066.213071][T12196] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1066.237337][T12196] syzkaller1: linktype set to 825 [ 1067.757327][T12270] netlink: 'syz.0.2220': attribute type 1 has an invalid length. [ 1067.773641][T12270] netlink: 'syz.0.2220': attribute type 4 has an invalid length. [ 1067.791059][T12270] __nla_validate_parse: 3 callbacks suppressed [ 1067.791074][T12270] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2220'. [ 1069.391084][T12335] netlink: 'syz.0.2256': attribute type 29 has an invalid length. [ 1069.409672][T12335] netlink: 'syz.0.2256': attribute type 29 has an invalid length. [ 1069.843527][T12359] netlink: 'syz.3.2265': attribute type 10 has an invalid length. [ 1072.593604][T12484] netlink: 'syz.0.2325': attribute type 10 has an invalid length. [ 1072.654530][T12484] team0: Device veth1_vlan failed to register rx_handler [ 1073.590417][T12526] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1073.608881][T12526] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1073.616996][T12526] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1073.636189][T12526] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1073.660450][T12526] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1073.668154][T12526] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1074.158663][T10956] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.262594][T10956] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.395706][T10956] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.463661][T12525] chnl_net:caif_netlink_parms(): no params data found [ 1074.568974][T10956] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.828995][T12525] bridge0: port 1(bridge_slave_0) entered blocking state [ 1074.881971][T12525] bridge0: port 1(bridge_slave_0) entered disabled state [ 1074.889404][T12525] bridge_slave_0: entered allmulticast mode [ 1074.900363][T12525] bridge_slave_0: entered promiscuous mode [ 1074.909918][T12525] bridge0: port 2(bridge_slave_1) entered blocking state [ 1074.917452][T12525] bridge0: port 2(bridge_slave_1) entered disabled state [ 1074.924991][T12525] bridge_slave_1: entered allmulticast mode [ 1074.932741][T12525] bridge_slave_1: entered promiscuous mode [ 1075.048964][T12525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1075.114397][T12525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1075.234509][T12525] team0: Port device team_slave_0 added [ 1075.263481][T12525] team0: Port device team_slave_1 added [ 1075.504431][T12525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1075.511568][T12525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1075.586765][T12525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1075.602096][T12525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1075.609117][T12525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1075.699254][T12525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1075.745782][ T5084] Bluetooth: hci2: command tx timeout [ 1076.036065][T12525] hsr_slave_0: entered promiscuous mode [ 1076.069429][T12525] hsr_slave_1: entered promiscuous mode [ 1076.168892][T12630] netlink: 'syz.4.2389': attribute type 39 has an invalid length. [ 1076.825840][T10956] bridge0: port 3(gretap0) entered disabled state [ 1076.903471][T10956] gretap0 (unregistering): left allmulticast mode [ 1076.909993][T10956] gretap0 (unregistering): left promiscuous mode [ 1076.933662][T10956] bridge0: port 3(gretap0) entered disabled state [ 1077.810674][ T5084] Bluetooth: hci2: command tx timeout [ 1078.880471][T12525] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1078.946506][T12525] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1079.011758][T12525] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1079.028279][T12525] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1079.362093][T12757] netlink: 'syz.3.2438': attribute type 21 has an invalid length. [ 1079.719435][T12525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1079.802304][T12525] 8021q: adding VLAN 0 to HW filter on device team0 [ 1079.874257][ T7531] bridge0: port 1(bridge_slave_0) entered blocking state [ 1079.881528][ T7531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1079.893066][ T5084] Bluetooth: hci2: command tx timeout [ 1079.992760][ T7531] bridge0: port 2(bridge_slave_1) entered blocking state [ 1079.999995][ T7531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1080.881266][T10956] [ 1080.883766][T10956] ====================================================== [ 1080.890815][T10956] WARNING: possible circular locking dependency detected [ 1080.897885][T10956] syzkaller #0 Not tainted [ 1080.902349][T10956] ------------------------------------------------------ [ 1080.909409][T10956] kworker/u4:2/10956 is trying to acquire lock: [ 1080.915681][T10956] ffff88803053cd00 (team->team_lock_key#3){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0 [ 1080.925429][T10956] [ 1080.925429][T10956] but task is already holding lock: [ 1080.932840][T10956] ffff8880235d0768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690 [ 1080.943395][T10956] [ 1080.943395][T10956] which lock already depends on the new lock. [ 1080.943395][T10956] [ 1080.953845][T10956] [ 1080.953845][T10956] the existing dependency chain (in reverse order) is: [ 1080.962897][T10956] [ 1080.962897][T10956] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 1080.971431][T10956] __mutex_lock+0x136/0xcc0 [ 1080.976635][T10956] ieee80211_open+0x144/0x200 [ 1080.981881][T10956] __dev_open+0x2cb/0x430 [ 1080.986910][T10956] dev_open+0xab/0x190 [ 1080.991582][T10956] team_add_slave+0x75f/0x29a0 [ 1080.996910][T10956] do_setlink+0xdfe/0x4130 [ 1081.001980][T10956] rtnl_newlink+0x17da/0x20a0 [ 1081.007205][T10956] rtnetlink_rcv_msg+0x869/0xfa0 [ 1081.012683][T10956] netlink_rcv_skb+0x241/0x4d0 [ 1081.018080][T10956] netlink_unicast+0x751/0x8d0 [ 1081.023390][T10956] netlink_sendmsg+0x8d0/0xbf0 [ 1081.028701][T10956] ____sys_sendmsg+0x5ba/0x960 [ 1081.034045][T10956] ___sys_sendmsg+0x2a6/0x360 [ 1081.039261][T10956] __se_sys_sendmsg+0x1c2/0x2b0 [ 1081.044652][T10956] do_syscall_64+0x55/0xa0 [ 1081.049674][T10956] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1081.056269][T10956] [ 1081.056269][T10956] -> #0 (team->team_lock_key#3){+.+.}-{3:3}: [ 1081.064474][T10956] __lock_acquire+0x2df1/0x7d40 [ 1081.070006][T10956] lock_acquire+0x19e/0x420 [ 1081.075063][T10956] __mutex_lock+0x136/0xcc0 [ 1081.080113][T10956] team_del_slave+0x32/0x1c0 [ 1081.085255][T10956] team_device_event+0x28d/0xa20 [ 1081.090750][T10956] notifier_call_chain+0x197/0x380 [ 1081.096553][T10956] unregister_netdevice_many_notify+0x100d/0x1900 [ 1081.103521][T10956] unregister_netdevice_queue+0x32c/0x370 [ 1081.109801][T10956] _cfg80211_unregister_wdev+0x16b/0x580 [ 1081.116058][T10956] ieee80211_remove_interfaces+0x49e/0x690 [ 1081.122504][T10956] ieee80211_unregister_hw+0x5d/0x2a0 [ 1081.128510][T10956] mac80211_hwsim_del_radio+0x289/0x480 [ 1081.134636][T10956] hwsim_exit_net+0x58d/0x650 [ 1081.139861][T10956] cleanup_net+0x70a/0xbb0 [ 1081.144829][T10956] process_scheduled_works+0xa5d/0x15d0 [ 1081.150924][T10956] worker_thread+0xa55/0xfc0 [ 1081.156088][T10956] kthread+0x2fa/0x390 [ 1081.160706][T10956] ret_from_fork+0x48/0x80 [ 1081.165688][T10956] ret_from_fork_asm+0x11/0x20 [ 1081.171077][T10956] [ 1081.171077][T10956] other info that might help us debug this: [ 1081.171077][T10956] [ 1081.181334][T10956] Possible unsafe locking scenario: [ 1081.181334][T10956] [ 1081.188801][T10956] CPU0 CPU1 [ 1081.194185][T10956] ---- ---- [ 1081.199663][T10956] lock(&rdev->wiphy.mtx); [ 1081.204200][T10956] lock(team->team_lock_key#3); [ 1081.211691][T10956] lock(&rdev->wiphy.mtx); [ 1081.218737][T10956] lock(team->team_lock_key#3); [ 1081.223699][T10956] [ 1081.223699][T10956] *** DEADLOCK *** [ 1081.223699][T10956] [ 1081.231858][T10956] 5 locks held by kworker/u4:2/10956: [ 1081.237247][T10956] #0: ffff88801a254938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1081.248167][T10956] #1: ffffc90004b0fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1081.258758][T10956] #2: ffffffff8e3b5a90 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0 [ 1081.268212][T10956] #3: ffffffff8e3c2ac8 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 1081.278093][T10956] #4: ffff8880235d0768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690 [ 1081.289085][T10956] [ 1081.289085][T10956] stack backtrace: [ 1081.295098][T10956] CPU: 0 PID: 10956 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 1081.302773][T10956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1081.312875][T10956] Workqueue: netns cleanup_net [ 1081.317712][T10956] Call Trace: [ 1081.321032][T10956] [ 1081.324044][T10956] dump_stack_lvl+0x18c/0x250 [ 1081.328761][T10956] ? load_image+0x420/0x420 [ 1081.333326][T10956] ? show_regs_print_info+0x20/0x20 [ 1081.338569][T10956] ? print_circular_bug+0x12b/0x1a0 [ 1081.343796][T10956] check_noncircular+0x2fc/0x400 [ 1081.348766][T10956] ? print_deadlock_bug+0x5d0/0x5d0 [ 1081.353988][T10956] ? lockdep_lock+0xf5/0x230 [ 1081.358606][T10956] ? __lock_acquire+0x1273/0x7d40 [ 1081.363688][T10956] ? _find_first_zero_bit+0xd3/0x100 [ 1081.369038][T10956] __lock_acquire+0x2df1/0x7d40 [ 1081.373948][T10956] ? verify_lock_unused+0x140/0x140 [ 1081.379175][T10956] ? verify_lock_unused+0x140/0x140 [ 1081.384405][T10956] lock_acquire+0x19e/0x420 [ 1081.388929][T10956] ? team_del_slave+0x32/0x1c0 [ 1081.393717][T10956] ? __might_sleep+0xe0/0xe0 [ 1081.398338][T10956] ? read_lock_is_recursive+0x20/0x20 [ 1081.403736][T10956] __mutex_lock+0x136/0xcc0 [ 1081.408350][T10956] ? team_del_slave+0x32/0x1c0 [ 1081.413131][T10956] ? __lock_acquire+0x7d40/0x7d40 [ 1081.418266][T10956] ? rcu_is_watching+0x15/0xb0 [ 1081.423053][T10956] ? trace_contention_end+0x39/0xe0 [ 1081.428270][T10956] ? __mutex_lock+0x315/0xcc0 [ 1081.432968][T10956] ? team_del_slave+0x32/0x1c0 [ 1081.437749][T10956] ? mutex_lock_nested+0x20/0x20 [ 1081.442706][T10956] ? bond_netdev_event+0xeb/0xf20 [ 1081.447759][T10956] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1081.453443][T10956] team_del_slave+0x32/0x1c0 [ 1081.458095][T10956] team_device_event+0x28d/0xa20 [ 1081.463063][T10956] notifier_call_chain+0x197/0x380 [ 1081.468212][T10956] unregister_netdevice_many_notify+0x100d/0x1900 [ 1081.474655][T10956] ? lock_chain_count+0x20/0x20 [ 1081.479537][T10956] ? unregister_netdevice_many+0x20/0x20 [ 1081.485200][T10956] ? kernfs_remove_by_name_ns+0x117/0x150 [ 1081.490989][T10956] ? __lock_acquire+0x7d40/0x7d40 [ 1081.496062][T10956] unregister_netdevice_queue+0x32c/0x370 [ 1081.501805][T10956] ? list_netdevice+0x730/0x730 [ 1081.506678][T10956] ? kernfs_remove_by_name_ns+0x117/0x150 [ 1081.512437][T10956] _cfg80211_unregister_wdev+0x16b/0x580 [ 1081.518113][T10956] ieee80211_remove_interfaces+0x49e/0x690 [ 1081.523947][T10956] ? ieee80211_do_stop+0x1e20/0x1e20 [ 1081.529259][T10956] ? rcu_is_watching+0x15/0xb0 [ 1081.534058][T10956] ieee80211_unregister_hw+0x5d/0x2a0 [ 1081.539457][T10956] mac80211_hwsim_del_radio+0x289/0x480 [ 1081.545057][T10956] ? rhashtable_remove_fast+0xc00/0xc00 [ 1081.550651][T10956] hwsim_exit_net+0x58d/0x650 [ 1081.555365][T10956] ? hwsim_init_net+0x90/0x90 [ 1081.560077][T10956] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 1081.566019][T10956] cleanup_net+0x70a/0xbb0 [ 1081.570478][T10956] ? ops_free_list+0x3b0/0x3b0 [ 1081.575279][T10956] ? _raw_spin_unlock_irq+0x23/0x50 [ 1081.580501][T10956] ? process_scheduled_works+0x96f/0x15d0 [ 1081.586264][T10956] ? process_scheduled_works+0x96f/0x15d0 [ 1081.592014][T10956] process_scheduled_works+0xa5d/0x15d0 [ 1081.597639][T10956] ? worker_attach_to_pool+0x380/0x380 [ 1081.603128][T10956] ? assign_work+0x3d2/0x5d0 [ 1081.607752][T10956] worker_thread+0xa55/0xfc0 [ 1081.612397][T10956] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1081.618333][T10956] ? _raw_spin_unlock+0x40/0x40 [ 1081.623205][T10956] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1081.629130][T10956] kthread+0x2fa/0x390 [ 1081.633222][T10956] ? pr_cont_work+0x560/0x560 [ 1081.637966][T10956] ? kthread_blkcg+0xd0/0xd0 [ 1081.642577][T10956] ret_from_fork+0x48/0x80 [ 1081.647017][T10956] ? kthread_blkcg+0xd0/0xd0 [ 1081.651633][T10956] ret_from_fork_asm+0x11/0x20 [ 1081.656431][T10956] [ 1081.693978][T10956] team0: Port device wlan1 removed [ 1081.879419][T10956] hsr_slave_0: left promiscuous mode [ 1081.895616][T10956] hsr_slave_1: left promiscuous mode [ 1081.903838][T10956] bridge_slave_1: left allmulticast mode [ 1081.909623][T10956] bridge_slave_1: left promiscuous mode [ 1081.916358][T10956] bridge0: port 2(bridge_slave_1) entered disabled state [ 1081.925780][T10956] bridge_slave_0: left allmulticast mode [ 1081.931651][T10956] bridge_slave_0: left promiscuous mode [ 1081.937509][T10956] bridge0: port 1(bridge_slave_0) entered disabled state [ 1081.952201][T10956] veth1_macvtap: left promiscuous mode [ 1081.957915][T10956] veth0_macvtap: left promiscuous mode [ 1081.965599][T10956] veth0_vlan: left promiscuous mode [ 1081.971935][ T5084] Bluetooth: hci2: command tx timeout [ 1082.289010][T10956] team0 (unregistering): Port device team_slave_1 removed [ 1082.319595][T10956] team0 (unregistering): Port device team_slave_0 removed [ 1082.352885][T10956] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1082.383621][T10956] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1082.508979][T10956] bond0 (unregistering): (slave team0): Releasing backup interface [ 1082.533303][T10956] bond0 (unregistering): Released all slaves [ 1082.609353][T12525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1082.662680][T12525] veth0_vlan: entered promiscuous mode [ 1082.693241][T12525] veth1_vlan: entered promiscuous mode [ 1082.750435][T12525] veth0_macvtap: entered promiscuous mode [ 1082.763136][T12525] veth1_macvtap: entered promiscuous mode [ 1082.833291][T12525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1082.880381][T12525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1082.905669][T12525] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.914668][T12525] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.924161][T12525] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.933440][T12525] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.987483][T12525] ieee80211 phy73: Selected rate control algorithm 'minstrel_ht' [ 1083.038432][T10956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1083.053307][T12525] ieee80211 phy74: Selected rate control algorithm 'minstrel_ht' [ 1083.061509][T10956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1083.107544][ T5911] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1083.115681][ T5911] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50